Oracle Errata System Oracle Linux 5.11 2023-12-21T16:33:18 Oracle Linux 9 [6.4.1-9] - Fix arbitrary bytecode produced via out-of-bounds writing - Resolves: CVE-2022-42920 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-42920 Oracle Linux 8 [2.36.7-1.1] - Add patch for CVE-2022-42856 Resolves: #2153735 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-42856 Oracle Linux 9 [2.36.7-1.1] - Add patch for CVE-2022-42856 Resolves: #2153738 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-42856 Oracle Linux 7 [1.8.0-23] - Rebuild for xorg-x11-server CVEs Resolves: CVE-2022-4283 (bz#2154267) Resolves: CVE-2022-46340 (bz#2154261) Resolves: CVE-2022-46341 (bz#2154264) Resolves: CVE-2022-46342 (bz#2154262) Resolves: CVE-2022-46343 (bz#2154265) Resolves: CVE-2022-46344 (bz#2154266) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-46343 CVE-2022-46340 CVE-2022-46341 CVE-2022-4283 CVE-2022-46344 CVE-2022-46342 Oracle Linux 7 [1.20.4-21] - Follow-up fix for CVE-2022-46340 (#2151775) [1.20.4-20] - CVE fix for: CVE-2022-4283 (#2151800), CVE-2022-46340 (#2151775), CVE-2022-46341 (#2151780), CVE-2022-46342 (#2151787), CVE-2022-46343 (#2151790), CVE-2022-46344 (#2151797) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-46340 CVE-2022-46342 CVE-2022-46343 CVE-2022-4283 CVE-2022-46344 CVE-2022-46341 Oracle Linux 8 [2.02-142.0.3.el8_7.1] - Fix CVE-2022-3775, CVE-2022-2601 [Orabug: 34867710] - Bump SBAT metadata for grub to 3 [Orabug: 34871758] - Enable signing on aarch64 - Don't try to switch to a BLS config if GRUB_ENABLE_BLSCFG is already set (Javier Martinez Canillas) [Orabug: 34375996] - Enable back btrfs module by default [Orabug: 34377188] - Backport upstream SNP protocol fixes [Orabug: 34195100] - Rebase Fix EFI loader kernel image allocation patch, adapt it to new NX code [Orabug: 34352232] - enable multiboot2 [Orabug: 34285558] - backport arm64: Fix EFI loader kernel image allocation [Orabug: 33702462] - backport Arm: check for the PE magic for the compiled arch [Orabug: 33702462] - Backport some better script logic for BTRFS support [Orabug: 32448171] - Do not add shim and grub certificate deps for aarch64 packages [Orabug: 32670033] - Update Oracle SBAT data [Orabug: 32670033] - Use new signing certificate [Orabug: 32670033] - Fix various coverity issues [Orabug: 32530657] - Set proper blsdir if /boot is on btrfs rootfs [Orabug: 32063327] - Add CVE-2020-15706, CVE-2020-15707 to the list [Orabug: 31225072] - honor /etc/sysconfig/kernel DEFAULTKERNEL setting for BLS [Orabug: 30643497] - set EFIDIR as redhat for additional grub2 tools [Orabug: 29875597] - Update upstream references [Orabug: 26388226] - Insert Unbreakable Enterprise Kernel text into BLS config file [Orabug: 29417955] - fix symlink removal scriptlet, to be executed only on removal [Orabug: 19231481] - Fix comparison in patch for 18504756 - Remove symlink to grub environment file during uninstall on EFI platforms [Orabug: 19231481] - Put 'with' in menuentry instead of 'using' [Orabug: 18504756] - Use different titles for UEK and RHCK kernels [Orabug: 18504756] [2.02-142.el8_7.1] - Sync with 8.8 (actually 2.02-145) - Resolves: CVE-2022-2601 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-2601 CVE-2022-3775 Oracle Linux 8 nodejs [1:14.21.1-2] - Apply upstream fix for CVE-2022-24999 Resolves: CVE-2022-24999 - Record CVEs fixed by current or previous upstream releases Resolves: CVE-2021-44906 [1:14.21.1-1] - Rebase to version 14.21.1 Resolves: rhbz#2129805 CVE-2022-43548 CVE-2022-3517 MODERATE Copyright 2023 Oracle, Inc. CVE-2021-44906 CVE-2022-0235 CVE-2022-3517 CVE-2022-43548 CVE-2022-24999 Oracle Linux 9 [6.0.113-1.0.1] - Add missing Oracle Linux Runtime IDs [6.0.113-1] - Update to .NET SDK 6.0.113 and Runtime 6.0.13 - Resolves: RHBZ#2154459 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-21538 Oracle Linux 8 [6.0.113-1.0.1] - Add missing Oracle Linux Runtime IDs [6.0.113-1] - Update to .NET SDK 6.0.113 and Runtime 6.0.13 - Resolves: RHBZ#2154458 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-21538 Oracle Linux 8 [1.0.0-8.2] - Fix unauthorized access via D-bus - Fix memory leak on D-bus connection failure Resolves: rhbz#2127848 MODERATE Copyright 2023 Oracle, Inc. CVE-2019-25058 Oracle Linux 8 [6.4.7.2-12.0.1] - Replace colors with Oracle colors [Orabug: 32120093] - Build with --with-vendor='Oracle America, Inc.' - Added the --with-hamcrest option to configure. [1:6.4.7.2-12] - Resolves: rhbz#2134752 CVE-2022-26305 Untrusted Macros - Resolves: rhbz#2134751 CVE-2022-26307 Weak Master Keys - Resolves: rhbz#2134750 CVE-2022-26306 Static Initialization Vector - Resolves: rhbz#2134753 CVE-2022-3140 Macro URL arbitrary script execution MODERATE Copyright 2023 Oracle, Inc. CVE-2022-26305 CVE-2022-26306 CVE-2022-26307 CVE-2022-3140 Oracle Linux 8 [4.0.9-26] - Fix various CVEs - Resolves: CVE-2022-2519 CVE-2022-2520 CVE-2022-2521 CVE-2022-2953 [4.0.9-25] - Fix CVE-2022-2867 (#2118857) - Fix CVE-2022-2868 (#2118882) - Fix CVE-2022-2869 (#2118878) [4.0.9-24] - Fix CVE-2022-2056 CVE-2022-2057 CVE-2022-2058 - Resolves: #2103222 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-2953 CVE-2022-2058 CVE-2022-2056 CVE-2022-2867 CVE-2022-2521 CVE-2022-2057 CVE-2022-2519 CVE-2022-2520 CVE-2022-2868 CVE-2022-2869 Oracle Linux 8 [1.12.8-23.0.1] - fix netlink poll: error 4 (Zhenzhong Duan) [1:1.12.8-23.1] - Fix CVE-2022-42010 (#2133644) - Fix CVE-2022-42011 (#2133638) - Fix CVE-2022-42012 (#2133632) MODERATE Copyright 2023 Oracle, Inc. CVE-2022-42011 CVE-2022-42010 CVE-2022-42012 Oracle Linux 8 libvirt [8.0.0-10.1.0.1] - Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554] - Add runtime deps for pkg librbd1 >= 1:10.2.5 (Keshav Sharma) [8.0.0-10.1.el8] - qemu_process: Don't require a hugetlbfs mount for memfd (rhbz#2132176) - qemu_namespace: Tolerate missing ACLs when creating a path in namespace (rhbz#2132176) - qemu_namespace: Fix a corner case in qemuDomainGetPreservedMounts() (rhbz#2132176) - qemu_namespace: Introduce qemuDomainNamespaceSetupPath() (rhbz#2132176) - qemu_process.c: Propagate hugetlbfs mounts on reconnect (rhbz#2132176) - qemuProcessReconnect: Don't build memory paths (rhbz#2132176) qemu-kvm [6.2.0-21.el8_7.2] - kvm-ui-vnc.c-Fixed-a-deadlock-bug.patch [bz#2148504] - kvm-hw-display-qxl-Have-qxl_log_command-Return-early-if-.patch [bz#2152085] - kvm-hw-display-qxl-Document-qxl_phys2virt.patch [bz#2152085] - kvm-hw-display-qxl-Pass-requested-buffer-size-to-qxl_phy.patch [bz#2152085] - kvm-hw-display-qxl-Avoid-buffer-overrun-in-qxl_phys2virt.patch [bz#2152085] - kvm-hw-display-qxl-Assert-memory-slot-fits-in-preallocat.patch [bz#2152085] - Resolves: bz#2148504 (VMs hung on vnc_clipboard_send [rhel-8.7.0.z]) - Resolves: bz#2152085 (CVE-2022-4144 virt:rhel/qemu-kvm: QEMU: QXL: qxl_phys2virt unsafe address translation can lead to out-of-bounds read [rhel-8] [rhel-8.7.0.z]) [6.2.0-20.el8_7.2] - kvm-virtiofsd-use-g_date_time_get_microsecond-to-get-sub.patch [bz#2132391] - Resolves: bz#2132391 ([virtiofs] virtiofsd debug log's timestamp is NULL [rhel-8.7.0.z]) [6.2.0-20.el8.1] - kvm-i386-reset-KVM-nested-state-upon-CPU-reset.patch [bz#2116743] - kvm-i386-do-kvm_put_msr_feature_control-first-thing-when.patch [bz#2116743] - Resolves: bz#2116743 ([RHEL8.7] Guests in VMX root operation fail to reboot with QEMU's 'system_reset' command) MODERATE Copyright 2023 Oracle, Inc. CVE-2022-4144 Oracle Linux 8 [239-68.0.2.1] - Backport upstream pstore dmesg fix [Orabug: 34850699] - Standardize ioctl (BTRFS_IOC_QGROUP_CREATE) check and return -ENOTCONN, if quota is not enabled [Orabug: 34694253] - Disable unprivileged BPF by default [Orabug: 32870980] - backport upstream pstore tmpfiles patch [Orabug: 31420486] - udev rules: fix memory hot add and remove [Orabug: 31310273] - fix to enable systemd-pstore.service [Orabug: 30951066] - journal: change support URL shown in the catalog entries [Orabug: 30853009] - fix to generate systemd-pstore.service file [Orabug: 30230056] - fix _netdev is missing for iscsi entry in /etc/fstab (tony.l.lam@oracle.com) [Orabug: 25897792] - set 'RemoveIPC=no' in logind.conf as default for OL7.2 [Orabug: 22224874] - allow dm remove ioctl to co-operate with UEK3 (Vaughan Cao) [Orabug: 18467469] - add hv dynamic memory support (Jerry Snitselaar) [Orabug: 18621475] - Backport upstream patches for the new systemd-pstore tool (Eric DeVolder) [OraBug: 30230056] [239-68.1] - time-util: fix buffer-over-run (#2139390) - core: move reset_arguments() to the end of main's finish (#2127170) MODERATE Copyright 2023 Oracle, Inc. CVE-2022-3821 Oracle Linux 8 [4.18.0-425.10.1.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3 - Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652] [4.18.0-425.10.1_7] - scsi: target: loop: Fix handling of aborted TMRs (Maurizio Lombardi) [2144583 2141713] - ice: virtchnl rss hena support (Petr Oros) [2148130] - ice: Fix configuring VIRTCHNL_OP_CONFIG_VSI_QUEUES with unbalanced queues (Michal Schmidt) [2142017 2137378] - ice: Add support Flex RXD (Michal Schmidt) [2138157 2131310] - netfilter: flowtable: fix stuck flows on cleanup due to pending work (Phil Sutter) [2134084 2131370] - netfilter: flowtable: add function to invoke garbage collection immediately (Phil Sutter) [2134084 2131370] - netfilter: flowtable: pass flowtable to nf_flow_table_iterate() (Phil Sutter) [2134084 2131370] - netfilter: flowtable: separate replace, destroy and stats to different workqueues (Phil Sutter) [2134084 2131370] - x86/paravirt: Add a dummy __x86_paravirt_patch_template() function (Waiman Long) [2152206 2144161] - x86/paravirt: Fix kABI breakage in struct pv_mmu_ops (Waiman Long) [2152206 2144161] - drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148149 2148150] {CVE-2022-4139} - PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150912 2082836] - iavf: Fix cached head and tail value for iavf_get_tx_pending (Stefan Assmann) [2149742 2103944] - iavf: Fix change VF's mac address (Stefan Assmann) [2149742 2103944] - iavf: Fix race between iavf_close and iavf_reset_task (Stefan Assmann) [2149742 2103944] - net: ethernet: move from strlcpy with unused retval to strscpy (Stefan Assmann) [2149742 2103944] - iavf: Fix 'tc qdisc show' listing too many queues (Stefan Assmann) [2149742 2103944] - iavf: Fix max_rate limiting (Stefan Assmann) [2149742 2103944] - iavf: Check for duplicate TC flower filter before parsing (Stefan Assmann) [2149742 2103944] - iavf: Fix handling of dummy receive descriptors (Stefan Assmann) [2149742 2103944] - iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (Stefan Assmann) [2149742 2103944] - intel/iavf:fix repeated words in comments (Stefan Assmann) [2149742 2103944] - intel: remove unused macros (Stefan Assmann) [2149742 2103944] - iavf: Add waiting for response from PF in set mac (Stefan Assmann) [2149742 2103944] [4.18.0-425.9.1_7] - Documentation/admin-guide: Document nomodeset kernel parameter (Jocelyn Falempe) [2145218 2143952] - drm: Move nomodeset kernel parameter to the DRM subsystem (Jocelyn Falempe) [2145218 2143952] - wait: Fix __wait_event_hrtimeout for RT/DL tasks (Derek Barbosa) [2138953 2125233] - scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127849 2121089] - net: Fix return value of qdisc ingress handling on success (Ivan Vecera) [2141878 2131361] [4.18.0-425.8.1_7] - scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216 2134535] - RDMA/mlx5: Set local port to one when accessing counters (Mohammad Kabat) [2141957 2077119] - drm/mgag200: Fix PLL setup for G200_SE_A rev >=4 (Jocelyn Falempe) [2140152 2130159] - iavf: Do not restart Tx queues after reset task failure (Petr Oros) [2149081 2134005] - iavf: Fix a crash during reset task (Petr Oros) [2149081 2134005] - scsi: core: Allow the ALUA transitioning state enough time (Tomas Henzl) [2147374 2084250] - scsi: core: Return BLK_STS_TRANSPORT for ALUA transitioning (Tomas Henzl) [2147374 2084250] - i40e: Fix DMA mappings leak (Ivan Vecera) [2138205 2077847] - net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142724 2142725] {CVE-2022-2964} [4.18.0-425.7.1_7] - ice: Add additional CSR registers to ETHTOOL_GREGS (Petr Oros) [2136513 2131024] - i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Petr Oros) [2137270 2106964] - i40e: Fix VF set max MTU size (Petr Oros) [2137270 2106964] - iavf: Fix set max MTU size with port VLAN and jumbo frames (Petr Oros) [2137270 2106964] - iavf: Fix bad page state (Petr Oros) [2137270 2106964] - Revert 'scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels' (Jarod Wilson) - scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139216] - Revert 'ACPI: processor idle: Practically limit 'Dummy wait' workaround to old Intel systems' (Jarod Wilson) - ACPI: processor idle: Practically limit 'Dummy wait' workaround to old Intel systems (Wei Huang) [2142170 2130653] [4.18.0-425.6.1_7] - ice: Add low latency Tx timestamp read (Petr Oros) [2136036 2092425] - ice: introduce ice_ptp_reset_cached_phctime function (Petr Oros) [2136036 2092425] - ice: re-arrange some static functions in ice_ptp.c (Petr Oros) [2136036 2092425] - ice: track and warn when PHC update is late (Petr Oros) [2136036 2092425] - ice: track Tx timestamp stats similar to other Intel drivers (Petr Oros) [2136036 2092425] - ice: implement adjfine with mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425] - ice: Add EXTTS feature to the feature bitmap (Petr Oros) [2136036 2092425] - math: Export mul_u64_u64_div_u64 (Petr Oros) [2136036 2092425] - vfio/type1: Unpin zero pages (Alex Williamson) [2128515 2123015] - net: atlantic: remove aq_nic_deinit() when resume (Inigo Huguet) [2131935 2130839] - net: atlantic: remove deep parameter on suspend/resume functions (Inigo Huguet) [2131935 2130839] - CI: Use zstream builder container (Veronika Kabatova) - CI: Add disttag override for 8.7 (Veronika Kabatova) [4.18.0-425.5.1_7] - ice: Fix interface being down after reset with link-down-on-close flag on (Petr Oros) [2136216 2024110] - ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2130992 2129902] - ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2130992 2129902] - ice: handle E822 generic device ID in PLDM header (Petr Oros) [2130992 2129902] - ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2130992 2129902] - ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2130992 2129902] - ice: Fix switchdev rules book keeping (Petr Oros) [2130992 2129902] - ice: fix access-beyond-end in the switch code (Petr Oros) [2130992 2129902] - eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2130992 2129902] - ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2130992 2129902] - Revert 'ice: Hide bus-info in ethtool for PRs in switchdev mode' (Petr Oros) [2130992 2129902] - ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2130992 2129902] - ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2130992 2129902] - ice: fix wording in comment for ice_reset_vf (Petr Oros) [2130992 2129902] - ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2130992 2129902] - ice: always check VF VSI pointer values (Petr Oros) [2130992 2129902] - ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2130992 2129902] - ice: get switch id on switchdev devices (Petr Oros) [2130992 2129902] - ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2130992 2129902] - ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2130992 2129902] - ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2130992 2129902] - ice: Add mpls+tso support (Petr Oros) [2130992 2129902] - ice: switch: convert packet template match code to rodata (Petr Oros) [2130992 2129902] - ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2130992 2129902] - ice: switch: use a struct to pass packet template params (Petr Oros) [2130992 2129902] - ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2130992 2129902] - ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2130992 2129902] - ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2130992 2129902] - ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2130992 2129902] - ice: switch to napi_build_skb() (Petr Oros) [2130992 2129902] - redhat: switch to z-stream dist tag and build targets (Jarod Wilson) - block: avoid sign extend problem with default queue flags mask (Nico Pache) [2135813] [4.18.0-425.4.1] - random: allow reseeding DRBG with getrandom (Daiki Ueno) [2121766] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-2964 CVE-2022-4139 Oracle Linux 8 [2.2.5-10.0.1] - lib: Prevent integer overflow in doProlog [CVE-2022-23990][Orabug: 33910314] [2.2.5-10.1] - CVE-2022-43680 expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate - Resolves: CVE-2022-43680 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-43680 Oracle Linux 8 [3.26.0-17] - Fixed CVE-2022-35737 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-35737 Oracle Linux 8 [10.23-1] - Fix CVE-2022-2625 - Resolves: #2143167 - Rebase to 10.23 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-2625 Oracle Linux 8 [4.13-4] - Resolves: rhbz#2140600 MODERATE Copyright 2023 Oracle, Inc. CVE-2021-46848 Oracle Linux 8 [21.11-2] - Backport fixes for CVE-2022-2132 (#2107171) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-2132 Oracle Linux 8 [2.9.7-15.1] - Fix CVE-2022-40303 (#2136562) - Fix CVE-2022-40304 (#2136567) MODERATE Copyright 2023 Oracle, Inc. CVE-2022-40303 CVE-2022-40304 Oracle Linux 6 [2.6.32-754.49.1.OL6] - x86/speculation: Use generic retpoline by default on AMD {CVE-2021-26401} [Orabug: 34986011] MODERATE Copyright 2023 Oracle, Inc. CVE-2021-26401 cpe:/a:oracle:linux:6:10:ELS Oracle Linux 8 [1:17.0.6.0.10-3] - Add missing release note for JDK-8295687 - Resolves: rhbz#2160111 [1:17.0.6.0.10-3] - Update FIPS support to bring in latest changes - * OJ1357: Fix issue on FIPS with a SecurityManager in place - Related: rhbz#2147473 [1:17.0.6.0.10-3] - Fix flatpak builds by disabling TestTranslations test due to missing tzdb.dat - Related: rhbz#2160111 [1:17.0.6.0.10-2] - Update to jdk-17.0.6.0+10 - Update release notes to 17.0.6.0+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2153010 [1:17.0.6.0.9-0.2.ea] - Update to jdk-17.0.6+9 - Update release notes to 17.0.6+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2153010 [1:17.0.6.0.1-0.2.ea] - Update to jdk-17.0.6+1 - Update release notes to 17.0.6+1 - Switch to EA mode for 17.0.6 pre-release builds. - Re-enable EA upstream status check now it is being actively maintained. - Drop JDK-8294357 (tzdata2022d) & JDK-8295173 (tzdata2022e) local patches which are now upstream - Drop JDK-8275535 local patch now this has been accepted and backported upstream - Bump tzdata requirement to 2022e now the package is available in RHEL - Related: rhbz#2153010 [1:17.0.5.0.8-4] - Update FIPS support to bring in latest changes - * Add nss.fips.cfg support to OpenJDK tree - * RH2117972: Extend the support for NSS DBs (PKCS11) in FIPS mode - * Remove forgotten dead code from RH2020290 and RH2104724 - Drop local nss.fips.cfg.in handling now this is handled in the patched OpenJDK build - Resolves: rhbz#2147473 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-21843 CVE-2023-21835 Oracle Linux 9 [1:17.0.6.0.10-3.0.1] - Replace upstream references [Orabug: 34340155] [1:17.0.6.0.10-3] - Add missing release note for JDK-8295687 - Resolves: rhbz#2160111 [1:17.0.6.0.10-3] - Update FIPS support to bring in latest changes - * OJ1357: Fix issue on FIPS with a SecurityManager in place - Related: rhbz#2147476 [1:17.0.6.0.10-3] - Fix flatpak builds by disabling TestTranslations test due to missing tzdb.dat - Related: rhbz#2160111 [1:17.0.6.0.10-2] - Update to jdk-17.0.6.0+10 - Update release notes to 17.0.6.0+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2153097 [1:17.0.6.0.9-0.2.ea] - Update to jdk-17.0.6+9 - Update release notes to 17.0.6+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2153097 [1:17.0.6.0.1-0.2.ea] - Update to jdk-17.0.6+1 - Update release notes to 17.0.6+1 - Switch to EA mode for 17.0.6 pre-release builds. - Re-enable EA upstream status check now it is being actively maintained. - Drop JDK-8294357 (tzdata2022d) & JDK-8295173 (tzdata2022e) local patches which are now upstream - Drop JDK-8275535 local patch now this has been accepted and backported upstream - Bump tzdata requirement to 2022e now the package is available in RHEL - Related: rhbz#2153097 [1:17.0.5.0.8-4] - Update FIPS support to bring in latest changes - * Add nss.fips.cfg support to OpenJDK tree - * RH2117972: Extend the support for NSS DBs (PKCS11) in FIPS mode - * Remove forgotten dead code from RH2020290 and RH2104724 - Drop local nss.fips.cfg.in handling now this is handled in the patched OpenJDK build - Resolves: rhbz#2147476 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-21835 CVE-2023-21843 Oracle Linux 7 [1:11.0.18.0.10-1] - Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2150192 [1:11.0.18.0.9-0.2.ea] - Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150192 [1:11.0.18.0.1-0.1.ea] - Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Related: rhbz#2150192 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-21835 CVE-2023-21843 Oracle Linux 8 [1:11.0.18.0.10-1] - Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2157797 [1:11.0.18.0.9-0.2.ea] - Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2157797 [1:11.0.18.0.1-0.2.ea] - Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Drop local copy of JDK-8275535 which is finally upstream - Related: rhbz#2157797 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-21835 CVE-2023-21843 Oracle Linux 9 [11.0.18.0.10-2.0.1] - Replace upstream references [Orabug: 34340155] [1:11.0.18.0.10-2] - Update to jdk-11.0.18+10 (GA) - Update release notes to 11.0.18+10 - Switch to GA mode for release - ** This tarball is embargoed until 2023-01-17 @ 1pm PT. ** - Related: rhbz#2157798 [1:11.0.18.0.9-0.2.ea] - Update to jdk-11.0.18+9 - Update release notes to 11.0.18+9 - Drop local copy of JDK-8293834 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2157798 [1:11.0.18.0.1-0.2.ea] - Update to jdk-11.0.18+1 - Update release notes to 11.0.18+1 - Switch to EA mode for 11.0.18 pre-release builds. - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e - Drop local copy of JDK-8275535 which is finally upstream - Related: rhbz#2157798 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-21835 CVE-2023-21843 Oracle Linux 7 [1:1.8.0.362.b08-1] - Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of 'JDK-8293554: Enhanced DH Key Exchanges' - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 [1:1.8.0.362.b07-0.1.ea] - Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2150191 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-21843 CVE-2023-21830 Oracle Linux 8 [1:1.8.0.362.b09-2] - Update cacerts patch to fix OPENJDK-1433 SecurityManager issue - Update to shenandoah-jdk8u352-b09 (GA) - Update release notes for shenandoah-8u352-b09. - Resolves: rhbz#2163595 [1:1.8.0.362.b08-2] - Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of 'JDK-8293554: Enhanced DH Key Exchanges' - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 [1:1.8.0.362.b07-0.2.ea] - Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Drop JDK-8195607/PR3776/RH1760437 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Drop JDK-8255559/RH2124390 patch which is now upstream - Resolves: rhbz#2159910 [1:1.8.0.352.b08-3] - Add backport of JDK-8255559 to fix file descriptor leak in XML code - Resolves: rhbz#2139705 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-21830 CVE-2023-21843 Oracle Linux 9 [1.8.0.362.b09-2.0.1] - Replace upstream references [Orabug: 34340145] [1:1.8.0.362.b09-2] - Update cacerts patch to fix OPENJDK-1433 SecurityManager issue - Update to shenandoah-jdk8u352-b09 (GA) - Update release notes for shenandoah-8u352-b09. - Resolves: rhbz#2163594 [1:1.8.0.362.b08-2] - Update to shenandoah-jdk8u352-b08 (GA) - Update release notes for shenandoah-8u352-b08. - Fix broken links and missing release notes in older releases. - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete - Patch was broken by inclusion of 'JDK-8293554: Enhanced DH Key Exchanges' - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys - Resolves: rhbz#2160111 [1:1.8.0.362.b07-0.2.ea] - Update to shenandoah-jdk8u362-b07 (EA) - Update release notes for shenandoah-8u362-b07. - Switch to EA mode for 8u362 pre-release builds. - Drop JDK-8195607/PR3776/RH1760437 now this is upstream - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804 - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream - Update TestTranslations.java to test the new America/Ciudad_Juarez zone - Resolves: rhbz#2159912 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-21830 CVE-2023-21843 Oracle Linux 9 [1.9.5p2-7.1] RHEL 9.1.0.Z ERRATUM - CVE-2023-22809 sudo: arbitrary file write with privileges of the RunAs user Resolves: rhbz#2161224 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-22809 Oracle Linux 8 [1.8.29.8.1] RHEL 8.7.0.Z ERRATUM - CVE-2023-22809 sudo: arbitrary file write with privileges of the RunAs user Resolves: rhbz#2161220 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-22809 Oracle Linux 9 [102.7.0-1.0.1] - Updated homepages to use https [Orabug: 34648274] [102.7.0-1] - Update to 102.7.0 build1 [102.6.0-2] - Add firefox-x11 subpackage to allow explicit run of firefox under x11 on RHEL9 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-23603 CVE-2023-23605 CVE-2022-46877 CVE-2023-23601 CVE-2023-23599 CVE-2023-23598 CVE-2022-46871 CVE-2023-23602 Oracle Linux 8 [102.7.0-1.0.1] - Updated homepages to use https [Orabug: 34648274] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.7.0-1] - Update to 102.7.0 build1 [102.6.0-2] - Add firefox-x11 subpackage to allow explicit run of firefox under x11 on RHEL9 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-23599 CVE-2023-23601 CVE-2023-23603 CVE-2023-23598 CVE-2022-46871 CVE-2022-46877 CVE-2023-23602 CVE-2023-23605 Oracle Linux 7 [1.8.23-10.3] RHEL 7.9.Z ERRATUM - CVE-2023-22809 sudo: arbitrary file write with privileges of the RunAs user Resolves: rhbz#2161222 [1.8.23-10.2] - RHEL 7.9.Z ERRATUM - defaults use_pty plus SELinux ROLE in user specification breaks terminal Resolves: rhbz#1972820 [1.8.23-10.1] - RHEL 7.9.Z ERRATUM - CVE-2021-3156 Resolves: rhbz#1917729 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-22809 Oracle Linux 7 [102.7.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.7.0-1] - Update to 102.7.0 build1 [102.6.0-2] - Add firefox-x11 subpackage to allow explicit run of firefox under x11 on RHEL9 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-23605 CVE-2023-23603 CVE-2023-23602 CVE-2022-46871 CVE-2023-23601 CVE-2023-23599 CVE-2023-23598 CVE-2022-46877 Oracle Linux 9 [4.4.0-5] - Bump release - Resolves: CVE-2022-2953 [4.4.0-4] - Resolves: CVE-2022-2519 CVE-2022-2520 CVE-2022-2521 [4.4.0-3] - Fix CVE-2022-2056 CVE-2022-2057 CVE-2022-2058 - Resolves: #2106768 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-2057 CVE-2022-2521 CVE-2022-2519 CVE-2022-2056 CVE-2022-2520 CVE-2022-2953 CVE-2022-2058 Oracle Linux 9 [1.0.0-10.2] - Fix dbus memory leak on connection failure - Fix unauthorized access via D-bus Resolves: rhbz#2127877 MODERATE Copyright 2023 Oracle, Inc. CVE-2019-25058 Oracle Linux 9 [7.1.8.1-8.0.1] - Replace colors with Oracle colors [Orabug: 32120093] - Build with --with-vendor='Oracle America, Inc.' - Added the --with-hamcrest option to configure. [1:7.1.8.1-8] - Resolves: rhbz#2134759 Untrusted Macros - Resolves: rhbz#2134757 Weak Master Keys - Resolves: rhbz#2134755 Static Initialization Vector - Resolves: rhbz#2134761 Macro URL arbitrary script execution MODERATE Copyright 2023 Oracle, Inc. CVE-2022-3140 CVE-2022-26307 CVE-2022-26305 CVE-2022-26306 Oracle Linux 9 [42.2.18-6] - fix for CVE-2022-31197 * Tue Aug 10 2021 Mohan Boddu <mboddu@redhat.com> - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-31197 Oracle Linux 9 nodejs [1:16.18.1-3] - Update sources of undici WASM blobs Resolves: rhbz#2151617 [1:16.18.1-2] - Add back libs and v8-devel subpackages - Related: RHBZ#2121126 - Record previously fixed CVE - Resolves: CVE-2021-44906 [1:16.18.1-1] - Rebase + CVEs - Resolves: #2142808 - Resolves: #2142826, #2131745, #2142855 nodejs-nodemon [2.0.20-2] - Record CVE fixed in the current or previous upstream versions - Resolves: CVE-2021-44906 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-43548 CVE-2022-35256 CVE-2021-44906 CVE-2022-3517 Oracle Linux 9 golang [1.18.9-1] - Rebase to Go 1.18.9 - Enable big endian support for fips mode - Fix ppc64le linker issue - Resolves: rhbz#2144547 - Resolves: rhbz#2149311 go-toolset [1.18.9-1] - Rebase to Go 1.18.9 - Enable big endian support for fips mode - Fix ppc64le linker issue - Resolves: rhbz#2144547 - Resolves: rhbz#2149311 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-2880 CVE-2022-41715 CVE-2022-2879 Oracle Linux 9 [7.76.1-19.el9_1.1] - fix POST following PUT confusion (CVE-2022-32221) MODERATE Copyright 2023 Oracle, Inc. CVE-2022-32221 Oracle Linux 9 [5.14.0-162.12.1_1.OL9] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5 - Remove nmap references from kernel (Mridula Shastry) [Orabug: 34313944] - Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535] [5.14.0-162.12.1_1] - x86/fpu: Drop fpregs lock before inheriting FPU permissions (Valentin Schneider) [2154407 2153181] - hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2151605 2149277] - PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Emanuele Giuseppe Esposito) [2150910 2092794] [5.14.0-162.11.1_1] - drm/i915: fix TLB invalidation for Gen12 video and compute engines (Wander Lairson Costa) [2148152 2148153] {CVE-2022-4139} - memcg: prohibit unconditional exceeding the limit of dying tasks (Chris von Recklinghausen) [2143976 2120352] - mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2143976 2139747] - mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Chris von Recklinghausen) [2143976 2120352] - pipe: Fix missing lock in pipe_resize_ring() (Ian Kent) [2141631 2141632] {CVE-2022-2959} - net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2142722 2142723] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2142722 2142723] {CVE-2022-2964} - NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2141769 2141770] {CVE-2022-43945} - NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2141769 2141770] {CVE-2022-43945} - NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2141769 2141770] {CVE-2022-43945} - NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2141769 2141770] {CVE-2022-43945} - SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2141769 2141770] {CVE-2022-43945} - SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2141769 2141770] {CVE-2022-43945} [5.14.0-162.10.1_1] - ice: Fix crash by keep old cfg when update TCs more than queues (Petr Oros) [2132070 2131953] - ice: Fix tunnel checksum offload with fragmented traffic (Petr Oros) [2132070 2131953] - ice: handle E822 generic device ID in PLDM header (Petr Oros) [2132070 2131953] - ice: ethtool: Prohibit improper channel config for DCB (Petr Oros) [2132070 2131953] - ice: ethtool: advertise 1000M speeds properly (Petr Oros) [2132070 2131953] - ice: Fix switchdev rules book keeping (Petr Oros) [2132070 2131953] - ice: fix access-beyond-end in the switch code (Petr Oros) [2132070 2131953] - eth: ice: silence the GCC 12 array-bounds warning (Petr Oros) [2132070 2131953] - ice: Expose RSS indirection tables for queue groups via ethtool (Petr Oros) [2132070 2131953] - Revert 'ice: Hide bus-info in ethtool for PRs in switchdev mode' (Petr Oros) [2132070 2131953] - ice: remove period on argument description in ice_for_each_vf (Petr Oros) [2132070 2131953] - ice: add a function comment for ice_cfg_mac_antispoof (Petr Oros) [2132070 2131953] - ice: fix wording in comment for ice_reset_vf (Petr Oros) [2132070 2131953] - ice: remove return value comment for ice_reset_all_vfs (Petr Oros) [2132070 2131953] - ice: always check VF VSI pointer values (Petr Oros) [2132070 2131953] - ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Petr Oros) [2132070 2131953] - ice: get switch id on switchdev devices (Petr Oros) [2132070 2131953] - ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Petr Oros) [2132070 2131953] - ice: introduce common helper for retrieving VSI by vsi_num (Petr Oros) [2132070 2131953] - ice: use min_t() to make code cleaner in ice_gnss (Petr Oros) [2132070 2131953] - ice, xsk: Avoid refilling single Rx descriptors (Petr Oros) [2132070 2131953] - ice, xsk: Diversify return values from xsk_wakeup call paths (Petr Oros) [2132070 2131953] - ice, xsk: Terminate Rx side of NAPI when XSK Rx queue gets full (Petr Oros) [2132070 2131953] - ice, xsk: Decorate ICE_XDP_REDIR with likely() (Petr Oros) [2132070 2131953] - ice: Add mpls+tso support (Petr Oros) [2132070 2131953] - ice: switch: convert packet template match code to rodata (Petr Oros) [2132070 2131953] - ice: switch: use convenience macros to declare dummy pkt templates (Petr Oros) [2132070 2131953] - ice: switch: use a struct to pass packet template params (Petr Oros) [2132070 2131953] - ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Petr Oros) [2132070 2131953] - ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Petr Oros) [2132070 2131953] - ice: Support GTP-U and GTP-C offload in switchdev (Petr Oros) [2132070 2131953] - Documentation/admin-guide: Document nomodeset kernel parameter (Karol Herbst) [2145217 2143841] - drm: Move nomodeset kernel parameter to the DRM subsystem (Karol Herbst) [2145217 2143841] - selftests/bpf: Limit unroll_count for pyperf600 test (Frantisek Hrbata) [2144902 2139836] - nvme-fc: fix the fc_appid_store return value (Ewan D. Milne) [2136914 2113035] - ACPI: processor idle: Practically limit 'Dummy wait' workaround to old Intel systems (Wei Huang) [2142168 2130652] - CI: Drop c9s CI parts (Veronika Kabatova) - CI: Use GA builder container (Veronika Kabatova) [5.14.0-162.9.1_1] - CI: Remove deprecated variable (Veronika Kabatova) - drm: fix duplicated code in drm_connector_register (Karol Herbst) [2134619 2132575] - drm/mgag200: Fix PLL setup for G200_SE_A rev >=4 (Jocelyn Falempe) [2140153 1960467] - scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Tomas Henzl) [2139213 2136223] [5.14.0-162.8.1_1] - redhat: fix the branch we pull from the documentation tree (Herton R. Krzesinski) - nvme-tcp: handle number of queue changes (John Meneghini) [2131359 2112025] - nvmet: expose max queues to configfs (John Meneghini) [2131359 2112025] - nvme-fabrics: parse nvme connect Linux error codes (John Meneghini) [2131359 2112025] - vfio/type1: Unpin zero pages (Alex Williamson) [2128514 2121855] - ptrace: Check PTRACE_O_SUSPEND_SECCOMP permission on PTRACE_SEIZE (Oleg Nesterov) [2127881 2121271] {CVE-2022-30594} [5.14.0-162.7.1_1] - i2c: ismt: prevent memory corruption in ismt_access() (David Arcari) [2127532 2125582] {CVE-2022-3077} - x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134588 2131667] - iavf: Fix reset error handling (Petr Oros) [2127884 2119712] - iavf: Fix NULL pointer dereference in iavf_get_link_ksettings (Petr Oros) [2127884 2119712] - iavf: Fix missing state logs (Petr Oros) [2127884 2119712] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-4139 CVE-2022-3077 CVE-2022-2964 CVE-2022-43945 CVE-2022-2959 CVE-2022-30594 Oracle Linux 9 [1.12.20-7.0.1] - fix netlink poll: error 4 (Zhenzhong Duan) [1:1.12.20-7] - Fix CVE-2022-42010 (#2133647) - Fix CVE-2022-42011 (#2133641) - Fix CVE-2022-42012 (#2133635) MODERATE Copyright 2023 Oracle, Inc. CVE-2022-42011 CVE-2022-42012 CVE-2022-42010 Oracle Linux 9 [250-12.0.2.el9_1.1] - Backport upstream pstore dmesg fix [Orabug: 34868110] - Remove upstream references [Orabug: 33995357] - Disable unprivileged BPF by default [Orabug: 32870980] - udev rules: fix memory hot add and remove [Orabug: 31310273] - set 'RemoveIPC=no' in logind.conf as default for OL7.2 [Orabug: 22224874] - allow dm remove ioctl to co-operate with UEK3 (Vaughan Cao) [Orabug: 18467469] - fix _netdev is missing for iscsi entry in /etc/fstab (tony.l.lam@oracle.com) [Orabug: 25897792] - shutdown: get only active md arrays. [Orabug: 34467234] [250-12.1] - time-util: fix buffer-over-run (#2139388) MODERATE Copyright 2023 Oracle, Inc. CVE-2022-3821 Oracle Linux 9 [2.4.9-1.1] - CVE-2022-43680 expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate - Resolves: CVE-2022-43680 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-43680 Oracle Linux 9 [2.9.13-3] - Fix CVE-2022-40303 (#2136564) - Fix CVE-2022-40304 (#2136569) MODERATE Copyright 2023 Oracle, Inc. CVE-2022-40303 CVE-2022-40304 Oracle Linux 9 [3.34.1-6] - Fixes CVE-2022-35737 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-35737 Oracle Linux 9 [5.1.8-6] - Add a null check in parameter_brace_transform() function Resolves: CVE-2022-3715 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-3715 Oracle Linux 9 [4.16.0-9] - Resolves: rhbz#2140602 MODERATE Copyright 2023 Oracle, Inc. CVE-2021-46848 Oracle Linux 7 [3.5.12-2] - Fix CVE-2022-4883: compression commands depends on /usr/local/bin:/usr/bin (#2161715) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-4883 Oracle Linux 8 [3.5.12-9] - Fix CVE-2022-46285: infinite loop on unclosed comments (#2161800) - Fix CVE-2022-44617: runaway loop with width of 0 (#2161808) - Fix CVE-2022-4883: compression depends on /usr/local/bin:/usr/bin (#2160238) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-4883 CVE-2022-46285 CVE-2022-44617 Oracle Linux 9 [3.5.13-8] - Fix CVE-2022-46285: infinite loop on unclosed comments (#2160230) - Fix CVE-2022-44617: runaway loop with width of 0 (#2160232) - Fix CVE-2022-4883: compression depends on /usr/local/bin:/usr/bin (#2160242) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-4883 CVE-2022-44617 CVE-2022-46285 Oracle Linux 7 [3.10.0-1160.83.1.0.1.OL7] - debug: lock down kgdb [Orabug: 34270798] {CVE-2022-21499} [3.10.0-1160.83.1.OL7] - Update Oracle Linux certificates (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and shim-x64 <= 15-2.0.9 - Update oracle(kernel-sig-key) value to match new certificate (Ilya Okomin) [3.10.0-1160.83.1] - x86/sme: avoid using __x86_return_thunk (Rafael Aquini) [2122158] - scsi: core: Simplify control flow in scmd_eh_abort_handler() (Ewan D. Milne) [2128337] - scsi: core: Avoid leaving shost->last_reset with stale value if EH does not run (Ewan D. Milne) [2128337] - [netdrv] i40e: Fix freeing of uninitialized misc IRQ vector (Jamie Bainbridge) [2129248] - x86/speculation: Use generic retpoline by default on AMD (Rafael Aquini) [2062165] {CVE-2021-26401} [3.10.0-1160.82.1] - net: usb: ax88179_178a: Fix packet receiving (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: Merge cpu_to_le32s + memcpy to put_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - ax88179_178a: Merge memcpy + le32_to_cpus to get_unaligned_le32 (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - net: usb: ax88179_178a: fix packet alignment padding (Jose Ignacio Tornos Martinez) [2120504] {CVE-2022-2964} - mm: swap: disable swap_vma_readahead for PPC64 (Rafael Aquini) [2142455] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2021-26401 CVE-2022-2964 Oracle Linux 7 [32:9.11.4-26.P2.13] - Tighten cache protection against record from forwarders (CVE-2021-25220) [32:9.11.4-26.P2.12] - Include test of forwarders (CVE-2021-25220) [32:9.11.4-26.P2.11] - Prevent excessive resource use while processing large delegations. (CVE-2022-2795) MODERATE Copyright 2023 Oracle, Inc. CVE-2022-2795 CVE-2021-25220 Oracle Linux 7 [1.16.5-10.0.3] - Revert Redhat's change of disallowing duplicated incomplete gid when 'id_provider=ldap' is used, which caused regression in AD environment. [Orabug: 29286774] [Doc ID 2605732.1] [1.16.5-10.15] - Resolves: rhbz#2149703 - smartcards: special characters must be escaped when building search filter [rhel-7.9.z] - Resolves: rhbz#2149902 - EMBARGOED CVE-2022-4254 sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters [rhel-7.9.z] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-4254 Oracle Linux 8 golang [1.18.9-1] - Update to Go 1.18.9 - Add big-endian.patch - Increase GO_TEST_TIMEOUT_SCALE due to a Brew issue - Add do-not-reuse-far-trampolines.patch - Resolves: rhbz#2149313 [1.18.7-2] - Fix version mismatch from previous rebase - Related: rhbz#2136719 [1.18.7-1] - Update to Go 1.18.7 - Resolves: rhbz#2136719 [1.18.4-2] - Adds patch for PIE mode issues on PPC64LE - Resolves: rhbz#2111593 go-toolset [1.18.9-1] - Update to Go 1.18.9 - Resolves: rhbz#2149313 [1.18.7-1] - Update to Go 1.18.7 - Resolves: rhbz#2136719 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-41715 CVE-2022-2880 CVE-2022-2879 Oracle Linux 7 [102.7.1-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [102.7.1-1] - Update to 102.7.1 build1 [102.7.0-1] - Update to 102.7.0 build1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-23602 CVE-2023-23601 CVE-2023-23605 CVE-2022-46877 CVE-2023-23598 CVE-2023-23603 CVE-2022-46871 CVE-2023-23599 Oracle Linux 8 [102.7.1-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.7.1-1] - Update to 102.7.1 build1 [102.7.0-1] - Update to 102.7.0 build1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-23599 CVE-2022-46871 CVE-2023-23598 CVE-2023-23603 CVE-2023-23601 CVE-2022-46877 CVE-2023-23602 CVE-2023-23605 Oracle Linux 9 [102.7.1-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.7.1-1] - Update to 102.7.1 build1 [102.7.0-1] - Update to 102.7.0 build1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-46871 CVE-2023-23601 CVE-2023-23605 CVE-2023-23598 CVE-2023-23603 CVE-2023-23599 CVE-2022-46877 CVE-2023-23602 Oracle Linux 7 [1.3.0-7] - Fix for CVE-2022-47629 (#2161571) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-47629 Oracle Linux 7 [102.7.1-2.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [102.7.1-2] - Update to 102.7.1 build2 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-0430 Oracle Linux 8 [102.7.1-2.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.7.1-2] - Update to 102.7.1 build2 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-0430 Oracle Linux 9 [102.7.1-2.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.7.1-2] - Update to 102.7.1 build2 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-0430 Oracle Linux 8 [2.31.1-3] - Fixes CVE-2022-23521 and CVE-2022-41903 - Tests: try harder to find open ports for apache, git, and svn - Resolves: #2162063 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-41903 CVE-2022-23521 Oracle Linux 9 [2.31.1-3] - Fixes CVE-2022-23521 and CVE-2022-41903 - Tests: try harder to find open ports for apache, git, and svn - Resolves: #2162069 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-41903 CVE-2022-23521 Oracle Linux 9 [1.12.0-5] - xorg-x11-server: DeepCopyPointerClasses use-after-free leads to privilege elevation Resolves: bz#2167060 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-0494 Oracle Linux 8 [1.3.5-9] - Fix for CVE-2022-47629 (#2161571) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-47629 Oracle Linux 9 [1.5.1-6] - Fix for CVE-2022-47629 (#2161571) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-47629 Oracle Linux 8 [1.12.0-9] - xorg-x11-server: DeepCopyPointerClasses use-after-free leads to privilege elevation Resolves: bz#2167057 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-0494 Oracle Linux 7 tigervnc [1.8.0-24] - CVE fix for: CVE-2023-0494 Resolves: bz#2166532 xorg-x11-server [1.20.4-22] - CVE fix for: CVE-2023-0494 (#2166513) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-0494 Oracle Linux 9 [2.06-46.0.4.el9_1.3] - Bump SBAT metadata for grub to 3 [Orabug: 34872719] - Fix CVE-2022-3775 [Orabug: 34871953] - Enable signing for aarch64 EFI - Fix signing certificate names - Enable back btrfs grub module for EFI pre-built image [Orabug: 34360986] - Replaced bugzilla.oracle.com references [Orabug: 34202300] - Update provided certificate version to 202204 [JIRA: OLDIS-16371] - Various coverity fixes [JIRA: OLDIS-16371] - bump SBAT generation - Update bug url [Orabug: 34202300] - Revert provided certificate version back to 202102 [JIRA: OLDIS-16371] - Update signing certificate [JIRA: OLDIS-16371] - fix SBAT data [JIRA: OLDIS-16371] - Update requires [JIRA: OLDIS-16371] - Rebuild for SecureBoot signatures [Orabug: 33801813] - Do not add shim and grub certificate deps for aarch64 packages [Orabug: 32670033] - Update Oracle SBAT data [Orabug: 32670033] - Use new signing certificate [Orabug: 32670033] - honor /etc/sysconfig/kernel DEFAULTKERNEL setting for BLS [Orabug: 30643497] - set EFIDIR as redhat for additional grub2 tools [Orabug: 29875597] - Update upstream references [Orabug: 26388226] - Insert Unbreakable Enterprise Kernel text into BLS config file [Orabug: 29417955] - Put 'with' in menuentry instead of 'using' [Orabug: 18504756] - Use different titles for UEK and RHCK kernels [Orabug: 18504756] [2.06-46.el9_1.3] - Give up on redhat-sb-certs - Resolves: CVE-2022-2601 [2.06-46.el9_1.2] - CVE update (actually 2.06-49) - Resolves: CVE-2022-2601 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-3775 CVE-2022-2601 cpe:/o:oracle:linux:9::baseos_latest Oracle Linux 8 [102.8.0-2.0.1] - Updated homepages to use https [Orabug: 34648274] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.8.0-2] - Update to 102.8.0 build2 [102.8.0-1] - Update to 102.8.0 build1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-25739 CVE-2023-25743 CVE-2023-25732 CVE-2023-25744 CVE-2023-0767 CVE-2023-25728 CVE-2023-25729 CVE-2023-25730 CVE-2023-25742 CVE-2023-25735 CVE-2023-25737 CVE-2023-25746 Oracle Linux 9 [102.8.0-2.0.1] - Updated homepages to use https [Orabug: 34648274] [102.8.0-2] - Update to 102.8.0 build2 [102.8.0-1] - Update to 102.8.0 build1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-25732 CVE-2023-25739 CVE-2023-25737 CVE-2023-25742 CVE-2023-25743 CVE-2023-25735 CVE-2023-0767 CVE-2023-25729 CVE-2023-25728 CVE-2023-25730 CVE-2023-25744 CVE-2023-25746 Oracle Linux 7 [102.8.0-2.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.8.0-2] - Update to 102.8.0 build2 [102.8.0-1] - Update to 102.8.0 build1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-25729 CVE-2023-25743 CVE-2023-25737 CVE-2023-25742 CVE-2023-25732 CVE-2023-25746 CVE-2023-0767 CVE-2023-25728 CVE-2023-25730 CVE-2023-25735 CVE-2023-25739 CVE-2023-25744 Oracle Linux 7 [102.8.0-2.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [102.8.0-2] - Update to 102.8.0 build2 [102.8.0-1] - Update to 102.8.0 build1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-0767 CVE-2023-25730 CVE-2023-25737 CVE-2023-0616 CVE-2023-25746 CVE-2023-25735 CVE-2023-25728 CVE-2023-25742 CVE-2023-25743 CVE-2023-25744 CVE-2023-25729 CVE-2023-25732 CVE-2023-25739 Oracle Linux 8 [102.8.0-2.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.8.0-2] - Update to 102.8.0 build2 [102.8.0-1] - Update to 102.8.0 build1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-25737 CVE-2023-25742 CVE-2023-25728 CVE-2023-25743 CVE-2023-25746 CVE-2023-25729 CVE-2023-0767 CVE-2023-25739 CVE-2023-0616 CVE-2023-25730 CVE-2023-25732 CVE-2023-25744 CVE-2023-25735 Oracle Linux 9 [102.8.0-2.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.8.0-2] - Update to 102.8.0 build2 [102.8.0-1] - Update to 102.8.0 build1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-25732 CVE-2023-25728 CVE-2023-25737 CVE-2023-25742 CVE-2023-25743 CVE-2023-25739 CVE-2023-0767 CVE-2023-25729 CVE-2023-25746 CVE-2023-25730 CVE-2023-0616 CVE-2023-25735 CVE-2023-25744 Oracle Linux 8 [4.18.0-425.13.1_7.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3 - Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652] [4.18.0-425.13.1_7] - mm/cgroup/reclaim: fix dirty pages throttling on cgroup v1 (Waiman Long) [2160221] - mm: vmscan: remove deadlock due to throttling failing to make progress (Waiman Long) [2160221] - mm: vmscan: reduce throttling due to a failure to make progress -fix (Waiman Long) [2160221] - mm: vmscan: Reduce throttling due to a failure to make progress (Waiman Long) [2160221] - mm/vmscan: delay waking of tasks throttled on NOPROGRESS (Waiman Long) [2160221] - mm/vmscan: increase the timeout if page reclaim is not making progress (Waiman Long) [2160221] - mm/vmscan: centralise timeout values for reclaim_throttle (Waiman Long) [2160221] - mm/page_alloc: remove the throttling logic from the page allocator (Waiman Long) [2160221] - mm/writeback: throttle based on page writeback instead of congestion (Waiman Long) [2160221] - mm/vmscan: throttle reclaim when no progress is being made (Waiman Long) [2160221] - mm/vmscan: throttle reclaim and compaction when too may pages are isolated (Waiman Long) [2160221] - mm/vmscan: throttle reclaim until some writeback completes if congested (Waiman Long) [2160221] - mm/vmscan.c: delete or fix duplicated words (Waiman Long) [2160221] - mm,page_alloc: PF_WQ_WORKER threads must sleep at should_reclaim_retry() (Nico Pache) [2160221] - ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) [2155797 2139881] - mm/mremap: hold the rmap lock in write mode when moving page table entries. (Waiman Long) [2140944] {CVE-2022-41222} - mm/mremap: use pmd/pud_poplulate to update page table entries (Waiman Long) [2140944] {CVE-2022-41222} - mm/mremap: don't enable optimized PUD move if page table levels is 2 (Waiman Long) [2140944] {CVE-2022-41222} - mm/mremap: convert huge PUD move to separate helper (Waiman Long) [2140944] {CVE-2022-41222} - mm/mremap: fix BUILD_BUG_ON() error in get_extent (Waiman Long) [2140944] {CVE-2022-41222} - mm/mremap.c: fix extent calculation (Waiman Long) [2140944] {CVE-2022-41222} - x86: mremap speedup - Enable HAVE_MOVE_PUD (Waiman Long) [2140944] {CVE-2022-41222} - mm: speedup mremap on 1GB or larger regions (Waiman Long) [2140944] {CVE-2022-41222} - mm/mremap: start addresses are properly aligned (Waiman Long) [2140944] {CVE-2022-41222} - mm/mremap: calculate extent in one place (Waiman Long) [2140944] {CVE-2022-41222} - mm/mremap: it is sure to have enough space when extent meets requirement (Waiman Long) [2140944] {CVE-2022-41222} - s390/boot: add secure boot trailer (Tobias Huschle) [2151530 2141967] - i40e: Fix VF hang when reset is triggered on another VF (Ivan Vecera) [2160460 2103801] - i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Prarit Bhargava) [2154388 2119066] {CVE-2022-2873} - iavf: schedule watchdog immediately when changing primary MAC (Michal Schmidt) [2163257 2152493] - iavf: Move netdev_update_features() into watchdog task (Michal Schmidt) [2163257 2152493] - iavf: fix temporary deadlock and failure to set MAC address (Michal Schmidt) [2163257 2152493] - iavf: Fix error handling in iavf_init_module() (Michal Schmidt) [2163257 2152493] - iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) [2149474 2118428] - x86/pci/xen: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428] - iommu/intel: Use msi_msg shadow structs (Jerry Snitselaar) [2149474 2118428] - PCI: MSI: Fix Kconfig dependencies for PCI_MSI_ARCH_FALLBACKS (Jerry Snitselaar) [2149474 2118428] - x86/apic/msi: Unbreak DMAR and HPET MSI (Jerry Snitselaar) [2149474 2118428] - iommu/amd: Remove domain search for PCI/MSI (Jerry Snitselaar) [2149474 2118428] - iommu/vt-d: Remove domain search for PCI/MSI[X] (Jerry Snitselaar) [2149474 2118428] - x86/irq: Make most MSI ops XEN private (Jerry Snitselaar) [2149474 2118428] - x86/irq: Cleanup the arch_*_msi_irqs() leftovers (Jerry Snitselaar) [2149474 2118428] - PCI/MSI: Make arch_.*_msi_irq[s] fallbacks selectable (Jerry Snitselaar) [2149474 2118428] - x86/xen: Wrap XEN MSI management into irqdomain (Jerry Snitselaar) [2149474 2118428] - x86/xen: Consolidate XEN-MSI init (Jerry Snitselaar) [2149474 2118428] - x86/xen: Rework MSI teardown (Jerry Snitselaar) [2149474 2118428] - x86/xen: Make xen_msi_init() static and rename it to xen_hvm_msi_init() (Jerry Snitselaar) [2149474 2118428] - x86/irq: Move apic_post_init() invocation to one place (Jerry Snitselaar) [2149474 2118428] - x86/msi: Use generic MSI domain ops (Jerry Snitselaar) [2149474 2118428] - x86/msi: Remove pointless vcpu_affinity callback (Jerry Snitselaar) [2149474 2118428] - iommu/vt-d: Fix compile error with CONFIG_PCI_ATS not set (Myron Stowe) [2149474 2118428] - iommu/vt-d: Cure VF irqdomain hickup (Myron Stowe) [2149474 2118428] - x86/pci: Set default irq domain in pcibios_add_device() (Myron Stowe) [2149474 2118428] - iommm/amd: Store irq domain in struct device (Myron Stowe) [2149474 2118428] - iommm/vt-d: Store irq domain in struct device (Myron Stowe) [2149474 2118428] - PCI/MSI: Provide pci_dev_has_special_msi_domain() helper (Myron Stowe) [2149474 2118428] - x86/msi: Consolidate MSI allocation (Myron Stowe) [2149474 2118428] - PCI/MSI: Rework pci_msi_domain_calc_hwirq() (Myron Stowe) [2149474 2118428] - x86/irq: Consolidate UV domain allocation (Myron Stowe) [2149474 2118428] - x86/irq: Consolidate DMAR irq allocation (Myron Stowe) [2149474 2118428] - x86_ioapic_Consolidate_IOAPIC_allocation (Myron Stowe) [2149474 2118428] - x86/msi: Consolidate HPET allocation (Myron Stowe) [2149474 2118428] - iommu/irq_remapping: Consolidate irq domain lookup (Myron Stowe) [2149474 2118428] - iommu/amd: Consolidate irq domain getter (Myron Stowe) [2149474 2118428] - iommu/vt-d: Consolidate irq domain getter (Myron Stowe) [2149474 2118428] - x86/irq: Add allocation type for parent domain retrieval (Myron Stowe) [2149474 2118428] - irqdomain: Export irq_domain_update_bus_token (Myron Stowe) [2149474 2118428] - gitlab-ci: use CI templates from production branch (Michael Hofmann) - iavf: remove INITIAL_MAC_SET to allow gARP to work properly (Stefan Assmann) [2149745 1938635] - Revert 'scsi: iscsi: ql4xxx: Use per-session workqueue for unbinding' (Chris Leech) [2152734 2122624] - Revert 'scsi: iscsi: Use the session workqueue for recovery' (Chris Leech) [2152734 2122624] - arm64/bpf: Remove 128MB limit for BPF JIT programs (Yauheni Kaliuta) [2152138 2140163] - bpf: Define bpf_jit_alloc_exec_limit for arm64 JIT (Yauheni Kaliuta) [2152138 2140163] - arm64: extable: add type and data fields (Yauheni Kaliuta) [2152138 2140163] - arm64: extable: use ex for exception_table_entry (Yauheni Kaliuta) [2152138 2140163] - arm64: extable: make fixup_exception() return bool (Yauheni Kaliuta) [2152138 2140163] - arm64: extable: consolidate definitions (Yauheni Kaliuta) [2152138 2140163] - arm64: kvm: use kvm_exception_table_entry (Yauheni Kaliuta) [2152138 2140163] - be2net: Fix buffer overflow in be_get_module_eeprom (Josef Oskera) [2160182 2126917] [4.18.0-425.12.1_7] - x86/fpu: Prevent FPU state corruption (Oleksandr Natalenko) [2134586 2130890] - x86/fpu: Drop fpregs lock before inheriting FPU permissions (Eder Zulian) [2154460 2153549] - kernel-doc: fix undefined args variable (Jan Stancek) [2157905 2134954] - mm: memcontrol: fix potential oom_lock recursion deadlock (Waiman Long) [2157922 2138886] - memcg: prohibit unconditional exceeding the limit of dying tasks (Waiman Long) [2157922 2138886] - mm, oom: do not trigger out_of_memory from the #PF (Waiman Long) [2157922 2138886] - mm, oom: pagefault_out_of_memory: don't force global OOM for dying tasks (Waiman Long) [2157922 2138886] - mm: memcontrol: don't count limit-setting reclaim as memory pressure (Waiman Long) [2157922 2138886] - KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158813 2151854] - net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155437 2151722] - mei: me: add adler lake point S DID (Prarit Bhargava) [2141783 2141602] - PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275] - PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275] - PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275] - PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155289 2100275] - PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155289 2100275] - PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155289 2100275] - drm/ast: Support multiple outputs (Jarod Wilson) [2149287 2147553] [4.18.0-425.11.1_7] - NFSD: Protect against send buffer overflow in NFSv3 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945} - NFSD: Protect against send buffer overflow in NFSv2 READ (Scott Mayhew) [2143172 2141774] {CVE-2022-43945} - NFSD: Protect against send buffer overflow in NFSv3 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945} - NFSD: Protect against send buffer overflow in NFSv2 READDIR (Scott Mayhew) [2143172 2141774] {CVE-2022-43945} - SUNRPC: Fix svcxdr_init_encode's buflen calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945} - SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Scott Mayhew) [2143172 2141774] {CVE-2022-43945} - panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) [2139580 2134126] - kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) [2139580 2134126] - kexec: move locking into do_kexec_load (Valentin Schneider) [2139580 2134126] - vdpa/mlx5: re-create forwarding rules after mac modified (Laurent Vivier) [2152912 2145136] - timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Waiman Long) [2153653 2108387] - irq: Call tick_irq_enter() inside HARDIRQ_OFFSET (Waiman Long) [2153653 2108387] - irqtime: Move irqtime entry accounting after irq offset incrementation (Waiman Long) [2153653 2108387] - sched/vtime: Consolidate IRQ time accounting (Waiman Long) [2153653 2108387] - s390/vtime: Use the generic IRQ entry accounting (Waiman Long) [2153653 2108387] - sched/cputime: Remove symbol exports from IRQ time accounting (Waiman Long) [2153653 2108387] - genirq/irqdomain: Don't try to free an interrupt that has no mapping (Waiman Long) [2153653 2108387] - genirq: Provide __irq_enter/exit_raw() (Waiman Long) [2153653 2108387] - powerpc/time: Only set CONFIG_ARCH_HAS_SCALED_CPUTIME on PPC64 (Waiman Long) [2153653 2108387] - powerpc/time: isolate scaled cputime accounting in dedicated functions. (Waiman Long) [2153653 2108387] - PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155280 2144708] - PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155280 2144708] - PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155280 2144708] - net/mlx5e: TC, Reject forwarding from internal port to internal port (Mohammad Kabat) [2141959 2131345] - hv_netvsc: Fix race between VF offering and VF association message from host (Mohammed Gamal) [2155272 2149279] - x86/mce: Reduce number of machine checks taken during recovery (Prarit Bhargava) [2137592 2104388] - cgroup/cpuset: Reduce cpuset_rwsem writer latency (Waiman Long) [2153108 2149031] - rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2153108 2149031] - rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2153108 2149031] - rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2153108 2149031] - rcu: Fix macro name CONFIG_TASKS_RCU_TRACE (Waiman Long) [2153108 2149031] - rcu: Fix stall-warning deadlock due to non-release of rcu_node ->lock (Waiman Long) [2153108 2149031] - rcu: Fix to include first blocked task in stall warning (Waiman Long) [2153108 2149031] - cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (Waiman Long) [2153108 2149031] - cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all() (Waiman Long) [2153108 2149031] cpus_read_lock() deadlock (Waiman Long) [2153108 2149031] - cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Waiman Long) [2153108 2149031] - cgroup/cpuset: Fix a race between cpuset_attach() and cpu hotplug (Waiman Long) [2153108 2149031] - cgroup: reduce dependency on cgroup_mutex (Waiman Long) [2153108 2149031] - sunrpc: Set sk_allocation to GFP_NOFS to avoid using current->task_frag. (Guillaume Nault) [2153230 2089660] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-2873 CVE-2022-41222 CVE-2022-43945 Oracle Linux 8 [3.6.8-48.0.1] - Add Oracle Linux distribution in platform.py [Orabug: 20812544] [3.6.8-48.1] - Security fixes for CVE-2020-10735, CVE-2021-28861 and CVE-2022-45061 Resolves: rhbz#1834423, rhbz#2120642, rhbz#2144072 MODERATE Copyright 2023 Oracle, Inc. CVE-2021-28861 CVE-2022-45061 CVE-2020-10735 Oracle Linux 8 [39.2.0-6.1] - Security fix for CVE-2022-40897 Resolves: rhbz#2158559 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-40897 Oracle Linux 8 [239-68.0.2] - Backport upstream pstore dmesg fix [Orabug: 34850699] - Standardize ioctl (BTRFS_IOC_QGROUP_CREATE) check and return -ENOTCONN, if quota is not enabled [Orabug: 34694253] - Disable unprivileged BPF by default [Orabug: 32870980] - backport upstream pstore tmpfiles patch [Orabug: 31420486] - udev rules: fix memory hot add and remove [Orabug: 31310273] - fix to enable systemd-pstore.service [Orabug: 30951066] - journal: change support URL shown in the catalog entries [Orabug: 30853009] - fix to generate systemd-pstore.service file [Orabug: 30230056] - fix _netdev is missing for iscsi entry in /etc/fstab (tony.l.lam@oracle.com) [Orabug: 25897792] - set 'RemoveIPC=no' in logind.conf as default for OL7.2 [Orabug: 22224874] - allow dm remove ioctl to co-operate with UEK3 (Vaughan Cao) [Orabug: 18467469] - add hv dynamic memory support (Jerry Snitselaar) [Orabug: 18621475] - Backport upstream patches for the new systemd-pstore tool (Eric DeVolder) [OraBug: 30230056] [239-68.4] - basic: add STRERROR() wrapper for strerror_r() (#2155519) - coredump: put context array into a struct (#2155519) - coredump: do not allow user to access coredumps with changed uid/gid/capabilities (#2155519) [239-68.3] - core: bring manager_startup() and manager_reload() more inline (#2164049) MODERATE Copyright 2023 Oracle, Inc. CVE-2022-4415 Oracle Linux 8 [4.16.4-4.0.1] - Gluster volumes not accessible via Samba due to missing samba-vfs-glusterfs in OL8 [Orabug: 30205755] [4.16.4-4] - related: rhbz#2154369 - Add additional patch for CVE-2022-38023 [4.16.4-3] - resolves: rhbz#2154369 - Fix CVE-2022-38023 [4.16.4-2] - resolves: rhbz#2120956 - Do not require samba package in python3-samba [4.16.4-1] - Rebase to version 4.16.4 - resolves: rhbz#2108331 - Fix CVE-2022-32742 [4.16.3-0] - related: rhbz#2077468 - Rebase Samba to 4.16.3 - resolves: rhbz#2106672 - The pcap background queue process should not be stopped - resolves: rhbz#2106263 - Fix crash in rpcd_classic - resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name [4.16.2-1] - resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout [4.16.2-0] - Fix rpminspect abidiff - related: rhbz#2077468 - Rebase Samba to 4.16.2 [4.16.1-0] - Update to Samba 4.16.1 - resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-38023 Oracle Linux 8 [1.30-6.1] - Fix CVE-2022-48303 - Resolves: CVE-2022-48303 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-48303 Oracle Linux 8 php [8.0.27-1] - rebase to 8.0.27 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-37454 CVE-2022-31631 CVE-2022-31630 CVE-2022-31628 CVE-2022-31629 Oracle Linux 8 httpd [2.4.37-51.0.1.1] - Set vstring per ORACLE_SUPPORT_PRODUCT [Orabug: 29892262] - Replace index.html with Oracle's index page oracle_index.html [2.4.37-51.1] - Resolves: #2165967 - prevent sscg creating /dhparams.pem - Resolves: #2165976 - CVE-2006-20001 httpd: mod_dav: out-of-bounds read/write of zero byte - Resolves: #2165977 - CVE-2022-37436 httpd: mod_proxy: HTTP response splitting - Resolves: #2165978 - CVE-2022-36760 httpd: mod_proxy_ajp: Possible request smuggling MODERATE Copyright 2023 Oracle, Inc. CVE-2006-20001 CVE-2022-37436 CVE-2022-36760 Oracle Linux 8 [2.36.7-1.2] - Add patch for CVE-2023-23529 Resolves: #2170007 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-23529 Oracle Linux 9 [2.36.7-1.2] - Add patch for CVE-2023-23529 Resolves: #2170000 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-23529 Oracle Linux 9 [3.0.1-47.0.1] - Replace upstream references [Orabug: 34340177] [1:3.0.1-47] - Fixed X.509 Name Constraints Read Buffer Overflow Resolves: CVE-2022-4203 - Fixed Timing Oracle in RSA Decryption Resolves: CVE-2022-4304 - Fixed Double free after calling PEM_read_bio_ex Resolves: CVE-2022-4450 - Fixed Use-after-free following BIO_new_NDEF Resolves: CVE-2023-0215 - Fixed Invalid pointer dereference in d2i_PKCS7 functions Resolves: CVE-2023-0216 - Fixed NULL dereference validating DSA public key Resolves: CVE-2023-0217 - Fixed X.400 address type confusion in X.509 GeneralName Resolves: CVE-2023-0286 - Fixed NULL dereference during PKCS7 data verification Resolves: CVE-2023-0401 [1:3.0.1-46] - Refactor OpenSSL fips module MAC verification Resolves: rhbz#2158412 - Disallow SHAKE in RSA-OAEP decryption in FIPS mode Resolves: rhbz#2144010 [1:3.0.1-45] - Add support of X25519 and X448 'group' parameter in EVP_PKEY_CTX objects Resolves: rhbz#2149010 - Fix explicit indicator for PSS salt length in FIPS mode when used with negative magic values Resolves: rhbz#2144012 - Update change to default PSS salt length with patch state from upstream Related: rhbz#2144012 [1:3.0.1-44] - SHAKE-128/256 are not allowed with RSA in FIPS mode Resolves: rhbz#2144010 - Avoid memory leaks in TLS Resolves: rhbz#2144008 - FIPS RSA CRT tests must use correct parameters Resolves: rhbz#2144006 - FIPS-140-3 permits only SHA1, SHA256, and SHA512 for DRBG-HASH/DRBG-HMAC Resolves: rhbz#2144017 - Remove support for X9.31 signature padding in FIPS mode Resolves: rhbz#2144015 - Add explicit indicator for SP 800-108 KDFs with short key lengths Resolves: rhbz#2144019 - Add explicit indicator for HMAC with short key lengths Resolves: rhbz#2144000 - Set minimum password length for PBKDF2 in FIPS mode Resolves: rhbz#2144003 - Add explicit indicator for PSS salt length in FIPS mode Resolves: rhbz#2144012 - Clamp default PSS salt length to digest size for FIPS 186-4 compliance Related: rhbz#2144012 - Forbid short RSA keys for key encapsulation/decapsulation in FIPS mode Resolves: rhbz#2145170 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-0401 CVE-2022-4450 CVE-2023-0216 CVE-2023-0217 CVE-2023-0286 CVE-2023-0215 CVE-2022-4304 CVE-2022-4203 Oracle Linux 9 - [5.14.0-162.18.1_1.OL9] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5 - Remove nmap references from kernel (Mridula Shastry) [Orabug: 34313944] - Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535] [5.14.0-162.18.1_1] - powerpc/pseries: Use lparcfg to reconfig VAS windows for DLPAR CPU (Steve Best) [2154305 2133101] - redhat/configs: Change the amd-pstate driver from builtin to loadable (David Arcari) [2151274 2143793] - powerpc/pseries/mobility: set NMI watchdog factor during an LPM (Steve Best) [2140085 2122830] - powerpc/watchdog: introduce a NMI watchdog's factor (Steve Best) [2140085 2122830] - watchdog: export lockup_detector_reconfigure (Steve Best) [2140085 2122830] - powerpc/mobility: wait for memory transfer to complete (Steve Best) [2140085 2122830] [5.14.0-162.17.1_1] - PCI: hv: Only reuse existing IRTE allocation for Multi-MSI (Emanuele Giuseppe Esposito) [2155459 2100404] - PCI: hv: Fix the definition of vector in hv_compose_msi_msg() (Emanuele Giuseppe Esposito) [2155459 2100404] - PCI: hv: Fix interrupt mapping for multi-MSI (Emanuele Giuseppe Esposito) [2155459 2100404] - PCI: hv: Reuse existing IRTE allocation in compose_msi_msg() (Emanuele Giuseppe Esposito) [2155459 2100404] - PCI: hv: Fix hv_arch_irq_unmask() for multi-MSI (Emanuele Giuseppe Esposito) [2155459 2100404] - PCI: hv: Fix multi-MSI to allow more than one MSI vector (Emanuele Giuseppe Esposito) [2155459 2100404] - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152580 2152581] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152580 2152581] {CVE-2022-4378} - blk-mq: run queue no matter whether the request is the last request (Ming Lei) [2162535 2118511] - netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits (Florian Westphal) [2161724 2161725] {CVE-2023-0179} - nvme-tcp: fix regression that causes sporadic requests to time out (Gopal Tiwari) [2161344 2124526] - netfs: Fix dodgy maths (Xiubo Li) [2161418 2138981] - netfs: Fix missing xas_retry() calls in xarray iteration (Xiubo Li) [2161418 2138981] [5.14.0-162.16.1_1] - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Ricardo Robaina) [2152929 2152931] {CVE-2022-3564} - gitlab-ci: use CI templates from production branch (Michael Hofmann) [5.14.0-162.15.1_1] - KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) [2158815 2140899] - x86/fpu: Do not leak fpstate pointer on fork (Rafael Aquini) [2133083 2120448] - Revert 'usb: typec: ucsi: add a common function ucsi_unregister_connectors()' (Torez Smith) [2153277 2113003] - i2c: ismt: Fix an out-of-bounds bug in ismt_access() (David Arcari) [2154859 2119067] {CVE-2022-2873} [5.14.0-162.14.1_1] - NFSD: fix use-after-free in __nfs42_ssc_open() (Benjamin Coddington) [2152815 2152816] {CVE-2022-4379} - PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (Mohammed Gamal) [2155930 2155277] - PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (Mohammed Gamal) [2155930 2155277] - PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (Mohammed Gamal) [2155930 2155277] - sched/core: Always flush pending blk_plug (Phil Auld) [2153792 2115520] [5.14.0-162.13.1_1] - scsi: qla2xxx: Fix crash when I/O abort times out (Nilesh Javali) [2152178 2115892] - net: mana: Fix race on per-CQ variable napi work_done (Emanuele Giuseppe Esposito) [2155145 2153431] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-0179 CVE-2022-4378 CVE-2022-3564 CVE-2022-4379 CVE-2022-2873 Oracle Linux 9 [53.0.0-10.1] - Security fix for CVE-2022-40897 Resolves: rhbz#2158559 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-40897 Oracle Linux 9 [3.9.14-1.2] - Security fix for CVE-2022-45061 Resolves: rhbz#2144072 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-45061 Oracle Linux 9 [250-12.0.2.3] - Backport upstream pstore dmesg fix [Orabug: 34868110] - Remove upstream references [Orabug: 33995357] - Disable unprivileged BPF by default [Orabug: 32870980] - udev rules: fix memory hot add and remove [Orabug: 31310273] - set 'RemoveIPC=no' in logind.conf as default for OL7.2 [Orabug: 22224874] - allow dm remove ioctl to co-operate with UEK3 (Vaughan Cao) [Orabug: 18467469] - fix _netdev is missing for iscsi entry in /etc/fstab (tony.l.lam@oracle.com) [Orabug: 25897792] - shutdown: get only active md arrays. [Orabug: 34467234] [250-12.3] - shared/json: allow json_variant_dump() to return an error (#2149074) - shared/json: use different return code for empty input (#2149074) - coredump: avoid deadlock when passing processed backtrace data (#2149074) - test: disable flaky subtests that require udevadm wait/lock (#2149074) [250-12.2] - coredump: adjust whitespace (#2155516) - basic: add STRERROR() wrapper for strerror_r() (#2155516) - coredump: do not allow user to access coredumps with changed uid/gid/capabilities (#2155516) - Packit: build SRPMs in Copr (#2155516) - test: support non-summer time (#2155516) - test: bump the base VM memory to 768M (#2155516) - test: don't overwrite existing (#2155516) MODERATE Copyright 2023 Oracle, Inc. CVE-2022-45873 CVE-2022-4415 Oracle Linux 9 [5.4.4-2] - Resolves CVE-2021-43519 [5.4.4-1] - Rebase to lua 5.4.4 - Resolves CVE-2021-44964 [5.4.2-7] - Fix up CVE-2022-33099 patch [5.4.2-6] - Enable gating [5.4.2-5] - apply upstream fix for CVE-2022-33099 MODERATE Copyright 2023 Oracle, Inc. CVE-2021-43519 CVE-2021-44964 Oracle Linux 9 [8.2.2637-20.0.1] - Remove upstream references [Orabug: 31197557] [2:8.2.2637-20] - CVE-2022-47024 vim: no check if the return value of XChangeGC() is NULL [2:8.2.2637-19] - CVE-2022-1785 vim: Out-of-bounds Write - CVE-2022-1897 vim: out-of-bounds write in vim_regsub_both() in regexp.c - CVE-2022-1927 vim: buffer over-read in utf_ptr2char() in mbyte.c [2:8.2.2637-18] - CVE-2022-1621 vim: heap buffer overflow - CVE-2022-1629 vim: buffer over-read [2:8.2.2637-17] - CVE-2022-1154 vim: use after free in utf_ptr2char - CVE-2022-1420 vim: Out-of-range Pointer Offset MODERATE Copyright 2023 Oracle, Inc. CVE-2022-47024 Oracle Linux 9 [2:1.34-6] - Fix CVE-2022-48303 - Resolves: CVE-2022-48303 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-48303 Oracle Linux 9 [8.0.27-1] - rebase to 8.0.27 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-37454 CVE-2022-31631 CVE-2022-31629 CVE-2022-31628 CVE-2022-31630 Oracle Linux 9 [2.4.53-7.0.1] - Replace index.html with Oracle's index page oracle_index.html. [2.4.53-7.1] - Resolves: #2165975 - prevent sscg creating /dhparams.pem - Resolves: #2165970 - CVE-2006-20001 httpd: mod_dav: out-of-bounds read/write of zero byte - Resolves: #2165973 - CVE-2022-37436 httpd: mod_proxy: HTTP response splitting - Resolves: #2165974 - CVE-2022-36760 httpd: mod_proxy_ajp: Possible request smuggling MODERATE Copyright 2023 Oracle, Inc. CVE-2022-37436 CVE-2022-36760 CVE-2006-20001 Oracle Linux 7 [1.8.3.1-24] - Fixes CVE-2022-23521 and CVE-2022-41903 - Resolves: #2162067 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-41903 CVE-2022-23521 Oracle Linux 9 [115-6.0.1] - Update Oracle Linux test certificates [Orabug: 31928433] [115-6] - Fix chmod invocation - Resolves: CVE-2022-3560 [115-5] - Deprecate pesign-authorize and drop ACL use - Resolves: CVE-2022-3560 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-3560 Oracle Linux 9 [2.0.90-6] - Fix CVE-2021-46822 - Resolves: CVE-2021-46822 MODERATE Copyright 2023 Oracle, Inc. CVE-2021-46822 Oracle Linux 7 [4.10.16-24.0.1] - Fix memory leak in _nss_winbind_initgroups_dyn [Orabug: 34228871] [4.10.16-24] - related: #2154364 - Add additional patches for CVE-2022-38023 [4.10.16-23] - resolves: #2154364 - Fix CVE-2022-38023 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-38023 Oracle Linux 7 [3.10.0-1160.88.1.0.1.OL7] - debug: lock down kgdb [Orabug: 34270798] {CVE-2022-21499} [3.10.0-1160.88.1.OL7] - Update Oracle Linux certificates (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and shim-x64 <= 15-2.0.9 - Update oracle(kernel-sig-key) value to match new certificate (Ilya Okomin) [3.10.0-1160.88.1] - KVM: x86: add bit to indicate correct tsc_shift (Marcelo Tosatti) [2152838] - KVM: x86: rewrite handling of scaled TSC for kvmclock (Marcelo Tosatti) [2152838] - KVM: x86: rename argument to kvm_set_tsc_khz (Marcelo Tosatti) [2152838] [3.10.0-1160.87.1] - Revert 'openvswitch: fix flow actions reallocation' (Rado Vrbovsky) [2141780] {CVE-2022-2639} - Revert 'openvswitch: fix OOB access in reserve_sfa_size()' (Rado Vrbovsky) [2141780] {CVE-2022-2639} - kvm/emulate: Fix SETcc emulation function offsets with SLS (Vitaly Kuznetsov) [2143438] - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Rafael Aquini) [2138620] {CVE-2022-42703} - mm, rmap: handle anon_vma_prepare() common case inline (Rafael Aquini) [2138620] {CVE-2022-42703} - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152565] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152565] {CVE-2022-4378} - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Nilesh Javali) [2092105] - fs: move S_ISGID stripping into the vfs_*() helpers (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: Add missing umask strip in vfs_tmpfile (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} - fs: add mode_strip_sgid() helper (Andrey Albershteyn) [2159946] {CVE-2018-13405 CVE-2021-4037} [3.10.0-1160.86.1] - openvswitch: fix OOB access in reserve_sfa_size() (Rado Vrbovsky) [2141780] {CVE-2022-2639} - openvswitch: fix flow actions reallocation (Rado Vrbovsky) [2141780] {CVE-2022-2639} - gitlab-ci: use CI templates from production branch (Michael Hofmann) - mm: prevent page_frag_alloc() from corrupting the memory (Rafael Aquini) [2141062] - mm: Use fixed constant in page_frag_alloc instead of size + 1 (Rafael Aquini) [2141062] - mm: page_alloc: fix ref bias in page_frag_alloc() for 1-byte allocs (Rafael Aquini) [2141062] - x86/pat: Pass valid address to sanitize_phys() (Jeff Moyer) [1974485] [3.10.0-1160.85.1] - sctp: do asoc update earlier in sctp_sf_do_dupcook_b (Xin Long) [2054037] - sctp: do asoc update earlier in sctp_sf_do_dupcook_a (Xin Long) [2054037] - sctp: handle errors when updating asoc (Xin Long) [2054037] - sctp: no need to check assoc id before calling sctp_assoc_set_id (Xin Long) [2054037] - s390/topology: fix warning when disabling cpus (Tobias Huschle) [2071980] [3.10.0-1160.84.1] - blk-mq: fix flush-rq race (Ming Lei) [2088029] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [2154243] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-4378 CVE-2022-42703 Oracle Linux 7 [0.109-11.0.1] - RPM macro fix (Petr Benes) - updates for Oracle Linux test certificate (Alexey Petrenko) - update Oracle Linux certificates (Alexey Petrenko) [0.109-11] - Backport newer, deprecated pesign-authorize - Resolves: CVE-2022-3560 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-3560 Oracle Linux 7 [1.2.7-21] - Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c - Resolves: CVE-2022-37434 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-37434 Oracle Linux 8 [7.61.1-25.el8_7.3] - fix HTTP multi-header compression denial of service (CVE-2023-23916) MODERATE Copyright 2023 Oracle, Inc. CVE-2023-23916 Oracle Linux 9 [3.7.6-18] - Update gnutls-3.7.8-fips-pct-dh.patch to the upstream version (#2168610) [3.7.6-17] - Fix timing side-channel in TLS RSA key exchange (#2162600) [3.7.6-16] - fips: extend PCT to DH key generation (#2168610) [3.7.6-14] - fips: remove library path checking from FIPS integrity check (#2149638) - fips: rename hmac file to its previous name (#2149640) [3.7.6-13] - cipher: add restriction on CCM tag length under FIPS mode (#2144535) - nettle: mark non-compliant RSA-PSS salt length to be not-approved (#2144537) MODERATE Copyright 2023 Oracle, Inc. CVE-2023-0361 Oracle Linux 7 [4.14.35-2047.521.4.el7] - tcp: Tunables for TCP delayed ack (min and max) timers (Venkat Venkatsubra) [Orabug: 34883100] [4.14.35-2047.521.3.el7] - Revert 'random: use expired timer rather than wq for mixing fast pool' (Saeed Mirzamohammadi) [Orabug: 34918228] [4.14.35-2047.521.2.el7] - RDS/IB: Fix the misplaced counter update rdma dto path (Devesh Sharma) [Orabug: 34865849] - IB/ipoib: Do not warn if IPoIB debugfs doesn't exist (Alaa Hleihel) [Orabug: 34780038] - proc: proc_skip_spaces() shouldn't think it is working on C strings (Linus Torvalds) [Orabug: 34882780] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Linus Torvalds) [Orabug: 34882780] {CVE-2022-4378} [4.14.35-2047.521.1.el7] - net/mlx5: Use debug message instead of warn (Yishai Hadas) [Orabug: 34834553] - hugetlbfs: don't delete error page from pagecache (James Houghton) [Orabug: 34772618] - mm: shmem: don't truncate page if memory failure happens (Yang Shi) [Orabug: 34772618] - mm: hwpoison: refactor refcount check handling (Yang Shi) [Orabug: 34772618] - kvm: x86: limit the maximum number of vPMU fixed counters to 3 (Like Xu) [Orabug: 34756992] - LTS version: v4.14.298 (Saeed Mirzamohammadi) - can: rcar_canfd: rcar_canfd_handle_global_receive(): fix IRQ storm on global FIFO receive (Biju Das) - net: ehea: fix possible memory leak in ehea_register_port() (Yang Yingliang) - openvswitch: switch from WARN to pr_warn (Aaron Conole) - ALSA: aoa: Fix I2S device accounting (Takashi Iwai) - ALSA: aoa: i2sbus: fix possible memory leak in i2sbus_add_dev() (Yang Yingliang) - PM: domains: Fix handling of unavailable/disabled idle states (Sudeep Holla) - net: ksz884x: fix missing pci_disable_device() on error in pcidev_init() (Yang Yingliang) - i40e: Fix flow-type by setting GL_HASH_INSET registers (Slawomir Laba) - i40e: Fix ethtool rx-flow-hash setting for X722 (Slawomir Laba) - media: videodev2.h: V4L2_DV_BT_BLANKING_HEIGHT should check 'interlaced' (Hans Verkuil) - media: v4l2-dv-timings: add sanity checks for blanking values (Hans Verkuil) - media: vivid: dev->bitmap_cap wasn't freed in all cases (Hans Verkuil) - media: vivid: s_fbuf: add more sanity checks (Hans Verkuil) - PM: hibernate: Allow hybrid sleep to work with s2idle (Mario Limonciello) - can: mscan: mpc5xxx: mpc5xxx_can_probe(): add missing put_clock() in error path (Dongliang Mu) - tcp: fix indefinite deferral of RTO with SACK reneging (Neal Cardwell) - net: lantiq_etop: don't free skb when returning NETDEV_TX_BUSY (Zhang Changzhong) - kcm: annotate data-races around kcm->rx_wait (Eric Dumazet) - kcm: annotate data-races around kcm->rx_psock (Eric Dumazet) - amd-xgbe: add the bit rate quirk for Molex cables (Raju Rangoju) - amd-xgbe: fix the SFP compliance codes check for DAC cables (Raju Rangoju) - x86/unwind/orc: Fix unreliable stack dump with gcov (Chen Zhongjin) - ALSA: ac97: fix possible memory leak in snd_ac97_dev_register() (Yang Yingliang) - arc: iounmap() arg is volatile (Randy Dunlap) - drm/msm: Fix return type of mdp4_lvds_connector_mode_valid (Nathan Huckleberry) - net: ieee802154: fix error return code in dgram_bind() (Wei Yongjun) - mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages (Rik van Riel) - xen/gntdev: Prevent leaking grants (M. Vefa Bicakci) - Xen/gntdev: don't ignore kernel unmapping error (Jan Beulich) - s390/futex: add missing EX_TABLE entry to __futex_atomic_op() (Heiko Carstens) - kernfs: fix use-after-free in __kernfs_remove (Christian A. Ehrhardt) - mmc: core: Fix kernel panic when remove non-standard SDIO card (Matthew Ma) - drm/msm/hdmi: fix memory corruption with too many bridges (Johan Hovold) - mac802154: Fix LQI recording (Miquel Raynal) - fbdev: smscufx: Fix several use-after-free bugs (Hyunwoo Kim) - iio: light: tsl2583: Fix module unloading (Shreeya Patel) - tools: iio: iio_utils: fix digit calculation (Matti Vaittinen) - xhci: Remove device endpoints from bandwidth list when freeing the device (Mathias Nyman) - usb: xhci: add XHCI_SPURIOUS_SUCCESS to ASM1042 despite being a V0.96 controller (Jens Glathe) - usb: bdc: change state when port disconnected (Justin Chen) - usb: dwc3: gadget: Don't set IMI for no_interrupt (Thinh Nguyen) - USB: add RESET_RESUME quirk for NVIDIA Jetson devices in RCM (Hannu Hartikainen) - ALSA: au88x0: use explicitly signed char (Jason A. Donenfeld) - ALSA: Use del_timer_sync() before freeing timer (Steven Rostedt (Google)) - ACPI: video: Force backlight native for more TongFang devices (Werner Sembach) - media: v4l2-mem2mem: Apply DST_QUEUE_OFF_BASE on MMAP buffers across ioctls (Chen-Yu Tsai) - iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) - net: hns: fix possible memory leak in hnae_ae_register() (Yang Yingliang) - net/atm: fix proc_mpc_write incorrect return value (Xiaobo Liu) - HID: magicmouse: Do not set BTN_MOUSE on double report (Jose Exposito) - ACPI: extlog: Handle multiple records (Tony Luck) - btrfs: fix processing of delayed data refs during backref walking (Filipe Manana) - r8152: add PID for the Lenovo OneLink+ Dock (Jean-Francois Le Fillatre) - arm64: errata: Remove AES hwcap for COMPAT tasks (James Morse) - KVM: arm64: vgic: Fix exit condition in scan_its_table() (Eric Ren) - ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS (Kai-Heng Feng) - ata: ahci-imx: Fix MODULE_ALIAS (Alexander Stein) - x86/microcode/AMD: Apply the patch early on every logical thread (Borislav Petkov) - ocfs2: fix BUG when iput after ocfs2_mknod fails (Joseph Qi) - ocfs2: clear dinode links count in case of error (Joseph Qi) - LTS version: v4.14.297 is skipped (Saeed Mirzamohammadi) - LTS version: v4.14.296 (Saeed Mirzamohammadi) - thermal: intel_powerclamp: Use first online CPU as control_cpu (Rafael J. Wysocki) - inet: fully convert sk->sk_rx_dst to RCU rules (Eric Dumazet) - efi: libstub: drop pointless get_memory_map() call (Ard Biesheuvel) - md: Replace snprintf with scnprintf (Saurabh Sengar) - ext4: continue to expand file system when the target size doesn't reach (Jerry Lee ) - net/ieee802154: don't warn zero-sized raw_sendmsg() (Tetsuo Handa) - net: ieee802154: return -EINVAL for unknown addr type (Alexander Aring) - perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc (Adrian Hunter) - usb: idmouse: fix an uninit-value in idmouse_open (Dongliang Mu) - Revert 'usb: storage: Add quirk for Samsung Fit flash' (sunghwan jung) - usb: musb: Fix musb_gadget.c rxstate overflow bug (Robin Guo) - usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info() (Jianglei Nie) - md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d (Logan Gunthorpe) - HID: roccat: Fix use-after-free in roccat_read() (Hyunwoo Kim) - nbd: Fix hung when signal interrupts nbd_start_device_ioctl() (Shigeru Yoshida) - scsi: 3w-9xxx: Avoid disabling device if failing to enable it (Letu Ren) - media: cx88: Fix a null-ptr-deref bug in buffer_prepare() (Zheyu Ma) - ARM: dts: imx6sl: add missing properties for sram (Alexander Stein) - ARM: dts: imx6qp: add missing properties for sram (Alexander Stein) - ARM: dts: imx6dl: add missing properties for sram (Alexander Stein) - ARM: dts: imx6q: add missing properties for sram (Alexander Stein) - ARM: dts: imx7d-sdb: config the max pressure for tsc2046 (Haibo Chen) - drm/amdgpu: fix initial connector audio value (hongao) - platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading (Hans de Goede) - drm/vc4: vec: Fix timings for VEC modes (Mateusz Kwiatkowski) - drm: Prevent drm_copy_field() to attempt copying a NULL pointer (Javier Martinez Canillas) - drm: Use size_t type for len variable in drm_copy_field() (Javier Martinez Canillas) - r8152: Rate limit overflow messages (Andrew Gaul) - Bluetooth: L2CAP: Fix user-after-free (Luiz Augusto von Dentz) - net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory (Liu Jian) - wifi: rt2x00: correctly set BBP register 86 for MT7620 (Daniel Golle) - wifi: rt2x00: set SoC wmac clock register (Daniel Golle) - wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620 (Daniel Golle) - wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620 (Daniel Golle) - can: bcm: check the result of can_send() in bcm_can_tx() (Ziyang Xuan) - Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times (Luiz Augusto von Dentz) - Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create() (Tetsuo Handa) - wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() (Alexander Coffin) - xfrm: Update ipcomp_scratches with NULL when freed (Khalid Masum) - wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg() (Tetsuo Handa) - tcp: annotate data-race around tcp_md5sig_pool_populated (Eric Dumazet) - openvswitch: Fix overreporting of drops in dropwatch (Mike Pattrick) - openvswitch: Fix double reporting of drops in dropwatch (Mike Pattrick) - wifi: brcmfmac: fix invalid address access when enabling SCAN log level (Wright Feng) - NFSD: Return nfserr_serverfault if splice_ok but buf->pages have data (Anna Schumaker) - thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash (Srinivas Pandruvada) - powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue (Chao Qin) - MIPS: BCM47XX: Cast memcmp() of function to (void *) (Kees Cook) - ACPI: video: Add Toshiba Satellite/Portege Z830 quirk (Arvid Norlander) - f2fs: fix race condition on setting FI_NO_EXTENT flag (Zhang Qilong) - iommu/iova: Fix module config properly (Robin Murphy) - iommu/omap: Fix buffer overflow in debugfs (Dan Carpenter) - powerpc: Fix SPE Power ISA properties for e500v1 platforms (Pali Rohar) - powerpc/powernv: add missing of_node_put() in opal_export_attrs() (Zheng Yongjun) - powerpc/pci_dn: Add missing of_node_put() (Liang He) - powerpc/sysdev/fsl_msi: Add missing of_node_put() (Liang He) - powerpc/math_emu/efp: Include module.h (Nathan Chancellor) - mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg (Jack Wang) - clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe (Miaoqian Lin) - clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration (Stefan Wahren) - spmi: pmic-arb: correct duplicate APID to PPID mapping logic (David Collins) - dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup() (Dave Jiang) - mfd: sm501: Add check for platform_driver_register() (Jiasheng Jiang) - mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init() (Christophe JAILLET) - mfd: lp8788: Fix an error handling path in lp8788_probe() (Christophe JAILLET) - mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq() (Christophe JAILLET) - mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe() (Christophe JAILLET) - fsi: core: Check error number after calling ida_simple_get (Jiasheng Jiang) - serial: 8250: Fix restoring termios speed after suspend (Pali Rohar) - firmware: google: Test spinlock on panic path to avoid lockups (Guilherme G. Piccoli) - phy: qualcomm: call clk_disable_unprepare in the error handling (Dongliang Mu) - drivers: serial: jsm: fix some leaks in probe (Dan Carpenter) - usb: gadget: function: fix dangling pnp_string in f_printer.c (Albert Briscoe) - xhci: Don't show warning for reinit on known broken suspend (Mario Limonciello) - md/raid5: Ensure stripe_fill happens on non-read IO with journal (Logan Gunthorpe) - ata: fix ata_id_has_dipm() (Niklas Cassel) - ata: fix ata_id_has_ncq_autosense() (Niklas Cassel) - ata: fix ata_id_has_devslp() (Niklas Cassel) - ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting() (Niklas Cassel) - dyndbg: let query-modname override actual module name (Jim Cromie) - dyndbg: fix module.dyndbg handling (Jim Cromie) - RDMA/rxe: Fix the error caused by qp->sk (Zhu Yanjun) - RDMA/rxe: Fix 'kernel NULL pointer dereference' error (Zhu Yanjun) - media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init (Miaoqian Lin) - tty: xilinx_uartps: Fix the ignore_status (Shubhrajyoti Datta) - media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop (Liang He) - HSI: omap_ssi_port: Fix dma_map_sg error check (Jack Wang) - HSI: omap_ssi: Fix refcount leak in ssi_probe (Miaoqian Lin) - clk: tegra20: Fix refcount leak in tegra20_clock_init (Miaoqian Lin) - clk: tegra: Fix refcount leak in tegra114_clock_init (Miaoqian Lin) - clk: tegra: Fix refcount leak in tegra210_clock_init (Miaoqian Lin) - clk: oxnas: Hold reference returned by of_get_parent() (Liang He) - iio: ABI: Fix wrong format of differential capacitance channel ABI. (Jonathan Cameron) - iio: inkern: only release the device node when done with it (Nuno Sa) - iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX (Claudiu Beznea) - ARM: dts: exynos: fix polarity of VBUS GPIO of Origen (Dmitry Torokhov) - ARM: Drop CMDLINE_* dependency on ATAGS (Geert Uytterhoeven) - ARM: dts: kirkwood: lsxl: remove first ethernet port (Michael Walle) - ARM: dts: kirkwood: lsxl: fix serial line (Michael Walle) - ARM: dts: turris-omnia: Fix mpp26 pin name and comment (Marek Behun) - soc: qcom: smem_state: Add refcounting for the 'state->of_node' (Liang He) - soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe() (Liang He) - memory: of: Fix refcount leak bug in of_get_ddr_timings() (Liang He) - mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe() (Christophe JAILLET) - ALSA: dmaengine: increment buffer pointer atomically (Andreas Pape) - ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API (Liang He) - mmc: au1xmmc: Fix an error handling path in au1xmmc_probe() (Christophe JAILLET) - drm/bridge: megachips: Fix a null pointer dereference bug (Zheyu Ma) - platform/x86: msi-laptop: Fix resource cleanup (Hans de Goede) - platform/x86: msi-laptop: Fix old-ec check for backlight registering (Hans de Goede) - drm/mipi-dsi: Detach devices when removing the host (Maxime Ripard) - bnx2x: fix potential memory leak in bnx2x_tpa_stop() (Jianglei Nie) - tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited (Neal Cardwell) - vhost/vsock: Use kvmalloc/kvfree for larger packets. (Junichi Uekawa) - spi: s3c64xx: Fix large transfers with DMA (Vincent Whitchurch) - netfilter: nft_fib: Fix for rpath check with VRF devices (Phil Sutter) - spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe (Zhang Qilong) - net: fs_enet: Fix wrong check in do_pd_setup (Zheng Yongjun) - wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration (Bitterblue Smith) - wifi: rtl8xxxu: Fix skb misuse in TX queue selection (Bitterblue Smith) - spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime() (Xu Qiang) - spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume() (Xu Qiang) - wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse() (Dan Carpenter) - wifi: mac80211: allow bw change during channel switch in mesh (Hari Chandrakanthan) - wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state() (Wen Gong) - sh: machvec: Use char[] for section boundaries (Kees Cook) - selinux: use 'grep -E' instead of 'egrep' (Greg Kroah-Hartman) - gcov: support GCC 12.1 and newer compilers (Martin Liska) - KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility (Michal Luczaj) - ring-buffer: Fix race between reset page and reading page (Steven Rostedt (Google)) - ring-buffer: Check pending waiters when doing wake ups as well (Steven Rostedt (Google)) - ring-buffer: Allow splice to read previous partially read pages (Steven Rostedt (Google)) - ftrace: Properly unset FTRACE_HASH_FL_MOD (Zheng Yejian) - livepatch: fix race between fork and KLP transition (Rik van Riel) - ext4: place buffer head allocation before handle start (Jinke Han) - ext4: make ext4_lazyinit_thread freezable (Lalith Rajendran) - ext4: fix null-ptr-deref in ext4_write_info (Baokun Li) - ext4: avoid crash when inline data creation follows DIO write (Jan Kara) - nilfs2: fix lockdep warnings during disk space reclamation (Ryusuke Konishi) - nilfs2: fix lockdep warnings in page operations for btree nodes (Ryusuke Konishi) - nilfs2: fix use-after-free bug of struct nilfs_root (Ryusuke Konishi) - fbdev: smscufx: Fix use-after-free in ufx_ops_open() (Hyunwoo Kim) - PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge (Maciej W. Rozycki) - UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK (Huacai Chen) - parisc: fbdev/stifb: Align graphics memory size to 4MB (Helge Deller) - Revert 'fs: check FMODE_LSEEK to control internal pipe splicing' (Sasha Levin) - regulator: qcom_rpm: Fix circular deferral regression (Linus Walleij) - quota: Check next/prev free block number after reading from quota file (Zhihao Cheng) - HID: multitouch: Add memory barriers (Andri Yngvason) - fs: dlm: handle -EBUSY first in lock arg validation (Alexander Aring) - fs: dlm: fix race between test_bit() and queue_work() (Alexander Aring) - iio: dac: ad5593r: Fix i2c read protocol requirements (Michael Hennerich) - ALSA: usb-audio: Fix NULL dererence at error path (Takashi Iwai) - ALSA: usb-audio: Fix potential memory leaks (Takashi Iwai) - ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free() (Takashi Iwai) - ALSA: oss: Fix potential deadlock at unregistration (Takashi Iwai) - random: use expired timer rather than wq for mixing fast pool (Jason A. Donenfeld) - Input: xpad - fix wireless 360 controller breaking after suspend (Cameron Gutman) - Input: xpad - add supported devices as contributed on github (Pavel Rojtberg) - wifi: mac80211_hwsim: avoid mac80211 warning on bad rate (Johannes Berg) - random: avoid reading two cache lines on irq randomness (Jason A. Donenfeld) - random: restore O_NONBLOCK support (Jason A. Donenfeld) - USB: serial: qcserial: add new usb-id for Dell branded EM7455 (Frank Wunderlich) - ALSA: hda: Fix position reporting on Poulsbo (Takashi Iwai) - random: clamp credited irq bits to maximum mixed (Jason A. Donenfeld) - ceph: don't truncate file in atomic_open (Hu Weiwen) - nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure (Ryusuke Konishi) - nilfs2: fix leak of nilfs_root in case of writer thread creation failure (Ryusuke Konishi) - nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() (Ryusuke Konishi) - netfilter: nf_queue: fix socket leak (Vimal Agrawal) - rpmsg: qcom: glink: replace strncpy() with strscpy_pad() (Krzysztof Kozlowski) - mmc: core: Terminate infinite loop in SD-UHS voltage switch (Brian Norris) - mmc: core: Replace with already defined values for readability (ChanWoo Lee) - USB: serial: ftdi_sio: fix 300 bps rate for SIO (Johan Hovold) - usb: mon: make mmapped memory read only (Tadeusz Struk) - um: Cleanup compiler warning in arch/x86/um/tls_32.c (Lukas Straub) - um: Cleanup syscall_handler_t cast in syscalls_32.h (Lukas Straub) - net/ieee802154: fix uninit value bug in dgram_sendmsg (Haimin Zhang) - ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer (Sergei Antonov) - dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure (Swati Agarwal) - dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property (Swati Agarwal) - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Dongliang Mu) - ARM: fix function graph tracer and unwinder dependencies (Russell King) - i2c: dev: prevent ZERO_SIZE_PTR deref in i2cdev_ioctl_rdwr() (Alexander Popov) - Makefile.extrawarn: Move -Wcast-function-type-strict to W=1 (Sami Tolvanen) - clk: iproc: Do not rely on node name for correct PLL setup (Florian Fainelli) - clk: iproc: Minor tidy up of iproc pll data structures (Lori Hikichi) - selftests: Fix the if conditions of in test_extra_filter() (Wang Yufen) - nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices (Michael Kelley) - nvme: add new line after variable declatation (Chaitanya Kulkarni) - usbnet: Fix memory leak in usbnet_disconnect() (Peilin Ye) - Input: melfas_mip4 - fix return value check in mip4_probe() (Yang Yingliang) - Revert 'drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time' (Brian Norris) - soc: sunxi: sram: Fix debugfs info for A64 SRAM C (Samuel Holland) - soc: sunxi: sram: Actually claim SRAM regions (Samuel Holland) - mm/migrate_device.c: flush TLB while holding PTL (Alistair Popple) - mm: prevent page_frag_alloc() from corrupting the memory (Maurizio Lombardi) - mm/page_alloc: fix race condition between build_all_zonelists and page allocation (Mel Gorman) - mmc: moxart: fix 4-bit bus width and remove 8-bit bus width (Sergei Antonov) - ntfs: fix BUG_ON in ntfs_lookup_inode_by_name() (ChenXiaoSong) - net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455 (Frank Wunderlich) - uas: ignore UAS for Thinkplus chips (Hongling Zeng) - usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS (Hongling Zeng) - uas: add no-uas quirk for Hiksemi usb_disk (Hongling Zeng) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-4378 Oracle Linux 7 [4.14.35-2047.521.4] - tcp: Tunables for TCP delayed ack (min and max) timers (Venkat Venkatsubra) [Orabug: 34883100] [4.14.35-2047.521.3] - Revert 'random: use expired timer rather than wq for mixing fast pool' (Saeed Mirzamohammadi) [Orabug: 34918228] [4.14.35-2047.521.2] - RDS/IB: Fix the misplaced counter update rdma dto path (Devesh Sharma) [Orabug: 34865849] - IB/ipoib: Do not warn if IPoIB debugfs doesn't exist (Alaa Hleihel) [Orabug: 34780038] - proc: proc_skip_spaces() shouldn't think it is working on C strings (Linus Torvalds) [Orabug: 34882780] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Linus Torvalds) [Orabug: 34882780] {CVE-2022-4378} [4.14.35-2047.521.1] - net/mlx5: Use debug message instead of warn (Yishai Hadas) [Orabug: 34834553] - hugetlbfs: don't delete error page from pagecache (James Houghton) [Orabug: 34772618] - mm: shmem: don't truncate page if memory failure happens (Yang Shi) [Orabug: 34772618] - mm: hwpoison: refactor refcount check handling (Yang Shi) [Orabug: 34772618] - kvm: x86: limit the maximum number of vPMU fixed counters to 3 (Like Xu) [Orabug: 34756992] - LTS version: v4.14.298 (Saeed Mirzamohammadi) - can: rcar_canfd: rcar_canfd_handle_global_receive(): fix IRQ storm on global FIFO receive (Biju Das) - net: ehea: fix possible memory leak in ehea_register_port() (Yang Yingliang) - openvswitch: switch from WARN to pr_warn (Aaron Conole) - ALSA: aoa: Fix I2S device accounting (Takashi Iwai) - ALSA: aoa: i2sbus: fix possible memory leak in i2sbus_add_dev() (Yang Yingliang) - PM: domains: Fix handling of unavailable/disabled idle states (Sudeep Holla) - net: ksz884x: fix missing pci_disable_device() on error in pcidev_init() (Yang Yingliang) - i40e: Fix flow-type by setting GL_HASH_INSET registers (Slawomir Laba) - i40e: Fix ethtool rx-flow-hash setting for X722 (Slawomir Laba) - media: videodev2.h: V4L2_DV_BT_BLANKING_HEIGHT should check 'interlaced' (Hans Verkuil) - media: v4l2-dv-timings: add sanity checks for blanking values (Hans Verkuil) - media: vivid: dev->bitmap_cap wasn't freed in all cases (Hans Verkuil) - media: vivid: s_fbuf: add more sanity checks (Hans Verkuil) - PM: hibernate: Allow hybrid sleep to work with s2idle (Mario Limonciello) - can: mscan: mpc5xxx: mpc5xxx_can_probe(): add missing put_clock() in error path (Dongliang Mu) - tcp: fix indefinite deferral of RTO with SACK reneging (Neal Cardwell) - net: lantiq_etop: don't free skb when returning NETDEV_TX_BUSY (Zhang Changzhong) - kcm: annotate data-races around kcm->rx_wait (Eric Dumazet) - kcm: annotate data-races around kcm->rx_psock (Eric Dumazet) - amd-xgbe: add the bit rate quirk for Molex cables (Raju Rangoju) - amd-xgbe: fix the SFP compliance codes check for DAC cables (Raju Rangoju) - x86/unwind/orc: Fix unreliable stack dump with gcov (Chen Zhongjin) - ALSA: ac97: fix possible memory leak in snd_ac97_dev_register() (Yang Yingliang) - arc: iounmap() arg is volatile (Randy Dunlap) - drm/msm: Fix return type of mdp4_lvds_connector_mode_valid (Nathan Huckleberry) - net: ieee802154: fix error return code in dgram_bind() (Wei Yongjun) - mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages (Rik van Riel) - xen/gntdev: Prevent leaking grants (M. Vefa Bicakci) - Xen/gntdev: don't ignore kernel unmapping error (Jan Beulich) - s390/futex: add missing EX_TABLE entry to __futex_atomic_op() (Heiko Carstens) - kernfs: fix use-after-free in __kernfs_remove (Christian A. Ehrhardt) - mmc: core: Fix kernel panic when remove non-standard SDIO card (Matthew Ma) - drm/msm/hdmi: fix memory corruption with too many bridges (Johan Hovold) - mac802154: Fix LQI recording (Miquel Raynal) - fbdev: smscufx: Fix several use-after-free bugs (Hyunwoo Kim) - iio: light: tsl2583: Fix module unloading (Shreeya Patel) - tools: iio: iio_utils: fix digit calculation (Matti Vaittinen) - xhci: Remove device endpoints from bandwidth list when freeing the device (Mathias Nyman) - usb: xhci: add XHCI_SPURIOUS_SUCCESS to ASM1042 despite being a V0.96 controller (Jens Glathe) - usb: bdc: change state when port disconnected (Justin Chen) - usb: dwc3: gadget: Don't set IMI for no_interrupt (Thinh Nguyen) - USB: add RESET_RESUME quirk for NVIDIA Jetson devices in RCM (Hannu Hartikainen) - ALSA: au88x0: use explicitly signed char (Jason A. Donenfeld) - ALSA: Use del_timer_sync() before freeing timer (Steven Rostedt (Google)) - ACPI: video: Force backlight native for more TongFang devices (Werner Sembach) - media: v4l2-mem2mem: Apply DST_QUEUE_OFF_BASE on MMAP buffers across ioctls (Chen-Yu Tsai) - iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) - net: hns: fix possible memory leak in hnae_ae_register() (Yang Yingliang) - net/atm: fix proc_mpc_write incorrect return value (Xiaobo Liu) - HID: magicmouse: Do not set BTN_MOUSE on double report (Jose Exposito) - ACPI: extlog: Handle multiple records (Tony Luck) - btrfs: fix processing of delayed data refs during backref walking (Filipe Manana) - r8152: add PID for the Lenovo OneLink+ Dock (Jean-Francois Le Fillatre) - arm64: errata: Remove AES hwcap for COMPAT tasks (James Morse) - KVM: arm64: vgic: Fix exit condition in scan_its_table() (Eric Ren) - ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS (Kai-Heng Feng) - ata: ahci-imx: Fix MODULE_ALIAS (Alexander Stein) - x86/microcode/AMD: Apply the patch early on every logical thread (Borislav Petkov) - ocfs2: fix BUG when iput after ocfs2_mknod fails (Joseph Qi) - ocfs2: clear dinode links count in case of error (Joseph Qi) - LTS version: v4.14.297 is skipped (Saeed Mirzamohammadi) - LTS version: v4.14.296 (Saeed Mirzamohammadi) - thermal: intel_powerclamp: Use first online CPU as control_cpu (Rafael J. Wysocki) - inet: fully convert sk->sk_rx_dst to RCU rules (Eric Dumazet) - efi: libstub: drop pointless get_memory_map() call (Ard Biesheuvel) - md: Replace snprintf with scnprintf (Saurabh Sengar) - ext4: continue to expand file system when the target size doesn't reach (Jerry Lee ) - net/ieee802154: don't warn zero-sized raw_sendmsg() (Tetsuo Handa) - net: ieee802154: return -EINVAL for unknown addr type (Alexander Aring) - perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc (Adrian Hunter) - usb: idmouse: fix an uninit-value in idmouse_open (Dongliang Mu) - Revert 'usb: storage: Add quirk for Samsung Fit flash' (sunghwan jung) - usb: musb: Fix musb_gadget.c rxstate overflow bug (Robin Guo) - usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info() (Jianglei Nie) - md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d (Logan Gunthorpe) - HID: roccat: Fix use-after-free in roccat_read() (Hyunwoo Kim) - nbd: Fix hung when signal interrupts nbd_start_device_ioctl() (Shigeru Yoshida) - scsi: 3w-9xxx: Avoid disabling device if failing to enable it (Letu Ren) - media: cx88: Fix a null-ptr-deref bug in buffer_prepare() (Zheyu Ma) - ARM: dts: imx6sl: add missing properties for sram (Alexander Stein) - ARM: dts: imx6qp: add missing properties for sram (Alexander Stein) - ARM: dts: imx6dl: add missing properties for sram (Alexander Stein) - ARM: dts: imx6q: add missing properties for sram (Alexander Stein) - ARM: dts: imx7d-sdb: config the max pressure for tsc2046 (Haibo Chen) - drm/amdgpu: fix initial connector audio value (hongao) - platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading (Hans de Goede) - drm/vc4: vec: Fix timings for VEC modes (Mateusz Kwiatkowski) - drm: Prevent drm_copy_field() to attempt copying a NULL pointer (Javier Martinez Canillas) - drm: Use size_t type for len variable in drm_copy_field() (Javier Martinez Canillas) - r8152: Rate limit overflow messages (Andrew Gaul) - Bluetooth: L2CAP: Fix user-after-free (Luiz Augusto von Dentz) - net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory (Liu Jian) - wifi: rt2x00: correctly set BBP register 86 for MT7620 (Daniel Golle) - wifi: rt2x00: set SoC wmac clock register (Daniel Golle) - wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620 (Daniel Golle) - wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620 (Daniel Golle) - can: bcm: check the result of can_send() in bcm_can_tx() (Ziyang Xuan) - Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times (Luiz Augusto von Dentz) - Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create() (Tetsuo Handa) - wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() (Alexander Coffin) - xfrm: Update ipcomp_scratches with NULL when freed (Khalid Masum) - wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg() (Tetsuo Handa) - tcp: annotate data-race around tcp_md5sig_pool_populated (Eric Dumazet) - openvswitch: Fix overreporting of drops in dropwatch (Mike Pattrick) - openvswitch: Fix double reporting of drops in dropwatch (Mike Pattrick) - wifi: brcmfmac: fix invalid address access when enabling SCAN log level (Wright Feng) - NFSD: Return nfserr_serverfault if splice_ok but buf->pages have data (Anna Schumaker) - thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash (Srinivas Pandruvada) - powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue (Chao Qin) - MIPS: BCM47XX: Cast memcmp() of function to (void *) (Kees Cook) - ACPI: video: Add Toshiba Satellite/Portege Z830 quirk (Arvid Norlander) - f2fs: fix race condition on setting FI_NO_EXTENT flag (Zhang Qilong) - iommu/iova: Fix module config properly (Robin Murphy) - iommu/omap: Fix buffer overflow in debugfs (Dan Carpenter) - powerpc: Fix SPE Power ISA properties for e500v1 platforms (Pali Rohar) - powerpc/powernv: add missing of_node_put() in opal_export_attrs() (Zheng Yongjun) - powerpc/pci_dn: Add missing of_node_put() (Liang He) - powerpc/sysdev/fsl_msi: Add missing of_node_put() (Liang He) - powerpc/math_emu/efp: Include module.h (Nathan Chancellor) - mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg (Jack Wang) - clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe (Miaoqian Lin) - clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration (Stefan Wahren) - spmi: pmic-arb: correct duplicate APID to PPID mapping logic (David Collins) - dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup() (Dave Jiang) - mfd: sm501: Add check for platform_driver_register() (Jiasheng Jiang) - mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init() (Christophe JAILLET) - mfd: lp8788: Fix an error handling path in lp8788_probe() (Christophe JAILLET) - mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq() (Christophe JAILLET) - mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe() (Christophe JAILLET) - fsi: core: Check error number after calling ida_simple_get (Jiasheng Jiang) - serial: 8250: Fix restoring termios speed after suspend (Pali Rohar) - firmware: google: Test spinlock on panic path to avoid lockups (Guilherme G. Piccoli) - phy: qualcomm: call clk_disable_unprepare in the error handling (Dongliang Mu) - drivers: serial: jsm: fix some leaks in probe (Dan Carpenter) - usb: gadget: function: fix dangling pnp_string in f_printer.c (Albert Briscoe) - xhci: Don't show warning for reinit on known broken suspend (Mario Limonciello) - md/raid5: Ensure stripe_fill happens on non-read IO with journal (Logan Gunthorpe) - ata: fix ata_id_has_dipm() (Niklas Cassel) - ata: fix ata_id_has_ncq_autosense() (Niklas Cassel) - ata: fix ata_id_has_devslp() (Niklas Cassel) - ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting() (Niklas Cassel) - dyndbg: let query-modname override actual module name (Jim Cromie) - dyndbg: fix module.dyndbg handling (Jim Cromie) - RDMA/rxe: Fix the error caused by qp->sk (Zhu Yanjun) - RDMA/rxe: Fix 'kernel NULL pointer dereference' error (Zhu Yanjun) - media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init (Miaoqian Lin) - tty: xilinx_uartps: Fix the ignore_status (Shubhrajyoti Datta) - media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop (Liang He) - HSI: omap_ssi_port: Fix dma_map_sg error check (Jack Wang) - HSI: omap_ssi: Fix refcount leak in ssi_probe (Miaoqian Lin) - clk: tegra20: Fix refcount leak in tegra20_clock_init (Miaoqian Lin) - clk: tegra: Fix refcount leak in tegra114_clock_init (Miaoqian Lin) - clk: tegra: Fix refcount leak in tegra210_clock_init (Miaoqian Lin) - clk: oxnas: Hold reference returned by of_get_parent() (Liang He) - iio: ABI: Fix wrong format of differential capacitance channel ABI. (Jonathan Cameron) - iio: inkern: only release the device node when done with it (Nuno Sa) - iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX (Claudiu Beznea) - ARM: dts: exynos: fix polarity of VBUS GPIO of Origen (Dmitry Torokhov) - ARM: Drop CMDLINE_* dependency on ATAGS (Geert Uytterhoeven) - ARM: dts: kirkwood: lsxl: remove first ethernet port (Michael Walle) - ARM: dts: kirkwood: lsxl: fix serial line (Michael Walle) - ARM: dts: turris-omnia: Fix mpp26 pin name and comment (Marek Behun) - soc: qcom: smem_state: Add refcounting for the 'state->of_node' (Liang He) - soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe() (Liang He) - memory: of: Fix refcount leak bug in of_get_ddr_timings() (Liang He) - mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe() (Christophe JAILLET) - ALSA: dmaengine: increment buffer pointer atomically (Andreas Pape) - ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API (Liang He) - mmc: au1xmmc: Fix an error handling path in au1xmmc_probe() (Christophe JAILLET) - drm/bridge: megachips: Fix a null pointer dereference bug (Zheyu Ma) - platform/x86: msi-laptop: Fix resource cleanup (Hans de Goede) - platform/x86: msi-laptop: Fix old-ec check for backlight registering (Hans de Goede) - drm/mipi-dsi: Detach devices when removing the host (Maxime Ripard) - bnx2x: fix potential memory leak in bnx2x_tpa_stop() (Jianglei Nie) - tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited (Neal Cardwell) - vhost/vsock: Use kvmalloc/kvfree for larger packets. (Junichi Uekawa) - spi: s3c64xx: Fix large transfers with DMA (Vincent Whitchurch) - netfilter: nft_fib: Fix for rpath check with VRF devices (Phil Sutter) - spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe (Zhang Qilong) - net: fs_enet: Fix wrong check in do_pd_setup (Zheng Yongjun) - wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration (Bitterblue Smith) - wifi: rtl8xxxu: Fix skb misuse in TX queue selection (Bitterblue Smith) - spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime() (Xu Qiang) - spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume() (Xu Qiang) - wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse() (Dan Carpenter) - wifi: mac80211: allow bw change during channel switch in mesh (Hari Chandrakanthan) - wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state() (Wen Gong) - sh: machvec: Use char[] for section boundaries (Kees Cook) - selinux: use 'grep -E' instead of 'egrep' (Greg Kroah-Hartman) - gcov: support GCC 12.1 and newer compilers (Martin Liska) - KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility (Michal Luczaj) - ring-buffer: Fix race between reset page and reading page (Steven Rostedt (Google)) - ring-buffer: Check pending waiters when doing wake ups as well (Steven Rostedt (Google)) - ring-buffer: Allow splice to read previous partially read pages (Steven Rostedt (Google)) - ftrace: Properly unset FTRACE_HASH_FL_MOD (Zheng Yejian) - livepatch: fix race between fork and KLP transition (Rik van Riel) - ext4: place buffer head allocation before handle start (Jinke Han) - ext4: make ext4_lazyinit_thread freezable (Lalith Rajendran) - ext4: fix null-ptr-deref in ext4_write_info (Baokun Li) - ext4: avoid crash when inline data creation follows DIO write (Jan Kara) - nilfs2: fix lockdep warnings during disk space reclamation (Ryusuke Konishi) - nilfs2: fix lockdep warnings in page operations for btree nodes (Ryusuke Konishi) - nilfs2: fix use-after-free bug of struct nilfs_root (Ryusuke Konishi) - fbdev: smscufx: Fix use-after-free in ufx_ops_open() (Hyunwoo Kim) - PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge (Maciej W. Rozycki) - UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK (Huacai Chen) - parisc: fbdev/stifb: Align graphics memory size to 4MB (Helge Deller) - Revert 'fs: check FMODE_LSEEK to control internal pipe splicing' (Sasha Levin) - regulator: qcom_rpm: Fix circular deferral regression (Linus Walleij) - quota: Check next/prev free block number after reading from quota file (Zhihao Cheng) - HID: multitouch: Add memory barriers (Andri Yngvason) - fs: dlm: handle -EBUSY first in lock arg validation (Alexander Aring) - fs: dlm: fix race between test_bit() and queue_work() (Alexander Aring) - iio: dac: ad5593r: Fix i2c read protocol requirements (Michael Hennerich) - ALSA: usb-audio: Fix NULL dererence at error path (Takashi Iwai) - ALSA: usb-audio: Fix potential memory leaks (Takashi Iwai) - ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free() (Takashi Iwai) - ALSA: oss: Fix potential deadlock at unregistration (Takashi Iwai) - random: use expired timer rather than wq for mixing fast pool (Jason A. Donenfeld) - Input: xpad - fix wireless 360 controller breaking after suspend (Cameron Gutman) - Input: xpad - add supported devices as contributed on github (Pavel Rojtberg) - wifi: mac80211_hwsim: avoid mac80211 warning on bad rate (Johannes Berg) - random: avoid reading two cache lines on irq randomness (Jason A. Donenfeld) - random: restore O_NONBLOCK support (Jason A. Donenfeld) - USB: serial: qcserial: add new usb-id for Dell branded EM7455 (Frank Wunderlich) - ALSA: hda: Fix position reporting on Poulsbo (Takashi Iwai) - random: clamp credited irq bits to maximum mixed (Jason A. Donenfeld) - ceph: don't truncate file in atomic_open (Hu Weiwen) - nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure (Ryusuke Konishi) - nilfs2: fix leak of nilfs_root in case of writer thread creation failure (Ryusuke Konishi) - nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() (Ryusuke Konishi) - netfilter: nf_queue: fix socket leak (Vimal Agrawal) - rpmsg: qcom: glink: replace strncpy() with strscpy_pad() (Krzysztof Kozlowski) - mmc: core: Terminate infinite loop in SD-UHS voltage switch (Brian Norris) - mmc: core: Replace with already defined values for readability (ChanWoo Lee) - USB: serial: ftdi_sio: fix 300 bps rate for SIO (Johan Hovold) - usb: mon: make mmapped memory read only (Tadeusz Struk) - um: Cleanup compiler warning in arch/x86/um/tls_32.c (Lukas Straub) - um: Cleanup syscall_handler_t cast in syscalls_32.h (Lukas Straub) - net/ieee802154: fix uninit value bug in dgram_sendmsg (Haimin Zhang) - ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer (Sergei Antonov) - dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure (Swati Agarwal) - dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property (Swati Agarwal) - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Dongliang Mu) - ARM: fix function graph tracer and unwinder dependencies (Russell King) - i2c: dev: prevent ZERO_SIZE_PTR deref in i2cdev_ioctl_rdwr() (Alexander Popov) - Makefile.extrawarn: Move -Wcast-function-type-strict to W=1 (Sami Tolvanen) - clk: iproc: Do not rely on node name for correct PLL setup (Florian Fainelli) - clk: iproc: Minor tidy up of iproc pll data structures (Lori Hikichi) - selftests: Fix the if conditions of in test_extra_filter() (Wang Yufen) - nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices (Michael Kelley) - nvme: add new line after variable declatation (Chaitanya Kulkarni) - usbnet: Fix memory leak in usbnet_disconnect() (Peilin Ye) - Input: melfas_mip4 - fix return value check in mip4_probe() (Yang Yingliang) - Revert 'drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time' (Brian Norris) - soc: sunxi: sram: Fix debugfs info for A64 SRAM C (Samuel Holland) - soc: sunxi: sram: Actually claim SRAM regions (Samuel Holland) - mm/migrate_device.c: flush TLB while holding PTL (Alistair Popple) - mm: prevent page_frag_alloc() from corrupting the memory (Maurizio Lombardi) - mm/page_alloc: fix race condition between build_all_zonelists and page allocation (Mel Gorman) - mmc: moxart: fix 4-bit bus width and remove 8-bit bus width (Sergei Antonov) - ntfs: fix BUG_ON in ntfs_lookup_inode_by_name() (ChenXiaoSong) - net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455 (Frank Wunderlich) - uas: ignore UAS for Thinkplus chips (Hongling Zeng) - usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS (Hongling Zeng) - uas: add no-uas quirk for Hiksemi usb_disk (Hongling Zeng) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-4378 Oracle Linux 7 Oracle Linux 8 [5.4.17-2136.315.5] - Revert 'xfs: Lower CIL flush limit for large logs' (Sherry Yang) [Orabug: 34917369] - Revert 'xfs: Throttle commits on delayed background CIL push' (Sherry Yang) [Orabug: 34917369] - Revert 'xfs: fix use-after-free on CIL context on shutdown' (Sherry Yang) [Orabug: 34917369] [5.4.17-2136.315.4] - net/mlx5: Suppress error logging on UCTX creation (Marina) [Orabug: 34888473] - uek-rpm: Add ptp_kvm.ko to nano rpm (Somasundaram Krishnasamy) [Orabug: 33487655] - block: fix RO partition with RW disk (Junxiao Bi) [Orabug: 34807898] - rds: ib: Fix leaked MRs during kexec (Hakon Bugge) [Orabug: 34829924] - scsi: mpi3mr: Enable ' CONFIG_SCSI_SAS_ATTRS ' config option (Rhythm Mahajan) [Orabug: 34774474] - scsi: mpi3mr: Remove unnecessary cast (Jules Irenge) [Orabug: 34774474] - scsi: mpi3mr: Update driver version to 8.2.0.3.0 (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Fix scheduling while atomic type bug (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Scan the devices during resume time (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Free enclosure objects during driver unload (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Handle 0xF003 Fault Code (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Graceful handling of surprise removal of PCIe HBA (Chandrakanth patil) [Orabug: 34774474] - scsi: mpi3mr: Schedule IRQ kthreads only on non-RT (Chandrakanth patil) [Orabug: 34774474] - scsi: mpi3mr: Support new power management framework (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Update mpi3 header files (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Fix error code in mpi3mr_transport_smp_handler() (Dan Carpenter) [Orabug: 34774474] - scsi: mpi3mr: Fix error codes in mpi3mr_report_manufacture() (Dan Carpenter) [Orabug: 34774474] - scsi: mpi3mr: Block I/Os while refreshing target dev objects (Chandrakanth patil) [Orabug: 34774474] - scsi: mpi3mr: Refresh SAS ports during soft reset (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Support SAS transport class callbacks (Chandrakanth patil) [Orabug: 34774474] - scsi: mpi3mr: Add framework to issue MPT transport cmds (Chandrakanth patil) [Orabug: 34774474] - scsi: mpi3mr: Add SAS SATA end devices to STL (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Get target object based on rphy (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Add expander devices to STL (Chandrakanth patil) [Orabug: 34774474] - scsi: mpi3mr: Enable STL on HBAs where multipath is disabled (Chandrakanth patil) [Orabug: 34774474] - scsi: mpi3mr: Add helper functions to manage device's port (Chandrakanth patil) [Orabug: 34774474] - scsi: mpi3mr: Add helper functions to retrieve device objects (Chandrakanth patil) [Orabug: 34774474] - scsi: mpi3mr: Add framework to add phys to STL (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Enable Enclosure device add event (Chandrakanth patil) [Orabug: 34774474] - scsi: mpi3mr: Add helper functions to retrieve config pages (Chandrakanth patil) [Orabug: 34774474] - scsi: mpi3mr: Add framework to issue config requests (Chandrakanth patil) [Orabug: 34774474] - scsi: mpi3mr: Add config and transport related debug flags (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Delete a stray tab (Dan Carpenter) [Orabug: 34774474] - scsi: mpi3mr: Unlock on error path (Dan Carpenter) [Orabug: 34774474] - scsi: mpi3mr: Reduce VD queue depth on detecting throttling (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Resource Based Metering (Chandrakanth patil) [Orabug: 34774474] - scsi: mpi3mr: Increase cmd_per_lun to 128 (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Fix kernel-doc (Chandrakanth patil) [Orabug: 34774474] - scsi: mpi3mr: Rework mrioc->bsg_device model to fix warnings (Chandrakanth patil) [Orabug: 34774474] - scsi: mpi3mr: Add target device related sysfs (Chandrakanth patil) [Orabug: 34774474] - scsi: mpi3mr: Add shost related sysfs attributes (Chandrakanth patil) [Orabug: 34774474] - scsi: mpi3mr: Return error if dma_alloc_coherent() fails (Dan Carpenter) [Orabug: 34774474] - scsi: mpi3mr: Fix a NULL vs IS_ERR() bug in mpi3mr_bsg_init() (Dan Carpenter) [Orabug: 34774474] - scsi: mpi3mr: Return I/Os to an unrecoverable HBA with DID_ERROR (Chandrakanth patil) [Orabug: 34774474] - scsi: mpi3mr: Hidden drives not removed during soft reset (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Increase I/O timeout value to 60s (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Update driver version to 8.0.0.69.0 (Sumit Saxena) [Orabug: 34774474] - scsi: mpi3mr: Add support for NVMe passthrough (Sumit Saxena) [Orabug: 34774474] - scsi: mpi3mr: Expose adapter state to sysfs (Chandrakanth patil) [Orabug: 34774474] - scsi: mpi3mr: Add support for PEL commands (Chandrakanth patil) [Orabug: 34774474] - scsi: mpi3mr: Add support for MPT commands (Chandrakanth patil) [Orabug: 34774474] - scsi: mpi3mr: Move data structures/definitions from MPI headers to uapi header (Sumit Saxena) [Orabug: 34774474] - scsi: mpi3mr: Add support for driver commands (Chandrakanth patil) [Orabug: 34774474] - scsi: mpi3mr: Add bsg device support (Chandrakanth patil) [Orabug: 34774474] - scsi: mpi3mr: Fix flushing !WQ_MEM_RECLAIM events warning (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Bump driver version to 8.0.0.68.0 (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Update the copyright year (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Fix cmnd getting marked as in use forever (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Fix hibernation issue (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Update MPI3 headers (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Fix printing of pending I/O count (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Fix deadlock while canceling the fw event (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Fix formatting problems in some kernel-doc comments (Yang Li) [Orabug: 34774474] - scsi: mpi3mr: Fix some spelling mistakes (Colin Ian King) [Orabug: 34774474] - scsi: mpi3mr: Bump driver version to 8.0.0.61.0 (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Enhanced Task Management Support Reply handling (Chandrakanth patil) [Orabug: 34774474] - scsi: mpi3mr: Use TM response codes from MPI3 headers (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Print cable mngnt and temp threshold events (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Support Prepare for Reset event (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Add Event acknowledgment logic (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Gracefully handle online FW update operation (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Detect async reset that occurred in firmware (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Add IOC reinit function (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Handle offline FW activation in graceful manner (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Code refactor of IOC init - part2 (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Code refactor of IOC init - part1 (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Fault IOC when internal command gets timeout (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Display IOC firmware package version (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Handle unaligned PLL in unmap cmnds (Chandrakanth patil) [Orabug: 34774474] - scsi: mpi3mr: Increase internal cmnds timeout to 60s (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Do access status validation before adding devices (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Add support for PCIe Managed Switch SES device (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Update MPI3 headers - part2 (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Update MPI3 headers - part1 (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Don't reset IOC if cmnds flush with reset status (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Replace spin_lock() with spin_lock_irqsave() (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Add debug APIs based on logging_level bits (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Use scnprintf() instead of snprintf() (Dan Carpenter) [Orabug: 34774474] - scsi: mpi3mr: Clean up mpi3mr_print_ioc_info() (Dan Carpenter) [Orabug: 34774474] - scsi: mpi3mr: Fix memory leaks (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Fix reporting of actual data transfer size (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Fixes around reply request queues (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Fix duplicate device entries when scanning through sysfs (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Set up IRQs in resume path (Kashyap Desai) [Orabug: 34774474] - scsi: mpi3mr: Use the proper SCSI midlayer interfaces for PI (Chandrakanth patil) [Orabug: 34774474] - scsi: mpi3mr: Fix W=1 compilation warnings (Sreekanth Reddy) [Orabug: 34774474] - net/mlx5e: Fix division by 0 in mlx5e_select_queue for representors (Maxim Mikityanskiy) [Orabug: 34898148] - net/mlx5e: Abstract MQPRIO params (Tariq Toukan) [Orabug: 34898148] - net/mlx5e: Fix division by 0 in mlx5e_select_queue (Maxim Mikityanskiy) [Orabug: 34898148] - proc: proc_skip_spaces() shouldn't think it is working on C strings (Linus Torvalds) [Orabug: 34882779] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Linus Torvalds) [Orabug: 34882779] {CVE-2022-4378} [5.4.17-2136.315.3] - pensando: kpcimgr: extend API to allow sysfs commands (Rob Gardner) [Orabug: 34676926] - hugetlbfs: don't delete error page from pagecache (James Houghton) [Orabug: 34772617] - mm: shmem: don't truncate page if memory failure happens (Yang Shi) [Orabug: 34772617] - mm: hwpoison: refactor refcount check handling (Yang Shi) [Orabug: 34772617] - rds: ib: Fix incorrect error handling during QP creation (Hakon Bugge) [Orabug: 34849243] - Arm64: Pensando: Add support for tps53659 voltage regulator (Austin Sehnert) [Orabug: 34868906] - hwmon: (pmbus/core) Add support for vid mode detection per page bases (Vadim Pasternak) [Orabug: 34868906] - Arm64: Pensando: Enable ltc2978 driver for Ortano ADI cards (Austin Sehnert) [Orabug: 34873762] [5.4.17-2136.315.2] - x86/kvm/vmx: Make noinstr clean (Peter Zijlstra) - x86/speculation: Use cached host SPEC_CTRL value for guest entry/exit (Josh Poimboeuf) - x86/entry: Remove skip_r11rcx (Peter Zijlstra) - mISDN: fix misuse of put_device() in mISDN_register_device() (Wang ShaoBo) - ASoC: wm8997: Revert 'ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe' (Zhang Qilong) - ASoC: wm5110: Revert 'ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe' (Zhang Qilong) - ASoC: wm5102: Revert 'ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe' (Zhang Qilong) - LTS tag: v5.4.224 (Sherry Yang) - ipc: remove memcg accounting for sops objects in do_semtimedop() (Vasily Averin) - wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker() (Dokyung Song) - drm/i915/sdvo: Setup DDC fully before output init (Ville Syrjala) - drm/i915/sdvo: Filter out invalid outputs more sensibly (Ville Syrjala) - drm/rockchip: dsi: Force synchronous probe (Brian Norris) - mtd: rawnand: gpmi: Set WAIT_FOR_READY timeout based on program/erase times (Sascha Hauer) - KVM: x86: emulator: update the emulation mode after CR0 write (Maxim Levitsky) - KVM: x86: emulator: introduce emulator_recalc_and_set_mode (Maxim Levitsky) - KVM: x86: emulator: em_sysexit should update ctxt->mode (Maxim Levitsky) - KVM: x86: Mask off reserved bits in CPUID.80000008H (Jim Mattson) - KVM: x86: Mask off reserved bits in CPUID.8000001AH (Jim Mattson) - ext4: fix BUG_ON() when directory entry has invalid rec_len (Luis Henriques) - ext4: fix warning in 'ext4_da_release_space' (Ye Bin) - parisc: Avoid printing the hardware path twice (Helge Deller) - parisc: Export iosapic_serial_irq() symbol for serial port driver (Helge Deller) - parisc: Make 8250_gsc driver dependend on CONFIG_PARISC (Helge Deller) - ALSA: usb-audio: Add quirks for MacroSilicon MS2100/MS2106 devices (John Veness) - perf/x86/intel: Add Cooper Lake stepping to isolation_ucodes[] (Kan Liang) - perf/x86/intel: Fix pebs event constraints for ICL (Kan Liang) - efi: random: reduce seed size to 32 bytes (Ard Biesheuvel) - fuse: add file_modified() to fallocate (Miklos Szeredi) - capabilities: fix potential memleak on error path from vfs_getxattr_alloc() (Gaosheng Cui) - tracing/histogram: Update document for KEYS_MAX size (Zheng Yejian) - tools/nolibc/string: Fix memcmp() implementation (Rasmus Villemoes) - kprobe: reverse kp->flags when arm_kprobe failed (Li Qiang) - tcp/udp: Make early_demux back namespacified. (Kuniyuki Iwashima) - btrfs: fix type of parameter generation in btrfs_get_dentry (David Sterba) - binder: fix UAF of alloc->vma in race with munmap() (Carlos Llamas) - memcg: enable accounting of ipc resources (Vasily Averin) - tcp/udp: Fix memory leak in ipv6_renew_options(). (Kuniyuki Iwashima) - block, bfq: protect 'bfqd->queued' by 'bfqd->lock' (Yu Kuai) - Bluetooth: L2CAP: Fix attempting to access uninitialized memory (Luiz Augusto von Dentz) {CVE-2022-42895} - xfs: Add the missed xfs_perag_put() for xfs_ifree_cluster() (Chuhong Yuan) - xfs: group quota should return EDQUOT when prj quota enabled (Eric Sandeen) - xfs: gut error handling in xfs_trans_unreserve_and_mod_sb() (Dave Chinner) - xfs: use ordered buffers to initialize dquot buffers during quotacheck (Darrick J. Wong) - xfs: don't fail verifier on empty attr3 leaf block (Brian Foster) - i2c: xiic: Add platform module alias (Martin Tuma) - HID: saitek: add madcatz variant of MMO7 mouse device ID (Samuel Bailey) - scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) - media: meson: vdec: fix possible refcount leak in vdec_probe() (Hangyu Hua) - media: dvb-frontends/drxk: initialize err to 0 (Hans Verkuil) - media: cros-ec-cec: limit msg.len to CEC_MAX_MSG_SIZE (Hans Verkuil) - media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE (Hans Verkuil) - ipv6: fix WARNING in ip6_route_net_exit_late() (Zhengchao Shao) - net, neigh: Fix null-ptr-deref in neigh_table_clear() (Chen Zhongjin) - net: mdio: fix undefined behavior in bit shift for __mdiobus_register (Gaosheng Cui) - Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del() (Zhengchao Shao) - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Maxim Mikityanskiy) - btrfs: fix ulist leaks in error paths of qgroup self tests (Filipe Manana) - btrfs: fix inode list leak during backref walking at find_parent_nodes() (Filipe Manana) - btrfs: fix inode list leak during backref walking at resolve_indirect_refs() (Filipe Manana) - isdn: mISDN: netjet: fix wrong check of device registration (Yang Yingliang) - mISDN: fix possible memory leak in mISDN_register_device() (Yang Yingliang) - rose: Fix NULL pointer dereference in rose_send_frame() (Zhang Qilong) - ipvs: fix WARNING in ip_vs_app_net_cleanup() (Zhengchao Shao) - ipvs: fix WARNING in __ip_vs_cleanup_batch() (Zhengchao Shao) - ipvs: use explicitly signed chars (Jason A. Donenfeld) - netfilter: nf_tables: release flow rule object from commit path (Pablo Neira Ayuso) - net: tun: fix bugs for oversize packet when napi frags enabled (Ziyang Xuan) - net: sched: Fix use after free in red_enqueue() (Dan Carpenter) - ata: pata_legacy: fix pdc20230_set_piomode() (Sergey Shtylyov) - net: fec: fix improper use of NETDEV_TX_BUSY (Zhang Changzhong) - nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send() (Shang XiaoJing) - nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send() (Shang XiaoJing) - RDMA/qedr: clean up work queue on failure in qedr_alloc_resources() (Dan Carpenter) - RDMA/core: Fix null-ptr-deref in ib_core_cleanup() (Chen Zhongjin) - net: dsa: Fix possible memory leaks in dsa_loop_init() (Chen Zhongjin) - nfs4: Fix kmemleak when allocate slot failed (Zhang Xiaoxu) - NFSv4.1: We must always send RECLAIM_COMPLETE after a reboot (Trond Myklebust) - NFSv4.1: Handle RECLAIM_COMPLETE trunking errors (Trond Myklebust) - IB/hfi1: Correctly move list in sc_disable() (Dean Luick) - LTS tag: v5.4.223 (Sherry Yang) - can: rcar_canfd: rcar_canfd_handle_global_receive(): fix IRQ storm on global FIFO receive (Biju Das) - net: enetc: survive memory pressure without crashing (Vladimir Oltean) - net/mlx5: Fix possible use-after-free in async command interface (Tariq Toukan) - net/mlx5e: Do not increment ESN when updating IPsec ESN state (Hyong Youb Kim) - nh: fix scope used to find saddr when adding non gw nh (Nicolas Dichtel) - net: ehea: fix possible memory leak in ehea_register_port() (Yang Yingliang) - openvswitch: switch from WARN to pr_warn (Aaron Conole) - ALSA: aoa: Fix I2S device accounting (Takashi Iwai) - ALSA: aoa: i2sbus: fix possible memory leak in i2sbus_add_dev() (Yang Yingliang) - PM: domains: Fix handling of unavailable/disabled idle states (Sudeep Holla) - net: ksz884x: fix missing pci_disable_device() on error in pcidev_init() (Yang Yingliang) - i40e: Fix flow-type by setting GL_HASH_INSET registers (Slawomir Laba) - i40e: Fix VF hang when reset is triggered on another VF (Sylwester Dziedziuch) - i40e: Fix ethtool rx-flow-hash setting for X722 (Slawomir Laba) - media: videodev2.h: V4L2_DV_BT_BLANKING_HEIGHT should check 'interlaced' (Hans Verkuil) - media: v4l2-dv-timings: add sanity checks for blanking values (Hans Verkuil) - media: vivid: dev->bitmap_cap wasn't freed in all cases (Hans Verkuil) - media: vivid: s_fbuf: add more sanity checks (Hans Verkuil) - PM: hibernate: Allow hybrid sleep to work with s2idle (Mario Limonciello) - can: mscan: mpc5xxx: mpc5xxx_can_probe(): add missing put_clock() in error path (Dongliang Mu) - tcp: fix indefinite deferral of RTO with SACK reneging (Neal Cardwell) - net: lantiq_etop: don't free skb when returning NETDEV_TX_BUSY (Zhang Changzhong) - net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed (Zhengchao Shao) - kcm: annotate data-races around kcm->rx_wait (Eric Dumazet) - kcm: annotate data-races around kcm->rx_psock (Eric Dumazet) - amd-xgbe: add the bit rate quirk for Molex cables (Raju Rangoju) - amd-xgbe: fix the SFP compliance codes check for DAC cables (Raju Rangoju) - x86/unwind/orc: Fix unreliable stack dump with gcov (Chen Zhongjin) - net: netsec: fix error handling in netsec_register_mdio() (Yang Yingliang) - tipc: fix a null-ptr-deref in tipc_topsrv_accept (Xin Long) - ALSA: ac97: fix possible memory leak in snd_ac97_dev_register() (Yang Yingliang) - arc: iounmap() arg is volatile (Randy Dunlap) - drm/msm: Fix return type of mdp4_lvds_connector_mode_valid (Nathan Huckleberry) - media: v4l2: Fix v4l2_i2c_subdev_set_name function documentation (Alexander Stein) - net: ieee802154: fix error return code in dgram_bind() (Wei Yongjun) - mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages (Rik van Riel) - cgroup-v1: add disabled controller check in cgroup1_parse_param() (Chen Zhou) - xen/gntdev: Prevent leaking grants (M. Vefa Bicakci) - Xen/gntdev: don't ignore kernel unmapping error (Jan Beulich) - xfs: force the log after remapping a synchronous-writes file (Chandan Babu R) - xfs: clear XFS_DQ_FREEING if we can't lock the dquot buffer to flush (Chandan Babu R) - xfs: finish dfops on every insert range shift iteration (Chandan Babu R) - s390/pci: add missing EX_TABLE entries to __pcistg_mio_inuser()/__pcilg_mio_inuser() (Heiko Carstens) - s390/futex: add missing EX_TABLE entry to __futex_atomic_op() (Heiko Carstens) - perf auxtrace: Fix address filter symbol name match for modules (Adrian Hunter) - kernfs: fix use-after-free in __kernfs_remove (Christian A. Ehrhardt) - mmc: core: Fix kernel panic when remove non-standard SDIO card (Matthew Ma) - drm/msm/hdmi: fix memory corruption with too many bridges (Johan Hovold) - drm/msm/dsi: fix memory corruption with too many bridges (Johan Hovold) - mac802154: Fix LQI recording (Miquel Raynal) - fbdev: smscufx: Fix several use-after-free bugs (Hyunwoo Kim) - iio: light: tsl2583: Fix module unloading (Shreeya Patel) - tools: iio: iio_utils: fix digit calculation (Matti Vaittinen) - xhci: Remove device endpoints from bandwidth list when freeing the device (Mathias Nyman) - mtd: rawnand: marvell: Use correct logic for nand-keep-config (Tony O'Brien) - usb: xhci: add XHCI_SPURIOUS_SUCCESS to ASM1042 despite being a V0.96 controller (Jens Glathe) - usb: bdc: change state when port disconnected (Justin Chen) - usb: dwc3: gadget: Don't set IMI for no_interrupt (Thinh Nguyen) - usb: dwc3: gadget: Stop processing more requests on IMI (Thinh Nguyen) - USB: add RESET_RESUME quirk for NVIDIA Jetson devices in RCM (Hannu Hartikainen) - ALSA: au88x0: use explicitly signed char (Jason A. Donenfeld) - ALSA: Use del_timer_sync() before freeing timer (Steven Rostedt (Google)) - can: kvaser_usb: Fix possible completions during init_completion (Anssi Hannula) - can: j1939: transport: j1939_session_skb_drop_old(): spin_unlock_irqrestore() before kfree_skb() (Yang Yingliang) - LTS tag: v5.4.222 (Sherry Yang) - once: fix section mismatch on clang builds (Greg Kroah-Hartman) - LTS tag: v5.4.221 (Sherry Yang) - mm: /proc/pid/smaps_rollup: fix no vma's null-deref (Seth Jenkins) - hv_netvsc: Fix race between VF offering and VF association message from host (Gaurav Kohli) - Makefile.debug: re-enable debug info for .S files (Nick Desaulniers) - ACPI: video: Force backlight native for more TongFang devices (Werner Sembach) - riscv: topology: fix default topology reporting (Conor Dooley) - arm64: topology: move store_cpu_topology() to shared code (Conor Dooley) - iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) - net: hns: fix possible memory leak in hnae_ae_register() (Yang Yingliang) - net: sched: cake: fix null pointer access issue when cake_init() fails (Zhengchao Shao) - net: phy: dp83867: Extend RX strap quirk for SGMII mode (Harini Katakam) - net/atm: fix proc_mpc_write incorrect return value (Xiaobo Liu) - HID: magicmouse: Do not set BTN_MOUSE on double report (Jose Exposito) - tipc: fix an information leak in tipc_topsrv_kern_subscr (Alexander Potapenko) - tipc: Fix recognition of trial period (Mark Tomlinson) - ACPI: extlog: Handle multiple records (Tony Luck) - btrfs: fix processing of delayed tree block refs during backref walking (Filipe Manana) - btrfs: fix processing of delayed data refs during backref walking (Filipe Manana) - r8152: add PID for the Lenovo OneLink+ Dock (Jean-Francois Le Fillatre) - arm64: errata: Remove AES hwcap for COMPAT tasks (James Morse) - media: venus: dec: Handle the case where find_format fails (Bryan O'Donoghue) - KVM: arm64: vgic: Fix exit condition in scan_its_table() (Eric Ren) - ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS (Kai-Heng Feng) - ata: ahci-imx: Fix MODULE_ALIAS (Alexander Stein) - hwmon/coretemp: Handle large core ID value (Zhang Rui) - ocfs2: fix BUG when iput after ocfs2_mknod fails (Joseph Qi) - ocfs2: clear dinode links count in case of error (Joseph Qi) - xfs: fix use-after-free on CIL context on shutdown (Dave Chinner) - xfs: reflink should force the log out if mounted with wsync (Christoph Hellwig) - xfs: factor out a new xfs_log_force_inode helper (Christoph Hellwig) - xfs: trylock underlying buffer on dquot flush (Brian Foster) - xfs: don't write a corrupt unmount record to force summary counter recalc (Darrick J. Wong) - xfs: tail updates only need to occur when LSN changes (Dave Chinner) - xfs: factor common AIL item deletion code (Dave Chinner) - xfs: Throttle commits on delayed background CIL push (Dave Chinner) - xfs: Lower CIL flush limit for large logs (Dave Chinner) - xfs: preserve default grace interval during quotacheck (Darrick J. Wong) - xfs: fix unmount hang and memory leak on shutdown during quotaoff (Brian Foster) - xfs: factor out quotaoff intent AIL removal and memory free (Brian Foster) - xfs: Replace function declaration by actual definition (Pavel Reichl) - xfs: remove the xfs_qoff_logitem_t typedef (Pavel Reichl) - xfs: remove the xfs_dq_logitem_t typedef (Pavel Reichl) - xfs: remove the xfs_disk_dquot_t and xfs_dquot_t (Pavel Reichl) - xfs: check owner of dir3 blocks (Darrick J. Wong) - xfs: check owner of dir3 data blocks (Darrick J. Wong) - xfs: fix buffer corruption reporting when xfs_dir3_free_header_check fails (Darrick J. Wong) - xfs: xfs_buf_corruption_error should take __this_address (Darrick J. Wong) - xfs: add a function to deal with corrupt buffers post-verifiers (Darrick J. Wong) - xfs: rework collapse range into an atomic operation (Brian Foster) - xfs: rework insert range into an atomic operation (Brian Foster) - xfs: open code insert range extent split helper (Brian Foster) - LTS tag: v5.4.220 (Sherry Yang) - thermal: intel_powerclamp: Use first online CPU as control_cpu (Rafael J. Wysocki) - inet: fully convert sk->sk_rx_dst to RCU rules (Eric Dumazet) - efi: libstub: drop pointless get_memory_map() call (Ard Biesheuvel) - md: Replace snprintf with scnprintf (Saurabh Sengar) - ext4: continue to expand file system when the target size doesn't reach (Jerry Lee ) - net/ieee802154: don't warn zero-sized raw_sendmsg() (Tetsuo Handa) - Revert 'net/ieee802154: reject zero-sized raw_sendmsg()' (Alexander Aring) - perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc (Adrian Hunter) - clk: bcm2835: Make peripheral PLLC critical (Maxime Ripard) - usb: idmouse: fix an uninit-value in idmouse_open (Dongliang Mu) - nvmet-tcp: add bounds check on Transfer Tag (Varun Prakash) - nvme: copy firmware_rev on each init (Keith Busch) - staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv() (Xiaoke Wang) - Revert 'usb: storage: Add quirk for Samsung Fit flash' (sunghwan jung) - usb: musb: Fix musb_gadget.c rxstate overflow bug (Robin Guo) - usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info() (Jianglei Nie) - md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d (Logan Gunthorpe) - HID: roccat: Fix use-after-free in roccat_read() (Hyunwoo Kim) - bcache: fix set_at_max_writeback_rate() for multiple attached devices (Coly Li) - ata: libahci_platform: Sanity check the DT child nodes number (Serge Semin) - staging: vt6655: fix potential memory leak (Nam Cao) - power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type() (Wei Yongjun) - nbd: Fix hung when signal interrupts nbd_start_device_ioctl() (Shigeru Yoshida) - scsi: 3w-9xxx: Avoid disabling device if failing to enable it (Letu Ren) - clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate (Quanyang Wang) - media: cx88: Fix a null-ptr-deref bug in buffer_prepare() (Zheyu Ma) - clk: zynqmp: Fix stack-out-of-bounds in strncpy (Ian Nam) - btrfs: scrub: try to fix super block errors (Qu Wenruo) - ARM: dts: imx6sx: add missing properties for sram (Alexander Stein) - ARM: dts: imx6sll: add missing properties for sram (Alexander Stein) - ARM: dts: imx6sl: add missing properties for sram (Alexander Stein) - ARM: dts: imx6qp: add missing properties for sram (Alexander Stein) - ARM: dts: imx6dl: add missing properties for sram (Alexander Stein) - ARM: dts: imx6q: add missing properties for sram (Alexander Stein) - ARM: dts: imx7d-sdb: config the max pressure for tsc2046 (Haibo Chen) - mmc: sdhci-msm: add compatible string check for sdm670 (Richard Acayan) - drm/amdgpu: fix initial connector audio value (hongao) - platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading (Hans de Goede) - drm: panel-orientation-quirks: Add quirk for Anbernic Win600 (Maya Matuszczyk) - drm/vc4: vec: Fix timings for VEC modes (Mateusz Kwiatkowski) - drm/amd/display: fix overflow on MIN_I64 definition (David Gow) - drm: Prevent drm_copy_field() to attempt copying a NULL pointer (Javier Martinez Canillas) - drm: Use size_t type for len variable in drm_copy_field() (Javier Martinez Canillas) - drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc() (Jianglei Nie) - r8152: Rate limit overflow messages (Andrew Gaul) - Bluetooth: L2CAP: Fix user-after-free (Luiz Augusto von Dentz) - net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory (Liu Jian) - wifi: rt2x00: correctly set BBP register 86 for MT7620 (Daniel Golle) - wifi: rt2x00: set SoC wmac clock register (Daniel Golle) - wifi: rt2x00: set VGC gain for both chains of MT7620 (Daniel Golle) - wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620 (Daniel Golle) - wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620 (Daniel Golle) - can: bcm: check the result of can_send() in bcm_can_tx() (Ziyang Xuan) - Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times (Luiz Augusto von Dentz) - Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create() (Tetsuo Handa) - wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() (Alexander Coffin) - xfrm: Update ipcomp_scratches with NULL when freed (Khalid Masum) - wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg() (Tetsuo Handa) - tcp: annotate data-race around tcp_md5sig_pool_populated (Eric Dumazet) - openvswitch: Fix overreporting of drops in dropwatch (Mike Pattrick) - openvswitch: Fix double reporting of drops in dropwatch (Mike Pattrick) - bpftool: Clear errno after libcap's checks (Quentin Monnet) - wifi: brcmfmac: fix invalid address access when enabling SCAN log level (Wright Feng) - NFSD: Return nfserr_serverfault if splice_ok but buf->pages have data (Anna Schumaker) - thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash (Srinivas Pandruvada) - powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue (Chao Qin) - MIPS: BCM47XX: Cast memcmp() of function to (void *) (Kees Cook) - ACPI: video: Add Toshiba Satellite/Portege Z830 quirk (Arvid Norlander) - f2fs: fix race condition on setting FI_NO_EXTENT flag (Zhang Qilong) - crypto: cavium - prevent integer overflow loading firmware (Dan Carpenter) - kbuild: remove the target in signal traps when interrupted (Masahiro Yamada) - iommu/iova: Fix module config properly (Robin Murphy) - crypto: ccp - Release dma channels before dmaengine unrgister (Koba Ko) - crypto: akcipher - default implementation for setting a private key (Ignat Korchagin) - iommu/omap: Fix buffer overflow in debugfs (Dan Carpenter) - cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset (Waiman Long) - powerpc: Fix SPE Power ISA properties for e500v1 platforms (Pali Rohar) - powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5 (Nicholas Piggin) - x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition (Vitaly Kuznetsov) - powerpc/powernv: add missing of_node_put() in opal_export_attrs() (Zheng Yongjun) - powerpc/pci_dn: Add missing of_node_put() (Liang He) - powerpc/sysdev/fsl_msi: Add missing of_node_put() (Liang He) - powerpc/math_emu/efp: Include module.h (Nathan Chancellor) - mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg (Jack Wang) - clk: ast2600: BCLK comes from EPLL (Joel Stanley) - clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe (Miaoqian Lin) - clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration (Stefan Wahren) - spmi: pmic-arb: correct duplicate APID to PPID mapping logic (David Collins) - dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup() (Dave Jiang) - clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent (Chen-Yu Tsai) - mfd: sm501: Add check for platform_driver_register() (Jiasheng Jiang) - mfd: fsl-imx25: Fix check for platform_get_irq() errors (Dan Carpenter) - mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init() (Christophe JAILLET) - mfd: lp8788: Fix an error handling path in lp8788_probe() (Christophe JAILLET) - mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq() (Christophe JAILLET) - mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe() (Christophe JAILLET) - fsi: core: Check error number after calling ida_simple_get (Jiasheng Jiang) - scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() (Duoming Zhou) - serial: 8250: Fix restoring termios speed after suspend (Pali Rohar) - firmware: google: Test spinlock on panic path to avoid lockups (Guilherme G. Piccoli) - staging: vt6655: fix some erroneous memory clean-up loops (Nam Cao) - phy: qualcomm: call clk_disable_unprepare in the error handling (Dongliang Mu) - tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown (Sherry Sun) - drivers: serial: jsm: fix some leaks in probe (Dan Carpenter) - usb: gadget: function: fix dangling pnp_string in f_printer.c (Albert Briscoe) - xhci: Don't show warning for reinit on known broken suspend (Mario Limonciello) - md/raid5: Ensure stripe_fill happens on non-read IO with journal (Logan Gunthorpe) - mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct() (Dan Carpenter) - ata: fix ata_id_has_dipm() (Niklas Cassel) - ata: fix ata_id_has_ncq_autosense() (Niklas Cassel) - ata: fix ata_id_has_devslp() (Niklas Cassel) - ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting() (Niklas Cassel) - RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall. (Bernard Metzler) - mtd: devices: docg3: check the return value of devm_ioremap() in the probe (William Dean) - dyndbg: let query-modname override actual module name (Jim Cromie) - dyndbg: fix module.dyndbg handling (Jim Cromie) - misc: ocxl: fix possible refcount leak in afu_ioctl() (Hangyu Hua) - RDMA/rxe: Fix the error caused by qp->sk (Zhu Yanjun) - RDMA/rxe: Fix 'kernel NULL pointer dereference' error (Zhu Yanjun) - media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init (Miaoqian Lin) - tty: xilinx_uartps: Fix the ignore_status (Shubhrajyoti Datta) - media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop (Liang He) - HSI: omap_ssi_port: Fix dma_map_sg error check (Jack Wang) - HSI: omap_ssi: Fix refcount leak in ssi_probe (Miaoqian Lin) - clk: tegra20: Fix refcount leak in tegra20_clock_init (Miaoqian Lin) - clk: tegra: Fix refcount leak in tegra114_clock_init (Miaoqian Lin) - clk: tegra: Fix refcount leak in tegra210_clock_init (Miaoqian Lin) - clk: berlin: Add of_node_put() for of_get_parent() (Liang He) - clk: oxnas: Hold reference returned by of_get_parent() (Liang He) - clk: meson: Hold reference returned by of_get_parent() (Liang He) - iio: ABI: Fix wrong format of differential capacitance channel ABI. (Jonathan Cameron) - iio: inkern: only release the device node when done with it (Nuno Sa) - iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq (Claudiu Beznea) - iio: adc: at91-sama5d2_adc: check return status for pressure and touch (Claudiu Beznea) - iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX (Claudiu Beznea) - ARM: dts: exynos: fix polarity of VBUS GPIO of Origen (Dmitry Torokhov) - ARM: Drop CMDLINE_* dependency on ATAGS (Geert Uytterhoeven) - ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family (Dmitry Torokhov) - ARM: dts: kirkwood: lsxl: remove first ethernet port (Michael Walle) - ARM: dts: kirkwood: lsxl: fix serial line (Michael Walle) - ARM: dts: turris-omnia: Fix mpp26 pin name and comment (Marek Behun) - soc: qcom: smem_state: Add refcounting for the 'state->of_node' (Liang He) - soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe() (Liang He) - memory: of: Fix refcount leak bug in of_get_ddr_timings() (Liang He) - memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe() (Liang He) - ALSA: hda/hdmi: Don't skip notification handling during PM operation (Takashi Iwai) - ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe (Zhang Qilong) - ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe (Zhang Qilong) - ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe (Zhang Qilong) - mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe() (Christophe JAILLET) - ALSA: dmaengine: increment buffer pointer atomically (Andreas Pape) - drm/msm/dpu: index dpu_kms->hw_vbif using vbif_idx (Dmitry Baryshkov) - ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API (Liang He) - mmc: au1xmmc: Fix an error handling path in au1xmmc_probe() (Christophe JAILLET) - drm/omap: dss: Fix refcount leak bugs (Liang He) - ASoC: rsnd: Add check for rsnd_mod_power_on (Jiasheng Jiang) - drm/bridge: megachips: Fix a null pointer dereference bug (Zheyu Ma) - drm: fix drm_mipi_dbi build errors (Randy Dunlap) - platform/x86: msi-laptop: Fix resource cleanup (Hans de Goede) - platform/x86: msi-laptop: Fix old-ec check for backlight registering (Hans de Goede) - platform/chrome: fix memory corruption in ioctl (Dan Carpenter) - platform/chrome: fix double-free in chromeos_laptop_prepare() (Rustam Subkhankulov) - drm/mipi-dsi: Detach devices when removing the host (Maxime Ripard) - drm: bridge: adv7511: fix CEC power down control register offset (Alvin Sipraga) - net: mvpp2: fix mvpp2 debugfs leak (Russell King (Oracle)) - once: add DO_ONCE_SLOW() for sleepable contexts (Eric Dumazet) - net/ieee802154: reject zero-sized raw_sendmsg() (Tetsuo Handa) - bnx2x: fix potential memory leak in bnx2x_tpa_stop() (Jianglei Nie) - tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited (Neal Cardwell) - sctp: handle the error returned from sctp_auth_asoc_init_active_key (Xin Long) - vhost/vsock: Use kvmalloc/kvfree for larger packets. (Junichi Uekawa) - spi: s3c64xx: Fix large transfers with DMA (Vincent Whitchurch) - netfilter: nft_fib: Fix for rpath check with VRF devices (Phil Sutter) - spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe (Zhang Qilong) - x86/microcode/AMD: Track patch allocation size explicitly (Kees Cook) - bpf: Ensure correct locking around vulnerable function find_vpid() (Lee Jones) - net: fs_enet: Fix wrong check in do_pd_setup (Zheng Yongjun) - wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration (Bitterblue Smith) - bpf: btf: fix truncated last_member_type_id in btf_struct_resolve (Lorenz Bauer) - wifi: rtl8xxxu: Fix skb misuse in TX queue selection (Bitterblue Smith) - spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime() (Xu Qiang) - spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume() (Xu Qiang) - wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse() (Dan Carpenter) - x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register (Kohei Tarumizu) - bpftool: Fix a wrong type cast in btf_dumper_int (Lam Thai) - wifi: mac80211: allow bw change during channel switch in mesh (Hari Chandrakanthan) - wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state() (Wen Gong) - nfsd: Fix a memory leak in an error handling path (Christophe JAILLET) - ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE (Wang Kefeng) - sh: machvec: Use char[] for section boundaries (Kees Cook) - userfaultfd: open userfaultfds with O_RDONLY (Ondrej Mosnacek) - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (Waiman Long) - selinux: use 'grep -E' instead of 'egrep' (Greg Kroah-Hartman) - drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table() (Jianglei Nie) - gcov: support GCC 12.1 and newer compilers (Martin Liska) - KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS (Sean Christopherson) - KVM: nVMX: Unconditionally purge queued/injected events on nested 'exit' (Sean Christopherson) - KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility (Michal Luczaj) - media: cedrus: Set the platform driver data earlier (Dmitry Osipenko) - ring-buffer: Fix race between reset page and reading page (Steven Rostedt (Google)) - ring-buffer: Check pending waiters when doing wake ups as well (Steven Rostedt (Google)) - ring-buffer: Have the shortest_full queue be the shortest not longest (Steven Rostedt (Google)) - ring-buffer: Allow splice to read previous partially read pages (Steven Rostedt (Google)) - ftrace: Properly unset FTRACE_HASH_FL_MOD (Zheng Yejian) - livepatch: fix race between fork and KLP transition (Rik van Riel) - ext4: place buffer head allocation before handle start (Jinke Han) - ext4: make ext4_lazyinit_thread freezable (Lalith Rajendran) - ext4: fix null-ptr-deref in ext4_write_info (Baokun Li) - ext4: avoid crash when inline data creation follows DIO write (Jan Kara) - jbd2: wake up journal waiters in FIFO order, not LIFO (Andrew Perepechko) - nilfs2: fix use-after-free bug of struct nilfs_root (Ryusuke Konishi) - f2fs: fix to do sanity check on summary info (Chao Yu) - f2fs: fix to do sanity check on destination blkaddr during recovery (Chao Yu) - f2fs: increase the limit for reserve_root (Jaegeuk Kim) - btrfs: fix race between quota enable and quota rescan ioctl (Filipe Manana) - fbdev: smscufx: Fix use-after-free in ufx_ops_open() (Hyunwoo Kim) - powerpc/boot: Explicitly disable usage of SPE instructions (Pali Rohar) - PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge (Maciej W. Rozycki) - UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK (Huacai Chen) - riscv: Pass -mno-relax only on lld < 15.0.0 (Fangrui Song) - riscv: Allow PROT_WRITE-only mmap() (Andrew Bresticker) - parisc: fbdev/stifb: Align graphics memory size to 4MB (Helge Deller) - RISC-V: Make port I/O string accessors actually work (Maciej W. Rozycki) - regulator: qcom_rpm: Fix circular deferral regression (Linus Walleij) - ASoC: wcd9335: fix order of Slimbus unprepare/disable (Krzysztof Kozlowski) - quota: Check next/prev free block number after reading from quota file (Zhihao Cheng) - HID: multitouch: Add memory barriers (Andri Yngvason) - fs: dlm: handle -EBUSY first in lock arg validation (Alexander Aring) - fs: dlm: fix race between test_bit() and queue_work() (Alexander Aring) - mmc: sdhci-sprd: Fix minimum clock limit (Wenchao Chen) - can: kvaser_usb_leaf: Fix CAN state after restart (Anssi Hannula) - can: kvaser_usb_leaf: Fix TX queue out of sync after restart (Anssi Hannula) - can: kvaser_usb_leaf: Fix overread with an invalid command (Anssi Hannula) - can: kvaser_usb: Fix use of uninitialized completion (Anssi Hannula) - usb: add quirks for Lenovo OneLink+ Dock (Jean-Francois Le Fillatre) - iio: pressure: dps310: Reset chip after timeout (Eddie James) - iio: pressure: dps310: Refactor startup procedure (Eddie James) - iio: dac: ad5593r: Fix i2c read protocol requirements (Michael Hennerich) - cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message (Zhang Xiaoxu) - cifs: destage dirty pages before re-reading them for cache=none (Ronnie Sahlberg) - mtd: rawnand: atmel: Unmap streaming DMA mappings (Tudor Ambarus) - ALSA: hda/realtek: Add Intel Reference SSID to support headset keys (Saranya Gopal) - ALSA: hda/realtek: Add quirk for ASUS GV601R laptop (Luke D. Jones) - ALSA: usb-audio: Fix NULL dererence at error path (Takashi Iwai) - ALSA: usb-audio: Fix potential memory leaks (Takashi Iwai) - ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free() (Takashi Iwai) - ALSA: oss: Fix potential deadlock at unregistration (Takashi Iwai) - LTS tag: v5.4.219 (Sherry Yang) - wifi: mac80211: fix MBSSID parsing use-after-free (Johannes Berg) - wifi: mac80211: don't parse mbssid in assoc response (Johannes Berg) - mac80211: mlme: find auth challenge directly (Johannes Berg) [5.4.17-2136.315.1] - Adding a new sysfs entry point -- forcepower -- to /sys/bus/pci/slots/X. (James Puthukattukaran) [Orabug: 34716494] - nvme: paring quiesce/unquiesce (Ming Lei) [Orabug: 34716494] - nvme: prepare for pairing quiescing and unquiescing (Ming Lei) [Orabug: 34716494] - nvme: apply nvme API to quiesce/unquiesce admin queue (Ming Lei) [Orabug: 34716494] - nvme: add APIs for stopping/starting admin queue (Ming Lei) [Orabug: 34716494] - nvme-fc: remove freeze/unfreeze around update_nr_hw_queues (James Smart) [Orabug: 34716494] - nvme-fc: avoid race between time out and tear down (James Smart) [Orabug: 34716494] - nvme-fc: update hardware queues before using them (Daniel Wagner) [Orabug: 34716494] - nvme-fabrics: reject I/O to offline device (Victor Gladkov) [Orabug: 34716494] - nvme-fc: wait for queues to freeze before calling update_hr_hw_queues (James Smart) [Orabug: 34716494] - RDMA/uverbs: Move IB_EVENT_DEVICE_FATAL to destroy_uobj (Jason Gunthorpe) [Orabug: 34802357] - RDMA/uverbs: Do not discard the IB_EVENT_DEVICE_FATAL event (Jason Gunthorpe) [Orabug: 34802357] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-42895 CVE-2022-4378 Oracle Linux 7 Oracle Linux 8 [5.4.17-2136.315.5] - Revert 'xfs: fix use-after-free on CIL context on shutdown' (Sherry Yang) [Orabug: 34917369] [5.4.17-2136.315.4] - net/mlx5: Suppress error logging on UCTX creation (Marina) [Orabug: 34888473] - uek-rpm: Add ptp_kvm.ko to nano rpm (Somasundaram Krishnasamy) [Orabug: 33487655] - block: fix RO partition with RW disk (Junxiao Bi) [Orabug: 34807898] - rds: ib: Fix leaked MRs during kexec (Hakon Bugge) [Orabug: 34829924] - scsi: mpi3mr: Enable ' CONFIG_SCSI_SAS_ATTRS ' config option (Rhythm Mahajan) [Orabug: 34774474] - scsi: mpi3mr: Remove unnecessary cast (Jules Irenge) [Orabug: 34774474] - scsi: mpi3mr: Update driver version to 8.2.0.3.0 (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Fix scheduling while atomic type bug (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Scan the devices during resume time (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Free enclosure objects during driver unload (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Handle 0xF003 Fault Code (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Graceful handling of surprise removal of PCIe HBA (Chandrakanth patil) [Orabug: 34774474] - scsi: mpi3mr: Schedule IRQ kthreads only on non-RT (Chandrakanth patil) [Orabug: 34774474] - scsi: mpi3mr: Support new power management framework (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Update mpi3 header files (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Fix error code in mpi3mr_transport_smp_handler() (Dan Carpenter) [Orabug: 34774474] - scsi: mpi3mr: Fix error codes in mpi3mr_report_manufacture() (Dan Carpenter) [Orabug: 34774474] - scsi: mpi3mr: Block I/Os while refreshing target dev objects (Chandrakanth patil) [Orabug: 34774474] - scsi: mpi3mr: Refresh SAS ports during soft reset (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Support SAS transport class callbacks (Chandrakanth patil) [Orabug: 34774474] - scsi: mpi3mr: Add framework to issue MPT transport cmds (Chandrakanth patil) [Orabug: 34774474] - scsi: mpi3mr: Add SAS SATA end devices to STL (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Get target object based on rphy (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Add expander devices to STL (Chandrakanth patil) [Orabug: 34774474] - scsi: mpi3mr: Enable STL on HBAs where multipath is disabled (Chandrakanth patil) [Orabug: 34774474] - scsi: mpi3mr: Add helper functions to manage device's port (Chandrakanth patil) [Orabug: 34774474] - scsi: mpi3mr: Add helper functions to retrieve device objects (Chandrakanth patil) [Orabug: 34774474] - scsi: mpi3mr: Add framework to add phys to STL (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Enable Enclosure device add event (Chandrakanth patil) [Orabug: 34774474] - scsi: mpi3mr: Add helper functions to retrieve config pages (Chandrakanth patil) [Orabug: 34774474] - scsi: mpi3mr: Add framework to issue config requests (Chandrakanth patil) [Orabug: 34774474] - scsi: mpi3mr: Add config and transport related debug flags (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Delete a stray tab (Dan Carpenter) [Orabug: 34774474] - scsi: mpi3mr: Unlock on error path (Dan Carpenter) [Orabug: 34774474] - scsi: mpi3mr: Reduce VD queue depth on detecting throttling (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Resource Based Metering (Chandrakanth patil) [Orabug: 34774474] - scsi: mpi3mr: Increase cmd_per_lun to 128 (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Fix kernel-doc (Chandrakanth patil) [Orabug: 34774474] - scsi: mpi3mr: Rework mrioc->bsg_device model to fix warnings (Chandrakanth patil) [Orabug: 34774474] - scsi: mpi3mr: Add target device related sysfs (Chandrakanth patil) [Orabug: 34774474] - scsi: mpi3mr: Add shost related sysfs attributes (Chandrakanth patil) [Orabug: 34774474] - scsi: mpi3mr: Return error if dma_alloc_coherent() fails (Dan Carpenter) [Orabug: 34774474] - scsi: mpi3mr: Fix a NULL vs IS_ERR() bug in mpi3mr_bsg_init() (Dan Carpenter) [Orabug: 34774474] - scsi: mpi3mr: Return I/Os to an unrecoverable HBA with DID_ERROR (Chandrakanth patil) [Orabug: 34774474] - scsi: mpi3mr: Hidden drives not removed during soft reset (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Increase I/O timeout value to 60s (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Update driver version to 8.0.0.69.0 (Sumit Saxena) [Orabug: 34774474] - scsi: mpi3mr: Add support for NVMe passthrough (Sumit Saxena) [Orabug: 34774474] - scsi: mpi3mr: Expose adapter state to sysfs (Chandrakanth patil) [Orabug: 34774474] - scsi: mpi3mr: Add support for PEL commands (Chandrakanth patil) [Orabug: 34774474] - scsi: mpi3mr: Add support for MPT commands (Chandrakanth patil) [Orabug: 34774474] - scsi: mpi3mr: Move data structures/definitions from MPI headers to uapi header (Sumit Saxena) [Orabug: 34774474] - scsi: mpi3mr: Add support for driver commands (Chandrakanth patil) [Orabug: 34774474] - scsi: mpi3mr: Add bsg device support (Chandrakanth patil) [Orabug: 34774474] - scsi: mpi3mr: Fix flushing !WQ_MEM_RECLAIM events warning (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Bump driver version to 8.0.0.68.0 (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Update the copyright year (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Fix cmnd getting marked as in use forever (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Fix hibernation issue (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Update MPI3 headers (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Fix printing of pending I/O count (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Fix deadlock while canceling the fw event (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Fix formatting problems in some kernel-doc comments (Yang Li) [Orabug: 34774474] - scsi: mpi3mr: Fix some spelling mistakes (Colin Ian King) [Orabug: 34774474] - scsi: mpi3mr: Bump driver version to 8.0.0.61.0 (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Enhanced Task Management Support Reply handling (Chandrakanth patil) [Orabug: 34774474] - scsi: mpi3mr: Use TM response codes from MPI3 headers (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Print cable mngnt and temp threshold events (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Support Prepare for Reset event (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Add Event acknowledgment logic (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Gracefully handle online FW update operation (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Detect async reset that occurred in firmware (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Add IOC reinit function (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Handle offline FW activation in graceful manner (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Code refactor of IOC init - part2 (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Code refactor of IOC init - part1 (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Fault IOC when internal command gets timeout (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Display IOC firmware package version (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Handle unaligned PLL in unmap cmnds (Chandrakanth patil) [Orabug: 34774474] - scsi: mpi3mr: Increase internal cmnds timeout to 60s (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Do access status validation before adding devices (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Add support for PCIe Managed Switch SES device (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Update MPI3 headers - part2 (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Update MPI3 headers - part1 (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Don't reset IOC if cmnds flush with reset status (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Replace spin_lock() with spin_lock_irqsave() (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Add debug APIs based on logging_level bits (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Use scnprintf() instead of snprintf() (Dan Carpenter) [Orabug: 34774474] - scsi: mpi3mr: Clean up mpi3mr_print_ioc_info() (Dan Carpenter) [Orabug: 34774474] - scsi: mpi3mr: Fix memory leaks (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Fix reporting of actual data transfer size (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Fixes around reply request queues (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Fix duplicate device entries when scanning through sysfs (Sreekanth Reddy) [Orabug: 34774474] - scsi: mpi3mr: Set up IRQs in resume path (Kashyap Desai) [Orabug: 34774474] - scsi: mpi3mr: Use the proper SCSI midlayer interfaces for PI (Chandrakanth patil) [Orabug: 34774474] - scsi: mpi3mr: Fix W=1 compilation warnings (Sreekanth Reddy) [Orabug: 34774474] - net/mlx5e: Fix division by 0 in mlx5e_select_queue for representors (Maxim Mikityanskiy) [Orabug: 34898148] - net/mlx5e: Abstract MQPRIO params (Tariq Toukan) [Orabug: 34898148] - proc: proc_skip_spaces() shouldn't think it is working on C strings (Linus Torvalds) [Orabug: 34882779] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Linus Torvalds) [Orabug: 34882779] {CVE-2022-4378} [5.4.17-2136.315.3] - pensando: kpcimgr: extend API to allow sysfs commands (Rob Gardner) [Orabug: 34676926] - hugetlbfs: don't delete error page from pagecache (James Houghton) [Orabug: 34772617] - mm: shmem: don't truncate page if memory failure happens (Yang Shi) [Orabug: 34772617] - mm: hwpoison: refactor refcount check handling (Yang Shi) [Orabug: 34772617] - rds: ib: Fix incorrect error handling during QP creation (Hakon Bugge) [Orabug: 34849243] - Arm64: Pensando: Add support for tps53659 voltage regulator (Austin Sehnert) [Orabug: 34868906] - hwmon: (pmbus/core) Add support for vid mode detection per page bases (Vadim Pasternak) [Orabug: 34868906] - Arm64: Pensando: Enable ltc2978 driver for Ortano ADI cards (Austin Sehnert) [Orabug: 34873762] [5.4.17-2136.315.2] - x86/kvm/vmx: Make noinstr clean (Peter Zijlstra) - x86/speculation: Use cached host SPEC_CTRL value for guest entry/exit (Josh Poimboeuf) - x86/entry: Remove skip_r11rcx (Peter Zijlstra) - mISDN: fix misuse of put_device() in mISDN_register_device() (Wang ShaoBo) - ASoC: wm8997: Revert 'ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe' (Zhang Qilong) - ASoC: wm5110: Revert 'ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe' (Zhang Qilong) - ASoC: wm5102: Revert 'ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe' (Zhang Qilong) - LTS tag: v5.4.224 (Sherry Yang) - ipc: remove memcg accounting for sops objects in do_semtimedop() (Vasily Averin) - wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker() (Dokyung Song) {CVE-2022-3628} - drm/i915/sdvo: Setup DDC fully before output init (Ville Syrjala) - drm/i915/sdvo: Filter out invalid outputs more sensibly (Ville Syrjala) - drm/rockchip: dsi: Force synchronous probe (Brian Norris) - mtd: rawnand: gpmi: Set WAIT_FOR_READY timeout based on program/erase times (Sascha Hauer) - KVM: x86: emulator: update the emulation mode after CR0 write (Maxim Levitsky) - KVM: x86: emulator: introduce emulator_recalc_and_set_mode (Maxim Levitsky) - KVM: x86: emulator: em_sysexit should update ctxt->mode (Maxim Levitsky) - KVM: x86: Mask off reserved bits in CPUID.80000008H (Jim Mattson) - KVM: x86: Mask off reserved bits in CPUID.8000001AH (Jim Mattson) - ext4: fix BUG_ON() when directory entry has invalid rec_len (Luis Henriques) - ext4: fix warning in 'ext4_da_release_space' (Ye Bin) - parisc: Avoid printing the hardware path twice (Helge Deller) - parisc: Export iosapic_serial_irq() symbol for serial port driver (Helge Deller) - parisc: Make 8250_gsc driver dependend on CONFIG_PARISC (Helge Deller) - ALSA: usb-audio: Add quirks for MacroSilicon MS2100/MS2106 devices (John Veness) - perf/x86/intel: Add Cooper Lake stepping to isolation_ucodes[] (Kan Liang) - perf/x86/intel: Fix pebs event constraints for ICL (Kan Liang) - efi: random: reduce seed size to 32 bytes (Ard Biesheuvel) - fuse: add file_modified() to fallocate (Miklos Szeredi) - capabilities: fix potential memleak on error path from vfs_getxattr_alloc() (Gaosheng Cui) - tracing/histogram: Update document for KEYS_MAX size (Zheng Yejian) - tools/nolibc/string: Fix memcmp() implementation (Rasmus Villemoes) - kprobe: reverse kp->flags when arm_kprobe failed (Li Qiang) - tcp/udp: Make early_demux back namespacified. (Kuniyuki Iwashima) - btrfs: fix type of parameter generation in btrfs_get_dentry (David Sterba) - binder: fix UAF of alloc->vma in race with munmap() (Carlos Llamas) - memcg: enable accounting of ipc resources (Vasily Averin) - tcp/udp: Fix memory leak in ipv6_renew_options(). (Kuniyuki Iwashima) - block, bfq: protect 'bfqd->queued' by 'bfqd->lock' (Yu Kuai) - Bluetooth: L2CAP: Fix attempting to access uninitialized memory (Luiz Augusto von Dentz) {CVE-2022-42895} - xfs: Add the missed xfs_perag_put() for xfs_ifree_cluster() (Chuhong Yuan) - xfs: group quota should return EDQUOT when prj quota enabled (Eric Sandeen) - xfs: gut error handling in xfs_trans_unreserve_and_mod_sb() (Dave Chinner) - xfs: use ordered buffers to initialize dquot buffers during quotacheck (Darrick J. Wong) - xfs: don't fail verifier on empty attr3 leaf block (Brian Foster) - i2c: xiic: Add platform module alias (Martin Tuma) - HID: saitek: add madcatz variant of MMO7 mouse device ID (Samuel Bailey) - scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) - media: meson: vdec: fix possible refcount leak in vdec_probe() (Hangyu Hua) - media: dvb-frontends/drxk: initialize err to 0 (Hans Verkuil) - media: cros-ec-cec: limit msg.len to CEC_MAX_MSG_SIZE (Hans Verkuil) - media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE (Hans Verkuil) - ipv6: fix WARNING in ip6_route_net_exit_late() (Zhengchao Shao) - net, neigh: Fix null-ptr-deref in neigh_table_clear() (Chen Zhongjin) - net: mdio: fix undefined behavior in bit shift for __mdiobus_register (Gaosheng Cui) - Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del() (Zhengchao Shao) - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Maxim Mikityanskiy) - btrfs: fix ulist leaks in error paths of qgroup self tests (Filipe Manana) - btrfs: fix inode list leak during backref walking at find_parent_nodes() (Filipe Manana) - btrfs: fix inode list leak during backref walking at resolve_indirect_refs() (Filipe Manana) - isdn: mISDN: netjet: fix wrong check of device registration (Yang Yingliang) - mISDN: fix possible memory leak in mISDN_register_device() (Yang Yingliang) - rose: Fix NULL pointer dereference in rose_send_frame() (Zhang Qilong) - ipvs: fix WARNING in ip_vs_app_net_cleanup() (Zhengchao Shao) - ipvs: fix WARNING in __ip_vs_cleanup_batch() (Zhengchao Shao) - ipvs: use explicitly signed chars (Jason A. Donenfeld) - netfilter: nf_tables: release flow rule object from commit path (Pablo Neira Ayuso) - net: tun: fix bugs for oversize packet when napi frags enabled (Ziyang Xuan) - net: sched: Fix use after free in red_enqueue() (Dan Carpenter) - ata: pata_legacy: fix pdc20230_set_piomode() (Sergey Shtylyov) - net: fec: fix improper use of NETDEV_TX_BUSY (Zhang Changzhong) - nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send() (Shang XiaoJing) - nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send() (Shang XiaoJing) - RDMA/qedr: clean up work queue on failure in qedr_alloc_resources() (Dan Carpenter) - RDMA/core: Fix null-ptr-deref in ib_core_cleanup() (Chen Zhongjin) - net: dsa: Fix possible memory leaks in dsa_loop_init() (Chen Zhongjin) - nfs4: Fix kmemleak when allocate slot failed (Zhang Xiaoxu) - NFSv4.1: We must always send RECLAIM_COMPLETE after a reboot (Trond Myklebust) - NFSv4.1: Handle RECLAIM_COMPLETE trunking errors (Trond Myklebust) - IB/hfi1: Correctly move list in sc_disable() (Dean Luick) - LTS tag: v5.4.223 (Sherry Yang) - can: rcar_canfd: rcar_canfd_handle_global_receive(): fix IRQ storm on global FIFO receive (Biju Das) - net: enetc: survive memory pressure without crashing (Vladimir Oltean) - net/mlx5: Fix possible use-after-free in async command interface (Tariq Toukan) - net/mlx5e: Do not increment ESN when updating IPsec ESN state (Hyong Youb Kim) - nh: fix scope used to find saddr when adding non gw nh (Nicolas Dichtel) - net: ehea: fix possible memory leak in ehea_register_port() (Yang Yingliang) - openvswitch: switch from WARN to pr_warn (Aaron Conole) - ALSA: aoa: Fix I2S device accounting (Takashi Iwai) - ALSA: aoa: i2sbus: fix possible memory leak in i2sbus_add_dev() (Yang Yingliang) - PM: domains: Fix handling of unavailable/disabled idle states (Sudeep Holla) - net: ksz884x: fix missing pci_disable_device() on error in pcidev_init() (Yang Yingliang) - i40e: Fix flow-type by setting GL_HASH_INSET registers (Slawomir Laba) - i40e: Fix VF hang when reset is triggered on another VF (Sylwester Dziedziuch) - i40e: Fix ethtool rx-flow-hash setting for X722 (Slawomir Laba) - media: videodev2.h: V4L2_DV_BT_BLANKING_HEIGHT should check 'interlaced' (Hans Verkuil) - media: v4l2-dv-timings: add sanity checks for blanking values (Hans Verkuil) - media: vivid: dev->bitmap_cap wasn't freed in all cases (Hans Verkuil) - media: vivid: s_fbuf: add more sanity checks (Hans Verkuil) - PM: hibernate: Allow hybrid sleep to work with s2idle (Mario Limonciello) - can: mscan: mpc5xxx: mpc5xxx_can_probe(): add missing put_clock() in error path (Dongliang Mu) - tcp: fix indefinite deferral of RTO with SACK reneging (Neal Cardwell) - net: lantiq_etop: don't free skb when returning NETDEV_TX_BUSY (Zhang Changzhong) - net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed (Zhengchao Shao) - kcm: annotate data-races around kcm->rx_wait (Eric Dumazet) - kcm: annotate data-races around kcm->rx_psock (Eric Dumazet) - amd-xgbe: add the bit rate quirk for Molex cables (Raju Rangoju) - amd-xgbe: fix the SFP compliance codes check for DAC cables (Raju Rangoju) - x86/unwind/orc: Fix unreliable stack dump with gcov (Chen Zhongjin) - net: netsec: fix error handling in netsec_register_mdio() (Yang Yingliang) - tipc: fix a null-ptr-deref in tipc_topsrv_accept (Xin Long) - ALSA: ac97: fix possible memory leak in snd_ac97_dev_register() (Yang Yingliang) - arc: iounmap() arg is volatile (Randy Dunlap) - drm/msm: Fix return type of mdp4_lvds_connector_mode_valid (Nathan Huckleberry) - media: v4l2: Fix v4l2_i2c_subdev_set_name function documentation (Alexander Stein) - net: ieee802154: fix error return code in dgram_bind() (Wei Yongjun) - mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages (Rik van Riel) - cgroup-v1: add disabled controller check in cgroup1_parse_param() (Chen Zhou) - xen/gntdev: Prevent leaking grants (M. Vefa Bicakci) - Xen/gntdev: don't ignore kernel unmapping error (Jan Beulich) - xfs: force the log after remapping a synchronous-writes file (Chandan Babu R) - xfs: clear XFS_DQ_FREEING if we can't lock the dquot buffer to flush (Chandan Babu R) - xfs: finish dfops on every insert range shift iteration (Chandan Babu R) - s390/pci: add missing EX_TABLE entries to __pcistg_mio_inuser()/__pcilg_mio_inuser() (Heiko Carstens) - s390/futex: add missing EX_TABLE entry to __futex_atomic_op() (Heiko Carstens) - perf auxtrace: Fix address filter symbol name match for modules (Adrian Hunter) - kernfs: fix use-after-free in __kernfs_remove (Christian A. Ehrhardt) - mmc: core: Fix kernel panic when remove non-standard SDIO card (Matthew Ma) - drm/msm/hdmi: fix memory corruption with too many bridges (Johan Hovold) - drm/msm/dsi: fix memory corruption with too many bridges (Johan Hovold) - mac802154: Fix LQI recording (Miquel Raynal) - fbdev: smscufx: Fix several use-after-free bugs (Hyunwoo Kim) - iio: light: tsl2583: Fix module unloading (Shreeya Patel) - tools: iio: iio_utils: fix digit calculation (Matti Vaittinen) - xhci: Remove device endpoints from bandwidth list when freeing the device (Mathias Nyman) - mtd: rawnand: marvell: Use correct logic for nand-keep-config (Tony O'Brien) - usb: xhci: add XHCI_SPURIOUS_SUCCESS to ASM1042 despite being a V0.96 controller (Jens Glathe) - usb: bdc: change state when port disconnected (Justin Chen) - usb: dwc3: gadget: Don't set IMI for no_interrupt (Thinh Nguyen) - usb: dwc3: gadget: Stop processing more requests on IMI (Thinh Nguyen) - USB: add RESET_RESUME quirk for NVIDIA Jetson devices in RCM (Hannu Hartikainen) - ALSA: au88x0: use explicitly signed char (Jason A. Donenfeld) - ALSA: Use del_timer_sync() before freeing timer (Steven Rostedt (Google)) - can: kvaser_usb: Fix possible completions during init_completion (Anssi Hannula) - can: j1939: transport: j1939_session_skb_drop_old(): spin_unlock_irqrestore() before kfree_skb() (Yang Yingliang) - LTS tag: v5.4.222 (Sherry Yang) - once: fix section mismatch on clang builds (Greg Kroah-Hartman) - LTS tag: v5.4.221 (Sherry Yang) - mm: /proc/pid/smaps_rollup: fix no vma's null-deref (Seth Jenkins) - hv_netvsc: Fix race between VF offering and VF association message from host (Gaurav Kohli) - Makefile.debug: re-enable debug info for .S files (Nick Desaulniers) - ACPI: video: Force backlight native for more TongFang devices (Werner Sembach) - riscv: topology: fix default topology reporting (Conor Dooley) - arm64: topology: move store_cpu_topology() to shared code (Conor Dooley) - iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar) - net: hns: fix possible memory leak in hnae_ae_register() (Yang Yingliang) - net: sched: cake: fix null pointer access issue when cake_init() fails (Zhengchao Shao) - net: phy: dp83867: Extend RX strap quirk for SGMII mode (Harini Katakam) - net/atm: fix proc_mpc_write incorrect return value (Xiaobo Liu) - HID: magicmouse: Do not set BTN_MOUSE on double report (Jose Exposito) - tipc: fix an information leak in tipc_topsrv_kern_subscr (Alexander Potapenko) - tipc: Fix recognition of trial period (Mark Tomlinson) - ACPI: extlog: Handle multiple records (Tony Luck) - btrfs: fix processing of delayed tree block refs during backref walking (Filipe Manana) - btrfs: fix processing of delayed data refs during backref walking (Filipe Manana) - r8152: add PID for the Lenovo OneLink+ Dock (Jean-Francois Le Fillatre) - arm64: errata: Remove AES hwcap for COMPAT tasks (James Morse) - media: venus: dec: Handle the case where find_format fails (Bryan O'Donoghue) - KVM: arm64: vgic: Fix exit condition in scan_its_table() (Eric Ren) - ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS (Kai-Heng Feng) - ata: ahci-imx: Fix MODULE_ALIAS (Alexander Stein) - hwmon/coretemp: Handle large core ID value (Zhang Rui) - ocfs2: fix BUG when iput after ocfs2_mknod fails (Joseph Qi) - ocfs2: clear dinode links count in case of error (Joseph Qi) - xfs: fix use-after-free on CIL context on shutdown (Dave Chinner) - xfs: reflink should force the log out if mounted with wsync (Christoph Hellwig) - xfs: factor out a new xfs_log_force_inode helper (Christoph Hellwig) - xfs: trylock underlying buffer on dquot flush (Brian Foster) - xfs: don't write a corrupt unmount record to force summary counter recalc (Darrick J. Wong) - xfs: tail updates only need to occur when LSN changes (Dave Chinner) - xfs: factor common AIL item deletion code (Dave Chinner) - xfs: preserve default grace interval during quotacheck (Darrick J. Wong) - xfs: fix unmount hang and memory leak on shutdown during quotaoff (Brian Foster) - xfs: factor out quotaoff intent AIL removal and memory free (Brian Foster) - xfs: Replace function declaration by actual definition (Pavel Reichl) - xfs: remove the xfs_qoff_logitem_t typedef (Pavel Reichl) - xfs: remove the xfs_dq_logitem_t typedef (Pavel Reichl) - xfs: remove the xfs_disk_dquot_t and xfs_dquot_t (Pavel Reichl) - xfs: check owner of dir3 blocks (Darrick J. Wong) - xfs: check owner of dir3 data blocks (Darrick J. Wong) - xfs: fix buffer corruption reporting when xfs_dir3_free_header_check fails (Darrick J. Wong) - xfs: xfs_buf_corruption_error should take __this_address (Darrick J. Wong) - xfs: add a function to deal with corrupt buffers post-verifiers (Darrick J. Wong) - xfs: rework collapse range into an atomic operation (Brian Foster) - xfs: rework insert range into an atomic operation (Brian Foster) - xfs: open code insert range extent split helper (Brian Foster) - LTS tag: v5.4.220 (Sherry Yang) - thermal: intel_powerclamp: Use first online CPU as control_cpu (Rafael J. Wysocki) - inet: fully convert sk->sk_rx_dst to RCU rules (Eric Dumazet) - efi: libstub: drop pointless get_memory_map() call (Ard Biesheuvel) - md: Replace snprintf with scnprintf (Saurabh Sengar) - ext4: continue to expand file system when the target size doesn't reach (Jerry Lee ) - net/ieee802154: don't warn zero-sized raw_sendmsg() (Tetsuo Handa) - Revert 'net/ieee802154: reject zero-sized raw_sendmsg()' (Alexander Aring) - perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc (Adrian Hunter) - clk: bcm2835: Make peripheral PLLC critical (Maxime Ripard) - usb: idmouse: fix an uninit-value in idmouse_open (Dongliang Mu) - nvmet-tcp: add bounds check on Transfer Tag (Varun Prakash) - nvme: copy firmware_rev on each init (Keith Busch) - staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv() (Xiaoke Wang) - Revert 'usb: storage: Add quirk for Samsung Fit flash' (sunghwan jung) - usb: musb: Fix musb_gadget.c rxstate overflow bug (Robin Guo) - usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info() (Jianglei Nie) - md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d (Logan Gunthorpe) - HID: roccat: Fix use-after-free in roccat_read() (Hyunwoo Kim) - bcache: fix set_at_max_writeback_rate() for multiple attached devices (Coly Li) - ata: libahci_platform: Sanity check the DT child nodes number (Serge Semin) - staging: vt6655: fix potential memory leak (Nam Cao) - power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type() (Wei Yongjun) - nbd: Fix hung when signal interrupts nbd_start_device_ioctl() (Shigeru Yoshida) - scsi: 3w-9xxx: Avoid disabling device if failing to enable it (Letu Ren) - clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate (Quanyang Wang) - media: cx88: Fix a null-ptr-deref bug in buffer_prepare() (Zheyu Ma) - clk: zynqmp: Fix stack-out-of-bounds in strncpy (Ian Nam) - btrfs: scrub: try to fix super block errors (Qu Wenruo) - ARM: dts: imx6sx: add missing properties for sram (Alexander Stein) - ARM: dts: imx6sll: add missing properties for sram (Alexander Stein) - ARM: dts: imx6sl: add missing properties for sram (Alexander Stein) - ARM: dts: imx6qp: add missing properties for sram (Alexander Stein) - ARM: dts: imx6dl: add missing properties for sram (Alexander Stein) - ARM: dts: imx6q: add missing properties for sram (Alexander Stein) - ARM: dts: imx7d-sdb: config the max pressure for tsc2046 (Haibo Chen) - mmc: sdhci-msm: add compatible string check for sdm670 (Richard Acayan) - drm/amdgpu: fix initial connector audio value (hongao) - platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading (Hans de Goede) - drm: panel-orientation-quirks: Add quirk for Anbernic Win600 (Maya Matuszczyk) - drm/vc4: vec: Fix timings for VEC modes (Mateusz Kwiatkowski) - drm/amd/display: fix overflow on MIN_I64 definition (David Gow) - drm: Prevent drm_copy_field() to attempt copying a NULL pointer (Javier Martinez Canillas) - drm: Use size_t type for len variable in drm_copy_field() (Javier Martinez Canillas) - drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc() (Jianglei Nie) - r8152: Rate limit overflow messages (Andrew Gaul) - Bluetooth: L2CAP: Fix user-after-free (Luiz Augusto von Dentz) - net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory (Liu Jian) - wifi: rt2x00: correctly set BBP register 86 for MT7620 (Daniel Golle) - wifi: rt2x00: set SoC wmac clock register (Daniel Golle) - wifi: rt2x00: set VGC gain for both chains of MT7620 (Daniel Golle) - wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620 (Daniel Golle) - wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620 (Daniel Golle) - can: bcm: check the result of can_send() in bcm_can_tx() (Ziyang Xuan) - Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times (Luiz Augusto von Dentz) - Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create() (Tetsuo Handa) - wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() (Alexander Coffin) - xfrm: Update ipcomp_scratches with NULL when freed (Khalid Masum) - wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg() (Tetsuo Handa) - tcp: annotate data-race around tcp_md5sig_pool_populated (Eric Dumazet) - openvswitch: Fix overreporting of drops in dropwatch (Mike Pattrick) - openvswitch: Fix double reporting of drops in dropwatch (Mike Pattrick) - bpftool: Clear errno after libcap's checks (Quentin Monnet) - wifi: brcmfmac: fix invalid address access when enabling SCAN log level (Wright Feng) - NFSD: Return nfserr_serverfault if splice_ok but buf->pages have data (Anna Schumaker) - thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash (Srinivas Pandruvada) - powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue (Chao Qin) - MIPS: BCM47XX: Cast memcmp() of function to (void *) (Kees Cook) - ACPI: video: Add Toshiba Satellite/Portege Z830 quirk (Arvid Norlander) - f2fs: fix race condition on setting FI_NO_EXTENT flag (Zhang Qilong) - crypto: cavium - prevent integer overflow loading firmware (Dan Carpenter) - kbuild: remove the target in signal traps when interrupted (Masahiro Yamada) - iommu/iova: Fix module config properly (Robin Murphy) - crypto: ccp - Release dma channels before dmaengine unrgister (Koba Ko) - crypto: akcipher - default implementation for setting a private key (Ignat Korchagin) - iommu/omap: Fix buffer overflow in debugfs (Dan Carpenter) - cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset (Waiman Long) - powerpc: Fix SPE Power ISA properties for e500v1 platforms (Pali Rohar) - powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5 (Nicholas Piggin) - x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition (Vitaly Kuznetsov) - powerpc/powernv: add missing of_node_put() in opal_export_attrs() (Zheng Yongjun) - powerpc/pci_dn: Add missing of_node_put() (Liang He) - powerpc/sysdev/fsl_msi: Add missing of_node_put() (Liang He) - powerpc/math_emu/efp: Include module.h (Nathan Chancellor) - mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg (Jack Wang) - clk: ast2600: BCLK comes from EPLL (Joel Stanley) - clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe (Miaoqian Lin) - clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration (Stefan Wahren) - spmi: pmic-arb: correct duplicate APID to PPID mapping logic (David Collins) - dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup() (Dave Jiang) - clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent (Chen-Yu Tsai) - mfd: sm501: Add check for platform_driver_register() (Jiasheng Jiang) - mfd: fsl-imx25: Fix check for platform_get_irq() errors (Dan Carpenter) - mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init() (Christophe JAILLET) - mfd: lp8788: Fix an error handling path in lp8788_probe() (Christophe JAILLET) - mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq() (Christophe JAILLET) - mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe() (Christophe JAILLET) - fsi: core: Check error number after calling ida_simple_get (Jiasheng Jiang) - scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() (Duoming Zhou) - serial: 8250: Fix restoring termios speed after suspend (Pali Rohar) - firmware: google: Test spinlock on panic path to avoid lockups (Guilherme G. Piccoli) - staging: vt6655: fix some erroneous memory clean-up loops (Nam Cao) - phy: qualcomm: call clk_disable_unprepare in the error handling (Dongliang Mu) - tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown (Sherry Sun) - drivers: serial: jsm: fix some leaks in probe (Dan Carpenter) - usb: gadget: function: fix dangling pnp_string in f_printer.c (Albert Briscoe) - xhci: Don't show warning for reinit on known broken suspend (Mario Limonciello) - md/raid5: Ensure stripe_fill happens on non-read IO with journal (Logan Gunthorpe) - mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct() (Dan Carpenter) - ata: fix ata_id_has_dipm() (Niklas Cassel) - ata: fix ata_id_has_ncq_autosense() (Niklas Cassel) - ata: fix ata_id_has_devslp() (Niklas Cassel) - ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting() (Niklas Cassel) - RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall. (Bernard Metzler) - mtd: devices: docg3: check the return value of devm_ioremap() in the probe (William Dean) - dyndbg: let query-modname override actual module name (Jim Cromie) - dyndbg: fix module.dyndbg handling (Jim Cromie) - misc: ocxl: fix possible refcount leak in afu_ioctl() (Hangyu Hua) - RDMA/rxe: Fix the error caused by qp->sk (Zhu Yanjun) - RDMA/rxe: Fix 'kernel NULL pointer dereference' error (Zhu Yanjun) - media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init (Miaoqian Lin) - tty: xilinx_uartps: Fix the ignore_status (Shubhrajyoti Datta) - media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop (Liang He) - HSI: omap_ssi_port: Fix dma_map_sg error check (Jack Wang) - HSI: omap_ssi: Fix refcount leak in ssi_probe (Miaoqian Lin) - clk: tegra20: Fix refcount leak in tegra20_clock_init (Miaoqian Lin) - clk: tegra: Fix refcount leak in tegra114_clock_init (Miaoqian Lin) - clk: tegra: Fix refcount leak in tegra210_clock_init (Miaoqian Lin) - clk: berlin: Add of_node_put() for of_get_parent() (Liang He) - clk: oxnas: Hold reference returned by of_get_parent() (Liang He) - clk: meson: Hold reference returned by of_get_parent() (Liang He) - iio: ABI: Fix wrong format of differential capacitance channel ABI. (Jonathan Cameron) - iio: inkern: only release the device node when done with it (Nuno Sa) - iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq (Claudiu Beznea) - iio: adc: at91-sama5d2_adc: check return status for pressure and touch (Claudiu Beznea) - iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX (Claudiu Beznea) - ARM: dts: exynos: fix polarity of VBUS GPIO of Origen (Dmitry Torokhov) - ARM: Drop CMDLINE_* dependency on ATAGS (Geert Uytterhoeven) - ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family (Dmitry Torokhov) - ARM: dts: kirkwood: lsxl: remove first ethernet port (Michael Walle) - ARM: dts: kirkwood: lsxl: fix serial line (Michael Walle) - ARM: dts: turris-omnia: Fix mpp26 pin name and comment (Marek Behun) - soc: qcom: smem_state: Add refcounting for the 'state->of_node' (Liang He) - soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe() (Liang He) - memory: of: Fix refcount leak bug in of_get_ddr_timings() (Liang He) - memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe() (Liang He) - ALSA: hda/hdmi: Don't skip notification handling during PM operation (Takashi Iwai) - mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe() (Christophe JAILLET) - ALSA: dmaengine: increment buffer pointer atomically (Andreas Pape) - drm/msm/dpu: index dpu_kms->hw_vbif using vbif_idx (Dmitry Baryshkov) - ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API (Liang He) - mmc: au1xmmc: Fix an error handling path in au1xmmc_probe() (Christophe JAILLET) - drm/omap: dss: Fix refcount leak bugs (Liang He) - ASoC: rsnd: Add check for rsnd_mod_power_on (Jiasheng Jiang) - drm/bridge: megachips: Fix a null pointer dereference bug (Zheyu Ma) - drm: fix drm_mipi_dbi build errors (Randy Dunlap) - platform/x86: msi-laptop: Fix resource cleanup (Hans de Goede) - platform/x86: msi-laptop: Fix old-ec check for backlight registering (Hans de Goede) - platform/chrome: fix memory corruption in ioctl (Dan Carpenter) - platform/chrome: fix double-free in chromeos_laptop_prepare() (Rustam Subkhankulov) - drm/mipi-dsi: Detach devices when removing the host (Maxime Ripard) - drm: bridge: adv7511: fix CEC power down control register offset (Alvin Sipraga) - net: mvpp2: fix mvpp2 debugfs leak (Russell King (Oracle)) - once: add DO_ONCE_SLOW() for sleepable contexts (Eric Dumazet) - bnx2x: fix potential memory leak in bnx2x_tpa_stop() (Jianglei Nie) - tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited (Neal Cardwell) - sctp: handle the error returned from sctp_auth_asoc_init_active_key (Xin Long) - vhost/vsock: Use kvmalloc/kvfree for larger packets. (Junichi Uekawa) - spi: s3c64xx: Fix large transfers with DMA (Vincent Whitchurch) - netfilter: nft_fib: Fix for rpath check with VRF devices (Phil Sutter) - spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe (Zhang Qilong) - x86/microcode/AMD: Track patch allocation size explicitly (Kees Cook) - bpf: Ensure correct locking around vulnerable function find_vpid() (Lee Jones) - net: fs_enet: Fix wrong check in do_pd_setup (Zheng Yongjun) - wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration (Bitterblue Smith) - bpf: btf: fix truncated last_member_type_id in btf_struct_resolve (Lorenz Bauer) - wifi: rtl8xxxu: Fix skb misuse in TX queue selection (Bitterblue Smith) - spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime() (Xu Qiang) - spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume() (Xu Qiang) - wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse() (Dan Carpenter) - x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register (Kohei Tarumizu) - bpftool: Fix a wrong type cast in btf_dumper_int (Lam Thai) - wifi: mac80211: allow bw change during channel switch in mesh (Hari Chandrakanthan) - wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state() (Wen Gong) - nfsd: Fix a memory leak in an error handling path (Christophe JAILLET) - ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE (Wang Kefeng) - sh: machvec: Use char[] for section boundaries (Kees Cook) - userfaultfd: open userfaultfds with O_RDONLY (Ondrej Mosnacek) - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (Waiman Long) - selinux: use 'grep -E' instead of 'egrep' (Greg Kroah-Hartman) - drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table() (Jianglei Nie) - gcov: support GCC 12.1 and newer compilers (Martin Liska) - KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS (Sean Christopherson) - KVM: nVMX: Unconditionally purge queued/injected events on nested 'exit' (Sean Christopherson) - KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility (Michal Luczaj) - media: cedrus: Set the platform driver data earlier (Dmitry Osipenko) - ring-buffer: Fix race between reset page and reading page (Steven Rostedt (Google)) - ring-buffer: Check pending waiters when doing wake ups as well (Steven Rostedt (Google)) - ring-buffer: Have the shortest_full queue be the shortest not longest (Steven Rostedt (Google)) - ring-buffer: Allow splice to read previous partially read pages (Steven Rostedt (Google)) - ftrace: Properly unset FTRACE_HASH_FL_MOD (Zheng Yejian) - livepatch: fix race between fork and KLP transition (Rik van Riel) - ext4: place buffer head allocation before handle start (Jinke Han) - ext4: make ext4_lazyinit_thread freezable (Lalith Rajendran) - ext4: fix null-ptr-deref in ext4_write_info (Baokun Li) - ext4: avoid crash when inline data creation follows DIO write (Jan Kara) - jbd2: wake up journal waiters in FIFO order, not LIFO (Andrew Perepechko) - nilfs2: fix use-after-free bug of struct nilfs_root (Ryusuke Konishi) - f2fs: fix to do sanity check on summary info (Chao Yu) - f2fs: fix to do sanity check on destination blkaddr during recovery (Chao Yu) - f2fs: increase the limit for reserve_root (Jaegeuk Kim) - btrfs: fix race between quota enable and quota rescan ioctl (Filipe Manana) - fbdev: smscufx: Fix use-after-free in ufx_ops_open() (Hyunwoo Kim) - powerpc/boot: Explicitly disable usage of SPE instructions (Pali Rohar) - PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge (Maciej W. Rozycki) - UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK (Huacai Chen) - riscv: Pass -mno-relax only on lld < 15.0.0 (Fangrui Song) - riscv: Allow PROT_WRITE-only mmap() (Andrew Bresticker) - parisc: fbdev/stifb: Align graphics memory size to 4MB (Helge Deller) - RISC-V: Make port I/O string accessors actually work (Maciej W. Rozycki) - regulator: qcom_rpm: Fix circular deferral regression (Linus Walleij) - ASoC: wcd9335: fix order of Slimbus unprepare/disable (Krzysztof Kozlowski) - quota: Check next/prev free block number after reading from quota file (Zhihao Cheng) - HID: multitouch: Add memory barriers (Andri Yngvason) - fs: dlm: handle -EBUSY first in lock arg validation (Alexander Aring) - fs: dlm: fix race between test_bit() and queue_work() (Alexander Aring) - mmc: sdhci-sprd: Fix minimum clock limit (Wenchao Chen) - can: kvaser_usb_leaf: Fix CAN state after restart (Anssi Hannula) - can: kvaser_usb_leaf: Fix TX queue out of sync after restart (Anssi Hannula) - can: kvaser_usb_leaf: Fix overread with an invalid command (Anssi Hannula) - can: kvaser_usb: Fix use of uninitialized completion (Anssi Hannula) - usb: add quirks for Lenovo OneLink+ Dock (Jean-Francois Le Fillatre) - iio: pressure: dps310: Reset chip after timeout (Eddie James) - iio: pressure: dps310: Refactor startup procedure (Eddie James) - iio: dac: ad5593r: Fix i2c read protocol requirements (Michael Hennerich) - cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message (Zhang Xiaoxu) - cifs: destage dirty pages before re-reading them for cache=none (Ronnie Sahlberg) - mtd: rawnand: atmel: Unmap streaming DMA mappings (Tudor Ambarus) - ALSA: hda/realtek: Add Intel Reference SSID to support headset keys (Saranya Gopal) - ALSA: hda/realtek: Add quirk for ASUS GV601R laptop (Luke D. Jones) - ALSA: usb-audio: Fix NULL dererence at error path (Takashi Iwai) - ALSA: usb-audio: Fix potential memory leaks (Takashi Iwai) - ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free() (Takashi Iwai) - ALSA: oss: Fix potential deadlock at unregistration (Takashi Iwai) - LTS tag: v5.4.219 (Sherry Yang) - wifi: mac80211: fix MBSSID parsing use-after-free (Johannes Berg) {CVE-2022-42719} - wifi: mac80211: don't parse mbssid in assoc response (Johannes Berg) - mac80211: mlme: find auth challenge directly (Johannes Berg) [5.4.17-2136.315.1] - Adding a new sysfs entry point -- forcepower -- to /sys/bus/pci/slots/X. (James Puthukattukaran) [Orabug: 34716494] - nvme: paring quiesce/unquiesce (Ming Lei) [Orabug: 34716494] - nvme: prepare for pairing quiescing and unquiescing (Ming Lei) [Orabug: 34716494] - nvme: apply nvme API to quiesce/unquiesce admin queue (Ming Lei) [Orabug: 34716494] - nvme: add APIs for stopping/starting admin queue (Ming Lei) [Orabug: 34716494] - nvme-fc: remove freeze/unfreeze around update_nr_hw_queues (James Smart) [Orabug: 34716494] - nvme-fc: avoid race between time out and tear down (James Smart) [Orabug: 34716494] - nvme-fc: update hardware queues before using them (Daniel Wagner) [Orabug: 34716494] - nvme-fabrics: reject I/O to offline device (Victor Gladkov) [Orabug: 34716494] - nvme-fc: wait for queues to freeze before calling update_hr_hw_queues (James Smart) [Orabug: 34716494] - RDMA/uverbs: Move IB_EVENT_DEVICE_FATAL to destroy_uobj (Jason Gunthorpe) [Orabug: 34802357] - RDMA/uverbs: Do not discard the IB_EVENT_DEVICE_FATAL event (Jason Gunthorpe) [Orabug: 34802357] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-42895 CVE-2022-4378 Oracle Linux 8 istio [1.15.3-1] - Added Oracle specific files for 1.15.3-1 olcne [1.5.10-2] - Update istio to 1.15.3 to address Istio CVE-2022-39278 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-39278 __Affected_cpe_list__ Oracle Linux 7 istio [1.15.3-1] - Added Oracle specific files for 1.15.3-1 olcne [1.5.10-2] - Update istio to 1.15.3 to address Istio CVE-2022-39278 IMPORTANT Copyright 2012 Oracle, Inc. CVE-2022-39278 __Affected_cpe_list__ Oracle Linux 7 istio [1.13.9-1] - Added Oracle specific files for 1.13.9-1 olcne [1.4.10-1] - Upgraded istio-1.13.7 to istio-1.13.9 to resolve Istio CVE-2022-39278 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-39278 __Affected_cpe_list__ Oracle Linux 8 istio [1.13.9-1] - Added Oracle specific files for 1.13.9-1 olcne [1.4.10-1] - Upgraded istio-1.13.7 to istio-1.13.9 to resolve Istio CVE-2022-39278 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-39278 __Affected_cpe_list__ Oracle Linux 8 Oracle Linux 9 [5.15.0-6.80.3.1] - Revert 'rds: ib: Enable FC by default' (Hakon Bugge) [Orabug: 34964359] [5.15.0-6.80.3] - net/mlx5: Suppress error logging on UCTX creation (Marina) [Orabug: 34888471] - rds: ib: Fix leaked MRs during kexec (Hakon Bugge) [Orabug: 34892082] - uek-rpm: Add ptp_kvm.ko to core rpm (Somasundaram Krishnasamy) [Orabug: 34901414] - Revert 'tracing/ring-buffer: Have polling block on watermark' (Harshit Mogalapalli) [Orabug: 34890999] [5.15.0-6.80.2] - scsi: mpi3mr: Remove unnecessary cast (Jules Irenge) [Orabug: 34640445] - scsi: mpi3mr: Update driver version to 8.2.0.3.0 (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Fix scheduling while atomic type bug (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Scan the devices during resume time (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Free enclosure objects during driver unload (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Handle 0xF003 Fault Code (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Graceful handling of surprise removal of PCIe HBA (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Support new power management framework (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Update mpi3 header files (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Fix error code in mpi3mr_transport_smp_handler() (Dan Carpenter) [Orabug: 34640445] - scsi: mpi3mr: Fix error codes in mpi3mr_report_manufacture() (Dan Carpenter) [Orabug: 34640445] - scsi: mpi3mr: Block I/Os while refreshing target dev objects (Chandrakanth patil) [Orabug: 34640445] - scsi: mpi3mr: Refresh SAS ports during soft reset (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Support SAS transport class callbacks (Chandrakanth patil) [Orabug: 34640445] - scsi: mpi3mr: Add framework to issue MPT transport cmds (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Add SAS SATA end devices to STL (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Get target object based on rphy (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Add expander devices to STL (Chandrakanth patil) [Orabug: 34640445] - scsi: mpi3mr: Enable STL on HBAs where multipath is disabled (Chandrakanth patil) [Orabug: 34640445] - scsi: mpi3mr: Add helper functions to manage device's port (Chandrakanth patil) [Orabug: 34640445] - scsi: mpi3mr: Add helper functions to retrieve device objects (Chandrakanth patil) [Orabug: 34640445] - scsi: mpi3mr: Add framework to add phys to STL (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Enable Enclosure device add event (Chandrakanth patil) [Orabug: 34640445] - scsi: mpi3mr: Add helper functions to retrieve config pages (Chandrakanth patil) [Orabug: 34640445] - scsi: mpi3mr: Add framework to issue config requests (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Add config and transport related debug flags (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Delete a stray tab (Dan Carpenter) [Orabug: 34640445] - scsi: mpi3mr: Unlock on error path (Dan Carpenter) [Orabug: 34640445] - scsi: mpi3mr: Reduce VD queue depth on detecting throttling (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Resource Based Metering (Chandrakanth patil) [Orabug: 34640445] - scsi: mpi3mr: Increase cmd_per_lun to 128 (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Enable shared host tagset (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Fix kernel-doc (Chandrakanth patil) [Orabug: 34640445] - scsi: mpi3mr: Rework mrioc->bsg_device model to fix warnings (Sumit Saxena) [Orabug: 34640445] - scsi: mpi3mr: Add target device related sysfs (Chandrakanth patil) [Orabug: 34640445] - scsi: mpi3mr: Add shost related sysfs attributes (Chandrakanth patil) [Orabug: 34640445] - scsi: mpi3mr: Return error if dma_alloc_coherent() fails (Dan Carpenter) [Orabug: 34640445] - scsi: mpi3mr: Fix a NULL vs IS_ERR() bug in mpi3mr_bsg_init() (Dan Carpenter) [Orabug: 34640445] - scsi: mpi3mr: Return I/Os to an unrecoverable HBA with DID_ERROR (Chandrakanth patil) [Orabug: 34640445] - scsi: mpi3mr: Hidden drives not removed during soft reset (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Increase I/O timeout value to 60s (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Update driver version to 8.0.0.69.0 (Sumit Saxena) [Orabug: 34640445] - scsi: mpi3mr: Add support for NVMe passthrough (Sumit Saxena) [Orabug: 34640445] - scsi: mpi3mr: Expose adapter state to sysfs (Chandrakanth patil) [Orabug: 34640445] - scsi: mpi3mr: Add support for PEL commands (Sumit Saxena) [Orabug: 34640445] - scsi: mpi3mr: Add support for MPT commands (Sumit Saxena) [Orabug: 34640445] - scsi: mpi3mr: Move data structures/definitions from MPI headers to uapi header (Sumit Saxena) [Orabug: 34640445] - scsi: mpi3mr: Add support for driver commands (Sumit Saxena) [Orabug: 34640445] - scsi: mpi3mr: Add bsg device support (Sumit Saxena) [Orabug: 34640445] - scsi: mpi3mr: Fix flushing !WQ_MEM_RECLAIM events warning (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Bump driver version to 8.0.0.68.0 (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Update the copyright year (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Fix cmnd getting marked as in use forever (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Fix hibernation issue (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Update MPI3 headers (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Fix printing of pending I/O count (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Fix deadlock while canceling the fw event (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Fix formatting problems in some kernel-doc comments (Yang Li) [Orabug: 34640445] - scsi: mpi3mr: Fix some spelling mistakes (Colin Ian King) [Orabug: 34640445] - scsi: mpi3mr: Bump driver version to 8.0.0.61.0 (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Enhanced Task Management Support Reply handling (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Use TM response codes from MPI3 headers (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Add io_uring interface support in I/O-polled mode (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Print cable mngnt and temp threshold events (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Support Prepare for Reset event (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Add Event acknowledgment logic (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Gracefully handle online FW update operation (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Detect async reset that occurred in firmware (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Add IOC reinit function (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Handle offline FW activation in graceful manner (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Code refactor of IOC init - part2 (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Code refactor of IOC init - part1 (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Fault IOC when internal command gets timeout (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Display IOC firmware package version (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Handle unaligned PLL in unmap cmnds (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Increase internal cmnds timeout to 60s (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Do access status validation before adding devices (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Add support for PCIe Managed Switch SES device (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Update MPI3 headers - part2 (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Update MPI3 headers - part1 (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Don't reset IOC if cmnds flush with reset status (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Replace spin_lock() with spin_lock_irqsave() (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Add debug APIs based on logging_level bits (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Use scnprintf() instead of snprintf() (Dan Carpenter) [Orabug: 34640445] - scsi: mpi3mr: Clean up mpi3mr_print_ioc_info() (Dan Carpenter) [Orabug: 34640445] - rds: ib: Remove unnecessary call to rds_ib_ring_unalloc (Hakon Bugge) [Orabug: 34768825] - rds: ib: Remove unnecessary i_flowctl term from conditions (Hakon Bugge) [Orabug: 34768825] - rds: ib: Remove unnesesarry variable initialization (Hakon Bugge) [Orabug: 34768825] - rds: ib: Make sure receives are posted before connection is up (Hakon Bugge) [Orabug: 34768825] - rds: ib: Fix the Retry counter dependency on RNR NAK Retry counter (Hakon Bugge) [Orabug: 34768825] - rds: Deduct one credit on the passive side (Hakon Bugge) [Orabug: 34768825] - rds: Use all eight bits for credit updates (Hakon Bugge) [Orabug: 34768825] - RDS/IB: Fix the misplaced counter update rdma dto path (Devesh Sharma) [Orabug: 34865847] - uek-rpm: Enable CONFIG_HP_ILO for aarch64 (Saeed Mirzamohammadi) [Orabug: 34869880] - uek-rpm: ol8: Choose right annobin plugin for UEK build (Somasundaram Krishnasamy) [Orabug: 34873882] - proc: proc_skip_spaces() shouldn't think it is working on C strings (Linus Torvalds) [Orabug: 34882775] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Linus Torvalds) [Orabug: 34882775] {CVE-2022-4378} [5.15.0-6.80.1] - LTS version: v5.15.80 (Jack Vogel) - ntfs: check overflow when iterating ATTR_RECORDs (Hawkins Jiawei) - ntfs: fix out-of-bounds read in ntfs_attr_find() (Hawkins Jiawei) - ntfs: fix use-after-free in ntfs_attr_find() (Hawkins Jiawei) - net/9p: use a dedicated spinlock for trans_fd (Dominique Martinet) - mm: fs: initialize fsdata passed to write_begin/write_end interface (Alexander Potapenko) - wifi: wext: use flex array destination for memcpy() (Hawkins Jiawei) - 9p/trans_fd: always use O_NONBLOCK read/write (Tetsuo Handa) - gfs2: Switch from strlcpy to strscpy (Andreas Gruenbacher) - gfs2: Check sb_bsize_shift after reading superblock (Andrew Price) - 9p: trans_fd/p9_conn_cancel: drop client lock earlier (Dominique Martinet) - kcm: close race conditions on sk_receive_queue (Cong Wang) - kcm: avoid potential race in kcm_tx_work (Eric Dumazet) - tcp: cdg: allow tcp_cdg_release() to be called multiple times (Eric Dumazet) - macvlan: enforce a consistent minimal mtu (Eric Dumazet) - Input: i8042 - fix leaking of platform device on module removal (Chen Jun) - kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case (Li Huafei) - scsi: scsi_debug: Fix possible UAF in sdebug_add_host_helper() (Yuan Can) - scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus() (Yang Yingliang) - net: use struct_group to copy ip/ipv6 header addresses (Hangbin Liu) - tracing: Fix warning on variable 'struct trace_array' (Aashish Sharma) - ring-buffer: Include dropped pages in counting dirty patches (Steven Rostedt (Google)) - perf: Improve missing SIGTRAP checking (Marco Elver) - serial: 8250_lpss: Use 16B DMA burst with Elkhart Lake (Ilpo Jarvinen) - nvme: ensure subsystem reset is single threaded (Keith Busch) - nvme: restrict management ioctls to admin (Keith Busch) - perf/x86/intel/pt: Fix sampling using single range output (Adrian Hunter) - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (Alexander Potapenko) - docs: update mediator contact information in CoC doc (Shuah Khan) - mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put() (Xiongfeng Wang) - mmc: sdhci-pci-o2micro: fix card detect fail issue caused by CD# debounce timeout (Chevron Li) - mmc: core: properly select voltage range without power cycle (Yann Gautier) - firmware: coreboot: Register bus in module init (Brian Norris) - iommu/vt-d: Set SRE bit only when hardware has SRS cap (Tina Zhang) - iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging entries (Tina Zhang) - scsi: zfcp: Fix double free of FSF request when qdio send fails (Benjamin Block) - net: phy: marvell: add sleep time after enabling the loopback bit (Aminuddin Jamaluddin) - maccess: Fix writing offset in case of fault in strncpy_from_kernel_nofault() (Alban Crequy) - Input: iforce - invert valid length check when fetching device IDs (Tetsuo Handa) - serial: 8250_lpss: Configure DMA also w/o DMA filter (Ilpo Jarvinen) - serial: 8250: Flush DMA Rx on RLSI (Ilpo Jarvinen) - serial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs (Ilpo Jarvinen) - dm ioctl: fix misbehavior if list_versions races with module loading (Mikulas Patocka) - iio: pressure: ms5611: changed hardcoded SPI speed to value limited (Mitja Spes) - iio: adc: mp2629: fix potential array out of bound access (Saravanan Sekar) - iio: adc: mp2629: fix wrong comparison of channel (Saravanan Sekar) - iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init() (Yang Yingliang) - iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger() (Yang Yingliang) - usb: typec: mux: Enter safe mode only when pins need to be reconfigured (Rajat Khandelwal) - usb: cdns3: host: fix endless superspeed hub port reset (Li Jun) - usb: chipidea: fix deadlock in ci_otg_del_timer (Duoming Zhou) - usb: add NO_LPM quirk for Realforce 87U Keyboard (Nicolas Dumazet) - USB: serial: option: add Fibocom FM160 0x0111 composition (Reinhard Speyerer) - USB: serial: option: add u-blox LARA-L6 modem (Davide Tronchin) - USB: serial: option: add u-blox LARA-R6 00B modem (Davide Tronchin) - USB: serial: option: remove old LARA-R6 PID (Davide Tronchin) - USB: serial: option: add Sierra Wireless EM9191 (Benoit Monin) - USB: bcma: Make GPIO explicitly optional (Linus Walleij) - speakup: fix a segfault caused by switching consoles (Mushahid Hussain) - slimbus: stream: correct presence rate frequencies (Krzysztof Kozlowski) - slimbus: qcom-ngd: Fix build error when CONFIG_SLIM_QCOM_NGD_CTRL=y && CONFIG_QCOM_RPROC_COMMON=m (Zheng Bin) - Revert 'usb: dwc3: disable USB core PHY management' (Johan Hovold) - ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360 (Takashi Iwai) - ALSA: hda/realtek: fix speakers for Samsung Galaxy Book Pro (Emil Flink) - ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open() (Takashi Iwai) - drm/amd/display: Add HUBP surface flip interrupt handler (Rodrigo Siqueira) - tracing: kprobe: Fix potential null-ptr-deref on trace_array in kprobe_event_gen_test_exit() (Shang XiaoJing) - tracing: kprobe: Fix potential null-ptr-deref on trace_event_file in kprobe_event_gen_test_exit() (Shang XiaoJing) - tracing: Fix race where eprobes can be called before the event (Steven Rostedt (Google)) - tracing: Fix wild-memory-access in register_synth_event() (Shang XiaoJing) - tracing: Fix memory leak in test_gen_synth_cmd() and test_empty_synth_event() (Shang XiaoJing) - tracing/ring-buffer: Have polling block on watermark (Steven Rostedt (Google)) - tracing: Fix memory leak in tracing_read_pipe() (Wang Yufen) - ring_buffer: Do not deactivate non-existant pages (Daniil Tatianin) - ftrace: Fix null pointer dereference in ftrace_add_mod() (Xiu Jianfeng) - ftrace: Optimize the allocation for mcount entries (Wang Wensheng) - ftrace: Fix the possible incorrect kernel message (Wang Wensheng) - cifs: add check for returning value of SMB2_set_info_init (Anastasia Belova) - net: thunderbolt: Fix error handling in tbnet_init() (Yuan Can) - net: microchip: sparx5: Fix potential null-ptr-deref in sparx_stats_init() and sparx5_start() (Shang XiaoJing) - cifs: Fix wrong return value checking when GETFLAGS (Zhang Xiaoxu) - net/x25: Fix skb leak in x25_lapb_receive_frame() (Wei Yongjun) - net: ag71xx: call phylink_disconnect_phy if ag71xx_hw_enable() fail in ag71xx_open() (Liu Jian) - cifs: add check for returning value of SMB2_close_init (Anastasia Belova) - platform/surface: aggregator: Do not check for repeated unsequenced packets (Maximilian Luz) - platform/x86/intel: pmc: Don't unconditionally attach Intel PMC when virtualized (Roger Pau Monne) - drbd: use after free in drbd_create_device() (Dan Carpenter) - bridge: switchdev: Fix memory leaks when changing VLAN protocol (Ido Schimmel) - net: hns3: fix setting incorrect phy link ksettings for firmware in resetting process (Guangbin Huang) - net: ena: Fix error handling in ena_init() (Yuan Can) - net: ionic: Fix error handling in ionic_init_module() (Yuan Can) - xen/pcpu: fix possible memory leak in register_pcpu() (Yang Yingliang) - net: dsa: make dsa_master_ioctl() see through port_hwtstamp_get() shims (Vladimir Oltean) - net: mhi: Fix memory leak in mhi_net_dellink() (Wei Yongjun) - bnxt_en: Remove debugfs when pci_register_driver failed (Gaosheng Cui) - net: caif: fix double disconnect client in chnl_net_open() (Zhengchao Shao) - net: macvlan: Use built-in RCU list checking (Chuang Wang) - mISDN: fix misuse of put_device() in mISDN_register_device() (Wang ShaoBo) - net: liquidio: release resources when liquidio driver open failed (Zhengchao Shao) - soc: imx8m: Enable OCOTP clock before reading the register (Xiaolei Wang) - net: stmmac: ensure tx function is not running in stmmac_xdp_release() (Mohd Faizal Abdul Rahim) - net: hinic: Fix error handling in hinic_module_init() (Yuan Can) - mISDN: fix possible memory leak in mISDN_dsp_element_register() (Yang Yingliang) - net: bgmac: Drop free_netdev() from bgmac_enet_remove() (Wei Yongjun) - bpf: Initialize same number of free nodes for each pcpu_freelist (Xu Kuohai) - MIPS: Loongson64: Add WARN_ON on kexec related kmalloc failed (Liao Chang) - MIPS: fix duplicate definitions for exported symbols (Rongwei Zhang) - nfp: change eeprom length to max length enumerators (Jaco Coetzee) - ata: libata-transport: fix error handling in ata_tdev_add() (Yang Yingliang) - ata: libata-transport: fix error handling in ata_tlink_add() (Yang Yingliang) - ata: libata-transport: fix error handling in ata_tport_add() (Yang Yingliang) - ata: libata-transport: fix double ata_host_put() in ata_tport_add() (Yang Yingliang) - arm64: dts: imx8mn: Fix NAND controller size-cells (Marek Vasut) - arm64: dts: imx8mm: Fix NAND controller size-cells (Marek Vasut) - ARM: dts: imx7: Fix NAND controller size-cells (Marek Vasut) - drm: Fix potential null-ptr-deref in drm_vblank_destroy_worker() (Shang XiaoJing) - drm/drv: Fix potential memory leak in drm_dev_init() (Shang XiaoJing) - drm/panel: simple: set bpc field for logic technologies displays (Aishwarya Kothari) - drm/vc4: kms: Fix IS_ERR() vs NULL check for vc4_kms (Gaosheng Cui) - pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map (Zeng Heng) - parport_pc: Avoid FIFO port location truncation (Maciej W. Rozycki) - siox: fix possible memory leak in siox_device_add() (Yang Yingliang) - arm64: Fix bit-shifting UB in the MIDR_CPU_MODEL() macro (D Scott Phillips) - bpf: Fix memory leaks in __check_func_call (Wang Yufen) - block: sed-opal: kmalloc the cmd/resp buffers (Serge Semin) - scsi: scsi_transport_sas: Fix error handling in sas_phy_add() (Yang Yingliang) - pinctrl: rockchip: list all pins in a possible mux route for PX30 (Quentin Schulz) - ASoC: soc-utils: Remove __exit for snd_soc_util_exit() (Chen Zhongjin) - bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb() (Baisong Zhong) - tty: n_gsm: fix sleep-in-atomic-context bug in gsm_control_send (Duoming Zhou) - serial: imx: Add missing .thaw_noirq hook (Shawn Guo) - serial: 8250: omap: Flush PM QOS work on remove (Tony Lindgren) - serial: 8250: omap: Fix unpaired pm_runtime_put_sync() in omap8250_remove() (Tony Lindgren) - serial: 8250_omap: remove wait loop from Errata i202 workaround (Matthias Schiffer) - serial: 8250: omap: Fix missing PM runtime calls for omap8250_set_mctrl() (Tony Lindgren) - ARM: at91: pm: avoid soft resetting AC DLL (Claudiu Beznea) - ASoC: tas2764: Fix set_tdm_slot in case of single slot (Martin Poviser) - ASoC: tas2770: Fix set_tdm_slot in case of single slot (Martin Poviser) - ASoC: core: Fix use-after-free in snd_soc_exit() (Chen Zhongjin) - ARM: dts: at91: sama7g5: fix signal name of pin PB2 (Mihai Sain) - spi: stm32: Print summary 'callbacks suppressed' message (Marek Vasut) - arm64: dts: qcom: sm8350-hdk: Specify which LDO modes are allowed (Douglas Anderson) - arm64: dts: qcom: sm8250-xperia-edo: Specify which LDO modes are allowed (Douglas Anderson) - arm64: dts: qcom: sm8150-xperia-kumano: Specify which LDO modes are allowed (Douglas Anderson) - arm64: dts: qcom: sa8155p-adp: Specify which LDO modes are allowed (Douglas Anderson) - KVM: x86/pmu: Do not speculatively query Intel GP PMCs that don't exist yet (Like Xu) - spi: intel: Use correct mask for flash and protected regions (Mika Westerberg) - mtd: spi-nor: intel-spi: Disable write protection only if asked (Mika Westerberg) - ASoC: codecs: jz4725b: Fix spelling mistake 'Sourc' -> 'Source', 'Routee' -> 'Route' (Colin Ian King) - x86/cpu: Add several Intel server CPU model numbers (Tony Luck) - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (Luiz Augusto von Dentz) - btrfs: remove pointless and double ulist frees in error paths of qgroup tests (Filipe Manana) - drm/imx: imx-tve: Fix return type of imx_tve_connector_mode_valid (Nathan Huckleberry) - i2c: i801: add lis3lv02d's I2C address for Vostro 5568 (Nam Cao) - i2c: tegra: Allocate DMA memory for DMA engine (Thierry Reding) - firmware: arm_scmi: Cleanup the core driver removal callback (Cristian Marussi) - ACPI: x86: Add another system to quirk list for forcing StorageD3Enable (Mario Limonciello) - NFSv4: Retry LOCK on OLD_STATEID during delegation return (Benjamin Coddington) - btrfs: raid56: properly handle the error when unable to find the missing stripe (Qu Wenruo) - RDMA/efa: Add EFA 0xefa2 PCI ID (Michael Margolin) - ACPI: scan: Add LATT2021 to acpi_ignore_dep_ids[] (Hans de Goede) - drm/amd/display: Remove wrong pipe control lock (Rodrigo Siqueira) - ASoC: rt1308-sdw: add the default value of some registers (Shuming Fan) - selftests/intel_pstate: fix build for ARCH=x86_64 (Ricardo Canuelo) - selftests/futex: fix build for clang (Ricardo Canuelo) - ASoC: Intel: sof_sdw: add quirk variant for LAPBC710 NUC15 (Pierre-Louis Bossart) - ASoC: codecs: jz4725b: fix capture selector naming (Siarhei Volkau) - ASoC: codecs: jz4725b: use right control for Capture Volume (Siarhei Volkau) - ASoC: codecs: jz4725b: fix reported volume for Master ctl (Siarhei Volkau) - ASoC: codecs: jz4725b: add missed Line In power control bit (Siarhei Volkau) - spi: intel: Fix the offset to get the 64K erase opcode (Mauro Lima) - ASoC: wm8962: Add an event handler for TEMP_HP and TEMP_SPK (Xiaolei Wang) - ASoC: rt1019: Fix the TDM settings (Derek Fang) - ASoC: mt6660: Keep the pm_runtime enables before component stuff in mt6660_i2c_probe (Zhang Qilong) - ASoC: wm8997: Revert 'ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe' (Zhang Qilong) - ASoC: wm5110: Revert 'ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe' (Zhang Qilong) - ASoC: wm5102: Revert 'ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe' (Zhang Qilong) - LTS version: v5.15.79 (Jack Vogel) - x86/cpu: Restore AMD's DE_CFG MSR after resume (Borislav Petkov) - net: tun: call napi_schedule_prep() to ensure we own a napi (Eric Dumazet) - drm/amdkfd: Migrate in CPU page fault use current mm (Philip Yang) - marvell: octeontx2: build error: unknown type name 'u64' (Anders Roxell) - dmaengine: at_hdmac: Check return code of dma_async_device_register (Tudor Ambarus) - dmaengine: at_hdmac: Fix impossible condition (Tudor Ambarus) - dmaengine: at_hdmac: Don't allow CPU to reorder channel enable (Tudor Ambarus) - dmaengine: at_hdmac: Fix completion of unissued descriptor in case of errors (Tudor Ambarus) - dmaengine: at_hdmac: Fix descriptor handling when issuing it to hardware (Tudor Ambarus) - dmaengine: at_hdmac: Fix concurrency over the active list (Tudor Ambarus) - dmaengine: at_hdmac: Free the memset buf without holding the chan lock (Tudor Ambarus) - dmaengine: at_hdmac: Fix concurrency over descriptor (Tudor Ambarus) - dmaengine: at_hdmac: Fix concurrency problems by removing atc_complete_all() (Tudor Ambarus) - dmaengine: at_hdmac: Protect atchan->status with the channel lock (Tudor Ambarus) - dmaengine: at_hdmac: Do not call the complete callback on device_terminate_all (Tudor Ambarus) - dmaengine: at_hdmac: Fix premature completion of desc in issue_pending (Tudor Ambarus) - dmaengine: at_hdmac: Start transfer for cyclic channels in issue_pending (Tudor Ambarus) - dmaengine: at_hdmac: Don't start transactions at tx_submit level (Tudor Ambarus) - dmaengine: at_hdmac: Fix at_lli struct definition (Tudor Ambarus) - cert host tools: Stop complaining about deprecated OpenSSL functions (Linus Torvalds) - can: j1939: j1939_send_one(): fix missing CAN header initialization (Oliver Hartkopp) - mm/shmem: use page_mapping() to detect page cache for uffd continue (Peter Xu) - mm/memremap.c: map FS_DAX device memory as decrypted (Pankaj Gupta) - mm/damon/dbgfs: check if rm_contexts input is for a real context (SeongJae Park) - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (ZhangPeng) - mms: sdhci-esdhc-imx: Fix SDHCI_RESET_ALL for CQHCI (Brian Norris) - btrfs: zoned: initialize device's zone info for seeding (Johannes Thumshirn) - btrfs: selftests: fix wrong error check in btrfs_free_dummy_root() (Zhang Xiaoxu) - btrfs: fix match incorrectly in dev_args_match_device (Liu Shixin) - wifi: ath11k: avoid deadlock during regulatory update in ath11k_regd_update() (Wen Gong) - platform/x86: hp_wmi: Fix rfkill causing soft blocked wifi (Jorge Lopez) - drm/amdgpu: disable BACO on special BEIGE_GOBY card (Guchun Chen) - drm/i915/dmabuf: fix sg_table handling in map_dma_buf (Matthew Auld) - nilfs2: fix use-after-free bug of ns_writer on remount (Ryusuke Konishi) - nilfs2: fix deadlock in nilfs_count_free_blocks() (Ryusuke Konishi) - ata: libata-scsi: fix SYNCHRONIZE CACHE (16) command failure (Shin'ichiro Kawasaki) - vmlinux.lds.h: Fix placement of '.data..decrypted' section (Nathan Chancellor) - ALSA: usb-audio: Add DSD support for Accuphase DAC-60 (Jussi Laako) - ALSA: usb-audio: Add quirk entry for M-Audio Micro (Takashi Iwai) - ALSA: usb-audio: Yet more regression for for the delayed card registration (Takashi Iwai) - ALSA: hda/realtek: Add Positivo C6300 model quirk (Edson Juliano Drosdeck) - ALSA: hda: fix potential memleak in 'add_widget_node' (Ye Bin) - ALSA: hda/ca0132: add quirk for EVGA Z390 DARK (Xian Wang) - ALSA: hda/hdmi - enable runtime pm for more AMD display audio (Evan Quan) - mmc: sdhci-esdhc-imx: use the correct host caps for MMC_CAP_8_BIT_DATA (Haibo Chen) - mmc: sdhci-tegra: Fix SDHCI_RESET_ALL for CQHCI (Brian Norris) - mmc: sdhci_am654: Fix SDHCI_RESET_ALL for CQHCI (Brian Norris) - mmc: sdhci-of-arasan: Fix SDHCI_RESET_ALL for CQHCI (Brian Norris) - mmc: cqhci: Provide helper for resetting both SDHCI and CQHCI (Brian Norris) - MIPS: jump_label: Fix compat branch range check (Jiaxun Yang) - arm64: efi: Fix handling of misaligned runtime regions and drop warning (Ard Biesheuvel) - riscv: fix reserved memory setup (Conor Dooley) - riscv: vdso: fix build with llvm (Jisheng Zhang) - riscv: process: fix kernel info leakage (Jisheng Zhang) - net: macvlan: fix memory leaks of macvlan_common_newlink (Chuang Wang) - ethernet: tundra: free irq when alloc ring failed in tsi108_open() (Zhengchao Shao) - net: mv643xx_eth: disable napi when init rxq or txq failed in mv643xx_eth_open() (Zhengchao Shao) - ethernet: s2io: disable napi when start nic failed in s2io_card_up() (Zhengchao Shao) - net: atlantic: macsec: clear encryption keys from the stack (Antoine Tenart) - net: phy: mscc: macsec: clear encryption keys when freeing a flow (Antoine Tenart) - stmmac: dwmac-loongson: fix missing of_node_put() while module exiting (Yang Yingliang) - stmmac: dwmac-loongson: fix missing pci_disable_device() in loongson_dwmac_probe() (Yang Yingliang) - stmmac: dwmac-loongson: fix missing pci_disable_msi() while module exiting (Yang Yingliang) - cxgb4vf: shut down the adapter when t4vf_update_port_info() failed in cxgb4vf_open() (Zhengchao Shao) - mctp: Fix an error handling path in mctp_init() (Wei Yongjun) - stmmac: intel: Update PCH PTP clock rate from 200MHz to 204.8MHz (Tan, Tee Min) - stmmac: intel: Enable 2.5Gbps for Intel AlderLake-S (Wong Vee Khee) - net: cxgb3_main: disable napi when bind qsets failed in cxgb_up() (Zhengchao Shao) - net: cpsw: disable napi in cpsw_ndo_open() (Zhengchao Shao) - net/mlx5e: E-Switch, Fix comparing termination table instance (Roi Dayan) - net/mlx5: Allow async trigger completion execution on single CPU systems (Roy Novich) - net/mlx5: Bridge, verify LAG state when adding bond to bridge (Vlad Buslov) - net: wwan: iosm: fix memory leak in ipc_pcie_read_bios_cfg (M Chetan Kumar) - net: nixge: disable napi when enable interrupts failed in nixge_open() (Zhengchao Shao) - net: marvell: prestera: fix memory leak in prestera_rxtx_switch_init() (Zhengchao Shao) - netfilter: Cleanup nft_net->module_list from nf_tables_exit_net() (Shigeru Yoshida) - netfilter: nfnetlink: fix potential dead lock in nfnetlink_rcv_msg() (Ziyang Xuan) - perf tools: Add the include/perf/ directory to .gitignore (Donglin Peng) - perf stat: Fix printing os->prefix in CSV metrics output (Athira Rajeev) - drivers: net: xgene: disable napi when register irq failed in xgene_enet_open() (Zhengchao Shao) - net: lapbether: fix issue of invalid opcode in lapbeth_open() (Zhengchao Shao) - dmaengine: ti: k3-udma-glue: fix memory leak when register device fail (Yang Yingliang) - dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove() (Christophe JAILLET) - dmaengine: pxa_dma: use platform_get_irq_optional (Doug Brown) - tipc: fix the msg->req tlv len check in tipc_nl_compat_name_table_dump_header (Xin Long) - net: broadcom: Fix BCMGENET Kconfig (YueHaibing) - net: stmmac: dwmac-meson8b: fix meson8b_devm_clk_prepare_enable() (Rasmus Villemoes) - can: af_can: fix NULL pointer dereference in can_rx_register() (Zhengchao Shao) - ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network (Alexander Potapenko) - tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent (Lu Wei) - drm/vc4: Fix missing platform_unregister_drivers() call in vc4_drm_register() (Yuan Can) - net: wwan: mhi: fix memory leak in mhi_mbim_dellink (HW He) - net: wwan: iosm: fix memory leak in ipc_wwan_dellink (HW He) - hamradio: fix issue of dev reference count leakage in bpq_device_event() (Zhengchao Shao) - net: lapbether: fix issue of dev reference count leakage in lapbeth_device_event() (Zhengchao Shao) - KVM: s390: pv: don't allow userspace to set the clock under PV (Nico Boehr) - phy: ralink: mt7621-pci: add sentinel to quirks table (John Thomson) - capabilities: fix undefined behavior in bit shift for CAP_TO_MASK (Gaosheng Cui) - net: fman: Unregister ethernet device on removal (Sean Anderson) - bnxt_en: fix potentially incorrect return value for ndo_rx_flow_steer (Alex Barba) - bnxt_en: Fix possible crash in bnxt_hwrm_set_coal() (Michael Chan) - net: tun: Fix memory leaks of napi_get_frags (Wang Yufen) - octeontx2-pf: NIX TX overwrites SQ_CTX_HW_S[SQ_INT] (Ratheesh Kannoth) - octeontx2-pf: Use hardware register for CQE count (Geetha sowjanya) - macsec: clear encryption keys from the stack after setting up offload (Sabrina Dubroca) - macsec: fix detection of RXSCs when toggling offloading (Sabrina Dubroca) - macsec: fix secy->n_rx_sc accounting (Sabrina Dubroca) - macsec: delete new rxsc when offload fails (Sabrina Dubroca) - net: gso: fix panic on frag_list with mixed head alloc types (Jiri Benc) - bpf: Fix wrong reg type conversion in release_reference() (Youlin Li) - bpf: Add helper macro bpf_for_each_reg_in_vstate (Kumar Kartikeya Dwivedi) - bpf, sock_map: Move cancel_work_sync() out of sock lock (Cong Wang) - bpf: Fix sockmap calling sleepable function in teardown path (John Fastabend) - bpf, sockmap: Fix sk->sk_forward_alloc warn_on in sk_stream_kill_queues (Wang Yufen) - HID: hyperv: fix possible memory leak in mousevsc_probe() (Yang Yingliang) - bpftool: Fix NULL pointer dereference when pin {PROG, MAP, LINK} without FILE (Pu Lehui) - wifi: mac80211: Set TWT Information Frame Disabled bit as 1 (Howard Hsu) - bpf, sockmap: Fix the sk->sk_forward_alloc warning of sk_stream_kill_queues (Wang Yufen) - bpf, verifier: Fix memory leak in array reallocation for stack state (Kees Cook) - soundwire: qcom: check for outanding writes before doing a read (Srinivas Kandagatla) - soundwire: qcom: reinit broadcast completion (Srinivas Kandagatla) - wifi: cfg80211: fix memory leak in query_regdb_file() (Arend van Spriel) - wifi: cfg80211: silence a sparse RCU warning (Johannes Berg) - phy: stm32: fix an error code in probe (Dan Carpenter) - hwspinlock: qcom: correct MMIO max register for newer SoCs (Krzysztof Kozlowski) - drm/amdkfd: Fix NULL pointer dereference in svm_migrate_to_ram() (Yang Li) - drm/amdkfd: handle CPU fault on COW mapping (Philip Yang) - drm/amdkfd: avoid recursive lock in migrations back to RAM (Alex Sierra) - fuse: fix readdir cache race (Miklos Szeredi) - thunderbolt: Add DP OUT resource when DP tunnel is discovered (Sanjay R Mehta) - thunderbolt: Tear down existing tunnels when resuming from hibernate (Mika Westerberg) - LTS version: v5.15.78 (Jack Vogel) - wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker() (Dokyung Song) - drm/i915/sdvo: Setup DDC fully before output init (Ville Syrjala) - drm/i915/sdvo: Filter out invalid outputs more sensibly (Ville Syrjala) - drm/rockchip: dsi: Force synchronous probe (Brian Norris) - drm/rockchip: dsi: Clean up 'usage_mode' when failing to attach (Brian Norris) - cifs: fix regression in very old smb1 mounts (Ronnie Sahlberg) - ext4,f2fs: fix readahead of verity data (Matthew Wilcox (Oracle)) - tee: Fix tee_shm_register() for kernel TEE drivers (Sumit Garg) - KVM: x86: emulator: update the emulation mode after CR0 write (Maxim Levitsky) - KVM: x86: emulator: update the emulation mode after rsm (Maxim Levitsky) - KVM: x86: emulator: introduce emulator_recalc_and_set_mode (Maxim Levitsky) - KVM: x86: emulator: em_sysexit should update ctxt->mode (Maxim Levitsky) - KVM: arm64: Fix bad dereference on MTE-enabled systems (Ryan Roberts) - KVM: VMX: fully disable SGX if SECONDARY_EXEC_ENCLS_EXITING unavailable (Emanuele Giuseppe Esposito) - KVM: x86: Mask off reserved bits in CPUID.8000001FH (Jim Mattson) - KVM: x86: Mask off reserved bits in CPUID.80000001H (Jim Mattson) - KVM: x86: Mask off reserved bits in CPUID.80000008H (Jim Mattson) - KVM: x86: Mask off reserved bits in CPUID.8000001AH (Jim Mattson) - KVM: x86: Mask off reserved bits in CPUID.80000006H (Jim Mattson) - x86/syscall: Include asm/ptrace.h in syscall_wrapper header (Jiri Olsa) - ext4: fix BUG_ON() when directory entry has invalid rec_len (Luis Henriques) - ext4: fix warning in 'ext4_da_release_space' (Ye Bin) - parisc: Avoid printing the hardware path twice (Helge Deller) - parisc: Export iosapic_serial_irq() symbol for serial port driver (Helge Deller) - parisc: Make 8250_gsc driver dependend on CONFIG_PARISC (Helge Deller) - perf/x86/intel: Fix pebs event constraints for SPR (Kan Liang) - perf/x86/intel: Add Cooper Lake stepping to isolation_ucodes[] (Kan Liang) - perf/x86/intel: Fix pebs event constraints for ICL (Kan Liang) - arm64: entry: avoid kprobe recursion (Mark Rutland) - efi: random: Use 'ACPI reclaim' memory for random seed (Ard Biesheuvel) - efi: random: reduce seed size to 32 bytes (Ard Biesheuvel) - fuse: add file_modified() to fallocate (Miklos Szeredi) - capabilities: fix potential memleak on error path from vfs_getxattr_alloc() (Gaosheng Cui) - tracing/histogram: Update document for KEYS_MAX size (Zheng Yejian) - tools/nolibc/string: Fix memcmp() implementation (Rasmus Villemoes) - ring-buffer: Check for NULL cpu_buffer in ring_buffer_wake_waiters() (Steven Rostedt (Google)) - kprobe: reverse kp->flags when arm_kprobe failed (Li Qiang) - tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd() (Shang XiaoJing) - tcp/udp: Make early_demux back namespacified. (Kuniyuki Iwashima) - ftrace: Fix use-after-free for dynamic ftrace_ops (Li Huafei) - btrfs: fix type of parameter generation in btrfs_get_dentry (David Sterba) - btrfs: fix tree mod log mishandling of reallocated nodes (Josef Bacik) - btrfs: fix lost file sync on direct IO write with nowait and dsync iocb (Filipe Manana) - fscrypt: fix keyring memory leak on mount failure (Eric Biggers) - fscrypt: stop using keyrings subsystem for fscrypt_master_key (Eric Biggers) - af_unix: Fix memory leaks of the whole sk due to OOB skb. (Kuniyuki Iwashima) - block, bfq: protect 'bfqd->queued' by 'bfqd->lock' (Yu Kuai) - Bluetooth: L2CAP: Fix attempting to access uninitialized memory (Luiz Augusto von Dentz) {CVE-2022-42895} - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (Luiz Augusto von Dentz) {CVE-2022-42896} - i2c: piix4: Fix adapter not be removed in piix4_remove() (Chen Zhongjin) - arm64: dts: juno: Add thermal critical trip points (Cristian Marussi) - firmware: arm_scmi: Fix devres allocation device in virtio transport (Cristian Marussi) - firmware: arm_scmi: Make Rx chan_setup fail on memory errors (Cristian Marussi) - firmware: arm_scmi: Suppress the driver's bind attributes (Cristian Marussi) - block: Fix possible memory leak for rq_wb on add_disk failure (Chen Zhongjin) - arm64: dts: ls208xa: specify clock frequencies for the MDIO controllers (Ioana Ciornei) - arm64: dts: ls1088a: specify clock frequencies for the MDIO controllers (Ioana Ciornei) - arm64: dts: lx2160a: specify clock frequencies for the MDIO controllers (Ioana Ciornei) - arm64: dts: imx8: correct clock order (Peng Fan) - ARM: dts: imx6qdl-gw59{10,13}: fix user pushbutton GPIO offset (Tim Harvey) - clk: qcom: Update the force mem core bit for GPU clocks (Taniya Das) - efi/tpm: Pass correct address to memblock_reserve (Jerry Snitselaar) - i2c: xiic: Add platform module alias (Martin Tuma) - drm/amdgpu: set vm_update_mode=0 as default for Sienna Cichlid in SRIOV case (Danijel Slivka) - HID: saitek: add madcatz variant of MMO7 mouse device ID (Samuel Bailey) - scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) - ACPI: APEI: Fix integer overflow in ghes_estatus_pool_init() (Ashish Kalra) - media: v4l: subdev: Fail graciously when getting try data for NULL state (Sakari Ailus) - media: meson: vdec: fix possible refcount leak in vdec_probe() (Hangyu Hua) - media: dvb-frontends/drxk: initialize err to 0 (Hans Verkuil) - media: cros-ec-cec: limit msg.len to CEC_MAX_MSG_SIZE (Hans Verkuil) - media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE (Hans Verkuil) - media: rkisp1: Zero v4l2_subdev_format fields in when validating links (Laurent Pinchart) - media: rkisp1: Use correct macro for gradient registers (Laurent Pinchart) - media: rkisp1: Initialize color space on resizer sink and source pads (Laurent Pinchart) - media: rkisp1: Don't pass the quantization to rkisp1_csm_config() (Laurent Pinchart) - s390/cio: fix out-of-bounds access on cio_ignore free (Peter Oberparleiter) - s390/cio: derive cdev information only for IO-subchannels (Vineeth Vijayan) - s390/boot: add secure boot trailer (Peter Oberparleiter) - s390/uaccess: add missing EX_TABLE entries to __clear_user() (Heiko Carstens) - mtd: parsers: bcm47xxpart: Fix halfblock reads (Linus Walleij) - mtd: parsers: bcm47xxpart: print correct offset on read error (Rafal Milecki) - fbdev: stifb: Fall back to cfb_fillrect() on 32-bit HCRX cards (Helge Deller) - video/fbdev/stifb: Implement the stifb_fillrect() function (Helge Deller) - drm/msm/hdmi: fix IRQ lifetime (Johan Hovold) - drm/msm/hdmi: Remove spurious IRQF_ONESHOT flag (Daniel Thompson) - vsock: fix possible infinite sleep in vsock_connectible_wait_data() (Dexuan Cui) - ipv6: fix WARNING in ip6_route_net_exit_late() (Zhengchao Shao) - net, neigh: Fix null-ptr-deref in neigh_table_clear() (Chen Zhongjin) - net/smc: Fix possible leaked pernet namespace in smc_init() (Chen Zhongjin) - stmmac: dwmac-loongson: fix invalid mdio_node (Liu Peibao) - ibmvnic: Free rwi on reset success (Nick Child) - net: mdio: fix undefined behavior in bit shift for __mdiobus_register (Gaosheng Cui) - Bluetooth: L2CAP: Fix memory leak in vhci_write (Hawkins Jiawei) - Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del() (Zhengchao Shao) - Bluetooth: virtio_bt: Use skb_put to set length (Soenke Huster) - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Maxim Mikityanskiy) - netfilter: ipset: enforce documented limit to prevent allocating huge memory (Jozsef Kadlecsik) - btrfs: fix ulist leaks in error paths of qgroup self tests (Filipe Manana) - btrfs: fix inode list leak during backref walking at find_parent_nodes() (Filipe Manana) - btrfs: fix inode list leak during backref walking at resolve_indirect_refs() (Filipe Manana) - isdn: mISDN: netjet: fix wrong check of device registration (Yang Yingliang) - mISDN: fix possible memory leak in mISDN_register_device() (Yang Yingliang) - rose: Fix NULL pointer dereference in rose_send_frame() (Zhang Qilong) - ipvs: fix WARNING in ip_vs_app_net_cleanup() (Zhengchao Shao) - ipvs: fix WARNING in __ip_vs_cleanup_batch() (Zhengchao Shao) - ipvs: use explicitly signed chars (Jason A. Donenfeld) - netfilter: nf_tables: release flow rule object from commit path (Pablo Neira Ayuso) - netfilter: nf_tables: netlink notifier might race to release objects (Pablo Neira Ayuso) - net: tun: fix bugs for oversize packet when napi frags enabled (Ziyang Xuan) - net: sched: Fix use after free in red_enqueue() (Dan Carpenter) - ata: pata_legacy: fix pdc20230_set_piomode() (Sergey Shtylyov) - net: fec: fix improper use of NETDEV_TX_BUSY (Zhang Changzhong) - nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send() (Shang XiaoJing) - nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send() (Shang XiaoJing) - nfc: nxp-nci: Fix potential memory leak in nxp_nci_send() (Shang XiaoJing) - nfc: fdp: Fix potential memory leak in fdp_nci_send() (Shang XiaoJing) - net: dsa: fall back to default tagger if we can't load the one from DT (Vladimir Oltean) - RDMA/qedr: clean up work queue on failure in qedr_alloc_resources() (Dan Carpenter) - RDMA/core: Fix null-ptr-deref in ib_core_cleanup() (Chen Zhongjin) - net: dsa: Fix possible memory leaks in dsa_loop_init() (Chen Zhongjin) - nfs4: Fix kmemleak when allocate slot failed (Zhang Xiaoxu) - NFSv4.2: Fixup CLONE dest file size for zero-length count (Benjamin Coddington) - SUNRPC: Fix null-ptr-deref when xps sysfs alloc failed (Zhang Xiaoxu) - NFSv4.1: We must always send RECLAIM_COMPLETE after a reboot (Trond Myklebust) - NFSv4.1: Handle RECLAIM_COMPLETE trunking errors (Trond Myklebust) - NFSv4: Fix a potential state reclaim deadlock (Trond Myklebust) - RDMA/hns: Disable local invalidate operation (Yangyang Li) - RDMA/hns: Use hr_reg_xxx() instead of remaining roce_set_xxx() (Wenpeng Liang) - RDMA/hns: Remove magic number (Xinhao Liu) - IB/hfi1: Correctly move list in sc_disable() (Dean Luick) - KVM: x86: Add compat handler for KVM_X86_SET_MSR_FILTER (Alexander Graf) - KVM: x86: Copy filter arg outside kvm_vm_ioctl_set_msr_filter() (Alexander Graf) - KVM: x86: Protect the unused bits in MSR exiting flags (Aaron Lewis) - HID: playstation: add initial DualSense Edge controller support (Roderick Colenbrander) - mm/hugetlb: fix races when looking up a CONT-PTE/PMD size hugetlb page (Baolin Wang) - drm/amd/display: explicitly disable psr_feature_enable appropriately (Shirish S) - KVM: x86: Treat #DBs from the emulator as fault-like (code and DR7.GD=1) (Sean Christopherson) - serial: ar933x: Deassert Transmit Enable on ->rs485_config() (Lukas Wunner) - scsi: lpfc: Rework MIB Rx Monitor debug info logic (James Smart) - scsi: lpfc: Adjust CMF total bytes and rxmonitor (James Smart) - scsi: lpfc: Adjust bytes received vales during cmf timer interval (James Smart) - LTS version: v5.15.77 (Jack Vogel) - tcp/udp: Fix memory leak in ipv6_renew_options(). (Kuniyuki Iwashima) - serial: Deassert Transmit Enable on probe in driver-specific way (Lukas Wunner) - serial: core: move RS485 configuration tasks from drivers into core (Lino Sanfilippo) - can: rcar_canfd: rcar_canfd_handle_global_receive(): fix IRQ storm on global FIFO receive (Biju Das) - can: rcar_canfd: fix channel specific IRQ handling for RZ/G2L (Biju Das) - scsi: sd: Revert 'scsi: sd: Remove a local variable' (Yu Kuai) - arm64: Add AMPERE1 to the Spectre-BHB affected list (D Scott Phillips) - net: enetc: survive memory pressure without crashing (Vladimir Oltean) - kcm: do not sense pfmemalloc status in kcm_sendpage() (Eric Dumazet) - net: do not sense pfmemalloc status in skb_append_pagefrags() (Eric Dumazet) - net/mlx5: Fix crash during sync firmware reset (Suresh Devarakonda) - net/mlx5: Update fw fatal reporter state on PCI handlers successful recover (Roy Novich) - net/mlx5: Print more info on pci error handlers (Saeed Mahameed) - net/mlx5: Fix possible use-after-free in async command interface (Tariq Toukan) - net/mlx5e: Extend SKB room check to include PTP-SQ (Aya Levin) - net/mlx5e: Do not increment ESN when updating IPsec ESN state (Hyong Youb Kim) - netdevsim: remove dir in nsim_dev_debugfs_init() when creating ports dir failed (Zhengchao Shao) - net: broadcom: bcm4908_enet: update TX stats after actual transmission (Rafal Milecki) - net: broadcom: bcm4908enet: remove redundant variable bytes (Colin Ian King) - nh: fix scope used to find saddr when adding non gw nh (Nicolas Dichtel) - net: bcmsysport: Indicate MAC is in charge of PHY PM (Florian Fainelli) - net: ehea: fix possible memory leak in ehea_register_port() (Yang Yingliang) - openvswitch: switch from WARN to pr_warn (Aaron Conole) - ALSA: aoa: Fix I2S device accounting (Takashi Iwai) - ALSA: aoa: i2sbus: fix possible memory leak in i2sbus_add_dev() (Yang Yingliang) - net: ethernet: ave: Fix MAC to be in charge of PHY PM (Kunihiko Hayashi) - net: fec: limit register access on i.MX6UL (Juergen Borleis) - perf vendor events arm64: Fix incorrect Hisi hip08 L3 metrics (Shang XiaoJing) - PM: domains: Fix handling of unavailable/disabled idle states (Sudeep Holla) - net: ksz884x: fix missing pci_disable_device() on error in pcidev_init() (Yang Yingliang) - i40e: Fix flow-type by setting GL_HASH_INSET registers (Slawomir Laba) - i40e: Fix VF hang when reset is triggered on another VF (Sylwester Dziedziuch) - i40e: Fix ethtool rx-flow-hash setting for X722 (Slawomir Laba) - ipv6: ensure sane device mtu in tunnels (Eric Dumazet) - perf vendor events power10: Fix hv-24x7 metric events (Kajol Jain) - media: vivid: set num_in/outputs to 0 if not supported (Hans Verkuil) - media: videodev2.h: V4L2_DV_BT_BLANKING_HEIGHT should check 'interlaced' (Hans Verkuil) - media: v4l2-dv-timings: add sanity checks for blanking values (Hans Verkuil) - media: vivid: dev->bitmap_cap wasn't freed in all cases (Hans Verkuil) - media: vivid: s_fbuf: add more sanity checks (Hans Verkuil) - PM: hibernate: Allow hybrid sleep to work with s2idle (Mario Limonciello) - can: mcp251x: mcp251x_can_probe(): add missing unregister_candev() in error path (Dongliang Mu) - can: mscan: mpc5xxx: mpc5xxx_can_probe(): add missing put_clock() in error path (Dongliang Mu) - drm/amdkfd: Fix memory leak in kfd_mem_dmamap_userptr() (Rafael Mendonca) - net-memcg: avoid stalls when under memory pressure (Jakub Kicinski) - tcp: fix indefinite deferral of RTO with SACK reneging (Neal Cardwell) - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Lu Wei) - tcp: minor optimization in tcp_add_backlog() (Eric Dumazet) - net: lantiq_etop: don't free skb when returning NETDEV_TX_BUSY (Zhang Changzhong) - net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed (Zhengchao Shao) - kcm: annotate data-races around kcm->rx_wait (Eric Dumazet) - kcm: annotate data-races around kcm->rx_psock (Eric Dumazet) - atlantic: fix deadlock at aq_nic_stop (Inigo Huguet) - drm/i915/dp: Reset frl trained flag before restarting FRL training (Ankit Nautiyal) - amd-xgbe: add the bit rate quirk for Molex cables (Raju Rangoju) - amd-xgbe: fix the SFP compliance codes check for DAC cables (Raju Rangoju) - x86/unwind/orc: Fix unreliable stack dump with gcov (Chen Zhongjin) - nfc: virtual_ncidev: Fix memory leak in virtual_nci_send() (Shang XiaoJing) - net: macb: Specify PHY PM management done by MAC (Sergiu Moga) - net: hinic: fix the issue of double release MBOX callback of VF (Zhengchao Shao) - net: hinic: fix the issue of CMDQ memory leaks (Zhengchao Shao) - net: hinic: fix memory leak when reading function table (Zhengchao Shao) - net: hinic: fix incorrect assignment issue in hinic_set_interrupt_cfg() (Zhengchao Shao) - net: netsec: fix error handling in netsec_register_mdio() (Yang Yingliang) - tipc: fix a null-ptr-deref in tipc_topsrv_accept (Xin Long) - perf/x86/intel/lbr: Use setup_clear_cpu_cap() instead of clear_cpu_cap() (Maxim Levitsky) - ALSA: ac97: fix possible memory leak in snd_ac97_dev_register() (Yang Yingliang) - ASoC: qcom: lpass-cpu: Mark HDMI TX parity register as volatile (Srinivasa Rao Mandadapu) - mtd: rawnand: intel: Add missing of_node_put() in ebu_nand_probe() (Yang Yingliang) - arc: iounmap() arg is volatile (Randy Dunlap) - sched/core: Fix comparison in sched_group_cookie_match() (Lin Shengwang) - perf: Fix missing SIGTRAPs (Peter Zijlstra) - ASoC: qcom: lpass-cpu: mark HDMI TX registers as volatile (Srinivasa Rao Mandadapu) - KVM: selftests: Fix number of pages for memory slot in memslot_modification_stress_test (Gavin Shan) - drm/msm: Fix return type of mdp4_lvds_connector_mode_valid (Nathan Huckleberry) - media: atomisp: prevent integer overflow in sh_css_set_black_frame() (Dan Carpenter) - media: v4l2: Fix v4l2_i2c_subdev_set_name function documentation (Alexander Stein) - net: ieee802154: fix error return code in dgram_bind() (Wei Yongjun) - ethtool: eeprom: fix null-deref on genl_info in dump (Xin Long) - mmc: block: Remove error check of hw_reset on reset (Christian Lohle) - s390/pci: add missing EX_TABLE entries to __pcistg_mio_inuser()/__pcilg_mio_inuser() (Heiko Carstens) - s390/futex: add missing EX_TABLE entry to __futex_atomic_op() (Heiko Carstens) - perf auxtrace: Fix address filter symbol name match for modules (Adrian Hunter) - ARC: mm: fix leakage of memory allocated for PTE (Pavel Kozlov) - pinctrl: Ingenic: JZ4755 bug fixes (Siarhei Volkau) - kernfs: fix use-after-free in __kernfs_remove (Christian A. Ehrhardt) - counter: microchip-tcb-capture: Handle Signal1 read and Synapse (William Breathitt Gray) - mmc: sdhci-esdhc-imx: Propagate ESDHC_FLAG_HS400* only on 8bit bus (Sascha Hauer) - mmc: sdhci-pci-core: Disable ES for ASUS BIOS on Jasper Lake (Patrick Thompson) - mmc: core: Fix kernel panic when remove non-standard SDIO card (Matthew Ma) - mmc: sdhci_am654: 'select', not 'depends' REGMAP_MMIO (Brian Norris) - coresight: cti: Fix hang in cti_disable_hw() (James Clark) - drm/msm/dp: fix IRQ lifetime (Johan Hovold) - drm/msm/hdmi: fix memory corruption with too many bridges (Johan Hovold) - drm/msm/dsi: fix memory corruption with too many bridges (Johan Hovold) - drm/amdgpu: disallow gfxoff until GC IP blocks complete s2idle resume (Prike Liang) - scsi: qla2xxx: Use transport-defined speed mask for supported_speeds (Manish Rangankar) - mac802154: Fix LQI recording (Miquel Raynal) - exec: Copy oldsighand->action under spin-lock (Bernd Edlinger) - fs/binfmt_elf: Fix memory leak in load_elf_binary() (Li Zetao) - cpufreq: intel_pstate: hybrid: Use known scaling factor for P-cores (Rafael J. Wysocki) - cpufreq: intel_pstate: Read all MSRs on the target CPU (Rafael J. Wysocki) - fbdev: smscufx: Fix several use-after-free bugs (Hyunwoo Kim) - iio: adxl372: Fix unsafe buffer attributes (Matti Vaittinen) - iio: temperature: ltc2983: allocate iio channels once (Cosmin Tanislav) - iio: light: tsl2583: Fix module unloading (Shreeya Patel) - tools: iio: iio_utils: fix digit calculation (Matti Vaittinen) - xhci: Remove device endpoints from bandwidth list when freeing the device (Mathias Nyman) - xhci-pci: Set runtime PM as default policy on all xHC 1.2 or later devices (Mario Limonciello) - xhci: Add quirk to reset host back to default state at shutdown (Mathias Nyman) - mtd: rawnand: marvell: Use correct logic for nand-keep-config (Tony O'Brien) - usb: xhci: add XHCI_SPURIOUS_SUCCESS to ASM1042 despite being a V0.96 controller (Jens Glathe) - usb: bdc: change state when port disconnected (Justin Chen) - usb: dwc3: gadget: Don't set IMI for no_interrupt (Thinh Nguyen) - usb: dwc3: gadget: Stop processing more requests on IMI (Thinh Nguyen) - usb: gadget: uvc: fix sg handling during video encode (Jeff Vanhoof) - usb: gadget: uvc: fix sg handling in error case (Dan Vacura) - USB: add RESET_RESUME quirk for NVIDIA Jetson devices in RCM (Hannu Hartikainen) - ALSA: rme9652: use explicitly signed char (Jason A. Donenfeld) - ALSA: au88x0: use explicitly signed char (Jason A. Donenfeld) - ALSA: usb-audio: Add quirks for M-Audio Fast Track C400/600 (Takashi Iwai) - ALSA: Use del_timer_sync() before freeing timer (Steven Rostedt (Google)) - can: kvaser_usb: Fix possible completions during init_completion (Anssi Hannula) - can: j1939: transport: j1939_session_skb_drop_old(): spin_unlock_irqrestore() before kfree_skb() (Yang Yingliang) - NFSv4: Add an fattr allocation to _nfs4_discover_trunking() (Scott Mayhew) - NFSv4: Fix free of uninitialized nfs4_label on referral lookup. (Benjamin Coddington) - rds: ib: Enable FC by default (Hakon Bugge) [Orabug: 33930793] - Adding a new sysfs entry point -- forcepower -- to /sys/bus/pci/slots/X. (James Puthukattukaran) [Orabug: 34719459] - nvme: paring quiesce/unquiesce (Ming Lei) [Orabug: 34719459] - nvme: prepare for pairing quiescing and unquiescing (Ming Lei) [Orabug: 34719459] - nvme: apply nvme API to quiesce/unquiesce admin queue (Ming Lei) [Orabug: 34719459] - nvme: add APIs for stopping/starting admin queue (Ming Lei) [Orabug: 34719459] - hugetlbfs: don't delete error page from pagecache (James Houghton) [Orabug: 34772616] - mm: shmem: don't truncate page if memory failure happens (Yang Shi) [Orabug: 34772616] - mm: hwpoison: handle non-anonymous THP correctly (Yang Shi) [Orabug: 34772616] - mm: hwpoison: refactor refcount check handling (Yang Shi) [Orabug: 34772616] - net/rds: Quiesce heartbeat worker in rds_conn_path_destroy() (Sharath Srinivasan) [Orabug: 34815818] - net/rds: Add support for tracing RDS heartbeats (Sharath Srinivasan) [Orabug: 34815818] - net/rds: Enable RDS heartbeat by default (Sharath Srinivasan) [Orabug: 34815818] - uek-rpm: core.list: add VirtualBox guest drivers to core package (Todd Vierling) [Orabug: 34820755] - tools/power turbostat: fix SPR PC6 limits (Artem Bityutskiy) [Orabug: 34838996] - tools/power turbostat: separate SPR from ICX (Artem Bityutskiy) [Orabug: 34838996] - rds: ib: Fix incorrect error handling during QP creation (Hakon Bugge) [Orabug: 34857202] - Revert 'random: clear fast pool, crng, and batches in cpuhp bring up' (Somasundaram Krishnasamy) [Orabug: 34850847] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-42896 CVE-2022-42895 CVE-2022-4378 Oracle Linux 8 [5.15.0-6.80.3.1] - Revert 'rds: ib: Enable FC by default' (Hakon Bugge) [Orabug: 34964359] [5.15.0-6.80.3] - net/mlx5: Suppress error logging on UCTX creation (Marina) [Orabug: 34888471] - rds: ib: Fix leaked MRs during kexec (Hakon Bugge) [Orabug: 34892082] - uek-rpm: Add ptp_kvm.ko to core rpm (Somasundaram Krishnasamy) [Orabug: 34901414] - Revert 'tracing/ring-buffer: Have polling block on watermark' (Harshit Mogalapalli) [Orabug: 34890999] [5.15.0-6.80.2] - scsi: mpi3mr: Remove unnecessary cast (Jules Irenge) [Orabug: 34640445] - scsi: mpi3mr: Update driver version to 8.2.0.3.0 (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Fix scheduling while atomic type bug (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Scan the devices during resume time (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Free enclosure objects during driver unload (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Handle 0xF003 Fault Code (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Graceful handling of surprise removal of PCIe HBA (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Support new power management framework (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Update mpi3 header files (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Fix error code in mpi3mr_transport_smp_handler() (Dan Carpenter) [Orabug: 34640445] - scsi: mpi3mr: Fix error codes in mpi3mr_report_manufacture() (Dan Carpenter) [Orabug: 34640445] - scsi: mpi3mr: Block I/Os while refreshing target dev objects (Chandrakanth patil) [Orabug: 34640445] - scsi: mpi3mr: Refresh SAS ports during soft reset (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Support SAS transport class callbacks (Chandrakanth patil) [Orabug: 34640445] - scsi: mpi3mr: Add framework to issue MPT transport cmds (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Add SAS SATA end devices to STL (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Get target object based on rphy (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Add expander devices to STL (Chandrakanth patil) [Orabug: 34640445] - scsi: mpi3mr: Enable STL on HBAs where multipath is disabled (Chandrakanth patil) [Orabug: 34640445] - scsi: mpi3mr: Add helper functions to manage device's port (Chandrakanth patil) [Orabug: 34640445] - scsi: mpi3mr: Add helper functions to retrieve device objects (Chandrakanth patil) [Orabug: 34640445] - scsi: mpi3mr: Add framework to add phys to STL (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Enable Enclosure device add event (Chandrakanth patil) [Orabug: 34640445] - scsi: mpi3mr: Add helper functions to retrieve config pages (Chandrakanth patil) [Orabug: 34640445] - scsi: mpi3mr: Add framework to issue config requests (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Add config and transport related debug flags (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Delete a stray tab (Dan Carpenter) [Orabug: 34640445] - scsi: mpi3mr: Unlock on error path (Dan Carpenter) [Orabug: 34640445] - scsi: mpi3mr: Reduce VD queue depth on detecting throttling (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Resource Based Metering (Chandrakanth patil) [Orabug: 34640445] - scsi: mpi3mr: Increase cmd_per_lun to 128 (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Enable shared host tagset (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Fix kernel-doc (Chandrakanth patil) [Orabug: 34640445] - scsi: mpi3mr: Rework mrioc->bsg_device model to fix warnings (Sumit Saxena) [Orabug: 34640445] - scsi: mpi3mr: Add target device related sysfs (Chandrakanth patil) [Orabug: 34640445] - scsi: mpi3mr: Add shost related sysfs attributes (Chandrakanth patil) [Orabug: 34640445] - scsi: mpi3mr: Return error if dma_alloc_coherent() fails (Dan Carpenter) [Orabug: 34640445] - scsi: mpi3mr: Fix a NULL vs IS_ERR() bug in mpi3mr_bsg_init() (Dan Carpenter) [Orabug: 34640445] - scsi: mpi3mr: Return I/Os to an unrecoverable HBA with DID_ERROR (Chandrakanth patil) [Orabug: 34640445] - scsi: mpi3mr: Hidden drives not removed during soft reset (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Increase I/O timeout value to 60s (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Update driver version to 8.0.0.69.0 (Sumit Saxena) [Orabug: 34640445] - scsi: mpi3mr: Add support for NVMe passthrough (Sumit Saxena) [Orabug: 34640445] - scsi: mpi3mr: Expose adapter state to sysfs (Chandrakanth patil) [Orabug: 34640445] - scsi: mpi3mr: Add support for PEL commands (Sumit Saxena) [Orabug: 34640445] - scsi: mpi3mr: Add support for MPT commands (Sumit Saxena) [Orabug: 34640445] - scsi: mpi3mr: Move data structures/definitions from MPI headers to uapi header (Sumit Saxena) [Orabug: 34640445] - scsi: mpi3mr: Add support for driver commands (Sumit Saxena) [Orabug: 34640445] - scsi: mpi3mr: Add bsg device support (Sumit Saxena) [Orabug: 34640445] - scsi: mpi3mr: Fix flushing !WQ_MEM_RECLAIM events warning (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Bump driver version to 8.0.0.68.0 (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Update the copyright year (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Fix cmnd getting marked as in use forever (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Fix hibernation issue (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Update MPI3 headers (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Fix printing of pending I/O count (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Fix deadlock while canceling the fw event (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Fix formatting problems in some kernel-doc comments (Yang Li) [Orabug: 34640445] - scsi: mpi3mr: Fix some spelling mistakes (Colin Ian King) [Orabug: 34640445] - scsi: mpi3mr: Bump driver version to 8.0.0.61.0 (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Enhanced Task Management Support Reply handling (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Use TM response codes from MPI3 headers (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Add io_uring interface support in I/O-polled mode (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Print cable mngnt and temp threshold events (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Support Prepare for Reset event (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Add Event acknowledgment logic (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Gracefully handle online FW update operation (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Detect async reset that occurred in firmware (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Add IOC reinit function (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Handle offline FW activation in graceful manner (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Code refactor of IOC init - part2 (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Code refactor of IOC init - part1 (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Fault IOC when internal command gets timeout (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Display IOC firmware package version (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Handle unaligned PLL in unmap cmnds (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Increase internal cmnds timeout to 60s (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Do access status validation before adding devices (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Add support for PCIe Managed Switch SES device (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Update MPI3 headers - part2 (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Update MPI3 headers - part1 (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Don't reset IOC if cmnds flush with reset status (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Replace spin_lock() with spin_lock_irqsave() (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Add debug APIs based on logging_level bits (Sreekanth Reddy) [Orabug: 34640445] - scsi: mpi3mr: Use scnprintf() instead of snprintf() (Dan Carpenter) [Orabug: 34640445] - scsi: mpi3mr: Clean up mpi3mr_print_ioc_info() (Dan Carpenter) [Orabug: 34640445] - rds: ib: Remove unnecessary call to rds_ib_ring_unalloc (Hakon Bugge) [Orabug: 34768825] - rds: ib: Remove unnecessary i_flowctl term from conditions (Hakon Bugge) [Orabug: 34768825] - rds: ib: Remove unnesesarry variable initialization (Hakon Bugge) [Orabug: 34768825] - rds: ib: Make sure receives are posted before connection is up (Hakon Bugge) [Orabug: 34768825] - rds: ib: Fix the Retry counter dependency on RNR NAK Retry counter (Hakon Bugge) [Orabug: 34768825] - rds: Deduct one credit on the passive side (Hakon Bugge) [Orabug: 34768825] - rds: Use all eight bits for credit updates (Hakon Bugge) [Orabug: 34768825] - RDS/IB: Fix the misplaced counter update rdma dto path (Devesh Sharma) [Orabug: 34865847] - uek-rpm: Enable CONFIG_HP_ILO for aarch64 (Saeed Mirzamohammadi) [Orabug: 34869880] - uek-rpm: ol8: Choose right annobin plugin for UEK build (Somasundaram Krishnasamy) [Orabug: 34873882] - proc: proc_skip_spaces() shouldn't think it is working on C strings (Linus Torvalds) [Orabug: 34882775] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Linus Torvalds) [Orabug: 34882775] {CVE-2022-4378} [5.15.0-6.80.1] - LTS version: v5.15.80 (Jack Vogel) - ntfs: check overflow when iterating ATTR_RECORDs (Hawkins Jiawei) - ntfs: fix out-of-bounds read in ntfs_attr_find() (Hawkins Jiawei) - ntfs: fix use-after-free in ntfs_attr_find() (Hawkins Jiawei) - net/9p: use a dedicated spinlock for trans_fd (Dominique Martinet) - mm: fs: initialize fsdata passed to write_begin/write_end interface (Alexander Potapenko) - wifi: wext: use flex array destination for memcpy() (Hawkins Jiawei) - 9p/trans_fd: always use O_NONBLOCK read/write (Tetsuo Handa) - gfs2: Switch from strlcpy to strscpy (Andreas Gruenbacher) - gfs2: Check sb_bsize_shift after reading superblock (Andrew Price) - 9p: trans_fd/p9_conn_cancel: drop client lock earlier (Dominique Martinet) - kcm: close race conditions on sk_receive_queue (Cong Wang) - kcm: avoid potential race in kcm_tx_work (Eric Dumazet) - tcp: cdg: allow tcp_cdg_release() to be called multiple times (Eric Dumazet) - macvlan: enforce a consistent minimal mtu (Eric Dumazet) - Input: i8042 - fix leaking of platform device on module removal (Chen Jun) - kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case (Li Huafei) - scsi: scsi_debug: Fix possible UAF in sdebug_add_host_helper() (Yuan Can) - scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus() (Yang Yingliang) - net: use struct_group to copy ip/ipv6 header addresses (Hangbin Liu) - tracing: Fix warning on variable 'struct trace_array' (Aashish Sharma) - ring-buffer: Include dropped pages in counting dirty patches (Steven Rostedt (Google)) - perf: Improve missing SIGTRAP checking (Marco Elver) - serial: 8250_lpss: Use 16B DMA burst with Elkhart Lake (Ilpo Jarvinen) - nvme: ensure subsystem reset is single threaded (Keith Busch) - nvme: restrict management ioctls to admin (Keith Busch) - perf/x86/intel/pt: Fix sampling using single range output (Adrian Hunter) - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (Alexander Potapenko) - docs: update mediator contact information in CoC doc (Shuah Khan) - mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put() (Xiongfeng Wang) - mmc: sdhci-pci-o2micro: fix card detect fail issue caused by CD# debounce timeout (Chevron Li) - mmc: core: properly select voltage range without power cycle (Yann Gautier) - firmware: coreboot: Register bus in module init (Brian Norris) - iommu/vt-d: Set SRE bit only when hardware has SRS cap (Tina Zhang) - iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging entries (Tina Zhang) - scsi: zfcp: Fix double free of FSF request when qdio send fails (Benjamin Block) - net: phy: marvell: add sleep time after enabling the loopback bit (Aminuddin Jamaluddin) - maccess: Fix writing offset in case of fault in strncpy_from_kernel_nofault() (Alban Crequy) - Input: iforce - invert valid length check when fetching device IDs (Tetsuo Handa) - serial: 8250_lpss: Configure DMA also w/o DMA filter (Ilpo Jarvinen) - serial: 8250: Flush DMA Rx on RLSI (Ilpo Jarvinen) - serial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs (Ilpo Jarvinen) - dm ioctl: fix misbehavior if list_versions races with module loading (Mikulas Patocka) - iio: pressure: ms5611: changed hardcoded SPI speed to value limited (Mitja Spes) - iio: adc: mp2629: fix potential array out of bound access (Saravanan Sekar) - iio: adc: mp2629: fix wrong comparison of channel (Saravanan Sekar) - iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init() (Yang Yingliang) - iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger() (Yang Yingliang) - usb: typec: mux: Enter safe mode only when pins need to be reconfigured (Rajat Khandelwal) - usb: cdns3: host: fix endless superspeed hub port reset (Li Jun) - usb: chipidea: fix deadlock in ci_otg_del_timer (Duoming Zhou) - usb: add NO_LPM quirk for Realforce 87U Keyboard (Nicolas Dumazet) - USB: serial: option: add Fibocom FM160 0x0111 composition (Reinhard Speyerer) - USB: serial: option: add u-blox LARA-L6 modem (Davide Tronchin) - USB: serial: option: add u-blox LARA-R6 00B modem (Davide Tronchin) - USB: serial: option: remove old LARA-R6 PID (Davide Tronchin) - USB: serial: option: add Sierra Wireless EM9191 (Benoit Monin) - USB: bcma: Make GPIO explicitly optional (Linus Walleij) - speakup: fix a segfault caused by switching consoles (Mushahid Hussain) - slimbus: stream: correct presence rate frequencies (Krzysztof Kozlowski) - slimbus: qcom-ngd: Fix build error when CONFIG_SLIM_QCOM_NGD_CTRL=y && CONFIG_QCOM_RPROC_COMMON=m (Zheng Bin) - Revert 'usb: dwc3: disable USB core PHY management' (Johan Hovold) - ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360 (Takashi Iwai) - ALSA: hda/realtek: fix speakers for Samsung Galaxy Book Pro (Emil Flink) - ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open() (Takashi Iwai) - drm/amd/display: Add HUBP surface flip interrupt handler (Rodrigo Siqueira) - tracing: kprobe: Fix potential null-ptr-deref on trace_array in kprobe_event_gen_test_exit() (Shang XiaoJing) - tracing: kprobe: Fix potential null-ptr-deref on trace_event_file in kprobe_event_gen_test_exit() (Shang XiaoJing) - tracing: Fix race where eprobes can be called before the event (Steven Rostedt (Google)) - tracing: Fix wild-memory-access in register_synth_event() (Shang XiaoJing) - tracing: Fix memory leak in test_gen_synth_cmd() and test_empty_synth_event() (Shang XiaoJing) - tracing/ring-buffer: Have polling block on watermark (Steven Rostedt (Google)) - tracing: Fix memory leak in tracing_read_pipe() (Wang Yufen) - ring_buffer: Do not deactivate non-existant pages (Daniil Tatianin) - ftrace: Fix null pointer dereference in ftrace_add_mod() (Xiu Jianfeng) - ftrace: Optimize the allocation for mcount entries (Wang Wensheng) - ftrace: Fix the possible incorrect kernel message (Wang Wensheng) - cifs: add check for returning value of SMB2_set_info_init (Anastasia Belova) - net: thunderbolt: Fix error handling in tbnet_init() (Yuan Can) - net: microchip: sparx5: Fix potential null-ptr-deref in sparx_stats_init() and sparx5_start() (Shang XiaoJing) - cifs: Fix wrong return value checking when GETFLAGS (Zhang Xiaoxu) - net/x25: Fix skb leak in x25_lapb_receive_frame() (Wei Yongjun) - net: ag71xx: call phylink_disconnect_phy if ag71xx_hw_enable() fail in ag71xx_open() (Liu Jian) - cifs: add check for returning value of SMB2_close_init (Anastasia Belova) - platform/surface: aggregator: Do not check for repeated unsequenced packets (Maximilian Luz) - platform/x86/intel: pmc: Don't unconditionally attach Intel PMC when virtualized (Roger Pau Monne) - drbd: use after free in drbd_create_device() (Dan Carpenter) - bridge: switchdev: Fix memory leaks when changing VLAN protocol (Ido Schimmel) - net: hns3: fix setting incorrect phy link ksettings for firmware in resetting process (Guangbin Huang) - net: ena: Fix error handling in ena_init() (Yuan Can) - net: ionic: Fix error handling in ionic_init_module() (Yuan Can) - xen/pcpu: fix possible memory leak in register_pcpu() (Yang Yingliang) - net: dsa: make dsa_master_ioctl() see through port_hwtstamp_get() shims (Vladimir Oltean) - net: mhi: Fix memory leak in mhi_net_dellink() (Wei Yongjun) - bnxt_en: Remove debugfs when pci_register_driver failed (Gaosheng Cui) - net: caif: fix double disconnect client in chnl_net_open() (Zhengchao Shao) - net: macvlan: Use built-in RCU list checking (Chuang Wang) - mISDN: fix misuse of put_device() in mISDN_register_device() (Wang ShaoBo) - net: liquidio: release resources when liquidio driver open failed (Zhengchao Shao) - soc: imx8m: Enable OCOTP clock before reading the register (Xiaolei Wang) - net: stmmac: ensure tx function is not running in stmmac_xdp_release() (Mohd Faizal Abdul Rahim) - net: hinic: Fix error handling in hinic_module_init() (Yuan Can) - mISDN: fix possible memory leak in mISDN_dsp_element_register() (Yang Yingliang) - net: bgmac: Drop free_netdev() from bgmac_enet_remove() (Wei Yongjun) - bpf: Initialize same number of free nodes for each pcpu_freelist (Xu Kuohai) - MIPS: Loongson64: Add WARN_ON on kexec related kmalloc failed (Liao Chang) - MIPS: fix duplicate definitions for exported symbols (Rongwei Zhang) - nfp: change eeprom length to max length enumerators (Jaco Coetzee) - ata: libata-transport: fix error handling in ata_tdev_add() (Yang Yingliang) - ata: libata-transport: fix error handling in ata_tlink_add() (Yang Yingliang) - ata: libata-transport: fix error handling in ata_tport_add() (Yang Yingliang) - ata: libata-transport: fix double ata_host_put() in ata_tport_add() (Yang Yingliang) - arm64: dts: imx8mn: Fix NAND controller size-cells (Marek Vasut) - arm64: dts: imx8mm: Fix NAND controller size-cells (Marek Vasut) - ARM: dts: imx7: Fix NAND controller size-cells (Marek Vasut) - drm: Fix potential null-ptr-deref in drm_vblank_destroy_worker() (Shang XiaoJing) - drm/drv: Fix potential memory leak in drm_dev_init() (Shang XiaoJing) - drm/panel: simple: set bpc field for logic technologies displays (Aishwarya Kothari) - drm/vc4: kms: Fix IS_ERR() vs NULL check for vc4_kms (Gaosheng Cui) - pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map (Zeng Heng) - parport_pc: Avoid FIFO port location truncation (Maciej W. Rozycki) - siox: fix possible memory leak in siox_device_add() (Yang Yingliang) - arm64: Fix bit-shifting UB in the MIDR_CPU_MODEL() macro (D Scott Phillips) - bpf: Fix memory leaks in __check_func_call (Wang Yufen) - block: sed-opal: kmalloc the cmd/resp buffers (Serge Semin) - scsi: scsi_transport_sas: Fix error handling in sas_phy_add() (Yang Yingliang) - pinctrl: rockchip: list all pins in a possible mux route for PX30 (Quentin Schulz) - ASoC: soc-utils: Remove __exit for snd_soc_util_exit() (Chen Zhongjin) - bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb() (Baisong Zhong) - tty: n_gsm: fix sleep-in-atomic-context bug in gsm_control_send (Duoming Zhou) - serial: imx: Add missing .thaw_noirq hook (Shawn Guo) - serial: 8250: omap: Flush PM QOS work on remove (Tony Lindgren) - serial: 8250: omap: Fix unpaired pm_runtime_put_sync() in omap8250_remove() (Tony Lindgren) - serial: 8250_omap: remove wait loop from Errata i202 workaround (Matthias Schiffer) - serial: 8250: omap: Fix missing PM runtime calls for omap8250_set_mctrl() (Tony Lindgren) - ARM: at91: pm: avoid soft resetting AC DLL (Claudiu Beznea) - ASoC: tas2764: Fix set_tdm_slot in case of single slot (Martin Poviser) - ASoC: tas2770: Fix set_tdm_slot in case of single slot (Martin Poviser) - ASoC: core: Fix use-after-free in snd_soc_exit() (Chen Zhongjin) - ARM: dts: at91: sama7g5: fix signal name of pin PB2 (Mihai Sain) - spi: stm32: Print summary 'callbacks suppressed' message (Marek Vasut) - arm64: dts: qcom: sm8350-hdk: Specify which LDO modes are allowed (Douglas Anderson) - arm64: dts: qcom: sm8250-xperia-edo: Specify which LDO modes are allowed (Douglas Anderson) - arm64: dts: qcom: sm8150-xperia-kumano: Specify which LDO modes are allowed (Douglas Anderson) - arm64: dts: qcom: sa8155p-adp: Specify which LDO modes are allowed (Douglas Anderson) - KVM: x86/pmu: Do not speculatively query Intel GP PMCs that don't exist yet (Like Xu) - spi: intel: Use correct mask for flash and protected regions (Mika Westerberg) - mtd: spi-nor: intel-spi: Disable write protection only if asked (Mika Westerberg) - ASoC: codecs: jz4725b: Fix spelling mistake 'Sourc' -> 'Source', 'Routee' -> 'Route' (Colin Ian King) - x86/cpu: Add several Intel server CPU model numbers (Tony Luck) - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (Luiz Augusto von Dentz) - btrfs: remove pointless and double ulist frees in error paths of qgroup tests (Filipe Manana) - drm/imx: imx-tve: Fix return type of imx_tve_connector_mode_valid (Nathan Huckleberry) - i2c: i801: add lis3lv02d's I2C address for Vostro 5568 (Nam Cao) - i2c: tegra: Allocate DMA memory for DMA engine (Thierry Reding) - firmware: arm_scmi: Cleanup the core driver removal callback (Cristian Marussi) - ACPI: x86: Add another system to quirk list for forcing StorageD3Enable (Mario Limonciello) - NFSv4: Retry LOCK on OLD_STATEID during delegation return (Benjamin Coddington) - btrfs: raid56: properly handle the error when unable to find the missing stripe (Qu Wenruo) - RDMA/efa: Add EFA 0xefa2 PCI ID (Michael Margolin) - ACPI: scan: Add LATT2021 to acpi_ignore_dep_ids[] (Hans de Goede) - drm/amd/display: Remove wrong pipe control lock (Rodrigo Siqueira) - ASoC: rt1308-sdw: add the default value of some registers (Shuming Fan) - selftests/intel_pstate: fix build for ARCH=x86_64 (Ricardo Canuelo) - selftests/futex: fix build for clang (Ricardo Canuelo) - ASoC: Intel: sof_sdw: add quirk variant for LAPBC710 NUC15 (Pierre-Louis Bossart) - ASoC: codecs: jz4725b: fix capture selector naming (Siarhei Volkau) - ASoC: codecs: jz4725b: use right control for Capture Volume (Siarhei Volkau) - ASoC: codecs: jz4725b: fix reported volume for Master ctl (Siarhei Volkau) - ASoC: codecs: jz4725b: add missed Line In power control bit (Siarhei Volkau) - spi: intel: Fix the offset to get the 64K erase opcode (Mauro Lima) - ASoC: wm8962: Add an event handler for TEMP_HP and TEMP_SPK (Xiaolei Wang) - ASoC: rt1019: Fix the TDM settings (Derek Fang) - ASoC: mt6660: Keep the pm_runtime enables before component stuff in mt6660_i2c_probe (Zhang Qilong) - ASoC: wm8997: Revert 'ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe' (Zhang Qilong) - ASoC: wm5110: Revert 'ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe' (Zhang Qilong) - ASoC: wm5102: Revert 'ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe' (Zhang Qilong) - LTS version: v5.15.79 (Jack Vogel) - x86/cpu: Restore AMD's DE_CFG MSR after resume (Borislav Petkov) - net: tun: call napi_schedule_prep() to ensure we own a napi (Eric Dumazet) - drm/amdkfd: Migrate in CPU page fault use current mm (Philip Yang) - marvell: octeontx2: build error: unknown type name 'u64' (Anders Roxell) - dmaengine: at_hdmac: Check return code of dma_async_device_register (Tudor Ambarus) - dmaengine: at_hdmac: Fix impossible condition (Tudor Ambarus) - dmaengine: at_hdmac: Don't allow CPU to reorder channel enable (Tudor Ambarus) - dmaengine: at_hdmac: Fix completion of unissued descriptor in case of errors (Tudor Ambarus) - dmaengine: at_hdmac: Fix descriptor handling when issuing it to hardware (Tudor Ambarus) - dmaengine: at_hdmac: Fix concurrency over the active list (Tudor Ambarus) - dmaengine: at_hdmac: Free the memset buf without holding the chan lock (Tudor Ambarus) - dmaengine: at_hdmac: Fix concurrency over descriptor (Tudor Ambarus) - dmaengine: at_hdmac: Fix concurrency problems by removing atc_complete_all() (Tudor Ambarus) - dmaengine: at_hdmac: Protect atchan->status with the channel lock (Tudor Ambarus) - dmaengine: at_hdmac: Do not call the complete callback on device_terminate_all (Tudor Ambarus) - dmaengine: at_hdmac: Fix premature completion of desc in issue_pending (Tudor Ambarus) - dmaengine: at_hdmac: Start transfer for cyclic channels in issue_pending (Tudor Ambarus) - dmaengine: at_hdmac: Don't start transactions at tx_submit level (Tudor Ambarus) - dmaengine: at_hdmac: Fix at_lli struct definition (Tudor Ambarus) - cert host tools: Stop complaining about deprecated OpenSSL functions (Linus Torvalds) - can: j1939: j1939_send_one(): fix missing CAN header initialization (Oliver Hartkopp) - mm/shmem: use page_mapping() to detect page cache for uffd continue (Peter Xu) - mm/memremap.c: map FS_DAX device memory as decrypted (Pankaj Gupta) - mm/damon/dbgfs: check if rm_contexts input is for a real context (SeongJae Park) - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (ZhangPeng) - mms: sdhci-esdhc-imx: Fix SDHCI_RESET_ALL for CQHCI (Brian Norris) - btrfs: zoned: initialize device's zone info for seeding (Johannes Thumshirn) - btrfs: selftests: fix wrong error check in btrfs_free_dummy_root() (Zhang Xiaoxu) - btrfs: fix match incorrectly in dev_args_match_device (Liu Shixin) - wifi: ath11k: avoid deadlock during regulatory update in ath11k_regd_update() (Wen Gong) - platform/x86: hp_wmi: Fix rfkill causing soft blocked wifi (Jorge Lopez) - drm/amdgpu: disable BACO on special BEIGE_GOBY card (Guchun Chen) - drm/i915/dmabuf: fix sg_table handling in map_dma_buf (Matthew Auld) - nilfs2: fix use-after-free bug of ns_writer on remount (Ryusuke Konishi) - nilfs2: fix deadlock in nilfs_count_free_blocks() (Ryusuke Konishi) - ata: libata-scsi: fix SYNCHRONIZE CACHE (16) command failure (Shin'ichiro Kawasaki) - vmlinux.lds.h: Fix placement of '.data..decrypted' section (Nathan Chancellor) - ALSA: usb-audio: Add DSD support for Accuphase DAC-60 (Jussi Laako) - ALSA: usb-audio: Add quirk entry for M-Audio Micro (Takashi Iwai) - ALSA: usb-audio: Yet more regression for for the delayed card registration (Takashi Iwai) - ALSA: hda/realtek: Add Positivo C6300 model quirk (Edson Juliano Drosdeck) - ALSA: hda: fix potential memleak in 'add_widget_node' (Ye Bin) - ALSA: hda/ca0132: add quirk for EVGA Z390 DARK (Xian Wang) - ALSA: hda/hdmi - enable runtime pm for more AMD display audio (Evan Quan) - mmc: sdhci-esdhc-imx: use the correct host caps for MMC_CAP_8_BIT_DATA (Haibo Chen) - mmc: sdhci-tegra: Fix SDHCI_RESET_ALL for CQHCI (Brian Norris) - mmc: sdhci_am654: Fix SDHCI_RESET_ALL for CQHCI (Brian Norris) - mmc: sdhci-of-arasan: Fix SDHCI_RESET_ALL for CQHCI (Brian Norris) - mmc: cqhci: Provide helper for resetting both SDHCI and CQHCI (Brian Norris) - MIPS: jump_label: Fix compat branch range check (Jiaxun Yang) - arm64: efi: Fix handling of misaligned runtime regions and drop warning (Ard Biesheuvel) - riscv: fix reserved memory setup (Conor Dooley) - riscv: vdso: fix build with llvm (Jisheng Zhang) - riscv: process: fix kernel info leakage (Jisheng Zhang) - net: macvlan: fix memory leaks of macvlan_common_newlink (Chuang Wang) - ethernet: tundra: free irq when alloc ring failed in tsi108_open() (Zhengchao Shao) - net: mv643xx_eth: disable napi when init rxq or txq failed in mv643xx_eth_open() (Zhengchao Shao) - ethernet: s2io: disable napi when start nic failed in s2io_card_up() (Zhengchao Shao) - net: atlantic: macsec: clear encryption keys from the stack (Antoine Tenart) - net: phy: mscc: macsec: clear encryption keys when freeing a flow (Antoine Tenart) - stmmac: dwmac-loongson: fix missing of_node_put() while module exiting (Yang Yingliang) - stmmac: dwmac-loongson: fix missing pci_disable_device() in loongson_dwmac_probe() (Yang Yingliang) - stmmac: dwmac-loongson: fix missing pci_disable_msi() while module exiting (Yang Yingliang) - cxgb4vf: shut down the adapter when t4vf_update_port_info() failed in cxgb4vf_open() (Zhengchao Shao) - mctp: Fix an error handling path in mctp_init() (Wei Yongjun) - stmmac: intel: Update PCH PTP clock rate from 200MHz to 204.8MHz (Tan, Tee Min) - stmmac: intel: Enable 2.5Gbps for Intel AlderLake-S (Wong Vee Khee) - net: cxgb3_main: disable napi when bind qsets failed in cxgb_up() (Zhengchao Shao) - net: cpsw: disable napi in cpsw_ndo_open() (Zhengchao Shao) - net/mlx5e: E-Switch, Fix comparing termination table instance (Roi Dayan) - net/mlx5: Allow async trigger completion execution on single CPU systems (Roy Novich) - net/mlx5: Bridge, verify LAG state when adding bond to bridge (Vlad Buslov) - net: wwan: iosm: fix memory leak in ipc_pcie_read_bios_cfg (M Chetan Kumar) - net: nixge: disable napi when enable interrupts failed in nixge_open() (Zhengchao Shao) - net: marvell: prestera: fix memory leak in prestera_rxtx_switch_init() (Zhengchao Shao) - netfilter: Cleanup nft_net->module_list from nf_tables_exit_net() (Shigeru Yoshida) - netfilter: nfnetlink: fix potential dead lock in nfnetlink_rcv_msg() (Ziyang Xuan) - perf tools: Add the include/perf/ directory to .gitignore (Donglin Peng) - perf stat: Fix printing os->prefix in CSV metrics output (Athira Rajeev) - drivers: net: xgene: disable napi when register irq failed in xgene_enet_open() (Zhengchao Shao) - net: lapbether: fix issue of invalid opcode in lapbeth_open() (Zhengchao Shao) - dmaengine: ti: k3-udma-glue: fix memory leak when register device fail (Yang Yingliang) - dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove() (Christophe JAILLET) - dmaengine: pxa_dma: use platform_get_irq_optional (Doug Brown) - tipc: fix the msg->req tlv len check in tipc_nl_compat_name_table_dump_header (Xin Long) - net: broadcom: Fix BCMGENET Kconfig (YueHaibing) - net: stmmac: dwmac-meson8b: fix meson8b_devm_clk_prepare_enable() (Rasmus Villemoes) - can: af_can: fix NULL pointer dereference in can_rx_register() (Zhengchao Shao) - ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network (Alexander Potapenko) - tcp: prohibit TCP_REPAIR_OPTIONS if data was already sent (Lu Wei) - drm/vc4: Fix missing platform_unregister_drivers() call in vc4_drm_register() (Yuan Can) - net: wwan: mhi: fix memory leak in mhi_mbim_dellink (HW He) - net: wwan: iosm: fix memory leak in ipc_wwan_dellink (HW He) - hamradio: fix issue of dev reference count leakage in bpq_device_event() (Zhengchao Shao) - net: lapbether: fix issue of dev reference count leakage in lapbeth_device_event() (Zhengchao Shao) - KVM: s390: pv: don't allow userspace to set the clock under PV (Nico Boehr) - phy: ralink: mt7621-pci: add sentinel to quirks table (John Thomson) - capabilities: fix undefined behavior in bit shift for CAP_TO_MASK (Gaosheng Cui) - net: fman: Unregister ethernet device on removal (Sean Anderson) - bnxt_en: fix potentially incorrect return value for ndo_rx_flow_steer (Alex Barba) - bnxt_en: Fix possible crash in bnxt_hwrm_set_coal() (Michael Chan) - net: tun: Fix memory leaks of napi_get_frags (Wang Yufen) - octeontx2-pf: NIX TX overwrites SQ_CTX_HW_S[SQ_INT] (Ratheesh Kannoth) - octeontx2-pf: Use hardware register for CQE count (Geetha sowjanya) - macsec: clear encryption keys from the stack after setting up offload (Sabrina Dubroca) - macsec: fix detection of RXSCs when toggling offloading (Sabrina Dubroca) - macsec: fix secy->n_rx_sc accounting (Sabrina Dubroca) - macsec: delete new rxsc when offload fails (Sabrina Dubroca) - net: gso: fix panic on frag_list with mixed head alloc types (Jiri Benc) - bpf: Fix wrong reg type conversion in release_reference() (Youlin Li) - bpf: Add helper macro bpf_for_each_reg_in_vstate (Kumar Kartikeya Dwivedi) - bpf, sock_map: Move cancel_work_sync() out of sock lock (Cong Wang) - bpf: Fix sockmap calling sleepable function in teardown path (John Fastabend) - bpf, sockmap: Fix sk->sk_forward_alloc warn_on in sk_stream_kill_queues (Wang Yufen) - HID: hyperv: fix possible memory leak in mousevsc_probe() (Yang Yingliang) - bpftool: Fix NULL pointer dereference when pin {PROG, MAP, LINK} without FILE (Pu Lehui) - wifi: mac80211: Set TWT Information Frame Disabled bit as 1 (Howard Hsu) - bpf, sockmap: Fix the sk->sk_forward_alloc warning of sk_stream_kill_queues (Wang Yufen) - bpf, verifier: Fix memory leak in array reallocation for stack state (Kees Cook) - soundwire: qcom: check for outanding writes before doing a read (Srinivas Kandagatla) - soundwire: qcom: reinit broadcast completion (Srinivas Kandagatla) - wifi: cfg80211: fix memory leak in query_regdb_file() (Arend van Spriel) - wifi: cfg80211: silence a sparse RCU warning (Johannes Berg) - phy: stm32: fix an error code in probe (Dan Carpenter) - hwspinlock: qcom: correct MMIO max register for newer SoCs (Krzysztof Kozlowski) - drm/amdkfd: Fix NULL pointer dereference in svm_migrate_to_ram() (Yang Li) - drm/amdkfd: handle CPU fault on COW mapping (Philip Yang) - drm/amdkfd: avoid recursive lock in migrations back to RAM (Alex Sierra) - fuse: fix readdir cache race (Miklos Szeredi) - thunderbolt: Add DP OUT resource when DP tunnel is discovered (Sanjay R Mehta) - thunderbolt: Tear down existing tunnels when resuming from hibernate (Mika Westerberg) - LTS version: v5.15.78 (Jack Vogel) - wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker() (Dokyung Song) - drm/i915/sdvo: Setup DDC fully before output init (Ville Syrjala) - drm/i915/sdvo: Filter out invalid outputs more sensibly (Ville Syrjala) - drm/rockchip: dsi: Force synchronous probe (Brian Norris) - drm/rockchip: dsi: Clean up 'usage_mode' when failing to attach (Brian Norris) - cifs: fix regression in very old smb1 mounts (Ronnie Sahlberg) - ext4,f2fs: fix readahead of verity data (Matthew Wilcox (Oracle)) - tee: Fix tee_shm_register() for kernel TEE drivers (Sumit Garg) - KVM: x86: emulator: update the emulation mode after CR0 write (Maxim Levitsky) - KVM: x86: emulator: update the emulation mode after rsm (Maxim Levitsky) - KVM: x86: emulator: introduce emulator_recalc_and_set_mode (Maxim Levitsky) - KVM: x86: emulator: em_sysexit should update ctxt->mode (Maxim Levitsky) - KVM: arm64: Fix bad dereference on MTE-enabled systems (Ryan Roberts) - KVM: VMX: fully disable SGX if SECONDARY_EXEC_ENCLS_EXITING unavailable (Emanuele Giuseppe Esposito) - KVM: x86: Mask off reserved bits in CPUID.8000001FH (Jim Mattson) - KVM: x86: Mask off reserved bits in CPUID.80000001H (Jim Mattson) - KVM: x86: Mask off reserved bits in CPUID.80000008H (Jim Mattson) - KVM: x86: Mask off reserved bits in CPUID.8000001AH (Jim Mattson) - KVM: x86: Mask off reserved bits in CPUID.80000006H (Jim Mattson) - x86/syscall: Include asm/ptrace.h in syscall_wrapper header (Jiri Olsa) - ext4: fix BUG_ON() when directory entry has invalid rec_len (Luis Henriques) - ext4: fix warning in 'ext4_da_release_space' (Ye Bin) - parisc: Avoid printing the hardware path twice (Helge Deller) - parisc: Export iosapic_serial_irq() symbol for serial port driver (Helge Deller) - parisc: Make 8250_gsc driver dependend on CONFIG_PARISC (Helge Deller) - perf/x86/intel: Fix pebs event constraints for SPR (Kan Liang) - perf/x86/intel: Add Cooper Lake stepping to isolation_ucodes[] (Kan Liang) - perf/x86/intel: Fix pebs event constraints for ICL (Kan Liang) - arm64: entry: avoid kprobe recursion (Mark Rutland) - efi: random: Use 'ACPI reclaim' memory for random seed (Ard Biesheuvel) - efi: random: reduce seed size to 32 bytes (Ard Biesheuvel) - fuse: add file_modified() to fallocate (Miklos Szeredi) - capabilities: fix potential memleak on error path from vfs_getxattr_alloc() (Gaosheng Cui) - tracing/histogram: Update document for KEYS_MAX size (Zheng Yejian) - tools/nolibc/string: Fix memcmp() implementation (Rasmus Villemoes) - ring-buffer: Check for NULL cpu_buffer in ring_buffer_wake_waiters() (Steven Rostedt (Google)) - kprobe: reverse kp->flags when arm_kprobe failed (Li Qiang) - tracing: kprobe: Fix memory leak in test_gen_kprobe/kretprobe_cmd() (Shang XiaoJing) - tcp/udp: Make early_demux back namespacified. (Kuniyuki Iwashima) - ftrace: Fix use-after-free for dynamic ftrace_ops (Li Huafei) - btrfs: fix type of parameter generation in btrfs_get_dentry (David Sterba) - btrfs: fix tree mod log mishandling of reallocated nodes (Josef Bacik) - btrfs: fix lost file sync on direct IO write with nowait and dsync iocb (Filipe Manana) - fscrypt: fix keyring memory leak on mount failure (Eric Biggers) - fscrypt: stop using keyrings subsystem for fscrypt_master_key (Eric Biggers) - af_unix: Fix memory leaks of the whole sk due to OOB skb. (Kuniyuki Iwashima) - block, bfq: protect 'bfqd->queued' by 'bfqd->lock' (Yu Kuai) - Bluetooth: L2CAP: Fix attempting to access uninitialized memory (Luiz Augusto von Dentz) {CVE-2022-42895} - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (Luiz Augusto von Dentz) {CVE-2022-42896} - i2c: piix4: Fix adapter not be removed in piix4_remove() (Chen Zhongjin) - arm64: dts: juno: Add thermal critical trip points (Cristian Marussi) - firmware: arm_scmi: Fix devres allocation device in virtio transport (Cristian Marussi) - firmware: arm_scmi: Make Rx chan_setup fail on memory errors (Cristian Marussi) - firmware: arm_scmi: Suppress the driver's bind attributes (Cristian Marussi) - block: Fix possible memory leak for rq_wb on add_disk failure (Chen Zhongjin) - arm64: dts: ls208xa: specify clock frequencies for the MDIO controllers (Ioana Ciornei) - arm64: dts: ls1088a: specify clock frequencies for the MDIO controllers (Ioana Ciornei) - arm64: dts: lx2160a: specify clock frequencies for the MDIO controllers (Ioana Ciornei) - arm64: dts: imx8: correct clock order (Peng Fan) - ARM: dts: imx6qdl-gw59{10,13}: fix user pushbutton GPIO offset (Tim Harvey) - clk: qcom: Update the force mem core bit for GPU clocks (Taniya Das) - efi/tpm: Pass correct address to memblock_reserve (Jerry Snitselaar) - i2c: xiic: Add platform module alias (Martin Tuma) - drm/amdgpu: set vm_update_mode=0 as default for Sienna Cichlid in SRIOV case (Danijel Slivka) - HID: saitek: add madcatz variant of MMO7 mouse device ID (Samuel Bailey) - scsi: core: Restrict legal sdev_state transitions via sysfs (Uday Shankar) - ACPI: APEI: Fix integer overflow in ghes_estatus_pool_init() (Ashish Kalra) - media: v4l: subdev: Fail graciously when getting try data for NULL state (Sakari Ailus) - media: meson: vdec: fix possible refcount leak in vdec_probe() (Hangyu Hua) - media: dvb-frontends/drxk: initialize err to 0 (Hans Verkuil) - media: cros-ec-cec: limit msg.len to CEC_MAX_MSG_SIZE (Hans Verkuil) - media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE (Hans Verkuil) - media: rkisp1: Zero v4l2_subdev_format fields in when validating links (Laurent Pinchart) - media: rkisp1: Use correct macro for gradient registers (Laurent Pinchart) - media: rkisp1: Initialize color space on resizer sink and source pads (Laurent Pinchart) - media: rkisp1: Don't pass the quantization to rkisp1_csm_config() (Laurent Pinchart) - s390/cio: fix out-of-bounds access on cio_ignore free (Peter Oberparleiter) - s390/cio: derive cdev information only for IO-subchannels (Vineeth Vijayan) - s390/boot: add secure boot trailer (Peter Oberparleiter) - s390/uaccess: add missing EX_TABLE entries to __clear_user() (Heiko Carstens) - mtd: parsers: bcm47xxpart: Fix halfblock reads (Linus Walleij) - mtd: parsers: bcm47xxpart: print correct offset on read error (Rafal Milecki) - fbdev: stifb: Fall back to cfb_fillrect() on 32-bit HCRX cards (Helge Deller) - video/fbdev/stifb: Implement the stifb_fillrect() function (Helge Deller) - drm/msm/hdmi: fix IRQ lifetime (Johan Hovold) - drm/msm/hdmi: Remove spurious IRQF_ONESHOT flag (Daniel Thompson) - vsock: fix possible infinite sleep in vsock_connectible_wait_data() (Dexuan Cui) - ipv6: fix WARNING in ip6_route_net_exit_late() (Zhengchao Shao) - net, neigh: Fix null-ptr-deref in neigh_table_clear() (Chen Zhongjin) - net/smc: Fix possible leaked pernet namespace in smc_init() (Chen Zhongjin) - stmmac: dwmac-loongson: fix invalid mdio_node (Liu Peibao) - ibmvnic: Free rwi on reset success (Nick Child) - net: mdio: fix undefined behavior in bit shift for __mdiobus_register (Gaosheng Cui) - Bluetooth: L2CAP: Fix memory leak in vhci_write (Hawkins Jiawei) - Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del() (Zhengchao Shao) - Bluetooth: virtio_bt: Use skb_put to set length (Soenke Huster) - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Maxim Mikityanskiy) - netfilter: ipset: enforce documented limit to prevent allocating huge memory (Jozsef Kadlecsik) - btrfs: fix ulist leaks in error paths of qgroup self tests (Filipe Manana) - btrfs: fix inode list leak during backref walking at find_parent_nodes() (Filipe Manana) - btrfs: fix inode list leak during backref walking at resolve_indirect_refs() (Filipe Manana) - isdn: mISDN: netjet: fix wrong check of device registration (Yang Yingliang) - mISDN: fix possible memory leak in mISDN_register_device() (Yang Yingliang) - rose: Fix NULL pointer dereference in rose_send_frame() (Zhang Qilong) - ipvs: fix WARNING in ip_vs_app_net_cleanup() (Zhengchao Shao) - ipvs: fix WARNING in __ip_vs_cleanup_batch() (Zhengchao Shao) - ipvs: use explicitly signed chars (Jason A. Donenfeld) - netfilter: nf_tables: release flow rule object from commit path (Pablo Neira Ayuso) - netfilter: nf_tables: netlink notifier might race to release objects (Pablo Neira Ayuso) - net: tun: fix bugs for oversize packet when napi frags enabled (Ziyang Xuan) - net: sched: Fix use after free in red_enqueue() (Dan Carpenter) - ata: pata_legacy: fix pdc20230_set_piomode() (Sergey Shtylyov) - net: fec: fix improper use of NETDEV_TX_BUSY (Zhang Changzhong) - nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send() (Shang XiaoJing) - nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send() (Shang XiaoJing) - nfc: nxp-nci: Fix potential memory leak in nxp_nci_send() (Shang XiaoJing) - nfc: fdp: Fix potential memory leak in fdp_nci_send() (Shang XiaoJing) - net: dsa: fall back to default tagger if we can't load the one from DT (Vladimir Oltean) - RDMA/qedr: clean up work queue on failure in qedr_alloc_resources() (Dan Carpenter) - RDMA/core: Fix null-ptr-deref in ib_core_cleanup() (Chen Zhongjin) - net: dsa: Fix possible memory leaks in dsa_loop_init() (Chen Zhongjin) - nfs4: Fix kmemleak when allocate slot failed (Zhang Xiaoxu) - NFSv4.2: Fixup CLONE dest file size for zero-length count (Benjamin Coddington) - SUNRPC: Fix null-ptr-deref when xps sysfs alloc failed (Zhang Xiaoxu) - NFSv4.1: We must always send RECLAIM_COMPLETE after a reboot (Trond Myklebust) - NFSv4.1: Handle RECLAIM_COMPLETE trunking errors (Trond Myklebust) - NFSv4: Fix a potential state reclaim deadlock (Trond Myklebust) - RDMA/hns: Disable local invalidate operation (Yangyang Li) - RDMA/hns: Use hr_reg_xxx() instead of remaining roce_set_xxx() (Wenpeng Liang) - RDMA/hns: Remove magic number (Xinhao Liu) - IB/hfi1: Correctly move list in sc_disable() (Dean Luick) - KVM: x86: Add compat handler for KVM_X86_SET_MSR_FILTER (Alexander Graf) - KVM: x86: Copy filter arg outside kvm_vm_ioctl_set_msr_filter() (Alexander Graf) - KVM: x86: Protect the unused bits in MSR exiting flags (Aaron Lewis) - HID: playstation: add initial DualSense Edge controller support (Roderick Colenbrander) - mm/hugetlb: fix races when looking up a CONT-PTE/PMD size hugetlb page (Baolin Wang) - drm/amd/display: explicitly disable psr_feature_enable appropriately (Shirish S) - KVM: x86: Treat #DBs from the emulator as fault-like (code and DR7.GD=1) (Sean Christopherson) - serial: ar933x: Deassert Transmit Enable on ->rs485_config() (Lukas Wunner) - scsi: lpfc: Rework MIB Rx Monitor debug info logic (James Smart) - scsi: lpfc: Adjust CMF total bytes and rxmonitor (James Smart) - scsi: lpfc: Adjust bytes received vales during cmf timer interval (James Smart) - LTS version: v5.15.77 (Jack Vogel) - tcp/udp: Fix memory leak in ipv6_renew_options(). (Kuniyuki Iwashima) - serial: Deassert Transmit Enable on probe in driver-specific way (Lukas Wunner) - serial: core: move RS485 configuration tasks from drivers into core (Lino Sanfilippo) - can: rcar_canfd: rcar_canfd_handle_global_receive(): fix IRQ storm on global FIFO receive (Biju Das) - can: rcar_canfd: fix channel specific IRQ handling for RZ/G2L (Biju Das) - scsi: sd: Revert 'scsi: sd: Remove a local variable' (Yu Kuai) - arm64: Add AMPERE1 to the Spectre-BHB affected list (D Scott Phillips) - net: enetc: survive memory pressure without crashing (Vladimir Oltean) - kcm: do not sense pfmemalloc status in kcm_sendpage() (Eric Dumazet) - net: do not sense pfmemalloc status in skb_append_pagefrags() (Eric Dumazet) - net/mlx5: Fix crash during sync firmware reset (Suresh Devarakonda) - net/mlx5: Update fw fatal reporter state on PCI handlers successful recover (Roy Novich) - net/mlx5: Print more info on pci error handlers (Saeed Mahameed) - net/mlx5: Fix possible use-after-free in async command interface (Tariq Toukan) - net/mlx5e: Extend SKB room check to include PTP-SQ (Aya Levin) - net/mlx5e: Do not increment ESN when updating IPsec ESN state (Hyong Youb Kim) - netdevsim: remove dir in nsim_dev_debugfs_init() when creating ports dir failed (Zhengchao Shao) - net: broadcom: bcm4908_enet: update TX stats after actual transmission (Rafal Milecki) - net: broadcom: bcm4908enet: remove redundant variable bytes (Colin Ian King) - nh: fix scope used to find saddr when adding non gw nh (Nicolas Dichtel) - net: bcmsysport: Indicate MAC is in charge of PHY PM (Florian Fainelli) - net: ehea: fix possible memory leak in ehea_register_port() (Yang Yingliang) - openvswitch: switch from WARN to pr_warn (Aaron Conole) - ALSA: aoa: Fix I2S device accounting (Takashi Iwai) - ALSA: aoa: i2sbus: fix possible memory leak in i2sbus_add_dev() (Yang Yingliang) - net: ethernet: ave: Fix MAC to be in charge of PHY PM (Kunihiko Hayashi) - net: fec: limit register access on i.MX6UL (Juergen Borleis) - perf vendor events arm64: Fix incorrect Hisi hip08 L3 metrics (Shang XiaoJing) - PM: domains: Fix handling of unavailable/disabled idle states (Sudeep Holla) - net: ksz884x: fix missing pci_disable_device() on error in pcidev_init() (Yang Yingliang) - i40e: Fix flow-type by setting GL_HASH_INSET registers (Slawomir Laba) - i40e: Fix VF hang when reset is triggered on another VF (Sylwester Dziedziuch) - i40e: Fix ethtool rx-flow-hash setting for X722 (Slawomir Laba) - ipv6: ensure sane device mtu in tunnels (Eric Dumazet) - perf vendor events power10: Fix hv-24x7 metric events (Kajol Jain) - media: vivid: set num_in/outputs to 0 if not supported (Hans Verkuil) - media: videodev2.h: V4L2_DV_BT_BLANKING_HEIGHT should check 'interlaced' (Hans Verkuil) - media: v4l2-dv-timings: add sanity checks for blanking values (Hans Verkuil) - media: vivid: dev->bitmap_cap wasn't freed in all cases (Hans Verkuil) - media: vivid: s_fbuf: add more sanity checks (Hans Verkuil) - PM: hibernate: Allow hybrid sleep to work with s2idle (Mario Limonciello) - can: mcp251x: mcp251x_can_probe(): add missing unregister_candev() in error path (Dongliang Mu) - can: mscan: mpc5xxx: mpc5xxx_can_probe(): add missing put_clock() in error path (Dongliang Mu) - drm/amdkfd: Fix memory leak in kfd_mem_dmamap_userptr() (Rafael Mendonca) - net-memcg: avoid stalls when under memory pressure (Jakub Kicinski) - tcp: fix indefinite deferral of RTO with SACK reneging (Neal Cardwell) - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Lu Wei) - tcp: minor optimization in tcp_add_backlog() (Eric Dumazet) - net: lantiq_etop: don't free skb when returning NETDEV_TX_BUSY (Zhang Changzhong) - net: fix UAF issue in nfqnl_nf_hook_drop() when ops_init() failed (Zhengchao Shao) - kcm: annotate data-races around kcm->rx_wait (Eric Dumazet) - kcm: annotate data-races around kcm->rx_psock (Eric Dumazet) - atlantic: fix deadlock at aq_nic_stop (Inigo Huguet) - drm/i915/dp: Reset frl trained flag before restarting FRL training (Ankit Nautiyal) - amd-xgbe: add the bit rate quirk for Molex cables (Raju Rangoju) - amd-xgbe: fix the SFP compliance codes check for DAC cables (Raju Rangoju) - x86/unwind/orc: Fix unreliable stack dump with gcov (Chen Zhongjin) - nfc: virtual_ncidev: Fix memory leak in virtual_nci_send() (Shang XiaoJing) - net: macb: Specify PHY PM management done by MAC (Sergiu Moga) - net: hinic: fix the issue of double release MBOX callback of VF (Zhengchao Shao) - net: hinic: fix the issue of CMDQ memory leaks (Zhengchao Shao) - net: hinic: fix memory leak when reading function table (Zhengchao Shao) - net: hinic: fix incorrect assignment issue in hinic_set_interrupt_cfg() (Zhengchao Shao) - net: netsec: fix error handling in netsec_register_mdio() (Yang Yingliang) - tipc: fix a null-ptr-deref in tipc_topsrv_accept (Xin Long) - perf/x86/intel/lbr: Use setup_clear_cpu_cap() instead of clear_cpu_cap() (Maxim Levitsky) - ALSA: ac97: fix possible memory leak in snd_ac97_dev_register() (Yang Yingliang) - ASoC: qcom: lpass-cpu: Mark HDMI TX parity register as volatile (Srinivasa Rao Mandadapu) - mtd: rawnand: intel: Add missing of_node_put() in ebu_nand_probe() (Yang Yingliang) - arc: iounmap() arg is volatile (Randy Dunlap) - sched/core: Fix comparison in sched_group_cookie_match() (Lin Shengwang) - perf: Fix missing SIGTRAPs (Peter Zijlstra) - ASoC: qcom: lpass-cpu: mark HDMI TX registers as volatile (Srinivasa Rao Mandadapu) - KVM: selftests: Fix number of pages for memory slot in memslot_modification_stress_test (Gavin Shan) - drm/msm: Fix return type of mdp4_lvds_connector_mode_valid (Nathan Huckleberry) - media: atomisp: prevent integer overflow in sh_css_set_black_frame() (Dan Carpenter) - media: v4l2: Fix v4l2_i2c_subdev_set_name function documentation (Alexander Stein) - net: ieee802154: fix error return code in dgram_bind() (Wei Yongjun) - ethtool: eeprom: fix null-deref on genl_info in dump (Xin Long) - mmc: block: Remove error check of hw_reset on reset (Christian Lohle) - s390/pci: add missing EX_TABLE entries to __pcistg_mio_inuser()/__pcilg_mio_inuser() (Heiko Carstens) - s390/futex: add missing EX_TABLE entry to __futex_atomic_op() (Heiko Carstens) - perf auxtrace: Fix address filter symbol name match for modules (Adrian Hunter) - ARC: mm: fix leakage of memory allocated for PTE (Pavel Kozlov) - pinctrl: Ingenic: JZ4755 bug fixes (Siarhei Volkau) - kernfs: fix use-after-free in __kernfs_remove (Christian A. Ehrhardt) - counter: microchip-tcb-capture: Handle Signal1 read and Synapse (William Breathitt Gray) - mmc: sdhci-esdhc-imx: Propagate ESDHC_FLAG_HS400* only on 8bit bus (Sascha Hauer) - mmc: sdhci-pci-core: Disable ES for ASUS BIOS on Jasper Lake (Patrick Thompson) - mmc: core: Fix kernel panic when remove non-standard SDIO card (Matthew Ma) - mmc: sdhci_am654: 'select', not 'depends' REGMAP_MMIO (Brian Norris) - coresight: cti: Fix hang in cti_disable_hw() (James Clark) - drm/msm/dp: fix IRQ lifetime (Johan Hovold) - drm/msm/hdmi: fix memory corruption with too many bridges (Johan Hovold) - drm/msm/dsi: fix memory corruption with too many bridges (Johan Hovold) - drm/amdgpu: disallow gfxoff until GC IP blocks complete s2idle resume (Prike Liang) - scsi: qla2xxx: Use transport-defined speed mask for supported_speeds (Manish Rangankar) - mac802154: Fix LQI recording (Miquel Raynal) - exec: Copy oldsighand->action under spin-lock (Bernd Edlinger) - fs/binfmt_elf: Fix memory leak in load_elf_binary() (Li Zetao) - cpufreq: intel_pstate: hybrid: Use known scaling factor for P-cores (Rafael J. Wysocki) - cpufreq: intel_pstate: Read all MSRs on the target CPU (Rafael J. Wysocki) - fbdev: smscufx: Fix several use-after-free bugs (Hyunwoo Kim) - iio: adxl372: Fix unsafe buffer attributes (Matti Vaittinen) - iio: temperature: ltc2983: allocate iio channels once (Cosmin Tanislav) - iio: light: tsl2583: Fix module unloading (Shreeya Patel) - tools: iio: iio_utils: fix digit calculation (Matti Vaittinen) - xhci: Remove device endpoints from bandwidth list when freeing the device (Mathias Nyman) - xhci-pci: Set runtime PM as default policy on all xHC 1.2 or later devices (Mario Limonciello) - xhci: Add quirk to reset host back to default state at shutdown (Mathias Nyman) - mtd: rawnand: marvell: Use correct logic for nand-keep-config (Tony O'Brien) - usb: xhci: add XHCI_SPURIOUS_SUCCESS to ASM1042 despite being a V0.96 controller (Jens Glathe) - usb: bdc: change state when port disconnected (Justin Chen) - usb: dwc3: gadget: Don't set IMI for no_interrupt (Thinh Nguyen) - usb: dwc3: gadget: Stop processing more requests on IMI (Thinh Nguyen) - usb: gadget: uvc: fix sg handling during video encode (Jeff Vanhoof) - usb: gadget: uvc: fix sg handling in error case (Dan Vacura) - USB: add RESET_RESUME quirk for NVIDIA Jetson devices in RCM (Hannu Hartikainen) - ALSA: rme9652: use explicitly signed char (Jason A. Donenfeld) - ALSA: au88x0: use explicitly signed char (Jason A. Donenfeld) - ALSA: usb-audio: Add quirks for M-Audio Fast Track C400/600 (Takashi Iwai) - ALSA: Use del_timer_sync() before freeing timer (Steven Rostedt (Google)) - can: kvaser_usb: Fix possible completions during init_completion (Anssi Hannula) - can: j1939: transport: j1939_session_skb_drop_old(): spin_unlock_irqrestore() before kfree_skb() (Yang Yingliang) - NFSv4: Add an fattr allocation to _nfs4_discover_trunking() (Scott Mayhew) - NFSv4: Fix free of uninitialized nfs4_label on referral lookup. (Benjamin Coddington) - rds: ib: Enable FC by default (Hakon Bugge) [Orabug: 33930793] - Adding a new sysfs entry point -- forcepower -- to /sys/bus/pci/slots/X. (James Puthukattukaran) [Orabug: 34719459] - nvme: paring quiesce/unquiesce (Ming Lei) [Orabug: 34719459] - nvme: prepare for pairing quiescing and unquiescing (Ming Lei) [Orabug: 34719459] - nvme: apply nvme API to quiesce/unquiesce admin queue (Ming Lei) [Orabug: 34719459] - nvme: add APIs for stopping/starting admin queue (Ming Lei) [Orabug: 34719459] - hugetlbfs: don't delete error page from pagecache (James Houghton) [Orabug: 34772616] - mm: shmem: don't truncate page if memory failure happens (Yang Shi) [Orabug: 34772616] - mm: hwpoison: handle non-anonymous THP correctly (Yang Shi) [Orabug: 34772616] - mm: hwpoison: refactor refcount check handling (Yang Shi) [Orabug: 34772616] - net/rds: Quiesce heartbeat worker in rds_conn_path_destroy() (Sharath Srinivasan) [Orabug: 34815818] - net/rds: Add support for tracing RDS heartbeats (Sharath Srinivasan) [Orabug: 34815818] - net/rds: Enable RDS heartbeat by default (Sharath Srinivasan) [Orabug: 34815818] - uek-rpm: core.list: add VirtualBox guest drivers to core package (Todd Vierling) [Orabug: 34820755] - tools/power turbostat: fix SPR PC6 limits (Artem Bityutskiy) [Orabug: 34838996] - tools/power turbostat: separate SPR from ICX (Artem Bityutskiy) [Orabug: 34838996] - rds: ib: Fix incorrect error handling during QP creation (Hakon Bugge) [Orabug: 34857202] - Revert 'random: clear fast pool, crng, and batches in cpuhp bring up' (Somasundaram Krishnasamy) [Orabug: 34850847] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-42896 CVE-2022-42895 CVE-2022-4378 Oracle Linux 9 [2.06-46.0.4] - Bump SBAT metadata for grub to 3 [Orabug: 34872719] [2.06-46.0.3] - Fix CVE-2022-2601 and CVE-2022-3775 [Orabug: 34871953] - Enable signing for aarch64 EFI IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-3775 CVE-2022-2601 Oracle Linux 8 ruby [2.5.9-110.0.1] - Fix for CVE-2022-28739 [Orabug: 34824177] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-28739 Oracle Linux 7 [15:4.2.1-24.el7] - Revert 'virtio-scsi: Send 'REPORTED LUNS CHANGED' sense data upon disk hotplug events' (Mark Kanda) [Orabug: 34905939] [15:4.2.1-23.el7] - hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638) (Philippe Mathieu-Daude) [Orabug: 33930374] {CVE-2021-3638} - tests/acpi: virt: update ACPI MADT and FADT binaries (Miguel Luis) - acpi: arm/virt: madt: bump to revision 4 accordingly to ACPI 6.0 Errata A (Miguel Luis) - acpi: arm/virt: madt: use build_append_int_noprefix() API to compose MADT table (Igor Mammedov) - acpi: madt: arm/x86: use acpi_table_begin()/acpi_table_end() instead of build_header() (Igor Mammedov) - hw/arm/virt-acpi-build:Remove dead assignment in build_madt() (Chen Qun) - acpi: build_fadt: adapt FADT table names (Miguel Luis) - acpi: fadt: support revision 6.0 of the ACPI specification (Miguel Luis) - tests/acpi: virt: allow acpi MADT and FADT changes (Miguel Luis) - Document CVE-2022-1050 and CVE-2022-3165 (Mark Kanda) [Orabug: 34132133] [Orabug: 34713999] {CVE-2022-1050} {CVE-2022-3165} - hw/acpi/erst.c: Fix memory handling issues (Christian A. Ehrhardt) [Orabug: 34779472] {CVE-2022-4172} - vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)->async_tx.elem in virtio_net_reset (Si-Wei Liu) - net/vhost-vdpa.c: Fix clang compilation failure (Peter Maydell) - vhost-vdpa: allow passing opened vhostfd to vhost-vdpa (Si-Wei Liu) - virtio-scsi: Send 'REPORTED LUNS CHANGED' sense data upon disk hotplug events (Venu Busireddy) [Orabug: 33649154] - hw/acpi/aml-build: Improve scalability of PPTT generation (Yanan Wang) - tests/data/acpi/virt: update empty file for PPTT (Miguel Luis) - hw/arm/virt-acpi-build: Generate PPTT table (Yanan Wang) - tests/data/acpi/virt: Add an empty expected file for PPTT (Yanan Wang) - hw/acpi/aml-build: Add PPTT table (Andrew Jones) - hw/acpi/aml-build: Add Processor hierarchy node structure (Yanan Wang) - machine: Add SMP Sockets in CpuTopology (Babu Moger) - bios-tables-test: generate table for virt/DBG2 (Miguel Luis) - hw/arm/virt_acpi_build: Generate DBG2 table (Eric Auger) - tests/acpi: Add void table for virt/DBG2 bios-tables-test (Eric Auger) - tests/acpi: virt: update ACPI GTDT binaries (Miguel Luis) [Orabug: 34711916] - acpi: arm/virt: build_gtdt: fix invalid 64-bit physical addresses (Miguel Luis) [Orabug: 34711916] - tests/acpi: virt: allow acpi GTDT changes (Miguel Luis) [Orabug: 34711916] - acpi: fix OEM ID/OEM Table ID padding (Igor Mammedov) [Orabug: 34711916] - acpi: arm/virt: build_gtdt: use acpi_table_begin()/acpi_table_end() instead of build_header() (Igor Mammedov) [Orabug: 34711916] - acpi: add helper routines to initialize ACPI tables (Igor Mammedov) [Orabug: 34711916] - acpi: declare the default assignable value for the ACPI table header (Miguel Luis) [Orabug: 34711916] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-3165 CVE-2022-4172 CVE-2021-3638 CVE-2022-1050 Oracle Linux 6 [1:1.8.0.10-12.0.1] - Fix possible remote code execution vulnerability [CVE-2022-41853][Orabug: 34820687] [1:1.8.0.10-12] - Mark /etc/sysconfig/hsqldb as configuration file - Resolves: rhbz#996152 [1:1.8.0.10-11] - Build with GCJ - Resolves: rhbz#962676 [1.8.0.10-10] - Resolves: rhbz#827343. Added a post requirement for java [1.8.0.10-9] - Added JDBC 4.1 support - Made noarch - Disabled GCJ support [1.8.0.10-8] - Resolves: #585125 - Additional fixes to hsqldb script. [1.8.0.10-7] - Resolves: #585125 - Fix hsqldb script to be LSB-compliant. [1.8.0.10-6] - Use apache-tomcat-apis instead of servletapi5. [1.8.0.10-5] - Resolves: #553802 - Fix rpmlint warnings. [1.8.0.10-4] - Add patches from Caolan for #523110 and #517839 [1:1.8.0.10-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild [1:1.8.0.10-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild [1:1.8.0.10-1] - Upgrade to 1.8.0.10 [1:1.8.0.9-3] - drop repotag [1:1.8.0.9-2jpp.2] - fix license tag [1:1.8.0.9-2jpp.1] - Autorebuild for GCC 4.3 [1.8.0.9-1jpp.1] - Fix for bz# 428520: Defining JAVA_HOME in /etc/sysconfig/hsqldb [1.8.0.9-1jpp] - Upgrade to 1.8.0.9 [1.8.0.8-1jpp.5] - Backport patch, addressing CVE-2007-4576 [1.8.0.8-1jpp.4] - Rebuild [1.8.0.8-1jpp.3] - Fix bz# 218135: Init script now specifies shell when starting service [1:1.8.0.8-1jpp.2] - Added %{?dist} to release, as per Fedora policy [1:1.8.0.8-1jpp.1] - Merge with upstream [1:1.8.0.8-1jpp] - Upgrade to 1.8.0.8 [1:1.8.0.7-2jpp] - Update copyright date [1:1.8.0.7-1jpp.2] - Bump release to build in rawhide [1:1.8.0.7-1jpp] - Updgrade to 1.8.0.7 [1:1.8.0.4-4jpp.2] - Bump release to build in rawhide [1:1.8.0.4-4jpp] - Added missing entries to the files section - From fnasser@redhat.com: - Add post requires for servletapi5 to ensure installation order - From sgrubb@redhat.com: - Apply patch correcting tmp file usage [1:1.8.0.4-3jpp.4] - Add post requires for servletapi5 to ensure installation order [1:1.8.0.4-3jpp.3] - rebuilt for unwind info generation, broken in gcc-4.1.1-21 [1:1.8.0.4-3jpp.2] - Apply patch correcting tmp file usage [1:1.8.0.4-3jpp] - Add missing postun section. [1:1.8.0.4-2jpp.2] - Fix regression re: missing shadow-utils prereq. [1:1.8.0.4-2jpp] - Add missing requirements. - Merge with fc spec. - From gbenson@redhat.com: - Change /etc/init.d to /etc/rc.d/init.d. - Create hsqldb user and group with low IDs (RH bz #165670). - Do not remove hsqldb user and group on uninstall. - Build with servletapi5. - From ashah@redhat.com: - Change hsqldb user shell to /sbin/nologin. - From notting@redhat.com - use an assigned user/group id [1:1.8.0.4-1jpp] - First JPP 1.7 build - Upgrade to 1.8.0.4 [0:1.80.1-1jpp] - Upgrade to 1.8.0.1 [0:1.73.3-1jpp] - Upgrade to 1.7.3.3 [0:1.73.0-1jpp] - Upgrade to 1.7.3.0 [0:1.72.3-2jpp] - Build with ant-1.6.2 [0:1.72.3-1jpp] - 1.7.2.3 stable [0:1.72-0.rc6b.1jpp] - 1.7.2 preview [0:1.71-1jpp] - 1.71 - update for JPackage 1.5 [1.61-6jpp] - generic servlet support [1.61-5jpp] - versioned dir for javadoc - no dependencies for javadoc package - stricter dependencies for demo package - section macro - adaptation to new servlet3 package [1.61-4jpp] - javadoc in javadoc package - doc reorganisation - removed Requires: ant - patches regenerated and bzipped [1.61-3jpp] - removed packager tag - new jpp extension [1.61-2jpp] - added BuildRequires: servletapi3 ant - added Requires: servletapi3 ant [1.61-1jpp] - complete spec restyle - splitted & improved linuxization patch [1.60-1jpp] - 1.60 first 'official release' of Hsqldb [1.43-2jpp] - fixed version [1.43-1jpp] - first release - linuxization patch (doc + script) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-41853 Oracle Linux 6 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-42898 Oracle Linux 8 libvirt [5.7.0-38.el8] - qemu: Don't report spurious errors from vCPU tid validation on hotunplug timeout (Shaleen Bathla) [Orabug: 34826758] - security: fix SELinux label generation logic (Daniel P. Berrange) [Orabug: 34773029] {CVE-2021-3631} - qemu: Set default qdisc before setting bandwidth (Michal Privoznik) [Orabug: 34724925] - qemu: Taint cpu host-passthrough only after migration (Cole Robinson) [Orabug: 34724925] libvirt-python [5.7.0-38.el8] - Bump version number to 5.7.0-38 to match libvirt (Karl Heubaum) qemu-kvm [4.2.1-24.el8] - hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638) (Philippe Mathieu-Daude) [Orabug: 33930374] {CVE-2021-3638} - tests/acpi: virt: update ACPI MADT and FADT binaries (Miguel Luis) - acpi: arm/virt: madt: bump to revision 4 accordingly to ACPI 6.0 Errata A (Miguel Luis) - acpi: arm/virt: madt: use build_append_int_noprefix() API to compose MADT table (Igor Mammedov) - acpi: madt: arm/x86: use acpi_table_begin()/acpi_table_end() instead of build_header() (Igor Mammedov) - hw/arm/virt-acpi-build:Remove dead assignment in build_madt() (Chen Qun) - acpi: build_fadt: adapt FADT table names (Miguel Luis) - acpi: fadt: support revision 6.0 of the ACPI specification (Miguel Luis) - tests/acpi: virt: allow acpi MADT and FADT changes (Miguel Luis) - Document CVE-2022-3165 as not applicable (Mark Kanda) [Orabug: 34713999] {CVE-2022-3165} - Document CVE-2022-1050 as not applicable (Mark Kanda) [Orabug: 34132133] {CVE-2022-1050} - hw/acpi/erst.c: Fix memory handling issues (Christian A. Ehrhardt) [Orabug: 34779472] {CVE-2022-4172} - vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)->async_tx.elem in virtio_net_reset (Si-Wei Liu) - net/vhost-vdpa.c: Fix clang compilation failure (Peter Maydell) - vhost-vdpa: allow passing opened vhostfd to vhost-vdpa (Si-Wei Liu) - hw/acpi/aml-build: Improve scalability of PPTT generation (Yanan Wang) - tests/data/acpi/virt: update empty file for PPTT (Miguel Luis) - hw/arm/virt-acpi-build: Generate PPTT table (Yanan Wang) - tests/data/acpi/virt: Add an empty expected file for PPTT (Yanan Wang) - hw/acpi/aml-build: Add PPTT table (Andrew Jones) - hw/acpi/aml-build: Add Processor hierarchy node structure (Yanan Wang) - machine: Add SMP Sockets in CpuTopology (Babu Moger) - bios-tables-test: generate table for virt/DBG2 (Miguel Luis) - hw/arm/virt_acpi_build: Generate DBG2 table (Eric Auger) - tests/acpi: Add void table for virt/DBG2 bios-tables-test (Eric Auger) - tests/acpi: virt: update ACPI GTDT binaries (Miguel Luis) [Orabug: 34711916] - acpi: arm/virt: build_gtdt: fix invalid 64-bit physical addresses (Miguel Luis) [Orabug: 34711916] - tests/acpi: virt: allow acpi GTDT changes (Miguel Luis) [Orabug: 34711916] - acpi: fix OEM ID/OEM Table ID padding (Igor Mammedov) [Orabug: 34711916] - acpi: arm/virt: build_gtdt: use acpi_table_begin()/acpi_table_end() instead of build_header() (Igor Mammedov) [Orabug: 34711916] - acpi: add helper routines to initialize ACPI tables (Igor Mammedov) [Orabug: 34711916] - acpi: declare the default assignable value for the ACPI table header (Miguel Luis) [Orabug: 34711916] [4.2.1-22.el8] - Revert 'block: Set the name of BlockBackend if possible' (Joe Jin) [Orabug: 34841102] - Revert 'iotests: Adjust 186.out to account for 'null' node-name' (Joe Jin) [Orabug: 34841102] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-1050 CVE-2021-3631 CVE-2021-3638 CVE-2022-3165 CVE-2022-4172 Oracle Linux 6 Oracle Linux 7 [4.1.12-124.71.3] - USB: core: Prevent nested device-reset calls (Alan Stern) [Orabug: 34951641] {CVE-2022-4662} - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (Luiz Augusto von Dentz) [Orabug: 34833307] {CVE-2022-42896} {CVE-2022-42896} - Bluetooth: L2CAP: Introduce proper defines for PSM ranges (Johan Hedberg) [Orabug: 34833307] - ext4: fix data corruption caused by overlapping unaligned and aligned IO (Lukas Czerner) [Orabug: 34190035] [4.1.12-124.71.2] - scsi: qla2xxx: Fix use after free in eh_abort path (Quinn Tran) [Orabug: 34970763] - check-kabi provides exception on broken symbols (Alok Tiwari) [Orabug: 34742865] - KABI validation broken on UEK4 for symbols change (Alok Tiwari) [Orabug: 34742865] - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Maxim Mikityanskiy) [Orabug: 34719829] {CVE-2022-3564} - Bluetooth: remove unneeded variable in l2cap_stream_rx (Prasanna Karthik) [Orabug: 34719829] {CVE-2022-3564} [4.1.12-124.71.1] - Bluetooth: L2CAP: Fix attempting to access uninitialized memory (Luiz Augusto von Dentz) [Orabug: 34951662] {CVE-2022-42895} {CVE-2022-42895} - wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker() (Dokyung Song) [Orabug: 34951546] {CVE-2022-3628} - tcp/udp: Fix memory leak in ipv6_renew_options(). (Kuniyuki Iwashima) [Orabug: 34719347] {CVE-2022-3524} IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-3628 CVE-2022-3524 CVE-2022-42896 CVE-2022-42895 CVE-2022-4662 CVE-2022-3564 Oracle Linux 8 Oracle Linux 9 [5.15.0-7.86.6.1] - net/rds: Delegate fan-out to a background worker (Gerd Rausch) [Orabug: 35051226] [5.15.0-7.86.6] - runtime revert of virtio_net: Stripe queue affinities across cores. (Konrad Rzeszutek Wilk) [Orabug: 35001044] - rds: ib: Make sure messages that errors out also get unmapped (Hakon Bugge) [Orabug: 35015598] - Ignore hot plug events when force powering off a device (James Puthukattukaran) [Orabug: 35015761] - mptcp: UEK: disable mptcp protocol (Jack Vogel) [Orabug: 34821286] [5.15.0-7.86.5] - uek-rpm: Enable HP watchdog for aarch64 (Saeed Mirzamohammadi) [Orabug: 34902069] - watchdog/hpwdt: Include nmi.h only if CONFIG_HPWDT_NMI_DECODING (Jerry Hoemann) [Orabug: 34902069] - watchdog/hpwdt: Enable HP_WATCHDOG for ARM64 systems. (Jerry Hoemann) [Orabug: 34902069] - Revert 'selftests/bpf: Add test for unstable CT lookup API' (Alan Maguire) [Orabug: 34951842] - uek-rpm: config-x86-64*: enable CONFIG_MT7921E (Todd Vierling) [Orabug: 34970472] - netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits (Pablo Neira Ayuso) [Orabug: 34978152] {CVE-2023-0179} - perf/x86/rapl: Use standard Energy Unit for SPR Dram RAPL domain (Zhang Rui) [Orabug: 34978296] - powercap: intel_rapl: support new layout of Psys PowerLimit Register on SPR (Zhang Rui) [Orabug: 34978296] - uek: kabi: enable aarch64 kABI checking (Saeed Mirzamohammadi) [Orabug: 34339132] [5.15.0-7.86.4] - net/rds: Fill in rds_exthdr_size gaps (Gerd Rausch) [Orabug: 34979170] - Revert 'uek: kabi: enable aarch64 kABI checking' (Jack Vogel) - Revert 'uek-rpm: Disable kABI checking for aarch64 64k builds' (Jack Vogel) [5.15.0-7.86.3] - uek-rpm: Disable kABI checking for aarch64 64k builds (Saeed Mirzamohammadi) [Orabug: 34339132] [5.15.0-7.86.2] - net/rds: Trigger rds_send_hs_ping() more than once (Gerd Rausch) [Orabug: 34607844] - Revert 'RDS: TCP: Track peer's connection generation number' (Gerd Rausch) [Orabug: 34700109] - net/rds: Use the first lane until RDS_EXTHDR_NPATHS arrives (Gerd Rausch) [Orabug: 34314502] - net/rds: Kick-start TCP receiver after accept (Gerd Rausch) [Orabug: 34600819] - net/rds: rds_tcp_conn_path_shutdown must not discard messages (Gerd Rausch) [Orabug: 34560700] - net/rds: Encode cp_index in TCP source port (Gerd Rausch) [Orabug: 34556036] - uek: kabi: enable aarch64 kABI checking (Saeed Mirzamohammadi) [Orabug: 34339132] - uek-rpm: Disable Promise SuperTrak EX series storage controllers (Somasundaram Krishnasamy) [Orabug: 34670747] - uek-rpm: ol9: Disable CONFIG_IR_MCEUSB from UEK7 OL9. (Harshit Mogalapalli) [Orabug: 34820237] - IB/mlx5: Add a signature check to received EQEs and CQEs (Rohit Nair) [Orabug: 34821073] - rds: ib: Avoid tear-down of caches unless already initialized (Hakon Bugge) [Orabug: 34826403] - KVM: SVM: Fix AVIC GATag to support max number of vCPUs (Suravee Suthikulpanit) [Orabug: 34961703] - Revert 'rds: ib: Enable FC by default' (Hakon Bugge) [Orabug: 34964359] - uek-rpm: Add nft_reject* modules to core rpm. (Somasundaram Krishnasamy) [Orabug: 34970060] - cpufreq: intel_pstate: Support Sapphire Rapids OOB mode (Srinivas Pandruvada) [Orabug: 34961609] [5.15.0-7.86.1] - LTS version: v5.15.86 (Jack Vogel) - pwm: tegra: Fix 32 bit build (Steven Price) - mfd: qcom_rpm: Use devm_of_platform_populate() to simplify code (Christophe JAILLET) - extcon: usbc-tusb320: Call the Type-C IRQ handler only if a port is registered (Yassine Oudjana) - media: dvbdev: fix refcnt bug (Lin Ma) - media: dvbdev: fix build warning due to comments (Lin Ma) - net: stmmac: fix errno when create_singlethread_workqueue() fails (Gaosheng Cui) - scsi: qla2xxx: Fix crash when I/O abort times out (Arun Easi) - btrfs: do not BUG_ON() on ENOMEM when dropping extent items for a range (Filipe Manana) - ovl: fix use inode directly in rcu-walk mode (Chen Zhongjin) - fbdev: fbcon: release buffer when fbcon_do_set_font() failed (Tetsuo Handa) - gcov: add support for checksum field (Rickard x Andersson) - floppy: Fix memory leak in do_floppy_init() (Yuan Can) - regulator: core: fix deadlock on regulator enable (Johan Hovold) - iio: adc128s052: add proper .data members in adc128_of_match table (Rasmus Villemoes) - iio: adc: ad_sigma_delta: do not use internal iio_dev lock (Nuno Sa) - iio: fix memory leak in iio_device_register_eventset() (Zeng Heng) - reiserfs: Add missing calls to reiserfs_security_free() (Roberto Sassu) - security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6 (Nathan Chancellor) - 9p: set req refcount to zero to avoid uninitialized usage (Schspa Shi) - loop: Fix the max_loop commandline argument treatment when it is set to 0 (Isaac J. Manjarres) - HID: mcp2221: don't connect hidraw (Enrik Berkhan) - HID: wacom: Ensure bootloader PID is usable in hidraw mode (Jason Gerecke) - xhci: Prevent infinite loop in transaction errors recovery for streams (Mathias Nyman) - usb: dwc3: core: defer probe on ulpi_read_id timeout (Ferry Toth) - usb: dwc3: Fix race between dwc3_set_mode and __dwc3_set_mode (Sven Peter) - arm64: dts: qcom: sm8250: fix USB-DP PHY registers (Johan Hovold) - usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq (Chunfeng Yun) - usb: cdnsp: fix lack of ZLP for ep0 (Pawel Laszczak) - ALSA: hda/hdmi: Add HP Device 0x8711 to force connect list (Jiao Zhou) - ALSA: hda/realtek: Add quirk for Lenovo TianYi510Pro-14IOB (Edward Pacman) - ALSA: usb-audio: add the quirk for KT0206 device (wangdicheng) - ima: Simplify ima_lsm_copy_rule (GUO Zihua) - pstore: Make sure CONFIG_PSTORE_PMSG selects CONFIG_RT_MUTEXES (John Stultz) - afs: Fix lost servers_outstanding count (David Howells) - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Yang Jihong) - pstore: Switch pmsg_lock to an rt_mutex to avoid priority inversion (John Stultz) - LoadPin: Ignore the 'contents' argument of the LSM hooks (Kees Cook) - drm/i915/display: Don't disable DDI/Transcoder when setting phy test pattern (Khaled Almahallawy) - ASoC: rt5670: Remove unbalanced pm_runtime_put() (Hans de Goede) - ASoC: rockchip: spdif: Add missing clk_disable_unprepare() in rk_spdif_runtime_resume() (Wang Jingjin) - ASoC: wm8994: Fix potential deadlock (Marek Szyprowski) - ASoC: mediatek: mt8183: fix refcount leak in mt8183_mt6358_ts3a227_max98357_dev_probe() (Wang Yufen) - ASoC: rockchip: pdm: Add missing clk_disable_unprepare() in rockchip_pdm_runtime_resume() (Wang Jingjin) - ASoC: audio-graph-card: fix refcount leak of cpu_ep in __graph_for_each_link() (Wang Yufen) - ASoC: mediatek: mt8173-rt5650-rt5514: fix refcount leak in mt8173_rt5650_rt5514_dev_probe() (Wang Yufen) - ASoC: Intel: Skylake: Fix driver hang during shutdown (Cezary Rojewski) - ALSA: hda: add snd_hdac_stop_streams() helper (Pierre-Louis Bossart) - ALSA/ASoC: hda: move/rename snd_hdac_ext_stop_streams to hdac_stream.c (Pierre-Louis Bossart) - hwmon: (jc42) Fix missing unlock on error in jc42_write() (Yang Yingliang) - KVM: selftests: Fix build regression by using accessor function (Tyler Hicks) - tools/include: Add _RET_IP_ and math definitions to kernel.h (Karolina Drobnik) - orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init() (Zhang Xiaoxu) - orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string() (Zhang Xiaoxu) - drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid() (Nathan Chancellor) - drm/fsl-dcu: Fix return type of fsl_dcu_drm_connector_mode_valid() (Nathan Chancellor) - hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() (Hawkins Jiawei) - scsi: elx: libefc: Fix second parameter type in state callbacks (Nathan Chancellor) - scsi: ufs: Reduce the START STOP UNIT timeout (Bart Van Assche) - scsi: lpfc: Fix hard lockup when reading the rx_monitor from debugfs (Justin Tee) - crypto: hisilicon/hpre - fix resource leak in remove process (Zhiqi Song) - clk: st: Fix memory leak in st_of_quadfs_setup() (Xiu Jianfeng) - media: si470x: Fix use-after-free in si470x_int_in_callback() (Shigeru Yoshida) - mmc: renesas_sdhi: better reset from HS400 mode (Wolfram Sang) - mmc: f-sdh30: Add quirks for broken timeout clock capability (Kunihiko Hayashi) - wifi: mt76: do not run mt76u_status_worker if the device is not running (Lorenzo Bianconi) - regulator: core: fix use_count leakage when handling boot-on (Rui Zhang) - libbpf: Avoid enum forward-declarations in public API in C++ mode (Andrii Nakryiko) - drm/amd/display: Use the largest vready_offset in pipe group (Wesley Chalmers) - blk-mq: fix possible memleak when register 'hctx' failed (Ye Bin) - media: dvb-usb: fix memory leak in dvb_usb_adapter_init() (Mazin Al Haddad) - media: dvbdev: adopts refcnt to avoid UAF (Lin Ma) - media: dvb-frontends: fix leak of memory fw (Yan Lei) - ethtool: avoiding integer overflow in ethtool_phys_id() (Maxim Korotkov) - bpf: Prevent decl_tag from being referenced in func_proto arg (Stanislav Fomichev) - ppp: associate skb with a device at tx (Stanislav Fomichev) - mrp: introduce active flags to prevent UAF when applicant uninit (Schspa Shi) - ipv6/sit: use DEV_STATS_INC() to avoid data-races (Eric Dumazet) - net: add atomic_long_t to net_device_stats fields (Eric Dumazet) - drm/amd/display: fix array index out of bound error in bios parser (Aurabindo Pillai) - md/raid1: stop mdx_raid1 thread when raid1 array run failed (Jiang Li) - drivers/md/md-bitmap: check the return value of md_bitmap_get_counter() (Li Zhong) - drm/mediatek: Fix return type of mtk_hdmi_bridge_mode_valid() (Nathan Chancellor) - drm/sti: Use drm_mode_copy() (Ville Syrjala) - drm/rockchip: Use drm_mode_copy() (Ville Syrjala) - drm/msm: Use drm_mode_copy() (Ville Syrjala) - s390/lcs: Fix return type of lcs_start_xmit() (Nathan Chancellor) - s390/netiucv: Fix return type of netiucv_tx() (Nathan Chancellor) - s390/ctcm: Fix return type of ctc{mp,}m_tx() (Nathan Chancellor) - drm/amdgpu: Fix type of second parameter in odn_edit_dpm_table() callback (Nathan Chancellor) - drm/amdgpu: Fix type of second parameter in trans_msg() callback (Nathan Chancellor) - igb: Do not free q_vector unless new one was allocated (Kees Cook) - wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() (Minsuk Kang) - hamradio: baycom_epp: Fix return type of baycom_send_packet() (Nathan Chancellor) - net: ethernet: ti: Fix return type of netcp_ndo_start_xmit() (Nathan Chancellor) - bpf: make sure skb->len != 0 when redirecting to a tunneling device (Stanislav Fomichev) - qed (gcc13): use u16 for fid to be big enough (Jiri Slaby (SUSE)) - Revert 'drm/amd/display: Limit max DSC target bpp for specific monitors' (Hamza Mahfooz) - drm/amd/display: prevent memory leak (gehao) - ipmi: fix memleak when unload ipmi driver (Zhang Yuchen) - ASoC: codecs: rt298: Add quirk for KBL-R RVP platform (Amadeusz Slawinski) - wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out (Shigeru Yoshida) - wifi: ath9k: verify the expected usb_endpoints are present (Fedor Pchelkin) - brcmfmac: return error when getting invalid max_flowrings from dongle (Wright Feng) - media: imx-jpeg: Disable useless interrupt to avoid kernel panic (Ming Qian) - drm/etnaviv: add missing quirks for GC300 (Doug Brown) - hfs: fix OOB Read in __hfs_brec_find (ZhangPeng) - acct: fix potential integer overflow in encode_comp_t() (Zheng Yejian) - nilfs2: fix shift-out-of-bounds due to too large exponent of block size (Ryusuke Konishi) - nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset() (Ryusuke Konishi) - ACPICA: Fix error code path in acpi_ds_call_control_method() (Rafael J. Wysocki) - fs: jfs: fix shift-out-of-bounds in dbDiscardAG (Hoi Pok Wu) - jfs: Fix fortify moan in symlink (Dr. David Alan Gilbert) - udf: Avoid double brelse() in udf_rename() (Shigeru Yoshida) - fs: jfs: fix shift-out-of-bounds in dbAllocAG (Dongliang Mu) - binfmt_misc: fix shift-out-of-bounds in check_special_flags (Liu Shixin) - x86/hyperv: Remove unregister syscore call from Hyper-V cleanup (Gaurav Kohli) - video: hyperv_fb: Avoid taking busy spinlock on panic path (Guilherme G. Piccoli) - arm64: make is_ttbrX_addr() noinstr-safe (Mark Rutland) - rcu: Fix __this_cpu_read() lockdep warning in rcu_force_quiescent_state() (Zqiang) - HID: amd_sfh: Add missing check for dma_alloc_coherent (Jiasheng Jiang) - net: stream: purge sk_error_queue in sk_stream_kill_queues() (Eric Dumazet) - myri10ge: Fix an error handling path in myri10ge_probe() (Christophe JAILLET) - rxrpc: Fix missing unlock in rxrpc_do_sendmsg() (David Howells) - net_sched: reject TCF_EM_SIMPLE case for complex ematch module (Cong Wang) - mailbox: zynq-ipi: fix error handling while device_register() fails (Yang Yingliang) - mailbox: arm_mhuv2: Fix return value check in mhuv2_probe() (Yang Yingliang) - mailbox: mpfs: read the system controller's status (Conor Dooley) - skbuff: Account for tail adjustment during pull operations (Subash Abhinov Kasiviswanathan) - arm64: dts: mt8183: Fix Mali GPU clock (Chen-Yu Tsai) - soc: mediatek: pm-domains: Fix the power glitch issue (Chun-Jie Chen) - openvswitch: Fix flow lookup to use unmasked key (Eelco Chaudron) - selftests: devlink: fix the fd redirect in dummy_reporter_test (Jakub Kicinski) - rtc: mxc_v2: Add missing clk_disable_unprepare() (GUO Zihua) - igc: Set Qbv start_time and end_time to end_time if not being configured in GCL (Tan Tee Min) - igc: Lift TAPRIO schedule restriction (Kurt Kanzenbach) - igc: recalculate Qbv end_time by considering cycle time (Tan Tee Min) - igc: allow BaseTime 0 enrollment for Qbv (Tan Tee Min) - igc: Add checking for basetime less than zero (Muhammad Husaini Zulkifli) - igc: Use strict cycles for Qbv scheduling (Vinicius Costa Gomes) - igc: Enhance Qbv scheduling by using first flag bit (Vinicius Costa Gomes) - r6040: Fix kmemleak in probe and remove (Li Zetao) - unix: Fix race in SOCK_SEQPACKET's unix_dgram_sendmsg() (Kirill Tkhai) - nfc: pn533: Clear nfc_target before being used (Minsuk Kang) - net: enetc: avoid buffer leaks on xdp_do_redirect() failure (Vladimir Oltean) - selftests/bpf: Add test for unstable CT lookup API (Kumar Kartikeya Dwivedi) - block, bfq: fix possible uaf for 'bfqq->bic' (Yu Kuai) - mISDN: hfcmulti: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - mISDN: hfcpci: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - mISDN: hfcsusb: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - net: macsec: fix net device access prior to holding a lock (Emeel Hakim) - nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure (Dan Aloni) - rtc: pcf85063: fix pcf85063_clkout_control (Alexandre Belloni) - rtc: pic32: Move devm_rtc_allocate_device earlier in pic32_rtc_probe() (Gaosheng Cui) - rtc: st-lpc: Add missing clk_disable_unprepare in st_rtc_probe() (Gaosheng Cui) - netfilter: flowtable: really fix NAT IPv6 offload (Qingfang DENG) - mfd: pm8008: Fix return value check in pm8008_probe() (Yang Yingliang) - mfd: pm8008: Remove driver data structure pm8008_data (Lee Jones) - mfd: qcom_rpm: Fix an error handling path in qcom_rpm_probe() (Christophe JAILLET) - mfd: bd957x: Fix Kconfig dependency on REGMAP_IRQ (Matti Vaittinen) - powerpc/pseries/eeh: use correct API for error log size (Nathan Lynch) - powerpc/eeh: Drop redundant spinlock initialization (Haowen Bai) - remoteproc: qcom: q6v5: Fix missing clk_disable_unprepare() in q6v5_wcss_qcs404_power_on() (Shang XiaoJing) - remoteproc: qcom_q6v5_pas: Fix missing of_node_put() in adsp_alloc_memory_region() (Yuan Can) - remoteproc: qcom_q6v5_pas: detach power domains on remove (Luca Weiss) - remoteproc: qcom_q6v5_pas: disable wakeup on probe fail or remove (Luca Weiss) - remoteproc: qcom: q6v5: Fix potential null-ptr-deref in q6v5_wcss_init_mmio() (Shang XiaoJing) - remoteproc: sysmon: fix memory leak in qcom_add_sysmon_subdev() (Gaosheng Cui) - pwm: mediatek: always use bus clock for PWM on MT7622 (Daniel Golle) - pwm: mtk-disp: Fix the parameters calculated by the enabled flag of disp_pwm (xinlei lee) - pwm: sifive: Call pwm_sifive_update_clock() while mutex is held (Uwe Kleine-Konig) - iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY (Jason Gunthorpe) - selftests/powerpc: Fix resource leaks (Miaoqian Lin) - powerpc/hv-gpci: Fix hv_gpci event list (Kajol Jain) - powerpc/83xx/mpc832x_rdb: call platform_device_put() in error case in of_fsl_spi_probe() (Yang Yingliang) - powerpc/perf: callchain validate kernel stack pointer bounds (Nicholas Piggin) - powerpc/xive: add missing iounmap() in error path in xive_spapr_populate_irq_data() (Yang Yingliang) - powerpc/xmon: Fix -Wswitch-unreachable warning in bpt_cmds (Gustavo A. R. Silva) - cxl: Fix refcount leak in cxl_calc_capp_routing (Miaoqian Lin) - powerpc/52xx: Fix a resource leak in an error handling path (Christophe JAILLET) - macintosh/macio-adb: check the return value of ioremap() (Xie Shaowen) - macintosh: fix possible memory leak in macio_add_one_device() (Yang Yingliang) - iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() (Yuan Can) - iommu/amd: Fix pci device refcount leak in ppr_notifier() (Yang Yingliang) - rtc: pcf85063: Fix reading alarm (Alexander Stein) - rtc: snvs: Allow a time difference on clock register read (Stefan Eichenberger) - rtc: cmos: Disable ACPI RTC event on removal (Rafael J. Wysocki) - rtc: cmos: Rename ACPI-related functions (Rafael J. Wysocki) - rtc: cmos: Eliminate forward declarations of some functions (Rafael J. Wysocki) - rtc: cmos: Call rtc_wake_setup() from cmos_do_probe() (Rafael J. Wysocki) - rtc: cmos: Call cmos_wake_setup() from cmos_do_probe() (Rafael J. Wysocki) - rtc: cmos: fix build on non-ACPI platforms (Alexandre Belloni) - rtc: cmos: Fix wake alarm breakage (Rafael J. Wysocki) - rtc: cmos: Fix event handler registration ordering issue (Rafael J. Wysocki) - rtc: rtc-cmos: Do not check ACPI_FADT_LOW_POWER_S0 (Rafael J. Wysocki) - dmaengine: idxd: Fix crc_val field for completion record (Fenghua Yu) - fs/ntfs3: Fix slab-out-of-bounds read in ntfs_trim_fs (Abdun Nihaal) - pwm: tegra: Improve required rate calculation (Jon Hunter) - include/uapi/linux/swab: Fix potentially missing __always_inline (Matt Redfearn) - phy: usb: s2 WoL wakeup_count not incremented for USB->Eth devices (Al Cooper) - iommu/rockchip: fix permission bits in page table entries v2 (Michael Riesch) - iommu/sun50i: Fix flush size (Jernej Skrabec) - iommu/sun50i: Fix R/W permission check (Jernej Skrabec) - iommu/sun50i: Consider all fault sources for reset (Jernej Skrabec) - iommu/sun50i: Fix reset release (Jernej Skrabec) - fs/ntfs3: Harden against integer overflows (Dan Carpenter) - overflow: Implement size_t saturating arithmetic helpers (Kees Cook) - fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst() (Shigeru Yoshida) - RDMA/siw: Fix pointer cast warning (Arnd Bergmann) - perf stat: Do not delay the workload with --delay (Namhyung Kim) - perf stat: Refactor __run_perf_stat() common code (Adrian Herrera Arcila) - power: supply: fix null pointer dereferencing in power_supply_get_battery_info (ruanjinjie) - power: supply: ab8500: Fix error handling in ab8500_charger_init() (Yuan Can) - HSI: omap_ssi_core: Fix error handling in ssi_init() (Yuan Can) - power: supply: z2_battery: Fix possible memleak in z2_batt_probe() (Zhang Qilong) - perf symbol: correction while adjusting symbol (Ajay Kaher) - perf trace: Handle failure when trace point folder is missed (Leo Yan) - perf trace: Use macro RAW_SYSCALL_ARGS_NUM to replace number (Leo Yan) - perf trace: Return error if a system call doesn't exist (Leo Yan) - power: supply: fix residue sysfs file in error handle route of __power_supply_register() (Zeng Heng) - HSI: omap_ssi_core: fix possible memory leak in ssi_probe() (Yang Yingliang) - HSI: omap_ssi_core: fix unbalanced pm_runtime_disable() (Yang Yingliang) - fbdev: uvesafb: Fixes an error handling path in uvesafb_probe() (Christophe JAILLET) - fbdev: uvesafb: don't build on UML (Randy Dunlap) - fbdev: geode: don't build on UML (Randy Dunlap) - fbdev: ep93xx-fb: Add missing clk_disable_unprepare in ep93xxfb_probe() (Gaosheng Cui) - fbdev: vermilion: decrease reference count in error path (Xiongfeng Wang) - fbdev: via: Fix error in via_core_init() (Shang XiaoJing) - fbdev: pm2fb: fix missing pci_disable_device() (Yang Yingliang) - fbdev: ssd1307fb: Drop optional dependency (Andy Shevchenko) - thermal/drivers/qcom/lmh: Fix irq handler return value (Bjorn Andersson) - thermal/drivers/qcom/temp-alarm: Fix inaccurate warning for gen2 (Luca Weiss) - thermal/drivers/imx8mm_thermal: Validate temperature range (Marcus Folkesson) - samples: vfio-mdev: Fix missing pci_disable_device() in mdpy_fb_probe() (Shang XiaoJing) - ksmbd: Fix resource leak in ksmbd_session_rpc_open() (Xiu Jianfeng) - tracing/hist: Fix issue of losting command info in error_log (Zheng Yejian) - usb: storage: Add check for kcalloc (Jiasheng Jiang) - i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Zheyu Ma) - i2c: mux: reg: check return value after calling platform_get_resource() (Yang Yingliang) - gpiolib: protect the GPIO device against being dropped while in use by user-space (Bartosz Golaszewski) - gpiolib: make struct comments into real kernel docs (Bartosz Golaszewski) - gpiolib: cdev: fix NULL-pointer dereferences (Bartosz Golaszewski) - gpiolib: Get rid of redundant 'else' (Andy Shevchenko) - vme: Fix error not catched in fake_init() (Chen Zhongjin) - staging: rtl8192e: Fix potential use-after-free in rtllib_rx_Monitor() (YueHaibing) - staging: rtl8192u: Fix use after free in ieee80211_rx() (Dan Carpenter) - i2c: pxa-pci: fix missing pci_disable_device() on error in ce4100_i2c_probe (Hui Tang) - chardev: fix error handling in cdev_device_add() (Yang Yingliang) - mcb: mcb-parse: fix error handing in chameleon_parse_gdd() (Yang Yingliang) - drivers: mcb: fix resource leak in mcb_probe() (Zhengchao Shao) - usb: gadget: f_hid: fix refcount leak on error path (John Keeping) - usb: gadget: f_hid: fix f_hidg lifetime vs cdev (John Keeping) - usb: roles: fix of node refcount leak in usb_role_switch_is_parent() (Yang Yingliang) - coresight: trbe: remove cpuhp instance node before remove cpuhp state (Yang Shen) - counter: stm32-lptimer-cnt: fix the check on arr and cmp registers update (Fabrice Gasnier) - iio: adis: add '__adis_enable_irq()' implementation (Ramona Bolboaca) - iio:imu:adis: Move exports into IIO_ADISLIB namespace (Jonathan Cameron) - iio: adis: stylistic changes (Nuno Sa) - iio: adis: handle devices that cannot unmask the drdy pin (Nuno Sa) - iio: temperature: ltc2983: make bulk write buffer DMA-safe (Cosmin Tanislav) - cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter() (Yang Yingliang) - cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter() (Yang Yingliang) - firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe() (Yang Yingliang) - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os (Zheng Wang) - misc: tifm: fix possible memory leak in tifm_7xx1_switch_media() (ruanjinjie) - ocxl: fix pci device refcount leak when calling get_function_0() (Yang Yingliang) - misc: ocxl: fix possible name leak in ocxl_file_register_afu() (Yang Yingliang) - test_firmware: fix memory leak in test_firmware_init() (Zhengchao Shao) - serial: sunsab: Fix error handling in sunsab_init() (Yuan Can) - serial: altera_uart: fix locking in polling mode (Gabriel Somlo) - tty: serial: altera_uart_{r,t}x_chars() need only uart_port (Jiri Slaby) - tty: serial: clean up stop-tx part in altera_uart_tx_chars() (Jiri Slaby) - serial: pch: Fix PCI device refcount leak in pch_request_dma() (Xiongfeng Wang) - serial: stm32: move dma_request_chan() before clk_prepare_enable() (Valentin Caron) - serial: pl011: Do not clear RX FIFO & RX interrupt in unthrottle. (delisun) - serial: amba-pl011: avoid SBSA UART accessing DMACR register (Jiamei Xie) - extcon: usbc-tusb320: Update state on probe even if no IRQ pending (Marek Vasut) - extcon: usbc-tusb320: Add USB TYPE-C support (Marek Vasut) - extcon: usbc-tusb320: Factor out extcon into dedicated functions (Marek Vasut) - usb: typec: Factor out non-PD fwnode properties (Samuel Holland) - extcon: usbc-tusb320: Add support for TUSB320L (Yassine Oudjana) - extcon: usbc-tusb320: Add support for mode setting and reset (Yassine Oudjana) - usb: typec: tipd: Fix spurious fwnode_handle_put in error path (Sven Peter) - usb: typec: tipd: Cleanup resources if devm_tps6598_psy_register fails (Sven Peter) - usb: typec: tcpci: fix of node refcount leak in tcpci_register_port() (Yang Yingliang) - usb: typec: Check for ops->exit instead of ops->enter in altmode_exit (Sven Peter) - staging: vme_user: Fix possible UAF in tsi148_dma_list_add (Gaosheng Cui) - usb: fotg210-udc: Fix ages old endianness issues (Linus Walleij) - uio: uio_dmem_genirq: Fix deadlock between irq config and handling (Rafael Mendonca) - uio: uio_dmem_genirq: Fix missing unlock in irq configuration (Rafael Mendonca) - vfio: platform: Do not pass return buffer to ACPI _RST method (Rafael Mendonca) - class: fix possible memory leak in __class_register() (Yang Yingliang) - serial: 8250_bcm7271: Fix error handling in brcmuart_init() (Yuan Can) - serial: tegra: Read DMA status before terminating (Kartik) - drivers: dio: fix possible memory leak in dio_init() (Yang Yingliang) - RISC-V: Align the shadow stack (Palmer Dabbelt) - IB/IPoIB: Fix queue count inconsistency for PKEY child interfaces (Dragos Tatulea) - hwrng: geode - Fix PCI device refcount leak (Xiongfeng Wang) - hwrng: amd - Fix PCI device refcount leak (Xiongfeng Wang) - crypto: img-hash - Fix variable dereferenced before check 'hdev->req' (Gaosheng Cui) - RDMA/hns: Fix error code of CMD (Chengchang Tang) - RDMA/hns: Fix page size cap from firmware (Chengchang Tang) - RDMA/hns: Fix PBL page MTR find (Chengchang Tang) - RDMA/hns: Fix AH attr queried by query_qp (Chengchang Tang) - orangefs: Fix sysfs not cleanup when dev init failed (Zhang Xiaoxu) - PCI: mt7621: Add sentinel to quirks table (John Thomson) - PCI: mt7621: Rename mt7621_pci_ to mt7621_pcie_ (Bjorn Helgaas) - RDMA/srp: Fix error return code in srp_parse_options() (Wang Yufen) - RDMA/hfi1: Fix error return code in parse_platform_config() (Wang Yufen) - riscv/mm: add arch hook arch_clear_hugepage_flags (Tong Tiangen) - crypto: omap-sham - Use pm_runtime_resume_and_get() in omap_sham_probe() (Shang XiaoJing) - crypto: amlogic - Remove kcalloc without check (Christophe JAILLET) - RDMA/nldev: Fix failure to send large messages (Mark Zhang) - f2fs: avoid victim selection from previous victim section (Yonggil Song) - RDMA/nldev: Add checks for nla_nest_start() in fill_stat_counter_qps() (Yuan Can) - scsi: snic: Fix possible UAF in snic_tgt_create() (Gaosheng Cui) - scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails (Chen Zhongjin) - scsi: ipr: Fix WARNING in ipr_init() (Shang XiaoJing) - scsi: scsi_debug: Fix possible name leak in sdebug_add_host_helper() (Yang Yingliang) - scsi: fcoe: Fix possible name leak when device_register() fails (Yang Yingliang) - scsi: scsi_debug: Fix a warning in resp_report_zones() (Harshit Mogalapalli) - scsi: scsi_debug: Fix a warning in resp_verify() (Harshit Mogalapalli) - scsi: efct: Fix possible memleak in efct_device_init() (Chen Zhongjin) - scsi: hpsa: Fix possible memory leak in hpsa_add_sas_device() (Yang Yingliang) - scsi: hpsa: Fix error handling in hpsa_add_sas_host() (Yang Yingliang) - scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add() (Yang Yingliang) - padata: Fix list iterator in padata_do_serial() (Daniel Jordan) - padata: Always leave BHs disabled when running ->parallel() (Daniel Jordan) - crypto: tcrypt - Fix multibuffer skcipher speed test mem leak (Zhang Yiqun) - scsi: hpsa: Fix possible memory leak in hpsa_init_one() (Yuan Can) - dt-bindings: visconti-pcie: Fix interrupts array max constraints (Serge Semin) - dt-bindings: imx6q-pcie: Fix clock names for imx6sx and imx8mq (Serge Semin) - RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create failed (Zhang Xiaoxu) - RDMA/hns: fix memory leak in hns_roce_alloc_mr() (Zhengchao Shao) - crypto: ccree - Make cc_debugfs_global_fini() available for module init function (Uwe Kleine-Konig) - RDMA/hfi: Decrease PCI device reference count in error path (Xiongfeng Wang) - PCI: Check for alloc failure in pci_request_irq() (Zeng Heng) - RDMA/hns: Fix ext_sge num error when post send (Luoyouming) - RDMA/hns: Repacing 'dseg_len' by macros in fill_ext_sge_inl_data() (Luoyouming) - crypto: hisilicon/qm - add missing pci_dev_put() in q_num_set() (Xiongfeng Wang) - crypto: cryptd - Use request context instead of stack for sub-request (Herbert Xu) - crypto: ccree - Remove debugfs when platform_driver_register failed (Gaosheng Cui) - scsi: scsi_debug: Fix a warning in resp_write_scat() (Harshit Mogalapalli) - RDMA/siw: Set defined status for work completion with undefined status (Bernard Metzler) - RDMA/nldev: Return '-EAGAIN' if the cm_id isn't from expected port (Mark Zhang) - RDMA/core: Make sure 'ib_port' is valid when access sysfs node (Mark Zhang) - RDMA/restrack: Release MR restrack when delete (Mark Zhang) - PCI: vmd: Disable MSI remapping after suspend (Nirmal Patel) - IB/mad: Don't call to function that might sleep while in atomic context (Leonid Ravich) - RDMA/siw: Fix immediate work request flush to completion queue (Bernard Metzler) - scsi: qla2xxx: Fix set-but-not-used variable warnings (Bart Van Assche) - RDMA/irdma: Report the correct link speed (Shiraz Saleem) - f2fs: fix to destroy sbi->post_read_wq in error path of f2fs_fill_super() (Chao Yu) - f2fs: fix normal discard process (Dongdong Zhang) - f2fs: fix to invalidate dcc->f2fs_issue_discard in error path (Chao Yu) - apparmor: Fix memleak in alloc_ns() (Xiu Jianfeng) - crypto: rockchip - rework by using crypto_engine (Corentin Labbe) - crypto: rockchip - remove non-aligned handling (Corentin Labbe) - crypto: rockchip - better handle cipher key (Corentin Labbe) - crypto: rockchip - add fallback for ahash (Corentin Labbe) - crypto: rockchip - add fallback for cipher (Corentin Labbe) - crypto: rockchip - do not store mode globally (Corentin Labbe) - crypto: rockchip - do not do custom power management (Corentin Labbe) - f2fs: Fix the race condition of resize flag between resizefs (Zhang Qilong) - PCI: pci-epf-test: Register notifier if only core_init_notifier is enabled (Kunihiko Hayashi) - RDMA/core: Fix order of nldev_exit call (Leon Romanovsky) - PCI: dwc: Fix n_fts[] array overrun (Vidya Sagar) - apparmor: Use pointer to struct aa_label for lbs_cred (Xiu Jianfeng) - scsi: core: Fix a race between scsi_done() and scsi_timeout() (Bart Van Assche) - crypto: nitrox - avoid double free on error path in nitrox_sriov_init() (Natalia Petrova) - crypto: sun8i-ss - use dma_addr instead u32 (Corentin Labbe) - crypto: hisilicon/qm - fix missing destroy qp_idr (Weili Qian) - apparmor: Fix abi check to include v8 abi (John Johansen) - apparmor: fix lockdep warning when removing a namespace (John Johansen) - apparmor: fix a memleak in multi_transaction_new() (Gaosheng Cui) - net: dsa: tag_8021q: avoid leaking ctx on dsa_tag_8021q_register() error path (Vladimir Oltean) - i40e: Fix the inability to attach XDP program on downed interface (Bartosz Staszewski) - stmmac: fix potential division by 0 (Piergiorgio Beruto) - Bluetooth: RFCOMM: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - Bluetooth: hci_core: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - Bluetooth: hci_bcsp: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - Bluetooth: hci_h5: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - Bluetooth: hci_ll: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - Bluetooth: hci_qca: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - Bluetooth: btusb: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - Bluetooth: btintel: Fix missing free skb in btintel_setup_combined() (Wang ShaoBo) - Bluetooth: MGMT: Fix error report for ADD_EXT_ADV_PARAMS (Inga Stotland) - sctp: sysctl: make extra pointers netns aware (Firo Yang) - ntb_netdev: Use dev_kfree_skb_any() in interrupt context (Eric Pilmore) - net: lan9303: Fix read error execution path (Jerry Ray) - can: tcan4x5x: Fix use of register error status mask (Markus Schneider-Pargmann) - can: m_can: Call the RAM init directly from m_can_chip_config (Vivek Yadav) - can: tcan4x5x: Remove invalid write in clear_interrupts (Markus Schneider-Pargmann) - net: amd-xgbe: Check only the minimum speed for active/passive cables (Tom Lendacky) - net: amd-xgbe: Fix logic around active and passive cables (Tom Lendacky) - af_unix: call proto_unregister() in the error path in af_unix_init() (Yang Yingliang) - net: amd: lance: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - hamradio: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - net: ethernet: dnet: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - net: emaclite: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - net: apple: bmac: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - net: apple: mace: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - net/tunnel: wait until all sk_user_data reader finish before releasing the sock (Hangbin Liu) - net: farsync: Fix kmemleak when rmmods farsync (Li Zetao) - ethernet: s2io: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop() (ruanjinjie) - drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init() (Yuan Can) - net: stmmac: fix possible memory leak in stmmac_dvr_probe() (Gaosheng Cui) - net: stmmac: selftests: fix potential memleak in stmmac_test_arpoffload() (Zhang Changzhong) - net: defxx: Fix missing err handling in dfx_init() (Yongqiang Liu) - net: vmw_vsock: vmci: Check memcpy_from_msg() (Artem Chernyshev) - clk: socfpga: Fix memory leak in socfpga_gate_init() (Xiu Jianfeng) - bpf: Do not zero-extend kfunc return values (Bjorn Topel) - blktrace: Fix output non-blktrace event when blk_classic option enabled (Yang Jihong) - wifi: brcmfmac: Fix error return code in brcmf_sdio_download_firmware() (Wang Yufen) - wifi: rtl8xxxu: Fix the channel width reporting (Bitterblue Smith) - wifi: rtl8xxxu: Add __packed to struct rtl8723bu_c2h (Bitterblue Smith) - spi: spi-gpio: Don't set MOSI as an input if not 3WIRE mode (Kris Bahnsen) - clk: samsung: Fix memory leak in _samsung_clk_register_pll() (Xiu Jianfeng) - media: coda: Add check for kmalloc (Jiasheng Jiang) - media: coda: Add check for dcoda_iram_alloc (Jiasheng Jiang) - media: c8sectpfe: Add of_node_put() when breaking out of loop (Liang He) - regulator: qcom-labibb: Fix missing of_node_put() in qcom_labibb_regulator_probe() (Yuan Can) - mmc: core: Normalize the error handling branch in sd_read_ext_regs() (Zhen Lei) - memstick/ms_block: Add check for alloc_ordered_workqueue (Jiasheng Jiang) - memstick: ms_block: Add error handling support for add_disk() (Luis Chamberlain) - mmc: renesas_sdhi: alway populate SCC pointer (Wolfram Sang) - mmc: mmci: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: wbsd: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: via-sdmmc: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: meson-gx: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: omap_hsmmc: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: atmel-mci: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: wmt-sdmmc: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: vub300: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: toshsd: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: rtsx_pci: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: pxamci: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: mxcmmc: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: moxart: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: alcor: fix return value check of mmc_add_host() (Yang Yingliang) - riscv, bpf: Emit fixed-length instructions for BPF_PSEUDO_FUNC (Pu Lehui) - NFSv4.x: Fail client initialisation if state manager thread can't run (Trond Myklebust) - SUNRPC: Fix missing release socket in rpc_sockname() (Wang ShaoBo) - xprtrdma: Fix regbuf data not freed in rpcrdma_req_create() (Zhang Xiaoxu) - ALSA: mts64: fix possible null-ptr-defer in snd_mts64_interrupt (Gaosheng Cui) - media: saa7164: fix missing pci_disable_device() (Liu Shixin) - ALSA: pcm: Set missing stop_operating flag at undoing trigger start (Takashi Iwai) - bpf, sockmap: fix race in sock_map_free() (Eric Dumazet) - hwmon: (jc42) Restore the min/max/critical temperatures on resume (Martin Blumenstingl) - hwmon: (jc42) Convert register access and caching to regmap/regcache (Martin Blumenstingl) - regulator: core: fix resource leak in regulator_register() (Yang Yingliang) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-0179 CVE-2022-4139 CVE-2022-45869 CVE-2022-3545 Oracle Linux 7 [4.14.35-2047.522.3] - ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC (Sasha Levin) [Orabug: 34653896] {CVE-2022-3303} - net/rds: Fill in rds_exthdr_size gaps (Gerd Rausch) [Orabug: 34979172] - net/rds: Trigger rds_send_hs_ping() more than once (Gerd Rausch) [Orabug: 34607787] - Revert 'RDS: TCP: Track peer's connection generation number' (Gerd Rausch) [Orabug: 34700111] - net/rds: Use the first lane until RDS_EXTHDR_NPATHS arrives (Gerd Rausch) [Orabug: 28720880] - net/rds: Kick-start TCP receiver after accept (Gerd Rausch) [Orabug: 34600821] - net/rds: rds_tcp_conn_path_shutdown must not discard messages (Gerd Rausch) [Orabug: 34560682] - net/rds: Encode cp_index in TCP source port (Gerd Rausch) [Orabug: 34556027] [4.14.35-2047.522.2] - tcp: fix ambiguity for SACKed TLP retransmits with RTT < min_rtt (Neal Cardwell) [Orabug: 34961109] - vhost-scsi: Fix max number of virtqueues (Mike Christie) [Orabug: 34915131] - net/rds: drop rs_transport module reference count on error (Gerd Rausch) [Orabug: 34500808] - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Gulam Mohamed) [Orabug: 34306796] - IB/mlx5: Add a signature check to received EQEs and CQEs (Rohit Nair) [Orabug: 34105979] - net/rds: rds_tcp_accept_one ought to not discard messages (Gerd Rausch) [Orabug: 34488377] - net/rds: No shortcut out of RDS_CONN_ERROR (Gerd Rausch) [Orabug: 34276065] - net/rds: Don't force state RDS_CONN_RESETTING (Gerd Rausch) [Orabug: 34276065] - net/rds: Preserve essential connection state flags (Gerd Rausch) [Orabug: 34276065] [4.14.35-2047.522.1] - uek-rpm: ol7: Add enhanced kABI diagnostics (Stephen Brennan) [Orabug: 34879138] - uek-rpm: ol7: Add Symtypes files (Stephen Brennan) [Orabug: 34879138] - uek-rpm: ol7: Enable creation of Symtypes files (Stephen Brennan) [Orabug: 34879138] - uek-rpm: Add kabi tool and documentation (Stephen Brennan) [Orabug: 34879138] - xfs: don't reuse busy extents on extent trim (Brian Foster) [Orabug: 34605583] - RDMA/ucma: Put a lock around every call to the rdma_cm layer (Jason Gunthorpe) [Orabug: 34106064] - LTS version: v4.14.302 (Saeed Mirzamohammadi) - net: mvneta: Fix an out of bounds check (Dan Carpenter) - ipv6: avoid use-after-free in ip6_fragment() (Eric Dumazet) - net: plip: don't call kfree_skb/dev_kfree_skb() under spin_lock_irq() (Yang Yingliang) - ethernet: aeroflex: fix potential skb leak in greth_init_rings() (Zhang Changzhong) - tipc: Fix potential OOB in tipc_link_proto_rcv() (YueHaibing) - net: hisilicon: Fix potential use-after-free in hix5hd2_rx() (Liu Jian) - net: hisilicon: Fix potential use-after-free in hisi_femac_rx() (Liu Jian) - net: stmmac: fix 'snps,axi-config' node property parsing (Jisheng Zhang) - NFC: nci: Bounds check struct nfc_target arrays (Kees Cook) - net: mvneta: Prevent out of bounds read in mvneta_config_rss() (Dan Carpenter) - net: encx24j600: Fix invalid logic in reading of MISTAT register (Valentina Goncharenko) - net: encx24j600: Add parentheses to fix precedence (Valentina Goncharenko) - mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add() (Wei Yongjun) - Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn() (Wang ShaoBo) - igb: Allocate MSI-X vector when testing (Akihiko Odaki) - e1000e: Fix TX dispatch condition (Akihiko Odaki) - gpio: amd8111: Fix PCI device reference count leak (Xiongfeng Wang) - ca8210: Fix crash by zero initializing data (Hauke Mehrtens) - ieee802154: cc2520: Fix error return code in cc2520_hw_init() (Ziyang Xuan) - HID: core: fix shift-out-of-bounds in hid_report_raw_event (ZhangPeng) - HID: hid-lg4ff: Add check for empty lbuf (Anastasia Belova) - KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) - memcg: fix possible use-after-free in memcg_write_event_control() (Tejun Heo) - media: v4l2-dv-timings.c: fix too strict blanking sanity checks (Hans Verkuil) - xen/netback: do some code cleanup (Juergen Gross) - net: usb: qmi_wwan: add u-blox 0x1342 composition (Davide Tronchin) - regulator: twl6030: fix get status of twl6032 regulators (Andreas Kemnade) - ASoC: soc-pcm: Add NULL check in BE reparenting (Srinivasa Rao Mandadapu) - ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event (Kees Cook) - ARM: dts: rockchip: disable arm_global_timer on rk3066 and rk3188 (Johan Jonker) - ARM: 9266/1: mm: fix no-MMU ZERO_PAGE() implementation (Giulio Benetti) - ARM: 9251/1: perf: Fix stacktraces for tracepoint events in THUMB2 kernels (Tomislav Novak) - ARM: dts: rockchip: fix ir-receiver node names (Johan Jonker) - arm: dts: rockchip: fix node name for hym8563 rtc (Sebastian Reichel) - LTS version: v4.14.301 (Saeed Mirzamohammadi) - ipc/sem: Fix dangling sem_array access in semtimedop race (Jann Horn) - v4l2: don't fall back to follow_pfn() if pin_user_pages_fast() fails (Linus Torvalds) - mmc: sdhci: Fix voltage switch delay (Adrian Hunter) - mmc: sdhci: use FIELD_GET for preset value bit masks (Masahiro Yamada) - x86/ioremap: Fix page aligned size calculation in __ioremap_caller() (Michael Kelley) - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (Luiz Augusto von Dentz) {CVE-2022-42896} - x86/pm: Add enumeration check before spec MSRs save/restore setup (Saeed Mirzamohammadi) - nvme: restrict management ioctls to admin (Keith Busch) - tcp/udp: Fix memory leak in ipv6_renew_options(). (Kuniyuki Iwashima) [Orabug: 34719346] {CVE-2022-3524} - iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() (Xiongfeng Wang) - pinctrl: single: Fix potential division by zero (Maxim Korotkov) - ASoC: ops: Fix bounds check for _sx controls (Mark Brown) - efi: random: Properly limit the size of the random seed (Ben Hutchings) - nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry() (ZhangPeng) - tools/vm/slabinfo-gnuplot: use 'grep -E' instead of 'egrep' (Tiezhu Yang) - btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit() (ChenXiaoSong) - perf: Add sample_flags to indicate the PMU-filled sample data (Kan Liang) - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (Yang Yingliang) - hwmon: (coretemp) Check for null before removing sysfs attrs (Phil Auld) - net: ethernet: renesas: ravb: Fix promiscuous mode after system resumed (Yoshihiro Shimoda) - packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE (Willem de Bruijn) - net: hsr: Fix potential use-after-free (YueHaibing) - dsa: lan9303: Correct stat name (Jerry Ray) - net/9p: Fix a potential socket leak in p9_socket_open (Wang Hai) - net: net_netdev: Fix error handling in ntb_netdev_init_module() (Yuan Can) - net: phy: fix null-ptr-deref while probe() failed (Yang Yingliang) - qlcnic: fix sleep-in-atomic-context bugs caused by msleep (Duoming Zhou) - can: cc770: cc770_isa_probe(): add missing free_cc770dev() (Zhang Changzhong) - can: sja1000_isa: sja1000_isa_probe(): add missing free_sja1000dev() (Zhang Changzhong) - net/mlx5: Fix uninitialized variable bug in outlen_write() (YueHaibing) - of: property: decrement node refcount in of_fwnode_get_reference_args() (Yang Yingliang) - hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails (Gaosheng Cui) - hwmon: (i5500_temp) fix missing pci_disable_device() (Yang Yingliang) - iio: light: rpr0521: add missing Kconfig dependencies (Paul Gazzillo) - iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw (Wei Yongjun) - iio: health: afe4403: Fix oob read in afe4403_read_raw (Wei Yongjun) - drm/amdgpu: always register an MMU notifier for userptr (Christian Konig) - net: usb: qmi_wwan: add Telit 0x103a composition (Enrico Sau) - tcp: configurable source port perturb table size (Gleb Mazovetskiy) - platform/x86: hp-wmi: Ignore Smart Experience App event (Kai-Heng Feng) - platform/x86: acer-wmi: Enable SW_TABLET_MODE on Switch V 10 (SW5-017) (Hans de Goede) - platform/x86: asus-wmi: add missing pci_dev_put() in asus_wmi_set_xusb2pr() (Xiongfeng Wang) - xen/platform-pci: add missing free_irq() in error path (ruanjinjie) - serial: 8250: 8250_omap: Avoid RS485 RTS glitch on ->set_termios() (Lukas Wunner) - Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode (Aman Dhoot) - nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty (Chen Zhongjin) - kconfig: display recursive dependency resolution hint just once (Masahiro Yamada) - iio: core: Fix entry not deleted when iio_register_sw_trigger_type() fails (Chen Zhongjin) - iio: light: apds9960: fix wrong register for gesture gain (Alejandro Concepcion Rodriguez) - arm64: dts: rockchip: lower rk3399-puma-haikou SD controller clock frequency (Jakob Unterwurzacher) - nios2: add FORCE for vmlinuz.gz (Randy Dunlap) - s390/crashdump: fix TOD programmable field size (Heiko Carstens) - net: thunderx: Fix the ACPI memory leak (Yu Liao) - nfc: st-nci: fix memory leaks in EVT_TRANSACTION (Martin Faltesek) - nfc: st-nci: fix incorrect validating logic in EVT_TRANSACTION (Martin Faltesek) - s390/dasd: fix no record found for raw_track_access (Stefan Haberland) - dccp/tcp: Reset saddr on failure after inet6?_hash_connect(). (Kuniyuki Iwashima) - NFC: nci: fix memory leak in nci_rx_data_packet() (Liu Shixin) - xfrm: Fix ignored return value in xfrm6_init() (Chen Zhongjin) - net/qla3xxx: fix potential memleak in ql3xxx_send() (Zhang Changzhong) - net/mlx4: Check retval of mlx4_bitmap_init (Peter Kosyh) - ARM: mxs: fix memory leak in mxs_machine_init() (Zheng Yongjun) - 9p/fd: fix issue of list_del corruption in p9_fd_cancel() (Zhengchao Shao) - net: pch_gbe: fix potential memleak in pch_gbe_tx_queue() (Wang Hai) - nfc/nci: fix race with opening and closing (Lin Ma) - ARM: dts: at91: sam9g20ek: enable udc vbus gpio pinctrl (Michael Grzeschik) - bus: sunxi-rsb: Support atomic transfers (Samuel Holland) - ARM: dts: am335x-pcm-953: Define fixed regulators in root node (Dominik Haller) - af_key: Fix send_acquire race with pfkey_register (Herbert Xu) - MIPS: pic32: treat port as signed integer (Jason A. Donenfeld) - spi: stm32: fix stm32_spi_prepare_mbr() that halves spi clk for every run (Sean Nyekjaer) - wifi: mac80211: Fix ack frame idr leak when mesh has no route (Nicolas Cavallari) - audit: fix undefined behavior in bit shift for AUDIT_BIT (Gaosheng Cui) - wifi: mac80211_hwsim: fix debugfs attribute ps with rc table support (Jonas Jelonek) - LTS version: v4.14.300 (Saeed Mirzamohammadi) - ntfs: check overflow when iterating ATTR_RECORDs (Hawkins Jiawei) - ntfs: fix out-of-bounds read in ntfs_attr_find() (Hawkins Jiawei) - ntfs: fix use-after-free in ntfs_attr_find() (Hawkins Jiawei) - mm: fs: initialize fsdata passed to write_begin/write_end interface (Alexander Potapenko) - 9p/trans_fd: always use O_NONBLOCK read/write (Tetsuo Handa) - gfs2: Switch from strlcpy to strscpy (Andreas Gruenbacher) - gfs2: Check sb_bsize_shift after reading superblock (Andrew Price) - 9p: trans_fd/p9_conn_cancel: drop client lock earlier (Dominique Martinet) - kcm: close race conditions on sk_receive_queue (Cong Wang) - bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb() (Baisong Zhong) - kcm: avoid potential race in kcm_tx_work (Eric Dumazet) - tcp: cdg: allow tcp_cdg_release() to be called multiple times (Eric Dumazet) - macvlan: enforce a consistent minimal mtu (Eric Dumazet) - serial: 8250: Flush DMA Rx on RLSI (Ilpo Jarvinen) - nilfs2: fix use-after-free bug of ns_writer on remount (Ryusuke Konishi) - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (Alexander Potapenko) - mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put() (Xiongfeng Wang) - mmc: core: properly select voltage range without power cycle (Yann Gautier) - serial: 8250_lpss: Configure DMA also w/o DMA filter (Ilpo Jarvinen) - serial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs (Ilpo Jarvinen) - dm ioctl: fix misbehavior if list_versions races with module loading (Mikulas Patocka) - iio: pressure: ms5611: changed hardcoded SPI speed to value limited (Mitja Spes) - iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init() (Yang Yingliang) - iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger() (Yang Yingliang) - usb: chipidea: fix deadlock in ci_otg_del_timer (Duoming Zhou) - usb: add NO_LPM quirk for Realforce 87U Keyboard (Nicolas Dumazet) - USB: serial: option: add Fibocom FM160 0x0111 composition (Reinhard Speyerer) - USB: serial: option: add u-blox LARA-L6 modem (Davide Tronchin) - USB: serial: option: add u-blox LARA-R6 00B modem (Davide Tronchin) - USB: serial: option: remove old LARA-R6 PID (Davide Tronchin) - USB: serial: option: add Sierra Wireless EM9191 (Benoit Monin) - ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open() (Takashi Iwai) - ring_buffer: Do not deactivate non-existant pages (Daniil Tatianin) - ftrace: Fix null pointer dereference in ftrace_add_mod() (Xiu Jianfeng) - ftrace: Optimize the allocation for mcount entries (Wang Wensheng) - ftrace: Fix the possible incorrect kernel message (Wang Wensheng) - cifs: Fix wrong return value checking when GETFLAGS (Zhang Xiaoxu) - net/x25: Fix skb leak in x25_lapb_receive_frame() (Wei Yongjun) - drbd: use after free in drbd_create_device() (Dan Carpenter) - xen/pcpu: fix possible memory leak in register_pcpu() (Yang Yingliang) - net: caif: fix double disconnect client in chnl_net_open() (Zhengchao Shao) - mISDN: fix misuse of put_device() in mISDN_register_device() (Wang ShaoBo) - mISDN: fix possible memory leak in mISDN_dsp_element_register() (Yang Yingliang) - net: bgmac: Drop free_netdev() from bgmac_enet_remove() (Wei Yongjun) - pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map (Zeng Heng) - parport_pc: Avoid FIFO port location truncation (Maciej W. Rozycki) - block: sed-opal: kmalloc the cmd/resp buffers (Serge Semin) - ASoC: soc-utils: Remove __exit for snd_soc_util_exit() (Chen Zhongjin) - tty: n_gsm: fix sleep-in-atomic-context bug in gsm_control_send (Duoming Zhou) - serial: 8250: omap: Flush PM QOS work on remove (Tony Lindgren) - serial: 8250_omap: remove wait loop from Errata i202 workaround (Matthias Schiffer) - ASoC: core: Fix use-after-free in snd_soc_exit() (Chen Zhongjin) - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (Luiz Augusto von Dentz) - drm/imx: imx-tve: Fix return type of imx_tve_connector_mode_valid (Nathan Huckleberry) - selftests/futex: fix build for clang (Ricardo Canuelo) - x86/cpu: Restore AMD's DE_CFG MSR after resume (Borislav Petkov) - dmaengine: at_hdmac: Check return code of dma_async_device_register (Tudor Ambarus) - dmaengine: at_hdmac: Fix impossible condition (Tudor Ambarus) - dmaengine: at_hdmac: Don't allow CPU to reorder channel enable (Tudor Ambarus) - dmaengine: at_hdmac: Fix completion of unissued descriptor in case of errors (Tudor Ambarus) - dmaengine: at_hdmac: Don't start transactions at tx_submit level (Tudor Ambarus) - dmaengine: at_hdmac: Fix at_lli struct definition (Tudor Ambarus) - cert host tools: Stop complaining about deprecated OpenSSL functions (Linus Torvalds) - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (ZhangPeng) - btrfs: selftests: fix wrong error check in btrfs_free_dummy_root() (Zhang Xiaoxu) - platform/x86: hp_wmi: Fix rfkill causing soft blocked wifi (Jorge Lopez) - drm/i915/dmabuf: fix sg_table handling in map_dma_buf (Matthew Auld) - nilfs2: fix deadlock in nilfs_count_free_blocks() (Ryusuke Konishi) - ALSA: usb-audio: Add quirk entry for M-Audio Micro (Takashi Iwai) - ALSA: hda: fix potential memleak in 'add_widget_node' (Ye Bin) - arm64: efi: Fix handling of misaligned runtime regions and drop warning (Ard Biesheuvel) - net: macvlan: fix memory leaks of macvlan_common_newlink (Chuang Wang) - net: mv643xx_eth: disable napi when init rxq or txq failed in mv643xx_eth_open() (Zhengchao Shao) - ethernet: s2io: disable napi when start nic failed in s2io_card_up() (Zhengchao Shao) - net: cxgb3_main: disable napi when bind qsets failed in cxgb_up() (Zhengchao Shao) - drivers: net: xgene: disable napi when register irq failed in xgene_enet_open() (Zhengchao Shao) - dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove() (Christophe JAILLET) - tipc: fix the msg->req tlv len check in tipc_nl_compat_name_table_dump_header (Xin Long) - ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network (Alexander Potapenko) - drm/vc4: Fix missing platform_unregister_drivers() call in vc4_drm_register() (Yuan Can) - hamradio: fix issue of dev reference count leakage in bpq_device_event() (Zhengchao Shao) - net: lapbether: fix issue of dev reference count leakage in lapbeth_device_event() (Zhengchao Shao) - capabilities: fix undefined behavior in bit shift for CAP_TO_MASK (Gaosheng Cui) - net: fman: Unregister ethernet device on removal (Sean Anderson) - bnxt_en: fix potentially incorrect return value for ndo_rx_flow_steer (Alex Barba) - net: gso: fix panic on frag_list with mixed head alloc types (Jiri Benc) - HID: hyperv: fix possible memory leak in mousevsc_probe() (Yang Yingliang) - LTS version: v4.14.299 (Saeed Mirzamohammadi) - wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker() (Dokyung Song) - linux/const.h: move UL() macro to include/linux/const.h (Masahiro Yamada) - linux/const.h: prefix include guard of uapi/linux/const.h with _UAPI (Masahiro Yamada) - KVM: x86: emulator: update the emulation mode after CR0 write (Maxim Levitsky) - KVM: x86: emulator: introduce emulator_recalc_and_set_mode (Maxim Levitsky) - KVM: x86: emulator: em_sysexit should update ctxt->mode (Maxim Levitsky) - KVM: x86: Mask off reserved bits in CPUID.80000008H (Jim Mattson) - ext4: fix warning in 'ext4_da_release_space' (Ye Bin) - parisc: Export iosapic_serial_irq() symbol for serial port driver (Helge Deller) - parisc: Make 8250_gsc driver dependend on CONFIG_PARISC (Helge Deller) - efi: random: reduce seed size to 32 bytes (Ard Biesheuvel) - ALSA: usb-audio: Add quirks for MacroSilicon MS2100/MS2106 devices (John Veness) - capabilities: fix potential memleak on error path from vfs_getxattr_alloc() (Gaosheng Cui) - tcp/udp: Make early_demux back namespacified. (Kuniyuki Iwashima) - btrfs: fix type of parameter generation in btrfs_get_dentry (David Sterba) - block, bfq: protect 'bfqd->queued' by 'bfqd->lock' (Yu Kuai) - Bluetooth: L2CAP: Fix attempting to access uninitialized memory (Luiz Augusto von Dentz) {CVE-2022-42895} - i2c: xiic: Add platform module alias (Martin Tuma) - media: dvb-frontends/drxk: initialize err to 0 (Hans Verkuil) - media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE (Hans Verkuil) - net, neigh: Fix null-ptr-deref in neigh_table_clear() (Chen Zhongjin) - net: mdio: fix undefined behavior in bit shift for __mdiobus_register (Gaosheng Cui) - Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del() (Zhengchao Shao) - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Maxim Mikityanskiy) - btrfs: fix ulist leaks in error paths of qgroup self tests (Filipe Manana) - btrfs: fix inode list leak during backref walking at resolve_indirect_refs() (Filipe Manana) - isdn: mISDN: netjet: fix wrong check of device registration (Yang Yingliang) - mISDN: fix possible memory leak in mISDN_register_device() (Yang Yingliang) - rose: Fix NULL pointer dereference in rose_send_frame() (Zhang Qilong) - ipvs: use explicitly signed chars (Jason A. Donenfeld) - net: sched: Fix use after free in red_enqueue() (Dan Carpenter) - ata: pata_legacy: fix pdc20230_set_piomode() (Sergey Shtylyov) - net: fec: fix improper use of NETDEV_TX_BUSY (Zhang Changzhong) - nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send() (Shang XiaoJing) - nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send() (Shang XiaoJing) - net: dsa: Fix possible memory leaks in dsa_loop_init() (Chen Zhongjin) - nfs4: Fix kmemleak when allocate slot failed (Zhang Xiaoxu) - NFSv4.1: We must always send RECLAIM_COMPLETE after a reboot (Trond Myklebust) - NFSv4.1: Handle RECLAIM_COMPLETE trunking errors (Trond Myklebust) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-3303 CVE-2022-3524 CVE-2022-3640 CVE-2022-42895 CVE-2022-42896 Oracle Linux 7 [4.14.35-2047.522.3] - ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC (Sasha Levin) [Orabug: 34653896] {CVE-2022-3303} - net/rds: Fill in rds_exthdr_size gaps (Gerd Rausch) [Orabug: 34979172] - net/rds: Trigger rds_send_hs_ping() more than once (Gerd Rausch) [Orabug: 34607787] - Revert 'RDS: TCP: Track peer's connection generation number' (Gerd Rausch) [Orabug: 34700111] - net/rds: Use the first lane until RDS_EXTHDR_NPATHS arrives (Gerd Rausch) [Orabug: 28720880] - net/rds: Kick-start TCP receiver after accept (Gerd Rausch) [Orabug: 34600821] - net/rds: rds_tcp_conn_path_shutdown must not discard messages (Gerd Rausch) [Orabug: 34560682] - net/rds: Encode cp_index in TCP source port (Gerd Rausch) [Orabug: 34556027] [4.14.35-2047.522.2] - tcp: fix ambiguity for SACKed TLP retransmits with RTT < min_rtt (Neal Cardwell) [Orabug: 34961109] - vhost-scsi: Fix max number of virtqueues (Mike Christie) [Orabug: 34915131] - net/rds: drop rs_transport module reference count on error (Gerd Rausch) [Orabug: 34500808] - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Gulam Mohamed) [Orabug: 34306796] - IB/mlx5: Add a signature check to received EQEs and CQEs (Rohit Nair) [Orabug: 34105979] - net/rds: rds_tcp_accept_one ought to not discard messages (Gerd Rausch) [Orabug: 34488377] - net/rds: No shortcut out of RDS_CONN_ERROR (Gerd Rausch) [Orabug: 34276065] - net/rds: Don't force state RDS_CONN_RESETTING (Gerd Rausch) [Orabug: 34276065] - net/rds: Preserve essential connection state flags (Gerd Rausch) [Orabug: 34276065] [4.14.35-2047.522.1] - uek-rpm: ol7: Add enhanced kABI diagnostics (Stephen Brennan) [Orabug: 34879138] - uek-rpm: ol7: Add Symtypes files (Stephen Brennan) [Orabug: 34879138] - uek-rpm: ol7: Enable creation of Symtypes files (Stephen Brennan) [Orabug: 34879138] - uek-rpm: Add kabi tool and documentation (Stephen Brennan) [Orabug: 34879138] - xfs: don't reuse busy extents on extent trim (Brian Foster) [Orabug: 34605583] - RDMA/ucma: Put a lock around every call to the rdma_cm layer (Jason Gunthorpe) [Orabug: 34106064] - LTS version: v4.14.302 (Saeed Mirzamohammadi) - net: mvneta: Fix an out of bounds check (Dan Carpenter) - ipv6: avoid use-after-free in ip6_fragment() (Eric Dumazet) - net: plip: don't call kfree_skb/dev_kfree_skb() under spin_lock_irq() (Yang Yingliang) - ethernet: aeroflex: fix potential skb leak in greth_init_rings() (Zhang Changzhong) - tipc: Fix potential OOB in tipc_link_proto_rcv() (YueHaibing) - net: hisilicon: Fix potential use-after-free in hix5hd2_rx() (Liu Jian) - net: hisilicon: Fix potential use-after-free in hisi_femac_rx() (Liu Jian) - net: stmmac: fix 'snps,axi-config' node property parsing (Jisheng Zhang) - NFC: nci: Bounds check struct nfc_target arrays (Kees Cook) - net: mvneta: Prevent out of bounds read in mvneta_config_rss() (Dan Carpenter) - net: encx24j600: Fix invalid logic in reading of MISTAT register (Valentina Goncharenko) - net: encx24j600: Add parentheses to fix precedence (Valentina Goncharenko) - mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add() (Wei Yongjun) - Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn() (Wang ShaoBo) - igb: Allocate MSI-X vector when testing (Akihiko Odaki) - e1000e: Fix TX dispatch condition (Akihiko Odaki) - gpio: amd8111: Fix PCI device reference count leak (Xiongfeng Wang) - ca8210: Fix crash by zero initializing data (Hauke Mehrtens) - ieee802154: cc2520: Fix error return code in cc2520_hw_init() (Ziyang Xuan) - HID: core: fix shift-out-of-bounds in hid_report_raw_event (ZhangPeng) - HID: hid-lg4ff: Add check for empty lbuf (Anastasia Belova) - KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) - memcg: fix possible use-after-free in memcg_write_event_control() (Tejun Heo) - media: v4l2-dv-timings.c: fix too strict blanking sanity checks (Hans Verkuil) - xen/netback: do some code cleanup (Juergen Gross) - net: usb: qmi_wwan: add u-blox 0x1342 composition (Davide Tronchin) - regulator: twl6030: fix get status of twl6032 regulators (Andreas Kemnade) - ASoC: soc-pcm: Add NULL check in BE reparenting (Srinivasa Rao Mandadapu) - ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event (Kees Cook) - ARM: dts: rockchip: disable arm_global_timer on rk3066 and rk3188 (Johan Jonker) - ARM: 9266/1: mm: fix no-MMU ZERO_PAGE() implementation (Giulio Benetti) - ARM: 9251/1: perf: Fix stacktraces for tracepoint events in THUMB2 kernels (Tomislav Novak) - ARM: dts: rockchip: fix ir-receiver node names (Johan Jonker) - arm: dts: rockchip: fix node name for hym8563 rtc (Sebastian Reichel) - LTS version: v4.14.301 (Saeed Mirzamohammadi) - ipc/sem: Fix dangling sem_array access in semtimedop race (Jann Horn) - v4l2: don't fall back to follow_pfn() if pin_user_pages_fast() fails (Linus Torvalds) - mmc: sdhci: Fix voltage switch delay (Adrian Hunter) - mmc: sdhci: use FIELD_GET for preset value bit masks (Masahiro Yamada) - x86/ioremap: Fix page aligned size calculation in __ioremap_caller() (Michael Kelley) - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (Luiz Augusto von Dentz) {CVE-2022-42896} - x86/pm: Add enumeration check before spec MSRs save/restore setup (Saeed Mirzamohammadi) - nvme: restrict management ioctls to admin (Keith Busch) - tcp/udp: Fix memory leak in ipv6_renew_options(). (Kuniyuki Iwashima) [Orabug: 34719346] {CVE-2022-3524} - iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() (Xiongfeng Wang) - pinctrl: single: Fix potential division by zero (Maxim Korotkov) - ASoC: ops: Fix bounds check for _sx controls (Mark Brown) - efi: random: Properly limit the size of the random seed (Ben Hutchings) - nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry() (ZhangPeng) - tools/vm/slabinfo-gnuplot: use 'grep -E' instead of 'egrep' (Tiezhu Yang) - btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit() (ChenXiaoSong) - perf: Add sample_flags to indicate the PMU-filled sample data (Kan Liang) - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (Yang Yingliang) - hwmon: (coretemp) Check for null before removing sysfs attrs (Phil Auld) - net: ethernet: renesas: ravb: Fix promiscuous mode after system resumed (Yoshihiro Shimoda) - packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE (Willem de Bruijn) - net: hsr: Fix potential use-after-free (YueHaibing) - dsa: lan9303: Correct stat name (Jerry Ray) - net/9p: Fix a potential socket leak in p9_socket_open (Wang Hai) - net: net_netdev: Fix error handling in ntb_netdev_init_module() (Yuan Can) - net: phy: fix null-ptr-deref while probe() failed (Yang Yingliang) - qlcnic: fix sleep-in-atomic-context bugs caused by msleep (Duoming Zhou) - can: cc770: cc770_isa_probe(): add missing free_cc770dev() (Zhang Changzhong) - can: sja1000_isa: sja1000_isa_probe(): add missing free_sja1000dev() (Zhang Changzhong) - net/mlx5: Fix uninitialized variable bug in outlen_write() (YueHaibing) - of: property: decrement node refcount in of_fwnode_get_reference_args() (Yang Yingliang) - hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails (Gaosheng Cui) - hwmon: (i5500_temp) fix missing pci_disable_device() (Yang Yingliang) - iio: light: rpr0521: add missing Kconfig dependencies (Paul Gazzillo) - iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw (Wei Yongjun) - iio: health: afe4403: Fix oob read in afe4403_read_raw (Wei Yongjun) - drm/amdgpu: always register an MMU notifier for userptr (Christian Konig) - net: usb: qmi_wwan: add Telit 0x103a composition (Enrico Sau) - tcp: configurable source port perturb table size (Gleb Mazovetskiy) - platform/x86: hp-wmi: Ignore Smart Experience App event (Kai-Heng Feng) - platform/x86: acer-wmi: Enable SW_TABLET_MODE on Switch V 10 (SW5-017) (Hans de Goede) - platform/x86: asus-wmi: add missing pci_dev_put() in asus_wmi_set_xusb2pr() (Xiongfeng Wang) - xen/platform-pci: add missing free_irq() in error path (ruanjinjie) - serial: 8250: 8250_omap: Avoid RS485 RTS glitch on ->set_termios() (Lukas Wunner) - Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode (Aman Dhoot) - nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty (Chen Zhongjin) - kconfig: display recursive dependency resolution hint just once (Masahiro Yamada) - iio: core: Fix entry not deleted when iio_register_sw_trigger_type() fails (Chen Zhongjin) - iio: light: apds9960: fix wrong register for gesture gain (Alejandro Concepcion Rodriguez) - arm64: dts: rockchip: lower rk3399-puma-haikou SD controller clock frequency (Jakob Unterwurzacher) - nios2: add FORCE for vmlinuz.gz (Randy Dunlap) - s390/crashdump: fix TOD programmable field size (Heiko Carstens) - net: thunderx: Fix the ACPI memory leak (Yu Liao) - nfc: st-nci: fix memory leaks in EVT_TRANSACTION (Martin Faltesek) - nfc: st-nci: fix incorrect validating logic in EVT_TRANSACTION (Martin Faltesek) - s390/dasd: fix no record found for raw_track_access (Stefan Haberland) - dccp/tcp: Reset saddr on failure after inet6?_hash_connect(). (Kuniyuki Iwashima) - NFC: nci: fix memory leak in nci_rx_data_packet() (Liu Shixin) - xfrm: Fix ignored return value in xfrm6_init() (Chen Zhongjin) - net/qla3xxx: fix potential memleak in ql3xxx_send() (Zhang Changzhong) - net/mlx4: Check retval of mlx4_bitmap_init (Peter Kosyh) - ARM: mxs: fix memory leak in mxs_machine_init() (Zheng Yongjun) - 9p/fd: fix issue of list_del corruption in p9_fd_cancel() (Zhengchao Shao) - net: pch_gbe: fix potential memleak in pch_gbe_tx_queue() (Wang Hai) - nfc/nci: fix race with opening and closing (Lin Ma) - ARM: dts: at91: sam9g20ek: enable udc vbus gpio pinctrl (Michael Grzeschik) - bus: sunxi-rsb: Support atomic transfers (Samuel Holland) - ARM: dts: am335x-pcm-953: Define fixed regulators in root node (Dominik Haller) - af_key: Fix send_acquire race with pfkey_register (Herbert Xu) - MIPS: pic32: treat port as signed integer (Jason A. Donenfeld) - spi: stm32: fix stm32_spi_prepare_mbr() that halves spi clk for every run (Sean Nyekjaer) - wifi: mac80211: Fix ack frame idr leak when mesh has no route (Nicolas Cavallari) - audit: fix undefined behavior in bit shift for AUDIT_BIT (Gaosheng Cui) - wifi: mac80211_hwsim: fix debugfs attribute ps with rc table support (Jonas Jelonek) - LTS version: v4.14.300 (Saeed Mirzamohammadi) - ntfs: check overflow when iterating ATTR_RECORDs (Hawkins Jiawei) - ntfs: fix out-of-bounds read in ntfs_attr_find() (Hawkins Jiawei) - ntfs: fix use-after-free in ntfs_attr_find() (Hawkins Jiawei) - mm: fs: initialize fsdata passed to write_begin/write_end interface (Alexander Potapenko) - 9p/trans_fd: always use O_NONBLOCK read/write (Tetsuo Handa) - gfs2: Switch from strlcpy to strscpy (Andreas Gruenbacher) - gfs2: Check sb_bsize_shift after reading superblock (Andrew Price) - 9p: trans_fd/p9_conn_cancel: drop client lock earlier (Dominique Martinet) - kcm: close race conditions on sk_receive_queue (Cong Wang) - bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb() (Baisong Zhong) - kcm: avoid potential race in kcm_tx_work (Eric Dumazet) - tcp: cdg: allow tcp_cdg_release() to be called multiple times (Eric Dumazet) - macvlan: enforce a consistent minimal mtu (Eric Dumazet) - serial: 8250: Flush DMA Rx on RLSI (Ilpo Jarvinen) - nilfs2: fix use-after-free bug of ns_writer on remount (Ryusuke Konishi) - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (Alexander Potapenko) - mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put() (Xiongfeng Wang) - mmc: core: properly select voltage range without power cycle (Yann Gautier) - serial: 8250_lpss: Configure DMA also w/o DMA filter (Ilpo Jarvinen) - serial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs (Ilpo Jarvinen) - dm ioctl: fix misbehavior if list_versions races with module loading (Mikulas Patocka) - iio: pressure: ms5611: changed hardcoded SPI speed to value limited (Mitja Spes) - iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init() (Yang Yingliang) - iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger() (Yang Yingliang) - usb: chipidea: fix deadlock in ci_otg_del_timer (Duoming Zhou) - usb: add NO_LPM quirk for Realforce 87U Keyboard (Nicolas Dumazet) - USB: serial: option: add Fibocom FM160 0x0111 composition (Reinhard Speyerer) - USB: serial: option: add u-blox LARA-L6 modem (Davide Tronchin) - USB: serial: option: add u-blox LARA-R6 00B modem (Davide Tronchin) - USB: serial: option: remove old LARA-R6 PID (Davide Tronchin) - USB: serial: option: add Sierra Wireless EM9191 (Benoit Monin) - ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open() (Takashi Iwai) - ring_buffer: Do not deactivate non-existant pages (Daniil Tatianin) - ftrace: Fix null pointer dereference in ftrace_add_mod() (Xiu Jianfeng) - ftrace: Optimize the allocation for mcount entries (Wang Wensheng) - ftrace: Fix the possible incorrect kernel message (Wang Wensheng) - cifs: Fix wrong return value checking when GETFLAGS (Zhang Xiaoxu) - net/x25: Fix skb leak in x25_lapb_receive_frame() (Wei Yongjun) - drbd: use after free in drbd_create_device() (Dan Carpenter) - xen/pcpu: fix possible memory leak in register_pcpu() (Yang Yingliang) - net: caif: fix double disconnect client in chnl_net_open() (Zhengchao Shao) - mISDN: fix misuse of put_device() in mISDN_register_device() (Wang ShaoBo) - mISDN: fix possible memory leak in mISDN_dsp_element_register() (Yang Yingliang) - net: bgmac: Drop free_netdev() from bgmac_enet_remove() (Wei Yongjun) - pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map (Zeng Heng) - parport_pc: Avoid FIFO port location truncation (Maciej W. Rozycki) - block: sed-opal: kmalloc the cmd/resp buffers (Serge Semin) - ASoC: soc-utils: Remove __exit for snd_soc_util_exit() (Chen Zhongjin) - tty: n_gsm: fix sleep-in-atomic-context bug in gsm_control_send (Duoming Zhou) - serial: 8250: omap: Flush PM QOS work on remove (Tony Lindgren) - serial: 8250_omap: remove wait loop from Errata i202 workaround (Matthias Schiffer) - ASoC: core: Fix use-after-free in snd_soc_exit() (Chen Zhongjin) - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (Luiz Augusto von Dentz) - drm/imx: imx-tve: Fix return type of imx_tve_connector_mode_valid (Nathan Huckleberry) - selftests/futex: fix build for clang (Ricardo Canuelo) - x86/cpu: Restore AMD's DE_CFG MSR after resume (Borislav Petkov) - dmaengine: at_hdmac: Check return code of dma_async_device_register (Tudor Ambarus) - dmaengine: at_hdmac: Fix impossible condition (Tudor Ambarus) - dmaengine: at_hdmac: Don't allow CPU to reorder channel enable (Tudor Ambarus) - dmaengine: at_hdmac: Fix completion of unissued descriptor in case of errors (Tudor Ambarus) - dmaengine: at_hdmac: Don't start transactions at tx_submit level (Tudor Ambarus) - dmaengine: at_hdmac: Fix at_lli struct definition (Tudor Ambarus) - cert host tools: Stop complaining about deprecated OpenSSL functions (Linus Torvalds) - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (ZhangPeng) - btrfs: selftests: fix wrong error check in btrfs_free_dummy_root() (Zhang Xiaoxu) - platform/x86: hp_wmi: Fix rfkill causing soft blocked wifi (Jorge Lopez) - drm/i915/dmabuf: fix sg_table handling in map_dma_buf (Matthew Auld) - nilfs2: fix deadlock in nilfs_count_free_blocks() (Ryusuke Konishi) - ALSA: usb-audio: Add quirk entry for M-Audio Micro (Takashi Iwai) - ALSA: hda: fix potential memleak in 'add_widget_node' (Ye Bin) - arm64: efi: Fix handling of misaligned runtime regions and drop warning (Ard Biesheuvel) - net: macvlan: fix memory leaks of macvlan_common_newlink (Chuang Wang) - net: mv643xx_eth: disable napi when init rxq or txq failed in mv643xx_eth_open() (Zhengchao Shao) - ethernet: s2io: disable napi when start nic failed in s2io_card_up() (Zhengchao Shao) - net: cxgb3_main: disable napi when bind qsets failed in cxgb_up() (Zhengchao Shao) - drivers: net: xgene: disable napi when register irq failed in xgene_enet_open() (Zhengchao Shao) - dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove() (Christophe JAILLET) - tipc: fix the msg->req tlv len check in tipc_nl_compat_name_table_dump_header (Xin Long) - ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network (Alexander Potapenko) - drm/vc4: Fix missing platform_unregister_drivers() call in vc4_drm_register() (Yuan Can) - hamradio: fix issue of dev reference count leakage in bpq_device_event() (Zhengchao Shao) - net: lapbether: fix issue of dev reference count leakage in lapbeth_device_event() (Zhengchao Shao) - capabilities: fix undefined behavior in bit shift for CAP_TO_MASK (Gaosheng Cui) - net: fman: Unregister ethernet device on removal (Sean Anderson) - bnxt_en: fix potentially incorrect return value for ndo_rx_flow_steer (Alex Barba) - net: gso: fix panic on frag_list with mixed head alloc types (Jiri Benc) - HID: hyperv: fix possible memory leak in mousevsc_probe() (Yang Yingliang) - LTS version: v4.14.299 (Saeed Mirzamohammadi) - wifi: brcmfmac: Fix potential buffer overflow in brcmf_fweh_event_worker() (Dokyung Song) - linux/const.h: move UL() macro to include/linux/const.h (Masahiro Yamada) - linux/const.h: prefix include guard of uapi/linux/const.h with _UAPI (Masahiro Yamada) - KVM: x86: emulator: update the emulation mode after CR0 write (Maxim Levitsky) - KVM: x86: emulator: introduce emulator_recalc_and_set_mode (Maxim Levitsky) - KVM: x86: emulator: em_sysexit should update ctxt->mode (Maxim Levitsky) - KVM: x86: Mask off reserved bits in CPUID.80000008H (Jim Mattson) - ext4: fix warning in 'ext4_da_release_space' (Ye Bin) - parisc: Export iosapic_serial_irq() symbol for serial port driver (Helge Deller) - parisc: Make 8250_gsc driver dependend on CONFIG_PARISC (Helge Deller) - efi: random: reduce seed size to 32 bytes (Ard Biesheuvel) - ALSA: usb-audio: Add quirks for MacroSilicon MS2100/MS2106 devices (John Veness) - capabilities: fix potential memleak on error path from vfs_getxattr_alloc() (Gaosheng Cui) - tcp/udp: Make early_demux back namespacified. (Kuniyuki Iwashima) - btrfs: fix type of parameter generation in btrfs_get_dentry (David Sterba) - block, bfq: protect 'bfqd->queued' by 'bfqd->lock' (Yu Kuai) - Bluetooth: L2CAP: Fix attempting to access uninitialized memory (Luiz Augusto von Dentz) {CVE-2022-42895} - i2c: xiic: Add platform module alias (Martin Tuma) - media: dvb-frontends/drxk: initialize err to 0 (Hans Verkuil) - media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE (Hans Verkuil) - net, neigh: Fix null-ptr-deref in neigh_table_clear() (Chen Zhongjin) - net: mdio: fix undefined behavior in bit shift for __mdiobus_register (Gaosheng Cui) - Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del() (Zhengchao Shao) - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Maxim Mikityanskiy) - btrfs: fix ulist leaks in error paths of qgroup self tests (Filipe Manana) - btrfs: fix inode list leak during backref walking at resolve_indirect_refs() (Filipe Manana) - isdn: mISDN: netjet: fix wrong check of device registration (Yang Yingliang) - mISDN: fix possible memory leak in mISDN_register_device() (Yang Yingliang) - rose: Fix NULL pointer dereference in rose_send_frame() (Zhang Qilong) - ipvs: use explicitly signed chars (Jason A. Donenfeld) - net: sched: Fix use after free in red_enqueue() (Dan Carpenter) - ata: pata_legacy: fix pdc20230_set_piomode() (Sergey Shtylyov) - net: fec: fix improper use of NETDEV_TX_BUSY (Zhang Changzhong) - nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send() (Shang XiaoJing) - nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send() (Shang XiaoJing) - net: dsa: Fix possible memory leaks in dsa_loop_init() (Chen Zhongjin) - nfs4: Fix kmemleak when allocate slot failed (Zhang Xiaoxu) - NFSv4.1: We must always send RECLAIM_COMPLETE after a reboot (Trond Myklebust) - NFSv4.1: Handle RECLAIM_COMPLETE trunking errors (Trond Myklebust) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-3640 CVE-2022-3303 CVE-2022-42895 CVE-2022-3524 CVE-2022-42896 Oracle Linux 7 Oracle Linux 8 [5.4.17-2136.316.7] - runtime revert of virtio_net: Stripe queue affinities across cores. (Konrad Rzeszutek Wilk) [Orabug: 35001045] [5.4.17-2136.316.6] - block: Change the granularity of io ticks from ms to ns (Gulam Mohamed) [Orabug: 34780807] - powercap: intel_rapl: support new layout of Psys PowerLimit Register on SPR (Zhang Rui) [Orabug: 34953089] - block-mq: fix hung due to too much warning log (Junxiao Bi) [Orabug: 34979810] - usb: dwc3: core: fix kernel panic when do reboot (Peter Chen) [Orabug: 34988646] - usb: dwc3: debugfs: Add and remove endpoint dirs dynamically (Jack Pham) [Orabug: 34988646] [5.4.17-2136.316.5] - net/rds: Fill in rds_exthdr_size gaps (Gerd Rausch) [Orabug: 34979171] [5.4.17-2136.316.4] - Revert 'RDS: TCP: Track peer's connection generation number' (Gerd Rausch) [Orabug: 34700110] - net/rds: Trigger rds_send_hs_ping() more than once (Gerd Rausch) [Orabug: 34607845] - net/rds: Kick-start TCP receiver after accept (Gerd Rausch) [Orabug: 34600820] - net/rds: Use the first lane until RDS_EXTHDR_NPATHS arrives (Gerd Rausch) [Orabug: 34314503] - net/rds: Encode cp_index in TCP source port (Gerd Rausch) [Orabug: 34556038] - net/rds: rds_tcp_conn_path_shutdown must not discard messages (Gerd Rausch) [Orabug: 34560701] - IB/mlx5: Add a signature check to received EQEs and CQEs (Rohit Nair) [Orabug: 34821074] - vhost-scsi: Fix max number of virtqueues (Mike Christie) [Orabug: 34915128] - uek-rpm: Add nft_reject* modules to nano rpm. (Somasundaram Krishnasamy) [Orabug: 34966035] - rds: ib: Avoid tear-down of caches unless already initialized (Hakon Bugge) [Orabug: 34830755] - x86/kexec: Do not reserve EFI setup_data in the kexec e820 table (Dave Young) [Orabug: 34864098] - KVM: SVM: Fix AVIC GATag to support max number of vCPUs (Suravee Suthikulpanit) [Orabug: 34961704] [5.4.17-2136.316.3] - LTS tag: v5.4.228 (Sherry Yang) - ASoC: ops: Correct bounds check for second channel on SX controls (Charles Keepax) - can: mcba_usb: Fix termination command argument (Yasushi SHOJI) - can: sja1000: fix size of OCR_MODE_MASK define (Heiko Schocher) - pinctrl: meditatek: Startup with the IRQs disabled (Ricardo Ribalda) - ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx() (Mark Brown) - nfp: fix use-after-free in area_cache_get() (Jialiang Wang) - block: unhash blkdev part inode when the part is deleted (Ming Lei) - mm/hugetlb: fix races when looking up a CONT-PTE/PMD size hugetlb page (Baolin Wang) - x86/smpboot: Move rcu_cpu_starting() earlier (Paul E. McKenney) - net: bpf: Allow TC programs to call BPF_FUNC_skb_change_head (Lorenzo Colitti) - LTS tag: v5.4.227 (Sherry Yang) - can: esd_usb: Allow REC and TEC to return to zero (Frank Jungclaus) - net: mvneta: Fix an out of bounds check (Dan Carpenter) - ipv6: avoid use-after-free in ip6_fragment() (Eric Dumazet) - net: plip: don't call kfree_skb/dev_kfree_skb() under spin_lock_irq() (Yang Yingliang) - xen/netback: fix build warning (Juergen Gross) - ethernet: aeroflex: fix potential skb leak in greth_init_rings() (Zhang Changzhong) - ipv4: Fix incorrect route flushing when table ID 0 is used (Ido Schimmel) - ipv4: Fix incorrect route flushing when source address is deleted (Ido Schimmel) - tipc: Fix potential OOB in tipc_link_proto_rcv() (YueHaibing) - net: hisilicon: Fix potential use-after-free in hix5hd2_rx() (Liu Jian) - net: hisilicon: Fix potential use-after-free in hisi_femac_rx() (Liu Jian) - net: thunderx: Fix missing destroy_workqueue of nicvf_rx_mode_wq (Yongqiang Liu) - net: stmmac: fix 'snps,axi-config' node property parsing (Jisheng Zhang) - nvme initialize core quirks before calling nvme_init_subsystem (Pankaj Raghav) - NFC: nci: Bounds check struct nfc_target arrays (Kees Cook) - i40e: Disallow ip4 and ip6 l4_4_bytes (Przemyslaw Patynowski) - i40e: Fix for VF MAC address 0 (Sylwester Dziedziuch) - i40e: Fix not setting default xps_cpus after reset (Michal Jaron) - net: mvneta: Prevent out of bounds read in mvneta_config_rss() (Dan Carpenter) - xen-netfront: Fix NULL sring after live migration (Lin Liu) - net: encx24j600: Fix invalid logic in reading of MISTAT register (Valentina Goncharenko) - net: encx24j600: Add parentheses to fix precedence (Valentina Goncharenko) - mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add() (Wei Yongjun) - selftests: rtnetlink: correct xfrm policy rule in kci_test_ipsec_offload (Zhengchao Shao) - net: dsa: ksz: Check return value (Artem Chernyshev) - Bluetooth: Fix not cleanup led when bt_init fails (Chen Zhongjin) - Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn() (Wang ShaoBo) - af_unix: Get user_ns from in_skb in unix_diag_get_exact(). (Kuniyuki Iwashima) - igb: Allocate MSI-X vector when testing (Akihiko Odaki) - e1000e: Fix TX dispatch condition (Akihiko Odaki) - gpio: amd8111: Fix PCI device reference count leak (Xiongfeng Wang) - drm/bridge: ti-sn65dsi86: Fix output polarity setting bug (Qiqi Zhang) - ca8210: Fix crash by zero initializing data (Hauke Mehrtens) - ieee802154: cc2520: Fix error return code in cc2520_hw_init() (Ziyang Xuan) - can: af_can: fix NULL pointer dereference in can_rcv_filter (Oliver Hartkopp) - HID: core: fix shift-out-of-bounds in hid_report_raw_event (ZhangPeng) - HID: hid-lg4ff: Add check for empty lbuf (Anastasia Belova) - HID: usbhid: Add ALWAYS_POLL quirk for some mice (Ankit Patel) - drm/shmem-helper: Remove errant put in error path (Rob Clark) - KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) - mm/gup: fix gup_pud_range() for dax (John Starks) - memcg: fix possible use-after-free in memcg_write_event_control() (Tejun Heo) - media: v4l2-dv-timings.c: fix too strict blanking sanity checks (Hans Verkuil) - Revert 'net: dsa: b53: Fix valid setting for MDB entries' (Rafal Milecki) - xen/netback: don't call kfree_skb() with interrupts disabled (Juergen Gross) - xen/netback: do some code cleanup (Juergen Gross) - xen/netback: Ensure protocol headers don't fall in the non-linear area (Ross Lagerwall) - mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths (Jann Horn) - mm/khugepaged: fix GUP-fast interaction by sending IPI (Jann Horn) - mm/khugepaged: take the right locks for page table retraction (Jann Horn) - net: usb: qmi_wwan: add u-blox 0x1342 composition (Davide Tronchin) - 9p/xen: check logical size for buffer size (Dominique Martinet) - fbcon: Use kzalloc() in fbcon_prepare_logo() (Tetsuo Handa) - regulator: twl6030: fix get status of twl6032 regulators (Andreas Kemnade) - ASoC: soc-pcm: Add NULL check in BE reparenting (Srinivasa Rao Mandadapu) - btrfs: send: avoid unaligned encoded writes when attempting to clone range (Filipe Manana) - ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event (Kees Cook) - regulator: slg51000: Wait after asserting CS pin (Konrad Dybcio) - 9p/fd: Use P9_HDRSZ for header size (GUO Zihua) - ARM: dts: rockchip: disable arm_global_timer on rk3066 and rk3188 (Johan Jonker) - ARM: 9266/1: mm: fix no-MMU ZERO_PAGE() implementation (Giulio Benetti) - ARM: 9251/1: perf: Fix stacktraces for tracepoint events in THUMB2 kernels (Tomislav Novak) - ARM: dts: rockchip: rk3188: fix lcdc1-rgb24 node name (Johan Jonker) - ARM: dts: rockchip: fix ir-receiver node names (Johan Jonker) - arm: dts: rockchip: fix node name for hym8563 rtc (Sebastian Reichel) - arm64: dts: rockchip: keep I2S1 disabled for GPIO function on ROCK Pi 4 series (FUKAUMI Naoki) - LTS tag: v5.4.226 (Sherry Yang) - ipc/sem: Fix dangling sem_array access in semtimedop race (Jann Horn) - v4l2: don't fall back to follow_pfn() if pin_user_pages_fast() fails (Linus Torvalds) - mmc: sdhci: Fix voltage switch delay (Adrian Hunter) - mmc: sdhci: use FIELD_GET for preset value bit masks (Masahiro Yamada) - char: tpm: Protect tpm_pm_suspend with locks (Jan Dabros) - Revert 'clocksource/drivers/riscv: Events are stopped during CPU suspend' (Conor Dooley) - x86/ioremap: Fix page aligned size calculation in __ioremap_caller() (Michael Kelley) - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (Luiz Augusto von Dentz) {CVE-2022-42896} - x86/pm: Add enumeration check before spec MSRs save/restore setup (Pawan Gupta) - x86/tsx: Add a feature bit for TSX control MSR support (Pawan Gupta) - nvme: ensure subsystem reset is single threaded (Keith Busch) - nvme: restrict management ioctls to admin (Keith Busch) - epoll: check for events when removing a timed out thread from the wait queue (Soheil Hassas Yeganeh) - epoll: call final ep_events_available() check under the lock (Roman Penyaev) - ipv4: Fix route deletion when nexthop info is not specified (Ido Schimmel) - ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference (David Ahern) - selftests: net: fix nexthop warning cleanup double ip typo (Nikolay Aleksandrov) - selftests: net: add delete nexthop route warning test (Nikolay Aleksandrov) - Kconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is enabled (Lee Jones) - parisc: Increase FRAME_WARN to 2048 bytes on parisc (Helge Deller) - xtensa: increase size of gcc stack frame check (Guenter Roeck) - parisc: Increase size of gcc stack frame check (Helge Deller) - iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() (Xiongfeng Wang) - pinctrl: single: Fix potential division by zero (Maxim Korotkov) - ASoC: ops: Fix bounds check for _sx controls (Mark Brown) - mm: Fix '.data.once' orphan section warning (Nathan Chancellor) - arm64: errata: Fix KVM Spectre-v2 mitigation selection for Cortex-A57/A72 (James Morse) - arm64: Fix panic() when Spectre-v2 causes Spectre-BHB to re-allocate KVM vectors (James Morse) - tracing: Free buffers when a used dynamic event is removed (Steven Rostedt (Google)) - mmc: sdhci-sprd: Fix no reset data and command after voltage switch (Wenchao Chen) - mmc: sdhci-esdhc-imx: correct CQHCI exit halt state check (Sebastian Falbesoner) - mmc: core: Fix ambiguous TRIM and DISCARD arg (Christian Lohle) - mmc: mmc_test: Fix removal of debugfs file (Ye Bin) - pinctrl: intel: Save and restore pins in 'direct IRQ' mode (Andy Shevchenko) - nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry() (ZhangPeng) - tools/vm/slabinfo-gnuplot: use 'grep -E' instead of 'egrep' (Tiezhu Yang) - error-injection: Add prompt for function error injection (Steven Rostedt (Google)) - net/mlx5: DR, Fix uninitialized var warning (YueHaibing) - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (Yang Yingliang) - hwmon: (coretemp) Check for null before removing sysfs attrs (Phil Auld) - net: ethernet: renesas: ravb: Fix promiscuous mode after system resumed (Yoshihiro Shimoda) - sctp: fix memory leak in sctp_stream_outq_migrate() (Zhengchao Shao) - packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE (Willem de Bruijn) - net: tun: Fix use-after-free in tun_detach() (Shigeru Yoshida) - afs: Fix fileserver probe RTT handling (David Howells) - net: hsr: Fix potential use-after-free (YueHaibing) - dsa: lan9303: Correct stat name (Jerry Ray) - net: ethernet: nixge: fix NULL dereference (Yuri Karpov) - net/9p: Fix a potential socket leak in p9_socket_open (Wang Hai) - net: net_netdev: Fix error handling in ntb_netdev_init_module() (Yuan Can) - net: phy: fix null-ptr-deref while probe() failed (Yang Yingliang) - wifi: cfg80211: fix buffer overflow in elem comparison (Johannes Berg) - qlcnic: fix sleep-in-atomic-context bugs caused by msleep (Duoming Zhou) - can: cc770: cc770_isa_probe(): add missing free_cc770dev() (Zhang Changzhong) - can: sja1000_isa: sja1000_isa_probe(): add missing free_sja1000dev() (Zhang Changzhong) - net/mlx5e: Fix use-after-free when reverting termination table (Roi Dayan) - net/mlx5: Fix uninitialized variable bug in outlen_write() (YueHaibing) - of: property: decrement node refcount in of_fwnode_get_reference_args() (Yang Yingliang) - hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails (Gaosheng Cui) - hwmon: (i5500_temp) fix missing pci_disable_device() (Yang Yingliang) - scripts/faddr2line: Fix regression in name resolution on ppc64le (Srikar Dronamraju) - iio: light: rpr0521: add missing Kconfig dependencies (Paul Gazzillo) - iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw (Wei Yongjun) - iio: health: afe4403: Fix oob read in afe4403_read_raw (Wei Yongjun) - btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit() (ChenXiaoSong) - drm/amdgpu: Partially revert 'drm/amdgpu: update drm_display_info correctly when the edid is read' (Alex Deucher) - drm/amdgpu: update drm_display_info correctly when the edid is read (Claudio Suarez) - btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker (Nikolay Borisov) - spi: spi-imx: Fix spi_bus_clk if requested clock is higher than input clock (Frieder Schrempf) - btrfs: free btrfs_path before copying inodes to userspace (Anand Jain) - fuse: lock inode unconditionally in fuse_fallocate() (Miklos Szeredi) - drm/i915: fix TLB invalidation for Gen12 video and compute engines (Andrzej Hajda) {CVE-2022-4139} - drm/amdgpu: always register an MMU notifier for userptr (Christian Konig) - drm/amd/dc/dce120: Fix audio register mapping, stop triggering KASAN (Lyude Paul) - btrfs: sysfs: normalize the error handling branch in btrfs_init_sysfs() (Zhen Lei) - btrfs: free btrfs_path before copying subvol info to userspace (Anand Jain) - btrfs: free btrfs_path before copying fspath to userspace (Anand Jain) - btrfs: free btrfs_path before copying root refs to userspace (Josef Bacik) - binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0 (Alessandro Astone) - binder: Address corner cases in deferred copy and fixup (Alessandro Astone) - binder: fix pointer cast warning (Arnd Bergmann) - binder: defer copies of pre-patched txn data (Todd Kjos) - binder: read pre-translated fds from sender buffer (Todd Kjos) - binder: avoid potential data leakage when copying txn (Todd Kjos) - dm integrity: flush the journal on suspend (Mikulas Patocka) - net: usb: qmi_wwan: add Telit 0x103a composition (Enrico Sau) - tcp: configurable source port perturb table size (Gleb Mazovetskiy) - platform/x86: hp-wmi: Ignore Smart Experience App event (Kai-Heng Feng) - platform/x86: acer-wmi: Enable SW_TABLET_MODE on Switch V 10 (SW5-017) (Hans de Goede) - platform/x86: asus-wmi: add missing pci_dev_put() in asus_wmi_set_xusb2pr() (Xiongfeng Wang) - xen/platform-pci: add missing free_irq() in error path (ruanjinjie) - serial: 8250: 8250_omap: Avoid RS485 RTS glitch on ->set_termios() (Lukas Wunner) - ASoC: Intel: bytcht_es8316: Add quirk for the Nanote UMPC-01 (Hans de Goede) - Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode (Aman Dhoot) - gcov: clang: fix the buffer overflow issue (Mukesh Ojha) - nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty (Chen Zhongjin) - firmware: coreboot: Register bus in module init (Brian Norris) - firmware: google: Release devices before unregistering the bus (Patrick Rudolph) - ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) - ceph: do not update snapshot context when there is no new snapshot (Xiubo Li) - iio: pressure: ms5611: fixed value compensation bug (Mitja Spes) - iio: ms5611: Simplify IO callback parameters (Lars-Peter Clausen) - nios2: add FORCE for vmlinuz.gz (Randy Dunlap) - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Alexandre Belloni) - iio: core: Fix entry not deleted when iio_register_sw_trigger_type() fails (Chen Zhongjin) - iio: light: apds9960: fix wrong register for gesture gain (Alejandro Concepcion Rodriguez) - arm64: dts: rockchip: lower rk3399-puma-haikou SD controller clock frequency (Jakob Unterwurzacher) - usb: dwc3: exynos: Fix remove() function (Marek Szyprowski) - lib/vdso: use 'grep -E' instead of 'egrep' (Greg Kroah-Hartman) - s390/crashdump: fix TOD programmable field size (Heiko Carstens) - net: thunderx: Fix the ACPI memory leak (Yu Liao) - nfc: st-nci: fix memory leaks in EVT_TRANSACTION (Martin Faltesek) - nfc: st-nci: fix incorrect validating logic in EVT_TRANSACTION (Martin Faltesek) - s390/dasd: fix no record found for raw_track_access (Stefan Haberland) - dccp/tcp: Reset saddr on failure after inet6?_hash_connect(). (Kuniyuki Iwashima) - bnx2x: fix pci device refcount leak in bnx2x_vf_is_pcie_pending() (Yang Yingliang) - regulator: twl6030: re-add TWL6032_SUBCLASS (Andreas Kemnade) - NFC: nci: fix memory leak in nci_rx_data_packet() (Liu Shixin) - xfrm: Fix ignored return value in xfrm6_init() (Chen Zhongjin) - tipc: check skb_linearize() return value in tipc_disc_rcv() (YueHaibing) - tipc: add an extra conn_get in tipc_conn_alloc (Xin Long) - tipc: set con sock in tipc_conn_alloc (Xin Long) - net/mlx5: Fix FW tracer timestamp calculation (Moshe Shemesh) - Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register() (Yang Yingliang) - Drivers: hv: vmbus: fix double free in the error path of vmbus_add_channel_work() (Yang Yingliang) - nfp: add port from netdev validation for EEPROM access (Jaco Coetzee) - net: pch_gbe: fix pci device refcount leak while module exiting (Yang Yingliang) - net/qla3xxx: fix potential memleak in ql3xxx_send() (Zhang Changzhong) - net/mlx4: Check retval of mlx4_bitmap_init (Peter Kosyh) - ARM: mxs: fix memory leak in mxs_machine_init() (Zheng Yongjun) - 9p/fd: fix issue of list_del corruption in p9_fd_cancel() (Zhengchao Shao) - net: pch_gbe: fix potential memleak in pch_gbe_tx_queue() (Wang Hai) - nfc/nci: fix race with opening and closing (Lin Ma) - net: liquidio: simplify if expression (Leon Romanovsky) - ARM: dts: at91: sam9g20ek: enable udc vbus gpio pinctrl (Michael Grzeschik) - tee: optee: fix possible memory leak in optee_register_device() (Yang Yingliang) - bus: sunxi-rsb: Support atomic transfers (Samuel Holland) - regulator: core: fix UAF in destroy_regulator() (Yang Yingliang) - regulator: core: fix kobject release warning and memory leak in regulator_register() (Zeng Heng) - ASoC: sgtl5000: Reset the CHIP_CLK_CTRL reg on remove (Detlev Casanova) - ARM: dts: am335x-pcm-953: Define fixed regulators in root node (Dominik Haller) - af_key: Fix send_acquire race with pfkey_register (Herbert Xu) - MIPS: pic32: treat port as signed integer (Jason A. Donenfeld) - RISC-V: vdso: Do not add missing symbols to version section in linker script (Nathan Chancellor) - arm64/syscall: Include asm/ptrace.h in syscall_wrapper header. (Kuniyuki Iwashima) - block, bfq: fix null pointer dereference in bfq_bio_bfqg() (Yu Kuai) - drm: panel-orientation-quirks: Add quirk for Acer Switch V 10 (SW5-017) (Hans de Goede) - spi: stm32: fix stm32_spi_prepare_mbr() that halves spi clk for every run (Sean Nyekjaer) - wifi: mac80211: Fix ack frame idr leak when mesh has no route (Nicolas Cavallari) - audit: fix undefined behavior in bit shift for AUDIT_BIT (Gaosheng Cui) - wifi: mac80211_hwsim: fix debugfs attribute ps with rc table support (Jonas Jelonek) - wifi: mac80211: fix memory free error when registering wiphy fail (taozhang) - LTS tag: v5.4.225 (Sherry Yang) - ntfs: check overflow when iterating ATTR_RECORDs (Hawkins Jiawei) - ntfs: fix out-of-bounds read in ntfs_attr_find() (Hawkins Jiawei) - ntfs: fix use-after-free in ntfs_attr_find() (Hawkins Jiawei) - mm: fs: initialize fsdata passed to write_begin/write_end interface (Alexander Potapenko) - 9p/trans_fd: always use O_NONBLOCK read/write (Tetsuo Handa) - gfs2: Switch from strlcpy to strscpy (Andreas Gruenbacher) - gfs2: Check sb_bsize_shift after reading superblock (Andrew Price) - 9p: trans_fd/p9_conn_cancel: drop client lock earlier (Dominique Martinet) - kcm: close race conditions on sk_receive_queue (Cong Wang) - bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb() (Baisong Zhong) - kcm: avoid potential race in kcm_tx_work (Eric Dumazet) - tcp: cdg: allow tcp_cdg_release() to be called multiple times (Eric Dumazet) - macvlan: enforce a consistent minimal mtu (Eric Dumazet) - Input: i8042 - fix leaking of platform device on module removal (Chen Jun) - kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case (Li Huafei) - scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus() (Yang Yingliang) - ring-buffer: Include dropped pages in counting dirty patches (Steven Rostedt (Google)) - serial: 8250: Flush DMA Rx on RLSI (Ilpo Jarvinen) - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (Alexander Potapenko) - docs: update mediator contact information in CoC doc (Shuah Khan) - mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put() (Xiongfeng Wang) - mmc: sdhci-pci-o2micro: fix card detect fail issue caused by CD# debounce timeout (Chevron Li) - mmc: core: properly select voltage range without power cycle (Yann Gautier) - scsi: zfcp: Fix double free of FSF request when qdio send fails (Benjamin Block) - Input: iforce - invert valid length check when fetching device IDs (Tetsuo Handa) - serial: 8250_lpss: Configure DMA also w/o DMA filter (Ilpo Jarvinen) - serial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs (Ilpo Jarvinen) - dm ioctl: fix misbehavior if list_versions races with module loading (Mikulas Patocka) - iio: pressure: ms5611: changed hardcoded SPI speed to value limited (Mitja Spes) - iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init() (Yang Yingliang) - iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger() (Yang Yingliang) - usb: chipidea: fix deadlock in ci_otg_del_timer (Duoming Zhou) - usb: add NO_LPM quirk for Realforce 87U Keyboard (Nicolas Dumazet) - USB: serial: option: add Fibocom FM160 0x0111 composition (Reinhard Speyerer) - USB: serial: option: add u-blox LARA-L6 modem (Davide Tronchin) - USB: serial: option: add u-blox LARA-R6 00B modem (Davide Tronchin) - USB: serial: option: remove old LARA-R6 PID (Davide Tronchin) - USB: serial: option: add Sierra Wireless EM9191 (Benoit Monin) - speakup: fix a segfault caused by switching consoles (Mushahid Hussain) - slimbus: stream: correct presence rate frequencies (Krzysztof Kozlowski) - Revert 'usb: dwc3: disable USB core PHY management' (Johan Hovold) - ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open() (Takashi Iwai) - ring_buffer: Do not deactivate non-existant pages (Daniil Tatianin) - ftrace: Fix null pointer dereference in ftrace_add_mod() (Xiu Jianfeng) - ftrace: Optimize the allocation for mcount entries (Wang Wensheng) - ftrace: Fix the possible incorrect kernel message (Wang Wensheng) - cifs: add check for returning value of SMB2_set_info_init (Anastasia Belova) - net: thunderbolt: Fix error handling in tbnet_init() (Yuan Can) - cifs: Fix wrong return value checking when GETFLAGS (Zhang Xiaoxu) - net/x25: Fix skb leak in x25_lapb_receive_frame() (Wei Yongjun) - platform/x86/intel: pmc: Don't unconditionally attach Intel PMC when virtualized (Roger Pau Monne) - drbd: use after free in drbd_create_device() (Dan Carpenter) - xen/pcpu: fix possible memory leak in register_pcpu() (Yang Yingliang) - bnxt_en: Remove debugfs when pci_register_driver failed (Gaosheng Cui) - net: caif: fix double disconnect client in chnl_net_open() (Zhengchao Shao) - net: macvlan: Use built-in RCU list checking (Chuang Wang) - net: liquidio: release resources when liquidio driver open failed (Zhengchao Shao) - mISDN: fix possible memory leak in mISDN_dsp_element_register() (Yang Yingliang) - net: bgmac: Drop free_netdev() from bgmac_enet_remove() (Wei Yongjun) - ata: libata-transport: fix double ata_host_put() in ata_tport_add() (Yang Yingliang) - arm64: dts: imx8mn: Fix NAND controller size-cells (Marek Vasut) - arm64: dts: imx8mm: Fix NAND controller size-cells (Marek Vasut) - pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map (Zeng Heng) - parport_pc: Avoid FIFO port location truncation (Maciej W. Rozycki) - siox: fix possible memory leak in siox_device_add() (Yang Yingliang) - block: sed-opal: kmalloc the cmd/resp buffers (Serge Semin) - ASoC: soc-utils: Remove __exit for snd_soc_util_exit() (Chen Zhongjin) - tty: n_gsm: fix sleep-in-atomic-context bug in gsm_control_send (Duoming Zhou) - serial: imx: Add missing .thaw_noirq hook (Shawn Guo) - serial: 8250: omap: Flush PM QOS work on remove (Tony Lindgren) - serial: 8250: omap: Fix unpaired pm_runtime_put_sync() in omap8250_remove() (Tony Lindgren) - serial: 8250_omap: remove wait loop from Errata i202 workaround (Matthias Schiffer) - ASoC: core: Fix use-after-free in snd_soc_exit() (Chen Zhongjin) - spi: stm32: Print summary 'callbacks suppressed' message (Marek Vasut) - ASoC: codecs: jz4725b: Fix spelling mistake 'Sourc' -> 'Source', 'Routee' -> 'Route' (Colin Ian King) - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (Luiz Augusto von Dentz) - btrfs: remove pointless and double ulist frees in error paths of qgroup tests (Filipe Manana) - drm/imx: imx-tve: Fix return type of imx_tve_connector_mode_valid (Nathan Huckleberry) - i2c: i801: add lis3lv02d's I2C address for Vostro 5568 (Nam Cao) - NFSv4: Retry LOCK on OLD_STATEID during delegation return (Benjamin Coddington) - selftests/intel_pstate: fix build for ARCH=x86_64 (Ricardo Canuelo) - selftests/futex: fix build for clang (Ricardo Canuelo) - ASoC: codecs: jz4725b: fix capture selector naming (Siarhei Volkau) - ASoC: codecs: jz4725b: use right control for Capture Volume (Siarhei Volkau) - ASoC: codecs: jz4725b: fix reported volume for Master ctl (Siarhei Volkau) - ASoC: codecs: jz4725b: add missed Line In power control bit (Siarhei Volkau) - spi: intel: Fix the offset to get the 64K erase opcode (Mauro Lima) - ASoC: wm8962: Add an event handler for TEMP_HP and TEMP_SPK (Xiaolei Wang) - x86/cpu: Restore AMD's DE_CFG MSR after resume (Borislav Petkov) - net: tun: call napi_schedule_prep() to ensure we own a napi (Eric Dumazet) - dmaengine: at_hdmac: Check return code of dma_async_device_register (Tudor Ambarus) - dmaengine: at_hdmac: Fix impossible condition (Tudor Ambarus) - dmaengine: at_hdmac: Don't allow CPU to reorder channel enable (Tudor Ambarus) - dmaengine: at_hdmac: Fix completion of unissued descriptor in case of errors (Tudor Ambarus) - dmaengine: at_hdmac: Don't start transactions at tx_submit level (Tudor Ambarus) - dmaengine: at_hdmac: Fix at_lli struct definition (Tudor Ambarus) - cert host tools: Stop complaining about deprecated OpenSSL functions (Linus Torvalds) - can: j1939: j1939_send_one(): fix missing CAN header initialization (Oliver Hartkopp) - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (ZhangPeng) - btrfs: selftests: fix wrong error check in btrfs_free_dummy_root() (Zhang Xiaoxu) - platform/x86: hp_wmi: Fix rfkill causing soft blocked wifi (Jorge Lopez) - drm/i915/dmabuf: fix sg_table handling in map_dma_buf (Matthew Auld) - nilfs2: fix use-after-free bug of ns_writer on remount (Ryusuke Konishi) - nilfs2: fix deadlock in nilfs_count_free_blocks() (Ryusuke Konishi) - vmlinux.lds.h: Fix placement of '.data..decrypted' section (Nathan Chancellor) - ALSA: usb-audio: Add DSD support for Accuphase DAC-60 (Jussi Laako) - ALSA: usb-audio: Add quirk entry for M-Audio Micro (Takashi Iwai) - ALSA: hda: fix potential memleak in 'add_widget_node' (Ye Bin) - ALSA: hda/ca0132: add quirk for EVGA Z390 DARK (Xian Wang) - mmc: sdhci-tegra: Fix SDHCI_RESET_ALL for CQHCI (Brian Norris) - mmc: sdhci-of-arasan: Fix SDHCI_RESET_ALL for CQHCI (Brian Norris) - mmc: cqhci: Provide helper for resetting both SDHCI and CQHCI (Brian Norris) - MIPS: jump_label: Fix compat branch range check (Jiaxun Yang) - arm64: efi: Fix handling of misaligned runtime regions and drop warning (Ard Biesheuvel) - riscv: process: fix kernel info leakage (Jisheng Zhang) - net: macvlan: fix memory leaks of macvlan_common_newlink (Chuang Wang) - ethernet: tundra: free irq when alloc ring failed in tsi108_open() (Zhengchao Shao) - net: mv643xx_eth: disable napi when init rxq or txq failed in mv643xx_eth_open() (Zhengchao Shao) - ethernet: s2io: disable napi when start nic failed in s2io_card_up() (Zhengchao Shao) - cxgb4vf: shut down the adapter when t4vf_update_port_info() failed in cxgb4vf_open() (Zhengchao Shao) - net: cxgb3_main: disable napi when bind qsets failed in cxgb_up() (Zhengchao Shao) - net: cpsw: disable napi in cpsw_ndo_open() (Zhengchao Shao) - net/mlx5: Allow async trigger completion execution on single CPU systems (Roy Novich) - net: nixge: disable napi when enable interrupts failed in nixge_open() (Zhengchao Shao) - perf stat: Fix printing os->prefix in CSV metrics output (Athira Rajeev) - drivers: net: xgene: disable napi when register irq failed in xgene_enet_open() (Zhengchao Shao) - dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove() (Christophe JAILLET) - dmaengine: pxa_dma: use platform_get_irq_optional (Doug Brown) - tipc: fix the msg->req tlv len check in tipc_nl_compat_name_table_dump_header (Xin Long) - can: af_can: fix NULL pointer dereference in can_rx_register() (Zhengchao Shao) - ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network (Alexander Potapenko) - drm/vc4: Fix missing platform_unregister_drivers() call in vc4_drm_register() (Yuan Can) - hamradio: fix issue of dev reference count leakage in bpq_device_event() (Zhengchao Shao) - net: lapbether: fix issue of dev reference count leakage in lapbeth_device_event() (Zhengchao Shao) - capabilities: fix undefined behavior in bit shift for CAP_TO_MASK (Gaosheng Cui) - net: fman: Unregister ethernet device on removal (Sean Anderson) - bnxt_en: fix potentially incorrect return value for ndo_rx_flow_steer (Alex Barba) - bnxt_en: Fix possible crash in bnxt_hwrm_set_coal() (Michael Chan) - net: tun: Fix memory leaks of napi_get_frags (Wang Yufen) - net: gso: fix panic on frag_list with mixed head alloc types (Jiri Benc) - HID: hyperv: fix possible memory leak in mousevsc_probe() (Yang Yingliang) - bpf, sockmap: Fix the sk->sk_forward_alloc warning of sk_stream_kill_queues (Wang Yufen) - wifi: cfg80211: fix memory leak in query_regdb_file() (Arend van Spriel) - wifi: cfg80211: silence a sparse RCU warning (Johannes Berg) - phy: stm32: fix an error code in probe (Dan Carpenter) - xfs: drain the buf delwri queue before xfsaild idles (Brian Foster) - xfs: preserve inode versioning across remounts (Eric Sandeen) - xfs: use MMAPLOCK around filemap_map_pages() (Dave Chinner) - xfs: redesign the reflink remap loop to fix blkres depletion crash (Darrick J. Wong) - xfs: rename xfs_bmap_is_real_extent to is_written_extent (Darrick J. Wong) - xfs: preserve rmapbt swapext block reservation from freed blocks (Brian Foster) [5.4.17-2136.316.2] - netdev, octeon3-ethernet: increase num_packet_buffers to 4096 (Dave Kleikamp) [Orabug: 31351486] - uek-rpm: ol7: Add enhanced kABI diagnostics (Stephen Brennan) [Orabug: 33871940] - uek-rpm: ol8: Add enhanced kABI diagnostics (Stephen Brennan) [Orabug: 33871940] - uek-rpm: ol7: Add Symtypes files (Stephen Brennan) [Orabug: 33871940] - uek-rpm: ol8: Add Symtypes files (Stephen Brennan) [Orabug: 33871940] - uek-rpm: ol7: Enable creation of Symtypes files (Stephen Brennan) [Orabug: 33871940] - uek-rpm: ol8: Enable creation of Symtypes files (Stephen Brennan) [Orabug: 33871940] - uek-rpm: Add kabi tool and documentation (Stephen Brennan) [Orabug: 33871940] - uek-rpm: update config files for SDK-11.22.10 (Dave Kleikamp) [Orabug: 34671021] - drivers: soc: fwlog: Fix compiler warnings (Dave Kleikamp) [Orabug: 34671021] - firmware: octeontx2: sfp-info: Update sfp_info_data (Piyush Malgujar) [Orabug: 34671021] - octeontx2-pcicons: provide toggle for trace_printk (Wojciech Zmuda) [Orabug: 34671021] - octeontx2-af: fix TIM disable lf sequence (Pavan Nikhilesh) [Orabug: 34671021] - driver core: Use unbound workqueue for deferred probes (Yogesh Lal) [Orabug: 34671021] - octeontx2-bphy-netdev: cnf10k: fix for PTP BCN delta (Rakesh Babu Saladi) [Orabug: 34671021] - drivers: soc: sw_up: Fix compatibility (Witold Sadowski) [Orabug: 34671021] - octeontx2-af: rvu: enable mcs fips mailboxes (Ankur Dwivedi) [Orabug: 34671021] - octeontx2-af: mcs: add mailboxes for fips (Ankur Dwivedi) [Orabug: 34671021] - driver: soc: mrvl_phy7121P added tc enablement command (Yi Guo) [Orabug: 34671021] - octeontx2-af: Don't return error when SMQ flush fails (Naveen Mamindlapalli) [Orabug: 34671021] - octeontx2-bphy-netdev: Use PTP ring tail index to read timestamp (Baha Mesleh) [Orabug: 34671021] - PCI: octeontx2-pem-ep: Setup BAR4 region for PTP block access (Roy Franz) [Orabug: 34671021] - octeontx2-af: mcs: set force clock enable (Ankur Dwivedi) [Orabug: 34671021] - drivers: pci-octeon-pem: Rectify RC link recover work (Suneel Garapati) [Orabug: 34671021] - octeontx2-af: Add support for RPM FEC stats (Hariprasad Kelam) [Orabug: 34671021] - firmware: octeontx2: sfp-info: check supported platforms first (Damian Eppel) [Orabug: 34671021] - drivers: pci: octeon-pem: Fix hardware issue (Suneel Garapati) [Orabug: 34671021] - octeontx-af: mcs: Fix mcs interrupt irq name (Geetha sowjanya) [Orabug: 34671021] - octeontx2-bphy-netdev: PTP 1-step improvements (Naveen Mamindlapalli) [Orabug: 34671021] - octeontx2-pf: Add devlink support to configure TL1 RR_PRIO (Hariprasad Kelam) [Orabug: 34671021] - octeontx2-af: mcs: add port config mbox (Vamsi Attunuru) [Orabug: 34671021] - octeontx2-af: mcs: add port reset mbox (Vamsi Attunuru) [Orabug: 34671021] - octeontx2-af: mcs: add packet steering rules support (Vamsi Attunuru) [Orabug: 34671021] - octeontx2-af: set CPT CTX ILEN to 1 (Tejasree Kondoj) [Orabug: 34671021] - octeontx2-af: mcs: add pn threshold mbox (Vamsi Attunuru) [Orabug: 34671021] - octeontx2-af: mcs: extend mcs interrupt handling (Vamsi Attunuru) [Orabug: 34671021] - octeontx2-bphy-netdev:: Share RFOE PTP offset with host (Roy Franz) [Orabug: 34671021] - octeontx2-bphy-netdev: PTP BCN synchronization support for CNF10k platforms. (Rakesh Babu Saladi) [Orabug: 34671021] - hwrng: cn10k - Make check_rng_health() return an error code (Vladis Dronov) [Orabug: 34671021] - hwrng: cn10k - Optimize cn10k_rng_read() (Vladis Dronov) [Orabug: 34671021] - octeontx2-bphy-netdev: Add cnf10k rfoe debugfs (Baha Mesleh) [Orabug: 34671021] - octeontx2-af: serialize bar2 alias access (Srujana Challa) [Orabug: 34671021] - octeontx2-af: add mbox to return CPT_AF_FLT_INT info (Srujana Challa) [Orabug: 34671021] - Revert 'octeontx2-af: set pkind for LBK interfaces' (Sunil Kovvuri Goutham) [Orabug: 34671021] - octeontx2-bphy-netdev: cnf105xxn: fix ptp timestamp in master mode (Naveen Mamindlapalli) [Orabug: 34671021] - octeontx2-bphy-netdev: cnf10k: Modify PTP timestamp format. (Rakesh Babu Saladi) [Orabug: 34671021] - octeontx2-bphy-netdev: convert MIO_PTP_TIMESTAMP value to nsecs (Naveen Mamindlapalli) [Orabug: 34671021] - octeontx2-pcicons: adjust padding size for RT (Wojciech Zmuda) [Orabug: 34671021] - octeontx2-pcicons: remove dev_err() from TTY write (Wojciech Zmuda) [Orabug: 34671021] - octeontx2-pcicons: wait longer for the buffer (Wojciech Zmuda) [Orabug: 34671021] - octeontx2-af: Fix return value in rvu_mbox_handler_nix_lf_stop_rx (Naveen Mamindlapalli) [Orabug: 34671021] - soc: octeontx2-sdp: add multi-PF support in SDP (Radha Mohan Chintakuntla) [Orabug: 34671021] - firmware: smccc: Fix check for ARCH_SOC_ID not implemented (Michael Kelley) [Orabug: 34671021] - firmware: smccc: Export both smccc functions (Sudeep Holla) [Orabug: 34671021] - firmware: smccc: Add ARCH_SOC_ID support (Gowthami Thiagarajan) [Orabug: 34671021] - firmware: smccc: Add the definition for SMCCCv1.2 version/error codes (Sudeep Holla) [Orabug: 34671021] - firmware: smccc: Update link to latest SMCCC specification (Sudeep Holla) [Orabug: 34671021] - firmware: smccc: Fix missing prototype warning for arm_smccc_version_init (Sudeep Holla) [Orabug: 34671021] - firmware: smccc: Refactor SMCCC specific bits into separate file (Gowthami Thiagarajan) [Orabug: 34671021] - firmware: smccc: Drop smccc_version enum and use ARM_SMCCC_VERSION_1_x instead (Gowthami Thiagarajan) [Orabug: 34671021] - firmware: smccc: Add HAVE_ARM_SMCCC_DISCOVERY to identify SMCCC v1.1 and above (Sudeep Holla) [Orabug: 34671021] - firmware/psci: use common SMCCC_CONDUIT_* (Gowthami Thiagarajan) [Orabug: 34671021] - octeontx2-pf: fix hardware timestamp issue for ptp slave (Hariprasad Kelam) [Orabug: 34671021] - octeontx2-af: add read back of AF_BAR2_SEL register (Srujana Challa) [Orabug: 34671021] - octeontx2-af: fix CPT FLT handler (Srujana Challa) [Orabug: 34671021] - drivers: soc: fwlog: Extend firmware bootlog support for cn10k and cn9x (Pragnesh Patel) [Orabug: 34671021] - octeontx2-af: remove support to limit xaq depth (Shijith Thotton) [Orabug: 34671021] - octeontx2-pcicons: disable IRQ when taking a lock (Wojciech Zmuda) [Orabug: 34671021] - octeontx2-af: set pkind for LBK interfaces (Liron Himi) [Orabug: 34671021] - octeontx2-af: Generate masks for packet header fields correctly (Subbaraya Sundeep) [Orabug: 34671021] - misc: bphy: disable ctr module on non-BPHY boards (Jakub Palider) [Orabug: 34671021] - driver: mmc: sdhci-cadence: Dump more PHY registers (Chandrakala Chavva) [Orabug: 34671021] - uek-rpm: aarch64 embedded: disable CONFIG_EFI_BOOTEFI_BUG (Dave Kleikamp) [Orabug: 34671021] - octeontx2-af: fix rvu_cgx_tx_enable to return success for vfs (Naveen Mamindlapalli) [Orabug: 34671021] - drivers: firmware: octeontx2: Adding mub_gen dependency (Piyush Malgujar) [Orabug: 34671021] - drivers: sdhci-cadence: Update HS200 tuning values (Jayanthi Annadurai) [Orabug: 34671021] - octeontx2-bphy-netdev: Fix updating JD pkt length and blocksize (Naveen Mamindlapalli) [Orabug: 34671021] - octeontx2-af: Re-enable mac tx in otx2_stop routine (Naveen Mamindlapalli) [Orabug: 34671021] - octeontx2-pf: consider both Rx and Tx packet stats for adaptive interrupt coalescing (Naveen Mamindlapalli) [Orabug: 34671021] - octeontx2-bphy-netdev: Fix improper names used for IRQs. (Rakesh Babu Saladi) [Orabug: 34671021] - drivers: sdhci-cadence: Increase hold time for HS52 and DDR52 modes (Jayanthi Annadurai) [Orabug: 34671021] - drivers: firmware: octeontx2: Config memtest module as trisate (Piyush Malgujar) [Orabug: 34671021] - driver: edac: octeontx: Add CPU RAS error report (Vasyl Gomonovych) [Orabug: 34671021] - perf cs-etm: Use existing decoder instead of resetting it (James Clark) [Orabug: 34671021] - perf cs-etm: Suppress printing when resetting decoder (James Clark) [Orabug: 34671021] - perf cs-etm: Only setup queues when they are modified (James Clark) [Orabug: 34671021] - perf cs-etm: Split setup and timestamp search functions (James Clark) [Orabug: 34671021] - perf cs-etm: Refactor initialisation of kernel start address (James Clark) [Orabug: 34671021] - perf cs-etm: Split --dump-raw-trace by AUX records (James Clark) [Orabug: 34671021] - perf cs-etm: Split Coresight decode by aux records (James Clark) [Orabug: 34671021] - perf cs-etm: Delay decode of non-timeless data until cs_etm__flush_events() (James Clark) [Orabug: 34671021] - perf cs-etm: Remove callback cs_etm_find_snapshot() (Leo Yan) [Orabug: 34671021] - perf cs-etm: Move synth_opts initialisation (James Clark) [Orabug: 34671021] - perf cs-etm: Set time on synthesised samples to preserve ordering (James Clark) [Orabug: 34671021] - perf cs-etm: Refactor timestamp variable names (James Clark) [Orabug: 34671021] - perf session: Add facility to peek at all events (Adrian Hunter) [Orabug: 34671021] - octeontx2-af: Do not use default unicast entry action always (Subbaraya Sundeep) [Orabug: 34671021] - octeontx2-af: modify FLR sequence for CPT (Srujana Challa) [Orabug: 34671021] - octeontx2-af: Do not read CGX FEC CSRs on CN10K (Sunil Goutham) [Orabug: 34671021] - drivers: firmware: octeontx2: Fix Kconfig dependency (Piyush Malgujar) [Orabug: 34671021] - driver :soc :phy7121:MACsec: Params support for SA (Narendra Hadke) [Orabug: 34671021] - octeontx2-af: Derive fifo size assigned to given LMAC (Hariprasad Kelam) [Orabug: 34671021] - octeontx2-af: CN10KB MAC RPM_100/USX support (Hariprasad Kelam) [Orabug: 34671021] - octeontx2-af: Support variable number of LMACS per MAC (Hariprasad Kelam) [Orabug: 34671021] - i2c: mv64xxx: Fix random system lock caused by runtime PM (Marek Behun) [Orabug: 34671021] - octeontx2-af: add support for SSO WQE stashing (Pavan Nikhilesh) [Orabug: 34671021] - octeontx2-af: add additional description to irqs (Pavan Nikhilesh) [Orabug: 34671021] - uek-rpm: update config files for SDK-11.22.08 (Dave Kleikamp) [Orabug: 34671021] - drivers: marvell: otx2-sdei-ghes: Fix error records overflow (Vasyl Gomonovych) [Orabug: 34671021] - octeontx2-af: mcs: Fix rvu mcs initialization (Geetha sowjanya) [Orabug: 34671021] - irqchip/gicv3-its: Workaround for Marvell errata 35443 for 9xx (Geetha sowjanya) [Orabug: 34671021] - driver: edac: octeontx: Refactor EDAC driver (Vasyl Gomonovych) [Orabug: 34671021] - drivers: soc: sw_up: Update return code handling (Witold Sadowski) [Orabug: 34671021] - drivers: firmware: octeontx2: fixing the return values (Piyush Malgujar) [Orabug: 34671021] - drivers: i2c: octeon: Skip M divider limit for OcteonTX2 (Suneel Garapati) [Orabug: 34671021] - driver: firmware: Fix kconfig dependencies on mhu driver (Chandrakala Chavva) [Orabug: 34671021] - octeontx2-af: mcs: Add SA interrupt handling support (Geetha sowjanya) [Orabug: 34671021] - octeontx2-af: add TIM adjust GTI errata workaround (Shijith Thotton) [Orabug: 34671021] - octeontx2-af: add SSO XAQ AURA access errata workaround (Shijith Thotton) [Orabug: 34671021] - octeontx2-af: add programming SDP BPID in cn10k (Radha Mohan Chintakuntla) [Orabug: 34671021] - octeontx2-af: Enable LBK links only when switch mode is on. (Subbaraya Sundeep) [Orabug: 34671021] - octeontx2-pf: Forward VF UP messages iff VFs are present (Subbaraya Sundeep) [Orabug: 34671021] - driver: soc: mrvl_phy7121P added rclk command to adv feature (Yi Guo) [Orabug: 34671021] - octeontx2-af: mcs: Set mcs to bypass on error (Geetha sowjanya) [Orabug: 34671021] - octeontx2-af: HW workaround for NPA buffer free (Geetha sowjanya) [Orabug: 34671021] - octeontx2-pf: Fix SQE threshold checking (Ratheesh Kannoth) [Orabug: 34671021] - octeontx2-af: ptp: Fix the sequence of register configuration (Naveen Mamindlapalli) [Orabug: 34671021] - octeontx2-af: Fixes compilation warning for KASAN build (Suman Ghosh) [Orabug: 34671021] - coresight: Add Coresight kdump support (Linu Cherian) [Orabug: 34671021] - coresight: Add provision for kdump sync callbacks (Linu Cherian) [Orabug: 34671021] - driver: mmc: ACPI support added for eMMC driver for T9x. (Piyush Malgujar) [Orabug: 34671021] - octeontx2-pf: Fix TSOv6 offload (Sunil Goutham) [Orabug: 34671021] - irqchip/gic-v3: Detect LPI invalidation MMIO registers (Linu Cherian) [Orabug: 34671021] - irqchip/gic-v3: Exposes bit values for GICR_CTLR.{IR, CES} (Marc Zyngier) [Orabug: 34671021] - irqchip/gic-v3-its: Allow LPI invalidation via the DirectLPI interface (Marc Zyngier) [Orabug: 34671021] - irqchip/gic-v3-its: Factor out wait_for_syncr primitive (Marc Zyngier) [Orabug: 34671021] - octeontx2-pf: Fix VF mbox forwarding handling (Subbaraya Sundeep) [Orabug: 34671021] - octeontx2-af: Fix BPID calculation for SDP (Radha Mohan Chintakuntla) [Orabug: 34671021] - octeontx2-af: add support for CPT second pass (Rakesh Kudurumalla) [Orabug: 34671021] - octeontx2-bphy-netdev: IOCTL to read input clock parameters. (Rakesh Babu Saladi) [Orabug: 34671021] - drivers: soc: sw_up: Add async clone support (Witold Sadowski) [Orabug: 34671021] - crypto: octeontx2: add CN10KB SG support (Srujana Challa) [Orabug: 34671021] - octeontx2-af: cnf10k-b: mcs: Add mbox to set port mode (Geetha sowjanya) [Orabug: 34671021] - driver: edac: octeontx: Rename some macros and variables (Chandrakala Chavva) [Orabug: 34671021] - crypto: octeontx2: decrease CPT_AF_CTX_FLUSH_TIMER count (Srujana Challa) [Orabug: 34671021] - octeontx2-af: update cpt engines status debugfs entry (Srujana Challa) [Orabug: 34671021] - driver: mailbox: Cleanup dead code (Wojciech Bartczak) [Orabug: 34671021] - drivers: marvell: otx2-sdei-ghes: Fix BERT report driver (Vasyl Gomonovych) [Orabug: 34671021] - octeontx2-bphy-netdev: Fix cnf10k link state set (Baha Mesleh) [Orabug: 34671021] - otx2-bphy-netdev: synchronize BCN to PTP slave clock. (Rakesh Babu Saladi) [Orabug: 34671021] - octeontx2-bphy-netdev: stop pkt transmission when psm queue is disabled (Naveen Mamindlapalli) [Orabug: 34671021] - octeontx2-bphy-netdev: cnf95n: fix ptp timestamp in master mode (Naveen Mamindlapalli) [Orabug: 34671021] - edac: Add spinlock to protect ring buffer read/write (Vasyl Gomonovych) [Orabug: 34671021] - EDAC: OcteonTX: Fix build issues when ACPI is disabled (Piyush Malgujar) [Orabug: 34671021] - drivers: soc: sw_up: Add async hash verification option (Witold Sadowski) [Orabug: 34671021] - octeontx2-af: Fix pf bitmap for RVU VFs (Geetha sowjanya) [Orabug: 34671021] - octeontx2-af: cn10k-b: mcs: Add debugfs support (Geetha sowjanya) [Orabug: 34671021] - octeontx2-af: cn10k-b: mcs: Support to reset MCS stats (Geetha sowjanya) [Orabug: 34671021] - octeontx2-af: cn10k-b: mcs: Support to retrieve MCS stats (Geetha sowjanya) [Orabug: 34671021] - octeontx2-af: cnf10k-b: mcs: Add support for CNF10K MCS (Geetha sowjanya) [Orabug: 34671021] - octeontx2-af: cn10k-b: mcs: Install TCAM bypass entry (Geetha sowjanya) [Orabug: 34671021] - octeontx2-af: cn10k-b: mcs: Mbox handlers to establish CA (Geetha sowjanya) [Orabug: 34671021] - octeontx2-af: cn10k-b: mcs: Mbox to allocate/free MCS resources (Geetha sowjanya) [Orabug: 34671021] - octeontx2-af: cn10k-b: mcs: Allocate structs for MCS resources (Geetha sowjanya) [Orabug: 34671021] - octeontx2-af: cn10k: mcs: Add MCS basic driver support (Geetha sowjanya) [Orabug: 34671021] - mailbox: marvell: Initialize interrupts only if there's client for data (Wojciech Bartczak) [Orabug: 34671021] - mailbox: marvell: Fix driver dependencies list (Wojciech Bartczak) [Orabug: 34671021] header file (Piyush Malgujar) [Orabug: 34671021] - EDAC: OcteonTX: Remove redundant ACPI_APEI_GHES (Vasyl Gomonovych) [Orabug: 34671021] - drivers: sdhci-cadence: Initialize slew and drive values (Jayanthi Annadurai) [Orabug: 34671021] - octeontx2-af: support overriding aura to zero for second pass (Nithin Dabilpuram) [Orabug: 34671021] - drivers: soc: sw_up: Use new and previous smc_update_descriptor (Witold Sadowski) [Orabug: 34671021] - driver: soc: mrvl_phy7121P Fixed Warnings. (Narendra Hadke) [Orabug: 34671021] - octeontx2-pcicons: Adjust padding size for RT (Ratheesh Kannoth) [Orabug: 34671021] - genirq: Increase the number of interrupters (George Cherian) [Orabug: 34671021] - octeontx2-af: Skip PFs if not enabled (Ratheesh Kannoth) [Orabug: 34671021] - crypto: octeontx2: add pdcp chain to capabilities (Srujana Challa) [Orabug: 34671021] - crypto: octeontx2: set sso_pf_func_ovrd only for 96xx A0/B0 (Srujana Challa) [Orabug: 34671021] - octeontx2-bphy-netdev: cnf10k: fix compilation warning (Naveen Mamindlapalli) [Orabug: 34671021] - octeontx2-bphy-netdev: use platform_get_irq_optional for PSM GPINT2 (Naveen Mamindlapalli) [Orabug: 34671021] - octeontx2-af: ptp: modify workaround for cn10k pps errata (Naveen Mamindlapalli) [Orabug: 34671021] - octeontx2-af: add support to parse custom ether type (Kiran Kumar K) [Orabug: 34671021] - soc: octeontx2-sdp: program SDP_EPVF_RING (Radha Mohan Chintakuntla) [Orabug: 34671021] - octeontx2-af: timeout while draining SSO queues (Shijith Thotton) [Orabug: 34671021] - firmware: mub: Add CN10K memory test configuration utility (Wojciech Bartczak) [Orabug: 34671021] - soc: octeontx2-sdp: remove dependency from PCI revision (Radha Mohan Chintakuntla) [Orabug: 34671021] - drivers: sdhci-cadence: Fix high speed mode hold time (Jayanthi Annadurai) [Orabug: 34671021] - crypto: octeontx2: add support for 103xx firmware load (Srujana Challa) [Orabug: 34671021] - octeontx2-af: update CPT inbound inline IPsec config mailbox (Srujana Challa) [Orabug: 34671021] - driver: soc: mrvl_phy7121P: config is only valid on ARM64 (Dave Kleikamp) [Orabug: 34956505] - driver: soc: mrvl_phy7121P PHY ADVANCE FEATURES: (Narendra Hadke) [Orabug: 34671021] - octeontx2-bphy-netdev: cnf10k: Fix incorrect PTP clock frequency. (Rakesh Babu Saladi) [Orabug: 34671021] - octeontx2-pf: Fix UDP/TCP src and dst port tc filters (Subbaraya Sundeep) [Orabug: 34671021] - octeontx2-af: Allow mcam entries for promiscous rule for CN10K-A and CN10K-B soc. (Suman Ghosh) [Orabug: 34671021] - octeontx2-bphy-netdev: cnf95n: ptp: use 950MHz clock for ptp slave (Naveen Mamindlapalli) [Orabug: 34671021] - octeontx2-bphy-netdev: cnf95n: ptp: Fix ptp clock counter read (Naveen Mamindlapalli) [Orabug: 34671021] - perf/marvell: Update dev name in Marvell DDR PMU (Amit Singh Tomar) [Orabug: 34671021] - octeontx2-bphy-netdev: Fix ethtool stats string order (Rakesh Babu Saladi) [Orabug: 34671021] - drivers: spi: cadence-xspi: Force single modebyte (Witold Sadowski) [Orabug: 34671021] - octeontx2-af: fix lbk link credits on cn10k (Nithin Dabilpuram) [Orabug: 34671021] - octeontx2-bphy-netdev: cnf95n: add PTP slave support. (Rakesh Babu Saladi) [Orabug: 34671021] - perf/marvell_cn10k: support older DT properties for TAD PMU (Tanmay Jagdale) [Orabug: 34671021] - perf/marvell: get ddr speed from 'marvell,ddr-speed' (Amit Singh Tomar) [Orabug: 34671021] - octeontx2-bphy-netdev: cnf10k: Fix ptp hardware clock counter conversion (Naveen Mamindlapalli) [Orabug: 34671021] - octeontx2-af: Show count of dropped packets by DMAC filters (Hariprasad Kelam) [Orabug: 34671021] - octeontx2-af: Add L2M/L2B header extraction support (Suman Ghosh) [Orabug: 34671021] - octeontx2-pf: Fix invalid pkt count send to dql_completed() (Geetha sowjanya) [Orabug: 34671021] - octeontx2-af: fix CPT engine recovery (Srujana Challa) [Orabug: 34671021] - iommu/arm-smmu-v3: Ratelimit event dump (Jean-Philippe Brucker) [Orabug: 34671021] - cn10k: Add workaround for MRVL TAD Errata-38891 (Bharat Bhushan) [Orabug: 34671021] - edac: Fix cn10ka dss error injection (Vasyl Gomonovych) [Orabug: 34671021] - octeontx2-af: Fix NIX link credits (Sunil Goutham) [Orabug: 34671021] - edac: Read sdei vector number from HEST table (Vasyl Gomonovych) [Orabug: 34671021] - edac: Add Core error report (Vasyl Gomonovych) [Orabug: 34671021] - driver: clk: Remove SCLK clock driver for ACPI platforms (Wojciech Bartczak) [Orabug: 34671021] - octeontx2-af: Initialize the PTP_SEC_ROLLOVER register properly (Naveen Mamindlapalli) [Orabug: 34671021] - cnf10k-rfoe: skb shinfo falls on a different cacheline, avoid reading it (Sunil Goutham) [Orabug: 34671021] - cnf10k-rfoe: Adjust structure elements to reduce cache misses (Sunil Goutham) [Orabug: 34671021] - cnf10k-rfoe: Avoid costly iova_to_virt of packet dma address in xmit (Sunil Goutham) [Orabug: 34671021] - cnf10k-rfoe: Cleanup packet stats maintenance (Sunil Goutham) [Orabug: 34671021] - cnf10k-rfoe: Optimize packet length retrieval for non-ecpri packets (Sunil Goutham) [Orabug: 34671021] - cnf10k-rfoe: Remove duplicate error checking (Sunil Goutham) [Orabug: 34671021] - octeontx2-af: add mbox for CPT LF reset (Srujana Challa) [Orabug: 34671021] - octeontx2-af: cn10k: Set NIX DWRR MTU for CN10KB silicon (Sunil Goutham) [Orabug: 34671021] - octeontx2-pf: NIX TX overwrites SQ_CTX_HW_S[SQ_INT] (Ratheesh Kannoth) [Orabug: 34671021] - octeontx2-pf: Fix NIX_AF_TL3_TL2X_LINKX_CFG register configuration (Naveen Mamindlapalli) [Orabug: 34671021] - octeontx2-af: use cpt channel mask in flow install path (Nithin Dabilpuram) [Orabug: 34671021] - octeontx2-bphy-netdev: use sw timecounter for ptp phc (Naveen Mamindlapalli) [Orabug: 34671021] - octeontx2-af: allow lower threshold in sso group qos mbox (Shijith Thotton) [Orabug: 34671021] - octeontx2-pf: cn10k: Fix egress ratelimit configuration (Sunil Goutham) [Orabug: 34671021] - drivers: soc: sw_up: Add force clone option (Witold Sadowski) [Orabug: 34671021] - perf/marvell_cn10k: update tad property names (Tanmay Jagdale) [Orabug: 34671021] - octeontx2-pf: Added validation check to configure adaptive interrupt coalesing. (Suman Ghosh) [Orabug: 34671021] - octeontx2-af: setup Tx link credit based on lmac id (Nithin Dabilpuram) [Orabug: 34671021] - firmware: smccc: Reflect firmware reported smccc version (Linu Cherian) [Orabug: 34671021] - octeontx2-bphy-netdev: cnf10k: Add PTP 2S legacy mode support. (Rakesh Babu Saladi) [Orabug: 34671021] - octeontx2-sdpvf: Fix PTP options for SDP interfaces (Roy Franz) [Orabug: 34671021] - firmware: octeontx2: Enable RPRAM driver for ASIM targets (Wojciech Bartczak) [Orabug: 34671021] - octeontx2-pf: Free pending and dropped SQEs (Geetha sowjanya) [Orabug: 34671021] - octeontx2-af: recover CPT engine when it gets fault (Srujana Challa) [Orabug: 34671021] - crypto: octeontx2: remove CPT block reset (Srujana Challa) [Orabug: 34671021] - octeontx2-pf: Add support for ptp 1-step using timecounter (Naveen Mamindlapalli) [Orabug: 34671021] - octeontx2-pf: revert the ptp phc implementation to use timecounter (Naveen Mamindlapalli) [Orabug: 34671021] - octeontx2-af: return correct timestamp for cn10k soc (Naveen Mamindlapalli) [Orabug: 34671021] - misc: bphy: prevent out-of-bound array iteration (Jakub Palider) [Orabug: 34671021] - soc: octeontx2-sdp: Fix SDP output backpressure (Roy Franz) [Orabug: 34671021] - crypto: qat - add support for 401xx devices (Giovanni Cabiddu) [Orabug: 34779699] - tools/power turbostat: fix SPR PC6 limits (Artem Bityutskiy) [Orabug: 34802779] - tools/power turbostat: separate SPR from ICX (Artem Bityutskiy) [Orabug: 34802779] - tools/power turbostat: formatting (Len Brown) [Orabug: 34802779] - tools/power turbostat: rename tcc variables (Zhang Rui) [Orabug: 34802779] - tools/power turbostat: add TCC Offset support (Zhang Rui) [Orabug: 34802779] - tools/power turbostat: save original CPU model (Zhang Rui) [Orabug: 34802779] - tools/power turbostat: Fix Core C6 residency on Atom CPUs (Zhang Rui) [Orabug: 34802779] - tools/power turbostat: Print the C-state Pre-wake settings (Chen Yu) [Orabug: 34802779] - tools/power turbostat: Enable tsc_tweak for Elkhart Lake and Jasper Lake (Chen Yu) [Orabug: 34802779] - tools/power/turbostat: Remove Package C6 Retention on Ice Lake Server (Chen Yu) [Orabug: 34802779] - tools/power turbostat: Fix offset overflow issue in index converting (Calvin Walton) [Orabug: 34802779] - tools/power/turbostat: Fix turbostat for AMD Zen CPUs (Bas Nieuwenhuizen) [Orabug: 34802779] - tools/power turbostat: update version number (Len Brown) [Orabug: 34802779] - tools/power turbostat: Fix DRAM Energy Unit on SKX (Zhang Rui) [Orabug: 34802779] - Revert 'tools/power turbostat: adjust for temperature offset' (Len Brown) [Orabug: 34802779] - tools/power turbostat: Support Ice Lake D (Chen Yu) [Orabug: 34802779] - tools/power turbostat: Support Alder Lake Mobile (Chen Yu) [Orabug: 34802779] - tools/power turbostat: print microcode patch level (Len Brown) [Orabug: 34802779] - tools/power turbostat: add built-in-counter for IPC -- Instructions per Cycle (Len Brown) [Orabug: 34802779] - tools/turbostat: Unmark non-kernel-doc comment (Randy Dunlap) [Orabug: 34802779] - tools/power/turbostat: Fallback to an MSR read for EPB (Borislav Petkov) [Orabug: 34802779] - tools/power turbostat: update version number (Len Brown) [Orabug: 34802779] - tools/power turbostat: harden against cpu hotplug (Len Brown) [Orabug: 34802779] - tools/power turbostat: adjust for temperature offset (Len Brown) [Orabug: 34802779] - tools/power turbostat: Support AMD Family 19h (Kim Phillips) [Orabug: 34802779] - tools/power turbostat: Remove empty columns for Jacobsville (Antti Laakso) [Orabug: 34802779] - tools/power turbostat: Add a new GFXAMHz column that exposes gt_act_freq_mhz. (Rafael Antognolli) [Orabug: 34802779] - tools/power turbostat: Skip pc8, pc9, pc10 columns, if they are disabled (Len Brown) [Orabug: 34802779] - tools/power turbostat: Fix output formatting for ACPI CST enumeration (David Arcari) [Orabug: 34802779] - tools/power turbostat: Use sched_getcpu() instead of hardcoded cpu 0 (Prarit Bhargava) [Orabug: 34802779] - tools/power turbostat: Enable accumulate RAPL display (Chen Yu) [Orabug: 34802779] - tools/power turbostat: Introduce functions to accumulate RAPL consumption (Chen Yu) [Orabug: 34802779] - tools/power turbostat: Make the energy variable to be 64 bit (Chen Yu) [Orabug: 34802779] - tools/power turbostat: Always print idle in the system configuration header (Doug Smythies) [Orabug: 34802779] - tools/power turbostat: Print /dev/cpu_dma_latency (Len Brown) [Orabug: 34802779] - tools/power turbostat: update version (Len Brown) [Orabug: 34802779] - tools/power turbostat: Print cpuidle information (Len Brown) [Orabug: 34802779] - tools/power turbostat: Support Elkhart Lake (Chen Yu) [Orabug: 34802779] - tools/power turbostat: Support Jasper Lake (Chen Yu) [Orabug: 34802779] - tools/power turbostat: Support Cometlake (Chen Yu) [Orabug: 34802779] - sch_htb: Fail on unsupported parameters when offload is requested (Maxim Mikityanskiy) [Orabug: 34833369] - sch_api: Don't skip qdisc attach on ingress (Maxim Mikityanskiy) [Orabug: 34833369] - sch_htb: Fix inconsistency when leaf qdisc creation fails (Maxim Mikityanskiy) [Orabug: 34833369] - sch_htb: fix refcount leak in htb_parent_to_leaf_offload (Yunjian Wang) [Orabug: 34833369] - sch_htb: fix null pointer dereference on a null new_q (Yunjian Wang) [Orabug: 34833369] - sch_htb: Fix offload cleanup in htb_destroy on htb_init failure (Maxim Mikityanskiy) [Orabug: 34833369] - sch_htb: Fix select_queue for non-offload mode (Maxim Mikityanskiy) [Orabug: 34833369] - RDS/IB: Fix the misplaced counter update rdma dto path (Devesh Sharma) [Orabug: 34865848] - arm64: Add AMPERE1 to the Spectre-BHB affected list (D Scott Phillips) [Orabug: 34873999] - net: mana: Fix race on per-CQ variable napi work_done (uek6/u3) (Haiyang Zhang) [Orabug: 34874459] - mips: Octeon: PCI console code was incorrectly finding the tty port (Dave Kleikamp) [Orabug: 34877981] - x86/bpf: Use alternative RET encoding (Peter Zijlstra) [Orabug: 34944087] - bpf,x86: Respect X86_FEATURE_RETPOLINE* (Peter Zijlstra) [Orabug: 34944087] - Revert 'x86/bpf: Alternative RET encoding' (Alexandre Chartre) [Orabug: 34944087] - xfs: don't reuse busy extents on extent trim (Brian Foster) [Orabug: 34944365] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-4139 CVE-2022-42896 Oracle Linux 8 [5.15.0-7.86.6.1] - net/rds: Delegate fan-out to a background worker (Gerd Rausch) [Orabug: 35051226] [5.15.0-7.86.6] - runtime revert of virtio_net: Stripe queue affinities across cores. (Konrad Rzeszutek Wilk) [Orabug: 35001044] - rds: ib: Make sure messages that errors out also get unmapped (Hakon Bugge) [Orabug: 35015598] - Ignore hot plug events when force powering off a device (James Puthukattukaran) [Orabug: 35015761] - mptcp: UEK: disable mptcp protocol (Jack Vogel) [Orabug: 34821286] [5.15.0-7.86.5] - uek-rpm: Enable HP watchdog for aarch64 (Saeed Mirzamohammadi) [Orabug: 34902069] - watchdog/hpwdt: Include nmi.h only if CONFIG_HPWDT_NMI_DECODING (Jerry Hoemann) [Orabug: 34902069] - watchdog/hpwdt: Enable HP_WATCHDOG for ARM64 systems. (Jerry Hoemann) [Orabug: 34902069] - Revert 'selftests/bpf: Add test for unstable CT lookup API' (Alan Maguire) [Orabug: 34951842] - uek-rpm: config-x86-64*: enable CONFIG_MT7921E (Todd Vierling) [Orabug: 34970472] - netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits (Pablo Neira Ayuso) [Orabug: 34978152] {CVE-2023-0179} - perf/x86/rapl: Use standard Energy Unit for SPR Dram RAPL domain (Zhang Rui) [Orabug: 34978296] - powercap: intel_rapl: support new layout of Psys PowerLimit Register on SPR (Zhang Rui) [Orabug: 34978296] - uek: kabi: enable aarch64 kABI checking (Saeed Mirzamohammadi) [Orabug: 34339132] [5.15.0-7.86.4] - net/rds: Fill in rds_exthdr_size gaps (Gerd Rausch) [Orabug: 34979170] - Revert 'uek: kabi: enable aarch64 kABI checking' (Jack Vogel) - Revert 'uek-rpm: Disable kABI checking for aarch64 64k builds' (Jack Vogel) [5.15.0-7.86.3] - uek-rpm: Disable kABI checking for aarch64 64k builds (Saeed Mirzamohammadi) [Orabug: 34339132] [5.15.0-7.86.2] - net/rds: Trigger rds_send_hs_ping() more than once (Gerd Rausch) [Orabug: 34607844] - Revert 'RDS: TCP: Track peer's connection generation number' (Gerd Rausch) [Orabug: 34700109] - net/rds: Use the first lane until RDS_EXTHDR_NPATHS arrives (Gerd Rausch) [Orabug: 34314502] - net/rds: Kick-start TCP receiver after accept (Gerd Rausch) [Orabug: 34600819] - net/rds: rds_tcp_conn_path_shutdown must not discard messages (Gerd Rausch) [Orabug: 34560700] - net/rds: Encode cp_index in TCP source port (Gerd Rausch) [Orabug: 34556036] - uek: kabi: enable aarch64 kABI checking (Saeed Mirzamohammadi) [Orabug: 34339132] - uek-rpm: Disable Promise SuperTrak EX series storage controllers (Somasundaram Krishnasamy) [Orabug: 34670747] - uek-rpm: ol9: Disable CONFIG_IR_MCEUSB from UEK7 OL9. (Harshit Mogalapalli) [Orabug: 34820237] - IB/mlx5: Add a signature check to received EQEs and CQEs (Rohit Nair) [Orabug: 34821073] - rds: ib: Avoid tear-down of caches unless already initialized (Hakon Bugge) [Orabug: 34826403] - KVM: SVM: Fix AVIC GATag to support max number of vCPUs (Suravee Suthikulpanit) [Orabug: 34961703] - Revert 'rds: ib: Enable FC by default' (Hakon Bugge) [Orabug: 34964359] - uek-rpm: Add nft_reject* modules to core rpm. (Somasundaram Krishnasamy) [Orabug: 34970060] - cpufreq: intel_pstate: Support Sapphire Rapids OOB mode (Srinivas Pandruvada) [Orabug: 34961609] [5.15.0-7.86.1] - LTS version: v5.15.86 (Jack Vogel) - pwm: tegra: Fix 32 bit build (Steven Price) - mfd: qcom_rpm: Use devm_of_platform_populate() to simplify code (Christophe JAILLET) - extcon: usbc-tusb320: Call the Type-C IRQ handler only if a port is registered (Yassine Oudjana) - media: dvbdev: fix refcnt bug (Lin Ma) - media: dvbdev: fix build warning due to comments (Lin Ma) - net: stmmac: fix errno when create_singlethread_workqueue() fails (Gaosheng Cui) - scsi: qla2xxx: Fix crash when I/O abort times out (Arun Easi) - btrfs: do not BUG_ON() on ENOMEM when dropping extent items for a range (Filipe Manana) - ovl: fix use inode directly in rcu-walk mode (Chen Zhongjin) - fbdev: fbcon: release buffer when fbcon_do_set_font() failed (Tetsuo Handa) - gcov: add support for checksum field (Rickard x Andersson) - floppy: Fix memory leak in do_floppy_init() (Yuan Can) - regulator: core: fix deadlock on regulator enable (Johan Hovold) - iio: adc128s052: add proper .data members in adc128_of_match table (Rasmus Villemoes) - iio: adc: ad_sigma_delta: do not use internal iio_dev lock (Nuno Sa) - iio: fix memory leak in iio_device_register_eventset() (Zeng Heng) - reiserfs: Add missing calls to reiserfs_security_free() (Roberto Sassu) - security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6 (Nathan Chancellor) - 9p: set req refcount to zero to avoid uninitialized usage (Schspa Shi) - loop: Fix the max_loop commandline argument treatment when it is set to 0 (Isaac J. Manjarres) - HID: mcp2221: don't connect hidraw (Enrik Berkhan) - HID: wacom: Ensure bootloader PID is usable in hidraw mode (Jason Gerecke) - xhci: Prevent infinite loop in transaction errors recovery for streams (Mathias Nyman) - usb: dwc3: core: defer probe on ulpi_read_id timeout (Ferry Toth) - usb: dwc3: Fix race between dwc3_set_mode and __dwc3_set_mode (Sven Peter) - arm64: dts: qcom: sm8250: fix USB-DP PHY registers (Johan Hovold) - usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq (Chunfeng Yun) - usb: cdnsp: fix lack of ZLP for ep0 (Pawel Laszczak) - ALSA: hda/hdmi: Add HP Device 0x8711 to force connect list (Jiao Zhou) - ALSA: hda/realtek: Add quirk for Lenovo TianYi510Pro-14IOB (Edward Pacman) - ALSA: usb-audio: add the quirk for KT0206 device (wangdicheng) - ima: Simplify ima_lsm_copy_rule (GUO Zihua) - pstore: Make sure CONFIG_PSTORE_PMSG selects CONFIG_RT_MUTEXES (John Stultz) - afs: Fix lost servers_outstanding count (David Howells) - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Yang Jihong) - pstore: Switch pmsg_lock to an rt_mutex to avoid priority inversion (John Stultz) - LoadPin: Ignore the 'contents' argument of the LSM hooks (Kees Cook) - drm/i915/display: Don't disable DDI/Transcoder when setting phy test pattern (Khaled Almahallawy) - ASoC: rt5670: Remove unbalanced pm_runtime_put() (Hans de Goede) - ASoC: rockchip: spdif: Add missing clk_disable_unprepare() in rk_spdif_runtime_resume() (Wang Jingjin) - ASoC: wm8994: Fix potential deadlock (Marek Szyprowski) - ASoC: mediatek: mt8183: fix refcount leak in mt8183_mt6358_ts3a227_max98357_dev_probe() (Wang Yufen) - ASoC: rockchip: pdm: Add missing clk_disable_unprepare() in rockchip_pdm_runtime_resume() (Wang Jingjin) - ASoC: audio-graph-card: fix refcount leak of cpu_ep in __graph_for_each_link() (Wang Yufen) - ASoC: mediatek: mt8173-rt5650-rt5514: fix refcount leak in mt8173_rt5650_rt5514_dev_probe() (Wang Yufen) - ASoC: Intel: Skylake: Fix driver hang during shutdown (Cezary Rojewski) - ALSA: hda: add snd_hdac_stop_streams() helper (Pierre-Louis Bossart) - ALSA/ASoC: hda: move/rename snd_hdac_ext_stop_streams to hdac_stream.c (Pierre-Louis Bossart) - hwmon: (jc42) Fix missing unlock on error in jc42_write() (Yang Yingliang) - KVM: selftests: Fix build regression by using accessor function (Tyler Hicks) - tools/include: Add _RET_IP_ and math definitions to kernel.h (Karolina Drobnik) - orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init() (Zhang Xiaoxu) - orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string() (Zhang Xiaoxu) - drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid() (Nathan Chancellor) - drm/fsl-dcu: Fix return type of fsl_dcu_drm_connector_mode_valid() (Nathan Chancellor) - hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() (Hawkins Jiawei) - scsi: elx: libefc: Fix second parameter type in state callbacks (Nathan Chancellor) - scsi: ufs: Reduce the START STOP UNIT timeout (Bart Van Assche) - scsi: lpfc: Fix hard lockup when reading the rx_monitor from debugfs (Justin Tee) - crypto: hisilicon/hpre - fix resource leak in remove process (Zhiqi Song) - clk: st: Fix memory leak in st_of_quadfs_setup() (Xiu Jianfeng) - media: si470x: Fix use-after-free in si470x_int_in_callback() (Shigeru Yoshida) - mmc: renesas_sdhi: better reset from HS400 mode (Wolfram Sang) - mmc: f-sdh30: Add quirks for broken timeout clock capability (Kunihiko Hayashi) - wifi: mt76: do not run mt76u_status_worker if the device is not running (Lorenzo Bianconi) - regulator: core: fix use_count leakage when handling boot-on (Rui Zhang) - libbpf: Avoid enum forward-declarations in public API in C++ mode (Andrii Nakryiko) - drm/amd/display: Use the largest vready_offset in pipe group (Wesley Chalmers) - blk-mq: fix possible memleak when register 'hctx' failed (Ye Bin) - media: dvb-usb: fix memory leak in dvb_usb_adapter_init() (Mazin Al Haddad) - media: dvbdev: adopts refcnt to avoid UAF (Lin Ma) - media: dvb-frontends: fix leak of memory fw (Yan Lei) - ethtool: avoiding integer overflow in ethtool_phys_id() (Maxim Korotkov) - bpf: Prevent decl_tag from being referenced in func_proto arg (Stanislav Fomichev) - ppp: associate skb with a device at tx (Stanislav Fomichev) - mrp: introduce active flags to prevent UAF when applicant uninit (Schspa Shi) - ipv6/sit: use DEV_STATS_INC() to avoid data-races (Eric Dumazet) - net: add atomic_long_t to net_device_stats fields (Eric Dumazet) - drm/amd/display: fix array index out of bound error in bios parser (Aurabindo Pillai) - md/raid1: stop mdx_raid1 thread when raid1 array run failed (Jiang Li) - drivers/md/md-bitmap: check the return value of md_bitmap_get_counter() (Li Zhong) - drm/mediatek: Fix return type of mtk_hdmi_bridge_mode_valid() (Nathan Chancellor) - drm/sti: Use drm_mode_copy() (Ville Syrjala) - drm/rockchip: Use drm_mode_copy() (Ville Syrjala) - drm/msm: Use drm_mode_copy() (Ville Syrjala) - s390/lcs: Fix return type of lcs_start_xmit() (Nathan Chancellor) - s390/netiucv: Fix return type of netiucv_tx() (Nathan Chancellor) - s390/ctcm: Fix return type of ctc{mp,}m_tx() (Nathan Chancellor) - drm/amdgpu: Fix type of second parameter in odn_edit_dpm_table() callback (Nathan Chancellor) - drm/amdgpu: Fix type of second parameter in trans_msg() callback (Nathan Chancellor) - igb: Do not free q_vector unless new one was allocated (Kees Cook) - wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() (Minsuk Kang) - hamradio: baycom_epp: Fix return type of baycom_send_packet() (Nathan Chancellor) - net: ethernet: ti: Fix return type of netcp_ndo_start_xmit() (Nathan Chancellor) - bpf: make sure skb->len != 0 when redirecting to a tunneling device (Stanislav Fomichev) - qed (gcc13): use u16 for fid to be big enough (Jiri Slaby (SUSE)) - Revert 'drm/amd/display: Limit max DSC target bpp for specific monitors' (Hamza Mahfooz) - drm/amd/display: prevent memory leak (gehao) - ipmi: fix memleak when unload ipmi driver (Zhang Yuchen) - ASoC: codecs: rt298: Add quirk for KBL-R RVP platform (Amadeusz Slawinski) - wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out (Shigeru Yoshida) - wifi: ath9k: verify the expected usb_endpoints are present (Fedor Pchelkin) - brcmfmac: return error when getting invalid max_flowrings from dongle (Wright Feng) - media: imx-jpeg: Disable useless interrupt to avoid kernel panic (Ming Qian) - drm/etnaviv: add missing quirks for GC300 (Doug Brown) - hfs: fix OOB Read in __hfs_brec_find (ZhangPeng) - acct: fix potential integer overflow in encode_comp_t() (Zheng Yejian) - nilfs2: fix shift-out-of-bounds due to too large exponent of block size (Ryusuke Konishi) - nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset() (Ryusuke Konishi) - ACPICA: Fix error code path in acpi_ds_call_control_method() (Rafael J. Wysocki) - fs: jfs: fix shift-out-of-bounds in dbDiscardAG (Hoi Pok Wu) - jfs: Fix fortify moan in symlink (Dr. David Alan Gilbert) - udf: Avoid double brelse() in udf_rename() (Shigeru Yoshida) - fs: jfs: fix shift-out-of-bounds in dbAllocAG (Dongliang Mu) - binfmt_misc: fix shift-out-of-bounds in check_special_flags (Liu Shixin) - x86/hyperv: Remove unregister syscore call from Hyper-V cleanup (Gaurav Kohli) - video: hyperv_fb: Avoid taking busy spinlock on panic path (Guilherme G. Piccoli) - arm64: make is_ttbrX_addr() noinstr-safe (Mark Rutland) - rcu: Fix __this_cpu_read() lockdep warning in rcu_force_quiescent_state() (Zqiang) - HID: amd_sfh: Add missing check for dma_alloc_coherent (Jiasheng Jiang) - net: stream: purge sk_error_queue in sk_stream_kill_queues() (Eric Dumazet) - myri10ge: Fix an error handling path in myri10ge_probe() (Christophe JAILLET) - rxrpc: Fix missing unlock in rxrpc_do_sendmsg() (David Howells) - net_sched: reject TCF_EM_SIMPLE case for complex ematch module (Cong Wang) - mailbox: zynq-ipi: fix error handling while device_register() fails (Yang Yingliang) - mailbox: arm_mhuv2: Fix return value check in mhuv2_probe() (Yang Yingliang) - mailbox: mpfs: read the system controller's status (Conor Dooley) - skbuff: Account for tail adjustment during pull operations (Subash Abhinov Kasiviswanathan) - arm64: dts: mt8183: Fix Mali GPU clock (Chen-Yu Tsai) - soc: mediatek: pm-domains: Fix the power glitch issue (Chun-Jie Chen) - openvswitch: Fix flow lookup to use unmasked key (Eelco Chaudron) - selftests: devlink: fix the fd redirect in dummy_reporter_test (Jakub Kicinski) - rtc: mxc_v2: Add missing clk_disable_unprepare() (GUO Zihua) - igc: Set Qbv start_time and end_time to end_time if not being configured in GCL (Tan Tee Min) - igc: Lift TAPRIO schedule restriction (Kurt Kanzenbach) - igc: recalculate Qbv end_time by considering cycle time (Tan Tee Min) - igc: allow BaseTime 0 enrollment for Qbv (Tan Tee Min) - igc: Add checking for basetime less than zero (Muhammad Husaini Zulkifli) - igc: Use strict cycles for Qbv scheduling (Vinicius Costa Gomes) - igc: Enhance Qbv scheduling by using first flag bit (Vinicius Costa Gomes) - r6040: Fix kmemleak in probe and remove (Li Zetao) - unix: Fix race in SOCK_SEQPACKET's unix_dgram_sendmsg() (Kirill Tkhai) - nfc: pn533: Clear nfc_target before being used (Minsuk Kang) - net: enetc: avoid buffer leaks on xdp_do_redirect() failure (Vladimir Oltean) - selftests/bpf: Add test for unstable CT lookup API (Kumar Kartikeya Dwivedi) - block, bfq: fix possible uaf for 'bfqq->bic' (Yu Kuai) - mISDN: hfcmulti: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - mISDN: hfcpci: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - mISDN: hfcsusb: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - net: macsec: fix net device access prior to holding a lock (Emeel Hakim) - nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure (Dan Aloni) - rtc: pcf85063: fix pcf85063_clkout_control (Alexandre Belloni) - rtc: pic32: Move devm_rtc_allocate_device earlier in pic32_rtc_probe() (Gaosheng Cui) - rtc: st-lpc: Add missing clk_disable_unprepare in st_rtc_probe() (Gaosheng Cui) - netfilter: flowtable: really fix NAT IPv6 offload (Qingfang DENG) - mfd: pm8008: Fix return value check in pm8008_probe() (Yang Yingliang) - mfd: pm8008: Remove driver data structure pm8008_data (Lee Jones) - mfd: qcom_rpm: Fix an error handling path in qcom_rpm_probe() (Christophe JAILLET) - mfd: bd957x: Fix Kconfig dependency on REGMAP_IRQ (Matti Vaittinen) - powerpc/pseries/eeh: use correct API for error log size (Nathan Lynch) - powerpc/eeh: Drop redundant spinlock initialization (Haowen Bai) - remoteproc: qcom: q6v5: Fix missing clk_disable_unprepare() in q6v5_wcss_qcs404_power_on() (Shang XiaoJing) - remoteproc: qcom_q6v5_pas: Fix missing of_node_put() in adsp_alloc_memory_region() (Yuan Can) - remoteproc: qcom_q6v5_pas: detach power domains on remove (Luca Weiss) - remoteproc: qcom_q6v5_pas: disable wakeup on probe fail or remove (Luca Weiss) - remoteproc: qcom: q6v5: Fix potential null-ptr-deref in q6v5_wcss_init_mmio() (Shang XiaoJing) - remoteproc: sysmon: fix memory leak in qcom_add_sysmon_subdev() (Gaosheng Cui) - pwm: mediatek: always use bus clock for PWM on MT7622 (Daniel Golle) - pwm: mtk-disp: Fix the parameters calculated by the enabled flag of disp_pwm (xinlei lee) - pwm: sifive: Call pwm_sifive_update_clock() while mutex is held (Uwe Kleine-Konig) - iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY (Jason Gunthorpe) - selftests/powerpc: Fix resource leaks (Miaoqian Lin) - powerpc/hv-gpci: Fix hv_gpci event list (Kajol Jain) - powerpc/83xx/mpc832x_rdb: call platform_device_put() in error case in of_fsl_spi_probe() (Yang Yingliang) - powerpc/perf: callchain validate kernel stack pointer bounds (Nicholas Piggin) - powerpc/xive: add missing iounmap() in error path in xive_spapr_populate_irq_data() (Yang Yingliang) - powerpc/xmon: Fix -Wswitch-unreachable warning in bpt_cmds (Gustavo A. R. Silva) - cxl: Fix refcount leak in cxl_calc_capp_routing (Miaoqian Lin) - powerpc/52xx: Fix a resource leak in an error handling path (Christophe JAILLET) - macintosh/macio-adb: check the return value of ioremap() (Xie Shaowen) - macintosh: fix possible memory leak in macio_add_one_device() (Yang Yingliang) - iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() (Yuan Can) - iommu/amd: Fix pci device refcount leak in ppr_notifier() (Yang Yingliang) - rtc: pcf85063: Fix reading alarm (Alexander Stein) - rtc: snvs: Allow a time difference on clock register read (Stefan Eichenberger) - rtc: cmos: Disable ACPI RTC event on removal (Rafael J. Wysocki) - rtc: cmos: Rename ACPI-related functions (Rafael J. Wysocki) - rtc: cmos: Eliminate forward declarations of some functions (Rafael J. Wysocki) - rtc: cmos: Call rtc_wake_setup() from cmos_do_probe() (Rafael J. Wysocki) - rtc: cmos: Call cmos_wake_setup() from cmos_do_probe() (Rafael J. Wysocki) - rtc: cmos: fix build on non-ACPI platforms (Alexandre Belloni) - rtc: cmos: Fix wake alarm breakage (Rafael J. Wysocki) - rtc: cmos: Fix event handler registration ordering issue (Rafael J. Wysocki) - rtc: rtc-cmos: Do not check ACPI_FADT_LOW_POWER_S0 (Rafael J. Wysocki) - dmaengine: idxd: Fix crc_val field for completion record (Fenghua Yu) - fs/ntfs3: Fix slab-out-of-bounds read in ntfs_trim_fs (Abdun Nihaal) - pwm: tegra: Improve required rate calculation (Jon Hunter) - include/uapi/linux/swab: Fix potentially missing __always_inline (Matt Redfearn) - phy: usb: s2 WoL wakeup_count not incremented for USB->Eth devices (Al Cooper) - iommu/rockchip: fix permission bits in page table entries v2 (Michael Riesch) - iommu/sun50i: Fix flush size (Jernej Skrabec) - iommu/sun50i: Fix R/W permission check (Jernej Skrabec) - iommu/sun50i: Consider all fault sources for reset (Jernej Skrabec) - iommu/sun50i: Fix reset release (Jernej Skrabec) - fs/ntfs3: Harden against integer overflows (Dan Carpenter) - overflow: Implement size_t saturating arithmetic helpers (Kees Cook) - fs/ntfs3: Avoid UBSAN error on true_sectors_per_clst() (Shigeru Yoshida) - RDMA/siw: Fix pointer cast warning (Arnd Bergmann) - perf stat: Do not delay the workload with --delay (Namhyung Kim) - perf stat: Refactor __run_perf_stat() common code (Adrian Herrera Arcila) - power: supply: fix null pointer dereferencing in power_supply_get_battery_info (ruanjinjie) - power: supply: ab8500: Fix error handling in ab8500_charger_init() (Yuan Can) - HSI: omap_ssi_core: Fix error handling in ssi_init() (Yuan Can) - power: supply: z2_battery: Fix possible memleak in z2_batt_probe() (Zhang Qilong) - perf symbol: correction while adjusting symbol (Ajay Kaher) - perf trace: Handle failure when trace point folder is missed (Leo Yan) - perf trace: Use macro RAW_SYSCALL_ARGS_NUM to replace number (Leo Yan) - perf trace: Return error if a system call doesn't exist (Leo Yan) - power: supply: fix residue sysfs file in error handle route of __power_supply_register() (Zeng Heng) - HSI: omap_ssi_core: fix possible memory leak in ssi_probe() (Yang Yingliang) - HSI: omap_ssi_core: fix unbalanced pm_runtime_disable() (Yang Yingliang) - fbdev: uvesafb: Fixes an error handling path in uvesafb_probe() (Christophe JAILLET) - fbdev: uvesafb: don't build on UML (Randy Dunlap) - fbdev: geode: don't build on UML (Randy Dunlap) - fbdev: ep93xx-fb: Add missing clk_disable_unprepare in ep93xxfb_probe() (Gaosheng Cui) - fbdev: vermilion: decrease reference count in error path (Xiongfeng Wang) - fbdev: via: Fix error in via_core_init() (Shang XiaoJing) - fbdev: pm2fb: fix missing pci_disable_device() (Yang Yingliang) - fbdev: ssd1307fb: Drop optional dependency (Andy Shevchenko) - thermal/drivers/qcom/lmh: Fix irq handler return value (Bjorn Andersson) - thermal/drivers/qcom/temp-alarm: Fix inaccurate warning for gen2 (Luca Weiss) - thermal/drivers/imx8mm_thermal: Validate temperature range (Marcus Folkesson) - samples: vfio-mdev: Fix missing pci_disable_device() in mdpy_fb_probe() (Shang XiaoJing) - ksmbd: Fix resource leak in ksmbd_session_rpc_open() (Xiu Jianfeng) - tracing/hist: Fix issue of losting command info in error_log (Zheng Yejian) - usb: storage: Add check for kcalloc (Jiasheng Jiang) - i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Zheyu Ma) - i2c: mux: reg: check return value after calling platform_get_resource() (Yang Yingliang) - gpiolib: protect the GPIO device against being dropped while in use by user-space (Bartosz Golaszewski) - gpiolib: make struct comments into real kernel docs (Bartosz Golaszewski) - gpiolib: cdev: fix NULL-pointer dereferences (Bartosz Golaszewski) - gpiolib: Get rid of redundant 'else' (Andy Shevchenko) - vme: Fix error not catched in fake_init() (Chen Zhongjin) - staging: rtl8192e: Fix potential use-after-free in rtllib_rx_Monitor() (YueHaibing) - staging: rtl8192u: Fix use after free in ieee80211_rx() (Dan Carpenter) - i2c: pxa-pci: fix missing pci_disable_device() on error in ce4100_i2c_probe (Hui Tang) - chardev: fix error handling in cdev_device_add() (Yang Yingliang) - mcb: mcb-parse: fix error handing in chameleon_parse_gdd() (Yang Yingliang) - drivers: mcb: fix resource leak in mcb_probe() (Zhengchao Shao) - usb: gadget: f_hid: fix refcount leak on error path (John Keeping) - usb: gadget: f_hid: fix f_hidg lifetime vs cdev (John Keeping) - usb: roles: fix of node refcount leak in usb_role_switch_is_parent() (Yang Yingliang) - coresight: trbe: remove cpuhp instance node before remove cpuhp state (Yang Shen) - counter: stm32-lptimer-cnt: fix the check on arr and cmp registers update (Fabrice Gasnier) - iio: adis: add '__adis_enable_irq()' implementation (Ramona Bolboaca) - iio:imu:adis: Move exports into IIO_ADISLIB namespace (Jonathan Cameron) - iio: adis: stylistic changes (Nuno Sa) - iio: adis: handle devices that cannot unmask the drdy pin (Nuno Sa) - iio: temperature: ltc2983: make bulk write buffer DMA-safe (Cosmin Tanislav) - cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter() (Yang Yingliang) - cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter() (Yang Yingliang) - firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe() (Yang Yingliang) - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os (Zheng Wang) - misc: tifm: fix possible memory leak in tifm_7xx1_switch_media() (ruanjinjie) - ocxl: fix pci device refcount leak when calling get_function_0() (Yang Yingliang) - misc: ocxl: fix possible name leak in ocxl_file_register_afu() (Yang Yingliang) - test_firmware: fix memory leak in test_firmware_init() (Zhengchao Shao) - serial: sunsab: Fix error handling in sunsab_init() (Yuan Can) - serial: altera_uart: fix locking in polling mode (Gabriel Somlo) - tty: serial: altera_uart_{r,t}x_chars() need only uart_port (Jiri Slaby) - tty: serial: clean up stop-tx part in altera_uart_tx_chars() (Jiri Slaby) - serial: pch: Fix PCI device refcount leak in pch_request_dma() (Xiongfeng Wang) - serial: stm32: move dma_request_chan() before clk_prepare_enable() (Valentin Caron) - serial: pl011: Do not clear RX FIFO & RX interrupt in unthrottle. (delisun) - serial: amba-pl011: avoid SBSA UART accessing DMACR register (Jiamei Xie) - extcon: usbc-tusb320: Update state on probe even if no IRQ pending (Marek Vasut) - extcon: usbc-tusb320: Add USB TYPE-C support (Marek Vasut) - extcon: usbc-tusb320: Factor out extcon into dedicated functions (Marek Vasut) - usb: typec: Factor out non-PD fwnode properties (Samuel Holland) - extcon: usbc-tusb320: Add support for TUSB320L (Yassine Oudjana) - extcon: usbc-tusb320: Add support for mode setting and reset (Yassine Oudjana) - usb: typec: tipd: Fix spurious fwnode_handle_put in error path (Sven Peter) - usb: typec: tipd: Cleanup resources if devm_tps6598_psy_register fails (Sven Peter) - usb: typec: tcpci: fix of node refcount leak in tcpci_register_port() (Yang Yingliang) - usb: typec: Check for ops->exit instead of ops->enter in altmode_exit (Sven Peter) - staging: vme_user: Fix possible UAF in tsi148_dma_list_add (Gaosheng Cui) - usb: fotg210-udc: Fix ages old endianness issues (Linus Walleij) - uio: uio_dmem_genirq: Fix deadlock between irq config and handling (Rafael Mendonca) - uio: uio_dmem_genirq: Fix missing unlock in irq configuration (Rafael Mendonca) - vfio: platform: Do not pass return buffer to ACPI _RST method (Rafael Mendonca) - class: fix possible memory leak in __class_register() (Yang Yingliang) - serial: 8250_bcm7271: Fix error handling in brcmuart_init() (Yuan Can) - serial: tegra: Read DMA status before terminating (Kartik) - drivers: dio: fix possible memory leak in dio_init() (Yang Yingliang) - RISC-V: Align the shadow stack (Palmer Dabbelt) - IB/IPoIB: Fix queue count inconsistency for PKEY child interfaces (Dragos Tatulea) - hwrng: geode - Fix PCI device refcount leak (Xiongfeng Wang) - hwrng: amd - Fix PCI device refcount leak (Xiongfeng Wang) - crypto: img-hash - Fix variable dereferenced before check 'hdev->req' (Gaosheng Cui) - RDMA/hns: Fix error code of CMD (Chengchang Tang) - RDMA/hns: Fix page size cap from firmware (Chengchang Tang) - RDMA/hns: Fix PBL page MTR find (Chengchang Tang) - RDMA/hns: Fix AH attr queried by query_qp (Chengchang Tang) - orangefs: Fix sysfs not cleanup when dev init failed (Zhang Xiaoxu) - PCI: mt7621: Add sentinel to quirks table (John Thomson) - PCI: mt7621: Rename mt7621_pci_ to mt7621_pcie_ (Bjorn Helgaas) - RDMA/srp: Fix error return code in srp_parse_options() (Wang Yufen) - RDMA/hfi1: Fix error return code in parse_platform_config() (Wang Yufen) - riscv/mm: add arch hook arch_clear_hugepage_flags (Tong Tiangen) - crypto: omap-sham - Use pm_runtime_resume_and_get() in omap_sham_probe() (Shang XiaoJing) - crypto: amlogic - Remove kcalloc without check (Christophe JAILLET) - RDMA/nldev: Fix failure to send large messages (Mark Zhang) - f2fs: avoid victim selection from previous victim section (Yonggil Song) - RDMA/nldev: Add checks for nla_nest_start() in fill_stat_counter_qps() (Yuan Can) - scsi: snic: Fix possible UAF in snic_tgt_create() (Gaosheng Cui) - scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails (Chen Zhongjin) - scsi: ipr: Fix WARNING in ipr_init() (Shang XiaoJing) - scsi: scsi_debug: Fix possible name leak in sdebug_add_host_helper() (Yang Yingliang) - scsi: fcoe: Fix possible name leak when device_register() fails (Yang Yingliang) - scsi: scsi_debug: Fix a warning in resp_report_zones() (Harshit Mogalapalli) - scsi: scsi_debug: Fix a warning in resp_verify() (Harshit Mogalapalli) - scsi: efct: Fix possible memleak in efct_device_init() (Chen Zhongjin) - scsi: hpsa: Fix possible memory leak in hpsa_add_sas_device() (Yang Yingliang) - scsi: hpsa: Fix error handling in hpsa_add_sas_host() (Yang Yingliang) - scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add() (Yang Yingliang) - padata: Fix list iterator in padata_do_serial() (Daniel Jordan) - padata: Always leave BHs disabled when running ->parallel() (Daniel Jordan) - crypto: tcrypt - Fix multibuffer skcipher speed test mem leak (Zhang Yiqun) - scsi: hpsa: Fix possible memory leak in hpsa_init_one() (Yuan Can) - dt-bindings: visconti-pcie: Fix interrupts array max constraints (Serge Semin) - dt-bindings: imx6q-pcie: Fix clock names for imx6sx and imx8mq (Serge Semin) - RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create failed (Zhang Xiaoxu) - RDMA/hns: fix memory leak in hns_roce_alloc_mr() (Zhengchao Shao) - crypto: ccree - Make cc_debugfs_global_fini() available for module init function (Uwe Kleine-Konig) - RDMA/hfi: Decrease PCI device reference count in error path (Xiongfeng Wang) - PCI: Check for alloc failure in pci_request_irq() (Zeng Heng) - RDMA/hns: Fix ext_sge num error when post send (Luoyouming) - RDMA/hns: Repacing 'dseg_len' by macros in fill_ext_sge_inl_data() (Luoyouming) - crypto: hisilicon/qm - add missing pci_dev_put() in q_num_set() (Xiongfeng Wang) - crypto: cryptd - Use request context instead of stack for sub-request (Herbert Xu) - crypto: ccree - Remove debugfs when platform_driver_register failed (Gaosheng Cui) - scsi: scsi_debug: Fix a warning in resp_write_scat() (Harshit Mogalapalli) - RDMA/siw: Set defined status for work completion with undefined status (Bernard Metzler) - RDMA/nldev: Return '-EAGAIN' if the cm_id isn't from expected port (Mark Zhang) - RDMA/core: Make sure 'ib_port' is valid when access sysfs node (Mark Zhang) - RDMA/restrack: Release MR restrack when delete (Mark Zhang) - PCI: vmd: Disable MSI remapping after suspend (Nirmal Patel) - IB/mad: Don't call to function that might sleep while in atomic context (Leonid Ravich) - RDMA/siw: Fix immediate work request flush to completion queue (Bernard Metzler) - scsi: qla2xxx: Fix set-but-not-used variable warnings (Bart Van Assche) - RDMA/irdma: Report the correct link speed (Shiraz Saleem) - f2fs: fix to destroy sbi->post_read_wq in error path of f2fs_fill_super() (Chao Yu) - f2fs: fix normal discard process (Dongdong Zhang) - f2fs: fix to invalidate dcc->f2fs_issue_discard in error path (Chao Yu) - apparmor: Fix memleak in alloc_ns() (Xiu Jianfeng) - crypto: rockchip - rework by using crypto_engine (Corentin Labbe) - crypto: rockchip - remove non-aligned handling (Corentin Labbe) - crypto: rockchip - better handle cipher key (Corentin Labbe) - crypto: rockchip - add fallback for ahash (Corentin Labbe) - crypto: rockchip - add fallback for cipher (Corentin Labbe) - crypto: rockchip - do not store mode globally (Corentin Labbe) - crypto: rockchip - do not do custom power management (Corentin Labbe) - f2fs: Fix the race condition of resize flag between resizefs (Zhang Qilong) - PCI: pci-epf-test: Register notifier if only core_init_notifier is enabled (Kunihiko Hayashi) - RDMA/core: Fix order of nldev_exit call (Leon Romanovsky) - PCI: dwc: Fix n_fts[] array overrun (Vidya Sagar) - apparmor: Use pointer to struct aa_label for lbs_cred (Xiu Jianfeng) - scsi: core: Fix a race between scsi_done() and scsi_timeout() (Bart Van Assche) - crypto: nitrox - avoid double free on error path in nitrox_sriov_init() (Natalia Petrova) - crypto: sun8i-ss - use dma_addr instead u32 (Corentin Labbe) - crypto: hisilicon/qm - fix missing destroy qp_idr (Weili Qian) - apparmor: Fix abi check to include v8 abi (John Johansen) - apparmor: fix lockdep warning when removing a namespace (John Johansen) - apparmor: fix a memleak in multi_transaction_new() (Gaosheng Cui) - net: dsa: tag_8021q: avoid leaking ctx on dsa_tag_8021q_register() error path (Vladimir Oltean) - i40e: Fix the inability to attach XDP program on downed interface (Bartosz Staszewski) - stmmac: fix potential division by 0 (Piergiorgio Beruto) - Bluetooth: RFCOMM: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - Bluetooth: hci_core: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - Bluetooth: hci_bcsp: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - Bluetooth: hci_h5: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - Bluetooth: hci_ll: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - Bluetooth: hci_qca: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - Bluetooth: btusb: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - Bluetooth: btintel: Fix missing free skb in btintel_setup_combined() (Wang ShaoBo) - Bluetooth: MGMT: Fix error report for ADD_EXT_ADV_PARAMS (Inga Stotland) - sctp: sysctl: make extra pointers netns aware (Firo Yang) - ntb_netdev: Use dev_kfree_skb_any() in interrupt context (Eric Pilmore) - net: lan9303: Fix read error execution path (Jerry Ray) - can: tcan4x5x: Fix use of register error status mask (Markus Schneider-Pargmann) - can: m_can: Call the RAM init directly from m_can_chip_config (Vivek Yadav) - can: tcan4x5x: Remove invalid write in clear_interrupts (Markus Schneider-Pargmann) - net: amd-xgbe: Check only the minimum speed for active/passive cables (Tom Lendacky) - net: amd-xgbe: Fix logic around active and passive cables (Tom Lendacky) - af_unix: call proto_unregister() in the error path in af_unix_init() (Yang Yingliang) - net: amd: lance: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - hamradio: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - net: ethernet: dnet: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - net: emaclite: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - net: apple: bmac: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - net: apple: mace: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - net/tunnel: wait until all sk_user_data reader finish before releasing the sock (Hangbin Liu) - net: farsync: Fix kmemleak when rmmods farsync (Li Zetao) - ethernet: s2io: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop() (ruanjinjie) - drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init() (Yuan Can) - net: stmmac: fix possible memory leak in stmmac_dvr_probe() (Gaosheng Cui) - net: stmmac: selftests: fix potential memleak in stmmac_test_arpoffload() (Zhang Changzhong) - net: defxx: Fix missing err handling in dfx_init() (Yongqiang Liu) - net: vmw_vsock: vmci: Check memcpy_from_msg() (Artem Chernyshev) - clk: socfpga: Fix memory leak in socfpga_gate_init() (Xiu Jianfeng) - bpf: Do not zero-extend kfunc return values (Bjorn Topel) - blktrace: Fix output non-blktrace event when blk_classic option enabled (Yang Jihong) - wifi: brcmfmac: Fix error return code in brcmf_sdio_download_firmware() (Wang Yufen) - wifi: rtl8xxxu: Fix the channel width reporting (Bitterblue Smith) - wifi: rtl8xxxu: Add __packed to struct rtl8723bu_c2h (Bitterblue Smith) - spi: spi-gpio: Don't set MOSI as an input if not 3WIRE mode (Kris Bahnsen) - clk: samsung: Fix memory leak in _samsung_clk_register_pll() (Xiu Jianfeng) - media: coda: Add check for kmalloc (Jiasheng Jiang) - media: coda: Add check for dcoda_iram_alloc (Jiasheng Jiang) - media: c8sectpfe: Add of_node_put() when breaking out of loop (Liang He) - regulator: qcom-labibb: Fix missing of_node_put() in qcom_labibb_regulator_probe() (Yuan Can) - mmc: core: Normalize the error handling branch in sd_read_ext_regs() (Zhen Lei) - memstick/ms_block: Add check for alloc_ordered_workqueue (Jiasheng Jiang) - memstick: ms_block: Add error handling support for add_disk() (Luis Chamberlain) - mmc: renesas_sdhi: alway populate SCC pointer (Wolfram Sang) - mmc: mmci: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: wbsd: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: via-sdmmc: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: meson-gx: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: omap_hsmmc: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: atmel-mci: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: wmt-sdmmc: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: vub300: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: toshsd: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: rtsx_pci: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: pxamci: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: mxcmmc: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: moxart: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: alcor: fix return value check of mmc_add_host() (Yang Yingliang) - riscv, bpf: Emit fixed-length instructions for BPF_PSEUDO_FUNC (Pu Lehui) - NFSv4.x: Fail client initialisation if state manager thread can't run (Trond Myklebust) - SUNRPC: Fix missing release socket in rpc_sockname() (Wang ShaoBo) - xprtrdma: Fix regbuf data not freed in rpcrdma_req_create() (Zhang Xiaoxu) - ALSA: mts64: fix possible null-ptr-defer in snd_mts64_interrupt (Gaosheng Cui) - media: saa7164: fix missing pci_disable_device() (Liu Shixin) - ALSA: pcm: Set missing stop_operating flag at undoing trigger start (Takashi Iwai) - bpf, sockmap: fix race in sock_map_free() (Eric Dumazet) - hwmon: (jc42) Restore the min/max/critical temperatures on resume (Martin Blumenstingl) - hwmon: (jc42) Convert register access and caching to regmap/regcache (Martin Blumenstingl) - regulator: core: fix resource leak in regulator_register() (Yang Yingliang) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-3545 CVE-2023-0179 CVE-2022-45869 CVE-2022-4139 Oracle Linux 7 Oracle Linux 8 [5.4.17-2136.316.7] - runtime revert of virtio_net: Stripe queue affinities across cores. (Konrad Rzeszutek Wilk) [Orabug: 35001045] [5.4.17-2136.316.6] - block: Change the granularity of io ticks from ms to ns (Gulam Mohamed) [Orabug: 34780807] - powercap: intel_rapl: support new layout of Psys PowerLimit Register on SPR (Zhang Rui) [Orabug: 34953089] - block-mq: fix hung due to too much warning log (Junxiao Bi) [Orabug: 34979810] - usb: dwc3: core: fix kernel panic when do reboot (Peter Chen) [Orabug: 34988646] - usb: dwc3: debugfs: Add and remove endpoint dirs dynamically (Jack Pham) [Orabug: 34988646] [5.4.17-2136.316.5] - net/rds: Fill in rds_exthdr_size gaps (Gerd Rausch) [Orabug: 34979171] [5.4.17-2136.316.4] - Revert 'RDS: TCP: Track peer's connection generation number' (Gerd Rausch) [Orabug: 34700110] - net/rds: Trigger rds_send_hs_ping() more than once (Gerd Rausch) [Orabug: 34607845] - net/rds: Kick-start TCP receiver after accept (Gerd Rausch) [Orabug: 34600820] - net/rds: Use the first lane until RDS_EXTHDR_NPATHS arrives (Gerd Rausch) [Orabug: 34314503] - net/rds: Encode cp_index in TCP source port (Gerd Rausch) [Orabug: 34556038] - net/rds: rds_tcp_conn_path_shutdown must not discard messages (Gerd Rausch) [Orabug: 34560701] - IB/mlx5: Add a signature check to received EQEs and CQEs (Rohit Nair) [Orabug: 34821074] - vhost-scsi: Fix max number of virtqueues (Mike Christie) [Orabug: 34915128] - uek-rpm: Add nft_reject* modules to nano rpm. (Somasundaram Krishnasamy) [Orabug: 34966035] - rds: ib: Avoid tear-down of caches unless already initialized (Hakon Bugge) [Orabug: 34830755] - x86/kexec: Do not reserve EFI setup_data in the kexec e820 table (Dave Young) [Orabug: 34864098] - KVM: SVM: Fix AVIC GATag to support max number of vCPUs (Suravee Suthikulpanit) [Orabug: 34961704] [5.4.17-2136.316.3] - LTS tag: v5.4.228 (Sherry Yang) - ASoC: ops: Correct bounds check for second channel on SX controls (Charles Keepax) - can: mcba_usb: Fix termination command argument (Yasushi SHOJI) - can: sja1000: fix size of OCR_MODE_MASK define (Heiko Schocher) - pinctrl: meditatek: Startup with the IRQs disabled (Ricardo Ribalda) - ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx() (Mark Brown) - nfp: fix use-after-free in area_cache_get() (Jialiang Wang) - block: unhash blkdev part inode when the part is deleted (Ming Lei) - mm/hugetlb: fix races when looking up a CONT-PTE/PMD size hugetlb page (Baolin Wang) - x86/smpboot: Move rcu_cpu_starting() earlier (Paul E. McKenney) - net: bpf: Allow TC programs to call BPF_FUNC_skb_change_head (Lorenzo Colitti) - LTS tag: v5.4.227 (Sherry Yang) - can: esd_usb: Allow REC and TEC to return to zero (Frank Jungclaus) - net: mvneta: Fix an out of bounds check (Dan Carpenter) - ipv6: avoid use-after-free in ip6_fragment() (Eric Dumazet) - net: plip: don't call kfree_skb/dev_kfree_skb() under spin_lock_irq() (Yang Yingliang) - xen/netback: fix build warning (Juergen Gross) - ethernet: aeroflex: fix potential skb leak in greth_init_rings() (Zhang Changzhong) - ipv4: Fix incorrect route flushing when table ID 0 is used (Ido Schimmel) - ipv4: Fix incorrect route flushing when source address is deleted (Ido Schimmel) - tipc: Fix potential OOB in tipc_link_proto_rcv() (YueHaibing) - net: hisilicon: Fix potential use-after-free in hix5hd2_rx() (Liu Jian) - net: hisilicon: Fix potential use-after-free in hisi_femac_rx() (Liu Jian) - net: thunderx: Fix missing destroy_workqueue of nicvf_rx_mode_wq (Yongqiang Liu) - net: stmmac: fix 'snps,axi-config' node property parsing (Jisheng Zhang) - nvme initialize core quirks before calling nvme_init_subsystem (Pankaj Raghav) - NFC: nci: Bounds check struct nfc_target arrays (Kees Cook) - i40e: Disallow ip4 and ip6 l4_4_bytes (Przemyslaw Patynowski) - i40e: Fix for VF MAC address 0 (Sylwester Dziedziuch) - i40e: Fix not setting default xps_cpus after reset (Michal Jaron) - net: mvneta: Prevent out of bounds read in mvneta_config_rss() (Dan Carpenter) - xen-netfront: Fix NULL sring after live migration (Lin Liu) - net: encx24j600: Fix invalid logic in reading of MISTAT register (Valentina Goncharenko) - net: encx24j600: Add parentheses to fix precedence (Valentina Goncharenko) - mac802154: fix missing INIT_LIST_HEAD in ieee802154_if_add() (Wei Yongjun) - selftests: rtnetlink: correct xfrm policy rule in kci_test_ipsec_offload (Zhengchao Shao) - net: dsa: ksz: Check return value (Artem Chernyshev) - Bluetooth: Fix not cleanup led when bt_init fails (Chen Zhongjin) - Bluetooth: 6LoWPAN: add missing hci_dev_put() in get_l2cap_conn() (Wang ShaoBo) - af_unix: Get user_ns from in_skb in unix_diag_get_exact(). (Kuniyuki Iwashima) - igb: Allocate MSI-X vector when testing (Akihiko Odaki) - e1000e: Fix TX dispatch condition (Akihiko Odaki) - gpio: amd8111: Fix PCI device reference count leak (Xiongfeng Wang) - drm/bridge: ti-sn65dsi86: Fix output polarity setting bug (Qiqi Zhang) - ca8210: Fix crash by zero initializing data (Hauke Mehrtens) - ieee802154: cc2520: Fix error return code in cc2520_hw_init() (Ziyang Xuan) - can: af_can: fix NULL pointer dereference in can_rcv_filter (Oliver Hartkopp) - HID: core: fix shift-out-of-bounds in hid_report_raw_event (ZhangPeng) - HID: hid-lg4ff: Add check for empty lbuf (Anastasia Belova) - HID: usbhid: Add ALWAYS_POLL quirk for some mice (Ankit Patel) - drm/shmem-helper: Remove errant put in error path (Rob Clark) - KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (Thomas Huth) - mm/gup: fix gup_pud_range() for dax (John Starks) - memcg: fix possible use-after-free in memcg_write_event_control() (Tejun Heo) - media: v4l2-dv-timings.c: fix too strict blanking sanity checks (Hans Verkuil) - Revert 'net: dsa: b53: Fix valid setting for MDB entries' (Rafal Milecki) - xen/netback: don't call kfree_skb() with interrupts disabled (Juergen Gross) - xen/netback: do some code cleanup (Juergen Gross) - xen/netback: Ensure protocol headers don't fall in the non-linear area (Ross Lagerwall) - mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths (Jann Horn) - mm/khugepaged: fix GUP-fast interaction by sending IPI (Jann Horn) - mm/khugepaged: take the right locks for page table retraction (Jann Horn) - net: usb: qmi_wwan: add u-blox 0x1342 composition (Davide Tronchin) - 9p/xen: check logical size for buffer size (Dominique Martinet) - fbcon: Use kzalloc() in fbcon_prepare_logo() (Tetsuo Handa) - regulator: twl6030: fix get status of twl6032 regulators (Andreas Kemnade) - ASoC: soc-pcm: Add NULL check in BE reparenting (Srinivasa Rao Mandadapu) - btrfs: send: avoid unaligned encoded writes when attempting to clone range (Filipe Manana) - ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event (Kees Cook) - regulator: slg51000: Wait after asserting CS pin (Konrad Dybcio) - 9p/fd: Use P9_HDRSZ for header size (GUO Zihua) - ARM: dts: rockchip: disable arm_global_timer on rk3066 and rk3188 (Johan Jonker) - ARM: 9266/1: mm: fix no-MMU ZERO_PAGE() implementation (Giulio Benetti) - ARM: 9251/1: perf: Fix stacktraces for tracepoint events in THUMB2 kernels (Tomislav Novak) - ARM: dts: rockchip: rk3188: fix lcdc1-rgb24 node name (Johan Jonker) - ARM: dts: rockchip: fix ir-receiver node names (Johan Jonker) - arm: dts: rockchip: fix node name for hym8563 rtc (Sebastian Reichel) - arm64: dts: rockchip: keep I2S1 disabled for GPIO function on ROCK Pi 4 series (FUKAUMI Naoki) - LTS tag: v5.4.226 (Sherry Yang) - ipc/sem: Fix dangling sem_array access in semtimedop race (Jann Horn) - v4l2: don't fall back to follow_pfn() if pin_user_pages_fast() fails (Linus Torvalds) - mmc: sdhci: Fix voltage switch delay (Adrian Hunter) - mmc: sdhci: use FIELD_GET for preset value bit masks (Masahiro Yamada) - char: tpm: Protect tpm_pm_suspend with locks (Jan Dabros) - Revert 'clocksource/drivers/riscv: Events are stopped during CPU suspend' (Conor Dooley) - x86/ioremap: Fix page aligned size calculation in __ioremap_caller() (Michael Kelley) - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (Luiz Augusto von Dentz) {CVE-2022-42896} - x86/pm: Add enumeration check before spec MSRs save/restore setup (Pawan Gupta) - x86/tsx: Add a feature bit for TSX control MSR support (Pawan Gupta) - nvme: ensure subsystem reset is single threaded (Keith Busch) - nvme: restrict management ioctls to admin (Keith Busch) - epoll: check for events when removing a timed out thread from the wait queue (Soheil Hassas Yeganeh) - epoll: call final ep_events_available() check under the lock (Roman Penyaev) - ipv4: Fix route deletion when nexthop info is not specified (Ido Schimmel) - ipv4: Handle attempt to delete multipath route when fib_info contains an nh reference (David Ahern) - selftests: net: fix nexthop warning cleanup double ip typo (Nikolay Aleksandrov) - selftests: net: add delete nexthop route warning test (Nikolay Aleksandrov) - Kconfig.debug: provide a little extra FRAME_WARN leeway when KASAN is enabled (Lee Jones) - parisc: Increase FRAME_WARN to 2048 bytes on parisc (Helge Deller) - xtensa: increase size of gcc stack frame check (Guenter Roeck) - parisc: Increase size of gcc stack frame check (Helge Deller) - iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() (Xiongfeng Wang) - pinctrl: single: Fix potential division by zero (Maxim Korotkov) - ASoC: ops: Fix bounds check for _sx controls (Mark Brown) - mm: Fix '.data.once' orphan section warning (Nathan Chancellor) - arm64: errata: Fix KVM Spectre-v2 mitigation selection for Cortex-A57/A72 (James Morse) - arm64: Fix panic() when Spectre-v2 causes Spectre-BHB to re-allocate KVM vectors (James Morse) - tracing: Free buffers when a used dynamic event is removed (Steven Rostedt (Google)) - mmc: sdhci-sprd: Fix no reset data and command after voltage switch (Wenchao Chen) - mmc: sdhci-esdhc-imx: correct CQHCI exit halt state check (Sebastian Falbesoner) - mmc: core: Fix ambiguous TRIM and DISCARD arg (Christian Lohle) - mmc: mmc_test: Fix removal of debugfs file (Ye Bin) - pinctrl: intel: Save and restore pins in 'direct IRQ' mode (Andy Shevchenko) - nilfs2: fix NULL pointer dereference in nilfs_palloc_commit_free_entry() (ZhangPeng) - tools/vm/slabinfo-gnuplot: use 'grep -E' instead of 'egrep' (Tiezhu Yang) - error-injection: Add prompt for function error injection (Steven Rostedt (Google)) - net/mlx5: DR, Fix uninitialized var warning (YueHaibing) - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (Yang Yingliang) - hwmon: (coretemp) Check for null before removing sysfs attrs (Phil Auld) - net: ethernet: renesas: ravb: Fix promiscuous mode after system resumed (Yoshihiro Shimoda) - sctp: fix memory leak in sctp_stream_outq_migrate() (Zhengchao Shao) - packet: do not set TP_STATUS_CSUM_VALID on CHECKSUM_COMPLETE (Willem de Bruijn) - net: tun: Fix use-after-free in tun_detach() (Shigeru Yoshida) - afs: Fix fileserver probe RTT handling (David Howells) - net: hsr: Fix potential use-after-free (YueHaibing) - dsa: lan9303: Correct stat name (Jerry Ray) - net: ethernet: nixge: fix NULL dereference (Yuri Karpov) - net/9p: Fix a potential socket leak in p9_socket_open (Wang Hai) - net: net_netdev: Fix error handling in ntb_netdev_init_module() (Yuan Can) - net: phy: fix null-ptr-deref while probe() failed (Yang Yingliang) - wifi: cfg80211: fix buffer overflow in elem comparison (Johannes Berg) - qlcnic: fix sleep-in-atomic-context bugs caused by msleep (Duoming Zhou) - can: cc770: cc770_isa_probe(): add missing free_cc770dev() (Zhang Changzhong) - can: sja1000_isa: sja1000_isa_probe(): add missing free_sja1000dev() (Zhang Changzhong) - net/mlx5e: Fix use-after-free when reverting termination table (Roi Dayan) - net/mlx5: Fix uninitialized variable bug in outlen_write() (YueHaibing) - of: property: decrement node refcount in of_fwnode_get_reference_args() (Yang Yingliang) - hwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails (Gaosheng Cui) - hwmon: (i5500_temp) fix missing pci_disable_device() (Yang Yingliang) - scripts/faddr2line: Fix regression in name resolution on ppc64le (Srikar Dronamraju) - iio: light: rpr0521: add missing Kconfig dependencies (Paul Gazzillo) - iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw (Wei Yongjun) - iio: health: afe4403: Fix oob read in afe4403_read_raw (Wei Yongjun) - btrfs: qgroup: fix sleep from invalid context bug in btrfs_qgroup_inherit() (ChenXiaoSong) - drm/amdgpu: Partially revert 'drm/amdgpu: update drm_display_info correctly when the edid is read' (Alex Deucher) - drm/amdgpu: update drm_display_info correctly when the edid is read (Claudio Suarez) - btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker (Nikolay Borisov) - spi: spi-imx: Fix spi_bus_clk if requested clock is higher than input clock (Frieder Schrempf) - btrfs: free btrfs_path before copying inodes to userspace (Anand Jain) - fuse: lock inode unconditionally in fuse_fallocate() (Miklos Szeredi) - drm/i915: fix TLB invalidation for Gen12 video and compute engines (Andrzej Hajda) {CVE-2022-4139} - drm/amdgpu: always register an MMU notifier for userptr (Christian Konig) - drm/amd/dc/dce120: Fix audio register mapping, stop triggering KASAN (Lyude Paul) - btrfs: sysfs: normalize the error handling branch in btrfs_init_sysfs() (Zhen Lei) - btrfs: free btrfs_path before copying subvol info to userspace (Anand Jain) - btrfs: free btrfs_path before copying fspath to userspace (Anand Jain) - btrfs: free btrfs_path before copying root refs to userspace (Josef Bacik) - binder: Gracefully handle BINDER_TYPE_FDA objects with num_fds=0 (Alessandro Astone) - binder: Address corner cases in deferred copy and fixup (Alessandro Astone) - binder: fix pointer cast warning (Arnd Bergmann) - binder: defer copies of pre-patched txn data (Todd Kjos) - binder: read pre-translated fds from sender buffer (Todd Kjos) - binder: avoid potential data leakage when copying txn (Todd Kjos) - dm integrity: flush the journal on suspend (Mikulas Patocka) - net: usb: qmi_wwan: add Telit 0x103a composition (Enrico Sau) - tcp: configurable source port perturb table size (Gleb Mazovetskiy) - platform/x86: hp-wmi: Ignore Smart Experience App event (Kai-Heng Feng) - platform/x86: acer-wmi: Enable SW_TABLET_MODE on Switch V 10 (SW5-017) (Hans de Goede) - platform/x86: asus-wmi: add missing pci_dev_put() in asus_wmi_set_xusb2pr() (Xiongfeng Wang) - xen/platform-pci: add missing free_irq() in error path (ruanjinjie) - serial: 8250: 8250_omap: Avoid RS485 RTS glitch on ->set_termios() (Lukas Wunner) - ASoC: Intel: bytcht_es8316: Add quirk for the Nanote UMPC-01 (Hans de Goede) - Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode (Aman Dhoot) - gcov: clang: fix the buffer overflow issue (Mukesh Ojha) - nilfs2: fix nilfs_sufile_mark_dirty() not set segment usage as dirty (Chen Zhongjin) - firmware: coreboot: Register bus in module init (Brian Norris) - firmware: google: Release devices before unregistering the bus (Patrick Rudolph) - ceph: avoid putting the realm twice when decoding snaps fails (Xiubo Li) - ceph: do not update snapshot context when there is no new snapshot (Xiubo Li) - iio: pressure: ms5611: fixed value compensation bug (Mitja Spes) - iio: ms5611: Simplify IO callback parameters (Lars-Peter Clausen) - nios2: add FORCE for vmlinuz.gz (Randy Dunlap) - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Alexandre Belloni) - iio: core: Fix entry not deleted when iio_register_sw_trigger_type() fails (Chen Zhongjin) - iio: light: apds9960: fix wrong register for gesture gain (Alejandro Concepcion Rodriguez) - arm64: dts: rockchip: lower rk3399-puma-haikou SD controller clock frequency (Jakob Unterwurzacher) - usb: dwc3: exynos: Fix remove() function (Marek Szyprowski) - lib/vdso: use 'grep -E' instead of 'egrep' (Greg Kroah-Hartman) - s390/crashdump: fix TOD programmable field size (Heiko Carstens) - net: thunderx: Fix the ACPI memory leak (Yu Liao) - nfc: st-nci: fix memory leaks in EVT_TRANSACTION (Martin Faltesek) - nfc: st-nci: fix incorrect validating logic in EVT_TRANSACTION (Martin Faltesek) - s390/dasd: fix no record found for raw_track_access (Stefan Haberland) - dccp/tcp: Reset saddr on failure after inet6?_hash_connect(). (Kuniyuki Iwashima) - bnx2x: fix pci device refcount leak in bnx2x_vf_is_pcie_pending() (Yang Yingliang) - regulator: twl6030: re-add TWL6032_SUBCLASS (Andreas Kemnade) - NFC: nci: fix memory leak in nci_rx_data_packet() (Liu Shixin) - xfrm: Fix ignored return value in xfrm6_init() (Chen Zhongjin) - tipc: check skb_linearize() return value in tipc_disc_rcv() (YueHaibing) - tipc: add an extra conn_get in tipc_conn_alloc (Xin Long) - tipc: set con sock in tipc_conn_alloc (Xin Long) - net/mlx5: Fix FW tracer timestamp calculation (Moshe Shemesh) - Drivers: hv: vmbus: fix possible memory leak in vmbus_device_register() (Yang Yingliang) - Drivers: hv: vmbus: fix double free in the error path of vmbus_add_channel_work() (Yang Yingliang) - nfp: add port from netdev validation for EEPROM access (Jaco Coetzee) - net: pch_gbe: fix pci device refcount leak while module exiting (Yang Yingliang) - net/qla3xxx: fix potential memleak in ql3xxx_send() (Zhang Changzhong) - net/mlx4: Check retval of mlx4_bitmap_init (Peter Kosyh) - ARM: mxs: fix memory leak in mxs_machine_init() (Zheng Yongjun) - 9p/fd: fix issue of list_del corruption in p9_fd_cancel() (Zhengchao Shao) - net: pch_gbe: fix potential memleak in pch_gbe_tx_queue() (Wang Hai) - nfc/nci: fix race with opening and closing (Lin Ma) - net: liquidio: simplify if expression (Leon Romanovsky) - ARM: dts: at91: sam9g20ek: enable udc vbus gpio pinctrl (Michael Grzeschik) - tee: optee: fix possible memory leak in optee_register_device() (Yang Yingliang) - bus: sunxi-rsb: Support atomic transfers (Samuel Holland) - regulator: core: fix UAF in destroy_regulator() (Yang Yingliang) - regulator: core: fix kobject release warning and memory leak in regulator_register() (Zeng Heng) - ASoC: sgtl5000: Reset the CHIP_CLK_CTRL reg on remove (Detlev Casanova) - ARM: dts: am335x-pcm-953: Define fixed regulators in root node (Dominik Haller) - af_key: Fix send_acquire race with pfkey_register (Herbert Xu) - MIPS: pic32: treat port as signed integer (Jason A. Donenfeld) - RISC-V: vdso: Do not add missing symbols to version section in linker script (Nathan Chancellor) - arm64/syscall: Include asm/ptrace.h in syscall_wrapper header. (Kuniyuki Iwashima) - block, bfq: fix null pointer dereference in bfq_bio_bfqg() (Yu Kuai) - drm: panel-orientation-quirks: Add quirk for Acer Switch V 10 (SW5-017) (Hans de Goede) - spi: stm32: fix stm32_spi_prepare_mbr() that halves spi clk for every run (Sean Nyekjaer) - wifi: mac80211: Fix ack frame idr leak when mesh has no route (Nicolas Cavallari) - audit: fix undefined behavior in bit shift for AUDIT_BIT (Gaosheng Cui) - wifi: mac80211_hwsim: fix debugfs attribute ps with rc table support (Jonas Jelonek) - wifi: mac80211: fix memory free error when registering wiphy fail (taozhang) - LTS tag: v5.4.225 (Sherry Yang) - ntfs: check overflow when iterating ATTR_RECORDs (Hawkins Jiawei) - ntfs: fix out-of-bounds read in ntfs_attr_find() (Hawkins Jiawei) - ntfs: fix use-after-free in ntfs_attr_find() (Hawkins Jiawei) - mm: fs: initialize fsdata passed to write_begin/write_end interface (Alexander Potapenko) - 9p/trans_fd: always use O_NONBLOCK read/write (Tetsuo Handa) - gfs2: Switch from strlcpy to strscpy (Andreas Gruenbacher) - gfs2: Check sb_bsize_shift after reading superblock (Andrew Price) - 9p: trans_fd/p9_conn_cancel: drop client lock earlier (Dominique Martinet) - kcm: close race conditions on sk_receive_queue (Cong Wang) - bpf, test_run: Fix alignment problem in bpf_prog_test_run_skb() (Baisong Zhong) - kcm: avoid potential race in kcm_tx_work (Eric Dumazet) - tcp: cdg: allow tcp_cdg_release() to be called multiple times (Eric Dumazet) - macvlan: enforce a consistent minimal mtu (Eric Dumazet) - Input: i8042 - fix leaking of platform device on module removal (Chen Jun) - kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case (Li Huafei) - scsi: target: tcm_loop: Fix possible name leak in tcm_loop_setup_hba_bus() (Yang Yingliang) - ring-buffer: Include dropped pages in counting dirty patches (Steven Rostedt (Google)) - serial: 8250: Flush DMA Rx on RLSI (Ilpo Jarvinen) - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (Alexander Potapenko) - docs: update mediator contact information in CoC doc (Shuah Khan) - mmc: sdhci-pci: Fix possible memory leak caused by missing pci_dev_put() (Xiongfeng Wang) - mmc: sdhci-pci-o2micro: fix card detect fail issue caused by CD# debounce timeout (Chevron Li) - mmc: core: properly select voltage range without power cycle (Yann Gautier) - scsi: zfcp: Fix double free of FSF request when qdio send fails (Benjamin Block) - Input: iforce - invert valid length check when fetching device IDs (Tetsuo Handa) - serial: 8250_lpss: Configure DMA also w/o DMA filter (Ilpo Jarvinen) - serial: 8250: Fall back to non-DMA Rx if IIR_RDI occurs (Ilpo Jarvinen) - dm ioctl: fix misbehavior if list_versions races with module loading (Mikulas Patocka) - iio: pressure: ms5611: changed hardcoded SPI speed to value limited (Mitja Spes) - iio: trigger: sysfs: fix possible memory leak in iio_sysfs_trig_init() (Yang Yingliang) - iio: adc: at91_adc: fix possible memory leak in at91_adc_allocate_trigger() (Yang Yingliang) - usb: chipidea: fix deadlock in ci_otg_del_timer (Duoming Zhou) - usb: add NO_LPM quirk for Realforce 87U Keyboard (Nicolas Dumazet) - USB: serial: option: add Fibocom FM160 0x0111 composition (Reinhard Speyerer) - USB: serial: option: add u-blox LARA-L6 modem (Davide Tronchin) - USB: serial: option: add u-blox LARA-R6 00B modem (Davide Tronchin) - USB: serial: option: remove old LARA-R6 PID (Davide Tronchin) - USB: serial: option: add Sierra Wireless EM9191 (Benoit Monin) - speakup: fix a segfault caused by switching consoles (Mushahid Hussain) - slimbus: stream: correct presence rate frequencies (Krzysztof Kozlowski) - Revert 'usb: dwc3: disable USB core PHY management' (Johan Hovold) - ALSA: usb-audio: Drop snd_BUG_ON() from snd_usbmidi_output_open() (Takashi Iwai) - ring_buffer: Do not deactivate non-existant pages (Daniil Tatianin) - ftrace: Fix null pointer dereference in ftrace_add_mod() (Xiu Jianfeng) - ftrace: Optimize the allocation for mcount entries (Wang Wensheng) - ftrace: Fix the possible incorrect kernel message (Wang Wensheng) - cifs: add check for returning value of SMB2_set_info_init (Anastasia Belova) - net: thunderbolt: Fix error handling in tbnet_init() (Yuan Can) - cifs: Fix wrong return value checking when GETFLAGS (Zhang Xiaoxu) - net/x25: Fix skb leak in x25_lapb_receive_frame() (Wei Yongjun) - platform/x86/intel: pmc: Don't unconditionally attach Intel PMC when virtualized (Roger Pau Monne) - drbd: use after free in drbd_create_device() (Dan Carpenter) - xen/pcpu: fix possible memory leak in register_pcpu() (Yang Yingliang) - bnxt_en: Remove debugfs when pci_register_driver failed (Gaosheng Cui) - net: caif: fix double disconnect client in chnl_net_open() (Zhengchao Shao) - net: macvlan: Use built-in RCU list checking (Chuang Wang) - net: liquidio: release resources when liquidio driver open failed (Zhengchao Shao) - mISDN: fix possible memory leak in mISDN_dsp_element_register() (Yang Yingliang) - net: bgmac: Drop free_netdev() from bgmac_enet_remove() (Wei Yongjun) - ata: libata-transport: fix double ata_host_put() in ata_tport_add() (Yang Yingliang) - arm64: dts: imx8mn: Fix NAND controller size-cells (Marek Vasut) - arm64: dts: imx8mm: Fix NAND controller size-cells (Marek Vasut) - pinctrl: devicetree: fix null pointer dereferencing in pinctrl_dt_to_map (Zeng Heng) - parport_pc: Avoid FIFO port location truncation (Maciej W. Rozycki) - siox: fix possible memory leak in siox_device_add() (Yang Yingliang) - block: sed-opal: kmalloc the cmd/resp buffers (Serge Semin) - ASoC: soc-utils: Remove __exit for snd_soc_util_exit() (Chen Zhongjin) - tty: n_gsm: fix sleep-in-atomic-context bug in gsm_control_send (Duoming Zhou) - serial: imx: Add missing .thaw_noirq hook (Shawn Guo) - serial: 8250: omap: Flush PM QOS work on remove (Tony Lindgren) - serial: 8250: omap: Fix unpaired pm_runtime_put_sync() in omap8250_remove() (Tony Lindgren) - serial: 8250_omap: remove wait loop from Errata i202 workaround (Matthias Schiffer) - ASoC: core: Fix use-after-free in snd_soc_exit() (Chen Zhongjin) - spi: stm32: Print summary 'callbacks suppressed' message (Marek Vasut) - ASoC: codecs: jz4725b: Fix spelling mistake 'Sourc' -> 'Source', 'Routee' -> 'Route' (Colin Ian King) - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm (Luiz Augusto von Dentz) - btrfs: remove pointless and double ulist frees in error paths of qgroup tests (Filipe Manana) - drm/imx: imx-tve: Fix return type of imx_tve_connector_mode_valid (Nathan Huckleberry) - i2c: i801: add lis3lv02d's I2C address for Vostro 5568 (Nam Cao) - NFSv4: Retry LOCK on OLD_STATEID during delegation return (Benjamin Coddington) - selftests/intel_pstate: fix build for ARCH=x86_64 (Ricardo Canuelo) - selftests/futex: fix build for clang (Ricardo Canuelo) - ASoC: codecs: jz4725b: fix capture selector naming (Siarhei Volkau) - ASoC: codecs: jz4725b: use right control for Capture Volume (Siarhei Volkau) - ASoC: codecs: jz4725b: fix reported volume for Master ctl (Siarhei Volkau) - ASoC: codecs: jz4725b: add missed Line In power control bit (Siarhei Volkau) - spi: intel: Fix the offset to get the 64K erase opcode (Mauro Lima) - ASoC: wm8962: Add an event handler for TEMP_HP and TEMP_SPK (Xiaolei Wang) - x86/cpu: Restore AMD's DE_CFG MSR after resume (Borislav Petkov) - net: tun: call napi_schedule_prep() to ensure we own a napi (Eric Dumazet) - dmaengine: at_hdmac: Check return code of dma_async_device_register (Tudor Ambarus) - dmaengine: at_hdmac: Fix impossible condition (Tudor Ambarus) - dmaengine: at_hdmac: Don't allow CPU to reorder channel enable (Tudor Ambarus) - dmaengine: at_hdmac: Fix completion of unissued descriptor in case of errors (Tudor Ambarus) - dmaengine: at_hdmac: Don't start transactions at tx_submit level (Tudor Ambarus) - dmaengine: at_hdmac: Fix at_lli struct definition (Tudor Ambarus) - cert host tools: Stop complaining about deprecated OpenSSL functions (Linus Torvalds) - can: j1939: j1939_send_one(): fix missing CAN header initialization (Oliver Hartkopp) - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (ZhangPeng) - btrfs: selftests: fix wrong error check in btrfs_free_dummy_root() (Zhang Xiaoxu) - platform/x86: hp_wmi: Fix rfkill causing soft blocked wifi (Jorge Lopez) - drm/i915/dmabuf: fix sg_table handling in map_dma_buf (Matthew Auld) - nilfs2: fix use-after-free bug of ns_writer on remount (Ryusuke Konishi) - nilfs2: fix deadlock in nilfs_count_free_blocks() (Ryusuke Konishi) - vmlinux.lds.h: Fix placement of '.data..decrypted' section (Nathan Chancellor) - ALSA: usb-audio: Add DSD support for Accuphase DAC-60 (Jussi Laako) - ALSA: usb-audio: Add quirk entry for M-Audio Micro (Takashi Iwai) - ALSA: hda: fix potential memleak in 'add_widget_node' (Ye Bin) - ALSA: hda/ca0132: add quirk for EVGA Z390 DARK (Xian Wang) - mmc: sdhci-tegra: Fix SDHCI_RESET_ALL for CQHCI (Brian Norris) - mmc: sdhci-of-arasan: Fix SDHCI_RESET_ALL for CQHCI (Brian Norris) - mmc: cqhci: Provide helper for resetting both SDHCI and CQHCI (Brian Norris) - MIPS: jump_label: Fix compat branch range check (Jiaxun Yang) - arm64: efi: Fix handling of misaligned runtime regions and drop warning (Ard Biesheuvel) - riscv: process: fix kernel info leakage (Jisheng Zhang) - net: macvlan: fix memory leaks of macvlan_common_newlink (Chuang Wang) - ethernet: tundra: free irq when alloc ring failed in tsi108_open() (Zhengchao Shao) - net: mv643xx_eth: disable napi when init rxq or txq failed in mv643xx_eth_open() (Zhengchao Shao) - ethernet: s2io: disable napi when start nic failed in s2io_card_up() (Zhengchao Shao) - cxgb4vf: shut down the adapter when t4vf_update_port_info() failed in cxgb4vf_open() (Zhengchao Shao) - net: cxgb3_main: disable napi when bind qsets failed in cxgb_up() (Zhengchao Shao) - net: cpsw: disable napi in cpsw_ndo_open() (Zhengchao Shao) - net/mlx5: Allow async trigger completion execution on single CPU systems (Roy Novich) - net: nixge: disable napi when enable interrupts failed in nixge_open() (Zhengchao Shao) - perf stat: Fix printing os->prefix in CSV metrics output (Athira Rajeev) - drivers: net: xgene: disable napi when register irq failed in xgene_enet_open() (Zhengchao Shao) - dmaengine: mv_xor_v2: Fix a resource leak in mv_xor_v2_remove() (Christophe JAILLET) - dmaengine: pxa_dma: use platform_get_irq_optional (Doug Brown) - tipc: fix the msg->req tlv len check in tipc_nl_compat_name_table_dump_header (Xin Long) - can: af_can: fix NULL pointer dereference in can_rx_register() (Zhengchao Shao) - ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network (Alexander Potapenko) - drm/vc4: Fix missing platform_unregister_drivers() call in vc4_drm_register() (Yuan Can) - hamradio: fix issue of dev reference count leakage in bpq_device_event() (Zhengchao Shao) - net: lapbether: fix issue of dev reference count leakage in lapbeth_device_event() (Zhengchao Shao) - capabilities: fix undefined behavior in bit shift for CAP_TO_MASK (Gaosheng Cui) - net: fman: Unregister ethernet device on removal (Sean Anderson) - bnxt_en: fix potentially incorrect return value for ndo_rx_flow_steer (Alex Barba) - bnxt_en: Fix possible crash in bnxt_hwrm_set_coal() (Michael Chan) - net: tun: Fix memory leaks of napi_get_frags (Wang Yufen) - net: gso: fix panic on frag_list with mixed head alloc types (Jiri Benc) - HID: hyperv: fix possible memory leak in mousevsc_probe() (Yang Yingliang) - bpf, sockmap: Fix the sk->sk_forward_alloc warning of sk_stream_kill_queues (Wang Yufen) - wifi: cfg80211: fix memory leak in query_regdb_file() (Arend van Spriel) - wifi: cfg80211: silence a sparse RCU warning (Johannes Berg) - phy: stm32: fix an error code in probe (Dan Carpenter) - xfs: drain the buf delwri queue before xfsaild idles (Brian Foster) - xfs: preserve inode versioning across remounts (Eric Sandeen) - xfs: use MMAPLOCK around filemap_map_pages() (Dave Chinner) - xfs: redesign the reflink remap loop to fix blkres depletion crash (Darrick J. Wong) - xfs: rename xfs_bmap_is_real_extent to is_written_extent (Darrick J. Wong) - xfs: preserve rmapbt swapext block reservation from freed blocks (Brian Foster) [5.4.17-2136.316.2] - netdev, octeon3-ethernet: increase num_packet_buffers to 4096 (Dave Kleikamp) [Orabug: 31351486] - uek-rpm: ol7: Add enhanced kABI diagnostics (Stephen Brennan) [Orabug: 33871940] - uek-rpm: ol8: Add enhanced kABI diagnostics (Stephen Brennan) [Orabug: 33871940] - uek-rpm: ol7: Add Symtypes files (Stephen Brennan) [Orabug: 33871940] - uek-rpm: ol8: Add Symtypes files (Stephen Brennan) [Orabug: 33871940] - uek-rpm: ol7: Enable creation of Symtypes files (Stephen Brennan) [Orabug: 33871940] - uek-rpm: ol8: Enable creation of Symtypes files (Stephen Brennan) [Orabug: 33871940] - uek-rpm: Add kabi tool and documentation (Stephen Brennan) [Orabug: 33871940] - uek-rpm: update config files for SDK-11.22.10 (Dave Kleikamp) [Orabug: 34671021] - drivers: soc: fwlog: Fix compiler warnings (Dave Kleikamp) [Orabug: 34671021] - firmware: octeontx2: sfp-info: Update sfp_info_data (Piyush Malgujar) [Orabug: 34671021] - octeontx2-pcicons: provide toggle for trace_printk (Wojciech Zmuda) [Orabug: 34671021] - octeontx2-af: fix TIM disable lf sequence (Pavan Nikhilesh) [Orabug: 34671021] - driver core: Use unbound workqueue for deferred probes (Yogesh Lal) [Orabug: 34671021] - octeontx2-bphy-netdev: cnf10k: fix for PTP BCN delta (Rakesh Babu Saladi) [Orabug: 34671021] - drivers: soc: sw_up: Fix compatibility (Witold Sadowski) [Orabug: 34671021] - octeontx2-af: rvu: enable mcs fips mailboxes (Ankur Dwivedi) [Orabug: 34671021] - octeontx2-af: mcs: add mailboxes for fips (Ankur Dwivedi) [Orabug: 34671021] - driver: soc: mrvl_phy7121P added tc enablement command (Yi Guo) [Orabug: 34671021] - octeontx2-af: Don't return error when SMQ flush fails (Naveen Mamindlapalli) [Orabug: 34671021] - octeontx2-bphy-netdev: Use PTP ring tail index to read timestamp (Baha Mesleh) [Orabug: 34671021] - PCI: octeontx2-pem-ep: Setup BAR4 region for PTP block access (Roy Franz) [Orabug: 34671021] - octeontx2-af: mcs: set force clock enable (Ankur Dwivedi) [Orabug: 34671021] - drivers: pci-octeon-pem: Rectify RC link recover work (Suneel Garapati) [Orabug: 34671021] - octeontx2-af: Add support for RPM FEC stats (Hariprasad Kelam) [Orabug: 34671021] - firmware: octeontx2: sfp-info: check supported platforms first (Damian Eppel) [Orabug: 34671021] - drivers: pci: octeon-pem: Fix hardware issue (Suneel Garapati) [Orabug: 34671021] - octeontx-af: mcs: Fix mcs interrupt irq name (Geetha sowjanya) [Orabug: 34671021] - octeontx2-bphy-netdev: PTP 1-step improvements (Naveen Mamindlapalli) [Orabug: 34671021] - octeontx2-pf: Add devlink support to configure TL1 RR_PRIO (Hariprasad Kelam) [Orabug: 34671021] - octeontx2-af: mcs: add port config mbox (Vamsi Attunuru) [Orabug: 34671021] - octeontx2-af: mcs: add port reset mbox (Vamsi Attunuru) [Orabug: 34671021] - octeontx2-af: mcs: add packet steering rules support (Vamsi Attunuru) [Orabug: 34671021] - octeontx2-af: set CPT CTX ILEN to 1 (Tejasree Kondoj) [Orabug: 34671021] - octeontx2-af: mcs: add pn threshold mbox (Vamsi Attunuru) [Orabug: 34671021] - octeontx2-af: mcs: extend mcs interrupt handling (Vamsi Attunuru) [Orabug: 34671021] - octeontx2-bphy-netdev:: Share RFOE PTP offset with host (Roy Franz) [Orabug: 34671021] - octeontx2-bphy-netdev: PTP BCN synchronization support for CNF10k platforms. (Rakesh Babu Saladi) [Orabug: 34671021] - hwrng: cn10k - Make check_rng_health() return an error code (Vladis Dronov) [Orabug: 34671021] - hwrng: cn10k - Optimize cn10k_rng_read() (Vladis Dronov) [Orabug: 34671021] - octeontx2-bphy-netdev: Add cnf10k rfoe debugfs (Baha Mesleh) [Orabug: 34671021] - octeontx2-af: serialize bar2 alias access (Srujana Challa) [Orabug: 34671021] - octeontx2-af: add mbox to return CPT_AF_FLT_INT info (Srujana Challa) [Orabug: 34671021] - Revert 'octeontx2-af: set pkind for LBK interfaces' (Sunil Kovvuri Goutham) [Orabug: 34671021] - octeontx2-bphy-netdev: cnf105xxn: fix ptp timestamp in master mode (Naveen Mamindlapalli) [Orabug: 34671021] - octeontx2-bphy-netdev: cnf10k: Modify PTP timestamp format. (Rakesh Babu Saladi) [Orabug: 34671021] - octeontx2-bphy-netdev: convert MIO_PTP_TIMESTAMP value to nsecs (Naveen Mamindlapalli) [Orabug: 34671021] - octeontx2-pcicons: adjust padding size for RT (Wojciech Zmuda) [Orabug: 34671021] - octeontx2-pcicons: remove dev_err() from TTY write (Wojciech Zmuda) [Orabug: 34671021] - octeontx2-pcicons: wait longer for the buffer (Wojciech Zmuda) [Orabug: 34671021] - octeontx2-af: Fix return value in rvu_mbox_handler_nix_lf_stop_rx (Naveen Mamindlapalli) [Orabug: 34671021] - soc: octeontx2-sdp: add multi-PF support in SDP (Radha Mohan Chintakuntla) [Orabug: 34671021] - firmware: smccc: Fix check for ARCH_SOC_ID not implemented (Michael Kelley) [Orabug: 34671021] - firmware: smccc: Export both smccc functions (Sudeep Holla) [Orabug: 34671021] - firmware: smccc: Add ARCH_SOC_ID support (Gowthami Thiagarajan) [Orabug: 34671021] - firmware: smccc: Add the definition for SMCCCv1.2 version/error codes (Sudeep Holla) [Orabug: 34671021] - firmware: smccc: Update link to latest SMCCC specification (Sudeep Holla) [Orabug: 34671021] - firmware: smccc: Fix missing prototype warning for arm_smccc_version_init (Sudeep Holla) [Orabug: 34671021] - firmware: smccc: Refactor SMCCC specific bits into separate file (Gowthami Thiagarajan) [Orabug: 34671021] - firmware: smccc: Drop smccc_version enum and use ARM_SMCCC_VERSION_1_x instead (Gowthami Thiagarajan) [Orabug: 34671021] - firmware: smccc: Add HAVE_ARM_SMCCC_DISCOVERY to identify SMCCC v1.1 and above (Sudeep Holla) [Orabug: 34671021] - firmware/psci: use common SMCCC_CONDUIT_* (Gowthami Thiagarajan) [Orabug: 34671021] - octeontx2-pf: fix hardware timestamp issue for ptp slave (Hariprasad Kelam) [Orabug: 34671021] - octeontx2-af: add read back of AF_BAR2_SEL register (Srujana Challa) [Orabug: 34671021] - octeontx2-af: fix CPT FLT handler (Srujana Challa) [Orabug: 34671021] - drivers: soc: fwlog: Extend firmware bootlog support for cn10k and cn9x (Pragnesh Patel) [Orabug: 34671021] - octeontx2-af: remove support to limit xaq depth (Shijith Thotton) [Orabug: 34671021] - octeontx2-pcicons: disable IRQ when taking a lock (Wojciech Zmuda) [Orabug: 34671021] - octeontx2-af: set pkind for LBK interfaces (Liron Himi) [Orabug: 34671021] - octeontx2-af: Generate masks for packet header fields correctly (Subbaraya Sundeep) [Orabug: 34671021] - misc: bphy: disable ctr module on non-BPHY boards (Jakub Palider) [Orabug: 34671021] - driver: mmc: sdhci-cadence: Dump more PHY registers (Chandrakala Chavva) [Orabug: 34671021] - uek-rpm: aarch64 embedded: disable CONFIG_EFI_BOOTEFI_BUG (Dave Kleikamp) [Orabug: 34671021] - octeontx2-af: fix rvu_cgx_tx_enable to return success for vfs (Naveen Mamindlapalli) [Orabug: 34671021] - drivers: firmware: octeontx2: Adding mub_gen dependency (Piyush Malgujar) [Orabug: 34671021] - drivers: sdhci-cadence: Update HS200 tuning values (Jayanthi Annadurai) [Orabug: 34671021] - octeontx2-bphy-netdev: Fix updating JD pkt length and blocksize (Naveen Mamindlapalli) [Orabug: 34671021] - octeontx2-af: Re-enable mac tx in otx2_stop routine (Naveen Mamindlapalli) [Orabug: 34671021] - octeontx2-pf: consider both Rx and Tx packet stats for adaptive interrupt coalescing (Naveen Mamindlapalli) [Orabug: 34671021] - octeontx2-bphy-netdev: Fix improper names used for IRQs. (Rakesh Babu Saladi) [Orabug: 34671021] - drivers: sdhci-cadence: Increase hold time for HS52 and DDR52 modes (Jayanthi Annadurai) [Orabug: 34671021] - drivers: firmware: octeontx2: Config memtest module as trisate (Piyush Malgujar) [Orabug: 34671021] - driver: edac: octeontx: Add CPU RAS error report (Vasyl Gomonovych) [Orabug: 34671021] - perf cs-etm: Use existing decoder instead of resetting it (James Clark) [Orabug: 34671021] - perf cs-etm: Suppress printing when resetting decoder (James Clark) [Orabug: 34671021] - perf cs-etm: Only setup queues when they are modified (James Clark) [Orabug: 34671021] - perf cs-etm: Split setup and timestamp search functions (James Clark) [Orabug: 34671021] - perf cs-etm: Refactor initialisation of kernel start address (James Clark) [Orabug: 34671021] - perf cs-etm: Split --dump-raw-trace by AUX records (James Clark) [Orabug: 34671021] - perf cs-etm: Split Coresight decode by aux records (James Clark) [Orabug: 34671021] - perf cs-etm: Delay decode of non-timeless data until cs_etm__flush_events() (James Clark) [Orabug: 34671021] - perf cs-etm: Remove callback cs_etm_find_snapshot() (Leo Yan) [Orabug: 34671021] - perf cs-etm: Move synth_opts initialisation (James Clark) [Orabug: 34671021] - perf cs-etm: Set time on synthesised samples to preserve ordering (James Clark) [Orabug: 34671021] - perf cs-etm: Refactor timestamp variable names (James Clark) [Orabug: 34671021] - perf session: Add facility to peek at all events (Adrian Hunter) [Orabug: 34671021] - octeontx2-af: Do not use default unicast entry action always (Subbaraya Sundeep) [Orabug: 34671021] - octeontx2-af: modify FLR sequence for CPT (Srujana Challa) [Orabug: 34671021] - octeontx2-af: Do not read CGX FEC CSRs on CN10K (Sunil Goutham) [Orabug: 34671021] - drivers: firmware: octeontx2: Fix Kconfig dependency (Piyush Malgujar) [Orabug: 34671021] - driver :soc :phy7121:MACsec: Params support for SA (Narendra Hadke) [Orabug: 34671021] - octeontx2-af: Derive fifo size assigned to given LMAC (Hariprasad Kelam) [Orabug: 34671021] - octeontx2-af: CN10KB MAC RPM_100/USX support (Hariprasad Kelam) [Orabug: 34671021] - octeontx2-af: Support variable number of LMACS per MAC (Hariprasad Kelam) [Orabug: 34671021] - i2c: mv64xxx: Fix random system lock caused by runtime PM (Marek Behun) [Orabug: 34671021] - octeontx2-af: add support for SSO WQE stashing (Pavan Nikhilesh) [Orabug: 34671021] - octeontx2-af: add additional description to irqs (Pavan Nikhilesh) [Orabug: 34671021] - uek-rpm: update config files for SDK-11.22.08 (Dave Kleikamp) [Orabug: 34671021] - drivers: marvell: otx2-sdei-ghes: Fix error records overflow (Vasyl Gomonovych) [Orabug: 34671021] - octeontx2-af: mcs: Fix rvu mcs initialization (Geetha sowjanya) [Orabug: 34671021] - irqchip/gicv3-its: Workaround for Marvell errata 35443 for 9xx (Geetha sowjanya) [Orabug: 34671021] - driver: edac: octeontx: Refactor EDAC driver (Vasyl Gomonovych) [Orabug: 34671021] - drivers: soc: sw_up: Update return code handling (Witold Sadowski) [Orabug: 34671021] - drivers: firmware: octeontx2: fixing the return values (Piyush Malgujar) [Orabug: 34671021] - drivers: i2c: octeon: Skip M divider limit for OcteonTX2 (Suneel Garapati) [Orabug: 34671021] - driver: firmware: Fix kconfig dependencies on mhu driver (Chandrakala Chavva) [Orabug: 34671021] - octeontx2-af: mcs: Add SA interrupt handling support (Geetha sowjanya) [Orabug: 34671021] - octeontx2-af: add TIM adjust GTI errata workaround (Shijith Thotton) [Orabug: 34671021] - octeontx2-af: add SSO XAQ AURA access errata workaround (Shijith Thotton) [Orabug: 34671021] - octeontx2-af: add programming SDP BPID in cn10k (Radha Mohan Chintakuntla) [Orabug: 34671021] - octeontx2-af: Enable LBK links only when switch mode is on. (Subbaraya Sundeep) [Orabug: 34671021] - octeontx2-pf: Forward VF UP messages iff VFs are present (Subbaraya Sundeep) [Orabug: 34671021] - driver: soc: mrvl_phy7121P added rclk command to adv feature (Yi Guo) [Orabug: 34671021] - octeontx2-af: mcs: Set mcs to bypass on error (Geetha sowjanya) [Orabug: 34671021] - octeontx2-af: HW workaround for NPA buffer free (Geetha sowjanya) [Orabug: 34671021] - octeontx2-pf: Fix SQE threshold checking (Ratheesh Kannoth) [Orabug: 34671021] - octeontx2-af: ptp: Fix the sequence of register configuration (Naveen Mamindlapalli) [Orabug: 34671021] - octeontx2-af: Fixes compilation warning for KASAN build (Suman Ghosh) [Orabug: 34671021] - coresight: Add Coresight kdump support (Linu Cherian) [Orabug: 34671021] - coresight: Add provision for kdump sync callbacks (Linu Cherian) [Orabug: 34671021] - driver: mmc: ACPI support added for eMMC driver for T9x. (Piyush Malgujar) [Orabug: 34671021] - octeontx2-pf: Fix TSOv6 offload (Sunil Goutham) [Orabug: 34671021] - irqchip/gic-v3: Detect LPI invalidation MMIO registers (Linu Cherian) [Orabug: 34671021] - irqchip/gic-v3: Exposes bit values for GICR_CTLR.{IR, CES} (Marc Zyngier) [Orabug: 34671021] - irqchip/gic-v3-its: Allow LPI invalidation via the DirectLPI interface (Marc Zyngier) [Orabug: 34671021] - irqchip/gic-v3-its: Factor out wait_for_syncr primitive (Marc Zyngier) [Orabug: 34671021] - octeontx2-pf: Fix VF mbox forwarding handling (Subbaraya Sundeep) [Orabug: 34671021] - octeontx2-af: Fix BPID calculation for SDP (Radha Mohan Chintakuntla) [Orabug: 34671021] - octeontx2-af: add support for CPT second pass (Rakesh Kudurumalla) [Orabug: 34671021] - octeontx2-bphy-netdev: IOCTL to read input clock parameters. (Rakesh Babu Saladi) [Orabug: 34671021] - drivers: soc: sw_up: Add async clone support (Witold Sadowski) [Orabug: 34671021] - crypto: octeontx2: add CN10KB SG support (Srujana Challa) [Orabug: 34671021] - octeontx2-af: cnf10k-b: mcs: Add mbox to set port mode (Geetha sowjanya) [Orabug: 34671021] - driver: edac: octeontx: Rename some macros and variables (Chandrakala Chavva) [Orabug: 34671021] - crypto: octeontx2: decrease CPT_AF_CTX_FLUSH_TIMER count (Srujana Challa) [Orabug: 34671021] - octeontx2-af: update cpt engines status debugfs entry (Srujana Challa) [Orabug: 34671021] - driver: mailbox: Cleanup dead code (Wojciech Bartczak) [Orabug: 34671021] - drivers: marvell: otx2-sdei-ghes: Fix BERT report driver (Vasyl Gomonovych) [Orabug: 34671021] - octeontx2-bphy-netdev: Fix cnf10k link state set (Baha Mesleh) [Orabug: 34671021] - otx2-bphy-netdev: synchronize BCN to PTP slave clock. (Rakesh Babu Saladi) [Orabug: 34671021] - octeontx2-bphy-netdev: stop pkt transmission when psm queue is disabled (Naveen Mamindlapalli) [Orabug: 34671021] - octeontx2-bphy-netdev: cnf95n: fix ptp timestamp in master mode (Naveen Mamindlapalli) [Orabug: 34671021] - edac: Add spinlock to protect ring buffer read/write (Vasyl Gomonovych) [Orabug: 34671021] - EDAC: OcteonTX: Fix build issues when ACPI is disabled (Piyush Malgujar) [Orabug: 34671021] - drivers: soc: sw_up: Add async hash verification option (Witold Sadowski) [Orabug: 34671021] - octeontx2-af: Fix pf bitmap for RVU VFs (Geetha sowjanya) [Orabug: 34671021] - octeontx2-af: cn10k-b: mcs: Add debugfs support (Geetha sowjanya) [Orabug: 34671021] - octeontx2-af: cn10k-b: mcs: Support to reset MCS stats (Geetha sowjanya) [Orabug: 34671021] - octeontx2-af: cn10k-b: mcs: Support to retrieve MCS stats (Geetha sowjanya) [Orabug: 34671021] - octeontx2-af: cnf10k-b: mcs: Add support for CNF10K MCS (Geetha sowjanya) [Orabug: 34671021] - octeontx2-af: cn10k-b: mcs: Install TCAM bypass entry (Geetha sowjanya) [Orabug: 34671021] - octeontx2-af: cn10k-b: mcs: Mbox handlers to establish CA (Geetha sowjanya) [Orabug: 34671021] - octeontx2-af: cn10k-b: mcs: Mbox to allocate/free MCS resources (Geetha sowjanya) [Orabug: 34671021] - octeontx2-af: cn10k-b: mcs: Allocate structs for MCS resources (Geetha sowjanya) [Orabug: 34671021] - octeontx2-af: cn10k: mcs: Add MCS basic driver support (Geetha sowjanya) [Orabug: 34671021] - mailbox: marvell: Initialize interrupts only if there's client for data (Wojciech Bartczak) [Orabug: 34671021] - mailbox: marvell: Fix driver dependencies list (Wojciech Bartczak) [Orabug: 34671021] header file (Piyush Malgujar) [Orabug: 34671021] - EDAC: OcteonTX: Remove redundant ACPI_APEI_GHES (Vasyl Gomonovych) [Orabug: 34671021] - drivers: sdhci-cadence: Initialize slew and drive values (Jayanthi Annadurai) [Orabug: 34671021] - octeontx2-af: support overriding aura to zero for second pass (Nithin Dabilpuram) [Orabug: 34671021] - drivers: soc: sw_up: Use new and previous smc_update_descriptor (Witold Sadowski) [Orabug: 34671021] - driver: soc: mrvl_phy7121P Fixed Warnings. (Narendra Hadke) [Orabug: 34671021] - octeontx2-pcicons: Adjust padding size for RT (Ratheesh Kannoth) [Orabug: 34671021] - genirq: Increase the number of interrupters (George Cherian) [Orabug: 34671021] - octeontx2-af: Skip PFs if not enabled (Ratheesh Kannoth) [Orabug: 34671021] - crypto: octeontx2: add pdcp chain to capabilities (Srujana Challa) [Orabug: 34671021] - crypto: octeontx2: set sso_pf_func_ovrd only for 96xx A0/B0 (Srujana Challa) [Orabug: 34671021] - octeontx2-bphy-netdev: cnf10k: fix compilation warning (Naveen Mamindlapalli) [Orabug: 34671021] - octeontx2-bphy-netdev: use platform_get_irq_optional for PSM GPINT2 (Naveen Mamindlapalli) [Orabug: 34671021] - octeontx2-af: ptp: modify workaround for cn10k pps errata (Naveen Mamindlapalli) [Orabug: 34671021] - octeontx2-af: add support to parse custom ether type (Kiran Kumar K) [Orabug: 34671021] - soc: octeontx2-sdp: program SDP_EPVF_RING (Radha Mohan Chintakuntla) [Orabug: 34671021] - octeontx2-af: timeout while draining SSO queues (Shijith Thotton) [Orabug: 34671021] - firmware: mub: Add CN10K memory test configuration utility (Wojciech Bartczak) [Orabug: 34671021] - soc: octeontx2-sdp: remove dependency from PCI revision (Radha Mohan Chintakuntla) [Orabug: 34671021] - drivers: sdhci-cadence: Fix high speed mode hold time (Jayanthi Annadurai) [Orabug: 34671021] - crypto: octeontx2: add support for 103xx firmware load (Srujana Challa) [Orabug: 34671021] - octeontx2-af: update CPT inbound inline IPsec config mailbox (Srujana Challa) [Orabug: 34671021] - driver: soc: mrvl_phy7121P: config is only valid on ARM64 (Dave Kleikamp) [Orabug: 34956505] - driver: soc: mrvl_phy7121P PHY ADVANCE FEATURES: (Narendra Hadke) [Orabug: 34671021] - octeontx2-bphy-netdev: cnf10k: Fix incorrect PTP clock frequency. (Rakesh Babu Saladi) [Orabug: 34671021] - octeontx2-pf: Fix UDP/TCP src and dst port tc filters (Subbaraya Sundeep) [Orabug: 34671021] - octeontx2-af: Allow mcam entries for promiscous rule for CN10K-A and CN10K-B soc. (Suman Ghosh) [Orabug: 34671021] - octeontx2-bphy-netdev: cnf95n: ptp: use 950MHz clock for ptp slave (Naveen Mamindlapalli) [Orabug: 34671021] - octeontx2-bphy-netdev: cnf95n: ptp: Fix ptp clock counter read (Naveen Mamindlapalli) [Orabug: 34671021] - perf/marvell: Update dev name in Marvell DDR PMU (Amit Singh Tomar) [Orabug: 34671021] - octeontx2-bphy-netdev: Fix ethtool stats string order (Rakesh Babu Saladi) [Orabug: 34671021] - drivers: spi: cadence-xspi: Force single modebyte (Witold Sadowski) [Orabug: 34671021] - octeontx2-af: fix lbk link credits on cn10k (Nithin Dabilpuram) [Orabug: 34671021] - octeontx2-bphy-netdev: cnf95n: add PTP slave support. (Rakesh Babu Saladi) [Orabug: 34671021] - perf/marvell_cn10k: support older DT properties for TAD PMU (Tanmay Jagdale) [Orabug: 34671021] - perf/marvell: get ddr speed from 'marvell,ddr-speed' (Amit Singh Tomar) [Orabug: 34671021] - octeontx2-bphy-netdev: cnf10k: Fix ptp hardware clock counter conversion (Naveen Mamindlapalli) [Orabug: 34671021] - octeontx2-af: Show count of dropped packets by DMAC filters (Hariprasad Kelam) [Orabug: 34671021] - octeontx2-af: Add L2M/L2B header extraction support (Suman Ghosh) [Orabug: 34671021] - octeontx2-pf: Fix invalid pkt count send to dql_completed() (Geetha sowjanya) [Orabug: 34671021] - octeontx2-af: fix CPT engine recovery (Srujana Challa) [Orabug: 34671021] - iommu/arm-smmu-v3: Ratelimit event dump (Jean-Philippe Brucker) [Orabug: 34671021] - cn10k: Add workaround for MRVL TAD Errata-38891 (Bharat Bhushan) [Orabug: 34671021] - edac: Fix cn10ka dss error injection (Vasyl Gomonovych) [Orabug: 34671021] - octeontx2-af: Fix NIX link credits (Sunil Goutham) [Orabug: 34671021] - edac: Read sdei vector number from HEST table (Vasyl Gomonovych) [Orabug: 34671021] - edac: Add Core error report (Vasyl Gomonovych) [Orabug: 34671021] - driver: clk: Remove SCLK clock driver for ACPI platforms (Wojciech Bartczak) [Orabug: 34671021] - octeontx2-af: Initialize the PTP_SEC_ROLLOVER register properly (Naveen Mamindlapalli) [Orabug: 34671021] - cnf10k-rfoe: skb shinfo falls on a different cacheline, avoid reading it (Sunil Goutham) [Orabug: 34671021] - cnf10k-rfoe: Adjust structure elements to reduce cache misses (Sunil Goutham) [Orabug: 34671021] - cnf10k-rfoe: Avoid costly iova_to_virt of packet dma address in xmit (Sunil Goutham) [Orabug: 34671021] - cnf10k-rfoe: Cleanup packet stats maintenance (Sunil Goutham) [Orabug: 34671021] - cnf10k-rfoe: Optimize packet length retrieval for non-ecpri packets (Sunil Goutham) [Orabug: 34671021] - cnf10k-rfoe: Remove duplicate error checking (Sunil Goutham) [Orabug: 34671021] - octeontx2-af: add mbox for CPT LF reset (Srujana Challa) [Orabug: 34671021] - octeontx2-af: cn10k: Set NIX DWRR MTU for CN10KB silicon (Sunil Goutham) [Orabug: 34671021] - octeontx2-pf: NIX TX overwrites SQ_CTX_HW_S[SQ_INT] (Ratheesh Kannoth) [Orabug: 34671021] - octeontx2-pf: Fix NIX_AF_TL3_TL2X_LINKX_CFG register configuration (Naveen Mamindlapalli) [Orabug: 34671021] - octeontx2-af: use cpt channel mask in flow install path (Nithin Dabilpuram) [Orabug: 34671021] - octeontx2-bphy-netdev: use sw timecounter for ptp phc (Naveen Mamindlapalli) [Orabug: 34671021] - octeontx2-af: allow lower threshold in sso group qos mbox (Shijith Thotton) [Orabug: 34671021] - octeontx2-pf: cn10k: Fix egress ratelimit configuration (Sunil Goutham) [Orabug: 34671021] - drivers: soc: sw_up: Add force clone option (Witold Sadowski) [Orabug: 34671021] - perf/marvell_cn10k: update tad property names (Tanmay Jagdale) [Orabug: 34671021] - octeontx2-pf: Added validation check to configure adaptive interrupt coalesing. (Suman Ghosh) [Orabug: 34671021] - octeontx2-af: setup Tx link credit based on lmac id (Nithin Dabilpuram) [Orabug: 34671021] - firmware: smccc: Reflect firmware reported smccc version (Linu Cherian) [Orabug: 34671021] - octeontx2-bphy-netdev: cnf10k: Add PTP 2S legacy mode support. (Rakesh Babu Saladi) [Orabug: 34671021] - octeontx2-sdpvf: Fix PTP options for SDP interfaces (Roy Franz) [Orabug: 34671021] - firmware: octeontx2: Enable RPRAM driver for ASIM targets (Wojciech Bartczak) [Orabug: 34671021] - octeontx2-pf: Free pending and dropped SQEs (Geetha sowjanya) [Orabug: 34671021] - octeontx2-af: recover CPT engine when it gets fault (Srujana Challa) [Orabug: 34671021] - crypto: octeontx2: remove CPT block reset (Srujana Challa) [Orabug: 34671021] - octeontx2-pf: Add support for ptp 1-step using timecounter (Naveen Mamindlapalli) [Orabug: 34671021] - octeontx2-pf: revert the ptp phc implementation to use timecounter (Naveen Mamindlapalli) [Orabug: 34671021] - octeontx2-af: return correct timestamp for cn10k soc (Naveen Mamindlapalli) [Orabug: 34671021] - misc: bphy: prevent out-of-bound array iteration (Jakub Palider) [Orabug: 34671021] - soc: octeontx2-sdp: Fix SDP output backpressure (Roy Franz) [Orabug: 34671021] - crypto: qat - add support for 401xx devices (Giovanni Cabiddu) [Orabug: 34779699] - tools/power turbostat: fix SPR PC6 limits (Artem Bityutskiy) [Orabug: 34802779] - tools/power turbostat: separate SPR from ICX (Artem Bityutskiy) [Orabug: 34802779] - tools/power turbostat: formatting (Len Brown) [Orabug: 34802779] - tools/power turbostat: rename tcc variables (Zhang Rui) [Orabug: 34802779] - tools/power turbostat: add TCC Offset support (Zhang Rui) [Orabug: 34802779] - tools/power turbostat: save original CPU model (Zhang Rui) [Orabug: 34802779] - tools/power turbostat: Fix Core C6 residency on Atom CPUs (Zhang Rui) [Orabug: 34802779] - tools/power turbostat: Print the C-state Pre-wake settings (Chen Yu) [Orabug: 34802779] - tools/power turbostat: Enable tsc_tweak for Elkhart Lake and Jasper Lake (Chen Yu) [Orabug: 34802779] - tools/power/turbostat: Remove Package C6 Retention on Ice Lake Server (Chen Yu) [Orabug: 34802779] - tools/power turbostat: Fix offset overflow issue in index converting (Calvin Walton) [Orabug: 34802779] - tools/power/turbostat: Fix turbostat for AMD Zen CPUs (Bas Nieuwenhuizen) [Orabug: 34802779] - tools/power turbostat: update version number (Len Brown) [Orabug: 34802779] - tools/power turbostat: Fix DRAM Energy Unit on SKX (Zhang Rui) [Orabug: 34802779] - Revert 'tools/power turbostat: adjust for temperature offset' (Len Brown) [Orabug: 34802779] - tools/power turbostat: Support Ice Lake D (Chen Yu) [Orabug: 34802779] - tools/power turbostat: Support Alder Lake Mobile (Chen Yu) [Orabug: 34802779] - tools/power turbostat: print microcode patch level (Len Brown) [Orabug: 34802779] - tools/power turbostat: add built-in-counter for IPC -- Instructions per Cycle (Len Brown) [Orabug: 34802779] - tools/turbostat: Unmark non-kernel-doc comment (Randy Dunlap) [Orabug: 34802779] - tools/power/turbostat: Fallback to an MSR read for EPB (Borislav Petkov) [Orabug: 34802779] - tools/power turbostat: update version number (Len Brown) [Orabug: 34802779] - tools/power turbostat: harden against cpu hotplug (Len Brown) [Orabug: 34802779] - tools/power turbostat: adjust for temperature offset (Len Brown) [Orabug: 34802779] - tools/power turbostat: Support AMD Family 19h (Kim Phillips) [Orabug: 34802779] - tools/power turbostat: Remove empty columns for Jacobsville (Antti Laakso) [Orabug: 34802779] - tools/power turbostat: Add a new GFXAMHz column that exposes gt_act_freq_mhz. (Rafael Antognolli) [Orabug: 34802779] - tools/power turbostat: Skip pc8, pc9, pc10 columns, if they are disabled (Len Brown) [Orabug: 34802779] - tools/power turbostat: Fix output formatting for ACPI CST enumeration (David Arcari) [Orabug: 34802779] - tools/power turbostat: Use sched_getcpu() instead of hardcoded cpu 0 (Prarit Bhargava) [Orabug: 34802779] - tools/power turbostat: Enable accumulate RAPL display (Chen Yu) [Orabug: 34802779] - tools/power turbostat: Introduce functions to accumulate RAPL consumption (Chen Yu) [Orabug: 34802779] - tools/power turbostat: Make the energy variable to be 64 bit (Chen Yu) [Orabug: 34802779] - tools/power turbostat: Always print idle in the system configuration header (Doug Smythies) [Orabug: 34802779] - tools/power turbostat: Print /dev/cpu_dma_latency (Len Brown) [Orabug: 34802779] - tools/power turbostat: update version (Len Brown) [Orabug: 34802779] - tools/power turbostat: Print cpuidle information (Len Brown) [Orabug: 34802779] - tools/power turbostat: Support Elkhart Lake (Chen Yu) [Orabug: 34802779] - tools/power turbostat: Support Jasper Lake (Chen Yu) [Orabug: 34802779] - tools/power turbostat: Support Cometlake (Chen Yu) [Orabug: 34802779] - sch_htb: Fail on unsupported parameters when offload is requested (Maxim Mikityanskiy) [Orabug: 34833369] - sch_api: Don't skip qdisc attach on ingress (Maxim Mikityanskiy) [Orabug: 34833369] - sch_htb: Fix inconsistency when leaf qdisc creation fails (Maxim Mikityanskiy) [Orabug: 34833369] - sch_htb: fix refcount leak in htb_parent_to_leaf_offload (Yunjian Wang) [Orabug: 34833369] - sch_htb: fix null pointer dereference on a null new_q (Yunjian Wang) [Orabug: 34833369] - sch_htb: Fix offload cleanup in htb_destroy on htb_init failure (Maxim Mikityanskiy) [Orabug: 34833369] - sch_htb: Fix select_queue for non-offload mode (Maxim Mikityanskiy) [Orabug: 34833369] - RDS/IB: Fix the misplaced counter update rdma dto path (Devesh Sharma) [Orabug: 34865848] - arm64: Add AMPERE1 to the Spectre-BHB affected list (D Scott Phillips) [Orabug: 34873999] - net: mana: Fix race on per-CQ variable napi work_done (uek6/u3) (Haiyang Zhang) [Orabug: 34874459] - mips: Octeon: PCI console code was incorrectly finding the tty port (Dave Kleikamp) [Orabug: 34877981] - x86/bpf: Use alternative RET encoding (Peter Zijlstra) [Orabug: 34944087] - bpf,x86: Respect X86_FEATURE_RETPOLINE* (Peter Zijlstra) [Orabug: 34944087] - Revert 'x86/bpf: Alternative RET encoding' (Alexandre Chartre) [Orabug: 34944087] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-42896 CVE-2022-4139 Oracle Linux 8 [0.10.14-5.0.1] - Replace HAM-logo.png with a generic one [0.10.14-5.el8_7.2] - Updated bundled rubygems: mustermann, rack, rack_protection, sinatra, tilt - Added license for rubygem ruby2_keywords - Resolves: rhbz#2159424 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-45442 Oracle Linux 6 [1.8.6p3-29.0.4.el6_10.3] - Fixed Privilege escalation CVE-2023-22809 for sudoedit [Orabug: 35037922] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-22809 Oracle Linux 9 [0.11.3-4.el9_1.2] - Updated bundled rubygems: mustermann, rack, rack_protection, sinatra, tilt - Added license for rubygem ruby2_keywords - Resolves: rhbz#2159426 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-45442 Oracle Linux 9 [3.0.1-47.0.1] - Replace upstream references [Orabug: 34340177] [1:3.0.1-47] - Fixed X.509 Name Constraints Read Buffer Overflow Resolves: CVE-2022-4203 - Fixed Timing Oracle in RSA Decryption Resolves: CVE-2022-4304 - Fixed Double free after calling PEM_read_bio_ex Resolves: CVE-2022-4450 - Fixed Use-after-free following BIO_new_NDEF Resolves: CVE-2023-0215 - Fixed Invalid pointer dereference in d2i_PKCS7 functions Resolves: CVE-2023-0216 - Fixed NULL dereference validating DSA public key Resolves: CVE-2023-0217 - Fixed X.400 address type confusion in X.509 GeneralName Resolves: CVE-2023-0286 - Fixed NULL dereference during PKCS7 data verification Resolves: CVE-2023-0401 [1:3.0.1-46] - Refactor OpenSSL fips module MAC verification Resolves: rhbz#2158412 - Disallow SHAKE in RSA-OAEP decryption in FIPS mode Resolves: rhbz#2144010 [1:3.0.1-45] - Add support of X25519 and X448 'group' parameter in EVP_PKEY_CTX objects Resolves: rhbz#2149010 - Fix explicit indicator for PSS salt length in FIPS mode when used with negative magic values Resolves: rhbz#2144012 - Update change to default PSS salt length with patch state from upstream Related: rhbz#2144012 [1:3.0.1-44] - SHAKE-128/256 are not allowed with RSA in FIPS mode Resolves: rhbz#2144010 - Avoid memory leaks in TLS Resolves: rhbz#2144008 - FIPS RSA CRT tests must use correct parameters Resolves: rhbz#2144006 - FIPS-140-3 permits only SHA1, SHA256, and SHA512 for DRBG-HASH/DRBG-HMAC Resolves: rhbz#2144017 - Remove support for X9.31 signature padding in FIPS mode Resolves: rhbz#2144015 - Add explicit indicator for SP 800-108 KDFs with short key lengths Resolves: rhbz#2144019 - Add explicit indicator for HMAC with short key lengths Resolves: rhbz#2144000 - Set minimum password length for PBKDF2 in FIPS mode Resolves: rhbz#2144003 - Add explicit indicator for PSS salt length in FIPS mode Resolves: rhbz#2144012 - Clamp default PSS salt length to digest size for FIPS 186-4 compliance Related: rhbz#2144012 - Forbid short RSA keys for key encapsulation/decapsulation in FIPS mode Resolves: rhbz#2145170 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-0286 CVE-2022-4450 CVE-2023-0215 CVE-2022-4203 CVE-2022-4304 CVE-2023-0401 CVE-2023-0217 CVE-2023-0216 Oracle Linux 6 Oracle Linux 7 [4.1.12-124.72.2] - net: sched: atm: dont intepret cls results when asked to drop (Jamal Hadi Salim) [Orabug: 34983616] {CVE-2023-23455} - Bluetooth: L2CAP: Fix u8 overflow (Sungwoo Kim) [Orabug: 34880763] {CVE-2022-45934} [4.1.12-124.72.1] - target: Invoke transport_lun_remove_cmd() to remove tmr form the list (Gulam Mohamed) [Orabug: 34812128] [Orabug: 35062711] - scsi: target: core: Remove from tmr_list during LUN unlink (Gulam Mohamed) [Orabug: 34812128] [Orabug: 35062711] - target: Inline transport_cmd_check_stop() (Gulam Mohamed) [Orabug: 34812128] [Orabug: 35062711] - target: Stop execution if CMD_T_STOP has been set (Gulam Mohamed) [Orabug: 34812128] [Orabug: 35062711] - drivers: net: slip: fix NPD bug in sl_tx_timeout() (Duoming Zhou) [Orabug: 35005738] {CVE-2022-41858} - i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Zheyu Ma) [Orabug: 34555529] {CVE-2022-2873} IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-23455 CVE-2022-45934 CVE-2022-41858 CVE-2022-2873 Oracle Linux 8 qemu-kvm [6.1.1-5-el8] - hw/pvrdma: Protect against buggy or malicious guest driver (Yuval Shaia) [Orabug: 35064352] {CVE-2022-1050} - hw/display/qxl: Assert memory slot fits in preallocated MemoryRegion (Philippe Mathieu-Daude) [Orabug: 35060182] - hw/display/qxl: Avoid buffer overrun in qxl_phys2virt (CVE-2022-4144) (Philippe Mathieu-Daude) [Orabug: 35060182] {CVE-2022-4144} - hw/display/qxl: Pass requested buffer size to qxl_phys2virt() (Philippe Mathieu-Daude) [Orabug: 35060182] - hw/display/qxl: Document qxl_phys2virt() (Philippe Mathieu-Daude) [Orabug: 35060182] - hw/display/qxl: Have qxl_log_command Return early if no log_cmd handler (Philippe Mathieu-Daude) [Orabug: 35060182] - ui/vnc-clipboard: fix integer underflow in vnc_client_cut_text_ext (Mauro Matteo Cascella) [Orabug: 35060115] {CVE-2022-3165} - hw/arm/virt: build SMBIOS 19 table (Mihai Carabas) - vl: Add an -action option to override MCE handling (Mark Kanda) [Orabug: 34779160] - hw/acpi/erst.c: Fix memory handling issues (Christian A. Ehrhardt) [Orabug: 34779541] {CVE-2022-4172} - target/i386: kvm: do not access uninitialized variable on older kernels (Paolo Bonzini) [Orabug: 34492975] - x86: Support XFD and AMX xsave data migration (Zeng Guang) [Orabug: 34492975] - x86: add support for KVM_CAP_XSAVE2 and AMX state migration (Jing Liu) [Orabug: 34492975] - x86: Add AMX CPUIDs enumeration (Jing Liu) [Orabug: 34492975] - x86: Add XFD faulting bit for state components (Jing Liu) [Orabug: 34492975] - x86: Grant AMX permission for guest (Yang Zhong) [Orabug: 34492975] - x86: Add AMX XTILECFG and XTILEDATA components (Jing Liu) [Orabug: 34492975] - x86: Fix the 64-byte boundary enumeration for extended state (Jing Liu) [Orabug: 34492975] - linux-headers: include missing changes from 5.17 (Paolo Bonzini) [Orabug: 34492975] - linux-headers: Update headers to v5.17-rc1 (Vivek Goyal) [Orabug: 34492975] - linux-headers: update to 5.16-rc1 (Paolo Bonzini) [Orabug: 34492975] - i386/pc: restrict AMD only enforcing of 1Tb hole to new machine type (Joao Martins) - i386/pc: relocate 4g start to 1T where applicable (Joao Martins) - i386/pc: bounds check phys-bits against max used GPA (Joao Martins) - i386/pc: factor out device_memory base/size to helper (Joao Martins) - i386/pc: factor out above-4g end to an helper (Joao Martins) - i386/pc: pass pci_hole64_size to pc_memory_init() (Joao Martins) - i386/pc: create pci-host qdev prior to pc_memory_init() (Joao Martins) - hw/i386: add 4g boundary start to X86MachineState (Joao Martins) - vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)->async_tx.elem in virtio_net_reset (Si-Wei Liu) - net/vhost-vdpa.c: Fix clang compilation failure (Peter Maydell) - vhost-vdpa: allow passing opened vhostfd to vhost-vdpa (Si-Wei Liu) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-1050 CVE-2022-4172 CVE-2022-4144 CVE-2022-3165 Oracle Linux 8 Oracle Linux 9 [5.15.0-8.91.4.1] - uek-rpm: Add opbmc to core rpm (Somasundaram Krishnasamy) [Orabug: 35157130] [5.15.0-8.91.4] - selftests/vm: remove ARRAY_SIZE define from individual tests (Shuah Khan) [Orabug: 35088471] - selftests: Provide local define of __cpuid_count() (Reinette Chatre) [Orabug: 35088471] - tools: fix ARRAY_SIZE defines in tools and selftests hdrs (Shuah Khan) [Orabug: 35088471] - uek-rpm: aarch64 enable DETECT_HUNG_TASK (Tom Saeger) [Orabug: 34580801] [5.15.0-8.91.3] - Update README with UEK Text Description (Somasundaram Krishnasamy) [Orabug: 35084845] - uek-rpm: config-x86-64*: Disable CONFIG_AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT (Alejandro Jimenez) [Orabug: 35059109] - Revert 'RDMA/irdma: Fix warning, move switch variable into case' (Jack Vogel) [Orabug: 35048858] - Revert 'RDMA/irdma: Move variable into switch case' (Jack Vogel) [Orabug: 35048858] - Revert 'ACPI/IORT: Move variables in switch, fix for build warnings.' (Jack Vogel) [Orabug: 35048858] [5.15.0-8.91.2] - RDMA/addr: Refresh neighbour entries upon rdma_resolve_addr() (Gerd Rausch) [Orabug: 35060575] - net/rds: Go back to alloc_ordered_workqueue() (Gerd Rausch) [Orabug: 35042697] - sched/core: Remove sched_uek cmdline parameter (Konrad Rzeszutek Wilk) [Orabug: 35049222] - uek-misc: Initial version (Konrad Rzeszutek Wilk) [Orabug: 35049222] - treewide: Move the definition in a global file (Konrad Rzeszutek Wilk) [Orabug: 35049222] - treewide: Rename wake_affine_idle_pull into on_exadata (Konrad Rzeszutek Wilk) [Orabug: 35049222] - sched/core: Remove sched_uek=preempt (Konrad Rzeszutek Wilk) [Orabug: 35049222] - perf/x86/uncore: Don't WARN_ON_ONCE() for a broken discovery table (Kan Liang) [Orabug: 35038311] - perf/x86/uncore: Add a quirk for UPI on SPR (Kan Liang) [Orabug: 35038311] - perf/x86/uncore: Ignore broken units in discovery table (Kan Liang) [Orabug: 35038311] - perf/x86/uncore: Fix potential NULL pointer in uncore_get_alias_name (Kan Liang) [Orabug: 35038311] - perf/x86/uncore: Factor out uncore_device_to_die() (Kan Liang) [Orabug: 35038311] - perf/x86/intel/uncore: Enable UPI topology discovery for Sapphire Rapids (Alexander Antonov) [Orabug: 35038311] - perf/x86/intel/uncore: Enable UPI topology discovery for Skylake Server (Alexander Antonov) [Orabug: 35038311] - perf/x86/intel/uncore: Generalize get_topology() for SKX PMUs (Alexander Antonov) [Orabug: 35038311] - perf/x86/intel/uncore: Introduce UPI topology type (Alexander Antonov) [Orabug: 35038311] - perf/x86/intel/uncore: Get UPI NodeID and GroupID (Alexander Antonov) [Orabug: 35038311] - perf/x86/intel/uncore: Enable UPI topology discovery for Icelake Server (Alexander Antonov) [Orabug: 35038311] - perf/x86/intel/uncore: Generalize IIO topology support (Alexander Antonov) [Orabug: 35038311] - net/rds: Delegate fan-out to a background worker (Gerd Rausch) [Orabug: 34994148] - i40e: Add basic support for I710 devices (Stanislaw Grzeszczak) [Orabug: 35059783] [5.15.0-8.91.1] - LTS version: v5.15.91 (Jack Vogel) - perf/x86/amd: fix potential integer overflow on shift of a int (Colin Ian King) - netfilter: conntrack: unify established states for SCTP paths (Sriram Yagnaraman) - x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL (Thomas Gleixner) - block: fix and cleanup bio_check_ro (Christoph Hellwig) - kbuild: Allow kernel installation packaging to override pkg-config (Chun-Tse Shao) - cpufreq: governor: Use kobject release() method to free dbs_data (Kevin Hao) - cpufreq: Move to_gov_attr_set() to cpufreq.h (Kevin Hao) - Revert 'Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode' (Dmitry Torokhov) - tools: gpio: fix -c option of gpio-event-mon (Ivo Borisov Shopov) - treewide: fix up files incorrectly marked executable (Linus Torvalds) - net: mdio-mux-meson-g12a: force internal PHY off on mux switch (Jerome Brunet) - net/tg3: resolve deadlock in tg3_reset_task() during EEH (David Christensen) - thermal: intel: int340x: Add locking to int340x_thermal_get_trip_type() (Rafael J. Wysocki) - net: mctp: mark socks as dead on unhash, prevent re-add (Jeremy Kerr) - net: ravb: Fix possible hang if RIS2_QFF1 happen (Yoshihiro Shimoda) - net: ravb: Fix lack of register setting after system resumed for Gen3 (Yoshihiro Shimoda) - ravb: Rename 'no_ptp_cfg_active' and 'ptp_cfg_active' variables (Biju Das) - gpio: mxc: Unlock on error path in mxc_flip_edge() (Dan Carpenter) - nvme: fix passthrough csi check (Keith Busch) - riscv/kprobe: Fix instruction simulation of JALR (Liao Chang) - sctp: fail if no bound addresses can be used for a given scope (Marcelo Ricardo Leitner) - net/sched: sch_taprio: do not schedule in taprio_reset() (Eric Dumazet) - netrom: Fix use-after-free of a listening socket. (Kuniyuki Iwashima) - netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE (Sriram Yagnaraman) - ipv4: prevent potential spectre v1 gadget in fib_metrics_match() (Eric Dumazet) - ipv4: prevent potential spectre v1 gadget in ip_metrics_convert() (Eric Dumazet) - netlink: annotate data races around sk_state (Eric Dumazet) - netlink: annotate data races around dst_portid and dst_group (Eric Dumazet) - netlink: annotate data races around nlk->portid (Eric Dumazet) - netfilter: nft_set_rbtree: skip elements in transaction from garbage collection (Pablo Neira Ayuso) - netfilter: nft_set_rbtree: Switch to node list walk for overlap detection (Pablo Neira Ayuso) - drm/i915/selftest: fix intel_selftest_modify_policy argument types (Arnd Bergmann) - net: fix UaF in netns ops registration error path (Paolo Abeni) - netlink: prevent potential spectre v1 gadgets (Eric Dumazet) - i2c: designware: use casting of u64 in clock multiplication to avoid overflow (Lareine Khawaly) - scsi: ufs: core: Fix devfreq deadlocks (Johan Hovold) - net: mana: Fix IRQ name - add PCI and queue number (Haiyang Zhang) - EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info (Manivannan Sadhasivam) - EDAC/device: Respect any driver-supplied workqueue polling value (Manivannan Sadhasivam) - ARM: 9280/1: mm: fix warning on phys_addr_t to void pointer assignment (Giulio Benetti) - ipv6: fix reachability confirmation with proxy_ndp (Gergely Risko) - thermal: intel: int340x: Protect trip temperature from concurrent updates (Srinivas Pandruvada) - KVM: arm64: GICv4.1: Fix race with doorbell on VPE activation/deactivation (Marc Zyngier) - KVM: x86/vmx: Do not skip segment attributes if unusable bit is set (Hendrik Borghorst) - ovl: fail on invalid uid/gid mapping at copy up (Miklos Szeredi) - ksmbd: limit pdu length size according to connection status (Namjae Jeon) - ksmbd: downgrade ndr version error message to debug (Namjae Jeon) - ksmbd: do not sign response to session request for guest login (Marios Makassikis) - ksmbd: add max connections parameter (Namjae Jeon) - ksmbd: add smbd max io size parameter (Namjae Jeon) - i2c: mv64xxx: Add atomic_xfer method to driver (Chris Morgan) - i2c: mv64xxx: Remove shutdown method from driver (Chris Morgan) - cifs: Fix oops due to uncleared server->smbd_conn in reconnect (David Howells) - ftrace/scripts: Update the instructions for ftrace-bisect.sh (Steven Rostedt (Google)) - trace_events_hist: add check for return value of 'create_hist_field' (Natalia Petrova) - tracing: Make sure trace_printk() can output as soon as it can be used (Steven Rostedt (Google)) - module: Don't wait for GOING modules (Petr Pavlu) - KVM: SVM: fix tsc scaling cache logic (Maxim Levitsky) - scsi: hpsa: Fix allocation size for scsi_host_alloc() (Alexey V. Vissarionov) - drm/amdgpu: complete gfxoff allow signal during suspend without delay (Harsh Jain) - Bluetooth: hci_sync: cancel cmd_timer if hci_open failed (Archie Pusaka) - exit: Use READ_ONCE() for all oops/warn limit reads (Kees Cook) - docs: Fix path paste-o for /sys/kernel/warn_count (Kees Cook) - panic: Expose 'warn_count' to sysfs (Kees Cook) - panic: Introduce warn_limit (Kees Cook) - panic: Consolidate open-coded panic_on_warn checks (Kees Cook) - exit: Allow oops_limit to be disabled (Kees Cook) - exit: Expose 'oops_count' to sysfs (Kees Cook) - exit: Put an upper limit on how often we can oops (Jann Horn) - panic: Separate sysctl logic from CONFIG_SMP (Kees Cook) - ia64: make IA64_MCA_RECOVERY bool instead of tristate (Randy Dunlap) - csky: Fix function name in csky_alignment() and die() (Nathan Chancellor) - h8300: Fix build errors from do_exit() to make_task_dead() transition (Nathan Chancellor) - hexagon: Fix function name in die() (Nathan Chancellor) - objtool: Add a missing comma to avoid string concatenation (Eric W. Biederman) - exit: Add and use make_task_dead. (Eric W. Biederman) - kasan: no need to unset panic_on_warn in end_report() (Tiezhu Yang) - ubsan: no need to unset panic_on_warn in ubsan_epilogue() (Tiezhu Yang) - panic: unset panic_on_warn inside panic() (Tiezhu Yang) - kernel/panic: move panic sysctls to its own file (tangmeng) - sysctl: add a new register_sysctl_init() interface (Xiaoming Ni) - fs: reiserfs: remove useless new_opts in reiserfs_remount (Dongliang Mu) - x86: ACPI: cstate: Optimize C3 entry on AMD CPUs (Deepak Sharma) - drm/i915: Remove unused variable (Nirmoy Das) - Revert 'selftests/bpf: check null propagation only neither reg is PTR_TO_BTF_ID' (Sasha Levin) - drm/i915: Allow switching away via vga-switcheroo if uninitialized (Thomas Zimmermann) - firmware: coreboot: Check size of table entry and use flex-array (Kees Cook) - lockref: stop doing cpu_relax in the cmpxchg loop (Mateusz Guzik) - platform/x86: asus-nb-wmi: Add alternate mapping for KEY_SCREENLOCK (Hans de Goede) - platform/x86: touchscreen_dmi: Add info for the CSL Panther Tab HD (Michael Klein) - r8152: add vendor/device ID pair for Microsoft Devkit (Andre Przywara) - scsi: hisi_sas: Set a port invalid only if there are no devices attached when refreshing port id (Yihang Li) - KVM: s390: interrupt: use READ_ONCE() before cmpxchg() (Heiko Carstens) - spi: spidev: remove debug messages that access spidev->spi without locking (Bartosz Golaszewski) - ASoC: fsl-asoc-card: Fix naming of AC'97 CODEC widgets (Mark Brown) - ASoC: fsl_ssi: Rename AC'97 streams to avoid collisions with AC'97 CODEC (Mark Brown) - cpufreq: armada-37xx: stop using 0 as NULL pointer (Miles Chen) - perf/x86/intel/uncore: Add Emerald Rapids (Kan Liang) - perf/x86/msr: Add Emerald Rapids (Kan Liang) - s390: expicitly align _edata and _end symbols on page boundary (Alexander Gordeev) - s390/debug: add _ASM_S390_ prefix to header guard (Niklas Schnelle) - drm: Add orientation quirk for Lenovo ideapad D330-10IGL (Patrick Thompson) - net: usb: cdc_ether: add support for Thales Cinterion PLS62-W modem (Hui Wang) - ASoC: fsl_micfil: Correct the number of steps on SX controls (Chancel Liu) - cpufreq: Add SM6375 to cpufreq-dt-platdev blocklist (Konrad Dybcio) - kcsan: test: don't put the expect array on the stack (Max Filippov) - cpufreq: Add Tegra234 to cpufreq-dt-platdev blocklist (Sumit Gupta) - scsi: iscsi: Fix multiple iSCSI session unbind events sent to userspace (Wenchao Hao) - tcp: fix rate_app_limited to default to 1 (David Morley) - net: stmmac: enable all safety features by default (Andrew Halaney) - thermal: core: call put_device() only after device_register() fails (Viresh Kumar) - thermal/core: fix error code in __thermal_cooling_device_register() (Dan Carpenter) - thermal: Validate new state in cur_state_store() (Viresh Kumar) - thermal/core: Rename 'trips' to 'num_trips' (Daniel Lezcano) - thermal/core: Remove duplicate information when an error occurs (Daniel Lezcano) - net: dsa: microchip: ksz9477: port map correction in ALU table entry register (Rakesh Sankaranarayanan) - selftests/net: toeplitz: fix race on tpacket_v3 block close (Willem de Bruijn) - driver core: Fix test_async_probe_init saves device in wrong array (Chen Zhongjin) - w1: fix WARNING after calling w1_process() (Yang Yingliang) - w1: fix deadloop in __w1_remove_master_device() (Yang Yingliang) - device property: fix of node refcount leak in fwnode_graph_get_next_endpoint() (Yang Yingliang) - ptdma: pt_core_execute_cmd() should use spinlock (Eric Pilmore) - octeontx2-pf: Fix the use of GFP_KERNEL in atomic context on rt (Kevin Hao) - tcp: avoid the lookup process failing to get sk in ehash table (Jason Xing) - nvme-pci: fix timeout request state check (Keith Busch) - drm/amd/display: fix issues with driver unload (Hamza Mahfooz) - phy: phy-can-transceiver: Skip warning if no 'max-bitrate' (Geert Uytterhoeven) - dmaengine: xilinx_dma: call of_node_put() when breaking out of for_each_child_of_node() (Liu Shixin) - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) - HID: betop: check shape of output reports (Pietro Borrello) - l2tp: prevent lockdep issue in l2tp_tunnel_register() (Eric Dumazet) - virtio-net: correctly enable callback during start_xmit (Jason Wang) - net: macb: fix PTP TX timestamp failure due to packet padding (Robert Hancock) - dmaengine: Fix double increment of client_count in dma_chan_get() (Koba Ko) - drm/panfrost: fix GENERIC_ATOMIC64 dependency (Arnd Bergmann) - net: mlx5: eliminate anonymous module_init & module_exit (Randy Dunlap) - net/mlx5: E-switch, Fix setting of reserved fields on MODIFY_SCHEDULING_ELEMENT (Maor Dickman) - net: ipa: disable ipa interrupt during suspend (Caleb Connolly) - Bluetooth: Fix possible deadlock in rfcomm_sk_state_change (Ying Hsu) - usb: gadget: f_fs: Ensure ep0req is dequeued before free_request (Udipto Goswami) - usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait (Udipto Goswami) - HID: revert CHERRY_MOUSE_000C quirk (Jiri Kosina) - pinctrl: rockchip: fix mux route data for rk3568 (Jonas Karlman) - net: stmmac: fix invalid call to mdiobus_get_phy() (Heiner Kallweit) - HID: check empty report_list in bigben_probe() (Pietro Borrello) - HID: check empty report_list in hid_validate_values() (Pietro Borrello) - net: mdio: validate parameter addr in mdiobus_get_phy() (Heiner Kallweit) - net: usb: sr9700: Handle negative len (Szymon Heidrich) - octeontx2-pf: Avoid use of GFP_KERNEL in atomic context (Geetha sowjanya) - l2tp: close all race conditions in l2tp_tunnel_register() (Cong Wang) - l2tp: convert l2tp_tunnel_list to idr (Cong Wang) - l2tp: Don't sleep and disable BH under writer-side sk_callback_lock (Jakub Sitnicki) - l2tp: Serialize access to sk_user_data with sk_callback_lock (Jakub Sitnicki) [Orabug: 34951574] {CVE-2022-4129} - net/sched: sch_taprio: fix possible use-after-free (Eric Dumazet) - net: stmmac: Fix queue statistics reading (Kurt Kanzenbach) - pinctrl: rockchip: fix reading pull type on rk3568 (Jonas Karlman) - pinctrl/rockchip: add error handling for pull/drive register getters (Sebastian Reichel) - pinctrl/rockchip: Use temporary variable for struct device (Andy Shevchenko) - wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid (Szymon Heidrich) [Orabug: 35037701] {CVE-2023-23559} - gpio: mxc: Always set GPIOs used as interrupt source to INPUT mode (Marek Vasut) - gpio: mxc: Protect GPIO irqchip RMW with bgpio spinlock (Marek Vasut) - gpio: use raw spinlock for gpio chip shadowed data (Schspa Shi) - sch_htb: Avoid grafting on htb_destroy_class_offload when destroying htb (Rahul Rameshbabu) - net: enetc: avoid deadlock in enetc_tx_onestep_tstamp() (Vladimir Oltean) - net: wan: Add checks for NULL for utdm in undo_uhdlc_init and unmap_si_regs (Esina Ekaterina) - net: nfc: Fix use-after-free in local_cleanup() (Jisoo Jang) - phy: rockchip-inno-usb2: Fix missing clk_disable_unprepare() in rockchip_usb2phy_power_on() (Shang XiaoJing) - bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation (Luis Gerhorst) - amd-xgbe: Delay AN timeout during KR training (Raju Rangoju) - amd-xgbe: TX Flow Ctrl Registers are h/w ver dependent (Raju Rangoju) - ARM: dts: at91: sam9x60: fix the ddr clock for sam9x60 (Claudiu Beznea) - NFSD: fix use-after-free in nfsd4_ssc_setup_dul() (Xingyuan Mo) - phy: ti: fix Kconfig warning and operator precedence (Randy Dunlap) - arm64: dts: qcom: msm8992-libra: Fix the memory map (Konrad Dybcio) - arm64: dts: qcom: msm8992-libra: Add CPU regulators (Konrad Dybcio) - arm64: dts: qcom: msm8992: Don't use sfpb mutex (Konrad Dybcio) - PM: AVS: qcom-cpr: Fix an error handling path in cpr_probe() (Christophe JAILLET) - affs: initialize fsdata in affs_truncate() (Alexander Potapenko) - IB/hfi1: Remove user expected buffer invalidate race (Dean Luick) - IB/hfi1: Immediately remove invalid memory from hardware (Dean Luick) - IB/hfi1: Fix expected receive setup error exit issues (Dean Luick) - IB/hfi1: Reserve user expected TIDs (Dean Luick) - IB/hfi1: Reject a zero-length user expected buffer (Dean Luick) - RDMA/core: Fix ib block iterator counter overflow (Yonatan Nachum) - tomoyo: fix broken dependency on *.conf.default (Masahiro Yamada) - firmware: arm_scmi: Harden shared memory access in fetch_notification (Cristian Marussi) - firmware: arm_scmi: Harden shared memory access in fetch_response (Cristian Marussi) - EDAC/highbank: Fix memory leak in highbank_mc_probe() (Miaoqian Lin) - reset: uniphier-glue: Fix possible null-ptr-deref (Hui Tang) - reset: uniphier-glue: Use reset_control_bulk API (Philipp Zabel) - soc: imx8m: Fix incorrect check for of_clk_get_by_name() (Miaoqian Lin) - arm64: dts: imx8mm-venice-gw7901: fix USB2 controller OC polarity (Tim Harvey) - HID: intel_ish-hid: Add check for ishtp_dma_tx_map (Jiasheng Jiang) - ARM: imx: add missing of_node_put() (Dario Binacchi) - arm64: dts: imx8mm-beacon: Fix ecspi2 pinmux (Adam Ford) - ARM: dts: imx6qdl-gw560x: Remove incorrect 'uart-has-rtscts' (Fabio Estevam) - ARM: dts: imx7d-pico: Use 'clock-frequency' (Fabio Estevam) - ARM: dts: imx6ul-pico-dwarf: Use 'clock-frequency' (Fabio Estevam) - arm64: dts: imx8mp-phycore-som: Remove invalid PMIC property (Fabio Estevam) - dmaengine: ti: k3-udma: Do conditional decrement of UDMA_CHAN_RT_PEER_BCNT_REG (Jayesh Choudhary) - memory: mvebu-devbus: Fix missing clk_disable_unprepare in mvebu_devbus_probe() (Gaosheng Cui) - memory: atmel-sdramc: Fix missing clk_disable_unprepare in atmel_ramc_probe() (Gaosheng Cui) - memory: tegra: Remove clients SID override programming (Ashish Mhetre) - LTS version: v5.15.90 (Jack Vogel) - io_uring/rw: remove leftover debug statement (Jens Axboe) - io_uring/rw: ensure kiocb_end_write() is always called (Jens Axboe) - io_uring: fix double poll leak on repolling (Pavel Begunkov) - io_uring: Clean up a false-positive warning from GCC 9.3.0 (Alviro Iskandar Setiawan) - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Hugh Dickins) - soc: qcom: apr: Make qcom,protection-domain optional again (Stephan Gerhold) - Revert 'wifi: mac80211: fix memory leak in ieee80211_if_add()' (Eric Dumazet) - block: mq-deadline: Rename deadline_is_seq_writes() (Damien Le Moal) - net/mlx5: fix missing mutex_unlock in mlx5_fw_fatal_reporter_err_work() (Yang Yingliang) - net/ulp: use consistent error code when blocking ULP (Paolo Abeni) - io_uring/net: fix fast_iov assignment in io_setup_async_msg() (Stefan Metzmacher) - io_uring: io_kiocb_update_pos() should not touch file for non -1 offset (Jens Axboe) - tracing: Use alignof__(struct {type b;}) instead of offsetof() (Steven Rostedt (Google)) - x86/fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN (YingChi Long) - Revert 'drm/amdgpu: make display pinning more flexible (v2)' (Alex Deucher) - efi: rt-wrapper: Add missing include (Ard Biesheuvel) - arm64: efi: Execute runtime services from a dedicated stack (Ard Biesheuvel) - fs/ntfs3: Fix attr_punch_hole() null pointer derenference (Alon Zahavi) - drm/amdgpu: drop experimental flag on aldebaran (Alex Deucher) - drm/amd/display: Fix COLOR_SPACE_YCBCR2020_TYPE matrix (Joshua Ashton) - drm/amd/display: Calculate output_color_space after pixel encoding adjustment (Joshua Ashton) - drm/amd/display: Fix set scaling doesn's work (hongao) - drm/i915/display: Check source height is > 0 (Drew Davenport) - drm/i915: re-disable RC6p on Sandy Bridge (Sasa Dragic) - mei: me: add meteor lake point M DID (Alexander Usyskin) - gsmi: fix null-deref in gsmi_get_variable (Khazhismel Kumykov) - serial: atmel: fix incorrect baudrate setup (Tobias Schramm) - serial: amba-pl011: fix high priority character transmission in rs486 mode (Lino Sanfilippo) - dmaengine: idxd: Let probe fail when workqueue cannot be enabled (Reinette Chatre) - dmaengine: tegra210-adma: fix global intr clear (Mohan Kumar) - dmaengine: lgm: Move DT parsing after initialization (Peter Harliman Liem) - serial: pch_uart: Pass correct sg to dma_unmap_sg() (Ilpo Jarvinen) - dt-bindings: phy: g12a-usb3-pcie-phy: fix compatible string documentation (Heiner Kallweit) - dt-bindings: phy: g12a-usb2-phy: fix compatible string documentation (Heiner Kallweit) - usb-storage: apply IGNORE_UAS only for HIKSEMI MD202 on RTL9210 (Juhyung Park) - usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() (Maciej zenczykowski) - usb: gadget: g_webcam: Send color matching descriptor per frame (Daniel Scally) - usb: typec: altmodes/displayport: Fix pin assignment calculation (Prashant Malani) - usb: typec: altmodes/displayport: Add pin assignment helper (Prashant Malani) - usb: typec: tcpm: Fix altmode re-registration causes sysfs create fail (ChiYuan Huang) - usb: host: ehci-fsl: Fix module alias (Alexander Stein) - usb: cdns3: remove fetched trb from cache before dequeuing (Pawel Laszczak) - USB: serial: cp210x: add SCALANCE LPE-9000 device id (Michael Adler) - USB: gadgetfs: Fix race between mounting and unmounting (Alan Stern) - tty: fix possible null-ptr-defer in spk_ttyio_release (Gaosheng Cui) - tty: serial: qcom-geni-serial: fix slab-out-of-bounds on RX FIFO buffer (Krzysztof Kozlowski) - staging: mt7621-dts: change some node hex addresses to lower case (Sergio Paracuellos) - bpf: restore the ebpf program ID for BPF_AUDIT_UNLOAD and PERF_BPF_EVENT_PROG_UNLOAD (Paul Moore) - riscv: dts: sifive: fu740: fix size of pcie 32bit memory (Ben Dooks) - thunderbolt: Use correct function to calculate maximum USB3 link rate (Mika Westerberg) - cifs: do not include page data when checking signature (Enzo Matsumiya) - btrfs: fix race between quota rescan and disable leading to NULL pointer deref (Filipe Manana) - btrfs: do not abort transaction on failure to write log tree when syncing log (Filipe Manana) - mmc: sdhci-esdhc-imx: correct the tuning start tap and step setting (Haibo Chen) - mmc: sunxi-mmc: Fix clock refcount imbalance during unbind (Samuel Holland) - ACPI: PRM: Check whether EFI runtime is available (Ard Biesheuvel) - comedi: adv_pci1760: Fix PWM instruction handling (Ian Abbott) - usb: core: hub: disable autosuspend for TI TUSB8041 (Flavio Suligoi) - misc: fastrpc: Fix use-after-free race condition for maps (Ola Jeppsson) - misc: fastrpc: Don't remove map on creater_process and device_release (Abel Vesa) - USB: misc: iowarrior: fix up header size for USB_DEVICE_ID_CODEMERCS_IOW100 (Greg Kroah-Hartman) - staging: vchiq_arm: fix enum vchiq_status return types (Arnd Bergmann) - USB: serial: option: add Quectel EM05CN modem (Duke Xin) - USB: serial: option: add Quectel EM05CN (SG) modem (Duke Xin) - USB: serial: option: add Quectel EC200U modem (Ali Mirghasemi) - USB: serial: option: add Quectel EM05-G (RS) modem (Duke Xin) - USB: serial: option: add Quectel EM05-G (CS) modem (Duke Xin) - USB: serial: option: add Quectel EM05-G (GR) modem (Duke Xin) - prlimit: do_prlimit needs to have a speculation check (Greg Kroah-Hartman) - xhci: Detect lpm incapable xHC USB3 roothub ports from ACPI tables (Mathias Nyman) - usb: acpi: add helper to check port lpm capability using acpi _DSM (Mathias Nyman) - xhci: Add a flag to disable USB3 lpm on a xhci root port level. (Mathias Nyman) - xhci: Add update_hub_device override for PCI xHCI hosts (Mathias Nyman) - xhci: Fix null pointer dereference when host dies (Mathias Nyman) - usb: xhci: Check endpoint is valid before dereferencing it (Jimmy Hu) - xhci-pci: set the dma max_seg_size (Ricardo Ribalda) - io_uring/rw: defer fsnotify calls to task context (Jens Axboe) - io_uring: do not recalculate ppos unnecessarily (Dylan Yudaken) - io_uring: update kiocb->ki_pos at execution time (Dylan Yudaken) - io_uring: remove duplicated calls to io_kiocb_ppos (Dylan Yudaken) - io_uring: ensure that cached task references are always put on exit (Jens Axboe) - io_uring: fix async accept on O_NONBLOCK sockets (Dylan Yudaken) - io_uring: allow re-poll if we made progress (Jens Axboe) - io_uring: support MSG_WAITALL for IORING_OP_SEND(MSG) (Jens Axboe) - io_uring: add flag for disabling provided buffer recycling (Jens Axboe) - io_uring: ensure recv and recvmsg handle MSG_WAITALL correctly (Jens Axboe) - io_uring: improve send/recv error handling (Pavel Begunkov) - io_uring: pass in EPOLL_URING_WAKE for eventfd signaling and wakeups (Jens Axboe) - eventfd: provide a eventfd_signal_mask() helper (Jens Axboe) - eventpoll: add EPOLL_URING_WAKE poll wakeup flag (Jens Axboe) - io_uring: don't gate task_work run on TIF_NOTIFY_SIGNAL (Jens Axboe) - hugetlb: unshare some PMDs when splitting VMAs (James Houghton) - drm/amd: Delay removal of the firmware framebuffer (Sasha Levin) - drm/amdgpu: disable runtime pm on several sienna cichlid cards(v2) (Guchun Chen) - ALSA: hda/realtek: fix mute/micmute LEDs don't work for a HP platform (Jeremy Szu) - ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook (Andy Chi) - efi: fix userspace infinite retry read efivars after EFI runtime services page fault (Ding Hui) - nilfs2: fix general protection fault in nilfs_btree_insert() (Ryusuke Konishi) - zonefs: Detect append writes at invalid locations (Damien Le Moal) - Add exception protection processing for vd in axi_chan_handle_err function (Shawn.Shao) - wifi: mac80211: sdata can be NULL during AMPDU start (Alexander Wetzel) - wifi: brcmfmac: fix regression for Broadcom PCIe wifi devices (Arend van Spriel) - Bluetooth: hci_qca: Fix driver shutdown on closed serdev (Krzysztof Kozlowski) - fbdev: omapfb: avoid stack overflow warning (Arnd Bergmann) - perf/x86/rapl: Treat Tigerlake like Icelake (Chris Wilson) - f2fs: let's avoid panic if extent_tree is not created (Jaegeuk Kim) - x86/asm: Fix an assembler warning with current binutils (Mikulas Patocka) - btrfs: always report error in run_one_delayed_ref() (Qu Wenruo) - RDMA/srp: Move large values to a new enum for gcc13 (Jiri Slaby (SUSE)) - r8169: move rtl_wol_enable_rx() and rtl_prepare_power_down() (Chunhao Lin) - net/ethtool/ioctl: return -EOPNOTSUPP if we have no phy stats (Daniil Tatianin) - vduse: Validate vq_num in vduse_validate_config() (Harshit Mogalapalli) - virtio_pci: modify ENOENT to EINVAL (Angus Chen) - tools/virtio: initialize spinlocks in vring_test.c (Ricardo Canuelo) - selftests/bpf: check null propagation only neither reg is PTR_TO_BTF_ID (Hao Sun) - pNFS/filelayout: Fix coalescing test for single DS (Olga Kornievskaia) - btrfs: fix trace event name typo for FLUSH_DELAYED_REFS (Naohiro Aota) - LTS version: v5.15.89 (Jack Vogel) - pinctrl: amd: Add dynamic debugging for active GPIOs (Mario Limonciello) - Revert 'usb: ulpi: defer ulpi_register on ulpi_read_id timeout' (Ferry Toth) - block: handle bio_split_to_limits() NULL return (Jens Axboe) - io_uring/io-wq: only free worker if it was allocated for creation (Jens Axboe) - io_uring/io-wq: free worker if task_work creation is canceled (Jens Axboe) - efi: fix NULL-deref in init error path (Johan Hovold) - arm64: cmpxchg_double*: hazard against entire exchange variable (Mark Rutland) - arm64: atomics: remove LL/SC trampolines (Mark Rutland) - arm64: atomics: format whitespace consistently (Mark Rutland) - io_uring: lock overflowing for IOPOLL (Pavel Begunkov) - KVM: x86: Do not return host topology information from KVM_GET_SUPPORTED_CPUID (Paolo Bonzini) - Documentation: KVM: add API issues section (Paolo Bonzini) - mm: Always release pages to the buddy allocator in memblock_free_late(). (Aaron Thompson) - platform/surface: aggregator: Add missing call to ssam_request_sync_free() (Maximilian Luz) - igc: Fix PPS delta between two synchronized end-points (Christopher S Hall) - perf build: Properly guard libbpf includes (Ian Rogers) - net/mlx5e: Don't support encap rules with gbp option (Gavin Li) - net/mlx5: Fix ptp max frequency adjustment range (Rahul Rameshbabu) - net/sched: act_mpls: Fix warning during failed attribute validation (Ido Schimmel) - tools/nolibc: fix the O_* fcntl/open macro definitions for riscv (Willy Tarreau) - tools/nolibc: restore mips branch ordering in the _start block (Willy Tarreau) - tools/nolibc: Remove .global _start from the entry point code (Ammar Faizi) - tools/nolibc/arch: mark the _start symbol as weak (Willy Tarreau) - tools/nolibc/arch: split arch-specific code into individual files (Willy Tarreau) - tools/nolibc/types: split syscall-specific definitions into their own files (Willy Tarreau) - tools/nolibc/std: move the standard type definitions to std.h (Willy Tarreau) - tools/nolibc: use pselect6 on RISCV (Willy Tarreau) - tools/nolibc: x86-64: Use mov 0,%eax instead of mov 0,%rax (Ammar Faizi) - tools/nolibc: x86: Remove r8, r9 and r10 from the clobber list (Ammar Faizi) - af_unix: selftest: Fix the size of the parameter to connect() (Mirsad Goran Todorovac) - nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame() (Minsuk Kang) - hvc/xen: lock console list traversal (Roger Pau Monne) - octeontx2-af: Fix LMAC config in cgx_lmac_rx_tx_enable (Angela Czubak) - tipc: fix unexpected link reset due to discovery messages (Tung Nguyen) - ALSA: usb-audio: Relax hw constraints for implicit fb sync (Takashi Iwai) - ALSA: usb-audio: Make sure to stop endpoints before closing EPs (Takashi Iwai) - ASoC: wm8904: fix wrong outputs volume after power reactivation (Emanuele Ghidoli) - scsi: ufs: core: WLUN suspend SSU/enter hibern8 fail recovery (Peter Wang) - scsi: ufs: Stop using the clock scaling lock in the error handler (Bart Van Assche) - scsi: mpi3mr: Refer CONFIG_SCSI_MPI3MR in Makefile (Shin'ichiro Kawasaki) - regulator: da9211: Use irq handler when ready (Ricardo Ribalda) - x86/resctrl: Fix task CLOSID/RMID update race (Peter Newman) - EDAC/device: Fix period calculation in edac_device_reset_delay_period() (Eliav Farber) - x86/boot: Avoid using Intel mnemonics in AT&T syntax asm (Peter Zijlstra) - powerpc/imc-pmu: Fix use of mutex in IRQs disabled section (Kajol Jain) - netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function. (Gavrilov Ilia) - sched/core: Fix use-after-free bug in dup_user_cpus_ptr() (Waiman Long) - iommu/mediatek-v1: Fix an error handling path in mtk_iommu_v1_probe() (Christophe JAILLET) - iommu/iova: Fix alloc iova overflows issue (Yunfei Wang) - usb: ulpi: defer ulpi_register on ulpi_read_id timeout (Ferry Toth) - bus: mhi: host: Fix race between channel preparation and M0 event (Qiang Yu) - ipv6: raw: Deduct extension header length in rawv6_push_pending_frames (Herbert Xu) [Orabug: 35005828] {CVE-2023-0394} - ixgbe: fix pci device refcount leak (Yang Yingliang) - platform/x86: sony-laptop: Don't turn off 0x153 keyboard backlight during probe (Hans de Goede) - dt-bindings: msm/dsi: Don't require vcca-supply on 14nm PHY (Konrad Dybcio) - dt-bindings: msm/dsi: Don't require vdds-supply on 10nm PHY (Konrad Dybcio) - drm/msm/dp: do not complete dp_aux_cmd_fifo_tx() if irq is not for aux transfer (Kuogee Hsieh) - platform/x86: ideapad-laptop: Add Legion 5 15ARH05 DMI id to set_fn_lock_led_list[] (Hans de Goede) - dt-bindings: msm: dsi-phy-28nm: Add missing qcom, dsi-phy-regulator-ldo-mode (Bryan O'Donoghue) - dt-bindings: msm: dsi-controller-main: Fix description of core clock (Bryan O'Donoghue) - dt-bindings: msm: dsi-controller-main: Fix power-domain constraint (Bryan O'Donoghue) - drm/msm/adreno: Make adreno quirks not overwrite each other (Konrad Dybcio) - dt-bindings: msm: dsi-controller-main: Fix operating-points-v2 constraint (Bryan O'Donoghue) - platform/x86: dell-privacy: Fix SW_CAMERA_LENS_COVER reporting (Hans de Goede) - platform/surface: aggregator: Ignore command messages not intended for us (Maximilian Luz) - platform/x86: dell-privacy: Only register SW_CAMERA_LENS_COVER if present (Hans de Goede) - cifs: Fix uninitialized memory read for smb311 posix symlink create (Volker Lendecke) - net/mlx5e: Set action fwd flag when parsing tc action goto (Roi Dayan) - drm/i915/gt: Reset twice (Chris Wilson) - drm/virtio: Fix GEM handle creation UAF (Rob Clark) - s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple() (Heiko Carstens) - s390/cpum_sf: add READ_ONCE() semantics to compare and swap loops (Heiko Carstens) - ASoC: qcom: lpass-cpu: Fix fallback SD line index handling (Brian Norris) - s390/kexec: fix ipl report address for kdump (Alexander Egorenkov) - perf auxtrace: Fix address filter duplicate symbol selection (Adrian Hunter) - net: stmmac: add aux timestamps fifo clearance wait (Noor Azura Ahmad Tarmizi) - docs: Fix the docs build with Sphinx 6.0 (Jonathan Corbet) - efi: tpm: Avoid READ_ONCE() for accessing the event log (Ard Biesheuvel) - selftests: kvm: Fix a compile error in selftests/kvm/rseq_test.c (Jinrong Liang) - KVM: arm64: nvhe: Fix build with profile optimization (Denis Nikitin) - KVM: arm64: Fix S1PTW handling on RO memslots (Marc Zyngier) - ALSA: hda/realtek: Enable mute/micmute LEDs on HP Spectre x360 13-aw0xxx (Luka Guzenko) - ALSA: hda/realtek - Turn on power early (Yuchi Yang) - ALSA: control-led: use strscpy in set_led_id() (Jaroslav Kysela) - LTS version: v5.15.88 (Jack Vogel) - ALSA: hda - Enable headset mic on another Dell laptop with ALC3254 (Chris Chiu) - ALSA: hda/hdmi: Add a HP device 0x8715 to force connect list (Adrian Chan) - ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (Clement Lecigne) [Orabug: 34983525] {CVE-2023-0266} - net/ulp: prevent ULP without clone op from entering the LISTEN status (Paolo Abeni) - net: sched: disallow noqueue for qdisc classes (Frederick Lawler) [Orabug: 35005790] {CVE-2022-47929} - serial: fixup backport of 'serial: Deassert Transmit Enable on probe in driver-specific way' (Rasmus Villemoes) - selftests/vm/pkeys: Add a regression test for setting PKRU through ptrace (Kyle Huey) - x86/fpu: Emulate XRSTOR's behavior if the xfeatures PKRU bit is not set (Kyle Huey) - x86/fpu: Allow PKRU to be (once again) written by ptrace. (Kyle Huey) - x86/fpu: Add a pkru argument to copy_uabi_to_xstate() (Kyle Huey) - x86/fpu: Add a pkru argument to copy_uabi_from_kernel_to_xstate(). (Kyle Huey) - x86/fpu: Take task_struct* in copy_sigframe_from_user_to_xstate() (Kyle Huey) - parisc: Align parisc MADV_XXX constants with all other architectures (Helge Deller) - LTS version: v5.15.87 (Jack Vogel) - drm/mgag200: Fix PLL setup for G200_SE_A rev >=4 (Jocelyn Falempe) - io_uring: Fix unsigned 'res' comparison with zero in io_fixup_rw_res() (Harshit Mogalapalli) - efi: random: combine bootloader provided RNG seed with RNG protocol output (Ard Biesheuvel) - mbcache: Avoid nesting of cache->c_list_lock under bit locks (Jan Kara) - net: hns3: fix return value check bug of rx copybreak (Jie Wang) - btrfs: make thaw time super block check to also verify checksum (Qu Wenruo) - selftests: set the BUILD variable to absolute path (Muhammad Usama Anjum) - ext4: don't allow journal inode to have encrypt flag (Eric Biggers) - mptcp: use proper req destructor for IPv6 (Matthieu Baerts) - mptcp: dedicated request sock for subflow in v6 (Matthieu Baerts) - Revert 'ACPI: PM: Add support for upcoming AMD uPEP HID AMDI007' (Mario Limonciello) - ksmbd: check nt_len to be at least CIFS_ENCPWD_SIZE in ksmbd_decode_ntlmssp_auth_blob (William Liu) - ksmbd: fix infinite loop in ksmbd_conn_handler_loop() (Namjae Jeon) - hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling (Linus Torvalds) - hfs/hfsplus: use WARN_ON for sanity check (Arnd Bergmann) - drm/i915/gvt: fix vgpu debugfs clean in remove (Zhenyu Wang) - drm/i915/gvt: fix gvt debugfs destroy (Zhenyu Wang) - riscv, kprobes: Stricter c.jr/c.jalr decoding (Bjorn Topel) - riscv: uaccess: fix type of 0 variable on error in get_user() (Ben Dooks) - thermal: int340x: Add missing attribute for data rate base (Srinivas Pandruvada) - io_uring: fix CQ waiting timeout handling (Pavel Begunkov) - block: don't allow splitting of a REQ_NOWAIT bio (Jens Axboe) - fbdev: matroxfb: G200eW: Increase max memory from 1 MB to 16 MB (Paul Menzel) - nfsd: fix handling of readdir in v4root vs. mount upcall timeout (Jeff Layton) - x86/bugs: Flush IBP in ib_prctl_set() (Rodrigo Branco) - x86/kexec: Fix double-free of elf header buffer (Takashi Iwai) - btrfs: check superblock to ensure the fs was not modified at thaw time (Qu Wenruo) - nvme: also return I/O command effects from nvme_command_effects (Christoph Hellwig) - nvmet: use NVME_CMD_EFFECTS_CSUPP instead of open coding it (Christoph Hellwig) - io_uring: check for valid register opcode earlier (Jens Axboe) - nvme: fix multipath crash caused by flush request when blktrace is enabled (Yanjun Zhang) - ASoC: Intel: bytcr_rt5640: Add quirk for the Advantech MICA-071 tablet (Hans de Goede) - udf: Fix extension of the last extent in the file (Jan Kara) - caif: fix memory leak in cfctrl_linkup_request() (Zhengchao Shao) - drm/i915: unpin on error in intel_vgpu_shadow_mm_pin() (Dan Carpenter) - perf stat: Fix handling of --for-each-cgroup with --bpf-counters to match non BPF mode (Namhyung Kim) - usb: rndis_host: Secure rndis_query check against int overflow (Szymon Heidrich) - octeontx2-pf: Fix lmtst ID used in aura free (Geetha sowjanya) - drivers/net/bonding/bond_3ad: return when there's no aggregator (Daniil Tatianin) - fs/ntfs3: don't hold ni_lock when calling truncate_setsize() (Tetsuo Handa) - drm/imx: ipuv3-plane: Fix overlay plane width (Philipp Zabel) - perf tools: Fix resources leak in perf_data__open_dir() (Miaoqian Lin) - netfilter: ipset: Rework long task execution when adding/deleting entries (Jozsef Kadlecsik) - netfilter: ipset: fix hash:net,port,net hang with /0 subnet (Jozsef Kadlecsik) - net: sparx5: Fix reading of the MAC address (Horatiu Vultur) - net: sched: cbq: dont intepret cls results when asked to drop (Jamal Hadi Salim) [Orabug: 34983582] {CVE-2023-23454} - net: sched: atm: dont intepret cls results when asked to drop (Jamal Hadi Salim) [Orabug: 34983613] {CVE-2023-23455} - gpio: sifive: Fix refcount leak in sifive_gpio_probe (Miaoqian Lin) - ceph: switch to vfs_inode_has_locks() to fix file lock bug (Xiubo Li) - filelock: new helper: vfs_inode_has_locks (Jeff Layton) - drm/meson: Reduce the FIFO lines held when AFBC is not used (Carlo Caione) - RDMA/mlx5: Fix validation of max_rd_atomic caps for DC (Maor Gottlieb) - RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device (Shay Drory) - net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe (Miaoqian Lin) - net: ena: Update NUMA TPH hint register upon NUMA node update (David Arinzon) - net: ena: Set default value for RX interrupt moderation (David Arinzon) - net: ena: Fix rx_copybreak value update (David Arinzon) - net: ena: Use bitmask to indicate packet redirection (David Arinzon) - net: ena: Account for the number of processed bytes in XDP (David Arinzon) - net: ena: Don't register memory info on XDP exchange (David Arinzon) - net: ena: Fix toeplitz initial hash value (David Arinzon) - net: amd-xgbe: add missed tasklet_kill (Jiguang Xiao) - net/mlx5e: Fix hw mtu initializing at XDP SQ allocation (Adham Faris) - net/mlx5e: Always clear dest encap in neigh-update-del (Chris Mi) - net/mlx5e: TC, Refactor mlx5e_tc_add_flow_mod_hdr() to get flow attr (Roi Dayan) - net/mlx5e: IPoIB, Don't allow CQE compression to be turned on by default (Dragos Tatulea) - net/mlx5: Avoid recovery in probe flows (Shay Drory) - net/mlx5: Add forgotten cleanup calls into mlx5_init_once() error path (Jiri Pirko) - net/mlx5: E-Switch, properly handle ingress tagged packets on VST (Moshe Shemesh) - vdpa_sim: fix vringh initialization in vdpasim_queue_ready() (Stefano Garzarella) - vhost: fix range used in translate_desc() (Stefano Garzarella) - vringh: fix range used in iotlb_translate() (Stefano Garzarella) - vhost/vsock: Fix error handling in vhost_vsock_init() (Yuan Can) - vdpa_sim: fix possible memory leak in vdpasim_net_init() and vdpasim_blk_init() (ruanjinjie) - nfc: Fix potential resource leaks (Miaoqian Lin) - net: dsa: mv88e6xxx: depend on PTP conditionally (Johnny S. Lee) - qlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable() failure (Daniil Tatianin) - net: sched: fix memory leak in tcindex_set_parms (Hawkins Jiawei) - net: hns3: fix VF promisc mode not update when mac table full (Jian Shen) - net: hns3: fix miss L3E checking for rx packet (Jian Shen) - net: hns3: extract macro to simplify ring stats update code (Peng Li) - net: hns3: refactor hns3_nic_reuse_page() (Hao Chen) - net: hns3: add interrupts re-initialization while doing VF FLR (Jie Wang) - nfsd: shut down the NFSv4 state objects before the filecache (Jeff Layton) - veth: Fix race with AF_XDP exposing old or uninitialized descriptors (Shawn Bohrer) - netfilter: nf_tables: honor set timeout and garbage collection updates (Pablo Neira Ayuso) - vmxnet3: correctly report csum_level for encapsulated packet (Ronak Doshi) - netfilter: nf_tables: perform type checking for existing sets (Pablo Neira Ayuso) - netfilter: nf_tables: add function to create set stateful expressions (Pablo Neira Ayuso) - netfilter: nf_tables: consolidate set description (Pablo Neira Ayuso) - drm/panfrost: Fix GEM handle creation ref-counting (Steven Price) - bpf: pull before calling skb_postpull_rcsum() (Jakub Kicinski) - btrfs: fix an error handling path in btrfs_defrag_leaves() (Sasha Levin) - SUNRPC: ensure the matching upcall is in-flight upon downcall (minoura makoto) - drm/i915/migrate: fix length calculation (Matthew Auld) - drm/i915/migrate: fix offset calculation (Matthew Auld) - drm/i915/migrate: don't check the scratch page (Matthew Auld) - ext4: fix deadlock due to mbcache entry corruption (Jan Kara) - mbcache: automatically delete entries from cache on freeing (Jan Kara) - ext4: correct inconsistent error msg in nojournal mode (Baokun Li) - ext4: goto right label 'failed_mount3a' (Jason Yan) - ravb: Fix 'failed to switch device to config mode' message during unbind (Biju Das) - perf probe: Fix to get the DW_AT_decl_file and DW_AT_call_file as unsinged data (Masami Hiramatsu (Google)) - perf probe: Use dwarf_attr_integrate as generic DWARF attr accessor (Masami Hiramatsu (Google)) - media: s5p-mfc: Fix in register read and write for H264 (Smitha T Murthy) - media: s5p-mfc: Clear workbit to handle error condition (Smitha T Murthy) - media: s5p-mfc: Fix to handle reference queue during finishing (Smitha T Murthy) - x86/MCE/AMD: Clear DFR errors found in THR handler (Yazen Ghannam) - x86/mce: Get rid of msr_ops (Borislav Petkov) - btrfs: fix extent map use-after-free when handling missing device in read_one_chunk (void0red) - btrfs: move missing device handling in a dedicate function (Nikolay Borisov) - btrfs: replace strncpy() with strscpy() (Sasha Levin) - phy: qcom-qmp-combo: fix out-of-bounds clock access (Sasha Levin) - ARM: renumber bits related to _TIF_WORK_MASK (Jens Axboe) - ext4: fix off-by-one errors in fast-commit block filling (Eric Biggers) - ext4: fix unaligned memory access in ext4_fc_reserve_space() (Eric Biggers) - ext4: add missing validation of fast-commit record lengths (Eric Biggers) - ext4: don't set up encryption key during jbd2 transaction (Eric Biggers) - ext4: disable fast-commit of encrypted dir operations (Eric Biggers) - ext4: fix potential out of bound read in ext4_fc_replay_scan() (Eric Biggers) - ext4: factor out ext4_fc_get_tl() (Eric Biggers) - ext4: introduce EXT4_FC_TAG_BASE_LEN helper (Eric Biggers) - ext4: use ext4_debug() instead of jbd_debug() (Eric Biggers) - ext4: remove unused enum EXT4_FC_COMMIT_FAILED (Eric Biggers) - tracing: Fix issue of missing one synthetic field (Zheng Yejian) - block: mq-deadline: Fix dd_finish_request() for zoned devices (Damien Le Moal) - drm/amdgpu: make display pinning more flexible (v2) (Alex Deucher) - drm/amdgpu: handle polaris10/11 overlap asics (v2) (Alex Deucher) - ext4: allocate extended attribute value in vmalloc area (Ye Bin) - ext4: avoid unaccounted block allocation when expanding inode (Jan Kara) - ext4: initialize quota before expanding inode in setproject ioctl (Jan Kara) - ext4: fix inode leak in ext4_xattr_inode_create() on an error path (Ye Bin) - ext4: fix kernel BUG in 'ext4_write_inline_data_end()' (Ye Bin) - ext4: avoid BUG_ON when creating xattrs (Jan Kara) - ext4: fix error code return to user-space in ext4_get_branch() (Luis Henriques) - ext4: fix corruption when online resizing a 1K bigalloc fs (Baokun Li) - ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline (Eric Whitney) - ext4: init quota for 'old.inode' in 'ext4_rename' (Ye Bin) - ext4: fix uninititialized value in 'ext4_evict_inode' (Ye Bin) - ext4: fix leaking uninitialized memory in fast-commit journal (Eric Biggers) - ext4: fix bug_on in __es_tree_search caused by bad boot loader inode (Baokun Li) - ext4: check and assert if marking an no_delete evicting inode dirty (Zhang Yi) - ext4: fix reserved cluster accounting in __es_remove_extent() (Ye Bin) - ext4: fix bug_on in __es_tree_search caused by bad quota inode (Baokun Li) - ext4: add helper to check quota inums (Baokun Li) - ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode (Baokun Li) - ext4: fix undefined behavior in bit shift for ext4_check_flag_values (Gaosheng Cui) - ext4: fix use-after-free in ext4_orphan_cleanup (Baokun Li) - fs: ext4: initialize fsdata in pagecache_write() (Alexander Potapenko) - ext4: remove trailing newline from ext4_msg() message (Luis Henriques) - ext4: add inode table check in __ext4_get_inode_loc to aovid possible infinite loop (Baokun Li) - ext4: silence the warning when evicting inode with dioread_nolock (Zhang Yi) - drm/ingenic: Fix missing platform_driver_unregister() call in ingenic_drm_init() (Yuan Can) - drm/i915/dsi: fix VBT send packet port selection for dual link DSI (Mikko Kovanen) - drm/vmwgfx: Validate the box size for the snooped cursor (Zack Rusin) - drm/connector: send hotplug uevent on connector cleanup (Simon Ser) - device_cgroup: Roll back to original exceptions after copy failure (Wang Weiyang) - parisc: led: Fix potential null-ptr-deref in start_task() (Shang XiaoJing) - remoteproc: core: Do pm_relax when in RPROC_OFFLINE state (Maria Yu) - iommu/amd: Fix ivrs_acpihid cmdline parsing code (Kim Phillips) - phy: qcom-qmp-combo: fix sc8180x reset (Johan Hovold) - driver core: Fix bus_type.match() error handling in __driver_attach() (Isaac J. Manjarres) - crypto: ccp - Add support for TEE for PCI ID 0x14CA (Mario Limonciello) - crypto: n2 - add missing hash statesize (Corentin Labbe) - riscv: mm: notify remote harts about mmu cache updates (Sergey Matyukevich) - riscv: stacktrace: Fixup ftrace_graph_ret_addr retp argument (Guo Ren) - PCI/sysfs: Fix double free in error path (Sascha Hauer) - PCI: Fix pci_device_is_present() for VFs by checking PF (Michael S. Tsirkin) - ipmi: fix use after free in _ipmi_destroy_user() (Dan Carpenter) - ima: Fix a potential NULL pointer access in ima_restore_measurement_list (Huaxin Lu) - mtd: spi-nor: Check for zero erase size in spi_nor_find_best_erase_type() (Alexander Sverdlin) - ipmi: fix long wait in unload when IPMI disconnect (Zhang Yuchen) - ipu3-imgu: Fix NULL pointer dereference in imgu_subdev_set_selection() (Maximilian Luz) - ASoC: jz4740-i2s: Handle independent FIFO flush bits (Aidan MacDonald) - wifi: wilc1000: sdio: fix module autoloading (Michael Walle) - efi: Add iMac Pro 2017 to uefi skip cert quirk (Aditya Garg) - md/bitmap: Fix bitmap chunk size overflow issues (Florian-Ewald Mueller) - block: mq-deadline: Do not break sequential write streams to zoned HDDs (Damien Le Moal) - rtc: ds1347: fix value written to century register (Ian Abbott) - cifs: fix missing display of three mount options (Steve French) - cifs: fix confusing debug message (Paulo Alcantara) - media: dvb-core: Fix UAF due to refcount races at releasing (Takashi Iwai) [Orabug: 34820628] {CVE-2022-41218} - media: dvb-core: Fix double free in dvb_register_device() (Keita Suzuki) - ARM: 9256/1: NWFPE: avoid compiler-generated __aeabi_uldivmod (Nick Desaulniers) - staging: media: tegra-video: fix device_node use after free (Luca Ceresoli) - staging: media: tegra-video: fix chan->mipi value on error (Luca Ceresoli) - tracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_line (Yang Jihong) - tracing/probes: Handle system names with hyphens (Steven Rostedt (Google)) - tracing/hist: Fix wrong return value in parse_action_params() (Zheng Yejian) - tracing: Fix complicated dependency of CONFIG_TRACER_MAX_TRACE (Masami Hiramatsu (Google)) - tracing: Fix race where eprobes can be called before the event (Steven Rostedt (Google)) - x86/kprobes: Fix optprobe optimization check with CONFIG_RETHUNK (Masami Hiramatsu (Google)) - x86/kprobes: Fix kprobes instruction boudary check with CONFIG_RETHUNK (Masami Hiramatsu (Google)) - ftrace/x86: Add back ftrace_expected for ftrace bug reports (Steven Rostedt (Google)) - x86/microcode/intel: Do not retry microcode reloading on the APs (Ashok Raj) - KVM: nVMX: Properly expose ENABLE_USR_WAIT_PAUSE control to L1 (Sean Christopherson) - KVM: nVMX: Inject #GP, not #UD, if 'generic' VMXON CR0/CR4 check fails (Sean Christopherson) - KVM: VMX: Resume guest immediately when injecting #GP on ECREATE (Sean Christopherson) - of/kexec: Fix reading 32-bit 'linux,initrd-{start,end}' values (Rob Herring) - perf/core: Call LSM hook after copying perf_event_attr (Namhyung Kim) - tracing/hist: Fix out-of-bound write on 'action_data.var_ref_idx' (Zheng Yejian) - dm cache: set needs_check flag after aborting metadata (Mike Snitzer) - dm cache: Fix UAF in destroy() (Luo Meng) - dm clone: Fix UAF in clone_dtr() (Luo Meng) - dm integrity: Fix UAF in dm_integrity_dtr() (Luo Meng) - dm thin: Fix UAF in run_timer_softirq() (Luo Meng) - dm thin: resume even if in FAIL mode (Luo Meng) - dm thin: Use last transaction's pmd->root when commit failed (Zhihao Cheng) - dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata (Zhihao Cheng) - dm cache: Fix ABBA deadlock between shrink_slab and dm_cache_metadata_abort (Mike Snitzer) - mptcp: remove MPTCP 'ifdef' in TCP SYN cookies (Matthieu Baerts) - mptcp: mark ops structures as ro_after_init (Florian Westphal) - fs: dlm: retry accept() until -EAGAIN or error returns (Alexander Aring) - fs: dlm: fix sock release if listen fails (Alexander Aring) - ALSA: hda/realtek: Apply dual codec fixup for Dell Latitude laptops (Chris Chiu) - ALSA: patch_realtek: Fix Dell Inspiron Plus 16 (Philipp Jungkamp) - cpufreq: Init completion before kobject_init_and_add() (Yongqiang Liu) - PM/devfreq: governor: Add a private governor_data for governor (Kant Fan) - selftests: Use optional USERCFLAGS and USERLDFLAGS (Mickael Salaun) - arm64: dts: qcom: sdm850-lenovo-yoga-c630: correct I2C12 pins drive strength (Krzysztof Kozlowski) - ARM: ux500: do not directly dereference __iomem (Jason A. Donenfeld) - btrfs: fix resolving backrefs for inline extent followed by prealloc (Boris Burkov) - mmc: sdhci-sprd: Disable CLK_AUTO when the clock is less than 400K (Wenchao Chen) - arm64: dts: qcom: sdm845-db845c: correct SPI2 pins drive strength (Krzysztof Kozlowski) - perf/x86/intel/uncore: Clear attr_update properly (Alexander Antonov) - perf/x86/intel/uncore: Disable I/O stacks to PMU mapping on ICX-D (Alexander Antonov) - jbd2: use the correct print format (Bixuan Cui) - ktest.pl minconfig: Unset configs instead of just removing them (Steven Rostedt) - kest.pl: Fix grub2 menu handling for rebooting (Steven Rostedt) - soc: qcom: Select REMAP_MMIO for LLCC driver (Manivannan Sadhasivam) - media: stv0288: use explicitly signed char (Jason A. Donenfeld) - net/af_packet: make sure to pull mac header (Eric Dumazet) - net/af_packet: add VLAN support for AF_PACKET SOCK_RAW GSO (Hangbin Liu) - rcu-tasks: Simplify trc_read_check_handler() atomic operations (Paul E. McKenney) - ASoC/SoundWire: dai: expand 'stream' concept beyond SoundWire (Pierre-Louis Bossart) - ASoC: Intel/SOF: use set_stream() instead of set_tdm_slots() for HDAudio (Pierre-Louis Bossart) - kcsan: Instrument memcpy/memset/memmove with newer Clang (Marco Elver) - SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails (Chuck Lever) - tpm: tpm_tis: Add the missed acpi_put_table() to fix memory leak (Hanjun Guo) - tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak (Hanjun Guo) - tpm: acpi: Call acpi_put_table() to fix memory leak (Hanjun Guo) - mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING (Deren Wu) - f2fs: allow to read node block after shutdown (Jaegeuk Kim) - f2fs: should put a page when checking the summary info (Pavel Machek) - mm, compaction: fix fast_isolate_around() to stay within boundaries (NARIBAYASHI Akira) - md: fix a crash in mempool_free (Mikulas Patocka) - mfd: mt6360: Add bounds checking in Regmap read/write call-backs (ChiYuan Huang) - pnode: terminate at peers of source (Christian Brauner) - ALSA: line6: fix stack overflow in line6_midi_transmit (Artem Egorkine) - ALSA: line6: correct midi status byte when receiving data from podxt (Artem Egorkine) - ovl: Use ovl mounter's fsuid and fsgid in ovl_link() (Zhang Tianci) - binfmt: Fix error return code in load_elf_fdpic_binary() (Wang Yufen) - hfsplus: fix bug causing custom uid and gid being unable to be assigned with mount (Aditya Garg) - pstore/zone: Use GFP_ATOMIC to allocate zone buffer (Qiujun Huang) - pstore: Properly assign mem_type property (Luca Stefani) - HID: plantronics: Additional PIDs for double volume key presses quirk (Terry Junge) - HID: multitouch: fix Asus ExpertBook P2 P2451FA trackpoint (Jose Exposito) - powerpc/rtas: avoid scheduling in rtas_os_term() (Nathan Lynch) - powerpc/rtas: avoid device tree lookups in rtas_os_term() (Nathan Lynch) - objtool: Fix SEGFAULT (Christophe Leroy) - fs/ntfs3: Fix slab-out-of-bounds in r_page (Yin Xiujiang) - fs/ntfs3: Delete duplicate condition in ntfs_read_mft() (Dan Carpenter) - fs/ntfs3: Use __GFP_NOWARN allocation at ntfs_fill_super() (Tetsuo Handa) - fs/ntfs3: Use __GFP_NOWARN allocation at wnd_init() (Tetsuo Handa) - fs/ntfs3: Validate index root when initialize NTFS security (Edward Lo) - soundwire: dmi-quirks: add quirk variant for LAPBC710 NUC15 (Pierre-Louis Bossart) - fs/ntfs3: Fix slab-out-of-bounds read in run_unpack (Hawkins Jiawei) - fs/ntfs3: Validate resident attribute name (Edward Lo) - fs/ntfs3: Validate buffer length while parsing index (Edward Lo) - fs/ntfs3: Validate attribute name offset (Edward Lo) - fs/ntfs3: Add null pointer check for inode operations (Edward Lo) - fs/ntfs3: Fix memory leak on ntfs_fill_super() error path (Shigeru Yoshida) - fs/ntfs3: Add null pointer check to attr_load_runs_vcn (Edward Lo) - fs/ntfs3: Validate data run offset (Edward Lo) - fs/ntfs3: Add overflow check for attribute size (edward lo) - fs/ntfs3: Validate BOOT record_size (edward lo) - nvmet: don't defer passthrough commands with trivial effects to the workqueue (Christoph Hellwig) - nvme: fix the NVME_CMD_EFFECTS_CSE_MASK definition (Christoph Hellwig) - ata: ahci: Fix PCS quirk application for suspend (Adam Vodopjan) - block, bfq: fix uaf for bfqq in bfq_exit_icq_bfqq (Yu Kuai) - ACPI: resource: do IRQ override on Lenovo 14ALC7 (Adrian Freund) - ACPI: resource: do IRQ override on XMG Core 15 (Erik Schumacher) - ACPI: resource: do IRQ override on LENOVO IdeaPad (Jiri Slaby (SUSE)) - ACPI: resource: Skip IRQ override on Asus Vivobook K3402ZA/K3502ZA (Tamim Khan) - nvme-pci: fix page size checks (Keith Busch) - nvme-pci: fix mempool alloc size (Keith Busch) - nvme-pci: fix doorbell buffer value endianness (Klaus Jensen) - cifs: fix oops during encryption (Paulo Alcantara) - usb: dwc3: qcom: Fix memory leak in dwc3_qcom_interconnect_init (Miaoqian Lin) - IB/mlx4: Implement backend callback for 'ib_get_vector_irqn' (Gerd Rausch) [Orabug: 34276618] - net/rds: Split send & receive vectors again (Gerd Rausch) [Orabug: 34276609] - drivers: base: cacheinfo: export symbol 'get_cpu_cacheinfo' (Gerd Rausch) [Orabug: 34276609] - net/rds: Bring tasklets back for better latency (Gerd Rausch) [Orabug: 34276240] - net/rds: Throttle check for CQ CPU affinity (Gerd Rausch) [Orabug: 34276240] - net/rds: Follow the observed CQ CPU affinity (Gerd Rausch) [Orabug: 34276240] - net/rds: Add 'preferred_cpu' option to 'rds_rdma.ko' (Gerd Rausch) [Orabug: 34276240] - net/mlx5: Add new verb 'ib_get_vector_irqn' (Gerd Rausch) [Orabug: 34276240] - net/rds: Use the preferred_cpu in rds_queue_{,delayed}_work (Gerd Rausch) [Orabug: 34276240] - net/rds: Make workers use the designated CPU (Gerd Rausch) [Orabug: 34276240] - net/rds: Put more CPU cores to work (Gerd Rausch) [Orabug: 34276240] - net/rds: Get rid of tasklets (Gerd Rausch) [Orabug: 34276240] - net/rds: Use the same vector for send & receive (Gerd Rausch) [Orabug: 34276240] - net/rds: Allocate rds_ib_{incoming,frag}_slab on HCA NUMA nodeid (Gerd Rausch) [Orabug: 34276240] - net/rds: Allocate pages on HCA NUMA nodeid (Gerd Rausch) [Orabug: 34276240] - uek-rpm: [act|cls]_bpf should be part of core (Alan Maguire) [Orabug: 34551630] - net/rds: Do not RESET_ALT_CONN if conn drops with DR_IB_DISCONNECTED_EVENT (Sharath Srinivasan) [Orabug: 34864406] - rds: ib: Keep IB MRs on clean_list unless we are tearing down the pool (Hakon Bugge) [Orabug: 34987233] - rds: ib: Add FRWR related statistics counters (Hakon Bugge) [Orabug: 34987233] - scsi: megaraid_sas: Skip syncing the RAID map on older controllers (Martin K. Petersen) [Orabug: 35028425] - iommu/amd: Don't block updates to GATag if guest mode is already on (Joao Martins) [Orabug: 34988288] - IB/core: Make GID table entry (gid_idx) available immediately (Konrad Rzeszutek Wilk) [Orabug: 35015836] - iommu/amd: Disable AVIC on certain systems BIOS (Joao Martins) [Orabug: 35018580] - xfs: fix incorrect i_nlink caused by inode racing (Long Li) [Orabug: 35021004] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-23455 CVE-2022-4129 CVE-2023-23454 CVE-2023-0266 CVE-2023-23559 CVE-2023-0394 CVE-2022-41218 CVE-2022-47929 Oracle Linux 7 [4.14.35-2047.523.4.1] - mm: kvmalloc does not fallback to vmalloc for incompatible gfp flags (Michal Hocko) [Orabug: 35164196] [4.14.35-2047.523.4] - rds: ib: Keep IB MRs on clean_list unless we are tearing down the pool (Hakon Bugge) [Orabug: 34987235] - rds: ib: Add FRWR related statistics counters (Hakon Bugge) [Orabug: 34987235] - net/rds: The fast registration work queue is not destroyed (Ka-Cheong Poon) [Orabug: 25962452] [Orabug: 31712036] [4.14.35-2047.523.3] - driver/soc/pensando: cap_pcie: refactor pciep_regrd32 (David Clear) [Orabug: 35089515] - mtd: spi-nor: Add support for Winbond w25q02nw flash. (David Clear) [Orabug: 35089515] - drivers/i2c: Lattice I2C driver update (David Clear) [Orabug: 35089515] - drivers/soc/pensando: Adding Elba sbus driver (David Clear) [Orabug: 35089515] - Arm64: Pensando: Enable ltc2978 driver for Ortano ADI cards (Austin Sehnert) [Orabug: 35080511] - scsi: target: core: Remove from tmr_list during LUN unlink (Dmitry Bogdanov) [Orabug: 35040145] [4.14.35-2047.523.2] - RDMA/addr: Refresh neighbour entries upon rdma_resolve_addr() (Gerd Rausch) [Orabug: 35060577] - xfs: fix incorrect i_nlink caused by inode racing (Long Li) [Orabug: 35040849] [4.14.35-2047.523.1] - x86/kexec: Do not reserve EFI setup_data in the kexec e820 table (Dave Young) [Orabug: 34966703] - xfs: make COW fork unwritten extent conversions more robust (Christoph Hellwig) [Orabug: 34390903] - scsi: megaraid_sas: Target with invalid LUN ID is deleted during scan (Chandrakanth patil) [Orabug: 34242965] - scsi: megaraid_sas: Early detection of VD deletion through RaidMap update (Kashyap Desai) [Orabug: 34242965] - LTS version: v4.14.304 (Saeed Mirzamohammadi) - x86/fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN (YingChi Long) - gsmi: fix null-deref in gsmi_get_variable (Khazhismel Kumykov) - serial: atmel: fix incorrect baudrate setup (Tobias Schramm) - serial: pch_uart: Pass correct sg to dma_unmap_sg() (Ilpo Jarvinen) - usb-storage: apply IGNORE_UAS only for HIKSEMI MD202 on RTL9210 (Juhyung Park) - usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() (Maciej zenczykowski) - usb: gadget: g_webcam: Send color matching descriptor per frame (Daniel Scally) - usb: host: ehci-fsl: Fix module alias (Alexander Stein) - USB: serial: cp210x: add SCALANCE LPE-9000 device id (Michael Adler) - usb: core: hub: disable autosuspend for TI TUSB8041 (Flavio Suligoi) - USB: misc: iowarrior: fix up header size for USB_DEVICE_ID_CODEMERCS_IOW100 (Greg Kroah-Hartman) - USB: serial: option: add Quectel EM05CN modem (Duke Xin) - USB: serial: option: add Quectel EM05CN (SG) modem (Duke Xin) - USB: serial: option: add Quectel EC200U modem (Ali Mirghasemi) - USB: serial: option: add Quectel EM05-G (RS) modem (Duke Xin) - USB: serial: option: add Quectel EM05-G (CS) modem (Duke Xin) - USB: serial: option: add Quectel EM05-G (GR) modem (Duke Xin) - prlimit: do_prlimit needs to have a speculation check (Greg Kroah-Hartman) - usb: xhci: Check endpoint is valid before dereferencing it (Jimmy Hu) - xhci-pci: set the dma max_seg_size (Ricardo Ribalda) - nilfs2: fix general protection fault in nilfs_btree_insert() (Ryusuke Konishi) - f2fs: let's avoid panic if extent_tree is not created (Jaegeuk Kim) - RDMA/srp: Move large values to a new enum for gcc13 (Jiri Slaby (SUSE)) - net/ethtool/ioctl: return -EOPNOTSUPP if we have no phy stats (Daniil Tatianin) - pNFS/filelayout: Fix coalescing test for single DS (Olga Kornievskaia) - LTS version: v4.14.303 (Saeed Mirzamohammadi) - Revert 'usb: ulpi: defer ulpi_register on ulpi_read_id timeout' (Ferry Toth) - nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame() (Minsuk Kang) - hvc/xen: lock console list traversal (Roger Pau Monne) - regulator: da9211: Use irq handler when ready (Ricardo Ribalda) - EDAC/device: Fix period calculation in edac_device_reset_delay_period() (Eliav Farber) - x86/boot: Avoid using Intel mnemonics in AT&T syntax asm (Peter Zijlstra) - netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function. (Gavrilov Ilia) - ipv6: raw: Deduct extension header length in rawv6_push_pending_frames (Herbert Xu) [Orabug: 35005830] {CVE-2023-0394} - platform/x86: sony-laptop: Don't turn off 0x153 keyboard backlight during probe (Hans de Goede) - ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (Clement Lecigne) - net/ulp: prevent ULP without clone op from entering the LISTEN status (Paolo Abeni) - s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple() (Heiko Carstens) - perf auxtrace: Fix address filter duplicate symbol selection (Adrian Hunter) - docs: Fix the docs build with Sphinx 6.0 (Jonathan Corbet) - net: sched: disallow noqueue for qdisc classes (Frederick Lawler) [Orabug: 35005793] {CVE-2022-47929} - ravb: Fix 'failed to switch device to config mode' message during unbind (Biju Das) - driver core: Fix bus_type.match() error handling in __driver_attach() (Isaac J. Manjarres) - parisc: Align parisc MADV_XXX constants with all other architectures (Helge Deller) - hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling (Linus Torvalds) - hfs/hfsplus: use WARN_ON for sanity check (Arnd Bergmann) - nfsd: fix handling of readdir in v4root vs. mount upcall timeout (Jeff Layton) - x86/bugs: Flush IBP in ib_prctl_set() (Rodrigo Branco) - udf: Fix extension of the last extent in the file (Jan Kara) - caif: fix memory leak in cfctrl_linkup_request() (Zhengchao Shao) - usb: rndis_host: Secure rndis_query check against int overflow (Szymon Heidrich) - net: sched: atm: dont intepret cls results when asked to drop (Jamal Hadi Salim) [Orabug: 34983615] {CVE-2023-23455} - net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe (Miaoqian Lin) - net: amd-xgbe: add missed tasklet_kill (Jiguang Xiao) - nfc: Fix potential resource leaks (Miaoqian Lin) - qlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable() failure (Daniil Tatianin) - bpf: pull before calling skb_postpull_rcsum() (Jakub Kicinski) - SUNRPC: ensure the matching upcall is in-flight upon downcall (minoura makoto) - ext4: allocate extended attribute value in vmalloc area (Ye Bin) - ext4: avoid unaccounted block allocation when expanding inode (Jan Kara) - ext4: initialize quota before expanding inode in setproject ioctl (Jan Kara) - ext4: fix inode leak in ext4_xattr_inode_create() on an error path (Ye Bin) - ext4: avoid BUG_ON when creating xattrs (Jan Kara) - ext4: fix error code return to user-space in ext4_get_branch() (Luis Henriques) - ext4: init quota for 'old.inode' in 'ext4_rename' (Ye Bin) - ext4: fix bug_on in __es_tree_search caused by bad boot loader inode (Baokun Li) - ext4: fix undefined behavior in bit shift for ext4_check_flag_values (Gaosheng Cui) - ext4: add inode table check in __ext4_get_inode_loc to aovid possible infinite loop (Baokun Li) - drm/vmwgfx: Validate the box size for the snooped cursor (Zack Rusin) - drm/connector: send hotplug uevent on connector cleanup (Simon Ser) - device_cgroup: Roll back to original exceptions after copy failure (Wang Weiyang) - parisc: led: Fix potential null-ptr-deref in start_task() (Shang XiaoJing) - iommu/amd: Fix ivrs_acpihid cmdline parsing code (Kim Phillips) - crypto: n2 - add missing hash statesize (Corentin Labbe) - PCI/sysfs: Fix double free in error path (Sascha Hauer) - PCI: Fix pci_device_is_present() for VFs by checking PF (Michael S. Tsirkin) - ima: Fix a potential NULL pointer access in ima_restore_measurement_list (Huaxin Lu) - cifs: fix confusing debug message (Paulo Alcantara) - media: dvb-core: Fix UAF due to refcount races at releasing (Takashi Iwai) [Orabug: 34820630] {CVE-2022-41218} - media: dvb-core: Fix double free in dvb_register_device() (Keita Suzuki) - ARM: 9256/1: NWFPE: avoid compiler-generated __aeabi_uldivmod (Nick Desaulniers) - tracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_line (Yang Jihong) - x86/microcode/intel: Do not retry microcode reloading on the APs (Ashok Raj) - dm cache: set needs_check flag after aborting metadata (Mike Snitzer) - dm cache: Fix UAF in destroy() (Luo Meng) - dm thin: Fix UAF in run_timer_softirq() (Luo Meng) - dm thin: Use last transaction's pmd->root when commit failed (Zhihao Cheng) - dm cache: Fix ABBA deadlock between shrink_slab and dm_cache_metadata_abort (Mike Snitzer) - selftests: Use optional USERCFLAGS and USERLDFLAGS (Mickael Salaun) - ARM: ux500: do not directly dereference __iomem (Jason A. Donenfeld) - ktest.pl minconfig: Unset configs instead of just removing them (Steven Rostedt) - media: stv0288: use explicitly signed char (Jason A. Donenfeld) - tpm: tpm_tis: Add the missed acpi_put_table() to fix memory leak (Hanjun Guo) - tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak (Hanjun Guo) - mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING (Deren Wu) - md: fix a crash in mempool_free (Mikulas Patocka) - pnode: terminate at peers of source (Christian Brauner) - ALSA: line6: fix stack overflow in line6_midi_transmit (Artem Egorkine) - ALSA: line6: correct midi status byte when receiving data from podxt (Artem Egorkine) - hfsplus: fix bug causing custom uid and gid being unable to be assigned with mount (Aditya Garg) - HID: plantronics: Additional PIDs for double volume key presses quirk (Terry Junge) - powerpc/rtas: avoid scheduling in rtas_os_term() (Nathan Lynch) - powerpc/rtas: avoid device tree lookups in rtas_os_term() (Nathan Lynch) - media: dvbdev: fix refcnt bug (Lin Ma) [Orabug: 34983296] {CVE-2022-45886} {CVE-2022-45884} {CVE-2022-45919} {CVE-2022-45887} {CVE-2022-45885} - gcov: add support for checksum field (Rickard x Andersson) - iio: adc: ad_sigma_delta: do not use internal iio_dev lock (Nuno Sa) - reiserfs: Add missing calls to reiserfs_security_free() (Roberto Sassu) - HID: wacom: Ensure bootloader PID is usable in hidraw mode (Jason Gerecke) - usb: dwc3: core: defer probe on ulpi_read_id timeout (Ferry Toth) - pstore: Make sure CONFIG_PSTORE_PMSG selects CONFIG_RT_MUTEXES (John Stultz) - pstore: Switch pmsg_lock to an rt_mutex to avoid priority inversion (John Stultz) - ASoC: rt5670: Remove unbalanced pm_runtime_put() (Hans de Goede) - ASoC: rockchip: spdif: Add missing clk_disable_unprepare() in rk_spdif_runtime_resume() (Wang Jingjin) - ASoC: wm8994: Fix potential deadlock (Marek Szyprowski) - ASoC: rockchip: pdm: Add missing clk_disable_unprepare() in rockchip_pdm_runtime_resume() (Wang Jingjin) - ASoC: mediatek: mt8173-rt5650-rt5514: fix refcount leak in mt8173_rt5650_rt5514_dev_probe() (Wang Yufen) - orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string() (Zhang Xiaoxu) - drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid() (Nathan Chancellor) - drm/fsl-dcu: Fix return type of fsl_dcu_drm_connector_mode_valid() (Nathan Chancellor) - clk: st: Fix memory leak in st_of_quadfs_setup() (Xiu Jianfeng) - media: si470x: Fix use-after-free in si470x_int_in_callback() (Shigeru Yoshida) - mmc: f-sdh30: Add quirks for broken timeout clock capability (Kunihiko Hayashi) - blk-mq: fix possible memleak when register 'hctx' failed (Ye Bin) - media: dvb-usb: fix memory leak in dvb_usb_adapter_init() (Mazin Al Haddad) - media: dvbdev: adopts refcnt to avoid UAF (Lin Ma) [Orabug: 34983296] {CVE-2022-45887} {CVE-2022-45885} {CVE-2022-45884} {CVE-2022-45886} {CVE-2022-45919} - media: dvb-frontends: fix leak of memory fw (Yan Lei) - ppp: associate skb with a device at tx (Stanislav Fomichev) - mrp: introduce active flags to prevent UAF when applicant uninit (Schspa Shi) - md/raid1: stop mdx_raid1 thread when raid1 array run failed (Jiang Li) - drm/sti: Use drm_mode_copy() (Ville Syrjala) - s390/lcs: Fix return type of lcs_start_xmit() (Nathan Chancellor) - s390/netiucv: Fix return type of netiucv_tx() (Nathan Chancellor) - s390/ctcm: Fix return type of ctc{mp,}m_tx() (Nathan Chancellor) - igb: Do not free q_vector unless new one was allocated (Kees Cook) - wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() (Minsuk Kang) - hamradio: baycom_epp: Fix return type of baycom_send_packet() (Nathan Chancellor) - net: ethernet: ti: Fix return type of netcp_ndo_start_xmit() (Nathan Chancellor) - bpf: make sure skb->len != 0 when redirecting to a tunneling device (Stanislav Fomichev) - ipmi: fix memleak when unload ipmi driver (Zhang Yuchen) - ASoC: codecs: rt298: Add quirk for KBL-R RVP platform (Amadeusz Slawinski) - wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out (Shigeru Yoshida) - wifi: ath9k: verify the expected usb_endpoints are present (Fedor Pchelkin) - hfs: fix OOB Read in __hfs_brec_find (ZhangPeng) - acct: fix potential integer overflow in encode_comp_t() (Zheng Yejian) - nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset() (Ryusuke Konishi) - ACPICA: Fix error code path in acpi_ds_call_control_method() (Rafael J. Wysocki) - fs: jfs: fix shift-out-of-bounds in dbDiscardAG (Hoi Pok Wu) - udf: Avoid double brelse() in udf_rename() (Shigeru Yoshida) - fs: jfs: fix shift-out-of-bounds in dbAllocAG (Dongliang Mu) - binfmt_misc: fix shift-out-of-bounds in check_special_flags (Liu Shixin) - net: stream: purge sk_error_queue in sk_stream_kill_queues() (Eric Dumazet) - myri10ge: Fix an error handling path in myri10ge_probe() (Christophe JAILLET) - net_sched: reject TCF_EM_SIMPLE case for complex ematch module (Cong Wang) - skbuff: Account for tail adjustment during pull operations (Subash Abhinov Kasiviswanathan) - openvswitch: Fix flow lookup to use unmasked key (Eelco Chaudron) - r6040: Fix kmemleak in probe and remove (Li Zetao) - nfc: pn533: Clear nfc_target before being used (Minsuk Kang) - mISDN: hfcmulti: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - mISDN: hfcpci: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - mISDN: hfcsusb: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure (Dan Aloni) - rtc: st-lpc: Add missing clk_disable_unprepare in st_rtc_probe() (Gaosheng Cui) - selftests/powerpc: Fix resource leaks (Miaoqian Lin) - powerpc/hv-gpci: Fix hv_gpci event list (Kajol Jain) - powerpc/83xx/mpc832x_rdb: call platform_device_put() in error case in of_fsl_spi_probe() (Yang Yingliang) - powerpc/perf: callchain validate kernel stack pointer bounds (Nicholas Piggin) - powerpc/xive: add missing iounmap() in error path in xive_spapr_populate_irq_data() (Yang Yingliang) - cxl: Fix refcount leak in cxl_calc_capp_routing (Miaoqian Lin) - powerpc/52xx: Fix a resource leak in an error handling path (Christophe JAILLET) - macintosh/macio-adb: check the return value of ioremap() (Xie Shaowen) - macintosh: fix possible memory leak in macio_add_one_device() (Yang Yingliang) - iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() (Yuan Can) - iommu/amd: Fix pci device refcount leak in ppr_notifier() (Yang Yingliang) - rtc: snvs: Allow a time difference on clock register read (Stefan Eichenberger) - include/uapi/linux/swab: Fix potentially missing __always_inline (Matt Redfearn) - HSI: omap_ssi_core: Fix error handling in ssi_init() (Yuan Can) - power: supply: fix residue sysfs file in error handle route of __power_supply_register() (Zeng Heng) - HSI: omap_ssi_core: fix possible memory leak in ssi_probe() (Yang Yingliang) - HSI: omap_ssi_core: fix unbalanced pm_runtime_disable() (Yang Yingliang) - fbdev: uvesafb: Fixes an error handling path in uvesafb_probe() (Christophe JAILLET) - fbdev: vermilion: decrease reference count in error path (Xiongfeng Wang) - fbdev: via: Fix error in via_core_init() (Shang XiaoJing) - fbdev: pm2fb: fix missing pci_disable_device() (Yang Yingliang) - fbdev: ssd1307fb: Drop optional dependency (Andy Shevchenko) - usb: storage: Add check for kcalloc (Jiasheng Jiang) - i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Zheyu Ma) [Orabug: 34555528] {CVE-2022-2873} - vme: Fix error not catched in fake_init() (Chen Zhongjin) - staging: rtl8192e: Fix potential use-after-free in rtllib_rx_Monitor() (YueHaibing) - staging: rtl8192u: Fix use after free in ieee80211_rx() (Dan Carpenter) - i2c: pxa-pci: fix missing pci_disable_device() on error in ce4100_i2c_probe (Hui Tang) - chardev: fix error handling in cdev_device_add() (Yang Yingliang) - mcb: mcb-parse: fix error handing in chameleon_parse_gdd() (Yang Yingliang) - drivers: mcb: fix resource leak in mcb_probe() (Zhengchao Shao) - cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter() (Yang Yingliang) - cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter() (Yang Yingliang) - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os (Zheng Wang) - misc: tifm: fix possible memory leak in tifm_7xx1_switch_media() (ruanjinjie) - test_firmware: fix memory leak in test_firmware_init() (Zhengchao Shao) - serial: sunsab: Fix error handling in sunsab_init() (Yuan Can) - serial: pch: Fix PCI device refcount leak in pch_request_dma() (Xiongfeng Wang) - serial: amba-pl011: avoid SBSA UART accessing DMACR register (Jiamei Xie) - staging: vme_user: Fix possible UAF in tsi148_dma_list_add (Gaosheng Cui) - usb: fotg210-udc: Fix ages old endianness issues (Linus Walleij) - uio: uio_dmem_genirq: Fix deadlock between irq config and handling (Rafael Mendonca) - uio: uio_dmem_genirq: Fix missing unlock in irq configuration (Rafael Mendonca) - vfio: platform: Do not pass return buffer to ACPI _RST method (Rafael Mendonca) - class: fix possible memory leak in __class_register() (Yang Yingliang) - drivers: dio: fix possible memory leak in dio_init() (Yang Yingliang) - IB/IPoIB: Fix queue count inconsistency for PKEY child interfaces (Dragos Tatulea) - hwrng: geode - Fix PCI device refcount leak (Xiongfeng Wang) - hwrng: amd - Fix PCI device refcount leak (Xiongfeng Wang) - crypto: img-hash - Fix variable dereferenced before check 'hdev->req' (Gaosheng Cui) - orangefs: Fix sysfs not cleanup when dev init failed (Zhang Xiaoxu) - RDMA/hfi1: Fix error return code in parse_platform_config() (Wang Yufen) - scsi: snic: Fix possible UAF in snic_tgt_create() (Gaosheng Cui) - scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails (Chen Zhongjin) - scsi: ipr: Fix WARNING in ipr_init() (Shang XiaoJing) - scsi: fcoe: Fix possible name leak when device_register() fails (Yang Yingliang) - scsi: hpsa: Fix possible memory leak in hpsa_add_sas_device() (Yang Yingliang) - scsi: hpsa: Fix error handling in hpsa_add_sas_host() (Yang Yingliang) - RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create failed (Zhang Xiaoxu) - RDMA/hfi: Decrease PCI device reference count in error path (Xiongfeng Wang) - PCI: Check for alloc failure in pci_request_irq() (Zeng Heng) - apparmor: fix a memleak in multi_transaction_new() (Gaosheng Cui) - stmmac: fix potential division by 0 (Piergiorgio Beruto) - Bluetooth: RFCOMM: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - Bluetooth: hci_core: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - Bluetooth: hci_bcsp: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - Bluetooth: hci_h5: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - Bluetooth: hci_qca: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - Bluetooth: btusb: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - ntb_netdev: Use dev_kfree_skb_any() in interrupt context (Eric Pilmore) - net: lan9303: Fix read error execution path (Jerry Ray) - net: amd-xgbe: Check only the minimum speed for active/passive cables (Tom Lendacky) - net: amd: lance: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - hamradio: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - net: ethernet: dnet: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - net: emaclite: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - net: apple: bmac: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - net: apple: mace: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - net/tunnel: wait until all sk_user_data reader finish before releasing the sock (Hangbin Liu) - net: farsync: Fix kmemleak when rmmods farsync (Li Zetao) - ethernet: s2io: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init() (Yuan Can) - net: defxx: Fix missing err handling in dfx_init() (Yongqiang Liu) - net: vmw_vsock: vmci: Check memcpy_from_msg() (Artem Chernyshev) - blktrace: Fix output non-blktrace event when blk_classic option enabled (Yang Jihong) - wifi: brcmfmac: Fix error return code in brcmf_sdio_download_firmware() (Wang Yufen) - wifi: rtl8xxxu: Add __packed to struct rtl8723bu_c2h (Bitterblue Smith) - clk: samsung: Fix memory leak in _samsung_clk_register_pll() (Xiu Jianfeng) - media: coda: Add check for kmalloc (Jiasheng Jiang) - media: coda: Add check for dcoda_iram_alloc (Jiasheng Jiang) - media: c8sectpfe: Add of_node_put() when breaking out of loop (Liang He) - mmc: mmci: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: wbsd: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: via-sdmmc: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: wmt-sdmmc: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: vub300: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: toshsd: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: mxcmmc: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: moxart: fix return value check of mmc_add_host() (Yang Yingliang) - NFSv4.x: Fail client initialisation if state manager thread can't run (Trond Myklebust) - SUNRPC: Fix missing release socket in rpc_sockname() (Wang ShaoBo) - ALSA: mts64: fix possible null-ptr-defer in snd_mts64_interrupt (Gaosheng Cui) - media: saa7164: fix missing pci_disable_device() (Liu Shixin) - regulator: core: fix module refcount leak in set_supply() (Yang Yingliang) - bonding: uninitialized variable in bond_miimon_inspect() (Dan Carpenter) - ASoC: pcm512x: Fix PM disable depth imbalance in pcm512x_probe (Zhang Qilong) - drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios() (Xiongfeng Wang) - drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios() (Xiongfeng Wang) - ALSA: asihpi: fix missing pci_disable_device() (Liu Shixin) - NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn (Trond Myklebust) - NFSv4.2: Fix a memory stomp in decode_attr_security_label (Trond Myklebust) - media: s5p-mfc: Add variant data for MFC v7 hardware for Exynos 3250 SoC (Aakarsh Jain) - media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() (Baisong Zhong) - pinctrl: pinconf-generic: add missing of_node_put() (ZhangPeng) - media: imon: fix a race condition in send_packet() (Gautam Menghani) - mtd: maps: pxa2xx-flash: fix memory leak in probe (Zheng Yongjun) - clk: rockchip: Fix memory leak in rockchip_clk_register_pll() (Xiu Jianfeng) - ALSA: seq: fix undefined behavior in bit shift for SNDRV_SEQ_FILTER_USE_EVENT (Baisong Zhong) - HID: hid-sensor-custom: set fixed size for custom attributes (Marcus Folkesson) - media: platform: exynos4-is: Fix error handling in fimc_md_init() (Yuan Can) - media: solo6x10: fix possible memory leak in solo_sysfs_init() (Yang Yingliang) - Input: elants_i2c - properly handle the reset GPIO when power is off (Douglas Anderson) - mtd: lpddr2_nvm: Fix possible null-ptr-deref (Hui Tang) - wifi: ath10k: Fix return value in ath10k_pci_init() (Xiu Jianfeng) - ima: Fix misuse of dereference of pointer in template_desc_init_fields() (Xiu Jianfeng) - regulator: core: fix unbalanced of node refcount in regulator_dev_lookup() (Yang Yingliang) - ASoC: pxa: fix null-pointer dereference in filter() (Zeng Heng) - drm/radeon: Add the missed acpi_put_table() to fix memory leak (Hanjun Guo) - media: camss: Clean up received buffers on failed start of streaming (Vladimir Zapolskiy) - mtd: Fix device name leak when register device failed in add_mtd_device() (Zhang Xiaoxu) - media: vivid: fix compose size exceed boundary (Liu Shixin) - spi: Update reference to struct spi_controller (Jonathan Neuschafer) - media: i2c: ad5820: Fix error path (Ricardo Ribalda) - wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb() (Fedor Pchelkin) - wifi: ath9k: hif_usb: fix memory leak of urbs in ath9k_hif_usb_dealloc_tx_urbs() (Fedor Pchelkin) - rapidio: devices: fix missing put_device in mport_cdev_open (Cai Xinchen) - hfs: Fix OOB Write in hfs_asc2mac (ZhangPeng) - eventfd: change int to __u64 in eventfd_signal() ifndef CONFIG_EVENTFD (Zhang Qilong) - rapidio: fix possible UAF when kfifo_alloc() fails (Wang Weiyang) - fs: sysv: Fix sysv_nblocks() returns wrong value (Chen Zhongjin) - MIPS: BCM63xx: Add check for NULL for clk in clk_enable (Anastasia Belova) - platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]() (Yu Liao) - x86/xen: Fix memory leak in xen_init_lock_cpu() (Xiu Jianfeng) - uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix (Oleg Nesterov) - ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() (Li Zetao) - rapidio: rio: fix possible name leak in rio_register_mport() (Yang Yingliang) - rapidio: fix possible name leaks when rio_add_device() fails (Yang Yingliang) - lib/notifier-error-inject: fix error when writing -errno to debugfs file (Akinobu Mita) - libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value (Akinobu Mita) - irqchip: gic-pm: Use pm_runtime_resume_and_get() in gic_probe() (Shang XiaoJing) - PNP: fix name memory leak in pnp_alloc_dev() (Yang Yingliang) - MIPS: vpe-cmp: fix possible memory leak while module exiting (Yang Yingliang) - MIPS: vpe-mt: fix possible memory leak while module exiting (Yang Yingliang) - ocfs2: fix memory leak in ocfs2_stack_glue_init() (Shang XiaoJing) - timerqueue: Use rb_entry_safe() in timerqueue_getnext() (Barnabas Pocze) - perf: Fix possible memleak in pmu_dev_alloc() (Chen Zhongjin) - fs: don't audit the capability check in simple_xattr_list() (Ondrej Mosnacek) - PM: hibernate: Fix mistake in kerneldoc comment (xiongxin) - alpha: fix syscall entry in !AUDUT_SYSCALL case (Al Viro) - cpuidle: dt: Return the correct numbers of parsed idle states (Ulf Hansson) - tpm/tpm_crb: Fix error message in __crb_relinquish_locality() (Michael Kelley) - pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP (Stephen Boyd) - ARM: mmp: fix timer_read delay (Doug Brown) - pstore/ram: Fix error return code in ramoops_probe() (Wang Yufen) - ARM: dts: turris-omnia: Add switch port 6 node (Pali Rohar) - ARM: dts: turris-omnia: Add ethernet aliases (Pali Rohar) - ARM: dts: armada-39x: Fix assigned-addresses for every PCIe Root Port (Pali Rohar) - ARM: dts: armada-38x: Fix assigned-addresses for every PCIe Root Port (Pali Rohar) - ARM: dts: armada-375: Fix assigned-addresses for every PCIe Root Port (Pali Rohar) - ARM: dts: armada-xp: Fix assigned-addresses for every PCIe Root Port (Pali Rohar) - ARM: dts: armada-370: Fix assigned-addresses for every PCIe Root Port (Pali Rohar) - ARM: dts: dove: Fix assigned-addresses for every PCIe Root Port (Pali Rohar) - arm64: dts: mediatek: mt6797: Fix 26M oscillator unit name (AngeloGioacchino Del Regno) - soc: ti: smartreflex: Fix PM disable depth imbalance in omap_sr_probe (Zhang Qilong) - arm: dts: spear600: Fix clcd interrupt (Kory Maincent) - drivers: soc: ti: knav_qmss_queue: Mark knav_acc_firmwares as static (Chen Jiahao) - ARM: dts: qcom: apq8064: fix coresight compatible (Luca Weiss) - usb: musb: remove extra check in musb_gadget_vbus_draw (Ivaylo Dimitrov) - net: loopback: use NET_NAME_PREDICTABLE for name_assign_type (Rasmus Villemoes) - Bluetooth: L2CAP: Fix u8 overflow (Sungwoo Kim) [Orabug: 34880796] {CVE-2022-45934} - igb: Initialize mailbox message for VF reset (Tony Nguyen) - USB: serial: cp210x: add Kamstrup RF sniffer PIDs (Bruno Thomsen) - USB: serial: option: add Quectel EM05-G modem (Duke Xin) - usb: gadget: uvc: Prevent buffer overflow in setup handler (Szymon Heidrich) - udf: Fix extending file within last block (Jan Kara) - udf: Do not bother looking for prealloc extents if i_lenExtents matches i_size (Jan Kara) - udf: Fix preallocation discarding at indirect extent boundary (Jan Kara) - udf: Drop unused arguments of udf_delete_aext() (Jan Kara) - udf: Discard preallocation before extending file with a hole (Jan Kara) - perf script python: Remove explicit shebang from tests/attr.c (Tony Jones) - ASoC: ops: Correct bounds check for second channel on SX controls (Charles Keepax) - can: mcba_usb: Fix termination command argument (Yasushi SHOJI) - can: sja1000: fix size of OCR_MODE_MASK define (Heiko Schocher) - ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx() (Mark Brown) - nfp: fix use-after-free in area_cache_get() (Jialiang Wang) [Orabug: 34719740] {CVE-2022-3545} - block: unhash blkdev part inode when the part is deleted (Ming Lei) - mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths (Jann Horn) - mm/khugepaged: fix GUP-fast interaction by sending IPI (Jann Horn) - once: add DO_ONCE_SLOW() for sleepable contexts (Eric Dumazet) - libtraceevent: Fix build with binutils 2.35 (Ben Hutchings) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-41218 CVE-2022-47929 CVE-2022-45884 CVE-2022-45885 CVE-2022-3545 CVE-2022-45886 CVE-2023-0394 CVE-2023-23455 CVE-2022-2873 CVE-2022-45934 CVE-2022-45919 Oracle Linux 7 [4.14.35-2047.523.4.1] - mm: kvmalloc does not fallback to vmalloc for incompatible gfp flags (Michal Hocko) [Orabug: 35164196] [4.14.35-2047.523.4] - rds: ib: Keep IB MRs on clean_list unless we are tearing down the pool (Hakon Bugge) [Orabug: 34987235] - rds: ib: Add FRWR related statistics counters (Hakon Bugge) [Orabug: 34987235] - net/rds: The fast registration work queue is not destroyed (Ka-Cheong Poon) [Orabug: 25962452] [Orabug: 31712036] [4.14.35-2047.523.3] - driver/soc/pensando: cap_pcie: refactor pciep_regrd32 (David Clear) [Orabug: 35089515] - mtd: spi-nor: Add support for Winbond w25q02nw flash. (David Clear) [Orabug: 35089515] - drivers/i2c: Lattice I2C driver update (David Clear) [Orabug: 35089515] - drivers/soc/pensando: Adding Elba sbus driver (David Clear) [Orabug: 35089515] - Arm64: Pensando: Enable ltc2978 driver for Ortano ADI cards (Austin Sehnert) [Orabug: 35080511] - scsi: target: core: Remove from tmr_list during LUN unlink (Dmitry Bogdanov) [Orabug: 35040145] [4.14.35-2047.523.2] - RDMA/addr: Refresh neighbour entries upon rdma_resolve_addr() (Gerd Rausch) [Orabug: 35060577] - xfs: fix incorrect i_nlink caused by inode racing (Long Li) [Orabug: 35040849] [4.14.35-2047.523.1] - x86/kexec: Do not reserve EFI setup_data in the kexec e820 table (Dave Young) [Orabug: 34966703] - xfs: make COW fork unwritten extent conversions more robust (Christoph Hellwig) [Orabug: 34390903] - scsi: megaraid_sas: Target with invalid LUN ID is deleted during scan (Chandrakanth patil) [Orabug: 34242965] - scsi: megaraid_sas: Early detection of VD deletion through RaidMap update (Kashyap Desai) [Orabug: 34242965] - LTS version: v4.14.304 (Saeed Mirzamohammadi) - x86/fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN (YingChi Long) - gsmi: fix null-deref in gsmi_get_variable (Khazhismel Kumykov) - serial: atmel: fix incorrect baudrate setup (Tobias Schramm) - serial: pch_uart: Pass correct sg to dma_unmap_sg() (Ilpo Jarvinen) - usb-storage: apply IGNORE_UAS only for HIKSEMI MD202 on RTL9210 (Juhyung Park) - usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() (Maciej zenczykowski) - usb: gadget: g_webcam: Send color matching descriptor per frame (Daniel Scally) - usb: host: ehci-fsl: Fix module alias (Alexander Stein) - USB: serial: cp210x: add SCALANCE LPE-9000 device id (Michael Adler) - usb: core: hub: disable autosuspend for TI TUSB8041 (Flavio Suligoi) - USB: misc: iowarrior: fix up header size for USB_DEVICE_ID_CODEMERCS_IOW100 (Greg Kroah-Hartman) - USB: serial: option: add Quectel EM05CN modem (Duke Xin) - USB: serial: option: add Quectel EM05CN (SG) modem (Duke Xin) - USB: serial: option: add Quectel EC200U modem (Ali Mirghasemi) - USB: serial: option: add Quectel EM05-G (RS) modem (Duke Xin) - USB: serial: option: add Quectel EM05-G (CS) modem (Duke Xin) - USB: serial: option: add Quectel EM05-G (GR) modem (Duke Xin) - prlimit: do_prlimit needs to have a speculation check (Greg Kroah-Hartman) - usb: xhci: Check endpoint is valid before dereferencing it (Jimmy Hu) - xhci-pci: set the dma max_seg_size (Ricardo Ribalda) - nilfs2: fix general protection fault in nilfs_btree_insert() (Ryusuke Konishi) - f2fs: let's avoid panic if extent_tree is not created (Jaegeuk Kim) - RDMA/srp: Move large values to a new enum for gcc13 (Jiri Slaby (SUSE)) - net/ethtool/ioctl: return -EOPNOTSUPP if we have no phy stats (Daniil Tatianin) - pNFS/filelayout: Fix coalescing test for single DS (Olga Kornievskaia) - LTS version: v4.14.303 (Saeed Mirzamohammadi) - Revert 'usb: ulpi: defer ulpi_register on ulpi_read_id timeout' (Ferry Toth) - nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame() (Minsuk Kang) - hvc/xen: lock console list traversal (Roger Pau Monne) - regulator: da9211: Use irq handler when ready (Ricardo Ribalda) - EDAC/device: Fix period calculation in edac_device_reset_delay_period() (Eliav Farber) - x86/boot: Avoid using Intel mnemonics in AT&T syntax asm (Peter Zijlstra) - netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function. (Gavrilov Ilia) - ipv6: raw: Deduct extension header length in rawv6_push_pending_frames (Herbert Xu) [Orabug: 35005830] {CVE-2023-0394} - platform/x86: sony-laptop: Don't turn off 0x153 keyboard backlight during probe (Hans de Goede) - ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (Clement Lecigne) - net/ulp: prevent ULP without clone op from entering the LISTEN status (Paolo Abeni) - s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple() (Heiko Carstens) - perf auxtrace: Fix address filter duplicate symbol selection (Adrian Hunter) - docs: Fix the docs build with Sphinx 6.0 (Jonathan Corbet) - net: sched: disallow noqueue for qdisc classes (Frederick Lawler) [Orabug: 35005793] {CVE-2022-47929} - ravb: Fix 'failed to switch device to config mode' message during unbind (Biju Das) - driver core: Fix bus_type.match() error handling in __driver_attach() (Isaac J. Manjarres) - parisc: Align parisc MADV_XXX constants with all other architectures (Helge Deller) - hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling (Linus Torvalds) - hfs/hfsplus: use WARN_ON for sanity check (Arnd Bergmann) - nfsd: fix handling of readdir in v4root vs. mount upcall timeout (Jeff Layton) - x86/bugs: Flush IBP in ib_prctl_set() (Rodrigo Branco) - udf: Fix extension of the last extent in the file (Jan Kara) - caif: fix memory leak in cfctrl_linkup_request() (Zhengchao Shao) - usb: rndis_host: Secure rndis_query check against int overflow (Szymon Heidrich) - net: sched: atm: dont intepret cls results when asked to drop (Jamal Hadi Salim) [Orabug: 34983615] {CVE-2023-23455} - net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe (Miaoqian Lin) - net: amd-xgbe: add missed tasklet_kill (Jiguang Xiao) - nfc: Fix potential resource leaks (Miaoqian Lin) - qlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable() failure (Daniil Tatianin) - bpf: pull before calling skb_postpull_rcsum() (Jakub Kicinski) - SUNRPC: ensure the matching upcall is in-flight upon downcall (minoura makoto) - ext4: allocate extended attribute value in vmalloc area (Ye Bin) - ext4: avoid unaccounted block allocation when expanding inode (Jan Kara) - ext4: initialize quota before expanding inode in setproject ioctl (Jan Kara) - ext4: fix inode leak in ext4_xattr_inode_create() on an error path (Ye Bin) - ext4: avoid BUG_ON when creating xattrs (Jan Kara) - ext4: fix error code return to user-space in ext4_get_branch() (Luis Henriques) - ext4: init quota for 'old.inode' in 'ext4_rename' (Ye Bin) - ext4: fix bug_on in __es_tree_search caused by bad boot loader inode (Baokun Li) - ext4: fix undefined behavior in bit shift for ext4_check_flag_values (Gaosheng Cui) - ext4: add inode table check in __ext4_get_inode_loc to aovid possible infinite loop (Baokun Li) - drm/vmwgfx: Validate the box size for the snooped cursor (Zack Rusin) - drm/connector: send hotplug uevent on connector cleanup (Simon Ser) - device_cgroup: Roll back to original exceptions after copy failure (Wang Weiyang) - parisc: led: Fix potential null-ptr-deref in start_task() (Shang XiaoJing) - iommu/amd: Fix ivrs_acpihid cmdline parsing code (Kim Phillips) - crypto: n2 - add missing hash statesize (Corentin Labbe) - PCI/sysfs: Fix double free in error path (Sascha Hauer) - PCI: Fix pci_device_is_present() for VFs by checking PF (Michael S. Tsirkin) - ima: Fix a potential NULL pointer access in ima_restore_measurement_list (Huaxin Lu) - cifs: fix confusing debug message (Paulo Alcantara) - media: dvb-core: Fix UAF due to refcount races at releasing (Takashi Iwai) [Orabug: 34820630] {CVE-2022-41218} - media: dvb-core: Fix double free in dvb_register_device() (Keita Suzuki) - ARM: 9256/1: NWFPE: avoid compiler-generated __aeabi_uldivmod (Nick Desaulniers) - tracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_line (Yang Jihong) - x86/microcode/intel: Do not retry microcode reloading on the APs (Ashok Raj) - dm cache: set needs_check flag after aborting metadata (Mike Snitzer) - dm cache: Fix UAF in destroy() (Luo Meng) - dm thin: Fix UAF in run_timer_softirq() (Luo Meng) - dm thin: Use last transaction's pmd->root when commit failed (Zhihao Cheng) - dm cache: Fix ABBA deadlock between shrink_slab and dm_cache_metadata_abort (Mike Snitzer) - selftests: Use optional USERCFLAGS and USERLDFLAGS (Mickael Salaun) - ARM: ux500: do not directly dereference __iomem (Jason A. Donenfeld) - ktest.pl minconfig: Unset configs instead of just removing them (Steven Rostedt) - media: stv0288: use explicitly signed char (Jason A. Donenfeld) - tpm: tpm_tis: Add the missed acpi_put_table() to fix memory leak (Hanjun Guo) - tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak (Hanjun Guo) - mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING (Deren Wu) - md: fix a crash in mempool_free (Mikulas Patocka) - pnode: terminate at peers of source (Christian Brauner) - ALSA: line6: fix stack overflow in line6_midi_transmit (Artem Egorkine) - ALSA: line6: correct midi status byte when receiving data from podxt (Artem Egorkine) - hfsplus: fix bug causing custom uid and gid being unable to be assigned with mount (Aditya Garg) - HID: plantronics: Additional PIDs for double volume key presses quirk (Terry Junge) - powerpc/rtas: avoid scheduling in rtas_os_term() (Nathan Lynch) - powerpc/rtas: avoid device tree lookups in rtas_os_term() (Nathan Lynch) - media: dvbdev: fix refcnt bug (Lin Ma) [Orabug: 34983296] {CVE-2022-45886} {CVE-2022-45884} {CVE-2022-45919} {CVE-2022-45887} {CVE-2022-45885} - gcov: add support for checksum field (Rickard x Andersson) - iio: adc: ad_sigma_delta: do not use internal iio_dev lock (Nuno Sa) - reiserfs: Add missing calls to reiserfs_security_free() (Roberto Sassu) - HID: wacom: Ensure bootloader PID is usable in hidraw mode (Jason Gerecke) - usb: dwc3: core: defer probe on ulpi_read_id timeout (Ferry Toth) - pstore: Make sure CONFIG_PSTORE_PMSG selects CONFIG_RT_MUTEXES (John Stultz) - pstore: Switch pmsg_lock to an rt_mutex to avoid priority inversion (John Stultz) - ASoC: rt5670: Remove unbalanced pm_runtime_put() (Hans de Goede) - ASoC: rockchip: spdif: Add missing clk_disable_unprepare() in rk_spdif_runtime_resume() (Wang Jingjin) - ASoC: wm8994: Fix potential deadlock (Marek Szyprowski) - ASoC: rockchip: pdm: Add missing clk_disable_unprepare() in rockchip_pdm_runtime_resume() (Wang Jingjin) - ASoC: mediatek: mt8173-rt5650-rt5514: fix refcount leak in mt8173_rt5650_rt5514_dev_probe() (Wang Yufen) - orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string() (Zhang Xiaoxu) - drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid() (Nathan Chancellor) - drm/fsl-dcu: Fix return type of fsl_dcu_drm_connector_mode_valid() (Nathan Chancellor) - clk: st: Fix memory leak in st_of_quadfs_setup() (Xiu Jianfeng) - media: si470x: Fix use-after-free in si470x_int_in_callback() (Shigeru Yoshida) - mmc: f-sdh30: Add quirks for broken timeout clock capability (Kunihiko Hayashi) - blk-mq: fix possible memleak when register 'hctx' failed (Ye Bin) - media: dvb-usb: fix memory leak in dvb_usb_adapter_init() (Mazin Al Haddad) - media: dvbdev: adopts refcnt to avoid UAF (Lin Ma) [Orabug: 34983296] {CVE-2022-45887} {CVE-2022-45885} {CVE-2022-45884} {CVE-2022-45886} {CVE-2022-45919} - media: dvb-frontends: fix leak of memory fw (Yan Lei) - ppp: associate skb with a device at tx (Stanislav Fomichev) - mrp: introduce active flags to prevent UAF when applicant uninit (Schspa Shi) - md/raid1: stop mdx_raid1 thread when raid1 array run failed (Jiang Li) - drm/sti: Use drm_mode_copy() (Ville Syrjala) - s390/lcs: Fix return type of lcs_start_xmit() (Nathan Chancellor) - s390/netiucv: Fix return type of netiucv_tx() (Nathan Chancellor) - s390/ctcm: Fix return type of ctc{mp,}m_tx() (Nathan Chancellor) - igb: Do not free q_vector unless new one was allocated (Kees Cook) - wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() (Minsuk Kang) - hamradio: baycom_epp: Fix return type of baycom_send_packet() (Nathan Chancellor) - net: ethernet: ti: Fix return type of netcp_ndo_start_xmit() (Nathan Chancellor) - bpf: make sure skb->len != 0 when redirecting to a tunneling device (Stanislav Fomichev) - ipmi: fix memleak when unload ipmi driver (Zhang Yuchen) - ASoC: codecs: rt298: Add quirk for KBL-R RVP platform (Amadeusz Slawinski) - wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out (Shigeru Yoshida) - wifi: ath9k: verify the expected usb_endpoints are present (Fedor Pchelkin) - hfs: fix OOB Read in __hfs_brec_find (ZhangPeng) - acct: fix potential integer overflow in encode_comp_t() (Zheng Yejian) - nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset() (Ryusuke Konishi) - ACPICA: Fix error code path in acpi_ds_call_control_method() (Rafael J. Wysocki) - fs: jfs: fix shift-out-of-bounds in dbDiscardAG (Hoi Pok Wu) - udf: Avoid double brelse() in udf_rename() (Shigeru Yoshida) - fs: jfs: fix shift-out-of-bounds in dbAllocAG (Dongliang Mu) - binfmt_misc: fix shift-out-of-bounds in check_special_flags (Liu Shixin) - net: stream: purge sk_error_queue in sk_stream_kill_queues() (Eric Dumazet) - myri10ge: Fix an error handling path in myri10ge_probe() (Christophe JAILLET) - net_sched: reject TCF_EM_SIMPLE case for complex ematch module (Cong Wang) - skbuff: Account for tail adjustment during pull operations (Subash Abhinov Kasiviswanathan) - openvswitch: Fix flow lookup to use unmasked key (Eelco Chaudron) - r6040: Fix kmemleak in probe and remove (Li Zetao) - nfc: pn533: Clear nfc_target before being used (Minsuk Kang) - mISDN: hfcmulti: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - mISDN: hfcpci: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - mISDN: hfcsusb: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure (Dan Aloni) - rtc: st-lpc: Add missing clk_disable_unprepare in st_rtc_probe() (Gaosheng Cui) - selftests/powerpc: Fix resource leaks (Miaoqian Lin) - powerpc/hv-gpci: Fix hv_gpci event list (Kajol Jain) - powerpc/83xx/mpc832x_rdb: call platform_device_put() in error case in of_fsl_spi_probe() (Yang Yingliang) - powerpc/perf: callchain validate kernel stack pointer bounds (Nicholas Piggin) - powerpc/xive: add missing iounmap() in error path in xive_spapr_populate_irq_data() (Yang Yingliang) - cxl: Fix refcount leak in cxl_calc_capp_routing (Miaoqian Lin) - powerpc/52xx: Fix a resource leak in an error handling path (Christophe JAILLET) - macintosh/macio-adb: check the return value of ioremap() (Xie Shaowen) - macintosh: fix possible memory leak in macio_add_one_device() (Yang Yingliang) - iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() (Yuan Can) - iommu/amd: Fix pci device refcount leak in ppr_notifier() (Yang Yingliang) - rtc: snvs: Allow a time difference on clock register read (Stefan Eichenberger) - include/uapi/linux/swab: Fix potentially missing __always_inline (Matt Redfearn) - HSI: omap_ssi_core: Fix error handling in ssi_init() (Yuan Can) - power: supply: fix residue sysfs file in error handle route of __power_supply_register() (Zeng Heng) - HSI: omap_ssi_core: fix possible memory leak in ssi_probe() (Yang Yingliang) - HSI: omap_ssi_core: fix unbalanced pm_runtime_disable() (Yang Yingliang) - fbdev: uvesafb: Fixes an error handling path in uvesafb_probe() (Christophe JAILLET) - fbdev: vermilion: decrease reference count in error path (Xiongfeng Wang) - fbdev: via: Fix error in via_core_init() (Shang XiaoJing) - fbdev: pm2fb: fix missing pci_disable_device() (Yang Yingliang) - fbdev: ssd1307fb: Drop optional dependency (Andy Shevchenko) - usb: storage: Add check for kcalloc (Jiasheng Jiang) - i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Zheyu Ma) [Orabug: 34555528] {CVE-2022-2873} - vme: Fix error not catched in fake_init() (Chen Zhongjin) - staging: rtl8192e: Fix potential use-after-free in rtllib_rx_Monitor() (YueHaibing) - staging: rtl8192u: Fix use after free in ieee80211_rx() (Dan Carpenter) - i2c: pxa-pci: fix missing pci_disable_device() on error in ce4100_i2c_probe (Hui Tang) - chardev: fix error handling in cdev_device_add() (Yang Yingliang) - mcb: mcb-parse: fix error handing in chameleon_parse_gdd() (Yang Yingliang) - drivers: mcb: fix resource leak in mcb_probe() (Zhengchao Shao) - cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter() (Yang Yingliang) - cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter() (Yang Yingliang) - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os (Zheng Wang) - misc: tifm: fix possible memory leak in tifm_7xx1_switch_media() (ruanjinjie) - test_firmware: fix memory leak in test_firmware_init() (Zhengchao Shao) - serial: sunsab: Fix error handling in sunsab_init() (Yuan Can) - serial: pch: Fix PCI device refcount leak in pch_request_dma() (Xiongfeng Wang) - serial: amba-pl011: avoid SBSA UART accessing DMACR register (Jiamei Xie) - staging: vme_user: Fix possible UAF in tsi148_dma_list_add (Gaosheng Cui) - usb: fotg210-udc: Fix ages old endianness issues (Linus Walleij) - uio: uio_dmem_genirq: Fix deadlock between irq config and handling (Rafael Mendonca) - uio: uio_dmem_genirq: Fix missing unlock in irq configuration (Rafael Mendonca) - vfio: platform: Do not pass return buffer to ACPI _RST method (Rafael Mendonca) - class: fix possible memory leak in __class_register() (Yang Yingliang) - drivers: dio: fix possible memory leak in dio_init() (Yang Yingliang) - IB/IPoIB: Fix queue count inconsistency for PKEY child interfaces (Dragos Tatulea) - hwrng: geode - Fix PCI device refcount leak (Xiongfeng Wang) - hwrng: amd - Fix PCI device refcount leak (Xiongfeng Wang) - crypto: img-hash - Fix variable dereferenced before check 'hdev->req' (Gaosheng Cui) - orangefs: Fix sysfs not cleanup when dev init failed (Zhang Xiaoxu) - RDMA/hfi1: Fix error return code in parse_platform_config() (Wang Yufen) - scsi: snic: Fix possible UAF in snic_tgt_create() (Gaosheng Cui) - scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails (Chen Zhongjin) - scsi: ipr: Fix WARNING in ipr_init() (Shang XiaoJing) - scsi: fcoe: Fix possible name leak when device_register() fails (Yang Yingliang) - scsi: hpsa: Fix possible memory leak in hpsa_add_sas_device() (Yang Yingliang) - scsi: hpsa: Fix error handling in hpsa_add_sas_host() (Yang Yingliang) - RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create failed (Zhang Xiaoxu) - RDMA/hfi: Decrease PCI device reference count in error path (Xiongfeng Wang) - PCI: Check for alloc failure in pci_request_irq() (Zeng Heng) - apparmor: fix a memleak in multi_transaction_new() (Gaosheng Cui) - stmmac: fix potential division by 0 (Piergiorgio Beruto) - Bluetooth: RFCOMM: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - Bluetooth: hci_core: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - Bluetooth: hci_bcsp: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - Bluetooth: hci_h5: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - Bluetooth: hci_qca: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - Bluetooth: btusb: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - ntb_netdev: Use dev_kfree_skb_any() in interrupt context (Eric Pilmore) - net: lan9303: Fix read error execution path (Jerry Ray) - net: amd-xgbe: Check only the minimum speed for active/passive cables (Tom Lendacky) - net: amd: lance: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - hamradio: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - net: ethernet: dnet: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - net: emaclite: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - net: apple: bmac: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - net: apple: mace: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - net/tunnel: wait until all sk_user_data reader finish before releasing the sock (Hangbin Liu) - net: farsync: Fix kmemleak when rmmods farsync (Li Zetao) - ethernet: s2io: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init() (Yuan Can) - net: defxx: Fix missing err handling in dfx_init() (Yongqiang Liu) - net: vmw_vsock: vmci: Check memcpy_from_msg() (Artem Chernyshev) - blktrace: Fix output non-blktrace event when blk_classic option enabled (Yang Jihong) - wifi: brcmfmac: Fix error return code in brcmf_sdio_download_firmware() (Wang Yufen) - wifi: rtl8xxxu: Add __packed to struct rtl8723bu_c2h (Bitterblue Smith) - clk: samsung: Fix memory leak in _samsung_clk_register_pll() (Xiu Jianfeng) - media: coda: Add check for kmalloc (Jiasheng Jiang) - media: coda: Add check for dcoda_iram_alloc (Jiasheng Jiang) - media: c8sectpfe: Add of_node_put() when breaking out of loop (Liang He) - mmc: mmci: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: wbsd: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: via-sdmmc: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: wmt-sdmmc: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: vub300: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: toshsd: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: mxcmmc: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: moxart: fix return value check of mmc_add_host() (Yang Yingliang) - NFSv4.x: Fail client initialisation if state manager thread can't run (Trond Myklebust) - SUNRPC: Fix missing release socket in rpc_sockname() (Wang ShaoBo) - ALSA: mts64: fix possible null-ptr-defer in snd_mts64_interrupt (Gaosheng Cui) - media: saa7164: fix missing pci_disable_device() (Liu Shixin) - regulator: core: fix module refcount leak in set_supply() (Yang Yingliang) - bonding: uninitialized variable in bond_miimon_inspect() (Dan Carpenter) - ASoC: pcm512x: Fix PM disable depth imbalance in pcm512x_probe (Zhang Qilong) - drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios() (Xiongfeng Wang) - drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios() (Xiongfeng Wang) - ALSA: asihpi: fix missing pci_disable_device() (Liu Shixin) - NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn (Trond Myklebust) - NFSv4.2: Fix a memory stomp in decode_attr_security_label (Trond Myklebust) - media: s5p-mfc: Add variant data for MFC v7 hardware for Exynos 3250 SoC (Aakarsh Jain) - media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() (Baisong Zhong) - pinctrl: pinconf-generic: add missing of_node_put() (ZhangPeng) - media: imon: fix a race condition in send_packet() (Gautam Menghani) - mtd: maps: pxa2xx-flash: fix memory leak in probe (Zheng Yongjun) - clk: rockchip: Fix memory leak in rockchip_clk_register_pll() (Xiu Jianfeng) - ALSA: seq: fix undefined behavior in bit shift for SNDRV_SEQ_FILTER_USE_EVENT (Baisong Zhong) - HID: hid-sensor-custom: set fixed size for custom attributes (Marcus Folkesson) - media: platform: exynos4-is: Fix error handling in fimc_md_init() (Yuan Can) - media: solo6x10: fix possible memory leak in solo_sysfs_init() (Yang Yingliang) - Input: elants_i2c - properly handle the reset GPIO when power is off (Douglas Anderson) - mtd: lpddr2_nvm: Fix possible null-ptr-deref (Hui Tang) - wifi: ath10k: Fix return value in ath10k_pci_init() (Xiu Jianfeng) - ima: Fix misuse of dereference of pointer in template_desc_init_fields() (Xiu Jianfeng) - regulator: core: fix unbalanced of node refcount in regulator_dev_lookup() (Yang Yingliang) - ASoC: pxa: fix null-pointer dereference in filter() (Zeng Heng) - drm/radeon: Add the missed acpi_put_table() to fix memory leak (Hanjun Guo) - media: camss: Clean up received buffers on failed start of streaming (Vladimir Zapolskiy) - mtd: Fix device name leak when register device failed in add_mtd_device() (Zhang Xiaoxu) - media: vivid: fix compose size exceed boundary (Liu Shixin) - spi: Update reference to struct spi_controller (Jonathan Neuschafer) - media: i2c: ad5820: Fix error path (Ricardo Ribalda) - wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb() (Fedor Pchelkin) - wifi: ath9k: hif_usb: fix memory leak of urbs in ath9k_hif_usb_dealloc_tx_urbs() (Fedor Pchelkin) - rapidio: devices: fix missing put_device in mport_cdev_open (Cai Xinchen) - hfs: Fix OOB Write in hfs_asc2mac (ZhangPeng) - eventfd: change int to __u64 in eventfd_signal() ifndef CONFIG_EVENTFD (Zhang Qilong) - rapidio: fix possible UAF when kfifo_alloc() fails (Wang Weiyang) - fs: sysv: Fix sysv_nblocks() returns wrong value (Chen Zhongjin) - MIPS: BCM63xx: Add check for NULL for clk in clk_enable (Anastasia Belova) - platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]() (Yu Liao) - x86/xen: Fix memory leak in xen_init_lock_cpu() (Xiu Jianfeng) - uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix (Oleg Nesterov) - ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() (Li Zetao) - rapidio: rio: fix possible name leak in rio_register_mport() (Yang Yingliang) - rapidio: fix possible name leaks when rio_add_device() fails (Yang Yingliang) - lib/notifier-error-inject: fix error when writing -errno to debugfs file (Akinobu Mita) - libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value (Akinobu Mita) - irqchip: gic-pm: Use pm_runtime_resume_and_get() in gic_probe() (Shang XiaoJing) - PNP: fix name memory leak in pnp_alloc_dev() (Yang Yingliang) - MIPS: vpe-cmp: fix possible memory leak while module exiting (Yang Yingliang) - MIPS: vpe-mt: fix possible memory leak while module exiting (Yang Yingliang) - ocfs2: fix memory leak in ocfs2_stack_glue_init() (Shang XiaoJing) - timerqueue: Use rb_entry_safe() in timerqueue_getnext() (Barnabas Pocze) - perf: Fix possible memleak in pmu_dev_alloc() (Chen Zhongjin) - fs: don't audit the capability check in simple_xattr_list() (Ondrej Mosnacek) - PM: hibernate: Fix mistake in kerneldoc comment (xiongxin) - alpha: fix syscall entry in !AUDUT_SYSCALL case (Al Viro) - cpuidle: dt: Return the correct numbers of parsed idle states (Ulf Hansson) - tpm/tpm_crb: Fix error message in __crb_relinquish_locality() (Michael Kelley) - pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP (Stephen Boyd) - ARM: mmp: fix timer_read delay (Doug Brown) - pstore/ram: Fix error return code in ramoops_probe() (Wang Yufen) - ARM: dts: turris-omnia: Add switch port 6 node (Pali Rohar) - ARM: dts: turris-omnia: Add ethernet aliases (Pali Rohar) - ARM: dts: armada-39x: Fix assigned-addresses for every PCIe Root Port (Pali Rohar) - ARM: dts: armada-38x: Fix assigned-addresses for every PCIe Root Port (Pali Rohar) - ARM: dts: armada-375: Fix assigned-addresses for every PCIe Root Port (Pali Rohar) - ARM: dts: armada-xp: Fix assigned-addresses for every PCIe Root Port (Pali Rohar) - ARM: dts: armada-370: Fix assigned-addresses for every PCIe Root Port (Pali Rohar) - ARM: dts: dove: Fix assigned-addresses for every PCIe Root Port (Pali Rohar) - arm64: dts: mediatek: mt6797: Fix 26M oscillator unit name (AngeloGioacchino Del Regno) - soc: ti: smartreflex: Fix PM disable depth imbalance in omap_sr_probe (Zhang Qilong) - arm: dts: spear600: Fix clcd interrupt (Kory Maincent) - drivers: soc: ti: knav_qmss_queue: Mark knav_acc_firmwares as static (Chen Jiahao) - ARM: dts: qcom: apq8064: fix coresight compatible (Luca Weiss) - usb: musb: remove extra check in musb_gadget_vbus_draw (Ivaylo Dimitrov) - net: loopback: use NET_NAME_PREDICTABLE for name_assign_type (Rasmus Villemoes) - Bluetooth: L2CAP: Fix u8 overflow (Sungwoo Kim) [Orabug: 34880796] {CVE-2022-45934} - igb: Initialize mailbox message for VF reset (Tony Nguyen) - USB: serial: cp210x: add Kamstrup RF sniffer PIDs (Bruno Thomsen) - USB: serial: option: add Quectel EM05-G modem (Duke Xin) - usb: gadget: uvc: Prevent buffer overflow in setup handler (Szymon Heidrich) - udf: Fix extending file within last block (Jan Kara) - udf: Do not bother looking for prealloc extents if i_lenExtents matches i_size (Jan Kara) - udf: Fix preallocation discarding at indirect extent boundary (Jan Kara) - udf: Drop unused arguments of udf_delete_aext() (Jan Kara) - udf: Discard preallocation before extending file with a hole (Jan Kara) - perf script python: Remove explicit shebang from tests/attr.c (Tony Jones) - ASoC: ops: Correct bounds check for second channel on SX controls (Charles Keepax) - can: mcba_usb: Fix termination command argument (Yasushi SHOJI) - can: sja1000: fix size of OCR_MODE_MASK define (Heiko Schocher) - ASoC: ops: Check bounds for second channel in snd_soc_put_volsw_sx() (Mark Brown) - nfp: fix use-after-free in area_cache_get() (Jialiang Wang) [Orabug: 34719740] {CVE-2022-3545} - block: unhash blkdev part inode when the part is deleted (Ming Lei) - mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths (Jann Horn) - mm/khugepaged: fix GUP-fast interaction by sending IPI (Jann Horn) - once: add DO_ONCE_SLOW() for sleepable contexts (Eric Dumazet) - libtraceevent: Fix build with binutils 2.35 (Ben Hutchings) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-41218 CVE-2022-45885 CVE-2022-45934 CVE-2022-2873 CVE-2022-45886 CVE-2022-45884 CVE-2022-47929 CVE-2023-0394 CVE-2023-23455 CVE-2022-3545 CVE-2022-45919 Oracle Linux 7 [1.0.2k-26_fips] - Change Epoch from 1 to 10 - Fix DH self-test to add shared secret comparison [Orabug: 32467026] - Add DH support changes for SP 800-56A rev3 requirements [Orabug: 32467059] - Add TLS KDF self-test [Orabug: 32467193] - Add EC keys pairwise consistency test [Orabug: 32467059] [1:1.0.2k-26] - Fixes CVE-2023-0286 X.400 address type confusion in X.509 GeneralName - Resolves: rhbz#2176790 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-0286 Oracle Linux 7 Oracle Linux 8 [5.4.17-2136.317.5.3] - udf: Fix file corruption when appending just after end of preallocated extent (Jan Kara) [Orabug: 35192150] - selftests/ftrace: Fix bash specific '==' operator (Masami Hiramatsu (Google)) [Orabug: 35192150] - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Felix Riemann) [Orabug: 35192150] - net: openvswitch: fix flow memory leak in ovs_flow_cmd_new (Fedor Pchelkin) [Orabug: 35192150] - IB/IPoIB: Fix legacy IPoIB due to wrong number of queues (Dragos Tatulea) [Orabug: 35182639] [5.4.17-2136.317.5.2] - Revert 'mm: Always release pages to the buddy allocator in memblock_free_late().' (Aaron Thompson) [Orabug: 35177466] [5.4.17-2136.317.5.1] - uek-rpm: Add opbmc to nano rpm (Somasundaram Krishnasamy) [Orabug: 35156131] - uek-rpm: Add missing dax_pmem_compat.ko to nano rpm (Somasundaram Krishnasamy) [Orabug: 35152396] - iommu/amd: Increase kdump command sync timeout to 2secs (Joao Martins) [Orabug: 35156821] [5.4.17-2136.317.5] - soc: Only try to build Marvell SOC code on aarch64 (Dave Kleikamp) [Orabug: 35079654] - octeontx2-pf: Don't allocate BPIDs to LBK interface (Geetha sowjanya) [Orabug: 35079654] - PCI: add misc character device for BAR4 mem access (Satananda Burla) [Orabug: 35079654] - octeontx2-bphy-netdev: Fix rfoe ptp clock cleanup (Baha Mesleh) [Orabug: 35079654] - octeontx2-dpi: configure writing DMA result to an offset of the event (Sibaranjan Pattnayak) [Orabug: 35079654] - drivers: firmware: octeontx2: 9X platform support for memtest (Piyush Malgujar) [Orabug: 35079654] - octeontx2-af: Fix devlink unregister (Ratheesh Kannoth) [Orabug: 35079654] - driver: edac: octeontx: Check SoC version (Vasyl Gomonovych) [Orabug: 35079654] - PCI: marvell-cnxk-ep: Change BAR4 memory allocation (Radha Mohan Chintakuntla) [Orabug: 35079654] - octeontx2-af: SMQ flush needs scheduling config present (Nithin Dabilpuram) [Orabug: 35079654] - octeontx2-af: add ctx ilen to cpt lf alloc mailbox (Srujana Challa) [Orabug: 35079654] - octeontx2: crypto: fix microcode version string print (Srujana Challa) [Orabug: 35079654] - crypto: octeontx2: add ctx_val workaround (Srujana Challa) [Orabug: 35079654] - crypto: octeontx2: fix rsa verify (Srujana Challa) [Orabug: 35079654] - crypto: octeontx2: fix dma unmap issue with ahash (Srujana Challa) [Orabug: 35079654] - driver: edac: octeontx: Use MC handle instead raw handle (Vasyl Gomonovych) [Orabug: 35079654] - octeontx2-pf: Fix potential memory leak in otx2_init_tc() (Ziyang Xuan) [Orabug: 35079654] - octeontx2-pf: Detach LF resources on probe cleanup (Bharat Bhushan) [Orabug: 35079654] - octeontx2-af: Fix issue with IPv6 ext match for RSS (Kiran Kumar K) [Orabug: 35079654] - drivers: octeontx2-pcicons: cleanup console de-initialization (Rick Farrington) [Orabug: 35079654] - drivers: firmware: octeontx2: Add additional length variable (Piyush Malgujar) [Orabug: 35079654] - octeontx2-af: cn10k: mcs: Fix a resource leak in the probe and remove functions (Christophe JAILLET) [Orabug: 35079654] - drivers: marvell: otx2-sdei-ghes: Unify bert records layout (Vasyl Gomonovych) [Orabug: 35079654] - octeontx2-af: Add mbox to alloc/free BPIDs (Geetha sowjanya) [Orabug: 35079654] - octeontx2-af: Dynamically allocate bpids for CPT and LBK (Geetha sowjanya) [Orabug: 35079654] - driver: edac: octeontx: Align records layout with firmware (Vasyl Gomonovych) [Orabug: 35079654] - octeontx2-af: cn10k: mcs: Fix copy and paste bug in mcs_bbe_intr_handler() (Dan Carpenter) [Orabug: 35079654] - octeontx2-af: mcs: Config parser to skip 8B header (Geetha sowjanya) [Orabug: 35079654] - octeontx2-bphy-netdev: Fix issue of using incorrect netdev priv (Naveen Mamindlapalli) [Orabug: 35079654] - PCI: fix typo in Makefile for Marvell CNXK EP driver (Radha Mohan Chintakuntla) [Orabug: 35079654] - PCI: rename octeontx2-pem-ep driver (Radha Mohan Chintakuntla) [Orabug: 35079654] - octeontx2-sdp: remove firwmare ready status set (Satananda Burla) [Orabug: 35079654] - octeontx2-bphy-netdev: fix link carrier state update for cnf10k (Baha Mesleh) [Orabug: 35079654] - drivers: soc: sw_up: Erase data config during clone operation (Witold Sadowski) [Orabug: 35079654] - drivers: soc: sw_up: Allow to skip clone check (Witold Sadowski) [Orabug: 35079654] - drivers:spi:cadence-xspi: Verify clock before operation (Witold Sadowski) [Orabug: 35079654] - fwlog: fix invalid pointers and copy size in wraparound case (Aaro Koskinen) [Orabug: 35079654] - octeontx2-af: update CPT inbound inline IPsec mailbox (Srujana Challa) [Orabug: 35079654] - octeontx2-af: Add devlink option to adjust mcam high prio zone entries (Naveen Mamindlapalli) [Orabug: 35079654] - octeontx2-af: fix arguments passed to XAQ aura deinit (Shijith Thotton) [Orabug: 35079654] - crypto: octeontx2: sync with upstream kernel (Srujana Challa) [Orabug: 35079654] - crypto: drivers - move from strlcpy with unused retval to strscpy (Wolfram Sang) [Orabug: 35079654] - crypto: octeontx2 - prevent underflow in get_cores_bmap() (Dan Carpenter) [Orabug: 35079654] - crypto: octeontx2 - use swap() to make code cleaner (chiminghao) [Orabug: 35079654] - crypto: octeontx2 - Use swap() instead of swap_engines() (Jiapeng Chong) [Orabug: 35079654] - crypto: octeontx2 - simplify the return expression of otx2_cpt_aead_cbc_aes_sha_setkey() (Minghao Chi) [Orabug: 35079654] - crypto: octeontx2 - Remove the unneeded result variable (ye xingchen) [Orabug: 35079654] - crypto: octeontx2 - out of bounds access in otx2_cpt_dl_custom_egrp_delete() (Dan Carpenter) [Orabug: 35079654] - crypto: octeontx2 - Avoid stack variable overflow (Kees Cook) [Orabug: 35079654] - crypto: octeontx2 - fix missing unlock (Yang Yingliang) [Orabug: 35079654] - crypto: octeontx2: add support for ECDH (Srujana Challa) [Orabug: 35079654] - crypto: ecc - expose ecc curves (Meng Yu) [Orabug: 35079654] - octeontx2-af: Fixed variable set but not used warnings (Sunil Goutham) [Orabug: 35079654] - octeontx2-af: cn10k: mcs: Fix error return code in mcs_register_interrupts() (Yang Yingliang) [Orabug: 35079654] - octeontx2-af: mcs: Backport cosmetic changes (Geetha sowjanya) [Orabug: 35079654] - octeontx2-af: Add support for SPI to SA index translation (Kiran Kumar K) [Orabug: 35079654] - crypto: octeontx2: add support for rsa sign and verify (Srujana Challa) [Orabug: 35079654] - drivers: spi: cadence-xspi: Change register mappings (Witold Sadowski) [Orabug: 35079654] - octeontx2-pf: ptp: Skip checksum calculation for IEEE 802.3 packets (Geetha sowjanya) [Orabug: 35079654] - octeontx2-af: Removed unnecessary debug messages. (Sunil Goutham) [Orabug: 35079654] - octeontx2-bphy-netdev: update ethtool drop stats when mbt erros are set (Naveen Mamindlapalli) [Orabug: 35079654] - octeontx2-bphy-netdev: debugfs: Added FEC stats in debugfs. (Rakesh Babu Saladi) [Orabug: 35079654] - octeontx2-bphy-netdev: cnf10k: update ethtool drop stats (Naveen Mamindlapalli) [Orabug: 35079654] - octeontx2-bphy-netdev: Add new secondary BCN offset for slave (Rakesh Babu Saladi) [Orabug: 35079654] - octeontx2-bphy-netdev: cnf10k: enable skb list processing for delay_request. (Rakesh Babu Saladi) [Orabug: 35079654] - octeontx2-bphy-netdev: Add new fields in ethtool stats (Rakesh Babu Saladi) [Orabug: 35079654] - octeontx2-bphy-netdev: Set external_clock_rate for all RFOE interfaces. (Rakesh Babu Saladi) [Orabug: 35079654] - octeontx2-af: remove TL2 and TL3 queues for SDP interface (Radha Mohan Chintakuntla) [Orabug: 35079654] - doc: sdhci-cadence: Update sd6 controller parameters (Jayanthi Annadurai) [Orabug: 35079654] - drivers: sdhci-cadence: Fix HS200 default tuning. (Jayanthi Annadurai) [Orabug: 35079654] - drivers: sdhci: Add option to configure sdhci timeout (Jayanthi Annadurai) [Orabug: 35079654] - octeontx2-pf: tc flower offload mutually exclusive with ntuple (Hariprasad Kelam) [Orabug: 35079654] - driver: mmc: sdhci: Fix parameter passed for reading phy register (Chandrakala Chavva) [Orabug: 35079654] - octeontx2-af: Move QMEM allocations from GFP_KERNEL to ATOMIC (Sunil Goutham) [Orabug: 35079654] - drivers: sdhci: Remove sdhci cadence workaround (Jayanthi Annadurai) [Orabug: 35079654] - octeontx2-bphy-netdev:cnf10k: Share RFOE PTP offset with host (Roy Franz) [Orabug: 35079654] - octeontx2-af: Move ICMP ltype to end of enum (Kiran Kumar K) [Orabug: 35079654] - octeontx2-af: Add NPC support to filter packet based on IP fragment (Suman Ghosh) [Orabug: 35079654] - octeontx2-af: Add DMAC and LXMB feature check before adding ucast, bcast and mcast rules. (Suman Ghosh) [Orabug: 35079654] - drivers: i2c: octeon: Avoid potential infinite loop (Piyush Malgujar) [Orabug: 35079654] - drivers: spi: octeontx2: Add support to read bus width from ACPI table for T9x Platforms (Piyush Malgujar) [Orabug: 35079654] - drivers: pci-octeon-pem: Rectify resetting PEM (Ray Asbury) [Orabug: 35079654] - octeontx2-bphy-netdev: cnf10k: Avoid ptp skb list processing in 1-step mode (Naveen Mamindlapalli) [Orabug: 35079654] - octeontx2-bphy-netdev: cnf10k: update drop stats when psw errors are set (Naveen Mamindlapalli) [Orabug: 35079654] - octeontx2-bphy-netdev: cnf10k: check psm queue space for ptp queue (Naveen Mamindlapalli) [Orabug: 35079654] - octeontx2-bphy-netdev: cnf10k: Use atomic update feature to update PTP clock (Naveen Mamindlapalli) [Orabug: 35079654] - octeontx2-af: Reset transmit scheduler queue config (Hariprasad Kelam) [Orabug: 35079654] - drivers: soc: fwlog: fix mapped size (Pragnesh Patel) [Orabug: 35079654] - octeontx2-bphy-netdev: cnf10k: Enable force_cond_clk_en bit (Rakesh Babu Saladi) [Orabug: 35079654] - octeontx2-bphy-netdev: cnf10k: Recalculate UDP checksum. (Rakesh Babu Saladi) [Orabug: 35079654] - octeontx2-pf: Recalculate UDP checksum for 1-step ptp packets (Geetha sowjanya) [Orabug: 35079654] - drivers: spi: Add arbitration support for Cadence SPI (Witold Sadowski) [Orabug: 35079654] - crypto: octeontx2: add support for gcm(aes) (Srujana Challa) [Orabug: 35079654] - crypto: octeontx2: add support for akcipher rsa (Srujana Challa) [Orabug: 35079654] - crypto: octeontx2: add support for hash algorithms (Srujana Challa) [Orabug: 35079654] - drivers: spi: octeontx2: ACPI support for SPI driver (Piyush Malgujar) [Orabug: 35079654] - octeontx2-bphy-netdev: Fix updating rx byte stats (Naveen Mamindlapalli) [Orabug: 35079654] - octeontx2-bphy-netdev: debugfs: new entry to dump RPM stats (Rakesh Babu Saladi) [Orabug: 35079654] - octeontx2-bphy-netdev: debugfs: new entry to dump timestamp ring (Rakesh Babu Saladi) [Orabug: 35079654] - octeontx2-bphy-netdev: debugfs: new entry to dump jdt ring (Rakesh Babu Saladi) [Orabug: 35079654] - octeontx2-bphy-netdev: debugfs: Add new debugfs root entry (Rakesh Babu Saladi) [Orabug: 35079654] - driver: edac: octeontx: Add MDC error injection interface (Vasyl Gomonovych) [Orabug: 35079654] - soc: marvell: hw_access: add mapping for mcs registers (Ankur Dwivedi) [Orabug: 35079654] - octeontx2-af: Move EOH pointer on unknown ethertype (Kiran Kumar K) [Orabug: 35079654] - octeontx2-af: Fixes static warnings (Ratheesh Kannoth) [Orabug: 35079654] - octeontx2-af: returning uninitialized variable (Sebin Sebastian) [Orabug: 35079654] - octeontx2-af: Remove duplicate include (Jiapeng Chong) [Orabug: 35079654] - octeontx2-af: Enable Exact match flag in kex profile (Ratheesh Kannoth) [Orabug: 35079654] - octeontx2-pf: Add support for exact match table. (Ratheesh Kannoth) [Orabug: 35079654] - octeontx2-af: Invoke exact match functions (Ratheesh Kannoth) [Orabug: 35079654] - octeontx2-af: Wrapper functions for MAC addr add/del/update/reset (Ratheesh Kannoth) [Orabug: 35079654] - octeontx2: Modify mbox req and resp structures (Ratheesh Kannoth) [Orabug: 35079654] - octeontx2-af: Debugsfs support for exact match. (Ratheesh Kannoth) [Orabug: 35079654] - octeontx2-af: Drop rules for NPC MCAM (Ratheesh Kannoth) [Orabug: 35079654] - octeontx2-af: FLR handler for exact match table. (Ratheesh Kannoth) [Orabug: 35079654] - octeontx2-af: devlink configuration support (Ratheesh Kannoth) [Orabug: 35079654] - octeontx2-af: Exact match scan from kex profile (Ratheesh Kannoth) [Orabug: 35079654] - octeontx2-af: Exact match support (Ratheesh Kannoth) [Orabug: 35079654] - octeontx2-af: Use hashed field in MCAM key (Suman Ghosh) [Orabug: 35079654] - Update README with UEK Text Description (Somasundaram Krishnasamy) [Orabug: 35084842] - uek-rpm: Remove unessential modules from nano rpm (Somasundaram Krishnasamy) [Orabug: 34761532] - scsi: target: core: Remove from tmr_list during LUN unlink (Dmitry Bogdanov) [Orabug: 35040142] - x86/speculation: IBRS can be disabled on task switch (Alexandre Chartre) [Orabug: 35032419] - x86/bugs: IBRS and SBBD are disabled after cpu goes idle (Alexandre Chartre) [Orabug: 35032419] - x86/bugs: Remove extra SPEC_CTRL MSR write (Alexandre Chartre) [Orabug: 35032419] - perf/x86/uncore: Don't WARN_ON_ONCE() for a broken discovery table (Kan Liang) [Orabug: 34561741] - perf/x86/uncore: Add a quirk for UPI on SPR (Kan Liang) [Orabug: 34561741] - perf/x86/uncore: Ignore broken units in discovery table (Kan Liang) [Orabug: 34561741] - perf/x86/uncore: Fix potential NULL pointer in uncore_get_alias_name (Kan Liang) [Orabug: 34561741] - perf/x86/uncore: Factor out uncore_device_to_die() (Kan Liang) [Orabug: 34561741] - perf/x86/intel/uncore: Enable UPI topology discovery for Sapphire Rapids (Alexander Antonov) [Orabug: 34561741] - perf/x86/intel/uncore: Enable UPI topology discovery for Icelake Server (Alexander Antonov) [Orabug: 34561741] - perf/x86/intel/uncore: Get UPI NodeID and GroupID (Alexander Antonov) [Orabug: 34561741] - perf/x86/intel/uncore: Enable UPI topology discovery for Skylake Server (Alexander Antonov) [Orabug: 34561741] - perf/x86/intel/uncore: Generalize get_topology() for SKX PMUs (Alexander Antonov) [Orabug: 34561741] - perf/x86/intel/uncore: Introduce UPI topology type (Alexander Antonov) [Orabug: 34561741] - perf/x86/intel/uncore: Generalize IIO topology support (Alexander Antonov) [Orabug: 34561741] - perf/x86/intel/uncore: Fix Intel SPR M3UPI event constraints (Kan Liang) [Orabug: 34561741] - perf/x86/intel/uncore: Fix IIO cleanup mapping procedure for SNR/ICX (Alexander Antonov) [Orabug: 34561741] - perf/x86/intel/uncore: Support IMC free-running counters on Sapphire Rapids server (Kan Liang) [Orabug: 34561741] - perf/x86/intel/uncore: Support IIO free-running counters on Sapphire Rapids server (Kan Liang) [Orabug: 34561741] - perf/x86/intel/uncore: Factor out snr_uncore_mmio_map() (Kan Liang) [Orabug: 34561741] - perf/x86/intel/uncore: Add alias PMU name (Kan Liang) [Orabug: 34561741] - perf/x86/intel/uncore: Add Sapphire Rapids server MDF support (Kan Liang) [Orabug: 34561741] - perf/x86/intel/uncore: Add Sapphire Rapids server M3UPI support (Kan Liang) [Orabug: 34561741] - perf/x86/intel/uncore: Add Sapphire Rapids server UPI support (Kan Liang) [Orabug: 34561741] - perf/x86/intel/uncore: Add Sapphire Rapids server M2M support (Kan Liang) [Orabug: 34561741] - perf/x86/intel/uncore: Add Sapphire Rapids server IMC support (Kan Liang) [Orabug: 34561741] - perf/x86/intel/uncore: Add Sapphire Rapids server PCU support (Kan Liang) [Orabug: 34561741] - perf/x86/intel/uncore: Add Sapphire Rapids server M2PCIe support (Kan Liang) [Orabug: 34561741] - perf/x86/intel/uncore: Add Sapphire Rapids server IRP support (Kan Liang) [Orabug: 34561741] - perf/x86/intel/uncore: Add Sapphire Rapids server IIO support (Kan Liang) [Orabug: 34561741] - perf/x86/intel/uncore: Add Sapphire Rapids server CHA support (Kan Liang) [Orabug: 34561741] - perf/x86/intel/uncore: Add Sapphire Rapids server framework (Kan Liang) [Orabug: 34561741] - perf/x86/intel/uncore: Clean up error handling path of iio mapping (Kan Liang) [Orabug: 34561741] - perf/x86/intel/uncore: Enable I/O stacks to IIO PMON mapping on ICX (Alexander Antonov) [Orabug: 34561741] - perf/x86/intel/uncore: Enable I/O stacks to IIO PMON mapping on SNR (Alexander Antonov) [Orabug: 34561741] - perf/x86/intel/uncore: Generalize I/O stacks to PMON mapping procedure (Alexander Antonov) [Orabug: 34561741] - perf/x86/intel/uncore: Enable IIO stacks to PMON mapping for multi-segment SKX (Alexander Antonov) [Orabug: 34561741] - perf/x86/intel/uncore: Fix for iio mapping on Skylake Server (Alexander Antonov) [Orabug: 34561741] - perf/x86/intel/uncore: Expose an Uncore unit to IIO PMON mapping (Roman Sudarikov) [Orabug: 34561741] - perf/x86/intel/uncore: Expose an Uncore unit to PMON mapping (Roman Sudarikov) [Orabug: 34561741] [5.4.17-2136.317.4] - xfs: fix incorrect i_nlink caused by inode racing (Long Li) [Orabug: 35021005] - net/rds: Delegate fan-out to a background worker (Gerd Rausch) [Orabug: 35032610] - net/rds: Go back to alloc_ordered_workqueue() (Gerd Rausch) [Orabug: 35042698] - sched/core: Restrict userspace affinity changes with uek=exadata (Konrad Rzeszutek Wilk) [Orabug: 35049548] - uek-misc: Initial version (Konrad Rzeszutek Wilk) [Orabug: 35049223] - treewide: Move the definition in a global file (Konrad Rzeszutek Wilk) [Orabug: 35049223] - treewide: Rename wake_affine_idle_pull into on_exadata (Konrad Rzeszutek Wilk) [Orabug: 35049223] - sched/core: Remove sched_uek=preempt (Konrad Rzeszutek Wilk) [Orabug: 35049223] - RDMA/addr: Refresh neighbour entries upon rdma_resolve_addr() (Gerd Rausch) [Orabug: 35060576] [5.4.17-2136.317.3] - Revert 'xprtrdma: Fix regbuf data not freed in rpcrdma_req_create()' (Greg Kroah-Hartman) - Revert 'selftests/bpf: check null propagation only neither reg is PTR_TO_BTF_ID' (Sasha Levin) - LTS tag: v5.4.230 (Sherry Yang) - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Hugh Dickins) - x86/fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN (YingChi Long) - drm/amd/display: Fix COLOR_SPACE_YCBCR2020_TYPE matrix (Joshua Ashton) - drm/amd/display: Fix set scaling doesn's work (hongao) - drm/i915: re-disable RC6p on Sandy Bridge (Sasa Dragic) - gsmi: fix null-deref in gsmi_get_variable (Khazhismel Kumykov) - serial: atmel: fix incorrect baudrate setup (Tobias Schramm) - dmaengine: tegra210-adma: fix global intr clear (Mohan Kumar) - serial: pch_uart: Pass correct sg to dma_unmap_sg() (Ilpo Jarvinen) - dt-bindings: phy: g12a-usb3-pcie-phy: fix compatible string documentation (Heiner Kallweit) - usb-storage: apply IGNORE_UAS only for HIKSEMI MD202 on RTL9210 (Juhyung Park) - usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() (Maciej zenczykowski) - usb: gadget: g_webcam: Send color matching descriptor per frame (Daniel Scally) - usb: typec: altmodes/displayport: Fix pin assignment calculation (Prashant Malani) - usb: typec: altmodes/displayport: Add pin assignment helper (Prashant Malani) - usb: host: ehci-fsl: Fix module alias (Alexander Stein) - USB: serial: cp210x: add SCALANCE LPE-9000 device id (Michael Adler) - USB: gadgetfs: Fix race between mounting and unmounting (Alan Stern) - cifs: do not include page data when checking signature (Enzo Matsumiya) - btrfs: fix race between quota rescan and disable leading to NULL pointer deref (Filipe Manana) - mmc: sunxi-mmc: Fix clock refcount imbalance during unbind (Samuel Holland) - comedi: adv_pci1760: Fix PWM instruction handling (Ian Abbott) - usb: core: hub: disable autosuspend for TI TUSB8041 (Flavio Suligoi) - misc: fastrpc: Fix use-after-free race condition for maps (Ola Jeppsson) - misc: fastrpc: Don't remove map on creater_process and device_release (Abel Vesa) - USB: misc: iowarrior: fix up header size for USB_DEVICE_ID_CODEMERCS_IOW100 (Greg Kroah-Hartman) - USB: serial: option: add Quectel EM05CN modem (Duke Xin) - USB: serial: option: add Quectel EM05CN (SG) modem (Duke Xin) - USB: serial: option: add Quectel EC200U modem (Ali Mirghasemi) - USB: serial: option: add Quectel EM05-G (RS) modem (Duke Xin) - USB: serial: option: add Quectel EM05-G (CS) modem (Duke Xin) - USB: serial: option: add Quectel EM05-G (GR) modem (Duke Xin) - prlimit: do_prlimit needs to have a speculation check (Greg Kroah-Hartman) - xhci: Detect lpm incapable xHC USB3 roothub ports from ACPI tables (Mathias Nyman) - usb: acpi: add helper to check port lpm capability using acpi _DSM (Mathias Nyman) - xhci: Add a flag to disable USB3 lpm on a xhci root port level. (Mathias Nyman) - xhci: Add update_hub_device override for PCI xHCI hosts (Mathias Nyman) - xhci: Fix null pointer dereference when host dies (Mathias Nyman) - usb: xhci: Check endpoint is valid before dereferencing it (Jimmy Hu) - xhci-pci: set the dma max_seg_size (Ricardo Ribalda) - ALSA: hda/realtek - Turn on power early (Yuchi Yang) - drm/i915/gt: Reset twice (Chris Wilson) - efi: fix userspace infinite retry read efivars after EFI runtime services page fault (Ding Hui) - nilfs2: fix general protection fault in nilfs_btree_insert() (Ryusuke Konishi) - Add exception protection processing for vd in axi_chan_handle_err function (Shawn.Shao) - wifi: brcmfmac: fix regression for Broadcom PCIe wifi devices (Arend van Spriel) - f2fs: let's avoid panic if extent_tree is not created (Jaegeuk Kim) - RDMA/srp: Move large values to a new enum for gcc13 (Jiri Slaby (SUSE)) - net/ethtool/ioctl: return -EOPNOTSUPP if we have no phy stats (Daniil Tatianin) - selftests/bpf: check null propagation only neither reg is PTR_TO_BTF_ID (Hao Sun) - pNFS/filelayout: Fix coalescing test for single DS (Olga Kornievskaia) - LTS tag: v5.4.229 (Sherry Yang) - tipc: call tipc_lxc_xmit without holding node_read_lock (Xin Long) - ocfs2: fix freeing uninitialized resource on ocfs2_dlm_shutdown (Heming Zhao) - tipc: Add a missing case of TIPC_DIRECT_MSG type (Hoang Le) - tty: serial: tegra: Handle RX transfer in PIO mode if DMA wasn't started (Dmitry Osipenko) - tipc: fix use-after-free in tipc_disc_rcv() (Tuong Lien) - Revert 'usb: ulpi: defer ulpi_register on ulpi_read_id timeout' (Ferry Toth) - mm: Always release pages to the buddy allocator in memblock_free_late(). (Aaron Thompson) - efi: fix NULL-deref in init error path (Johan Hovold) - arm64: cmpxchg_double*: hazard against entire exchange variable (Mark Rutland) - arm64: atomics: remove LL/SC trampolines (Mark Rutland) - arm64: atomics: format whitespace consistently (Mark Rutland) - drm/virtio: Fix GEM handle creation UAF (Rob Clark) - x86/resctrl: Fix task CLOSID/RMID update race (Peter Newman) - x86/resctrl: Use task_curr() instead of task_struct->on_cpu to prevent unnecessary IPI (Reinette Chatre) - iommu/mediatek-v1: Fix an error handling path in mtk_iommu_v1_probe() (Christophe JAILLET) - iommu/mediatek-v1: Add error handle for mtk_iommu_probe (Yong Wu) - net/mlx5: Fix ptp max frequency adjustment range (Rahul Rameshbabu) - net/mlx5: Rename ptp clock info (Eran Ben Elisha) - net/sched: act_mpls: Fix warning during failed attribute validation (Ido Schimmel) - nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame() (Minsuk Kang) - hvc/xen: lock console list traversal (Roger Pau Monne) - tipc: fix unexpected link reset due to discovery messages (Tung Nguyen) - tipc: eliminate checking netns if node established (Hoang Le) - tipc: improve throughput between nodes in netns (Hoang Le) - regulator: da9211: Use irq handler when ready (Ricardo Ribalda) - EDAC/device: Fix period calculation in edac_device_reset_delay_period() (Eliav Farber) - x86/boot: Avoid using Intel mnemonics in AT&T syntax asm (Peter Zijlstra) - powerpc/imc-pmu: Fix use of mutex in IRQs disabled section (Kajol Jain) - netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function. (Gavrilov Ilia) - ext4: fix uninititialized value in 'ext4_evict_inode' (Ye Bin) - ext4: fix use-after-free in ext4_orphan_cleanup (Baokun Li) - ext4: lost matching-pair of trace in ext4_truncate (zhengliang) - ext4: fix bug_on in __es_tree_search caused by bad quota inode (Baokun Li) - quota: Factor out setup of quota inode (Jan Kara) - jbd2: use the correct print format (Bixuan Cui) - usb: ulpi: defer ulpi_register on ulpi_read_id timeout (Ferry Toth) - wifi: wilc1000: sdio: fix module autoloading (Michael Walle) - ipv6: raw: Deduct extension header length in rawv6_push_pending_frames (Herbert Xu) [Orabug: 35005829] {CVE-2023-0394} - ixgbe: fix pci device refcount leak (Yang Yingliang) - platform/x86: sony-laptop: Don't turn off 0x153 keyboard backlight during probe (Hans de Goede) - drm/msm/adreno: Make adreno quirks not overwrite each other (Konrad Dybcio) - cifs: Fix uninitialized memory read for smb311 posix symlink create (Volker Lendecke) - ALSA: hda/hdmi: Add a HP device 0x8715 to force connect list (Adrian Chan) - ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (Clement Lecigne) - net/ulp: prevent ULP without clone op from entering the LISTEN status (Paolo Abeni) - s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple() (Heiko Carstens) - s390/kexec: fix ipl report address for kdump (Alexander Egorenkov) - perf auxtrace: Fix address filter duplicate symbol selection (Adrian Hunter) - docs: Fix the docs build with Sphinx 6.0 (Jonathan Corbet) - efi: tpm: Avoid READ_ONCE() for accessing the event log (Ard Biesheuvel) - KVM: arm64: Fix S1PTW handling on RO memslots (Marc Zyngier) - net: sched: disallow noqueue for qdisc classes (Frederick Lawler) [Orabug: 35005792] {CVE-2022-47929} - driver core: Fix bus_type.match() error handling in __driver_attach() (Isaac J. Manjarres) - selftests: set the BUILD variable to absolute path (Muhammad Usama Anjum) - selftests: Fix kselftest O=objdir build from cluttering top level objdir (Shuah Khan) - parisc: Align parisc MADV_XXX constants with all other architectures (Helge Deller) - mbcache: Avoid nesting of cache->c_list_lock under bit locks (Jan Kara) - hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling (Linus Torvalds) - hfs/hfsplus: use WARN_ON for sanity check (Arnd Bergmann) - ext4: don't allow journal inode to have encrypt flag (Eric Biggers) - riscv: uaccess: fix type of 0 variable on error in get_user() (Ben Dooks) - nfsd: fix handling of readdir in v4root vs. mount upcall timeout (Jeff Layton) - x86/bugs: Flush IBP in ib_prctl_set() (Rodrigo Branco) - ASoC: Intel: bytcr_rt5640: Add quirk for the Advantech MICA-071 tablet (Hans de Goede) - udf: Fix extension of the last extent in the file (Jan Kara) - caif: fix memory leak in cfctrl_linkup_request() (Zhengchao Shao) - drm/i915: unpin on error in intel_vgpu_shadow_mm_pin() (Dan Carpenter) - usb: rndis_host: Secure rndis_query check against int overflow (Szymon Heidrich) - drivers/net/bonding/bond_3ad: return when there's no aggregator (Daniil Tatianin) - perf tools: Fix resources leak in perf_data__open_dir() (Miaoqian Lin) - net: sched: cbq: dont intepret cls results when asked to drop (Jamal Hadi Salim) [Orabug: 34983584] {CVE-2023-23454} - net: sched: atm: dont intepret cls results when asked to drop (Jamal Hadi Salim) [Orabug: 34983614] {CVE-2023-23455} - RDMA/mlx5: Fix validation of max_rd_atomic caps for DC (Maor Gottlieb) - RDMA/uverbs: Silence shiftTooManyBitsSigned warning (Leon Romanovsky) - net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe (Miaoqian Lin) - net: amd-xgbe: add missed tasklet_kill (Jiguang Xiao) - vhost: fix range used in translate_desc() (Stefano Garzarella) - nfc: Fix potential resource leaks (Miaoqian Lin) - qlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable() failure (Daniil Tatianin) - net: sched: fix memory leak in tcindex_set_parms (Hawkins Jiawei) - net: hns3: add interrupts re-initialization while doing VF FLR (Jie Wang) - nfsd: shut down the NFSv4 state objects before the filecache (Jeff Layton) - bpf: pull before calling skb_postpull_rcsum() (Jakub Kicinski) - SUNRPC: ensure the matching upcall is in-flight upon downcall (minoura makoto) - ext4: fix deadlock due to mbcache entry corruption (Jan Kara) - mbcache: automatically delete entries from cache on freeing (Jan Kara) - ext4: fix race when reusing xattr blocks (Jan Kara) - ext4: unindent codeblock in ext4_xattr_block_set() (Jan Kara) - ext4: remove EA inode entry from mbcache on inode eviction (Jan Kara) - mbcache: add functions to delete entry if unused (Jan Kara) - mbcache: don't reclaim used entries (Jan Kara) - ext4: use kmemdup() to replace kmalloc + memcpy (Shuqi Zhang) - fs: ext4: initialize fsdata in pagecache_write() (Alexander Potapenko) - ext4: use memcpy_to_page() in pagecache_write() (Chaitanya Kulkarni) - mm/highmem: Lift memcpy_[to|from]_page to core (Ira Weiny) - ext4: correct inconsistent error msg in nojournal mode (Baokun Li) - ext4: goto right label 'failed_mount3a' (Jason Yan) - ravb: Fix 'failed to switch device to config mode' message during unbind (Biju Das) - KVM: nVMX: Properly expose ENABLE_USR_WAIT_PAUSE control to L1 (Sean Christopherson) - perf probe: Fix to get the DW_AT_decl_file and DW_AT_call_file as unsinged data (Masami Hiramatsu (Google)) - perf probe: Use dwarf_attr_integrate as generic DWARF attr accessor (Masami Hiramatsu (Google)) - dm thin: resume even if in FAIL mode (Luo Meng) - media: s5p-mfc: Fix in register read and write for H264 (Smitha T Murthy) - media: s5p-mfc: Clear workbit to handle error condition (Smitha T Murthy) - media: s5p-mfc: Fix to handle reference queue during finishing (Smitha T Murthy) - PM/devfreq: governor: Add a private governor_data for governor (Kant Fan) - btrfs: replace strncpy() with strscpy() (Sasha Levin) - ext4: allocate extended attribute value in vmalloc area (Ye Bin) - ext4: avoid unaccounted block allocation when expanding inode (Jan Kara) - ext4: initialize quota before expanding inode in setproject ioctl (Jan Kara) - ext4: fix inode leak in ext4_xattr_inode_create() on an error path (Ye Bin) - ext4: avoid BUG_ON when creating xattrs (Jan Kara) - ext4: fix error code return to user-space in ext4_get_branch() (Luis Henriques) - ext4: fix corruption when online resizing a 1K bigalloc fs (Baokun Li) - ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline (Eric Whitney) - ext4: init quota for 'old.inode' in 'ext4_rename' (Ye Bin) - ext4: fix bug_on in __es_tree_search caused by bad boot loader inode (Baokun Li) - ext4: fix reserved cluster accounting in __es_remove_extent() (Ye Bin) - ext4: add helper to check quota inums (Baokun Li) - ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode (Baokun Li) - ext4: fix undefined behavior in bit shift for ext4_check_flag_values (Gaosheng Cui) - ext4: add inode table check in __ext4_get_inode_loc to aovid possible infinite loop (Baokun Li) - drm/vmwgfx: Validate the box size for the snooped cursor (Zack Rusin) - drm/connector: send hotplug uevent on connector cleanup (Simon Ser) - device_cgroup: Roll back to original exceptions after copy failure (Wang Weiyang) - parisc: led: Fix potential null-ptr-deref in start_task() (Shang XiaoJing) - iommu/amd: Fix ivrs_acpihid cmdline parsing code (Kim Phillips) - crypto: n2 - add missing hash statesize (Corentin Labbe) - PCI/sysfs: Fix double free in error path (Sascha Hauer) - PCI: Fix pci_device_is_present() for VFs by checking PF (Michael S. Tsirkin) - ipmi: fix use after free in _ipmi_destroy_user() (Dan Carpenter) - ima: Fix a potential NULL pointer access in ima_restore_measurement_list (Huaxin Lu) - mtd: spi-nor: Check for zero erase size in spi_nor_find_best_erase_type() (Alexander Sverdlin) - ipmi: fix long wait in unload when IPMI disconnect (Zhang Yuchen) - efi: Add iMac Pro 2017 to uefi skip cert quirk (Aditya Garg) - md/bitmap: Fix bitmap chunk size overflow issues (Florian-Ewald Mueller) - cifs: fix missing display of three mount options (Steve French) - cifs: fix confusing debug message (Paulo Alcantara) - media: dvb-core: Fix UAF due to refcount races at releasing (Takashi Iwai) [Orabug: 34820629] {CVE-2022-41218} - media: dvb-core: Fix double free in dvb_register_device() (Keita Suzuki) - ARM: 9256/1: NWFPE: avoid compiler-generated __aeabi_uldivmod (Nick Desaulniers) - tracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_line (Yang Jihong) - tracing/hist: Fix wrong return value in parse_action_params() (Zheng Yejian) - x86/microcode/intel: Do not retry microcode reloading on the APs (Ashok Raj) - tracing/hist: Fix out-of-bound write on 'action_data.var_ref_idx' (Zheng Yejian) - dm cache: set needs_check flag after aborting metadata (Mike Snitzer) - dm cache: Fix UAF in destroy() (Luo Meng) - dm clone: Fix UAF in clone_dtr() (Luo Meng) - dm integrity: Fix UAF in dm_integrity_dtr() (Luo Meng) - dm thin: Fix UAF in run_timer_softirq() (Luo Meng) - dm thin: Use last transaction's pmd->root when commit failed (Zhihao Cheng) - dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata (Zhihao Cheng) - dm cache: Fix ABBA deadlock between shrink_slab and dm_cache_metadata_abort (Mike Snitzer) - binfmt: Fix error return code in load_elf_fdpic_binary() (Wang Yufen) - binfmt: Move install_exec_creds after setup_new_exec to match binfmt_elf (Eric W. Biederman) - cpufreq: Init completion before kobject_init_and_add() (Yongqiang Liu) - selftests: Use optional USERCFLAGS and USERLDFLAGS (Mickael Salaun) - arm64: dts: qcom: sdm850-lenovo-yoga-c630: correct I2C12 pins drive strength (Krzysztof Kozlowski) - ARM: ux500: do not directly dereference __iomem (Jason A. Donenfeld) - btrfs: fix resolving backrefs for inline extent followed by prealloc (Boris Burkov) - mmc: sdhci-sprd: Disable CLK_AUTO when the clock is less than 400K (Wenchao Chen) - ktest.pl minconfig: Unset configs instead of just removing them (Steven Rostedt) - kest.pl: Fix grub2 menu handling for rebooting (Steven Rostedt) - soc: qcom: Select REMAP_MMIO for LLCC driver (Manivannan Sadhasivam) - media: stv0288: use explicitly signed char (Jason A. Donenfeld) - net/af_packet: make sure to pull mac header (Eric Dumazet) - net/af_packet: add VLAN support for AF_PACKET SOCK_RAW GSO (Hangbin Liu) - SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails (Chuck Lever) - tpm: tpm_tis: Add the missed acpi_put_table() to fix memory leak (Hanjun Guo) - tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak (Hanjun Guo) - mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING (Deren Wu) - f2fs: should put a page when checking the summary info (Pavel Machek) - mm, compaction: fix fast_isolate_around() to stay within boundaries (NARIBAYASHI Akira) - md: fix a crash in mempool_free (Mikulas Patocka) - pnode: terminate at peers of source (Christian Brauner) - ALSA: line6: fix stack overflow in line6_midi_transmit (Artem Egorkine) - ALSA: line6: correct midi status byte when receiving data from podxt (Artem Egorkine) - ovl: Use ovl mounter's fsuid and fsgid in ovl_link() (Zhang Tianci) - hfsplus: fix bug causing custom uid and gid being unable to be assigned with mount (Aditya Garg) - HID: plantronics: Additional PIDs for double volume key presses quirk (Terry Junge) - HID: multitouch: fix Asus ExpertBook P2 P2451FA trackpoint (Jose Exposito) - powerpc/rtas: avoid scheduling in rtas_os_term() (Nathan Lynch) - powerpc/rtas: avoid device tree lookups in rtas_os_term() (Nathan Lynch) - objtool: Fix SEGFAULT (Christophe Leroy) - nvme: fix the NVME_CMD_EFFECTS_CSE_MASK definition (Christoph Hellwig) - ata: ahci: Fix PCS quirk application for suspend (Adam Vodopjan) - nvme-pci: fix doorbell buffer value endianness (Klaus Jensen) - cifs: fix oops during encryption (Paulo Alcantara) - media: dvbdev: fix refcnt bug (Lin Ma) [Orabug: 34983295] {CVE-2022-45885} {CVE-2022-45887} {CVE-2022-45886} {CVE-2022-45919} {CVE-2022-45884} - media: dvbdev: fix build warning due to comments (Lin Ma) - gcov: add support for checksum field (Rickard x Andersson) - regulator: core: fix deadlock on regulator enable (Johan Hovold) - iio: adc128s052: add proper .data members in adc128_of_match table (Rasmus Villemoes) - iio: adc: ad_sigma_delta: do not use internal iio_dev lock (Nuno Sa) - reiserfs: Add missing calls to reiserfs_security_free() (Roberto Sassu) - HID: wacom: Ensure bootloader PID is usable in hidraw mode (Jason Gerecke) - usb: dwc3: core: defer probe on ulpi_read_id timeout (Ferry Toth) - ALSA: hda/hdmi: Add HP Device 0x8711 to force connect list (Jiao Zhou) - ALSA: hda/realtek: Add quirk for Lenovo TianYi510Pro-14IOB (Edward Pacman) - pstore: Make sure CONFIG_PSTORE_PMSG selects CONFIG_RT_MUTEXES (John Stultz) - pstore: Switch pmsg_lock to an rt_mutex to avoid priority inversion (John Stultz) - ASoC: rt5670: Remove unbalanced pm_runtime_put() (Hans de Goede) - ASoC: rockchip: spdif: Add missing clk_disable_unprepare() in rk_spdif_runtime_resume() (Wang Jingjin) - ASoC: wm8994: Fix potential deadlock (Marek Szyprowski) - ASoC: rockchip: pdm: Add missing clk_disable_unprepare() in rockchip_pdm_runtime_resume() (Wang Jingjin) - ASoC: audio-graph-card: fix refcount leak of cpu_ep in __graph_for_each_link() (Wang Yufen) - ASoC: mediatek: mt8173-rt5650-rt5514: fix refcount leak in mt8173_rt5650_rt5514_dev_probe() (Wang Yufen) - ASoC: Intel: Skylake: Fix driver hang during shutdown (Cezary Rojewski) - ALSA: hda: add snd_hdac_stop_streams() helper (Pierre-Louis Bossart) - ALSA/ASoC: hda: move/rename snd_hdac_ext_stop_streams to hdac_stream.c (Pierre-Louis Bossart) - orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init() (Zhang Xiaoxu) - orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string() (Zhang Xiaoxu) - drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid() (Nathan Chancellor) - drm/fsl-dcu: Fix return type of fsl_dcu_drm_connector_mode_valid() (Nathan Chancellor) - hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() (Hawkins Jiawei) - clk: st: Fix memory leak in st_of_quadfs_setup() (Xiu Jianfeng) - media: si470x: Fix use-after-free in si470x_int_in_callback() (Shigeru Yoshida) - mmc: f-sdh30: Add quirks for broken timeout clock capability (Kunihiko Hayashi) - regulator: core: fix use_count leakage when handling boot-on (Rui Zhang) - blk-mq: fix possible memleak when register 'hctx' failed (Ye Bin) - media: dvb-usb: fix memory leak in dvb_usb_adapter_init() (Mazin Al Haddad) - media: dvbdev: adopts refcnt to avoid UAF (Lin Ma) [Orabug: 34983295] {CVE-2022-45887} {CVE-2022-45884} {CVE-2022-45886} {CVE-2022-45919} {CVE-2022-45885} - media: dvb-frontends: fix leak of memory fw (Yan Lei) - bpf: Prevent decl_tag from being referenced in func_proto arg (Stanislav Fomichev) - ppp: associate skb with a device at tx (Stanislav Fomichev) - mrp: introduce active flags to prevent UAF when applicant uninit (Schspa Shi) - net: add atomic_long_t to net_device_stats fields (Eric Dumazet) - md/raid1: stop mdx_raid1 thread when raid1 array run failed (Jiang Li) - drivers/md/md-bitmap: check the return value of md_bitmap_get_counter() (Li Zhong) - drm/sti: Use drm_mode_copy() (Ville Syrjala) - drm/rockchip: Use drm_mode_copy() (Ville Syrjala) - s390/lcs: Fix return type of lcs_start_xmit() (Nathan Chancellor) - s390/netiucv: Fix return type of netiucv_tx() (Nathan Chancellor) - s390/ctcm: Fix return type of ctc{mp,}m_tx() (Nathan Chancellor) - igb: Do not free q_vector unless new one was allocated (Kees Cook) - wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() (Minsuk Kang) - hamradio: baycom_epp: Fix return type of baycom_send_packet() (Nathan Chancellor) - net: ethernet: ti: Fix return type of netcp_ndo_start_xmit() (Nathan Chancellor) - bpf: make sure skb->len != 0 when redirecting to a tunneling device (Stanislav Fomichev) - ipmi: fix memleak when unload ipmi driver (Zhang Yuchen) - ASoC: codecs: rt298: Add quirk for KBL-R RVP platform (Amadeusz Stawinski) - wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out (Shigeru Yoshida) - wifi: ath9k: verify the expected usb_endpoints are present (Fedor Pchelkin) - brcmfmac: return error when getting invalid max_flowrings from dongle (Wright Feng) - drm/etnaviv: add missing quirks for GC300 (Doug Brown) - hfs: fix OOB Read in __hfs_brec_find (ZhangPeng) - acct: fix potential integer overflow in encode_comp_t() (Zheng Yejian) - nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset() (Ryusuke Konishi) - ACPICA: Fix error code path in acpi_ds_call_control_method() (Rafael J. Wysocki) - fs: jfs: fix shift-out-of-bounds in dbDiscardAG (Hoi Pok Wu) - udf: Avoid double brelse() in udf_rename() (Shigeru Yoshida) - fs: jfs: fix shift-out-of-bounds in dbAllocAG (Dongliang Mu) - binfmt_misc: fix shift-out-of-bounds in check_special_flags (Liu Shixin) - rcu: Fix __this_cpu_read() lockdep warning in rcu_force_quiescent_state() (Zqiang) - net: stream: purge sk_error_queue in sk_stream_kill_queues() (Eric Dumazet) - myri10ge: Fix an error handling path in myri10ge_probe() (Christophe JAILLET) - rxrpc: Fix missing unlock in rxrpc_do_sendmsg() (David Howells) - net_sched: reject TCF_EM_SIMPLE case for complex ematch module (Cong Wang) - mailbox: zynq-ipi: fix error handling while device_register() fails (Yang Yingliang) - skbuff: Account for tail adjustment during pull operations (Subash Abhinov Kasiviswanathan) - openvswitch: Fix flow lookup to use unmasked key (Eelco Chaudron) - rtc: mxc_v2: Add missing clk_disable_unprepare() (GUO Zihua) - r6040: Fix kmemleak in probe and remove (Li Zetao) - nfc: pn533: Clear nfc_target before being used (Minsuk Kang) - mISDN: hfcmulti: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - mISDN: hfcpci: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - mISDN: hfcsusb: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure (Dan Aloni) - NFSD: Add tracepoints to NFSD's duplicate reply cache (Chuck Lever) - nfsd: Define the file access mode enum for tracing (Trond Myklebust) - rtc: pic32: Move devm_rtc_allocate_device earlier in pic32_rtc_probe() (Gaosheng Cui) - rtc: st-lpc: Add missing clk_disable_unprepare in st_rtc_probe() (Gaosheng Cui) - remoteproc: qcom_q6v5_pas: Fix missing of_node_put() in adsp_alloc_memory_region() (Yuan Can) - remoteproc: sysmon: fix memory leak in qcom_add_sysmon_subdev() (Gaosheng Cui) - pwm: sifive: Call pwm_sifive_update_clock() while mutex is held (Uwe Kleine-Konig) - selftests/powerpc: Fix resource leaks (Miaoqian Lin) - powerpc/hv-gpci: Fix hv_gpci event list (Kajol Jain) - powerpc/83xx/mpc832x_rdb: call platform_device_put() in error case in of_fsl_spi_probe() (Yang Yingliang) - powerpc/perf: callchain validate kernel stack pointer bounds (Nicholas Piggin) - powerpc/xive: add missing iounmap() in error path in xive_spapr_populate_irq_data() (Yang Yingliang) - cxl: Fix refcount leak in cxl_calc_capp_routing (Miaoqian Lin) - powerpc/52xx: Fix a resource leak in an error handling path (Christophe JAILLET) - macintosh/macio-adb: check the return value of ioremap() (Xie Shaowen) - macintosh: fix possible memory leak in macio_add_one_device() (Yang Yingliang) - iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() (Yuan Can) - iommu/amd: Fix pci device refcount leak in ppr_notifier() (Yang Yingliang) - rtc: pcf85063: Fix reading alarm (Alexander Stein) - rtc: snvs: Allow a time difference on clock register read (Stefan Eichenberger) - include/uapi/linux/swab: Fix potentially missing __always_inline (Matt Redfearn) - RDMA/siw: Fix pointer cast warning (Arnd Bergmann) - power: supply: fix null pointer dereferencing in power_supply_get_battery_info (ruanjinjie) - HSI: omap_ssi_core: Fix error handling in ssi_init() (Yuan Can) - perf symbol: correction while adjusting symbol (Ajay Kaher) - perf trace: Handle failure when trace point folder is missed (Leo Yan) - perf trace: Use macro RAW_SYSCALL_ARGS_NUM to replace number (Leo Yan) - perf trace: Add a strtoul() method to 'struct syscall_arg_fmt' (Arnaldo Carvalho de Melo) - perf trace: Allow associating scnprintf routines with well known arg names (Arnaldo Carvalho de Melo) - perf trace: Add the syscall_arg_fmt pointer to syscall_arg (Arnaldo Carvalho de Melo) - perf trace: Factor out the initialization of syscal_arg_fmt->scnprintf (Arnaldo Carvalho de Melo) - perf trace: Separate 'struct syscall_fmt' definition from syscall_fmts variable (Arnaldo Carvalho de Melo) - perf trace: Return error if a system call doesn't exist (Leo Yan) - power: supply: fix residue sysfs file in error handle route of __power_supply_register() (Zeng Heng) - HSI: omap_ssi_core: fix possible memory leak in ssi_probe() (Yang Yingliang) - HSI: omap_ssi_core: fix unbalanced pm_runtime_disable() (Yang Yingliang) - fbdev: uvesafb: Fixes an error handling path in uvesafb_probe() (Christophe JAILLET) - fbdev: vermilion: decrease reference count in error path (Xiongfeng Wang) - fbdev: via: Fix error in via_core_init() (Shang XiaoJing) - fbdev: pm2fb: fix missing pci_disable_device() (Yang Yingliang) - fbdev: ssd1307fb: Drop optional dependency (Andy Shevchenko) - samples: vfio-mdev: Fix missing pci_disable_device() in mdpy_fb_probe() (Shang XiaoJing) - tracing/hist: Fix issue of losting command info in error_log (Zheng Yejian) - usb: storage: Add check for kcalloc (Jiasheng Jiang) - i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Zheyu Ma) [Orabug: 34555527] {CVE-2022-2873} - vme: Fix error not catched in fake_init() (Chen Zhongjin) - staging: rtl8192e: Fix potential use-after-free in rtllib_rx_Monitor() (YueHaibing) - staging: rtl8192u: Fix use after free in ieee80211_rx() (Dan Carpenter) - i2c: pxa-pci: fix missing pci_disable_device() on error in ce4100_i2c_probe (Hui Tang) - chardev: fix error handling in cdev_device_add() (Yang Yingliang) - mcb: mcb-parse: fix error handing in chameleon_parse_gdd() (Yang Yingliang) - drivers: mcb: fix resource leak in mcb_probe() (Zhengchao Shao) - usb: gadget: f_hid: fix refcount leak on error path (John Keeping) - usb: gadget: f_hid: fix f_hidg lifetime vs cdev (John Keeping) - usb: gadget: f_hid: optional SETUP/SET_REPORT mode (Maxim Devaev) - usb: roles: fix of node refcount leak in usb_role_switch_is_parent() (Yang Yingliang) - counter: stm32-lptimer-cnt: fix the check on arr and cmp registers update (Fabrice Gasnier) - cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter() (Yang Yingliang) - cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter() (Yang Yingliang) - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os (Zheng Wang) - misc: tifm: fix possible memory leak in tifm_7xx1_switch_media() (ruanjinjie) - misc: ocxl: fix possible name leak in ocxl_file_register_afu() (Yang Yingliang) - test_firmware: fix memory leak in test_firmware_init() (Zhengchao Shao) - serial: sunsab: Fix error handling in sunsab_init() (Yuan Can) - serial: altera_uart: fix locking in polling mode (Gabriel Somlo) - tty: serial: altera_uart_{r,t}x_chars() need only uart_port (Jiri Slaby) - tty: serial: clean up stop-tx part in altera_uart_tx_chars() (Jiri Slaby) - serial: pch: Fix PCI device refcount leak in pch_request_dma() (Xiongfeng Wang) - serial: pl011: Do not clear RX FIFO & RX interrupt in unthrottle. (delisun) - serial: amba-pl011: avoid SBSA UART accessing DMACR register (Jiamei Xie) - usb: typec: tcpci: fix of node refcount leak in tcpci_register_port() (Yang Yingliang) - usb: typec: Check for ops->exit instead of ops->enter in altmode_exit (Sven Peter) - staging: vme_user: Fix possible UAF in tsi148_dma_list_add (Gaosheng Cui) - usb: fotg210-udc: Fix ages old endianness issues (Linus Walleij) - uio: uio_dmem_genirq: Fix deadlock between irq config and handling (Rafael Mendonca) - uio: uio_dmem_genirq: Fix missing unlock in irq configuration (Rafael Mendonca) - vfio: platform: Do not pass return buffer to ACPI _RST method (Rafael Mendonca) - class: fix possible memory leak in __class_register() (Yang Yingliang) - serial: tegra: Read DMA status before terminating (Kartik) - tty: serial: tegra: Activate RX DMA transfer by request (Dmitry Osipenko) - drivers: dio: fix possible memory leak in dio_init() (Yang Yingliang) - IB/IPoIB: Fix queue count inconsistency for PKEY child interfaces (Dragos Tatulea) - hwrng: geode - Fix PCI device refcount leak (Xiongfeng Wang) - hwrng: amd - Fix PCI device refcount leak (Xiongfeng Wang) - crypto: img-hash - Fix variable dereferenced before check 'hdev->req' (Gaosheng Cui) - orangefs: Fix sysfs not cleanup when dev init failed (Zhang Xiaoxu) - RDMA/hfi1: Fix error return code in parse_platform_config() (Wang Yufen) - crypto: omap-sham - Use pm_runtime_resume_and_get() in omap_sham_probe() (Shang XiaoJing) - f2fs: avoid victim selection from previous victim section (Yonggil Song) - RDMA/nldev: Add checks for nla_nest_start() in fill_stat_counter_qps() (Yuan Can) - scsi: snic: Fix possible UAF in snic_tgt_create() (Gaosheng Cui) - scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails (Chen Zhongjin) - scsi: ipr: Fix WARNING in ipr_init() (Shang XiaoJing) - scsi: fcoe: Fix possible name leak when device_register() fails (Yang Yingliang) - scsi: hpsa: Fix possible memory leak in hpsa_add_sas_device() (Yang Yingliang) - scsi: hpsa: Fix error handling in hpsa_add_sas_host() (Yang Yingliang) - scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add() (Yang Yingliang) - crypto: tcrypt - Fix multibuffer skcipher speed test mem leak (Zhang Yiqun) - scsi: hpsa: Fix possible memory leak in hpsa_init_one() (Yuan Can) - RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create failed (Zhang Xiaoxu) - crypto: ccree - Make cc_debugfs_global_fini() available for module init function (Uwe Kleine-Konig) - RDMA/hfi: Decrease PCI device reference count in error path (Xiongfeng Wang) - PCI: Check for alloc failure in pci_request_irq() (Zeng Heng) - crypto: ccree - Remove debugfs when platform_driver_register failed (Gaosheng Cui) - crypto: ccree - swap SHA384 and SHA512 larval hashes at build time (Geert Uytterhoeven) - scsi: scsi_debug: Fix a warning in resp_write_scat() (Harshit Mogalapalli) - RDMA/siw: Set defined status for work completion with undefined status (Bernard Metzler) - RDMA/nldev: Return '-EAGAIN' if the cm_id isn't from expected port (Mark Zhang) - RDMA/siw: Fix immediate work request flush to completion queue (Bernard Metzler) - f2fs: fix normal discard process (Dongdong Zhang) - RDMA/core: Fix order of nldev_exit call (Leon Romanovsky) - apparmor: Use pointer to struct aa_label for lbs_cred (Xiu Jianfeng) - apparmor: Fix abi check to include v8 abi (John Johansen) - apparmor: fix lockdep warning when removing a namespace (John Johansen) - apparmor: fix a memleak in multi_transaction_new() (Gaosheng Cui) - stmmac: fix potential division by 0 (Piergiorgio Beruto) - Bluetooth: RFCOMM: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - Bluetooth: hci_core: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - Bluetooth: hci_bcsp: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - Bluetooth: hci_h5: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - Bluetooth: hci_ll: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - Bluetooth: hci_qca: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - Bluetooth: btusb: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - ntb_netdev: Use dev_kfree_skb_any() in interrupt context (Eric Pilmore) - net: lan9303: Fix read error execution path (Jerry Ray) - can: tcan4x5x: Remove invalid write in clear_interrupts (Markus Schneider-Pargmann) - net: amd-xgbe: Check only the minimum speed for active/passive cables (Tom Lendacky) - net: amd-xgbe: Fix logic around active and passive cables (Tom Lendacky) - net: amd: lance: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - hamradio: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - net: ethernet: dnet: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - net: emaclite: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - net: apple: bmac: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - net: apple: mace: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - net/tunnel: wait until all sk_user_data reader finish before releasing the sock (Hangbin Liu) - net: farsync: Fix kmemleak when rmmods farsync (Li Zetao) - ethernet: s2io: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop() (ruanjinjie) - drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init() (Yuan Can) - net: stmmac: selftests: fix potential memleak in stmmac_test_arpoffload() (Zhang Changzhong) - net: defxx: Fix missing err handling in dfx_init() (Yongqiang Liu) - net: vmw_vsock: vmci: Check memcpy_from_msg() (Artem Chernyshev) - clk: socfpga: Fix memory leak in socfpga_gate_init() (Xiu Jianfeng) - clk: socfpga: use clk_hw_register for a5/c5 (Dinh Nguyen) - clk: socfpga: clk-pll: Remove unused variable 'rc' (Lee Jones) - blktrace: Fix output non-blktrace event when blk_classic option enabled (Yang Jihong) - wifi: brcmfmac: Fix error return code in brcmf_sdio_download_firmware() (Wang Yufen) - wifi: rtl8xxxu: Add __packed to struct rtl8723bu_c2h (Bitterblue Smith) - spi: spi-gpio: Don't set MOSI as an input if not 3WIRE mode (Kris Bahnsen) - clk: samsung: Fix memory leak in _samsung_clk_register_pll() (Xiu Jianfeng) - media: coda: Add check for kmalloc (Jiasheng Jiang) - media: coda: Add check for dcoda_iram_alloc (Jiasheng Jiang) - media: c8sectpfe: Add of_node_put() when breaking out of loop (Liang He) - mmc: mmci: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: wbsd: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: via-sdmmc: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: meson-gx: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: omap_hsmmc: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: atmel-mci: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: wmt-sdmmc: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: vub300: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: toshsd: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: pxamci: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: mxcmmc: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: moxart: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: alcor: fix return value check of mmc_add_host() (Yang Yingliang) - NFSv4.x: Fail client initialisation if state manager thread can't run (Trond Myklebust) - SUNRPC: Fix missing release socket in rpc_sockname() (Wang ShaoBo) - xprtrdma: Fix regbuf data not freed in rpcrdma_req_create() (Zhang Xiaoxu) - ALSA: mts64: fix possible null-ptr-defer in snd_mts64_interrupt (Gaosheng Cui) - media: saa7164: fix missing pci_disable_device() (Liu Shixin) - bpf, sockmap: fix race in sock_map_free() (Eric Dumazet) - regulator: core: fix resource leak in regulator_register() (Yang Yingliang) - configfs: fix possible memory leak in configfs_create_dir() (Chen Zhongjin) - hsr: Avoid double remove of a node. (Sebastian Andrzej Siewior) - clk: qcom: clk-krait: fix wrong div2 functions (Christian Marangi) - regulator: core: fix module refcount leak in set_supply() (Yang Yingliang) - wifi: cfg80211: Fix not unregister reg_pdev when load_builtin_regdb_keys() fails (Chen Zhongjin) - spi: spidev: mask SPI_CS_HIGH in SPI_IOC_RD_MODE (Alexander Sverdlin) - bonding: uninitialized variable in bond_miimon_inspect() (Dan Carpenter) - bpf, sockmap: Fix data loss caused by using apply_bytes on ingress redirect (Pengcheng Yang) - bpf, sockmap: Fix repeated calls to sock_put() when msg has more_data (Pengcheng Yang) - netfilter: conntrack: set icmpv6 redirects as RELATED (Florian Westphal) - ASoC: pcm512x: Fix PM disable depth imbalance in pcm512x_probe (Zhang Qilong) - drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios() (Xiongfeng Wang) - drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios() (Xiongfeng Wang) - ASoC: mediatek: mt8173: Enable IRQ when pdata is ready (Ricardo Ribalda) - wifi: iwlwifi: mvm: fix double free on tx path. (Ben Greear) - ALSA: asihpi: fix missing pci_disable_device() (Liu Shixin) - NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn (Trond Myklebust) - NFSv4.2: Fix initialisation of struct nfs4_label (Trond Myklebust) - NFSv4.2: Fix a memory stomp in decode_attr_security_label (Trond Myklebust) - NFSv4.2: Clear FATTR4_WORD2_SECURITY_LABEL when done decoding (Trond Myklebust) - ASoC: mediatek: mtk-btcvsd: Add checks for write and read of mtk_btcvsd_snd (Jiasheng Jiang) - ASoC: dt-bindings: wcd9335: fix reset line polarity in example (Dmitry Torokhov) - drm/tegra: Add missing clk_disable_unprepare() in tegra_dc_probe() (Zhang Zekun) - media: s5p-mfc: Add variant data for MFC v7 hardware for Exynos 3250 SoC (Aakarsh Jain) - media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() (Baisong Zhong) - media: dvb-core: Fix ignored return value in dvb_register_frontend() (Chen Zhongjin) - pinctrl: pinconf-generic: add missing of_node_put() (ZhangPeng) - clk: imx: replace osc_hdmi with dummy (Dario Binacchi) - clk: imx8mn: correct the usb1_ctrl parent to be usb_bus (Li Jun) - media: imon: fix a race condition in send_packet() (Gautam Menghani) - mtd: maps: pxa2xx-flash: fix memory leak in probe (Zheng Yongjun) - bonding: fix link recovery in mode 2 when updelay is nonzero (Jonathan Toppins) - bonding: Rename slave_arr to usable_slaves (Maor Gottlieb) - bonding: Export skip slave logic to function (Maor Gottlieb) - clk: rockchip: Fix memory leak in rockchip_clk_register_pll() (Xiu Jianfeng) - regulator: core: use kfree_const() to free space conditionally (Wang ShaoBo) - ALSA: seq: fix undefined behavior in bit shift for SNDRV_SEQ_FILTER_USE_EVENT (Baisong Zhong) - ALSA: pcm: fix undefined behavior in bit shift for SNDRV_PCM_RATE_KNOT (Baisong Zhong) - HID: hid-sensor-custom: set fixed size for custom attributes (Marcus Folkesson) - bpf: Move skb->len == 0 checks into __bpf_redirect (Stanislav Fomichev) - media: videobuf-dma-contig: use dma_mmap_coherent (Christoph Hellwig) - media: platform: exynos4-is: Fix error handling in fimc_md_init() (Yuan Can) - media: solo6x10: fix possible memory leak in solo_sysfs_init() (Yang Yingliang) - Input: elants_i2c - properly handle the reset GPIO when power is off (Douglas Anderson) - mtd: lpddr2_nvm: Fix possible null-ptr-deref (Hui Tang) - wifi: ath10k: Fix return value in ath10k_pci_init() (Xiu Jianfeng) - ima: Fix misuse of dereference of pointer in template_desc_init_fields() (Xiu Jianfeng) - integrity: Fix memory leakage in keyring allocation error path (GUO Zihua) - amdgpu/pm: prevent array underflow in vega20_odn_edit_dpm_table() (Dan Carpenter) - regulator: core: fix unbalanced of node refcount in regulator_dev_lookup() (Yang Yingliang) - ASoC: pxa: fix null-pointer dereference in filter() (Zeng Heng) - drm/mediatek: Modify dpi power on/off sequence. (Xinlei Lee) - drm/radeon: Add the missed acpi_put_table() to fix memory leak (Hanjun Guo) - rxrpc: Fix ack.bufferSize to be 0 when generating an ack (David Howells) - net, proc: Provide PROC_FS=n fallback for proc_create_net_single_write() (David Howells) - media: camss: Clean up received buffers on failed start of streaming (Vladimir Zapolskiy) - wifi: rsi: Fix handling of 802.3 EAPOL frames sent via control port (Marek Vasut) - mtd: Fix device name leak when register device failed in add_mtd_device() (Zhang Xiaoxu) - bpf: propagate precision in ALU/ALU64 operations (Andrii Nakryiko) - media: vivid: fix compose size exceed boundary (Liu Shixin) - ima: Handle -ESTALE returned by ima_filter_rule_match() (GUO Zihua) - ima: Fix fall-through warnings for Clang (Gustavo A. R. Silva) - ima: Rename internal filter rule functions (Tyler Hicks) - drm/panel/panel-sitronix-st7701: Remove panel on DSI attach failure (Marek Vasut) - spi: Update reference to struct spi_controller (Jonathan Neuschafer) - clk: renesas: r9a06g032: Repair grave increment error (Marek Vasut) - can: kvaser_usb: Compare requested bittiming parameters with actual parameters in do_set_{,data}_bittiming (Jimmy Assarsson) - can: kvaser_usb: Add struct kvaser_usb_busparams (Jimmy Assarsson) - can: kvaser_usb_leaf: Fix bogus restart events (Anssi Hannula) - can: kvaser_usb_leaf: Fix wrong CAN state after stopping (Anssi Hannula) - can: kvaser_usb_leaf: Fix improved state not being reported (Anssi Hannula) - can: kvaser_usb_leaf: Set Warning state even without bus errors (Anssi Hannula) - can: kvaser_usb: kvaser_usb_leaf: Handle CMD_ERROR_EVENT (Jimmy Assarsson) - can: kvaser_usb: kvaser_usb_leaf: Rename {leaf,usbcan}_cmd_error_event to {leaf,usbcan}_cmd_can_error_event (Jimmy Assarsson) - can: kvaser_usb: kvaser_usb_leaf: Get capabilities from device (Jimmy Assarsson) - can: kvaser_usb: do not increase tx statistics when sending error message frames (Vincent Mailhol) - media: i2c: ad5820: Fix error path (Ricardo Ribalda) - pata_ipx4xx_cf: Fix unsigned comparison with less than zero (Junlin Yang) - wifi: rtl8xxxu: Fix reading the vendor of combo chips (Bitterblue Smith) - wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb() (Fedor Pchelkin) - wifi: ath9k: hif_usb: fix memory leak of urbs in ath9k_hif_usb_dealloc_tx_urbs() (Fedor Pchelkin) - rapidio: devices: fix missing put_device in mport_cdev_open (Cai Xinchen) - hfs: Fix OOB Write in hfs_asc2mac (ZhangPeng) - relay: fix type mismatch when allocating memory in relay_create_buf() (Gavrilov Ilia) - eventfd: change int to __u64 in eventfd_signal() ifndef CONFIG_EVENTFD (Zhang Qilong) - rapidio: fix possible UAF when kfifo_alloc() fails (Wang Weiyang) - fs: sysv: Fix sysv_nblocks() returns wrong value (Chen Zhongjin) - MIPS: BCM63xx: Add check for NULL for clk in clk_enable (Anastasia Belova) - platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]() (Yu Liao) - PM: runtime: Do not call __rpm_callback() from rpm_idle() (Rafael J. Wysocki) - PM: runtime: Improve path in rpm_idle() when no callback (Ulf Hansson) - xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource() (Harshit Mogalapalli) - x86/xen: Fix memory leak in xen_init_lock_cpu() (Xiu Jianfeng) - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (Xiu Jianfeng) - xen/events: only register debug interrupt for 2-level events (Juergen Gross) - uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix (Oleg Nesterov) - ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() (Li Zetao) - clocksource/drivers/sh_cmt: Make sure channel clock supply is enabled (Geert Uytterhoeven) - rapidio: rio: fix possible name leak in rio_register_mport() (Yang Yingliang) - rapidio: fix possible name leaks when rio_add_device() fails (Yang Yingliang) - ocfs2: fix memory leak in ocfs2_mount_volume() (Li Zetao) - ocfs2: rewrite error handling of ocfs2_fill_super (Heming Zhao via Ocfs2-devel) - ocfs2: ocfs2_mount_volume does cleanup job before return error (Heming Zhao via Ocfs2-devel) - debugfs: fix error when writing negative value to atomic_t debugfs file (Akinobu Mita) - docs: fault-injection: fix non-working usage of negative values (Wolfram Sang) - lib/notifier-error-inject: fix error when writing -errno to debugfs file (Akinobu Mita) - libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value (Akinobu Mita) - cpufreq: amd_freq_sensitivity: Add missing pci_dev_put() (Xiongfeng Wang) - genirq/irqdesc: Don't try to remove non-existing sysfs files (Yang Yingliang) - nfsd: don't call nfsd_file_put from client states seqfile display (Jeff Layton) - EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (Yang Yingliang) - irqchip: gic-pm: Use pm_runtime_resume_and_get() in gic_probe() (Shang XiaoJing) - perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox() (Xiongfeng Wang) - PNP: fix name memory leak in pnp_alloc_dev() (Yang Yingliang) - selftests/efivarfs: Add checking of the test return value (Zhao Gongyi) - MIPS: vpe-cmp: fix possible memory leak while module exiting (Yang Yingliang) - MIPS: vpe-mt: fix possible memory leak while module exiting (Yang Yingliang) - ocfs2: fix memory leak in ocfs2_stack_glue_init() (Shang XiaoJing) - lib/fonts: fix undefined behavior in bit shift for get_default_font (Gaosheng Cui) - proc: fixup uptime selftest (Alexey Dobriyan) - timerqueue: Use rb_entry_safe() in timerqueue_getnext() (Barnabas Pocze) - perf: Fix possible memleak in pmu_dev_alloc() (Chen Zhongjin) - selftests/ftrace: event_triggers: wait longer for test_event_enable (Yipeng Zou) - fs: don't audit the capability check in simple_xattr_list() (Ondrej Mosnacek) - PM: hibernate: Fix mistake in kerneldoc comment (xiongxin) - alpha: fix syscall entry in !AUDUT_SYSCALL case (Al Viro) - cpuidle: dt: Return the correct numbers of parsed idle states (Ulf Hansson) - tpm/tpm_crb: Fix error message in __crb_relinquish_locality() (Michael Kelley) - pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP (Stephen Boyd) - ARM: mmp: fix timer_read delay (Doug Brown) - pstore/ram: Fix error return code in ramoops_probe() (Wang Yufen) - arm64: dts: armada-3720-turris-mox: Add missing interrupt for RTC (Pali Rohar) - ARM: dts: turris-omnia: Add switch port 6 node (Pali Rohar) - ARM: dts: turris-omnia: Add ethernet aliases (Pali Rohar) - ARM: dts: armada-39x: Fix assigned-addresses for every PCIe Root Port (Pali Rohar) - ARM: dts: armada-38x: Fix assigned-addresses for every PCIe Root Port (Pali Rohar) - ARM: dts: armada-375: Fix assigned-addresses for every PCIe Root Port (Pali Rohar) - ARM: dts: armada-xp: Fix assigned-addresses for every PCIe Root Port (Pali Rohar) - ARM: dts: armada-370: Fix assigned-addresses for every PCIe Root Port (Pali Rohar) - ARM: dts: dove: Fix assigned-addresses for every PCIe Root Port (Pali Rohar) - arm64: dts: mediatek: mt6797: Fix 26M oscillator unit name (AngeloGioacchino Del Regno) - arm64: dts: mt2712-evb: Fix usb vbus regulators unit names (AngeloGioacchino Del Regno) - arm64: dts: mt2712-evb: Fix vproc fixed regulators unit names (AngeloGioacchino Del Regno) - arm64: dts: mt2712e: Fix unit address for pinctrl node (AngeloGioacchino Del Regno) - arm64: dts: mt2712e: Fix unit_address_vs_reg warning for oscillators (AngeloGioacchino Del Regno) - perf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init() (Shang XiaoJing) - perf: arm_dsu: Fix hotplug callback leak in dsu_pmu_init() (Yuan Can) - soc: ti: smartreflex: Fix PM disable depth imbalance in omap_sr_probe (Zhang Qilong) - soc: ti: knav_qmss_queue: Fix PM disable depth imbalance in knav_queue_probe (Zhang Qilong) - soc: ti: knav_qmss_queue: Use pm_runtime_resume_and_get instead of pm_runtime_get_sync (Minghao Chi) - arm: dts: spear600: Fix clcd interrupt (Kory Maincent) - drivers: soc: ti: knav_qmss_queue: Mark knav_acc_firmwares as static (Chen Jiahao) - arm64: dts: qcom: sdm845-cheza: fix AP suspend pin bias (Krzysztof Kozlowski) - ARM: dts: qcom: apq8064: fix coresight compatible (Luca Weiss) - usb: musb: remove extra check in musb_gadget_vbus_draw (Ivaylo Dimitrov) - net: loopback: use NET_NAME_PREDICTABLE for name_assign_type (Rasmus Villemoes) - Bluetooth: L2CAP: Fix u8 overflow (Sungwoo Kim) [Orabug: 34880795] {CVE-2022-45934} - HID: uclogic: Add HID_QUIRK_HIDINPUT_FORCE quirk (Jose Exposito) - HID: ite: Enable QUIRK_TOUCHPAD_ON_OFF_REPORT on Acer Aspire Switch V 10 (Hans de Goede) - HID: ite: Enable QUIRK_TOUCHPAD_ON_OFF_REPORT on Acer Aspire Switch 10E (Hans de Goede) - HID: ite: Add support for Acer S1002 keyboard-dock (Hans de Goede) - xen-netback: move removal of 'hotplug-status' to the right place (Pratyush Yadav) - igb: Initialize mailbox message for VF reset (Tony Nguyen) - USB: serial: f81534: fix division by zero on line-speed change (Johan Hovold) - USB: serial: f81232: fix division by zero on line-speed change (Johan Hovold) - USB: serial: cp210x: add Kamstrup RF sniffer PIDs (Bruno Thomsen) - USB: serial: option: add Quectel EM05-G modem (Duke Xin) - usb: gadget: uvc: Prevent buffer overflow in setup handler (Szymon Heidrich) - udf: Fix extending file within last block (Jan Kara) - udf: Do not bother looking for prealloc extents if i_lenExtents matches i_size (Jan Kara) - udf: Fix preallocation discarding at indirect extent boundary (Jan Kara) - udf: Discard preallocation before extending file with a hole (Jan Kara) [5.4.17-2136.317.2] - scsi: megaraid_sas: Skip syncing the RAID map on older controllers (Martin K. Petersen) [Orabug: 35028426] - IB/core: Make GID table entry (gid_idx) available immediately (Konrad Rzeszutek Wilk) [Orabug: 35015837] - iommu/amd: Disable AVIC on certain systems BIOS (Joao Martins) [Orabug: 35018581] - Ignore hot plug events when force powering off a device (James Puthukattukaran) [Orabug: 34987846] - rds: ib: Make sure messages that errors out also get unmapped (Hakon Bugge) [Orabug: 35011421] - block/diskstats: replace time_in_queue with sum of request times (Junxiao Bi) [Orabug: 35018652] - net/rds: Split send & receive vectors again (Gerd Rausch) [Orabug: 35033037] - net/rds: Bring tasklets back for better latency (Gerd Rausch) [Orabug: 35032961] - net/rds: Throttle check for CQ CPU affinity (Gerd Rausch) [Orabug: 35032961] - net/rds: Follow the observed CQ CPU affinity (Gerd Rausch) [Orabug: 35032961] - net/rds: Add 'preferred_cpu' option to 'rds_rdma.ko' (Gerd Rausch) [Orabug: 35032961] - net/mlx5: Add new verb 'ib_get_vector_irqn' (Gerd Rausch) [Orabug: 35032961] - net/rds: Use the preferred_cpu in rds_queue_{,delayed}_work (Gerd Rausch) [Orabug: 35032961] - net/rds: Make workers use the designated CPU (Gerd Rausch) [Orabug: 35032961] - net/rds: Put more CPU cores to work (Gerd Rausch) [Orabug: 35032961] - net/rds: Get rid of tasklets (Gerd Rausch) [Orabug: 35032961] - net/rds: Use the same vector for send & receive (Gerd Rausch) [Orabug: 35032961] - net/rds: Allocate rds_ib_{incoming,frag}_slab on HCA NUMA nodeid (Gerd Rausch) [Orabug: 35032961] - net/rds: Allocate pages on HCA NUMA nodeid (Gerd Rausch) [Orabug: 35032961] - drivers: base: cacheinfo: export symbol 'get_cpu_cacheinfo' (Gerd Rausch) [Orabug: 35033037] - IB/mlx4: Implement backend callback for 'ib_get_vector_irqn' (Gerd Rausch) [Orabug: 35033030] - net/rds: Do not RESET_ALT_CONN if conn drops with DR_IB_DISCONNECTED_EVENT (Sharath Srinivasan) [Orabug: 35033028] - rds: ib: Keep IB MRs on clean_list unless we are tearing down the pool (Hakon Bugge) [Orabug: 35033023] - rds: ib: Add FRWR related statistics counters (Hakon Bugge) [Orabug: 35033023] - KVM: SVM: Add a module parameter to override iommu AVIC usage (Joao Martins) [Orabug: 35033011] - iommu/amd: Don't block updates to GATag if guest mode is already on (Joao Martins) [Orabug: 35033011] - xfs: don't reuse busy extents on extent trim (Brian Foster) [Orabug: 34944365] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-45934 CVE-2023-23454 CVE-2022-41218 CVE-2022-45884 CVE-2022-47929 CVE-2022-45885 CVE-2022-45886 CVE-2023-23455 CVE-2022-2873 CVE-2022-45887 CVE-2023-0394 CVE-2022-45919 Oracle Linux 7 Oracle Linux 8 [5.4.17-2136.317.5.3] - udf: Fix file corruption when appending just after end of preallocated extent (Jan Kara) [Orabug: 35192150] - selftests/ftrace: Fix bash specific '==' operator (Masami Hiramatsu (Google)) [Orabug: 35192150] - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Felix Riemann) [Orabug: 35192150] - net: openvswitch: fix flow memory leak in ovs_flow_cmd_new (Fedor Pchelkin) [Orabug: 35192150] - IB/IPoIB: Fix legacy IPoIB due to wrong number of queues (Dragos Tatulea) [Orabug: 35182639] [5.4.17-2136.317.5.2] - Revert 'mm: Always release pages to the buddy allocator in memblock_free_late().' (Aaron Thompson) [Orabug: 35177466] [5.4.17-2136.317.5.1] - uek-rpm: Add opbmc to nano rpm (Somasundaram Krishnasamy) [Orabug: 35156131] - uek-rpm: Add missing dax_pmem_compat.ko to nano rpm (Somasundaram Krishnasamy) [Orabug: 35152396] - iommu/amd: Increase kdump command sync timeout to 2secs (Joao Martins) [Orabug: 35156821] [5.4.17-2136.317.5] - soc: Only try to build Marvell SOC code on aarch64 (Dave Kleikamp) [Orabug: 35079654] - octeontx2-pf: Don't allocate BPIDs to LBK interface (Geetha sowjanya) [Orabug: 35079654] - PCI: add misc character device for BAR4 mem access (Satananda Burla) [Orabug: 35079654] - octeontx2-bphy-netdev: Fix rfoe ptp clock cleanup (Baha Mesleh) [Orabug: 35079654] - octeontx2-dpi: configure writing DMA result to an offset of the event (Sibaranjan Pattnayak) [Orabug: 35079654] - drivers: firmware: octeontx2: 9X platform support for memtest (Piyush Malgujar) [Orabug: 35079654] - octeontx2-af: Fix devlink unregister (Ratheesh Kannoth) [Orabug: 35079654] - driver: edac: octeontx: Check SoC version (Vasyl Gomonovych) [Orabug: 35079654] - PCI: marvell-cnxk-ep: Change BAR4 memory allocation (Radha Mohan Chintakuntla) [Orabug: 35079654] - octeontx2-af: SMQ flush needs scheduling config present (Nithin Dabilpuram) [Orabug: 35079654] - octeontx2-af: add ctx ilen to cpt lf alloc mailbox (Srujana Challa) [Orabug: 35079654] - octeontx2: crypto: fix microcode version string print (Srujana Challa) [Orabug: 35079654] - crypto: octeontx2: add ctx_val workaround (Srujana Challa) [Orabug: 35079654] - crypto: octeontx2: fix rsa verify (Srujana Challa) [Orabug: 35079654] - crypto: octeontx2: fix dma unmap issue with ahash (Srujana Challa) [Orabug: 35079654] - driver: edac: octeontx: Use MC handle instead raw handle (Vasyl Gomonovych) [Orabug: 35079654] - octeontx2-pf: Fix potential memory leak in otx2_init_tc() (Ziyang Xuan) [Orabug: 35079654] - octeontx2-pf: Detach LF resources on probe cleanup (Bharat Bhushan) [Orabug: 35079654] - octeontx2-af: Fix issue with IPv6 ext match for RSS (Kiran Kumar K) [Orabug: 35079654] - drivers: octeontx2-pcicons: cleanup console de-initialization (Rick Farrington) [Orabug: 35079654] - drivers: firmware: octeontx2: Add additional length variable (Piyush Malgujar) [Orabug: 35079654] - octeontx2-af: cn10k: mcs: Fix a resource leak in the probe and remove functions (Christophe JAILLET) [Orabug: 35079654] - drivers: marvell: otx2-sdei-ghes: Unify bert records layout (Vasyl Gomonovych) [Orabug: 35079654] - octeontx2-af: Add mbox to alloc/free BPIDs (Geetha sowjanya) [Orabug: 35079654] - octeontx2-af: Dynamically allocate bpids for CPT and LBK (Geetha sowjanya) [Orabug: 35079654] - driver: edac: octeontx: Align records layout with firmware (Vasyl Gomonovych) [Orabug: 35079654] - octeontx2-af: cn10k: mcs: Fix copy and paste bug in mcs_bbe_intr_handler() (Dan Carpenter) [Orabug: 35079654] - octeontx2-af: mcs: Config parser to skip 8B header (Geetha sowjanya) [Orabug: 35079654] - octeontx2-bphy-netdev: Fix issue of using incorrect netdev priv (Naveen Mamindlapalli) [Orabug: 35079654] - PCI: fix typo in Makefile for Marvell CNXK EP driver (Radha Mohan Chintakuntla) [Orabug: 35079654] - PCI: rename octeontx2-pem-ep driver (Radha Mohan Chintakuntla) [Orabug: 35079654] - octeontx2-sdp: remove firwmare ready status set (Satananda Burla) [Orabug: 35079654] - octeontx2-bphy-netdev: fix link carrier state update for cnf10k (Baha Mesleh) [Orabug: 35079654] - drivers: soc: sw_up: Erase data config during clone operation (Witold Sadowski) [Orabug: 35079654] - drivers: soc: sw_up: Allow to skip clone check (Witold Sadowski) [Orabug: 35079654] - drivers:spi:cadence-xspi: Verify clock before operation (Witold Sadowski) [Orabug: 35079654] - fwlog: fix invalid pointers and copy size in wraparound case (Aaro Koskinen) [Orabug: 35079654] - octeontx2-af: update CPT inbound inline IPsec mailbox (Srujana Challa) [Orabug: 35079654] - octeontx2-af: Add devlink option to adjust mcam high prio zone entries (Naveen Mamindlapalli) [Orabug: 35079654] - octeontx2-af: fix arguments passed to XAQ aura deinit (Shijith Thotton) [Orabug: 35079654] - crypto: octeontx2: sync with upstream kernel (Srujana Challa) [Orabug: 35079654] - crypto: drivers - move from strlcpy with unused retval to strscpy (Wolfram Sang) [Orabug: 35079654] - crypto: octeontx2 - prevent underflow in get_cores_bmap() (Dan Carpenter) [Orabug: 35079654] - crypto: octeontx2 - use swap() to make code cleaner (chiminghao) [Orabug: 35079654] - crypto: octeontx2 - Use swap() instead of swap_engines() (Jiapeng Chong) [Orabug: 35079654] - crypto: octeontx2 - simplify the return expression of otx2_cpt_aead_cbc_aes_sha_setkey() (Minghao Chi) [Orabug: 35079654] - crypto: octeontx2 - Remove the unneeded result variable (ye xingchen) [Orabug: 35079654] - crypto: octeontx2 - out of bounds access in otx2_cpt_dl_custom_egrp_delete() (Dan Carpenter) [Orabug: 35079654] - crypto: octeontx2 - Avoid stack variable overflow (Kees Cook) [Orabug: 35079654] - crypto: octeontx2 - fix missing unlock (Yang Yingliang) [Orabug: 35079654] - crypto: octeontx2: add support for ECDH (Srujana Challa) [Orabug: 35079654] - crypto: ecc - expose ecc curves (Meng Yu) [Orabug: 35079654] - octeontx2-af: Fixed variable set but not used warnings (Sunil Goutham) [Orabug: 35079654] - octeontx2-af: cn10k: mcs: Fix error return code in mcs_register_interrupts() (Yang Yingliang) [Orabug: 35079654] - octeontx2-af: mcs: Backport cosmetic changes (Geetha sowjanya) [Orabug: 35079654] - octeontx2-af: Add support for SPI to SA index translation (Kiran Kumar K) [Orabug: 35079654] - crypto: octeontx2: add support for rsa sign and verify (Srujana Challa) [Orabug: 35079654] - drivers: spi: cadence-xspi: Change register mappings (Witold Sadowski) [Orabug: 35079654] - octeontx2-pf: ptp: Skip checksum calculation for IEEE 802.3 packets (Geetha sowjanya) [Orabug: 35079654] - octeontx2-af: Removed unnecessary debug messages. (Sunil Goutham) [Orabug: 35079654] - octeontx2-bphy-netdev: update ethtool drop stats when mbt erros are set (Naveen Mamindlapalli) [Orabug: 35079654] - octeontx2-bphy-netdev: debugfs: Added FEC stats in debugfs. (Rakesh Babu Saladi) [Orabug: 35079654] - octeontx2-bphy-netdev: cnf10k: update ethtool drop stats (Naveen Mamindlapalli) [Orabug: 35079654] - octeontx2-bphy-netdev: Add new secondary BCN offset for slave (Rakesh Babu Saladi) [Orabug: 35079654] - octeontx2-bphy-netdev: cnf10k: enable skb list processing for delay_request. (Rakesh Babu Saladi) [Orabug: 35079654] - octeontx2-bphy-netdev: Add new fields in ethtool stats (Rakesh Babu Saladi) [Orabug: 35079654] - octeontx2-bphy-netdev: Set external_clock_rate for all RFOE interfaces. (Rakesh Babu Saladi) [Orabug: 35079654] - octeontx2-af: remove TL2 and TL3 queues for SDP interface (Radha Mohan Chintakuntla) [Orabug: 35079654] - doc: sdhci-cadence: Update sd6 controller parameters (Jayanthi Annadurai) [Orabug: 35079654] - drivers: sdhci-cadence: Fix HS200 default tuning. (Jayanthi Annadurai) [Orabug: 35079654] - drivers: sdhci: Add option to configure sdhci timeout (Jayanthi Annadurai) [Orabug: 35079654] - octeontx2-pf: tc flower offload mutually exclusive with ntuple (Hariprasad Kelam) [Orabug: 35079654] - driver: mmc: sdhci: Fix parameter passed for reading phy register (Chandrakala Chavva) [Orabug: 35079654] - octeontx2-af: Move QMEM allocations from GFP_KERNEL to ATOMIC (Sunil Goutham) [Orabug: 35079654] - drivers: sdhci: Remove sdhci cadence workaround (Jayanthi Annadurai) [Orabug: 35079654] - octeontx2-bphy-netdev:cnf10k: Share RFOE PTP offset with host (Roy Franz) [Orabug: 35079654] - octeontx2-af: Move ICMP ltype to end of enum (Kiran Kumar K) [Orabug: 35079654] - octeontx2-af: Add NPC support to filter packet based on IP fragment (Suman Ghosh) [Orabug: 35079654] - octeontx2-af: Add DMAC and LXMB feature check before adding ucast, bcast and mcast rules. (Suman Ghosh) [Orabug: 35079654] - drivers: i2c: octeon: Avoid potential infinite loop (Piyush Malgujar) [Orabug: 35079654] - drivers: spi: octeontx2: Add support to read bus width from ACPI table for T9x Platforms (Piyush Malgujar) [Orabug: 35079654] - drivers: pci-octeon-pem: Rectify resetting PEM (Ray Asbury) [Orabug: 35079654] - octeontx2-bphy-netdev: cnf10k: Avoid ptp skb list processing in 1-step mode (Naveen Mamindlapalli) [Orabug: 35079654] - octeontx2-bphy-netdev: cnf10k: update drop stats when psw errors are set (Naveen Mamindlapalli) [Orabug: 35079654] - octeontx2-bphy-netdev: cnf10k: check psm queue space for ptp queue (Naveen Mamindlapalli) [Orabug: 35079654] - octeontx2-bphy-netdev: cnf10k: Use atomic update feature to update PTP clock (Naveen Mamindlapalli) [Orabug: 35079654] - octeontx2-af: Reset transmit scheduler queue config (Hariprasad Kelam) [Orabug: 35079654] - drivers: soc: fwlog: fix mapped size (Pragnesh Patel) [Orabug: 35079654] - octeontx2-bphy-netdev: cnf10k: Enable force_cond_clk_en bit (Rakesh Babu Saladi) [Orabug: 35079654] - octeontx2-bphy-netdev: cnf10k: Recalculate UDP checksum. (Rakesh Babu Saladi) [Orabug: 35079654] - octeontx2-pf: Recalculate UDP checksum for 1-step ptp packets (Geetha sowjanya) [Orabug: 35079654] - drivers: spi: Add arbitration support for Cadence SPI (Witold Sadowski) [Orabug: 35079654] - crypto: octeontx2: add support for gcm(aes) (Srujana Challa) [Orabug: 35079654] - crypto: octeontx2: add support for akcipher rsa (Srujana Challa) [Orabug: 35079654] - crypto: octeontx2: add support for hash algorithms (Srujana Challa) [Orabug: 35079654] - drivers: spi: octeontx2: ACPI support for SPI driver (Piyush Malgujar) [Orabug: 35079654] - octeontx2-bphy-netdev: Fix updating rx byte stats (Naveen Mamindlapalli) [Orabug: 35079654] - octeontx2-bphy-netdev: debugfs: new entry to dump RPM stats (Rakesh Babu Saladi) [Orabug: 35079654] - octeontx2-bphy-netdev: debugfs: new entry to dump timestamp ring (Rakesh Babu Saladi) [Orabug: 35079654] - octeontx2-bphy-netdev: debugfs: new entry to dump jdt ring (Rakesh Babu Saladi) [Orabug: 35079654] - octeontx2-bphy-netdev: debugfs: Add new debugfs root entry (Rakesh Babu Saladi) [Orabug: 35079654] - driver: edac: octeontx: Add MDC error injection interface (Vasyl Gomonovych) [Orabug: 35079654] - soc: marvell: hw_access: add mapping for mcs registers (Ankur Dwivedi) [Orabug: 35079654] - octeontx2-af: Move EOH pointer on unknown ethertype (Kiran Kumar K) [Orabug: 35079654] - octeontx2-af: Fixes static warnings (Ratheesh Kannoth) [Orabug: 35079654] - octeontx2-af: returning uninitialized variable (Sebin Sebastian) [Orabug: 35079654] - octeontx2-af: Remove duplicate include (Jiapeng Chong) [Orabug: 35079654] - octeontx2-af: Enable Exact match flag in kex profile (Ratheesh Kannoth) [Orabug: 35079654] - octeontx2-pf: Add support for exact match table. (Ratheesh Kannoth) [Orabug: 35079654] - octeontx2-af: Invoke exact match functions (Ratheesh Kannoth) [Orabug: 35079654] - octeontx2-af: Wrapper functions for MAC addr add/del/update/reset (Ratheesh Kannoth) [Orabug: 35079654] - octeontx2: Modify mbox req and resp structures (Ratheesh Kannoth) [Orabug: 35079654] - octeontx2-af: Debugsfs support for exact match. (Ratheesh Kannoth) [Orabug: 35079654] - octeontx2-af: Drop rules for NPC MCAM (Ratheesh Kannoth) [Orabug: 35079654] - octeontx2-af: FLR handler for exact match table. (Ratheesh Kannoth) [Orabug: 35079654] - octeontx2-af: devlink configuration support (Ratheesh Kannoth) [Orabug: 35079654] - octeontx2-af: Exact match scan from kex profile (Ratheesh Kannoth) [Orabug: 35079654] - octeontx2-af: Exact match support (Ratheesh Kannoth) [Orabug: 35079654] - octeontx2-af: Use hashed field in MCAM key (Suman Ghosh) [Orabug: 35079654] - Update README with UEK Text Description (Somasundaram Krishnasamy) [Orabug: 35084842] - uek-rpm: Remove unessential modules from nano rpm (Somasundaram Krishnasamy) [Orabug: 34761532] - scsi: target: core: Remove from tmr_list during LUN unlink (Dmitry Bogdanov) [Orabug: 35040142] - x86/speculation: IBRS can be disabled on task switch (Alexandre Chartre) [Orabug: 35032419] - x86/bugs: IBRS and SBBD are disabled after cpu goes idle (Alexandre Chartre) [Orabug: 35032419] - x86/bugs: Remove extra SPEC_CTRL MSR write (Alexandre Chartre) [Orabug: 35032419] - perf/x86/uncore: Don't WARN_ON_ONCE() for a broken discovery table (Kan Liang) [Orabug: 34561741] - perf/x86/uncore: Add a quirk for UPI on SPR (Kan Liang) [Orabug: 34561741] - perf/x86/uncore: Ignore broken units in discovery table (Kan Liang) [Orabug: 34561741] - perf/x86/uncore: Fix potential NULL pointer in uncore_get_alias_name (Kan Liang) [Orabug: 34561741] - perf/x86/uncore: Factor out uncore_device_to_die() (Kan Liang) [Orabug: 34561741] - perf/x86/intel/uncore: Enable UPI topology discovery for Sapphire Rapids (Alexander Antonov) [Orabug: 34561741] - perf/x86/intel/uncore: Enable UPI topology discovery for Icelake Server (Alexander Antonov) [Orabug: 34561741] - perf/x86/intel/uncore: Get UPI NodeID and GroupID (Alexander Antonov) [Orabug: 34561741] - perf/x86/intel/uncore: Enable UPI topology discovery for Skylake Server (Alexander Antonov) [Orabug: 34561741] - perf/x86/intel/uncore: Generalize get_topology() for SKX PMUs (Alexander Antonov) [Orabug: 34561741] - perf/x86/intel/uncore: Introduce UPI topology type (Alexander Antonov) [Orabug: 34561741] - perf/x86/intel/uncore: Generalize IIO topology support (Alexander Antonov) [Orabug: 34561741] - perf/x86/intel/uncore: Fix Intel SPR M3UPI event constraints (Kan Liang) [Orabug: 34561741] - perf/x86/intel/uncore: Fix IIO cleanup mapping procedure for SNR/ICX (Alexander Antonov) [Orabug: 34561741] - perf/x86/intel/uncore: Support IMC free-running counters on Sapphire Rapids server (Kan Liang) [Orabug: 34561741] - perf/x86/intel/uncore: Support IIO free-running counters on Sapphire Rapids server (Kan Liang) [Orabug: 34561741] - perf/x86/intel/uncore: Factor out snr_uncore_mmio_map() (Kan Liang) [Orabug: 34561741] - perf/x86/intel/uncore: Add alias PMU name (Kan Liang) [Orabug: 34561741] - perf/x86/intel/uncore: Add Sapphire Rapids server MDF support (Kan Liang) [Orabug: 34561741] - perf/x86/intel/uncore: Add Sapphire Rapids server M3UPI support (Kan Liang) [Orabug: 34561741] - perf/x86/intel/uncore: Add Sapphire Rapids server UPI support (Kan Liang) [Orabug: 34561741] - perf/x86/intel/uncore: Add Sapphire Rapids server M2M support (Kan Liang) [Orabug: 34561741] - perf/x86/intel/uncore: Add Sapphire Rapids server IMC support (Kan Liang) [Orabug: 34561741] - perf/x86/intel/uncore: Add Sapphire Rapids server PCU support (Kan Liang) [Orabug: 34561741] - perf/x86/intel/uncore: Add Sapphire Rapids server M2PCIe support (Kan Liang) [Orabug: 34561741] - perf/x86/intel/uncore: Add Sapphire Rapids server IRP support (Kan Liang) [Orabug: 34561741] - perf/x86/intel/uncore: Add Sapphire Rapids server IIO support (Kan Liang) [Orabug: 34561741] - perf/x86/intel/uncore: Add Sapphire Rapids server CHA support (Kan Liang) [Orabug: 34561741] - perf/x86/intel/uncore: Add Sapphire Rapids server framework (Kan Liang) [Orabug: 34561741] - perf/x86/intel/uncore: Clean up error handling path of iio mapping (Kan Liang) [Orabug: 34561741] - perf/x86/intel/uncore: Enable I/O stacks to IIO PMON mapping on ICX (Alexander Antonov) [Orabug: 34561741] - perf/x86/intel/uncore: Enable I/O stacks to IIO PMON mapping on SNR (Alexander Antonov) [Orabug: 34561741] - perf/x86/intel/uncore: Generalize I/O stacks to PMON mapping procedure (Alexander Antonov) [Orabug: 34561741] - perf/x86/intel/uncore: Enable IIO stacks to PMON mapping for multi-segment SKX (Alexander Antonov) [Orabug: 34561741] - perf/x86/intel/uncore: Fix for iio mapping on Skylake Server (Alexander Antonov) [Orabug: 34561741] - perf/x86/intel/uncore: Expose an Uncore unit to IIO PMON mapping (Roman Sudarikov) [Orabug: 34561741] - perf/x86/intel/uncore: Expose an Uncore unit to PMON mapping (Roman Sudarikov) [Orabug: 34561741] [5.4.17-2136.317.4] - xfs: fix incorrect i_nlink caused by inode racing (Long Li) [Orabug: 35021005] - net/rds: Delegate fan-out to a background worker (Gerd Rausch) [Orabug: 35032610] - net/rds: Go back to alloc_ordered_workqueue() (Gerd Rausch) [Orabug: 35042698] - sched/core: Restrict userspace affinity changes with uek=exadata (Konrad Rzeszutek Wilk) [Orabug: 35049548] - uek-misc: Initial version (Konrad Rzeszutek Wilk) [Orabug: 35049223] - treewide: Move the definition in a global file (Konrad Rzeszutek Wilk) [Orabug: 35049223] - treewide: Rename wake_affine_idle_pull into on_exadata (Konrad Rzeszutek Wilk) [Orabug: 35049223] - sched/core: Remove sched_uek=preempt (Konrad Rzeszutek Wilk) [Orabug: 35049223] - RDMA/addr: Refresh neighbour entries upon rdma_resolve_addr() (Gerd Rausch) [Orabug: 35060576] [5.4.17-2136.317.3] - Revert 'xprtrdma: Fix regbuf data not freed in rpcrdma_req_create()' (Greg Kroah-Hartman) - Revert 'selftests/bpf: check null propagation only neither reg is PTR_TO_BTF_ID' (Sasha Levin) - LTS tag: v5.4.230 (Sherry Yang) - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Hugh Dickins) - x86/fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN (YingChi Long) - drm/amd/display: Fix COLOR_SPACE_YCBCR2020_TYPE matrix (Joshua Ashton) - drm/amd/display: Fix set scaling doesn's work (hongao) - drm/i915: re-disable RC6p on Sandy Bridge (Sasa Dragic) - gsmi: fix null-deref in gsmi_get_variable (Khazhismel Kumykov) - serial: atmel: fix incorrect baudrate setup (Tobias Schramm) - dmaengine: tegra210-adma: fix global intr clear (Mohan Kumar) - serial: pch_uart: Pass correct sg to dma_unmap_sg() (Ilpo Jarvinen) - dt-bindings: phy: g12a-usb3-pcie-phy: fix compatible string documentation (Heiner Kallweit) - usb-storage: apply IGNORE_UAS only for HIKSEMI MD202 on RTL9210 (Juhyung Park) - usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() (Maciej zenczykowski) - usb: gadget: g_webcam: Send color matching descriptor per frame (Daniel Scally) - usb: typec: altmodes/displayport: Fix pin assignment calculation (Prashant Malani) - usb: typec: altmodes/displayport: Add pin assignment helper (Prashant Malani) - usb: host: ehci-fsl: Fix module alias (Alexander Stein) - USB: serial: cp210x: add SCALANCE LPE-9000 device id (Michael Adler) - USB: gadgetfs: Fix race between mounting and unmounting (Alan Stern) - cifs: do not include page data when checking signature (Enzo Matsumiya) - btrfs: fix race between quota rescan and disable leading to NULL pointer deref (Filipe Manana) - mmc: sunxi-mmc: Fix clock refcount imbalance during unbind (Samuel Holland) - comedi: adv_pci1760: Fix PWM instruction handling (Ian Abbott) - usb: core: hub: disable autosuspend for TI TUSB8041 (Flavio Suligoi) - misc: fastrpc: Fix use-after-free race condition for maps (Ola Jeppsson) - misc: fastrpc: Don't remove map on creater_process and device_release (Abel Vesa) - USB: misc: iowarrior: fix up header size for USB_DEVICE_ID_CODEMERCS_IOW100 (Greg Kroah-Hartman) - USB: serial: option: add Quectel EM05CN modem (Duke Xin) - USB: serial: option: add Quectel EM05CN (SG) modem (Duke Xin) - USB: serial: option: add Quectel EC200U modem (Ali Mirghasemi) - USB: serial: option: add Quectel EM05-G (RS) modem (Duke Xin) - USB: serial: option: add Quectel EM05-G (CS) modem (Duke Xin) - USB: serial: option: add Quectel EM05-G (GR) modem (Duke Xin) - prlimit: do_prlimit needs to have a speculation check (Greg Kroah-Hartman) - xhci: Detect lpm incapable xHC USB3 roothub ports from ACPI tables (Mathias Nyman) - usb: acpi: add helper to check port lpm capability using acpi _DSM (Mathias Nyman) - xhci: Add a flag to disable USB3 lpm on a xhci root port level. (Mathias Nyman) - xhci: Add update_hub_device override for PCI xHCI hosts (Mathias Nyman) - xhci: Fix null pointer dereference when host dies (Mathias Nyman) - usb: xhci: Check endpoint is valid before dereferencing it (Jimmy Hu) - xhci-pci: set the dma max_seg_size (Ricardo Ribalda) - ALSA: hda/realtek - Turn on power early (Yuchi Yang) - drm/i915/gt: Reset twice (Chris Wilson) - efi: fix userspace infinite retry read efivars after EFI runtime services page fault (Ding Hui) - nilfs2: fix general protection fault in nilfs_btree_insert() (Ryusuke Konishi) - Add exception protection processing for vd in axi_chan_handle_err function (Shawn.Shao) - wifi: brcmfmac: fix regression for Broadcom PCIe wifi devices (Arend van Spriel) - f2fs: let's avoid panic if extent_tree is not created (Jaegeuk Kim) - RDMA/srp: Move large values to a new enum for gcc13 (Jiri Slaby (SUSE)) - net/ethtool/ioctl: return -EOPNOTSUPP if we have no phy stats (Daniil Tatianin) - selftests/bpf: check null propagation only neither reg is PTR_TO_BTF_ID (Hao Sun) - pNFS/filelayout: Fix coalescing test for single DS (Olga Kornievskaia) - LTS tag: v5.4.229 (Sherry Yang) - tipc: call tipc_lxc_xmit without holding node_read_lock (Xin Long) - ocfs2: fix freeing uninitialized resource on ocfs2_dlm_shutdown (Heming Zhao) - tipc: Add a missing case of TIPC_DIRECT_MSG type (Hoang Le) - tty: serial: tegra: Handle RX transfer in PIO mode if DMA wasn't started (Dmitry Osipenko) - tipc: fix use-after-free in tipc_disc_rcv() (Tuong Lien) - Revert 'usb: ulpi: defer ulpi_register on ulpi_read_id timeout' (Ferry Toth) - mm: Always release pages to the buddy allocator in memblock_free_late(). (Aaron Thompson) - efi: fix NULL-deref in init error path (Johan Hovold) - arm64: cmpxchg_double*: hazard against entire exchange variable (Mark Rutland) - arm64: atomics: remove LL/SC trampolines (Mark Rutland) - arm64: atomics: format whitespace consistently (Mark Rutland) - drm/virtio: Fix GEM handle creation UAF (Rob Clark) - x86/resctrl: Fix task CLOSID/RMID update race (Peter Newman) - x86/resctrl: Use task_curr() instead of task_struct->on_cpu to prevent unnecessary IPI (Reinette Chatre) - iommu/mediatek-v1: Fix an error handling path in mtk_iommu_v1_probe() (Christophe JAILLET) - iommu/mediatek-v1: Add error handle for mtk_iommu_probe (Yong Wu) - net/mlx5: Fix ptp max frequency adjustment range (Rahul Rameshbabu) - net/mlx5: Rename ptp clock info (Eran Ben Elisha) - net/sched: act_mpls: Fix warning during failed attribute validation (Ido Schimmel) - nfc: pn533: Wait for out_urb's completion in pn533_usb_send_frame() (Minsuk Kang) - hvc/xen: lock console list traversal (Roger Pau Monne) - tipc: fix unexpected link reset due to discovery messages (Tung Nguyen) - tipc: eliminate checking netns if node established (Hoang Le) - tipc: improve throughput between nodes in netns (Hoang Le) - regulator: da9211: Use irq handler when ready (Ricardo Ribalda) - EDAC/device: Fix period calculation in edac_device_reset_delay_period() (Eliav Farber) - x86/boot: Avoid using Intel mnemonics in AT&T syntax asm (Peter Zijlstra) - powerpc/imc-pmu: Fix use of mutex in IRQs disabled section (Kajol Jain) - netfilter: ipset: Fix overflow before widen in the bitmap_ip_create() function. (Gavrilov Ilia) - ext4: fix uninititialized value in 'ext4_evict_inode' (Ye Bin) - ext4: fix use-after-free in ext4_orphan_cleanup (Baokun Li) - ext4: lost matching-pair of trace in ext4_truncate (zhengliang) - ext4: fix bug_on in __es_tree_search caused by bad quota inode (Baokun Li) - quota: Factor out setup of quota inode (Jan Kara) - jbd2: use the correct print format (Bixuan Cui) - usb: ulpi: defer ulpi_register on ulpi_read_id timeout (Ferry Toth) - wifi: wilc1000: sdio: fix module autoloading (Michael Walle) - ipv6: raw: Deduct extension header length in rawv6_push_pending_frames (Herbert Xu) [Orabug: 35005829] {CVE-2023-0394} - ixgbe: fix pci device refcount leak (Yang Yingliang) - platform/x86: sony-laptop: Don't turn off 0x153 keyboard backlight during probe (Hans de Goede) - drm/msm/adreno: Make adreno quirks not overwrite each other (Konrad Dybcio) - cifs: Fix uninitialized memory read for smb311 posix symlink create (Volker Lendecke) - ALSA: hda/hdmi: Add a HP device 0x8715 to force connect list (Adrian Chan) - ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (Clement Lecigne) - net/ulp: prevent ULP without clone op from entering the LISTEN status (Paolo Abeni) - s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple() (Heiko Carstens) - s390/kexec: fix ipl report address for kdump (Alexander Egorenkov) - perf auxtrace: Fix address filter duplicate symbol selection (Adrian Hunter) - docs: Fix the docs build with Sphinx 6.0 (Jonathan Corbet) - efi: tpm: Avoid READ_ONCE() for accessing the event log (Ard Biesheuvel) - KVM: arm64: Fix S1PTW handling on RO memslots (Marc Zyngier) - net: sched: disallow noqueue for qdisc classes (Frederick Lawler) [Orabug: 35005792] {CVE-2022-47929} - driver core: Fix bus_type.match() error handling in __driver_attach() (Isaac J. Manjarres) - selftests: set the BUILD variable to absolute path (Muhammad Usama Anjum) - selftests: Fix kselftest O=objdir build from cluttering top level objdir (Shuah Khan) - parisc: Align parisc MADV_XXX constants with all other architectures (Helge Deller) - mbcache: Avoid nesting of cache->c_list_lock under bit locks (Jan Kara) - hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling (Linus Torvalds) - hfs/hfsplus: use WARN_ON for sanity check (Arnd Bergmann) - ext4: don't allow journal inode to have encrypt flag (Eric Biggers) - riscv: uaccess: fix type of 0 variable on error in get_user() (Ben Dooks) - nfsd: fix handling of readdir in v4root vs. mount upcall timeout (Jeff Layton) - x86/bugs: Flush IBP in ib_prctl_set() (Rodrigo Branco) - ASoC: Intel: bytcr_rt5640: Add quirk for the Advantech MICA-071 tablet (Hans de Goede) - udf: Fix extension of the last extent in the file (Jan Kara) - caif: fix memory leak in cfctrl_linkup_request() (Zhengchao Shao) - drm/i915: unpin on error in intel_vgpu_shadow_mm_pin() (Dan Carpenter) - usb: rndis_host: Secure rndis_query check against int overflow (Szymon Heidrich) - drivers/net/bonding/bond_3ad: return when there's no aggregator (Daniil Tatianin) - perf tools: Fix resources leak in perf_data__open_dir() (Miaoqian Lin) - net: sched: cbq: dont intepret cls results when asked to drop (Jamal Hadi Salim) [Orabug: 34983584] {CVE-2023-23454} - net: sched: atm: dont intepret cls results when asked to drop (Jamal Hadi Salim) [Orabug: 34983614] {CVE-2023-23455} - RDMA/mlx5: Fix validation of max_rd_atomic caps for DC (Maor Gottlieb) - RDMA/uverbs: Silence shiftTooManyBitsSigned warning (Leon Romanovsky) - net: phy: xgmiitorgmii: Fix refcount leak in xgmiitorgmii_probe (Miaoqian Lin) - net: amd-xgbe: add missed tasklet_kill (Jiguang Xiao) - vhost: fix range used in translate_desc() (Stefano Garzarella) - nfc: Fix potential resource leaks (Miaoqian Lin) - qlcnic: prevent ->dcb use-after-free on qlcnic_dcb_enable() failure (Daniil Tatianin) - net: sched: fix memory leak in tcindex_set_parms (Hawkins Jiawei) - net: hns3: add interrupts re-initialization while doing VF FLR (Jie Wang) - nfsd: shut down the NFSv4 state objects before the filecache (Jeff Layton) - bpf: pull before calling skb_postpull_rcsum() (Jakub Kicinski) - SUNRPC: ensure the matching upcall is in-flight upon downcall (minoura makoto) - ext4: fix deadlock due to mbcache entry corruption (Jan Kara) - mbcache: automatically delete entries from cache on freeing (Jan Kara) - ext4: fix race when reusing xattr blocks (Jan Kara) - ext4: unindent codeblock in ext4_xattr_block_set() (Jan Kara) - ext4: remove EA inode entry from mbcache on inode eviction (Jan Kara) - mbcache: add functions to delete entry if unused (Jan Kara) - mbcache: don't reclaim used entries (Jan Kara) - ext4: use kmemdup() to replace kmalloc + memcpy (Shuqi Zhang) - fs: ext4: initialize fsdata in pagecache_write() (Alexander Potapenko) - ext4: use memcpy_to_page() in pagecache_write() (Chaitanya Kulkarni) - mm/highmem: Lift memcpy_[to|from]_page to core (Ira Weiny) - ext4: correct inconsistent error msg in nojournal mode (Baokun Li) - ext4: goto right label 'failed_mount3a' (Jason Yan) - ravb: Fix 'failed to switch device to config mode' message during unbind (Biju Das) - KVM: nVMX: Properly expose ENABLE_USR_WAIT_PAUSE control to L1 (Sean Christopherson) - perf probe: Fix to get the DW_AT_decl_file and DW_AT_call_file as unsinged data (Masami Hiramatsu (Google)) - perf probe: Use dwarf_attr_integrate as generic DWARF attr accessor (Masami Hiramatsu (Google)) - dm thin: resume even if in FAIL mode (Luo Meng) - media: s5p-mfc: Fix in register read and write for H264 (Smitha T Murthy) - media: s5p-mfc: Clear workbit to handle error condition (Smitha T Murthy) - media: s5p-mfc: Fix to handle reference queue during finishing (Smitha T Murthy) - PM/devfreq: governor: Add a private governor_data for governor (Kant Fan) - btrfs: replace strncpy() with strscpy() (Sasha Levin) - ext4: allocate extended attribute value in vmalloc area (Ye Bin) - ext4: avoid unaccounted block allocation when expanding inode (Jan Kara) - ext4: initialize quota before expanding inode in setproject ioctl (Jan Kara) - ext4: fix inode leak in ext4_xattr_inode_create() on an error path (Ye Bin) - ext4: avoid BUG_ON when creating xattrs (Jan Kara) - ext4: fix error code return to user-space in ext4_get_branch() (Luis Henriques) - ext4: fix corruption when online resizing a 1K bigalloc fs (Baokun Li) - ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline (Eric Whitney) - ext4: init quota for 'old.inode' in 'ext4_rename' (Ye Bin) - ext4: fix bug_on in __es_tree_search caused by bad boot loader inode (Baokun Li) - ext4: fix reserved cluster accounting in __es_remove_extent() (Ye Bin) - ext4: add helper to check quota inums (Baokun Li) - ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode (Baokun Li) - ext4: fix undefined behavior in bit shift for ext4_check_flag_values (Gaosheng Cui) - ext4: add inode table check in __ext4_get_inode_loc to aovid possible infinite loop (Baokun Li) - drm/vmwgfx: Validate the box size for the snooped cursor (Zack Rusin) - drm/connector: send hotplug uevent on connector cleanup (Simon Ser) - device_cgroup: Roll back to original exceptions after copy failure (Wang Weiyang) - parisc: led: Fix potential null-ptr-deref in start_task() (Shang XiaoJing) - iommu/amd: Fix ivrs_acpihid cmdline parsing code (Kim Phillips) - crypto: n2 - add missing hash statesize (Corentin Labbe) - PCI/sysfs: Fix double free in error path (Sascha Hauer) - PCI: Fix pci_device_is_present() for VFs by checking PF (Michael S. Tsirkin) - ipmi: fix use after free in _ipmi_destroy_user() (Dan Carpenter) - ima: Fix a potential NULL pointer access in ima_restore_measurement_list (Huaxin Lu) - mtd: spi-nor: Check for zero erase size in spi_nor_find_best_erase_type() (Alexander Sverdlin) - ipmi: fix long wait in unload when IPMI disconnect (Zhang Yuchen) - efi: Add iMac Pro 2017 to uefi skip cert quirk (Aditya Garg) - md/bitmap: Fix bitmap chunk size overflow issues (Florian-Ewald Mueller) - cifs: fix missing display of three mount options (Steve French) - cifs: fix confusing debug message (Paulo Alcantara) - media: dvb-core: Fix UAF due to refcount races at releasing (Takashi Iwai) [Orabug: 34820629] {CVE-2022-41218} - media: dvb-core: Fix double free in dvb_register_device() (Keita Suzuki) - ARM: 9256/1: NWFPE: avoid compiler-generated __aeabi_uldivmod (Nick Desaulniers) - tracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_line (Yang Jihong) - tracing/hist: Fix wrong return value in parse_action_params() (Zheng Yejian) - x86/microcode/intel: Do not retry microcode reloading on the APs (Ashok Raj) - tracing/hist: Fix out-of-bound write on 'action_data.var_ref_idx' (Zheng Yejian) - dm cache: set needs_check flag after aborting metadata (Mike Snitzer) - dm cache: Fix UAF in destroy() (Luo Meng) - dm clone: Fix UAF in clone_dtr() (Luo Meng) - dm integrity: Fix UAF in dm_integrity_dtr() (Luo Meng) - dm thin: Fix UAF in run_timer_softirq() (Luo Meng) - dm thin: Use last transaction's pmd->root when commit failed (Zhihao Cheng) - dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata (Zhihao Cheng) - dm cache: Fix ABBA deadlock between shrink_slab and dm_cache_metadata_abort (Mike Snitzer) - binfmt: Fix error return code in load_elf_fdpic_binary() (Wang Yufen) - binfmt: Move install_exec_creds after setup_new_exec to match binfmt_elf (Eric W. Biederman) - cpufreq: Init completion before kobject_init_and_add() (Yongqiang Liu) - selftests: Use optional USERCFLAGS and USERLDFLAGS (Mickael Salaun) - arm64: dts: qcom: sdm850-lenovo-yoga-c630: correct I2C12 pins drive strength (Krzysztof Kozlowski) - ARM: ux500: do not directly dereference __iomem (Jason A. Donenfeld) - btrfs: fix resolving backrefs for inline extent followed by prealloc (Boris Burkov) - mmc: sdhci-sprd: Disable CLK_AUTO when the clock is less than 400K (Wenchao Chen) - ktest.pl minconfig: Unset configs instead of just removing them (Steven Rostedt) - kest.pl: Fix grub2 menu handling for rebooting (Steven Rostedt) - soc: qcom: Select REMAP_MMIO for LLCC driver (Manivannan Sadhasivam) - media: stv0288: use explicitly signed char (Jason A. Donenfeld) - net/af_packet: make sure to pull mac header (Eric Dumazet) - net/af_packet: add VLAN support for AF_PACKET SOCK_RAW GSO (Hangbin Liu) - SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails (Chuck Lever) - tpm: tpm_tis: Add the missed acpi_put_table() to fix memory leak (Hanjun Guo) - tpm: tpm_crb: Add the missed acpi_put_table() to fix memory leak (Hanjun Guo) - mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING (Deren Wu) - f2fs: should put a page when checking the summary info (Pavel Machek) - mm, compaction: fix fast_isolate_around() to stay within boundaries (NARIBAYASHI Akira) - md: fix a crash in mempool_free (Mikulas Patocka) - pnode: terminate at peers of source (Christian Brauner) - ALSA: line6: fix stack overflow in line6_midi_transmit (Artem Egorkine) - ALSA: line6: correct midi status byte when receiving data from podxt (Artem Egorkine) - ovl: Use ovl mounter's fsuid and fsgid in ovl_link() (Zhang Tianci) - hfsplus: fix bug causing custom uid and gid being unable to be assigned with mount (Aditya Garg) - HID: plantronics: Additional PIDs for double volume key presses quirk (Terry Junge) - HID: multitouch: fix Asus ExpertBook P2 P2451FA trackpoint (Jose Exposito) - powerpc/rtas: avoid scheduling in rtas_os_term() (Nathan Lynch) - powerpc/rtas: avoid device tree lookups in rtas_os_term() (Nathan Lynch) - objtool: Fix SEGFAULT (Christophe Leroy) - nvme: fix the NVME_CMD_EFFECTS_CSE_MASK definition (Christoph Hellwig) - ata: ahci: Fix PCS quirk application for suspend (Adam Vodopjan) - nvme-pci: fix doorbell buffer value endianness (Klaus Jensen) - cifs: fix oops during encryption (Paulo Alcantara) - media: dvbdev: fix refcnt bug (Lin Ma) [Orabug: 34983295] {CVE-2022-45885} {CVE-2022-45887} {CVE-2022-45886} {CVE-2022-45919} {CVE-2022-45884} - media: dvbdev: fix build warning due to comments (Lin Ma) - gcov: add support for checksum field (Rickard x Andersson) - regulator: core: fix deadlock on regulator enable (Johan Hovold) - iio: adc128s052: add proper .data members in adc128_of_match table (Rasmus Villemoes) - iio: adc: ad_sigma_delta: do not use internal iio_dev lock (Nuno Sa) - reiserfs: Add missing calls to reiserfs_security_free() (Roberto Sassu) - HID: wacom: Ensure bootloader PID is usable in hidraw mode (Jason Gerecke) - usb: dwc3: core: defer probe on ulpi_read_id timeout (Ferry Toth) - ALSA: hda/hdmi: Add HP Device 0x8711 to force connect list (Jiao Zhou) - ALSA: hda/realtek: Add quirk for Lenovo TianYi510Pro-14IOB (Edward Pacman) - pstore: Make sure CONFIG_PSTORE_PMSG selects CONFIG_RT_MUTEXES (John Stultz) - pstore: Switch pmsg_lock to an rt_mutex to avoid priority inversion (John Stultz) - ASoC: rt5670: Remove unbalanced pm_runtime_put() (Hans de Goede) - ASoC: rockchip: spdif: Add missing clk_disable_unprepare() in rk_spdif_runtime_resume() (Wang Jingjin) - ASoC: wm8994: Fix potential deadlock (Marek Szyprowski) - ASoC: rockchip: pdm: Add missing clk_disable_unprepare() in rockchip_pdm_runtime_resume() (Wang Jingjin) - ASoC: audio-graph-card: fix refcount leak of cpu_ep in __graph_for_each_link() (Wang Yufen) - ASoC: mediatek: mt8173-rt5650-rt5514: fix refcount leak in mt8173_rt5650_rt5514_dev_probe() (Wang Yufen) - ASoC: Intel: Skylake: Fix driver hang during shutdown (Cezary Rojewski) - ALSA: hda: add snd_hdac_stop_streams() helper (Pierre-Louis Bossart) - ALSA/ASoC: hda: move/rename snd_hdac_ext_stop_streams to hdac_stream.c (Pierre-Louis Bossart) - orangefs: Fix kmemleak in orangefs_{kernel,client}_debug_init() (Zhang Xiaoxu) - orangefs: Fix kmemleak in orangefs_prepare_debugfs_help_string() (Zhang Xiaoxu) - drm/sti: Fix return type of sti_{dvo,hda,hdmi}_connector_mode_valid() (Nathan Chancellor) - drm/fsl-dcu: Fix return type of fsl_dcu_drm_connector_mode_valid() (Nathan Chancellor) - hugetlbfs: fix null-ptr-deref in hugetlbfs_parse_param() (Hawkins Jiawei) - clk: st: Fix memory leak in st_of_quadfs_setup() (Xiu Jianfeng) - media: si470x: Fix use-after-free in si470x_int_in_callback() (Shigeru Yoshida) - mmc: f-sdh30: Add quirks for broken timeout clock capability (Kunihiko Hayashi) - regulator: core: fix use_count leakage when handling boot-on (Rui Zhang) - blk-mq: fix possible memleak when register 'hctx' failed (Ye Bin) - media: dvb-usb: fix memory leak in dvb_usb_adapter_init() (Mazin Al Haddad) - media: dvbdev: adopts refcnt to avoid UAF (Lin Ma) [Orabug: 34983295] {CVE-2022-45887} {CVE-2022-45884} {CVE-2022-45886} {CVE-2022-45919} {CVE-2022-45885} - media: dvb-frontends: fix leak of memory fw (Yan Lei) - bpf: Prevent decl_tag from being referenced in func_proto arg (Stanislav Fomichev) - ppp: associate skb with a device at tx (Stanislav Fomichev) - mrp: introduce active flags to prevent UAF when applicant uninit (Schspa Shi) - net: add atomic_long_t to net_device_stats fields (Eric Dumazet) - md/raid1: stop mdx_raid1 thread when raid1 array run failed (Jiang Li) - drivers/md/md-bitmap: check the return value of md_bitmap_get_counter() (Li Zhong) - drm/sti: Use drm_mode_copy() (Ville Syrjala) - drm/rockchip: Use drm_mode_copy() (Ville Syrjala) - s390/lcs: Fix return type of lcs_start_xmit() (Nathan Chancellor) - s390/netiucv: Fix return type of netiucv_tx() (Nathan Chancellor) - s390/ctcm: Fix return type of ctc{mp,}m_tx() (Nathan Chancellor) - igb: Do not free q_vector unless new one was allocated (Kees Cook) - wifi: brcmfmac: Fix potential shift-out-of-bounds in brcmf_fw_alloc_request() (Minsuk Kang) - hamradio: baycom_epp: Fix return type of baycom_send_packet() (Nathan Chancellor) - net: ethernet: ti: Fix return type of netcp_ndo_start_xmit() (Nathan Chancellor) - bpf: make sure skb->len != 0 when redirecting to a tunneling device (Stanislav Fomichev) - ipmi: fix memleak when unload ipmi driver (Zhang Yuchen) - ASoC: codecs: rt298: Add quirk for KBL-R RVP platform (Amadeusz Stawinski) - wifi: ar5523: Fix use-after-free on ar5523_cmd() timed out (Shigeru Yoshida) - wifi: ath9k: verify the expected usb_endpoints are present (Fedor Pchelkin) - brcmfmac: return error when getting invalid max_flowrings from dongle (Wright Feng) - drm/etnaviv: add missing quirks for GC300 (Doug Brown) - hfs: fix OOB Read in __hfs_brec_find (ZhangPeng) - acct: fix potential integer overflow in encode_comp_t() (Zheng Yejian) - nilfs2: fix shift-out-of-bounds/overflow in nilfs_sb2_bad_offset() (Ryusuke Konishi) - ACPICA: Fix error code path in acpi_ds_call_control_method() (Rafael J. Wysocki) - fs: jfs: fix shift-out-of-bounds in dbDiscardAG (Hoi Pok Wu) - udf: Avoid double brelse() in udf_rename() (Shigeru Yoshida) - fs: jfs: fix shift-out-of-bounds in dbAllocAG (Dongliang Mu) - binfmt_misc: fix shift-out-of-bounds in check_special_flags (Liu Shixin) - rcu: Fix __this_cpu_read() lockdep warning in rcu_force_quiescent_state() (Zqiang) - net: stream: purge sk_error_queue in sk_stream_kill_queues() (Eric Dumazet) - myri10ge: Fix an error handling path in myri10ge_probe() (Christophe JAILLET) - rxrpc: Fix missing unlock in rxrpc_do_sendmsg() (David Howells) - net_sched: reject TCF_EM_SIMPLE case for complex ematch module (Cong Wang) - mailbox: zynq-ipi: fix error handling while device_register() fails (Yang Yingliang) - skbuff: Account for tail adjustment during pull operations (Subash Abhinov Kasiviswanathan) - openvswitch: Fix flow lookup to use unmasked key (Eelco Chaudron) - rtc: mxc_v2: Add missing clk_disable_unprepare() (GUO Zihua) - r6040: Fix kmemleak in probe and remove (Li Zetao) - nfc: pn533: Clear nfc_target before being used (Minsuk Kang) - mISDN: hfcmulti: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - mISDN: hfcpci: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - mISDN: hfcsusb: don't call dev_kfree_skb/kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure (Dan Aloni) - NFSD: Add tracepoints to NFSD's duplicate reply cache (Chuck Lever) - nfsd: Define the file access mode enum for tracing (Trond Myklebust) - rtc: pic32: Move devm_rtc_allocate_device earlier in pic32_rtc_probe() (Gaosheng Cui) - rtc: st-lpc: Add missing clk_disable_unprepare in st_rtc_probe() (Gaosheng Cui) - remoteproc: qcom_q6v5_pas: Fix missing of_node_put() in adsp_alloc_memory_region() (Yuan Can) - remoteproc: sysmon: fix memory leak in qcom_add_sysmon_subdev() (Gaosheng Cui) - pwm: sifive: Call pwm_sifive_update_clock() while mutex is held (Uwe Kleine-Konig) - selftests/powerpc: Fix resource leaks (Miaoqian Lin) - powerpc/hv-gpci: Fix hv_gpci event list (Kajol Jain) - powerpc/83xx/mpc832x_rdb: call platform_device_put() in error case in of_fsl_spi_probe() (Yang Yingliang) - powerpc/perf: callchain validate kernel stack pointer bounds (Nicholas Piggin) - powerpc/xive: add missing iounmap() in error path in xive_spapr_populate_irq_data() (Yang Yingliang) - cxl: Fix refcount leak in cxl_calc_capp_routing (Miaoqian Lin) - powerpc/52xx: Fix a resource leak in an error handling path (Christophe JAILLET) - macintosh/macio-adb: check the return value of ioremap() (Xie Shaowen) - macintosh: fix possible memory leak in macio_add_one_device() (Yang Yingliang) - iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() (Yuan Can) - iommu/amd: Fix pci device refcount leak in ppr_notifier() (Yang Yingliang) - rtc: pcf85063: Fix reading alarm (Alexander Stein) - rtc: snvs: Allow a time difference on clock register read (Stefan Eichenberger) - include/uapi/linux/swab: Fix potentially missing __always_inline (Matt Redfearn) - RDMA/siw: Fix pointer cast warning (Arnd Bergmann) - power: supply: fix null pointer dereferencing in power_supply_get_battery_info (ruanjinjie) - HSI: omap_ssi_core: Fix error handling in ssi_init() (Yuan Can) - perf symbol: correction while adjusting symbol (Ajay Kaher) - perf trace: Handle failure when trace point folder is missed (Leo Yan) - perf trace: Use macro RAW_SYSCALL_ARGS_NUM to replace number (Leo Yan) - perf trace: Add a strtoul() method to 'struct syscall_arg_fmt' (Arnaldo Carvalho de Melo) - perf trace: Allow associating scnprintf routines with well known arg names (Arnaldo Carvalho de Melo) - perf trace: Add the syscall_arg_fmt pointer to syscall_arg (Arnaldo Carvalho de Melo) - perf trace: Factor out the initialization of syscal_arg_fmt->scnprintf (Arnaldo Carvalho de Melo) - perf trace: Separate 'struct syscall_fmt' definition from syscall_fmts variable (Arnaldo Carvalho de Melo) - perf trace: Return error if a system call doesn't exist (Leo Yan) - power: supply: fix residue sysfs file in error handle route of __power_supply_register() (Zeng Heng) - HSI: omap_ssi_core: fix possible memory leak in ssi_probe() (Yang Yingliang) - HSI: omap_ssi_core: fix unbalanced pm_runtime_disable() (Yang Yingliang) - fbdev: uvesafb: Fixes an error handling path in uvesafb_probe() (Christophe JAILLET) - fbdev: vermilion: decrease reference count in error path (Xiongfeng Wang) - fbdev: via: Fix error in via_core_init() (Shang XiaoJing) - fbdev: pm2fb: fix missing pci_disable_device() (Yang Yingliang) - fbdev: ssd1307fb: Drop optional dependency (Andy Shevchenko) - samples: vfio-mdev: Fix missing pci_disable_device() in mdpy_fb_probe() (Shang XiaoJing) - tracing/hist: Fix issue of losting command info in error_log (Zheng Yejian) - usb: storage: Add check for kcalloc (Jiasheng Jiang) - i2c: ismt: Fix an out-of-bounds bug in ismt_access() (Zheyu Ma) [Orabug: 34555527] {CVE-2022-2873} - vme: Fix error not catched in fake_init() (Chen Zhongjin) - staging: rtl8192e: Fix potential use-after-free in rtllib_rx_Monitor() (YueHaibing) - staging: rtl8192u: Fix use after free in ieee80211_rx() (Dan Carpenter) - i2c: pxa-pci: fix missing pci_disable_device() on error in ce4100_i2c_probe (Hui Tang) - chardev: fix error handling in cdev_device_add() (Yang Yingliang) - mcb: mcb-parse: fix error handing in chameleon_parse_gdd() (Yang Yingliang) - drivers: mcb: fix resource leak in mcb_probe() (Zhengchao Shao) - usb: gadget: f_hid: fix refcount leak on error path (John Keeping) - usb: gadget: f_hid: fix f_hidg lifetime vs cdev (John Keeping) - usb: gadget: f_hid: optional SETUP/SET_REPORT mode (Maxim Devaev) - usb: roles: fix of node refcount leak in usb_role_switch_is_parent() (Yang Yingliang) - counter: stm32-lptimer-cnt: fix the check on arr and cmp registers update (Fabrice Gasnier) - cxl: fix possible null-ptr-deref in cxl_pci_init_afu|adapter() (Yang Yingliang) - cxl: fix possible null-ptr-deref in cxl_guest_init_afu|adapter() (Yang Yingliang) - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os (Zheng Wang) - misc: tifm: fix possible memory leak in tifm_7xx1_switch_media() (ruanjinjie) - misc: ocxl: fix possible name leak in ocxl_file_register_afu() (Yang Yingliang) - test_firmware: fix memory leak in test_firmware_init() (Zhengchao Shao) - serial: sunsab: Fix error handling in sunsab_init() (Yuan Can) - serial: altera_uart: fix locking in polling mode (Gabriel Somlo) - tty: serial: altera_uart_{r,t}x_chars() need only uart_port (Jiri Slaby) - tty: serial: clean up stop-tx part in altera_uart_tx_chars() (Jiri Slaby) - serial: pch: Fix PCI device refcount leak in pch_request_dma() (Xiongfeng Wang) - serial: pl011: Do not clear RX FIFO & RX interrupt in unthrottle. (delisun) - serial: amba-pl011: avoid SBSA UART accessing DMACR register (Jiamei Xie) - usb: typec: tcpci: fix of node refcount leak in tcpci_register_port() (Yang Yingliang) - usb: typec: Check for ops->exit instead of ops->enter in altmode_exit (Sven Peter) - staging: vme_user: Fix possible UAF in tsi148_dma_list_add (Gaosheng Cui) - usb: fotg210-udc: Fix ages old endianness issues (Linus Walleij) - uio: uio_dmem_genirq: Fix deadlock between irq config and handling (Rafael Mendonca) - uio: uio_dmem_genirq: Fix missing unlock in irq configuration (Rafael Mendonca) - vfio: platform: Do not pass return buffer to ACPI _RST method (Rafael Mendonca) - class: fix possible memory leak in __class_register() (Yang Yingliang) - serial: tegra: Read DMA status before terminating (Kartik) - tty: serial: tegra: Activate RX DMA transfer by request (Dmitry Osipenko) - drivers: dio: fix possible memory leak in dio_init() (Yang Yingliang) - IB/IPoIB: Fix queue count inconsistency for PKEY child interfaces (Dragos Tatulea) - hwrng: geode - Fix PCI device refcount leak (Xiongfeng Wang) - hwrng: amd - Fix PCI device refcount leak (Xiongfeng Wang) - crypto: img-hash - Fix variable dereferenced before check 'hdev->req' (Gaosheng Cui) - orangefs: Fix sysfs not cleanup when dev init failed (Zhang Xiaoxu) - RDMA/hfi1: Fix error return code in parse_platform_config() (Wang Yufen) - crypto: omap-sham - Use pm_runtime_resume_and_get() in omap_sham_probe() (Shang XiaoJing) - f2fs: avoid victim selection from previous victim section (Yonggil Song) - RDMA/nldev: Add checks for nla_nest_start() in fill_stat_counter_qps() (Yuan Can) - scsi: snic: Fix possible UAF in snic_tgt_create() (Gaosheng Cui) - scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails (Chen Zhongjin) - scsi: ipr: Fix WARNING in ipr_init() (Shang XiaoJing) - scsi: fcoe: Fix possible name leak when device_register() fails (Yang Yingliang) - scsi: hpsa: Fix possible memory leak in hpsa_add_sas_device() (Yang Yingliang) - scsi: hpsa: Fix error handling in hpsa_add_sas_host() (Yang Yingliang) - scsi: mpt3sas: Fix possible resource leaks in mpt3sas_transport_port_add() (Yang Yingliang) - crypto: tcrypt - Fix multibuffer skcipher speed test mem leak (Zhang Yiqun) - scsi: hpsa: Fix possible memory leak in hpsa_init_one() (Yuan Can) - RDMA/rxe: Fix NULL-ptr-deref in rxe_qp_do_cleanup() when socket create failed (Zhang Xiaoxu) - crypto: ccree - Make cc_debugfs_global_fini() available for module init function (Uwe Kleine-Konig) - RDMA/hfi: Decrease PCI device reference count in error path (Xiongfeng Wang) - PCI: Check for alloc failure in pci_request_irq() (Zeng Heng) - crypto: ccree - Remove debugfs when platform_driver_register failed (Gaosheng Cui) - crypto: ccree - swap SHA384 and SHA512 larval hashes at build time (Geert Uytterhoeven) - scsi: scsi_debug: Fix a warning in resp_write_scat() (Harshit Mogalapalli) - RDMA/siw: Set defined status for work completion with undefined status (Bernard Metzler) - RDMA/nldev: Return '-EAGAIN' if the cm_id isn't from expected port (Mark Zhang) - RDMA/siw: Fix immediate work request flush to completion queue (Bernard Metzler) - f2fs: fix normal discard process (Dongdong Zhang) - RDMA/core: Fix order of nldev_exit call (Leon Romanovsky) - apparmor: Use pointer to struct aa_label for lbs_cred (Xiu Jianfeng) - apparmor: Fix abi check to include v8 abi (John Johansen) - apparmor: fix lockdep warning when removing a namespace (John Johansen) - apparmor: fix a memleak in multi_transaction_new() (Gaosheng Cui) - stmmac: fix potential division by 0 (Piergiorgio Beruto) - Bluetooth: RFCOMM: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - Bluetooth: hci_core: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - Bluetooth: hci_bcsp: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - Bluetooth: hci_h5: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - Bluetooth: hci_ll: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - Bluetooth: hci_qca: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - Bluetooth: btusb: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - ntb_netdev: Use dev_kfree_skb_any() in interrupt context (Eric Pilmore) - net: lan9303: Fix read error execution path (Jerry Ray) - can: tcan4x5x: Remove invalid write in clear_interrupts (Markus Schneider-Pargmann) - net: amd-xgbe: Check only the minimum speed for active/passive cables (Tom Lendacky) - net: amd-xgbe: Fix logic around active and passive cables (Tom Lendacky) - net: amd: lance: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - hamradio: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - net: ethernet: dnet: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - net: emaclite: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - net: apple: bmac: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - net: apple: mace: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - net/tunnel: wait until all sk_user_data reader finish before releasing the sock (Hangbin Liu) - net: farsync: Fix kmemleak when rmmods farsync (Li Zetao) - ethernet: s2io: don't call dev_kfree_skb() under spin_lock_irqsave() (Yang Yingliang) - of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop() (ruanjinjie) - drivers: net: qlcnic: Fix potential memory leak in qlcnic_sriov_init() (Yuan Can) - net: stmmac: selftests: fix potential memleak in stmmac_test_arpoffload() (Zhang Changzhong) - net: defxx: Fix missing err handling in dfx_init() (Yongqiang Liu) - net: vmw_vsock: vmci: Check memcpy_from_msg() (Artem Chernyshev) - clk: socfpga: Fix memory leak in socfpga_gate_init() (Xiu Jianfeng) - clk: socfpga: use clk_hw_register for a5/c5 (Dinh Nguyen) - clk: socfpga: clk-pll: Remove unused variable 'rc' (Lee Jones) - blktrace: Fix output non-blktrace event when blk_classic option enabled (Yang Jihong) - wifi: brcmfmac: Fix error return code in brcmf_sdio_download_firmware() (Wang Yufen) - wifi: rtl8xxxu: Add __packed to struct rtl8723bu_c2h (Bitterblue Smith) - spi: spi-gpio: Don't set MOSI as an input if not 3WIRE mode (Kris Bahnsen) - clk: samsung: Fix memory leak in _samsung_clk_register_pll() (Xiu Jianfeng) - media: coda: Add check for kmalloc (Jiasheng Jiang) - media: coda: Add check for dcoda_iram_alloc (Jiasheng Jiang) - media: c8sectpfe: Add of_node_put() when breaking out of loop (Liang He) - mmc: mmci: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: wbsd: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: via-sdmmc: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: meson-gx: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: omap_hsmmc: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: atmel-mci: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: wmt-sdmmc: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: vub300: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: toshsd: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: rtsx_usb_sdmmc: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: pxamci: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: mxcmmc: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: moxart: fix return value check of mmc_add_host() (Yang Yingliang) - mmc: alcor: fix return value check of mmc_add_host() (Yang Yingliang) - NFSv4.x: Fail client initialisation if state manager thread can't run (Trond Myklebust) - SUNRPC: Fix missing release socket in rpc_sockname() (Wang ShaoBo) - xprtrdma: Fix regbuf data not freed in rpcrdma_req_create() (Zhang Xiaoxu) - ALSA: mts64: fix possible null-ptr-defer in snd_mts64_interrupt (Gaosheng Cui) - media: saa7164: fix missing pci_disable_device() (Liu Shixin) - bpf, sockmap: fix race in sock_map_free() (Eric Dumazet) - regulator: core: fix resource leak in regulator_register() (Yang Yingliang) - configfs: fix possible memory leak in configfs_create_dir() (Chen Zhongjin) - hsr: Avoid double remove of a node. (Sebastian Andrzej Siewior) - clk: qcom: clk-krait: fix wrong div2 functions (Christian Marangi) - regulator: core: fix module refcount leak in set_supply() (Yang Yingliang) - wifi: cfg80211: Fix not unregister reg_pdev when load_builtin_regdb_keys() fails (Chen Zhongjin) - spi: spidev: mask SPI_CS_HIGH in SPI_IOC_RD_MODE (Alexander Sverdlin) - bonding: uninitialized variable in bond_miimon_inspect() (Dan Carpenter) - bpf, sockmap: Fix data loss caused by using apply_bytes on ingress redirect (Pengcheng Yang) - bpf, sockmap: Fix repeated calls to sock_put() when msg has more_data (Pengcheng Yang) - netfilter: conntrack: set icmpv6 redirects as RELATED (Florian Westphal) - ASoC: pcm512x: Fix PM disable depth imbalance in pcm512x_probe (Zhang Qilong) - drm/amdgpu: Fix PCI device refcount leak in amdgpu_atrm_get_bios() (Xiongfeng Wang) - drm/radeon: Fix PCI device refcount leak in radeon_atrm_get_bios() (Xiongfeng Wang) - ASoC: mediatek: mt8173: Enable IRQ when pdata is ready (Ricardo Ribalda) - wifi: iwlwifi: mvm: fix double free on tx path. (Ben Greear) - ALSA: asihpi: fix missing pci_disable_device() (Liu Shixin) - NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn (Trond Myklebust) - NFSv4.2: Fix initialisation of struct nfs4_label (Trond Myklebust) - NFSv4.2: Fix a memory stomp in decode_attr_security_label (Trond Myklebust) - NFSv4.2: Clear FATTR4_WORD2_SECURITY_LABEL when done decoding (Trond Myklebust) - ASoC: mediatek: mtk-btcvsd: Add checks for write and read of mtk_btcvsd_snd (Jiasheng Jiang) - ASoC: dt-bindings: wcd9335: fix reset line polarity in example (Dmitry Torokhov) - drm/tegra: Add missing clk_disable_unprepare() in tegra_dc_probe() (Zhang Zekun) - media: s5p-mfc: Add variant data for MFC v7 hardware for Exynos 3250 SoC (Aakarsh Jain) - media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() (Baisong Zhong) - media: dvb-core: Fix ignored return value in dvb_register_frontend() (Chen Zhongjin) - pinctrl: pinconf-generic: add missing of_node_put() (ZhangPeng) - clk: imx: replace osc_hdmi with dummy (Dario Binacchi) - clk: imx8mn: correct the usb1_ctrl parent to be usb_bus (Li Jun) - media: imon: fix a race condition in send_packet() (Gautam Menghani) - mtd: maps: pxa2xx-flash: fix memory leak in probe (Zheng Yongjun) - bonding: fix link recovery in mode 2 when updelay is nonzero (Jonathan Toppins) - bonding: Rename slave_arr to usable_slaves (Maor Gottlieb) - bonding: Export skip slave logic to function (Maor Gottlieb) - clk: rockchip: Fix memory leak in rockchip_clk_register_pll() (Xiu Jianfeng) - regulator: core: use kfree_const() to free space conditionally (Wang ShaoBo) - ALSA: seq: fix undefined behavior in bit shift for SNDRV_SEQ_FILTER_USE_EVENT (Baisong Zhong) - ALSA: pcm: fix undefined behavior in bit shift for SNDRV_PCM_RATE_KNOT (Baisong Zhong) - HID: hid-sensor-custom: set fixed size for custom attributes (Marcus Folkesson) - bpf: Move skb->len == 0 checks into __bpf_redirect (Stanislav Fomichev) - media: videobuf-dma-contig: use dma_mmap_coherent (Christoph Hellwig) - media: platform: exynos4-is: Fix error handling in fimc_md_init() (Yuan Can) - media: solo6x10: fix possible memory leak in solo_sysfs_init() (Yang Yingliang) - Input: elants_i2c - properly handle the reset GPIO when power is off (Douglas Anderson) - mtd: lpddr2_nvm: Fix possible null-ptr-deref (Hui Tang) - wifi: ath10k: Fix return value in ath10k_pci_init() (Xiu Jianfeng) - ima: Fix misuse of dereference of pointer in template_desc_init_fields() (Xiu Jianfeng) - integrity: Fix memory leakage in keyring allocation error path (GUO Zihua) - amdgpu/pm: prevent array underflow in vega20_odn_edit_dpm_table() (Dan Carpenter) - regulator: core: fix unbalanced of node refcount in regulator_dev_lookup() (Yang Yingliang) - ASoC: pxa: fix null-pointer dereference in filter() (Zeng Heng) - drm/mediatek: Modify dpi power on/off sequence. (Xinlei Lee) - drm/radeon: Add the missed acpi_put_table() to fix memory leak (Hanjun Guo) - rxrpc: Fix ack.bufferSize to be 0 when generating an ack (David Howells) - net, proc: Provide PROC_FS=n fallback for proc_create_net_single_write() (David Howells) - media: camss: Clean up received buffers on failed start of streaming (Vladimir Zapolskiy) - wifi: rsi: Fix handling of 802.3 EAPOL frames sent via control port (Marek Vasut) - mtd: Fix device name leak when register device failed in add_mtd_device() (Zhang Xiaoxu) - bpf: propagate precision in ALU/ALU64 operations (Andrii Nakryiko) - media: vivid: fix compose size exceed boundary (Liu Shixin) - ima: Handle -ESTALE returned by ima_filter_rule_match() (GUO Zihua) - ima: Fix fall-through warnings for Clang (Gustavo A. R. Silva) - ima: Rename internal filter rule functions (Tyler Hicks) - drm/panel/panel-sitronix-st7701: Remove panel on DSI attach failure (Marek Vasut) - spi: Update reference to struct spi_controller (Jonathan Neuschafer) - clk: renesas: r9a06g032: Repair grave increment error (Marek Vasut) - can: kvaser_usb: Compare requested bittiming parameters with actual parameters in do_set_{,data}_bittiming (Jimmy Assarsson) - can: kvaser_usb: Add struct kvaser_usb_busparams (Jimmy Assarsson) - can: kvaser_usb_leaf: Fix bogus restart events (Anssi Hannula) - can: kvaser_usb_leaf: Fix wrong CAN state after stopping (Anssi Hannula) - can: kvaser_usb_leaf: Fix improved state not being reported (Anssi Hannula) - can: kvaser_usb_leaf: Set Warning state even without bus errors (Anssi Hannula) - can: kvaser_usb: kvaser_usb_leaf: Handle CMD_ERROR_EVENT (Jimmy Assarsson) - can: kvaser_usb: kvaser_usb_leaf: Rename {leaf,usbcan}_cmd_error_event to {leaf,usbcan}_cmd_can_error_event (Jimmy Assarsson) - can: kvaser_usb: kvaser_usb_leaf: Get capabilities from device (Jimmy Assarsson) - can: kvaser_usb: do not increase tx statistics when sending error message frames (Vincent Mailhol) - media: i2c: ad5820: Fix error path (Ricardo Ribalda) - pata_ipx4xx_cf: Fix unsigned comparison with less than zero (Junlin Yang) - wifi: rtl8xxxu: Fix reading the vendor of combo chips (Bitterblue Smith) - wifi: ath9k: hif_usb: Fix use-after-free in ath9k_hif_usb_reg_in_cb() (Fedor Pchelkin) - wifi: ath9k: hif_usb: fix memory leak of urbs in ath9k_hif_usb_dealloc_tx_urbs() (Fedor Pchelkin) - rapidio: devices: fix missing put_device in mport_cdev_open (Cai Xinchen) - hfs: Fix OOB Write in hfs_asc2mac (ZhangPeng) - relay: fix type mismatch when allocating memory in relay_create_buf() (Gavrilov Ilia) - eventfd: change int to __u64 in eventfd_signal() ifndef CONFIG_EVENTFD (Zhang Qilong) - rapidio: fix possible UAF when kfifo_alloc() fails (Wang Weiyang) - fs: sysv: Fix sysv_nblocks() returns wrong value (Chen Zhongjin) - MIPS: BCM63xx: Add check for NULL for clk in clk_enable (Anastasia Belova) - platform/x86: mxm-wmi: fix memleak in mxm_wmi_call_mx[ds|mx]() (Yu Liao) - PM: runtime: Do not call __rpm_callback() from rpm_idle() (Rafael J. Wysocki) - PM: runtime: Improve path in rpm_idle() when no callback (Ulf Hansson) - xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource() (Harshit Mogalapalli) - x86/xen: Fix memory leak in xen_init_lock_cpu() (Xiu Jianfeng) - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (Xiu Jianfeng) - xen/events: only register debug interrupt for 2-level events (Juergen Gross) - uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix (Oleg Nesterov) - ACPICA: Fix use-after-free in acpi_ut_copy_ipackage_to_ipackage() (Li Zetao) - clocksource/drivers/sh_cmt: Make sure channel clock supply is enabled (Geert Uytterhoeven) - rapidio: rio: fix possible name leak in rio_register_mport() (Yang Yingliang) - rapidio: fix possible name leaks when rio_add_device() fails (Yang Yingliang) - ocfs2: fix memory leak in ocfs2_mount_volume() (Li Zetao) - ocfs2: rewrite error handling of ocfs2_fill_super (Heming Zhao via Ocfs2-devel) - ocfs2: ocfs2_mount_volume does cleanup job before return error (Heming Zhao via Ocfs2-devel) - debugfs: fix error when writing negative value to atomic_t debugfs file (Akinobu Mita) - docs: fault-injection: fix non-working usage of negative values (Wolfram Sang) - lib/notifier-error-inject: fix error when writing -errno to debugfs file (Akinobu Mita) - libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value (Akinobu Mita) - cpufreq: amd_freq_sensitivity: Add missing pci_dev_put() (Xiongfeng Wang) - genirq/irqdesc: Don't try to remove non-existing sysfs files (Yang Yingliang) - nfsd: don't call nfsd_file_put from client states seqfile display (Jeff Layton) - EDAC/i10nm: fix refcount leak in pci_get_dev_wrapper() (Yang Yingliang) - irqchip: gic-pm: Use pm_runtime_resume_and_get() in gic_probe() (Shang XiaoJing) - perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox() (Xiongfeng Wang) - PNP: fix name memory leak in pnp_alloc_dev() (Yang Yingliang) - selftests/efivarfs: Add checking of the test return value (Zhao Gongyi) - MIPS: vpe-cmp: fix possible memory leak while module exiting (Yang Yingliang) - MIPS: vpe-mt: fix possible memory leak while module exiting (Yang Yingliang) - ocfs2: fix memory leak in ocfs2_stack_glue_init() (Shang XiaoJing) - lib/fonts: fix undefined behavior in bit shift for get_default_font (Gaosheng Cui) - proc: fixup uptime selftest (Alexey Dobriyan) - timerqueue: Use rb_entry_safe() in timerqueue_getnext() (Barnabas Pocze) - perf: Fix possible memleak in pmu_dev_alloc() (Chen Zhongjin) - selftests/ftrace: event_triggers: wait longer for test_event_enable (Yipeng Zou) - fs: don't audit the capability check in simple_xattr_list() (Ondrej Mosnacek) - PM: hibernate: Fix mistake in kerneldoc comment (xiongxin) - alpha: fix syscall entry in !AUDUT_SYSCALL case (Al Viro) - cpuidle: dt: Return the correct numbers of parsed idle states (Ulf Hansson) - tpm/tpm_crb: Fix error message in __crb_relinquish_locality() (Michael Kelley) - pstore: Avoid kcore oops by vmap()ing with VM_IOREMAP (Stephen Boyd) - ARM: mmp: fix timer_read delay (Doug Brown) - pstore/ram: Fix error return code in ramoops_probe() (Wang Yufen) - arm64: dts: armada-3720-turris-mox: Add missing interrupt for RTC (Pali Rohar) - ARM: dts: turris-omnia: Add switch port 6 node (Pali Rohar) - ARM: dts: turris-omnia: Add ethernet aliases (Pali Rohar) - ARM: dts: armada-39x: Fix assigned-addresses for every PCIe Root Port (Pali Rohar) - ARM: dts: armada-38x: Fix assigned-addresses for every PCIe Root Port (Pali Rohar) - ARM: dts: armada-375: Fix assigned-addresses for every PCIe Root Port (Pali Rohar) - ARM: dts: armada-xp: Fix assigned-addresses for every PCIe Root Port (Pali Rohar) - ARM: dts: armada-370: Fix assigned-addresses for every PCIe Root Port (Pali Rohar) - ARM: dts: dove: Fix assigned-addresses for every PCIe Root Port (Pali Rohar) - arm64: dts: mediatek: mt6797: Fix 26M oscillator unit name (AngeloGioacchino Del Regno) - arm64: dts: mt2712-evb: Fix usb vbus regulators unit names (AngeloGioacchino Del Regno) - arm64: dts: mt2712-evb: Fix vproc fixed regulators unit names (AngeloGioacchino Del Regno) - arm64: dts: mt2712e: Fix unit address for pinctrl node (AngeloGioacchino Del Regno) - arm64: dts: mt2712e: Fix unit_address_vs_reg warning for oscillators (AngeloGioacchino Del Regno) - perf/smmuv3: Fix hotplug callback leak in arm_smmu_pmu_init() (Shang XiaoJing) - perf: arm_dsu: Fix hotplug callback leak in dsu_pmu_init() (Yuan Can) - soc: ti: smartreflex: Fix PM disable depth imbalance in omap_sr_probe (Zhang Qilong) - soc: ti: knav_qmss_queue: Fix PM disable depth imbalance in knav_queue_probe (Zhang Qilong) - soc: ti: knav_qmss_queue: Use pm_runtime_resume_and_get instead of pm_runtime_get_sync (Minghao Chi) - arm: dts: spear600: Fix clcd interrupt (Kory Maincent) - drivers: soc: ti: knav_qmss_queue: Mark knav_acc_firmwares as static (Chen Jiahao) - arm64: dts: qcom: sdm845-cheza: fix AP suspend pin bias (Krzysztof Kozlowski) - ARM: dts: qcom: apq8064: fix coresight compatible (Luca Weiss) - usb: musb: remove extra check in musb_gadget_vbus_draw (Ivaylo Dimitrov) - net: loopback: use NET_NAME_PREDICTABLE for name_assign_type (Rasmus Villemoes) - Bluetooth: L2CAP: Fix u8 overflow (Sungwoo Kim) [Orabug: 34880795] {CVE-2022-45934} - HID: uclogic: Add HID_QUIRK_HIDINPUT_FORCE quirk (Jose Exposito) - HID: ite: Enable QUIRK_TOUCHPAD_ON_OFF_REPORT on Acer Aspire Switch V 10 (Hans de Goede) - HID: ite: Enable QUIRK_TOUCHPAD_ON_OFF_REPORT on Acer Aspire Switch 10E (Hans de Goede) - HID: ite: Add support for Acer S1002 keyboard-dock (Hans de Goede) - xen-netback: move removal of 'hotplug-status' to the right place (Pratyush Yadav) - igb: Initialize mailbox message for VF reset (Tony Nguyen) - USB: serial: f81534: fix division by zero on line-speed change (Johan Hovold) - USB: serial: f81232: fix division by zero on line-speed change (Johan Hovold) - USB: serial: cp210x: add Kamstrup RF sniffer PIDs (Bruno Thomsen) - USB: serial: option: add Quectel EM05-G modem (Duke Xin) - usb: gadget: uvc: Prevent buffer overflow in setup handler (Szymon Heidrich) - udf: Fix extending file within last block (Jan Kara) - udf: Do not bother looking for prealloc extents if i_lenExtents matches i_size (Jan Kara) - udf: Fix preallocation discarding at indirect extent boundary (Jan Kara) - udf: Discard preallocation before extending file with a hole (Jan Kara) [5.4.17-2136.317.2] - scsi: megaraid_sas: Skip syncing the RAID map on older controllers (Martin K. Petersen) [Orabug: 35028426] - IB/core: Make GID table entry (gid_idx) available immediately (Konrad Rzeszutek Wilk) [Orabug: 35015837] - iommu/amd: Disable AVIC on certain systems BIOS (Joao Martins) [Orabug: 35018581] - Ignore hot plug events when force powering off a device (James Puthukattukaran) [Orabug: 34987846] - rds: ib: Make sure messages that errors out also get unmapped (Hakon Bugge) [Orabug: 35011421] - block/diskstats: replace time_in_queue with sum of request times (Junxiao Bi) [Orabug: 35018652] - net/rds: Split send & receive vectors again (Gerd Rausch) [Orabug: 35033037] - net/rds: Bring tasklets back for better latency (Gerd Rausch) [Orabug: 35032961] - net/rds: Throttle check for CQ CPU affinity (Gerd Rausch) [Orabug: 35032961] - net/rds: Follow the observed CQ CPU affinity (Gerd Rausch) [Orabug: 35032961] - net/rds: Add 'preferred_cpu' option to 'rds_rdma.ko' (Gerd Rausch) [Orabug: 35032961] - net/mlx5: Add new verb 'ib_get_vector_irqn' (Gerd Rausch) [Orabug: 35032961] - net/rds: Use the preferred_cpu in rds_queue_{,delayed}_work (Gerd Rausch) [Orabug: 35032961] - net/rds: Make workers use the designated CPU (Gerd Rausch) [Orabug: 35032961] - net/rds: Put more CPU cores to work (Gerd Rausch) [Orabug: 35032961] - net/rds: Get rid of tasklets (Gerd Rausch) [Orabug: 35032961] - net/rds: Use the same vector for send & receive (Gerd Rausch) [Orabug: 35032961] - net/rds: Allocate rds_ib_{incoming,frag}_slab on HCA NUMA nodeid (Gerd Rausch) [Orabug: 35032961] - net/rds: Allocate pages on HCA NUMA nodeid (Gerd Rausch) [Orabug: 35032961] - drivers: base: cacheinfo: export symbol 'get_cpu_cacheinfo' (Gerd Rausch) [Orabug: 35033037] - IB/mlx4: Implement backend callback for 'ib_get_vector_irqn' (Gerd Rausch) [Orabug: 35033030] - net/rds: Do not RESET_ALT_CONN if conn drops with DR_IB_DISCONNECTED_EVENT (Sharath Srinivasan) [Orabug: 35033028] - rds: ib: Keep IB MRs on clean_list unless we are tearing down the pool (Hakon Bugge) [Orabug: 35033023] - rds: ib: Add FRWR related statistics counters (Hakon Bugge) [Orabug: 35033023] - KVM: SVM: Add a module parameter to override iommu AVIC usage (Joao Martins) [Orabug: 35033011] - iommu/amd: Don't block updates to GATag if guest mode is already on (Joao Martins) [Orabug: 35033011] - xfs: don't reuse busy extents on extent trim (Brian Foster) [Orabug: 34944365] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-23454 CVE-2023-23455 CVE-2022-45934 CVE-2022-47929 CVE-2022-41218 CVE-2022-45887 CVE-2022-45886 CVE-2022-45884 CVE-2022-45885 CVE-2022-45919 CVE-2022-2873 CVE-2023-0394 Oracle Linux 7 [1:1.0.2k-26] - Fixes CVE-2023-0286 X.400 address type confusion in X.509 GeneralName - Resolves: rhbz#2176790 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-0286 Oracle Linux 8 [1:1.1.1k-9] - Fixed Timing Oracle in RSA Decryption Resolves: CVE-2022-4304 - Fixed Double free after calling PEM_read_bio_ex Resolves: CVE-2022-4450 - Fixed Use-after-free following BIO_new_NDEF Resolves: CVE-2023-0215 - Fixed X.400 address type confusion in X.509 GeneralName Resolves: CVE-2023-0286 [1:1.1.1k-8] - Fix no-ec build Resolves: rhbz#2071020 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-0286 CVE-2023-0215 CVE-2022-4304 CVE-2022-4450 Oracle Linux 8 Oracle Linux 9 [5.15.0-100.96.32] - crypto: Report fips module name and version for aarch64 (Saeed Mirzamohammadi) [Orabug: 35225251] - uek-rpm: Enable RFC7919 config for aarch64 (Saeed Mirzamohammadi) [Orabug: 35225251] [5.15.0-100.96.31] - uek-rpm: Update linux-firmware dependency (Somasundaram Krishnasamy) [Orabug: 35213423] - block: bio-integrity: Copy flags when bio_integrity_payload is cloned (Martin K. Petersen) [Orabug: 35209013] - scsi: qla2xxx: Synchronize the IOCB count to be in order (Quinn Tran) [Orabug: 35209013] - scsi: qla2xxx: Perform lockless command completion in abort path (Nilesh Javali) [Orabug: 35209013] [5.15.0-100.96.30] - perf/x86/uncore: Don't WARN_ON_ONCE() for a broken discovery table (Kan Liang) [Orabug: 35151818] - perf/x86/uncore: Add a quirk for UPI on SPR (Kan Liang) [Orabug: 35151818] - perf/x86/uncore: Ignore broken units in discovery table (Kan Liang) [Orabug: 35151818] - perf/x86/uncore: Fix potential NULL pointer in uncore_get_alias_name (Kan Liang) [Orabug: 35151818] - perf/x86/uncore: Factor out uncore_device_to_die() (Kan Liang) [Orabug: 35151818] - Revert 'perf/x86/uncore: Factor out uncore_device_to_die()' (Thomas Tai) [Orabug: 35151818] - Revert 'perf/x86/uncore: Fix potential NULL pointer in uncore_get_alias_name' (Thomas Tai) [Orabug: 35151818] - Revert 'perf/x86/uncore: Ignore broken units in discovery table' (Thomas Tai) [Orabug: 35151818] - Revert 'perf/x86/uncore: Add a quirk for UPI on SPR' (Thomas Tai) [Orabug: 35151818] - Revert 'perf/x86/uncore: Don't WARN_ON_ONCE() for a broken discovery table' (Thomas Tai) [Orabug: 35151818] - ionic: remove unnecessary void casts (Shannon Nelson) [Orabug: 35166570] - ionic: remove unnecessary indirection (Shannon Nelson) [Orabug: 35166570] - ionic: missed doorbell workaround (Allen Hubbe) [Orabug: 35166570] - ionic: refactor use of ionic_rx_fill() (Neel Patel) [Orabug: 35166570] - ionic: enable tunnel offloads (Neel Patel) [Orabug: 35166570] - ionic: new ionic device identity level and VF start control (Shannon Nelson) [Orabug: 35166570] - ionic: only save the user set VF attributes (Shannon Nelson) [Orabug: 35166570] - ionic: replay VF attributes after fw crash recovery (Shannon Nelson) [Orabug: 35166570] - ionic: change order of devlink port register and netdev register (Jiri Pirko) [Orabug: 35166570] - ionic: no transition while stopping (Shannon Nelson) [Orabug: 35166570] - ionic: use vmalloc include (Shannon Nelson) [Orabug: 35166570] - ionic: clean up comments and whitespace (Shannon Nelson) [Orabug: 35166570] - ionic: prefer strscpy over strlcpy (Shannon Nelson) [Orabug: 35166570] - ionic: Use vzalloc for large per-queue related buffers (Brett Creeley) [Orabug: 35166570] - ionic: catch transition back to RUNNING with fw_generation 0 (Shannon Nelson) [Orabug: 35166570] - ionic: replace set_vf data with union (Shannon Nelson) [Orabug: 35166570] - ionic: stretch heartbeat detection (Shannon Nelson) [Orabug: 35166570] - ionic: remove the dbid_inuse bitmap (Shannon Nelson) [Orabug: 35166570] - ionic: disable napi when ionic_lif_init() fails (Brett Creeley) [Orabug: 35166570] - ionic: Cleanups in the Tx hotpath code (Brett Creeley) [Orabug: 35166570] - ionic: Prevent filter add/del err msgs when the device is not available (Brett Creeley) [Orabug: 35166570] - ionic: Query FW when getting VF info via ndo_get_vf_config (Brett Creeley) [Orabug: 35166570] - ionic: Allow flexibility for error reporting on dev commands (Brett Creeley) [Orabug: 35166570] - ionic: Correctly print AQ errors if completions aren't received (Brett Creeley) [Orabug: 35166570] - ionic: fix up printing of timeout error (Shannon Nelson) [Orabug: 35166570] - ionic: better handling of RESET event (Shannon Nelson) [Orabug: 35166570] - ionic: add FW_STOPPING state (Shannon Nelson) [Orabug: 35166570] - ionic: separate function for watchdog init (Shannon Nelson) [Orabug: 35166570] - ionic: no devlink_unregister if not registered (Shannon Nelson) [Orabug: 35166570] - ionic: tame the filter no space message (Shannon Nelson) [Orabug: 35166570] - ionic: allow adminq requests to override default error message (Shannon Nelson) [Orabug: 35166570] - ionic: handle vlan id overflow (Shannon Nelson) [Orabug: 35166570] - ionic: generic filter delete (Shannon Nelson) [Orabug: 35166570] - ionic: generic filter add (Shannon Nelson) [Orabug: 35166570] - ionic: add generic filter search (Shannon Nelson) [Orabug: 35166570] - ionic: remove mac overflow flags (Shannon Nelson) [Orabug: 35166570] - ionic: move lif mac address functions (Shannon Nelson) [Orabug: 35166570] - ionic: add filterlist to debugfs (Shannon Nelson) [Orabug: 35166570] - ionic: add lif param to ionic_qcq_disable (Shannon Nelson) [Orabug: 35166570] - ionic: have ionic_qcq_disable decide on sending to hardware (Shannon Nelson) [Orabug: 35166570] - ionic: add polling to adminq wait (Shannon Nelson) [Orabug: 35166570] - ionic: move lif mutex setup and delete (Shannon Nelson) [Orabug: 35166570] - ionic: check for binary values in FW ver string (Shannon Nelson) [Orabug: 35166570] - ionic: remove debug stats (Shannon Nelson) [Orabug: 35166570] - ionic: Move devlink registration to be last devlink command (Leon Romanovsky) [Orabug: 35166570] - crypto: jitter - update max health test failure in FIPS mode (Saeed Mirzamohammadi) [Orabug: 35160891] - mm: use padata for copying page ranges in vma_dup() (Anthony Yznaga) [Orabug: 35054621] - mm: parallelize unmap_page_range() for some large VMAs (Anthony Yznaga) [Orabug: 35054621] - mm: fix VMA_BUG_ON_MM due to mmap_lock not held (Anthony Yznaga) [Orabug: 35054621] - mm: avoid early cow when copying ptes for MADV_DOEXEC (Anthony Yznaga) [Orabug: 35054621] - net/rds: serialize up+down-work to relax strict ordering (Gerd Rausch) [Orabug: 35094721] - nvme-pci: add NVME_QUIRK_BOGUS_NID for Samsung PM1733a (Saeed Mirzamohammadi) [Orabug: 35145945] - nvme-pci: add NVME_QUIRK_BOGUS_NID for Samsung PM173X (Saeed Mirzamohammadi) [Orabug: 35146608] - rds: ib: Fix non-parenthetical mutex/semaphore use (Hakon Bugge) [Orabug: 35155112] - Revert 'btrfs: free device in btrfs_close_devices for a single device filesystem' (Vijayendra Suman) [Orabug: 35161535] [5.15.0-100.96.29] - NFSD: register/unregister of nfsd-client shrinker at nfsd startup/shutdown time (Dai Ngo) [Orabug: 35059907] - NFSD: refactoring courtesy_client_reaper to a generic low memory shrinker (Dai Ngo) [Orabug: 35059907] - NFSD: unregister shrinker when nfsd_init_net() fails (Tetsuo Handa) [Orabug: 35059907] - NFSD: add shrinker to reap courtesy clients on low memory condition (Dai Ngo) [Orabug: 35059907] - NFSD: keep track of the number of courtesy clients in the system (Dai Ngo) [Orabug: 35059907] - crypto: drbg - oversampling of Jitter RNG (Saeed Mirzamohammadi) [Orabug: 35141114] - crypto: tcrypt - KAT for ffdhe* algorithms (Saeed Mirzamohammadi) [Orabug: 35141114] - crypto: jitter - panic on health test failure (Saeed Mirzamohammadi) [Orabug: 35141114] - scsi: qla2xxx: Update version to 10.02.08.100-k (Nilesh Javali) [Orabug: 35007285] - scsi: qla2xxx: Fix IOCB resource check warning (Nilesh Javali) [Orabug: 35007285] - scsi: qla2xxx: Remove increment of interface err cnt (Saurav Kashyap) [Orabug: 35007285] - scsi: qla2xxx: Fix erroneous link down (Quinn Tran) [Orabug: 35007285] - scsi: qla2xxx: Remove unintended flag clearing (Quinn Tran) [Orabug: 35007285] - scsi: qla2xxx: Fix stalled login (Quinn Tran) [Orabug: 35007285] - scsi: qla2xxx: Fix exchange oversubscription for management commands (Quinn Tran) [Orabug: 35007285] - scsi: qla2xxx: Fix exchange oversubscription (Quinn Tran) [Orabug: 35007285] - scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests (Arun Easi) [Orabug: 35007285] - scsi: qla2xxx: Fix link failure in NPIV environment (Quinn Tran) [Orabug: 35007285] - scsi: qla2xxx: Check if port is online before sending ELS (Shreyas Deodhar) [Orabug: 35007285] - scsi: qla2xxx: Initialize vha->unknown_atio_[list, work] for NPIV hosts (Gleb Chesnokov) [Orabug: 35007285] - scsi: qla2xxx: Remove duplicate of vha->iocb_work initialization (Gleb Chesnokov) [Orabug: 35007285] - scsi: qla2xxx: Remove unused variable 'found_devs' (Colin Ian King) [Orabug: 35007285] - scsi: qla2xxx: Fix serialization of DCBX TLV data request (Rafael Mendonca) [Orabug: 35007285] - scsi: qla2xxx: Remove unused declarations for qla2xxx (Gaosheng Cui) [Orabug: 35007285] - scsi: qla2xxx: Fix spelling mistake 'definiton' -> 'definition' (Colin Ian King) [Orabug: 35007285] - scsi: qla2xxx: Drop DID_TARGET_FAILURE use (Mike Christie) [Orabug: 35007285] - ACPI: processor: idle: Disable ACPI C-state probing for xen hvm guest (Joe Jin) [Orabug: 35043629] - uek-rpm: x86_64 enable CONFIG_SLS (Maciej S. Szmigiero) [Orabug: 35073535] - net: qede: Remove unnecessary synchronize_irq() before free_irq() (Minghao Chi) [Orabug: 34901373] - uek-rpm: Disable CONFIG_USB_NET_RNDIS_WLAN (Rhythm Mahajan) [Orabug: 35037701] - certs: Add FIPS selftests (David Howells) [Orabug: 35080500] - certs: Move load_certificate_list() to be with the asymmetric keys code (David Howells) [Orabug: 35080500] - uek-rpm: Enable RFC7919 config (Saeed Mirzamohammadi) [Orabug: 35080500] - Revert 'KVM: x86/xen: Maintain valid mapping of Xen shared_info page' (Vijayendra Suman) [Orabug: 34929435] - Revert 'KVM: x86: Fix wall clock writes in Xen shared_info not to mark page dirty' (Vijayendra Suman) [Orabug: 34929435] - Revert 'crypto: rsa - flag instantiations as FIPS compliant' (Saeed Mirzamohammadi) [Orabug: 35054646] - uek-rpm/config-aarch64: Enable CONFIG_CLK_RASPBERRYPI (Vijay Kumar) [Orabug: 35018498] - vfio/mlx5: Allow loading of larger images than 512 MB (Yishai Hadas) [Orabug: 35027279] - vfio/mlx5: Fix UBSAN note (Yishai Hadas) [Orabug: 35027279] - vfio/mlx5: error pointer dereference in error handling (Dan Carpenter) [Orabug: 35027279] - vfio/mlx5: fix error code in mlx5vf_precopy_ioctl() (Dan Carpenter) [Orabug: 35027279] - vfio/mlx5: Enable MIGRATION_PRE_COPY flag (Shay Drory) [Orabug: 35027279] - vfio/mlx5: Fallback to STOP_COPY upon specific PRE_COPY error (Shay Drory) [Orabug: 35027279] - vfio/mlx5: Introduce multiple loads (Yishai Hadas) [Orabug: 35027279] - vfio/mlx5: Consider temporary end of stream as part of PRE_COPY (Yishai Hadas) [Orabug: 35027279] - vfio/mlx5: Introduce vfio precopy ioctl implementation (Yishai Hadas) [Orabug: 35027279] - vfio/mlx5: Introduce SW headers for migration states (Yishai Hadas) [Orabug: 35027279] - vfio/mlx5: Introduce device transitions of PRE_COPY (Yishai Hadas) [Orabug: 35027279] - vfio/mlx5: Refactor to use queue based data chunks (Yishai Hadas) [Orabug: 35027279] - vfio/mlx5: Refactor migration file state (Yishai Hadas) [Orabug: 35027279] - vfio/mlx5: Refactor MKEY usage (Yishai Hadas) [Orabug: 35027279] - vfio/mlx5: Refactor PD usage (Yishai Hadas) [Orabug: 35027279] - vfio/mlx5: Enforce a single SAVE command at a time (Yishai Hadas) [Orabug: 35027279] - vfio: Extend the device migration protocol with PRE_COPY (Jason Gunthorpe) [Orabug: 35027279] - net/mlx5: Introduce ifc bits for pre_copy (Shay Drory) [Orabug: 35027279] - net/mlx5: Add the log_min_mkey_entity_size capability (Maxim Mikityanskiy) [Orabug: 35027279] - vfio/iova_bitmap: refactor iova_bitmap_set() to better handle page boundaries (Joao Martins) [Orabug: 35027279] - vfio/mlx5: Fix a typo in mlx5vf_cmd_load_vhca_state() (Yishai Hadas) [Orabug: 35027279] - vfio: Add an option to get migration data size (Yishai Hadas) [Orabug: 35027279] - vfio/mlx5: Switch to use module_pci_driver() macro (Shang XiaoJing) [Orabug: 35027279] - uek-rpm: core: Move few modules which are recently enabled to core. (Harshit Mogalapalli) [Orabug: 34774213] - tools arch x86: Sync the msr-index.h copy with the kernel sources (Arnaldo Carvalho de Melo) [Orabug: 34977257] - crypto: panic on PCT failure for dh and ecdh (Saeed Mirzamohammadi) [Orabug: 34971139] - uek-rpm: mod-extra: Move modules which are recently enabled to extras (Harshit Mogalapalli) [Orabug: 34774213] - Allow the ima keyring to trust all keys in the machine keyring (Eric Snowberg) [Orabug: 34873856] - Revert 'X.509: Parse Basic Constraints for CA' (Eric Snowberg) [Orabug: 34873856] - Revert 'KEYS: CA link restriction' (Eric Snowberg) [Orabug: 34873856] - Revert 'integrity: restrict INTEGRITY_KEYRING_MACHINE to restrict_link_by_ca' (Eric Snowberg) [Orabug: 34873856] - Revert 'integrity: change ima link restriction to trust the machine keyring' (Eric Snowberg) [Orabug: 34873856] - net/mlx5: Drain fw_reset when removing device (Shay Drory) [Orabug: 34816080] - net/mlx5e: CT: Fix setting flow_source for smfs ct tuples (Paul Blakey) [Orabug: 34816080] - net/mlx5e: CT: Fix support for GRE tuples (Paul Blakey) [Orabug: 34816080] - net/mlx5e: Remove HW-GRO from reported features (Gal Pressman) [Orabug: 34816080] - net/mlx5e: Properly block HW GRO when XDP is enabled (Maxim Mikityanskiy) [Orabug: 34816080] - net/mlx5e: Properly block LRO when XDP is enabled (Maxim Mikityanskiy) [Orabug: 34816080] - net/mlx5e: Block rx-gro-hw feature in switchdev mode (Aya Levin) [Orabug: 34816080] - net/mlx5e: Wrap mlx5e_trap_napi_poll into rcu_read_lock (Maxim Mikityanskiy) [Orabug: 34816080] - net/mlx5: DR, Ignore modify TTL on RX if device doesn't support it (Yevgeny Kliteynik) [Orabug: 34816080] - net/mlx5: Initialize flow steering during driver probe (Shay Drory) [Orabug: 34816080] - mlxsw: Avoid warning during ip6gre device removal (Amit Cohen) [Orabug: 34816080] - net/mlx5: Fix matching on inner TTC (Mark Bloch) [Orabug: 34816080] - net/mlx5e: Avoid checking offload capability in post_parse action (Ariel Levkovich) [Orabug: 34816080] - net/mlx5e: TC, fix decap fallback to uplink when int port not supported (Ariel Levkovich) [Orabug: 34816080] - net/mlx5e: TC, Fix ct_clear overwriting ct action metadata (Ariel Levkovich) [Orabug: 34816080] - net/mlx5e: Fix wrong source vport matching on tunnel rule (Ariel Levkovich) [Orabug: 34816080] - net: Handle l3mdev in ip_tunnel_init_flow (David Ahern) [Orabug: 34816080] - net/mlx5e: Fix build warning, detected write beyond size of field (Saeed Mahameed) [Orabug: 34816080] - net/mlx5e: HTB, remove unused function declaration (Saeed Mahameed) [Orabug: 34816080] - net/mlx5e: Statify function mlx5_cmd_trigger_completions (Tariq Toukan) [Orabug: 34816080] - net/mlx5e: Remove MLX5E_XDP_TX_DS_COUNT (Maxim Mikityanskiy) [Orabug: 34816080] - net/mlx5e: Permit XDP with non-linear legacy RQ (Maxim Mikityanskiy) [Orabug: 34816080] - net/mlx5e: Support multi buffer XDP_TX (Maxim Mikityanskiy) [Orabug: 34816080] - net/mlx5e: Unindent the else-block in mlx5e_xmit_xdp_buff (Maxim Mikityanskiy) [Orabug: 34816080] - net/mlx5e: Implement sending multi buffer XDP frames (Maxim Mikityanskiy) [Orabug: 34816080] - net/mlx5e: Don't prefill WQEs in XDP SQ in the multi buffer mode (Maxim Mikityanskiy) [Orabug: 34816080] - net/mlx5e: Remove assignment of inline_hdr.sz on XDP TX (Maxim Mikityanskiy) [Orabug: 34816080] - net/mlx5e: Move mlx5e_xdpi_fifo_push out of xmit_xdp_frame (Maxim Mikityanskiy) [Orabug: 34816080] - net/mlx5e: Store DMA address inside struct page (Maxim Mikityanskiy) [Orabug: 34816080] - net/mlx5e: Add XDP multi buffer support to the non-linear legacy RQ (Maxim Mikityanskiy) [Orabug: 34816080] - net/mlx5e: Use page-sized fragments with XDP multi buffer (Maxim Mikityanskiy) [Orabug: 34816080] - net/mlx5e: Use fragments of the same size in non-linear legacy RQ with XDP (Maxim Mikityanskiy) [Orabug: 34816080] - net/mlx5e: Prepare non-linear legacy RQ for XDP multi buffer support (Maxim Mikityanskiy) [Orabug: 34816080] - net/mlx5: Remove unused fill page array API function (Tariq Toukan) [Orabug: 34816080] - net/mlx5: Remove unused exported contiguous coherent buffer allocation API (Tariq Toukan) [Orabug: 34816080] - net/mlx5: CT: Remove extra rhashtable remove on tuple entries (Paul Blakey) [Orabug: 34816080] - net/mlx5: DR, Remove hw_ste from mlx5dr_ste to reduce memory (Rongwei Liu) [Orabug: 34816080] - net/mlx5: DR, Remove 4 members from mlx5dr_ste_htbl to reduce memory (Rongwei Liu) [Orabug: 34816080] - net/mlx5: DR, Remove num_of_entries byte_size from struct mlx5_dr_icm_chunk (Rongwei Liu) [Orabug: 34816080] - net/mlx5: DR, Remove icm_addr from mlx5dr_icm_chunk to reduce memory (Rongwei Liu) [Orabug: 34816080] - net/mlx5: DR, Remove mr_addr rkey from struct mlx5dr_icm_chunk (Rongwei Liu) [Orabug: 34816080] - net/mlx5: DR, Adjust structure member to reduce memory hole (Rongwei Liu) [Orabug: 34816080] - net/mlx5e: Drop cqe_bcnt32 from mlx5e_skb_from_cqe_mpwrq_linear (Maxim Mikityanskiy) [Orabug: 34816080] - net/mlx5e: Drop the len output parameter from mlx5e_xdp_handle (Maxim Mikityanskiy) [Orabug: 34816080] - net/mlx5e: RX, Test the XDP program existence out of the handler (Tariq Toukan) [Orabug: 34816080] - net/mlx5e: Build SKB in place over the first fragment in non-linear legacy RQ (Maxim Mikityanskiy) [Orabug: 34816080] - net/mlx5e: Add headroom only to the first fragment in legacy RQ (Maxim Mikityanskiy) [Orabug: 34816080] - net/mlx5e: Validate MTU when building non-linear legacy RQ fragments info (Maxim Mikityanskiy) [Orabug: 34816080] - net/mlx5e: MPLSoUDP encap, support action vlan pop_eth explicitly (Maor Dickman) [Orabug: 34816080] - net/mlx5e: MPLSoUDP decap, use vlan push_eth instead of pedit (Maor Dickman) [Orabug: 34816080] - net/sched: add vlan push_eth and pop_eth action to the hardware IR (Maor Dickman) [Orabug: 34816080] - net: Add l3mdev index to flow struct and avoid oif reset for port devices (David Ahern) [Orabug: 34816080] - net/mlx5e: Fix use-after-free in mlx5e_stats_grp_sw_update_stats (Saeed Mahameed) [Orabug: 34816080] - net/mlx4_en: use kzalloc (Julia Lawall) [Orabug: 34816080] - net/mlx5: Parse module mapping using mlx5_ifc (Gal Pressman) [Orabug: 34816080] - net/mlx5: Query the maximum MCIA register read size from firmware (Gal Pressman) [Orabug: 34816080] - net/mlx5: CT: Create smfs dr matchers dynamically (Paul Blakey) [Orabug: 34816080] - net/mlx5: CT: Add software steering ct flow steering provider (Paul Blakey) [Orabug: 34816080] - net/mlx5: Add smfs lib to export direct steering API to CT (Paul Blakey) [Orabug: 34816080] - net/mlx5: DR, Add helper to get backing dr table from a mlx5 flow table (Paul Blakey) [Orabug: 34816080] - net/mlx5: CT: Introduce a platform for multiple flow steering providers (Paul Blakey) [Orabug: 34816080] - net/mlx5: Node-aware allocation for the doorbell pgdir (Tariq Toukan) [Orabug: 34816080] - net/mlx5: Node-aware allocation for UAR (Tariq Toukan) [Orabug: 34816080] - net/mlx5: Node-aware allocation for the EQs (Tariq Toukan) [Orabug: 34816080] - net/mlx5: Node-aware allocation for the EQ table (Tariq Toukan) [Orabug: 34816080] - net/mlx5: Node-aware allocation for the IRQ table (Tariq Toukan) [Orabug: 34816080] - net/mlx5: Delete useless module.h include (Leon Romanovsky) [Orabug: 34816080] - net/mlx4: Delete useless moduleparam include (Leon Romanovsky) [Orabug: 34816080] - net/mlx5: DR, Add support for ConnectX-7 steering (Yevgeny Kliteynik) [Orabug: 34816080] - net/mlx5: DR, Refactor ste_ctx handling for STE v0/1 (Yevgeny Kliteynik) [Orabug: 34816080] - net/mlx5: DR, Rename action modify fields to reflect naming in HW spec (Yevgeny Kliteynik) [Orabug: 34816080] - net/mlx5: DR, Fix handling of different actions on the same STE in STEv1 (Yevgeny Kliteynik) [Orabug: 34816080] - net/mlx5: DR, Remove unneeded comments (Yevgeny Kliteynik) [Orabug: 34816080] - net/mlx5: DR, Add support for matching on Internet Header Length (IHL) (Yevgeny Kliteynik) [Orabug: 34816080] - net/mlx5: DR, Align mlx5dv_dr API vport action with FW behavior (Shun Hao) [Orabug: 34816080] - net/mlx5: Add debugfs counters for page commands failures (Moshe Shemesh) [Orabug: 34816080] - net/mlx5: Add pages debugfs (Moshe Shemesh) [Orabug: 34816080] - net/mlx5: Move debugfs entries to separate struct (Moshe Shemesh) [Orabug: 34816080] - net/mlx5: Change release_all_pages cap bit location (Moshe Shemesh) [Orabug: 34816080] - net/mlx5: Remove redundant error on reclaim pages (Moshe Shemesh) [Orabug: 34816080] - net/mlx5: Remove redundant error on give pages (Moshe Shemesh) [Orabug: 34816080] - net/mlx5: Remove redundant notify fail on give pages (Moshe Shemesh) [Orabug: 34816080] - net/mlx5: Add command failures data to debugfs (Moshe Shemesh) [Orabug: 34816080] - net/mlx5e: TC, Fix use after free in mlx5e_clone_flow_attr_for_post_act() (Dan Carpenter) [Orabug: 34816080] - net/mlx5: Support GRE conntrack offload (Toshiaki Makita) [Orabug: 34816080] - mlxsw: Add support for IFLA_OFFLOAD_XSTATS_L3_STATS (Petr Machata) [Orabug: 34816080] - mlxsw: Extract classification of router-related events to a helper (Petr Machata) [Orabug: 34816080] - mlxsw: spectrum_router: Drop mlxsw_sp arg from counter alloc/free functions (Petr Machata) [Orabug: 34816080] - mlxsw: reg: Fix packing of router interface counters (Petr Machata) [Orabug: 34816080] - net: rtnetlink: Add UAPI toggle for IFLA_OFFLOAD_XSTATS_L3_STATS (Petr Machata) [Orabug: 34816080] - net: rtnetlink: Add RTM_SETSTATS (Petr Machata) [Orabug: 34816080] - net: rtnetlink: Add UAPI for obtaining L3 offload xstats (Petr Machata) [Orabug: 34816080] - net: dev: Add hardware stats support (Petr Machata) [Orabug: 34816080] - net: rtnetlink: Propagate extack to rtnl_offload_xstats_fill() (Petr Machata) [Orabug: 34816080] - net: rtnetlink: RTM_GETSTATS: Allow filtering inside nests (Petr Machata) [Orabug: 34816080] - net: rtnetlink: Stop assuming that IFLA_OFFLOAD_XSTATS_* are dev-backed (Petr Machata) [Orabug: 34816080] - net: rtnetlink: Namespace functions related to IFLA_OFFLOAD_XSTATS_* (Petr Machata) [Orabug: 34816080] - mlx5: add support for page_pool_get_stats (Joe Damato) [Orabug: 34816080] - flow_offload: reject offload for all drivers with invalid police parameters (Jianbo Liu) [Orabug: 34816080] - net: flow_offload: add tc police action parameters (Jianbo Liu) [Orabug: 34816080] - net/mlx5: Add clarification on sync reset failure (Moshe Shemesh) [Orabug: 34816080] - net/mlx5: Add reset_state field to MFRL register (Moshe Shemesh) [Orabug: 34816080] - net/mlx5: cmdif, Refactor error handling and reporting of async commands (Saeed Mahameed) [Orabug: 34816080] - net/mlx5: Use mlx5_cmd_do() in core create_{cq,dct} (Saeed Mahameed) [Orabug: 34816080] - net/mlx5: cmdif, Add new api for command execution (Saeed Mahameed) [Orabug: 34816080] - net/mlx5: cmdif, cmd_check refactoring (Saeed Mahameed) [Orabug: 34816080] - net/mlx5: cmdif, Return value improvements (Saeed Mahameed) [Orabug: 34816080] - net/mlx5: Lag, offload active-backup drops to hardware (Mark Bloch) [Orabug: 34816080] - net/mlx5: Lag, record inactive state of bond device (Mark Bloch) [Orabug: 34816080] - net/mlx5: Lag, don't use magic numbers for ports (Mark Bloch) [Orabug: 34816080] - net/mlx5: Lag, use local variable already defined to access E-Switch (Mark Bloch) [Orabug: 34816080] - net/mlx5: E-switch, add drop rule support to ingress ACL (Mark Bloch) [Orabug: 34816080] - net/mlx5: E-switch, remove special uplink ingress ACL handling (Mark Bloch) [Orabug: 34816080] - net/mlx5: E-Switch, reserve and use same uplink metadata across ports (Sunil Rani) [Orabug: 34816080] - net/mlx5: Add ability to insert to specific flow group (Mark Bloch) [Orabug: 34816080] - mlx5: remove unused static inlines (Jakub Kicinski) [Orabug: 34816080] - mlxsw: core: Add support for OSFP transceiver modules (Danielle Ratson) [Orabug: 34816080] - mlxsw: Remove resource query check (Ido Schimmel) [Orabug: 34816080] - mlxsw: core: Unify method of trap support validation (Vadim Pasternak) [Orabug: 34816080] - mlxsw: spectrum: Remove SP{1,2,3} defines for FW minor and subminor (Jiri Pirko) [Orabug: 34816080] - mlxsw: core: Remove unnecessary asserts (Vadim Pasternak) [Orabug: 34816080] - mlxsw: reg: Add 'mgpir_' prefix to MGPIR fields comments (Vadim Pasternak) [Orabug: 34816080] - mlxsw: core_thermal: Remove obsolete API for query resource (Vadim Pasternak) [Orabug: 34816080] - mlxsw: core_thermal: Rename labels according to naming convention (Vadim Pasternak) [Orabug: 34816080] - mlxsw: core_hwmon: Fix variable names for hwmon attributes (Vadim Pasternak) [Orabug: 34816080] - mlxsw: core_thermal: Avoid creation of virtual hwmon objects by thermal module (Vadim Pasternak) [Orabug: 34816080] - mlxsw: spectrum_span: Ignore VLAN entries not used by the bridge in mirroring (Ido Schimmel) [Orabug: 34816080] - mlxsw: core: Prevent trap group setting if driver does not support EMAD (Vadim Pasternak) [Orabug: 34816080] - mlxsw: spectrum: remove guards against !BRIDGE_VLAN_INFO_BRENTRY (Vladimir Oltean) [Orabug: 34816080] - net/mlx5e: TC, Allow sample action with CT (Roi Dayan) [Orabug: 34816080] - net/mlx5e: TC, Make post_act parse CT and sample actions (Roi Dayan) [Orabug: 34816080] - net/mlx5e: TC, Clean redundant counter flag from tc action parsers (Roi Dayan) [Orabug: 34816080] - net/mlx5e: Use multi table support for CT and sample actions (Roi Dayan) [Orabug: 34816080] - net/mlx5e: Create new flow attr for multi table actions (Roi Dayan) [Orabug: 34816080] - net/mlx5e: Add post act offload/unoffload API (Roi Dayan) [Orabug: 34816080] - net/mlx5e: Pass actions param to actions_match_supported() (Roi Dayan) [Orabug: 34816080] - net/mlx5e: TC, Move flow hashtable to be per rep (Paul Blakey) [Orabug: 34816080] - net/mlx5e: E-Switch, Add support for tx_port_ts in switchdev mode (Aya Levin) [Orabug: 34816080] - net/mlx5e: E-Switch, Add PTP counters for uplink representor (Aya Levin) [Orabug: 34816080] - net/mlx5e: RX, Restrict bulk size for small Striding RQs (Tariq Toukan) [Orabug: 34816080] - net/mlx5e: Default to Striding RQ when not conflicting with CQE compression (Tariq Toukan) [Orabug: 34816080] - net/mlx5e: Generalize packet merge error message (Tariq Toukan) [Orabug: 34816080] - net/mlx5e: Add support for using xdp->data_meta (Alex Liu) [Orabug: 34816080] - net/mlx5e: Fix spelling mistake 'supoported' -> 'supported' (Colin Ian King) [Orabug: 34816080] - net: rtnetlink: rtnl_stats_get(): Emit an extack for unset filter_mask (Petr Machata) [Orabug: 34816080] - net/mlx5e: Optimize the common case condition in mlx5e_select_queue (Maxim Mikityanskiy) [Orabug: 34816080] - net/mlx5e: Optimize modulo in mlx5e_select_queue (Maxim Mikityanskiy) [Orabug: 34816080] - net/mlx5e: Optimize mlx5e_select_queue (Maxim Mikityanskiy) [Orabug: 34816080] - net/mlx5e: Use READ_ONCE/WRITE_ONCE for DCBX trust state (Maxim Mikityanskiy) [Orabug: 34816080] - net/mlx5e: Move repeating code that gets TC prio into a function (Maxim Mikityanskiy) [Orabug: 34816080] - net/mlx5e: Use select queue parameters to sync with control flow (Maxim Mikityanskiy) [Orabug: 34816080] - net/mlx5e: Move mlx5e_select_queue to en/selq.c (Maxim Mikityanskiy) [Orabug: 34816080] - net/mlx5e: Introduce select queue parameters (Maxim Mikityanskiy) [Orabug: 34816080] - net/mlx5e: Sync txq2sq updates with mlx5e_xmit for HTB queues (Maxim Mikityanskiy) [Orabug: 34816080] - net/mlx5e: Use a barrier after updating txq2sq (Maxim Mikityanskiy) [Orabug: 34816080] - net/mlx5e: Cleanup of start/stop all queues (Maxim Mikityanskiy) [Orabug: 34816080] - net/mlx5e: Use FW limitation for max MPW WQEBBs (Aya Levin) [Orabug: 34816080] - net/mlx5e: Read max WQEBBs on the SQ from firmware (Aya Levin) [Orabug: 34816080] - net/mlx5e: Remove unused tstamp SQ field (Tariq Toukan) [Orabug: 34816080] - mlxsw: Support FLOW_ACTION_MANGLE for SIP and DIP IPv6 addresses (Danielle Ratson) [Orabug: 34816080] - mlxsw: Support FLOW_ACTION_MANGLE for SIP and DIP IPv4 addresses (Danielle Ratson) [Orabug: 34816080] - mlxsw: core_acl_flex_actions: Add SIP_DIP_ACTION (Danielle Ratson) [Orabug: 34816080] - mlxsw: spectrum_acl: Allocate default actions for internal TCAM regions (Ido Schimmel) [Orabug: 34816080] - mlxsw: spectrum: Guard against invalid local ports (Amit Cohen) [Orabug: 34816080] - mlxsw: core: Consolidate trap groups to a single event group (Jiri Pirko) [Orabug: 34816080] - mlxsw: core: Move functions to register/unregister array of traps to core.c (Jiri Pirko) [Orabug: 34816080] - mlxsw: core: Move basic trap group initialization from spectrum.c (Jiri Pirko) [Orabug: 34816080] - mlxsw: core: Move basic_trap_groups_set() call out of EMAD init code (Jiri Pirko) [Orabug: 34816080] - mlxsw: spectrum: Set basic trap groups from an array (Jiri Pirko) [Orabug: 34816080] - net/mlx5: VLAN push on RX, pop on TX (Dima Chumak) [Orabug: 34816080] - net/mlx5: Introduce software defined steering capabilities (Dima Chumak) [Orabug: 34816080] - net/mlx5: Remove unused TIR modify bitmask enums (Tariq Toukan) [Orabug: 34816080] - net/mlx5e: CT, Remove redundant flow args from tc ct calls (Roi Dayan) [Orabug: 34816080] - net/mlx5e: TC, Store mapped tunnel id on flow attr (Roi Dayan) [Orabug: 34816080] - net/mlx5e: Test CT and SAMPLE on flow attr (Roi Dayan) [Orabug: 34816080] - net/mlx5e: Refactor eswitch attr flags to just attr flags (Roi Dayan) [Orabug: 34816080] - net/mlx5e: CT, Don't set flow flag CT for ct clear flow (Roi Dayan) [Orabug: 34816080] - net/mlx5e: TC, Hold sample_attr on stack instead of pointer (Roi Dayan) [Orabug: 34816080] - net/mlx5e: TC, Reject rules with multiple CT actions (Roi Dayan) [Orabug: 34816080] - net/mlx5e: TC, Pass attr to tc_act can_offload() (Roi Dayan) [Orabug: 34816080] - net/mlx5e: TC, Split pedit offloads verify from alloc_tc_pedit_action() (Roi Dayan) [Orabug: 34816080] - net/mlx5e: TC, Move pedit_headers_action to parse_attr (Roi Dayan) [Orabug: 34816080] - net/mlx5e: Move counter creation call to alloc_flow_attr_counter() (Roi Dayan) [Orabug: 34816080] - net/mlx5e: Pass attr arg for attaching/detaching encaps (Roi Dayan) [Orabug: 34816080] - net/mlx5e: Move code chunk setting encap dests into its own function (Roi Dayan) [Orabug: 34816080] - mlxsw: spectrum_kvdl: Use struct_size() helper in kzalloc() (Gustavo A. R. Silva) [Orabug: 34816080] - mlxsw: core_env: Forbid module reset on RJ45 ports (Danielle Ratson) [Orabug: 34816080] - mlxsw: core_env: Forbid power mode set and get on RJ45 ports (Danielle Ratson) [Orabug: 34816080] - mlxsw: core_env: Forbid getting module EEPROM on RJ45 ports (Danielle Ratson) [Orabug: 34816080] - mlxsw: core_env: Query and store port module's type during initialization (Danielle Ratson) [Orabug: 34816080] - mlxsw: reg: Add Port Module Type Mapping register (Danielle Ratson) [Orabug: 34816080] - mlxsw: spectrum_ethtool: Add support for two new link modes (Danielle Ratson) [Orabug: 34816080] - mlxsw: Add netdev argument to mlxsw_env_get_module_info() (Danielle Ratson) [Orabug: 34816080] - mlxsw: core_env: Do not pass number of modules as argument (Ido Schimmel) [Orabug: 34816080] - mlxsw: spectrum_ethtool: Remove redundant variable (Ido Schimmel) [Orabug: 34816080] - bpf: introduce BPF_F_XDP_HAS_FRAGS flag in prog_flags loading the ebpf program (Lorenzo Bianconi) [Orabug: 34816080] - net: xdp: add xdp_update_skb_shared_info utility routine (Lorenzo Bianconi) [Orabug: 34816080] - xdp: introduce flags field in xdp_buff/xdp_frame (Lorenzo Bianconi) [Orabug: 34816080] - net: skbuff: add size metadata to skb_shared_info for xdp (Lorenzo Bianconi) [Orabug: 34816080] - flow_offload: allow user to offload tc action to net device (Baowen Zheng) [Orabug: 34816080] - flow_offload: add ops to tc_action_ops for flow action setup (Baowen Zheng) [Orabug: 34816080] - flow_offload: rename offload functions with offload instead of flow (Baowen Zheng) [Orabug: 34816080] - devlink: hold the instance lock during eswitch_mode callbacks (Jakub Kicinski) [Orabug: 34816080] - netdevsim: replace vfs_lock with devlink instance lock (Jakub Kicinski) [Orabug: 34816080] - netdevsim: fix uninit value in nsim_drv_configure_vfs() (Jakub Kicinski) [Orabug: 34816080] - netdevsim: replace port_list_lock with devlink instance lock (Jakub Kicinski) [Orabug: 34816080] - devlink: add explicitly locked flavor of the rate node APIs (Jakub Kicinski) [Orabug: 34816080] - bnxt: use the devlink instance lock to protect sriov (Jakub Kicinski) [Orabug: 34816080] - devlink: pass devlink_port to port_split / port_unsplit callbacks (Jakub Kicinski) [Orabug: 34816080] - devlink: hold the instance lock in port_split / port_unsplit callbacks (Jakub Kicinski) [Orabug: 34816080] - eth: mlxsw: switch to explicit locking for port registration (Jakub Kicinski) [Orabug: 34816080] - eth: nfp: replace driver's 'pf' lock with devlink instance lock (Jakub Kicinski) [Orabug: 34816080] - eth: nfp: wrap locking assertions in helpers (Jakub Kicinski) [Orabug: 34816080] - devlink: expose instance locking and add locked port registering (Jakub Kicinski) [Orabug: 34816080] - netdevsim: rename 'driver' entry points (Jakub Kicinski) [Orabug: 34816080] - netdevsim: move max vf config to dev (Jakub Kicinski) [Orabug: 34816080] - netdevsim: move details of vf config to dev (Jakub Kicinski) [Orabug: 34816080] - uek-rpm: Define CONFIG_MLX5_VFIO_PCI=m (Joao Martins) [Orabug: 34778256] - vfio/mlx5: Set VF as migratable (Yishai Hadas) [Orabug: 34778256] - net/mlx5: Introduce ifc bits for migratable (Yishai Hadas) [Orabug: 34778256] - vfio/iova_bitmap: Fix PAGE_SIZE unaligned bitmaps (Joao Martins) [Orabug: 34778256] - vfio/mlx5: Set the driver DMA logging callbacks (Yishai Hadas) [Orabug: 34778256] - vfio/mlx5: Manage error scenarios on tracker (Yishai Hadas) [Orabug: 34778256] - vfio/mlx5: Report dirty pages from tracker (Yishai Hadas) [Orabug: 34778256] - vfio/mlx5: Create and destroy page tracker object (Yishai Hadas) [Orabug: 34778256] - vfio/mlx5: Init QP based resources for dirty tracking (Yishai Hadas) [Orabug: 34778256] - vfio: Introduce the DMA logging feature support (Yishai Hadas) [Orabug: 34778256] - vfio: Add an IOVA bitmap support (Joao Martins) [Orabug: 34778256] - vfio: Introduce DMA logging uAPIs (Yishai Hadas) [Orabug: 34778256] - net/mlx5: Query ADV_VIRTUALIZATION capabilities (Yishai Hadas) [Orabug: 34778256] - net/mlx5: Introduce ifc bits for page tracker (Yishai Hadas) [Orabug: 34778256] - vfio: Move vfio.c to vfio_main.c (Jason Gunthorpe) [Orabug: 34778256] - net/mlx5: Use software VHCA id when it's supported (Yishai Hadas) [Orabug: 34778256] - net/mlx5: Introduce ifc bits for using software vhca id (Yishai Hadas) [Orabug: 34778256] - vfio: Split migration ops from main device ops (Yishai Hadas) [Orabug: 34778256] - vfio/mlx5: Protect mlx5vf_disable_fds() upon close device (Yishai Hadas) [Orabug: 34778256] - vfio/pci: Have all VFIO PCI drivers store the vfio_pci_core_device in drvdata (Jason Gunthorpe) [Orabug: 34778256] - vfio/mlx5: Run the SAVE state command in an async mode (Yishai Hadas) [Orabug: 34778256] - vfio/mlx5: Refactor to enable VFs migration in parallel (Yishai Hadas) [Orabug: 34778256] - vfio/mlx5: Manage the VF attach/detach callback from the PF (Yishai Hadas) [Orabug: 34778256] - net/mlx5: Expose mlx5_sriov_blocking_notifier_register / unregister APIs (Yishai Hadas) [Orabug: 34778256] - vfio/mlx5: Fix to not use 0 as NULL pointer (Yishai Hadas) [Orabug: 34778256] - vfio/mlx5: Use its own PCI reset_done error handler (Yishai Hadas) [Orabug: 34778256] - vfio/pci: Expose vfio_pci_core_aer_err_detected() (Yishai Hadas) [Orabug: 34778256] - vfio/mlx5: Implement vfio_pci driver for mlx5 devices (Yishai Hadas) [Orabug: 34778256] - vfio/mlx5: Expose migration commands over mlx5 device (Yishai Hadas) [Orabug: 34778256] - vfio: Remove migration protocol v1 documentation (Jason Gunthorpe) [Orabug: 34778256] - vfio: Extend the device migration protocol with RUNNING_P2P (Jason Gunthorpe) [Orabug: 34778256] - vfio: Define device migration protocol v2 (Jason Gunthorpe) [Orabug: 34778256] - vfio: Have the core code decode the VFIO_DEVICE_FEATURE ioctl (Jason Gunthorpe) [Orabug: 34778256] - net/mlx5: Add migration commands definitions (Yishai Hadas) [Orabug: 34778256] - net/mlx5: Introduce migration bits and structures (Yishai Hadas) [Orabug: 34778256] - net/mlx5: Expose APIs to get/put the mlx5 core device (Yishai Hadas) [Orabug: 34778256] - PCI/IOV: Add pci_iov_get_pf_drvdata() to allow VF reaching the drvdata of a PF (Jason Gunthorpe) [Orabug: 34778256] - net/mlx5: Disable SRIOV before PF removal (Yishai Hadas) [Orabug: 34778256] - net/mlx5: Reuse exported virtfn index function call (Leon Romanovsky) [Orabug: 34778256] - PCI/IOV: Add pci_iov_vf_id() to get VF index (Jason Gunthorpe) [Orabug: 34778256] - NFSv4.2: Fix up an invalid combination of memory allocation flags (Trond Myklebust) [Orabug: 34844640] - Add SecureBoot signing for aarch64 arch (Sherry Yang) [Orabug: 34845745] - uek-rpm: Fix 'make olddefconfig' BLAKE2S crypto warnings (Harshit Mogalapalli) [Orabug: 34644522] - RHCK 9.1 builtin option change to module for UEK7u1 (Vijayendra Suman) [Orabug: 34687867] - uek-rpm: Disable few config options that we enabled previously. (Harshit Mogalapalli) [Orabug: 34803318] - qlogic: qed: fix clang -Wformat warnings (Justin Stitt) [Orabug: 34789504] - qed: Use bitmap_empty() (Christophe JAILLET) [Orabug: 34789504] - qed: Use the bitmap API to allocate bitmaps (Christophe JAILLET) [Orabug: 34789504] - qlogic/qed: fix repeated words in comments (Jilin Yuan) [Orabug: 34789504] - qed: fix typos in comments (Julia Lawall) [Orabug: 34789504] - net: qed: fix typos in comments (Julia Lawall) [Orabug: 34789504] - RDMA/qedr: Remove unnecessary synchronize_irq() before free_irq() (Minghao Chi) [Orabug: 34789504] - qed: Remove unnecessary synchronize_irq() before free_irq() (Minghao Chi) [Orabug: 34789504] - qed: replace bitmap_weight with bitmap_empty in qed_roce_stop() (Yury Norov) [Orabug: 34789504] - qed: rework qed_rdma_bmap_free() (Yury Norov) [Orabug: 34789504] - qede: Reduce verbosity of ptp tx timestamp (Prabhakar Kushwaha) [Orabug: 34789504] - qed: Remove IP services API. (Guillaume Nault) [Orabug: 34789504] - qed: remove an unneed NULL check on list iterator (Xiaomeng Tong) [Orabug: 34789504] - qed: fix ethtool register dump (Manish Chopra) [Orabug: 34789504] - qed: remove unnecessary memset in qed_init_fw_funcs (Wan Jiabing) [Orabug: 34789504] - qed: prevent a fw assert during device shutdown (Venkata Sudheer Kumar Bhavaraju) [Orabug: 34789504] - qed: use msleep() in qed_mcp_cmd() and add qed_mcp_cmd_nosleep() for udelay. (Venkata Sudheer Kumar Bhavaraju) [Orabug: 34789504] - qed: Use dma_set_mask_and_coherent() and simplify code (Christophe JAILLET) [Orabug: 34789504] - qed*: esl priv flag support through ethtool (Manish Chopra) [Orabug: 34789504] - qed*: enhance tx timeout debug info (Manish Chopra) [Orabug: 34789504] - qed: Enhance rammod debug prints to provide pretty details (Prabhakar Kushwaha) [Orabug: 34789504] - net: qed: fix the array may be out of bound (zhangyue) [Orabug: 34789504] - qed: Use the bitmap API to simplify some functions (Christophe JAILLET) [Orabug: 34789504] - RDMA/qed: Use helper function to set GUIDs (Kamal Heib) [Orabug: 34789504] - net: qed_dev: fix check of true !rc expression (Jean Sacren) [Orabug: 34789504] - net: qed_ptp: fix check of true !rc expression (Jean Sacren) [Orabug: 34789504] - RDMA/qedr: Remove unsupported qedr_resize_cq callback (Kamal Heib) [Orabug: 34789504] - qed: Change the TCP common variable - 'iscsi_ooo' (Shai Malin) [Orabug: 34789504] - qed: Optimize the ll2 ooo flow (Shai Malin) [Orabug: 34789504] - net: qed_debug: fix check of false (grc_param < 0) expression (Jean Sacren) [Orabug: 34789504] - qed: Fix compilation for CONFIG_QED_SRIOV undefined scenario (Prabhakar Kushwaha) [Orabug: 34789504] - qed: Initialize debug string array (Tim Gardner) [Orabug: 34789504] - qed: Fix spelling mistake 'ctx_bsaed' -> 'ctx_based' (Colin Ian King) [Orabug: 34789504] - qed: fix ll2 establishment during load of RDMA driver (Manish Chopra) [Orabug: 34789504] - qed: Update the TCP active termination 2 MSL timer ('TIME_WAIT') (Prabhakar Kushwaha) [Orabug: 34789504] - qed: Update TCP silly-window-syndrome timeout for iwarp, scsi (Nikolay Assa) [Orabug: 34789504] - qed: Update debug related changes (Prabhakar Kushwaha) [Orabug: 34789504] - qed: Add '_GTT' suffix to the IRO RAM macros (Prabhakar Kushwaha) [Orabug: 34789504] - qed: Update FW init functions to support FW 8.59.1.0 (Omkar Kulkarni) [Orabug: 34789504] - qed: Use enum as per FW 8.59.1.0 in qed_iro_hsi.h (Prabhakar Kushwaha) [Orabug: 34789504] - qed: Update qed_hsi.h for fw 8.59.1.0 (Prabhakar Kushwaha) [Orabug: 34789504] - qed: Update qed_mfw_hsi.h for FW ver 8.59.1.0 (Prabhakar Kushwaha) [Orabug: 34789504] - qed: Update common_hsi for FW ver 8.59.1.0 (Prabhakar Kushwaha) [Orabug: 34789504] - qed: Split huge qed_hsi.h header file (Omkar Kulkarni) [Orabug: 34789504] - qed: Remove e4_ and _e4 from FW HSI (Shai Malin) [Orabug: 34789504] - pmem: fix a name collision (Jane Chu) [Orabug: 34670103] - pmem: implement pmem_recovery_write() (Jane Chu) [Orabug: 34670103] - pmem: refactor pmem_clear_poison() (Jane Chu) [Orabug: 34670103] - dax: add .recovery_write dax_operation (Jane Chu) [Orabug: 34670103] - dax: introduce DAX_RECOVERY_WRITE dax access mode (Jane Chu) [Orabug: 34670103] - dm-linear: add a linear_dax_pgoff helpe (Jane Chu) [Orabug: 34670103] - dm-log-writes: add a log_writes_dax_pgoff helper (Jane Chu) [Orabug: 34670103] - dm-stripe: add a stripe_dax_pgoff helper (Jane Chu) [Orabug: 34670103] - mce: fix set_mce_nospec to always unmap the whole page (Jane Chu) [Orabug: 34670103] - x86/mce: relocate set{clear}_mce_nospec() functions (Jane Chu) [Orabug: 34670103] - acpi/nfit: rely on mce->misc to determine poison granularity (Jane Chu) [Orabug: 34670103] - crypto: seqiv - flag instantiations as FIPS compliant (Vladis Dronov) [Orabug: 34711430] - crypto: rsa - flag instantiations as FIPS compliant (Saeed Mirzamohammadi) [Orabug: 34711430] - crypto: ecdh - implement FIPS PCT (Nicolai Stange) [Orabug: 34711430] - crypto: dh - implement FIPS PCT (Nicolai Stange) [Orabug: 34711430] - crypto: dh - calculate Q from P for the full public key verification (Nicolai Stange) [Orabug: 34711430] - lib/mpi: export mpi_rshift (Nicolai Stange) [Orabug: 34711430] - crypto: dh - allow for passing NULL to the ffdheXYZ(dh)s' ->set_secret() (Nicolai Stange) [Orabug: 34711430] - crypto: testmgr - add keygen tests for ffdheXYZ(dh) templates (Nicolai Stange) [Orabug: 34711430] - crypto: dh - implement private key generation primitive for ffdheXYZ(dh) (Nicolai Stange) [Orabug: 34711430] - crypto: testmgr - add known answer tests for ffdheXYZ(dh) templates (Nicolai Stange) [Orabug: 34711430] - crypto: dh - implement ffdheXYZ(dh) templates (Nicolai Stange) [Orabug: 34711430] - crypto: dh - introduce common code for built-in safe-prime group support (Nicolai Stange) [Orabug: 34711430] - crypto: dh - split out deserialization code from crypto_dh_decode() (Nicolai Stange) [Orabug: 34711430] - crypto: dh - constify struct dh's pointer members (Nicolai Stange) [Orabug: 34711430] - crypto: dh - remove struct dh's ->q member (Nicolai Stange) [Orabug: 34711430] - crypto: kpp - provide support for KPP spawns (Nicolai Stange) [Orabug: 34711430] - crypto: kpp - provide support for KPP template instances (Nicolai Stange) [Orabug: 34711430] - crypto: xts - restrict key lengths to approved values in FIPS mode (Nicolai Stange) [Orabug: 34711430] - crypto: hmac - disallow keys < 112 bits in FIPS mode (Stephan Muller) [Orabug: 34711430] - crypto: dh - limit key size to 2048 in FIPS mode (Stephan Muller) [Orabug: 34711430] - crypto: rsa - limit key size to 2048 in FIPS mode (Stephan Muller) [Orabug: 34711430] - crypto: HMAC - add fips_skip support (Stephan Muller) [Orabug: 34711430] - crypto: disallow drbg with sha384 hash in FIPS mode (Saeed Mirzamohammadi) [Orabug: 34711430] - crypto: des - disallow des3 in FIPS mode (Stephan Muller) [Orabug: 34711430] - crypto: dh - disallow plain 'dh' usage in FIPS mode (Nicolai Stange) [Orabug: 34711430] - crypto: ecdh - disallow plain 'ecdh' usage in FIPS mode (Saeed Mirzamohammadi) [Orabug: 34711430] - crypto: testmgr - disallow plain cbcmac(aes) and ghash in FIPS mode (Saeed Mirzamohammadi) [Orabug: 34711430] - crypto: api - allow algs only in specific constructions in FIPS mode (Nicolai Stange) [Orabug: 34711430] - NFSv4.2: Fix missing removal of SLAB_ACCOUNT on kmem_cache allocation (Muchun Song) [Orabug: 34717841] - slab: remove __alloc_size attribute from __kmalloc_track_caller (Greg Kroah-Hartman) [Orabug: 34717841] - mm: memcontrol: rename memcg_cache_id to memcg_kmem_id (Muchun Song) [Orabug: 34717841] - mm: list_lru: rename list_lru_per_memcg to list_lru_memcg (Muchun Song) [Orabug: 34717841] - mm: memcontrol: fix cannot alloc the maximum memcg ID (Muchun Song) [Orabug: 34717841] - mm: memcontrol: reuse memory cgroup ID for kmem ID (Muchun Song) [Orabug: 34717841] - mm: list_lru: replace linear array with xarray (Muchun Song) [Orabug: 34717841] - mm: list_lru: rename memcg_drain_all_list_lrus to memcg_reparent_list_lrus (Muchun Song) [Orabug: 34717841] - mm: list_lru: allocate list_lru_one only when needed (Muchun Song) [Orabug: 34717841] - mm: memcontrol: move memcg_online_kmem() to mem_cgroup_css_online() (Muchun Song) [Orabug: 34717841] - xarray: use kmem_cache_alloc_lru to allocate xa_node (Muchun Song) [Orabug: 34717841] - mm: dcache: use kmem_cache_alloc_lru() to allocate dentry (Muchun Song) [Orabug: 34717841] - f2fs: allocate inode by using alloc_inode_sb() (Muchun Song) [Orabug: 34717841] - fs: allocate inode by using alloc_inode_sb() (Muchun Song) [Orabug: 34717841] - fs: introduce alloc_inode_sb() to allocate filesystems specific inode (Muchun Song) [Orabug: 34717841] - mm: introduce kmem_cache_alloc_lru (Muchun Song) [Orabug: 34717841] - mm: list_lru: transpose the array of per-node per-memcg lru lists (Muchun Song) [Orabug: 34717841] - mm: list_lru: only add memcg-aware lrus to the global lru list (Muchun Song) [Orabug: 34717841] - mm: list_lru: fix the return value of list_lru_count_one() (Muchun Song) [Orabug: 34717841] - mm: list_lru: remove holding lru lock (Muchun Song) [Orabug: 34717841] - mm: memcontrol: remove the kmem states (Muchun Song) [Orabug: 34717841] - mm: memcontrol: remove kmemcg_id reparenting (Muchun Song) [Orabug: 34717841] - mm/memcg: remove obsolete memcg_free_kmem() (Waiman Long) [Orabug: 34717841] - memcg, kmem: further deprecate kmem.limit_in_bytes (Shakeel Butt) [Orabug: 34717841] - mm/list_lru.c: prefer struct_size over open coded arithmetic (Len Baker) [Orabug: 34717841] - slab: add __alloc_size attributes for better bounds checking (Kees Cook) [Orabug: 34717841] - slab: clean up function prototypes (Kees Cook) [Orabug: 34717841] - net/mlx5e: SHAMPO, reduce TIR indication (Ben Ben-Ishay) [Orabug: 34481188] - net/mlx5: Fix offloading with ESWITCH_IPV4_TTL_MODIFY_ENABLE (Dima Chumak) [Orabug: 34481188] - net/mlx5e: Fix VF min/max rate parameters interchange mistake (Gal Pressman) [Orabug: 34481188] - net/mlx5e: Add missing increment of count (Lama Kayal) [Orabug: 34481188] - net/mlx5e: Fix MPLSoUDP encap to use MPLS action information (Maor Dickman) [Orabug: 34481188] - net/mlx5e: Add feature check for set fec counters (Lama Kayal) [Orabug: 34481188] - net/mlx5e: TC, Skip redundant ct clear actions (Roi Dayan) [Orabug: 34481188] - net/mlx5: DR, Fix slab-out-of-bounds in mlx5_cmd_dr_create_fte (Yevgeny Kliteynik) [Orabug: 34481188] - net/mlx5e: Avoid field-overflowing memcpy() (Kees Cook) [Orabug: 34481188] - net/mlx5e: Use struct_group() for memcpy() region (Kees Cook) [Orabug: 34481188] - net/mlx5e: Avoid implicit modify hdr for decap drop rule (Roi Dayan) [Orabug: 34481188] - net/mlx5e: Fix broken SKB allocation in HW-GRO (Khalid Manaa) [Orabug: 34481188] - net/mlx5e: Fix wrong calculation of header index in HW_GRO (Khalid Manaa) [Orabug: 34481188] - net/mlx5e: TC, Reject rules with forward and drop actions (Roi Dayan) [Orabug: 34481188] - net/mlx5e: TC, Reject rules with drop and modify hdr action (Roi Dayan) [Orabug: 34481188] - net/mlx5e: Fix build error in fec_set_block_stats() (Jakub Kicinski) [Orabug: 34481188] - mlxsw: spectrum: Extend to support Spectrum-4 ASIC (Amit Cohen) [Orabug: 34481188] - mlxsw: spectrum_acl_bloom_filter: Add support for Spectrum-4 calculation (Amit Cohen) [Orabug: 34481188] - mlxsw: Add operations structure for bloom filter calculation (Amit Cohen) [Orabug: 34481188] - mlxsw: spectrum_acl_bloom_filter: Rename Spectrum-2 specific objects for future use (Amit Cohen) [Orabug: 34481188] - mlxsw: spectrum_acl_bloom_filter: Make mlxsw_sp_acl_bf_key_encode() more flexible (Amit Cohen) [Orabug: 34481188] - mlxsw: spectrum_acl_bloom_filter: Reorder functions to make the code more aesthetic (Amit Cohen) [Orabug: 34481188] - mlxsw: Introduce flex key elements for Spectrum-4 (Amit Cohen) [Orabug: 34481188] - mlxsw: Rename virtual router flex key element (Amit Cohen) [Orabug: 34481188] - net/mlx5e: Fix nullptr on deleting mirroring rule (Dima Chumak) [Orabug: 34481188] - net/mlx5e: Add recovery flow in case of error CQE (Gal Pressman) [Orabug: 34481188] - net/mlx5e: TC, Remove redundant error logging (Roi Dayan) [Orabug: 34481188] - net/mlx5e: Refactor set_pflag_cqe_based_moder (Saeed Mahameed) [Orabug: 34481188] - net/mlx5e: Move HW-GRO and CQE compression check to fix features flow (Gal Pressman) [Orabug: 34481188] - net/mlx5e: Fix feature check per profile (Aya Levin) [Orabug: 34481188] - net/mlx5e: Expose FEC counters via ethtool (Lama Kayal) [Orabug: 34481188] - net/mlx5: SF, Use all available cpu for setting cpu affinity (Shay Drory) [Orabug: 34481188] - net/mlx5: Introduce API for bulk request and release of IRQs (Shay Drory) [Orabug: 34481188] - net/mlx5: Split irq_pool_affinity logic to new file (Shay Drory) [Orabug: 34481188] - net/mlx5: Move affinity assignment into irq_request (Shay Drory) [Orabug: 34481188] - net/mlx5: Introduce control IRQ request API (Shay Drory) [Orabug: 34481188] - net/mlx5: mlx5e_hv_vhca_stats_create return type to void (Saeed Mahameed) [Orabug: 34481188] - net: fixup build after bpf header changes (Jakub Kicinski) [Orabug: 34481188] - net/mlx5: CT: Set flow source hint from provided tuple device (Paul Blakey) [Orabug: 34481188] - net/mlx5: Set SMFS as a default steering mode if device supports it (Yevgeny Kliteynik) [Orabug: 34481188] - net/mlx5: DR, Ignore modify TTL if device doesn't support it (Yevgeny Kliteynik) [Orabug: 34481188] - net/mlx5: DR, Improve steering for empty or RX/TX-only matchers (Yevgeny Kliteynik) [Orabug: 34481188] - net/mlx5: DR, Add support for matching on geneve_tlv_option_0_exist field (Yevgeny Kliteynik) [Orabug: 34481188] - net/mlx5: DR, Support matching on tunnel headers 0 and 1 (Muhammad Sammar) [Orabug: 34481188] - net/mlx5: DR, Add misc5 to match_param structs (Muhammad Sammar) [Orabug: 34481188] - net/mlx5: Add misc5 flow table match parameters (Muhammad Sammar) [Orabug: 34481188] - net/mlx5: DR, Warn on failure to destroy objects due to refcount (Yevgeny Kliteynik) [Orabug: 34481188] - net/mlx5: DR, Add support for UPLINK destination type (Yevgeny Kliteynik) [Orabug: 34481188] - net/mlx5: DR, Add support for dumping steering info (Muhammad Sammar) [Orabug: 34481188] - net/mlx5: DR, Add missing reserved fields to dr_match_param (Muhammad Sammar) [Orabug: 34481188] - net/mlx5: DR, Add check for flex parser ID value (Yevgeny Kliteynik) [Orabug: 34481188] - net/mlx5: DR, Remove unused struct member in matcher (Yevgeny Kliteynik) [Orabug: 34481188] - net/mlx5: DR, Fix lower case macro prefix 'mlx5_' to 'MLX5_' (Yevgeny Kliteynik) [Orabug: 34481188] - net/mlx5: DR, Fix error flow in creating matcher (Yevgeny Kliteynik) [Orabug: 34481188] - mlxsw: spectrum_flower: Make vlan_id limitation more specific (Amit Cohen) [Orabug: 34481188] - net/mlx5e: Use auxiliary_device driver data helpers (David E. Box) [Orabug: 34481188] - driver core: auxiliary bus: Add driver data helpers (David E. Box) [Orabug: 34481188] - net/mlx5e: Take packet_merge params directly from the RX res struct (Tariq Toukan) [Orabug: 34481188] - net/mlx5e: Allocate per-channel stats dynamically at first usage (Lama Kayal) [Orabug: 34481188] - net/mlx5e: Use dynamic per-channel allocations in stats (Tariq Toukan) [Orabug: 34481188] - net/mlx5e: Allow profile-specific limitation on max num of channels (Tariq Toukan) [Orabug: 34481188] - net/mlx5e: Save memory by using dynamic allocation in netdev priv (Tariq Toukan) [Orabug: 34481188] - net/mlx5e: Add profile indications for PTP and QOS HTB features (Tariq Toukan) [Orabug: 34481188] - net/mlx5e: Use bitmap field for profile features (Tariq Toukan) [Orabug: 34481188] - net/mlx5: Remove the repeated declaration (Shaokun Zhang) [Orabug: 34481188] - net/mlx5: Let user configure max_macs generic param (Shay Drory) [Orabug: 34481188] - net/mlx5: Let user configure event_eq_size param (Shay Drory) [Orabug: 34481188] - devlink: Add new 'event_eq_size' generic device param (Shay Drory) [Orabug: 34481188] - net/mlx5: Let user configure io_eq_size param (Shay Drory) [Orabug: 34481188] - devlink: Add new 'io_eq_size' generic device param (Shay Drory) [Orabug: 34481188] - mlxsw: core: Extend devlink health reporter with new events and parameters (Danielle Ratson) [Orabug: 34481188] - mlxsw: reg: Extend MFDE register with new events and parameters (Danielle Ratson) [Orabug: 34481188] - mlxsw: core: Convert a series of if statements to switch case (Danielle Ratson) [Orabug: 34481188] - mlxsw: Fix naming convention of MFDE fields (Danielle Ratson) [Orabug: 34481188] - flow_offload: add index to flow_action_entry structure (Baowen Zheng) [Orabug: 34481188] - flow_offload: reject to offload tc actions in offload drivers (Baowen Zheng) [Orabug: 34481188] - net/mlx5: Introduce log_max_current_uc_list_wr_supported bit (Shay Drory) [Orabug: 34481188] - mlxsw: Add support for VxLAN with IPv6 underlay (Amit Cohen) [Orabug: 34481188] - mlxsw: spectrum_nve: Keep track of IPv6 addresses used by FDB entries (Amit Cohen) [Orabug: 34481188] - mlxsw: reg: Add a function to fill IPv6 unicast FDB entries (Amit Cohen) [Orabug: 34481188] - mlxsw: Split handling of FDB tunnel entries between address families (Amit Cohen) [Orabug: 34481188] - mlxsw: spectrum_nve_vxlan: Make VxLAN flags check per address family (Amit Cohen) [Orabug: 34481188] - mlxsw: spectrum_ipip: Use common hash table for IPv6 address mapping (Amit Cohen) [Orabug: 34481188] - mlxsw: spectrum: Add hash table for IPv6 address mapping (Amit Cohen) [Orabug: 34481188] - net/mlx5e: Move goto action checks into tc_action goto post parse op (Roi Dayan) [Orabug: 34481188] - net/mlx5e: Move vlan action chunk into tc action vlan post parse op (Roi Dayan) [Orabug: 34481188] - net/mlx5e: Add post_parse() op to tc action infrastructure (Roi Dayan) [Orabug: 34481188] - net/mlx5e: Move sample attr allocation to tc_action sample parse op (Roi Dayan) [Orabug: 34481188] - net/mlx5e: TC action parsing loop (Roi Dayan) [Orabug: 34481188] - net/mlx5e: Add redirect ingress to tc action infra (Roi Dayan) [Orabug: 34481188] - net/mlx5e: Add sample and ptype to tc_action infra (Roi Dayan) [Orabug: 34481188] - net/mlx5e: Add ct to tc action infra (Roi Dayan) [Orabug: 34481188] - net/mlx5e: Add mirred/redirect to tc action infra (Roi Dayan) [Orabug: 34481188] - net/mlx5e: Add mpls push/pop to tc action infra (Roi Dayan) [Orabug: 34481188] - net/mlx5e: Add vlan push/pop/mangle to tc action infra (Roi Dayan) [Orabug: 34481188] - net/mlx5e: Add pedit to tc action infra (Roi Dayan) [Orabug: 34481188] - net/mlx5e: Add csum to tc action infra (Roi Dayan) [Orabug: 34481188] - net/mlx5e: Add tunnel encap/decap to tc action infra (Roi Dayan) [Orabug: 34481188] - net/mlx5e: Add goto to tc action infra (Roi Dayan) [Orabug: 34481188] - net/mlx5e: Add tc action infrastructure (Roi Dayan) [Orabug: 34481188] - net_tstamp: add new flag HWTSTAMP_FLAG_BONDED_PHC_INDEX (Hangbin Liu) [Orabug: 34481188] - net/mlx5: Create more priorities for FDB bypass namespace (Maor Gottlieb) [Orabug: 34481188] - net/mlx5: Refactor mlx5_get_flow_namespace (Maor Gottlieb) [Orabug: 34481188] - net/mlx5: Separate FDB namespace (Maor Gottlieb) [Orabug: 34481188] - bpf: Let bpf_warn_invalid_xdp_action() report more info (Paolo Abeni) [Orabug: 34481188] - net/mlx4: Use irq_update_affinity_hint() (Nitesh Narayan Lal) [Orabug: 34481188] - net/mlx5: Use irq_set_affinity_and_hint() (Nitesh Narayan Lal) [Orabug: 34481188] - genirq: Provide new interfaces for affinity hints (Thomas Gleixner) [Orabug: 34481188] - net/mlx5: Dynamically resize flow counters query buffer (Avihai Horon) [Orabug: 34481188] - net/mlx5e: TC, Set flow attr ip_version earlier (Roi Dayan) [Orabug: 34481188] - net/mlx5e: TC, Move common flow_action checks into function (Roi Dayan) [Orabug: 34481188] - net/mlx5e: Remove redundant actions arg from vlan push/pop funcs (Roi Dayan) [Orabug: 34481188] - net/mlx5e: Remove redundant actions arg from validate_goto_chain() (Roi Dayan) [Orabug: 34481188] - net/mlx5e: TC, Remove redundant action stack var (Roi Dayan) [Orabug: 34481188] - net/mlx5e: Hide function mlx5e_num_channels_changed (Tariq Toukan) [Orabug: 34481188] - net/mlx5e: SHAMPO, clean MLX5E_MAX_KLM_PER_WQE macro (Ben Ben-Ishay) [Orabug: 34481188] - net/mlx5: SF, silence an uninitialized variable warning (Dan Carpenter) [Orabug: 34481188] - net/mlx5: Fix error return code in esw_qos_create() (Wei Yongjun) [Orabug: 34481188] - mlx5: fix mlx5i_grp_sw_update_stats() stack usage (Arnd Bergmann) [Orabug: 34481188] - mlx5: fix psample_sample_packet link error (Arnd Bergmann) [Orabug: 34481188] - mlxsw: Use Switch Multicast ID Register Version 2 (Amit Cohen) [Orabug: 34481188] - mlxsw: Use Switch Flooding Table Register Version 2 (Amit Cohen) [Orabug: 34481188] - mlxsw: Add support for more than 256 ports in SBSR register (Amit Cohen) [Orabug: 34481188] - mlxsw: Use u16 for local_port field instead of u8 (Amit Cohen) [Orabug: 34481188] - mlxsw: reg: Adjust PPCNT register to support local port 255 (Amit Cohen) [Orabug: 34481188] - mlxsw: reg: Increase 'port_num' field in PMTDB register (Amit Cohen) [Orabug: 34481188] - mlxsw: reg: Align existing registers to use extended local_port field (Amit Cohen) [Orabug: 34481188] - mlxsw: item: Add support for local_port field in a split form (Amit Cohen) [Orabug: 34481188] - mlxsw: reg: Remove unused functions (Amit Cohen) [Orabug: 34481188] - mlxsw: spectrum: Bump minimum FW version to xx.2010.1006 (Amit Cohen) [Orabug: 34481188] - devlink: Simplify devlink resources unregister call (Leon Romanovsky) [Orabug: 34481188] - mlxsw: spectrum_router: Remove deadcode in mlxsw_sp_rif_mac_profile_find (Danielle Ratson) [Orabug: 34481188] - devlink: Add 'enable_iwarp' generic device param (Shiraz Saleem) [Orabug: 34481188] - mlxsw: constify address in mlxsw_sp_port_dev_addr_set (Jakub Kicinski) [Orabug: 34481188] - stmmac: fix build due to brainos in trans_start changes (Alexander Lobakin) [Orabug: 34481188] - net: annotate accesses to queue->trans_start (Eric Dumazet) [Orabug: 34481188] - net/mlx5: E-switch, Create QoS on demand (Dmytro Linkin) [Orabug: 34481188] - net/mlx5: E-switch, Enable vport QoS on demand (Dmytro Linkin) [Orabug: 34481188] - net/mlx5: E-switch, move offloads mode callbacks to offloads file (Parav Pandit) [Orabug: 34481188] - net/mlx5: E-switch, Reuse mlx5_eswitch_set_vport_mac (Parav Pandit) [Orabug: 34481188] - net/mlx5: E-switch, Remove vport enabled check (Parav Pandit) [Orabug: 34481188] - net/mlx5e: Specify out ifindex when looking up decap route (Chris Mi) [Orabug: 34481188] - net/mlx5e: TC, Move comment about mod header flag to correct place (Roi Dayan) [Orabug: 34481188] - net/mlx5e: TC, Move kfree() calls after destroying all resources (Roi Dayan) [Orabug: 34481188] - net/mlx5e: TC, Destroy nic flow counter if exists (Roi Dayan) [Orabug: 34481188] - net/mlx5: TC, using swap() instead of tmp variable (Yihao Han) [Orabug: 34481188] - net/mlx5: CT: Allow static allocation of mod headers (Paul Blakey) [Orabug: 34481188] - net/mlx5e: Refactor mod header management API (Paul Blakey) [Orabug: 34481188] - net/mlx5: Avoid printing health buffer when firmware is unavailable (Aya Levin) [Orabug: 34481188] - net/mlx5: Fix format-security build warnings (Saeed Mahameed) [Orabug: 34481188] - net/mlx5e: Support ethtool cq mode (Saeed Mahameed) [Orabug: 34481188] - netdevsim: move vfconfig to nsim_dev (Jakub Kicinski) [Orabug: 34481188] - netdevsim: take rtnl_lock when assigning num_vfs (Jakub Kicinski) [Orabug: 34481188] - netdevsim: remove max_vfs dentry (Jakub Kicinski) [Orabug: 34481188] - virtio_net: introduce TX timeout watchdog (Tony Lu) [Orabug: 34481188] - net/mlx5e: TC, Fix memory leak with rules with internal port (Roi Dayan) [Orabug: 34481188] - net/mlx5: Fix some error handling paths in 'mlx5e_tc_add_fdb_flow()' (Christophe JAILLET) [Orabug: 34481188] - net/mlx5e: Fix skb memory leak when TC classifier action offloads are disabled (Gal Pressman) [Orabug: 34481188] - net/mlx5: Fix tc max supported prio for nic mode (Chris Mi) [Orabug: 34481188] - net/mlx5: Use first online CPU instead of hard coded CPU (Shay Drory) [Orabug: 34481188] - net/mlx5: DR, Fix querying eswitch manager vport for ECPF (Yevgeny Kliteynik) [Orabug: 34481188] - mlxsw: spectrum_router: Consolidate MAC profiles when possible (Danielle Ratson) [Orabug: 34481188] - net/mlx5e: SHAMPO, Fix constant expression result (Ben Ben-Ishay) [Orabug: 34481188] - net/mlx5: Fix access to a non-supported register (Aya Levin) [Orabug: 34481188] - net/mlx5: Fix too early queueing of log timestamp work (Gal Pressman) [Orabug: 34481188] - net/mlx5: Fix use after free in mlx5_health_wait_pci_up (Amir Tzin) [Orabug: 34481188] - net/mlx5: E-Switch, Use indirect table only if all destinations support it (Maor Dickman) [Orabug: 34481188] - net/mlx5: Lag, Fix recreation of VF LAG (Maor Gottlieb) [Orabug: 34481188] - mlxsw: spectrum: Allow driver to load with old firmware versions (Danielle Ratson) [Orabug: 34481188] - RDMA/nldev: Check stat attribute before accessing it (Leon Romanovsky) [Orabug: 34481188] - net/mlx5: Fix flow counters SF bulk query len (Avihai Horon) [Orabug: 34481188] - net/mlx5: DR, Fix check for unsupported fields in match param (Yevgeny Kliteynik) [Orabug: 34481188] - net/mlx5: DR, Handle eswitch manager and uplink vports separately (Yevgeny Kliteynik) [Orabug: 34481188] - net/mlx5: Lag, fix a potential Oops with mlx5_lag_create_definer() (Dan Carpenter) [Orabug: 34481188] - net/mlx5: Support internal port as decap route device (Ariel Levkovich) [Orabug: 34481188] - net/mlx5e: Term table handling of internal port rules (Ariel Levkovich) [Orabug: 34481188] - net/mlx5e: Add indirect tc offload of ovs internal port (Ariel Levkovich) [Orabug: 34481188] - net/mlx5e: Offload internal port as encap route device (Ariel Levkovich) [Orabug: 34481188] - net/mlx5e: Offload tc rules that redirect to ovs internal port (Ariel Levkovich) [Orabug: 34481188] - net/mlx5e: Accept action skbedit in the tc actions list (Ariel Levkovich) [Orabug: 34481188] - net/mlx5: E-Switch, Add ovs internal port mapping to metadata support (Ariel Levkovich) [Orabug: 34481188] - net/mlx5e: Use generic name for the forwarding dev pointer (Ariel Levkovich) [Orabug: 34481188] - net/mlx5e: Refactor rx handler of represetor device (Ariel Levkovich) [Orabug: 34481188] - net/mlx5: DR, Add check for unsupported fields in match param (Muhammad Sammar) [Orabug: 34481188] - net/mlx5: Allow skipping counter refresh on creation (Paul Blakey) [Orabug: 34481188] - net/mlx5: CT: Remove warning of ignore_flow_level support for VFs (Paul Blakey) [Orabug: 34481188] - net/mlx5: Add esw assignment back in mlx5e_tc_sample_unoffload() (Nathan Chancellor) [Orabug: 34481188] - net: mellanox: mlxbf_gige: Replace non-standard interrupt handling (Asmaa Mnebhi) [Orabug: 34481188] - mlxsw: spectrum_qdisc: Offload root TBF as port shaper (Petr Machata) [Orabug: 34481188] - RDMA/core: Fix missed initialization of rdma_hw_stats::lock (Mark Zhang) [Orabug: 34481188] - RDMA/umem: Allow pinned dmabuf umem usage (Gal Pressman) [Orabug: 34481188] - net/mlx5: Lag, Make mlx5_lag_is_multipath() be static inline (Maor Dickman) [Orabug: 34481188] - net/mlx5e: Prevent HW-GRO and CQE-COMPRESS features operate together (Khalid Manaa) [Orabug: 34481188] - net/mlx5e: Add HW-GRO offload (Khalid Manaa) [Orabug: 34481188] - net/mlx5e: Add HW_GRO statistics (Khalid Manaa) [Orabug: 34481188] - net/mlx5e: HW_GRO cqe handler implementation (Khalid Manaa) [Orabug: 34481188] - net/mlx5e: Add data path for SHAMPO feature (Ben Ben-Ishay) [Orabug: 34481188] - net/mlx5e: Add handle SHAMPO cqe support (Khalid Manaa) [Orabug: 34481188] - net/mlx5e: Add control path for SHAMPO feature (Ben Ben-Ishay) [Orabug: 34481188] - net/mlx5e: Add support to klm_umr_wqe (Ben Ben-Ishay) [Orabug: 34481188] - net/mlx5: Add SHAMPO caps, HW bits and enumerations (Ben Ben-Ishay) [Orabug: 34481188] - lib: bitmap: Introduce node-aware alloc API (Tariq Toukan) [Orabug: 34481188] - net/mlx5: remove the recent devlink params (Jakub Kicinski) [Orabug: 34481188] - mlxsw: spectrum_router: Expose RIF MAC profiles to devlink resource (Danielle Ratson) [Orabug: 34481188] - mlxsw: spectrum_router: Add RIF MAC profiles support (Danielle Ratson) [Orabug: 34481188] - mlxsw: spectrum_router: Propagate extack further (Danielle Ratson) [Orabug: 34481188] - mlxsw: resources: Add resource identifier for RIF MAC profiles (Danielle Ratson) [Orabug: 34481188] - mlxsw: reg: Add MAC profile ID field to RITR register (Danielle Ratson) [Orabug: 34481188] - net/mlx5: SF_DEV Add SF device trace points (Parav Pandit) [Orabug: 34481188] - net/mlx5: SF, Add SF trace points (Parav Pandit) [Orabug: 34481188] - net/mlx5: Let user configure max_macs param (Shay Drory) [Orabug: 34481188] - net/mlx5: Let user configure event_eq_size param (Shay Drory) [Orabug: 34481188] - net/mlx5: Let user configure io_eq_size param (Shay Drory) [Orabug: 34481188] - net/mlx5: Bridge, support replacing existing FDB entry (Vlad Buslov) [Orabug: 34481188] - net/mlx5: Bridge, extract code to lookup and del/notify entry (Vlad Buslov) [Orabug: 34481188] - net/mlx5: Add periodic update of host time to firmware (Aya Levin) [Orabug: 34481188] - net/mlx5: Print health buffer by log level (Aya Levin) [Orabug: 34481188] - net/mlx5: Extend health buffer dump (Aya Levin) [Orabug: 34481188] - net/mlx5: Reduce flow counters bulk query buffer size for SFs (Avihai Horon) [Orabug: 34481188] - net/mlx5: Fix unused function warning of mlx5i_flow_type_mask (Shay Drory) [Orabug: 34481188] - net/mlx5: Remove unnecessary checks for slow path flag (Paul Blakey) [Orabug: 34481188] - net/mlx5e: don't write directly to netdev->dev_addr (Jakub Kicinski) [Orabug: 34481188] - RDMA/mlx5: Use dev_addr_mod() (Jakub Kicinski) [Orabug: 34481188] - mlxsw: spectrum: Use 'bitmap_zalloc()' when applicable (Christophe JAILLET) [Orabug: 34481188] - dma-buf: move dma-buf symbols into the DMA_BUF module namespace (Greg Kroah-Hartman) [Orabug: 34481188] - net: convert users of bitmap_foo() to linkmode_foo() (Sean Anderson) [Orabug: 34481188] - mlx5: fix build after merge (Jakub Kicinski) [Orabug: 34481188] - ethernet: mlxsw: use eth_hw_addr_gen() (Jakub Kicinski) [Orabug: 34481188] - RDMA/mlx5: Move struct mlx5_core_mkey to mlx5_ib (Aharon Landau) [Orabug: 34481188] - RDMA/mlx5: Replace struct mlx5_core_mkey by u32 key (Aharon Landau) [Orabug: 34481188] - RDMA/mlx5: Remove pd from struct mlx5_core_mkey (Aharon Landau) [Orabug: 34481188] - RDMA/mlx5: Remove size from struct mlx5_core_mkey (Aharon Landau) [Orabug: 34481188] - RDMA/mlx5: Remove iova from struct mlx5_core_mkey (Aharon Landau) [Orabug: 34481188] - mlxsw: spectrum_qdisc: Make RED, TBF offloads classful (Petr Machata) [Orabug: 34481188] - mlxsw: spectrum_qdisc: Validate qdisc topology (Petr Machata) [Orabug: 34481188] - mlxsw: spectrum_qdisc: Clean stats recursively when priomap changes (Petr Machata) [Orabug: 34481188] - mlxsw: spectrum_qdisc: Unify graft validation (Petr Machata) [Orabug: 34481188] - mlxsw: spectrum_qdisc: Destroy children in mlxsw_sp_qdisc_destroy() (Petr Machata) [Orabug: 34481188] - mlxsw: spectrum_qdisc: Extract two helpers for handling future FIFOs (Petr Machata) [Orabug: 34481188] - mlxsw: spectrum_qdisc: Query tclass / priomap instead of caching it (Petr Machata) [Orabug: 34481188] - net/mlx5: E-Switch, Increase supported number of forward destinations to 32 (Maor Dickman) [Orabug: 34481188] - net/mlx5: E-Switch, Use dynamic alloc for dest array (Maor Dickman) [Orabug: 34481188] - net/mlx5: Lag, use steering to select the affinity port in LAG (Maor Gottlieb) [Orabug: 34481188] - net/mlx5: Lag, add support to create/destroy/modify port selection (Maor Gottlieb) [Orabug: 34481188] - net/mlx5: Lag, add support to create TTC tables for LAG port selection (Maor Gottlieb) [Orabug: 34481188] - net/mlx5: Lag, add support to create definers for LAG (Maor Gottlieb) [Orabug: 34481188] - net/mlx5: Lag, set match mask according to the traffic type bitmap (Maor Gottlieb) [Orabug: 34481188] - net/mlx5: Lag, set LAG traffic type mapping (Maor Gottlieb) [Orabug: 34481188] - net/mlx5: Lag, move lag files into directory (Maor Gottlieb) [Orabug: 34481188] - net/mlx5: Introduce new uplink destination type (Maor Gottlieb) [Orabug: 34481188] - net/mlx5: Add support to create match definer (Maor Gottlieb) [Orabug: 34481188] - net/mlx5: Introduce port selection namespace (Maor Gottlieb) [Orabug: 34481188] - net/mlx5: Support partial TTC rules (Maor Gottlieb) [Orabug: 34481188] - mlx5: prevent 64bit divide (Jakub Kicinski) [Orabug: 34481188] - habanalabs: add support for dma-buf exporter (Tomer Tayar) [Orabug: 34481188] - net/mlx5: Use system_image_guid to determine bonding (Rongwei Liu) [Orabug: 34481188] - net/mlx5: Use native_port_num as 1st option of device index (Rongwei Liu) [Orabug: 34481188] - net/mlx5: Introduce new device index wrapper (Rongwei Liu) [Orabug: 34481188] - net/mlx5: Check return status first when querying system_image_guid (Rongwei Liu) [Orabug: 34481188] - net/mlx5: DR, Prefer kcalloc over open coded arithmetic (Len Baker) [Orabug: 34481188] - net/mlx5e: Add extack msgs related to TC for better debug (Abhiram R N) [Orabug: 34481188] - net/mlx5: CT: Fix missing cleanup of ct nat table on init failure (Paul Blakey) [Orabug: 34481188] - net/mlx5: Disable roce at HCA level (Shay Drory) [Orabug: 34481188] - net/mlx5i: Enable Rx steering for IPoIB via ethtool (Moosa Baransi) [Orabug: 34481188] - net/mlx5: Bridge, provide flow source hints (Vlad Buslov) [Orabug: 34481188] - net/mlx5: Read timeout values from DTOR (Amir Tzin) [Orabug: 34481188] - net/mlx5: Read timeout values from init segment (Amir Tzin) [Orabug: 34481188] - net/mlx5: Add layout to support default timeouts register (Amir Tzin) [Orabug: 34481188] - ethernet: constify references to netdev->dev_addr in drivers (Jakub Kicinski) [Orabug: 34481188] - mlxsw: spectrum_qdisc: Introduce per-TC ECN counters (Petr Machata) [Orabug: 34481188] - mlxsw: reg: Add ecn_marked_tc to Per-TC Congestion Counters (Petr Machata) [Orabug: 34481188] - mlxsw: reg: Rename MLXSW_REG_PPCNT_TC_CONG_TC to _CNT (Petr Machata) [Orabug: 34481188] - mlxsw: reg: Fix a typo in a group heading (Petr Machata) [Orabug: 34481188] - devlink: Don't throw an error if flash notification sent before devlink visible (Leon Romanovsky) [Orabug: 34481188] - devlink: fix flexible_array.cocci warning (Guo Zhengkui) [Orabug: 34481188] - ethtool: don't drop the rtnl_lock half way thru the ioctl (Jakub Kicinski) [Orabug: 34481188] - devlink: expose get/put functions (Jakub Kicinski) [Orabug: 34481188] - ethtool: handle info/flash data copying outside rtnl_lock (Jakub Kicinski) [Orabug: 34481188] - ethtool: push the rtnl_lock into dev_ethtool() (Jakub Kicinski) [Orabug: 34481188] - devlink: make all symbols GPL-only (Jakub Kicinski) [Orabug: 34481188] - devlink: Simplify internal devlink params implementation (Leon Romanovsky) [Orabug: 34481188] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-2196 Oracle Linux 6 Oracle Linux 7 [4.1.12-124.73.2] - netfilter: nf_tables: fix null deref due to zeroed list head (Florian Westphal) [Orabug: 35181628] {CVE-2023-1095} - sctp: fail if no bound addresses can be used for a given scope (Marcelo Ricardo Leitner) [Orabug: 35181461] {CVE-2023-1074} - HID: check empty report_list in hid_validate_values() (Pietro Borrello) [Orabug: 35181168] {CVE-2023-1073} - media: uvcvideo: Avoid cyclic entity chains due to malformed USB descriptors (Will Deacon) [Orabug: 35180270] {CVE-2020-0404} [4.1.12-124.73.1] - mm/mincore.c: make mincore() more conservative (Jiri Kosina) [Orabug: 35133279] {CVE-2019-5489} - mm: introduce vma_is_anonymous(vma) helper (Oleg Nesterov) [Orabug: 35133279] - Revert 'Change mincore() to count 'mapped' pages rather than 'cached' pages' (Linus Torvalds) [Orabug: 35124616] - ipv6: raw: Deduct extension header length in rawv6_push_pending_frames (Herbert Xu) [Orabug: 35005831] {CVE-2023-0394} IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-1095 CVE-2023-0394 CVE-2019-5489 CVE-2020-0404 CVE-2023-1073 CVE-2023-1074 Oracle Linux 9 [0.11.3-4.el9_1.3] - Fixed a vulnerability in pcs-web-ui-node-modules - Resolves: rhbz#2179900 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-28154 Oracle Linux 6 [3.44.0-7.0.3] - Back port nss security update CVE-2023-0767 [Orabug: 35205543] [3.44.0-7.0.2] - Fix CVE-2021-43527 [Orabug: 33627334] [3.44.0-7.0.1] - Added nss-vendor.patch to change vendor - Temporarily disable some tests until expired PayPalEE.cert is renewed [3.44.0-7] - Add back missing Mozilla Policy [3.44.0-6] - Fix gtest failure detection [3.44.0-5] - Turn off cp TLS_DHE_DSS_WITH_AES_256_GCM_SHA384 by default [3.44.0-4] - Fix cipher order - fix broken gtests [3.44.0-3] - fix problems found by qe: - AC13: SSL3 'disabled' - AC26: Chacha20 and TLS 1.3 ciphers should be prioritized - SHA-384 PRF => *_256_GCM_SHA384 ciphers should be reenabled for consistency - AC28: nss-policy-check is missing from packages and /usr/local/bin:/usr/bin - extra: apostrophes in certutil manpage got mangled [3.44.0-2] - restore Conflicts: with curl [3.44.0-1] - Rebase to 3.44.0 with critical fixes [3.36.0-9] - Backport upstream fix for CVE-2018-12384 - Remove nss-lockcert-api-change.patch, which turned out to be a mistake (the symbol was not exported from libnss) [3.36.0-8] - Restore CERT_LockCertTrust and CERT_UnlockCertTrust back in cert.h [3.36.0-7] - rebuild [3.36.0-6] - Keep legacy code signing trust flags for backwards compatibility [3.36.0-5] - Decrease the iteration count of PKCS#12 for compatibility with Windows - Fix deadlock when a token is re-inserted while a client process is running [3.36.0-4] - Ignore tests which only works with newer nss-softokn [3.36.0-3] - Use the correct tarball of NSS 3.36 release - Ignore EncryptDeriveTest which only works with newer nss-softokn [3.36.0-2] - Don't skip non-FIPS and ECC test cases in ssl.sh [3.36.0-1] - Rebase to NSS 3.36.0 [3.36.0-0.1.beta] - Rebase to NSS 3.36.0 BETA - Remove upstreamed nss-is-token-present-race.patch - Revert the upstream changes that default to sql database [3.34.0-3] - Replace race.patch and nss-3.16-token-init-race.patch with a proper upstream fix [3.34.0-2] - Don't restrict nss_cycles to sharedb [3.34.0-1] - Rebase to NSS 3.34.0 [3.28.4-3] - Fix zero-length record treatment for stream ciphers and SSLv2 [3.28.4-2] - Include CKBI 2.14 and updated CA constraints from NSS 3.28.5 [3.28.4-1] - Rebase to 3.28.4 [3.28.3-3] - Fix crash with tstclnt -W - Adjust gtests to run with our old softoken and downstream patches [3.28.3-2] - Avoid cipher suite ordering change, spotted by Hubert Kario [3.28.3-1] - Rebase to 3.28.3 - Remove upstreamed moz-1282627-rh-1294606.patch, moz-1312141-rh-1387811.patch, moz-1315936.patch, and moz-1318561.patch - Remove no longer necessary nss-duplicate-ciphers.patch - Disable X25519 and exclude tests using it - Catch failed ASN1 decoding of RSA keys, by Kamil Dudka (#1427481) [3.27.1-13] - Update expired PayPalEE.cert [3.27.1-12] - Disable unsupported test cases in ssl_gtests [3.27.1-11] - Adjust the sslstress.txt filename so that it matches with the disableSSL2tests patch ported from RHEL 7 - Exclude SHA384 and CHACHA20_POLY1305 ciphersuites from stress tests - Don't add gtests and ssl_gtests to nss_tests, unless gtests are enabled [3.27.1-10] - Add patch to fix SSL CA name leaks, taken from NSS 3.27.2 release - Add patch to fix bash syntax error in tests/ssl.sh - Add patch to remove duplicate ciphersuites entries in sslinfo.c - Add patch to abort selfserv/strsclnt/tstclnt on non-parsable version range - Build with support for SSLKEYLOGFILE [3.27.1-9] - Update fix_multiple_open patch to fix regression in openldap client - Remove pk11_genobj_leak patch, which caused crash with Firefox - Add comment in the policy file to preserve the last empty line - Disable SHA384 ciphersuites when CKM_TLS12_KEY_AND_MAC_DERIVE is not provided by softoken; this superseds check_hash_impl patch [3.27.1-8] - Fix problem in check_hash_impl patch [3.27.1-7] - Add patch to check if hash algorithms are backed by a token - Add patch to disable TLS_ECDHE_{RSA,ECDSA}_WITH_AES_128_CBC_SHA256, which have never enabled in the past [3.27.1-6] - Add upstream patch to fix a crash. Mozilla #1315936 [3.27.1-5] - Disable the use of RSA-PSS with SSL/TLS. #1390161 [3.27.1-4] - Use updated upstream patch for RH bug 1387811 [3.27.1-3] - Added upstream patches to fix RH bugs 1057388, 1294606, 1387811 [3.27.1-2] - Enable gtests when requested [3.27.1-1] - Rebase to NSS 3.27.1 - Remove nss-646045.patch, which is not necessary - Remove p-disable-md5-590364-reversed.patch, which is no-op here, because the patched code is removed later in %setup - Remove disable_hw_gcm.patch, which is no-op here, because the patched code is removed later in %setup. Also remove NSS_DISABLE_HW_GCM setting, which was only required for RHEL 5 - Add Bug-1001841-disable-sslv2-libssl.patch and Bug-1001841-disable-sslv2-tests.patch, which completedly disable EXPORT ciphersuites. Ported from RHEL 7 - Remove disable-export-suites-tests.patch, which is covered by Bug-1001841-disable-sslv2-tests.patch - Remove nss-ca-2.6-enable-legacy.patch, as we decided to not allow 1024 legacy CA certificates - Remove ssl-server-min-key-sizes.patch, as we decided to support DH key size greater than 1023 bits - Remove nss-init-ss-sec-certs-null.patch, which appears to be no-op, as it clears memory area allocated with PORT_ZAlloc() - Remove nss-disable-sslv2-libssl.patch, nss-disable-sslv2-tests.patch, sslauth-no-v2.patch, and nss-sslstress-txt-ssl3-lower-value-in-range.patch as SSLv2 is already disabled in upstream - Remove fix-nss-test-filtering.patch, which is fixed in upstream - Add nss-check-policy-file.patch from Fedora - Install policy config in /etc/pki/nss-legacy/nss-rhel6.config [3.21.0-8] - Ensure all ssl.sh tests are executed [3.21.0-7] - Update sslauth patch to run more tests [3.21.0-6] - Fix syntax errors in patch that disables sslv2 tests - Resolves: Bug 1297888 - Rebase RHEL 6.8 to NSS 3.21 for Firefox 45 [3.21.0-5] - Resolves: Bug 1304812 - Disable support for SSLv2 completely. [3.21.0-4] - Add patches for ABI compatibility [3.21.0-3] - Disable extended master-secret due to older version of softoken [3.21.0-2] - Enable two additional ciphers and keep another one disabled - Prevent enabling extended masker key derive [3.21.0-1] - Rebase to NSS-3.21 [3.19.1-9] - Prevent TLS 1.2 Transcript Collision attacks against MD5 in key exchange protocol - Resolves: Bug 1289890 [3.19.1-7] - Package listsuites as part of the unsupported tools set - Resolves: Bug 1283655 [3.19.1-6] - Resolves: Bug 1272504 - Enable TLS 1.2 as the default in nss [3.19.1-5] - Rebuild against updated NSPR [3.19.1-4] - Sync up with the rhel-6.6 branch - Resolves: Bug 1224450 [3.19.1-3] - Additional NULL initialization. [3.19.1-2] - Updated the patch to keep old cipher suite order - Resolves: Bug 1224450 [3.19.1-1] - Rebase to nss-3.19.1 - Resolves: Bug 1224450 [3.18.0-5.3] - On RHEL 6.x keep the TLS version defaults unchanged. - Require softokn build 22 to ensure runtime compatibility. - Relax the requirement from pkcs11-devel to nss-softokn-freebl-devel to allow same or newer. - Update to CKBI 2.4 from NSS 3.18.1 (the only change in NSS 3.18.1) [3.18.0-5] - Update and reeneable nss-646045.patch on account of the rebase - Resolves: Bug 1200900 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL7.1] [3.18.0-4] - Fix shell syntax error in nss/tests/all.sh - Resolves: Bug 1200900 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-6.6] [3.18.0-3] - Restore a patch that had been mistakenly disabled - Resolves: Bug 1200900 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-6.6] [3.18.0-2] - Replace expired PayPal test certificate that breaks the build - Resolves: Bug 1200900 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-6.6] [3.18.0-1] - Resolves: Bug 1200900 - Rebase nss to 3.18 for Firefox 38 ESR [RHEL-6.6] - Resolves: Bug 1131311 - rhel65 ns-slapd crash, segfault error 4 in libnss3.so in PK11_DoesMechanism at pk11slot.c:1824 - Temporarily disable some tests until expired PayPalEE.cert is renewed [3.16.2.3-4] - Keep the same cipher suite order as we had in NSS_3_15_3_RTM - Resolves: Bug 1123092 - openldap-2.4.23-34.el6_5.1.i686 fails after updating nss to nss-3.16.1-4.el6_5.i686 [3.16.2.3-3] - Resolves: Bug 1158160 - Upgrade to NSS 3.16.2.3 for Firefox 31.3 - Remove unused indentation pseudo patch - require nss util 3.16.2.3 - Restore patch for certutil man page - supply missing options descriptions to the man page [3.16.2.3-1] - Resolves: Bug 1158160 - Upgrade to NSS 3.16.2.3 for Firefox 31.3 [3.16.1-14] - Resolves: Bug 1145432 - CVE-2014-1568 [3.16.1-13] - Fix pem deadlock caused by previous version of a fix for a race condition - Fixes: Bug 1090681 [3.16.1-12] - Add references to bugs filed upstream - Related: Bug 1090681, Bug 1104300 [3.16.1-11] - Resolves: Bug 1090681 - RHDS 9.1 389-ds-base-1.2.11.15-31 crash in PK11_DoesMechanism [3.16.1-10] - Replace expired PayPal test certificate that breaks the build - Related: Bug 1099619 [3.16.1-9] - Fix defects found by coverity - Resolves: Bug 1104300 [3.16.1-8] - Backport nss-3.12.6 upstream fix required by Firefox 31 - Resolves: Bug 1099619 [3.16.1-7] - Update nspr-version to 4.10.6 [3.16.1-6] - Update pem sources to the same ones used on rhel-7 - Remove no longer needed patches on account of this update - Resolves: Bug 1002205 [3.16.1-5] - Move removal of directories to the end of the %prep section - Resolves: Bug 689919 - build without any softoken or util sources in the tree [3.16.1-4] - Remove unused patches rendered obsolete [3.16.1-3] - Fix pem module trashing of private keys on failed login - Resolves: Bug 1002205 - PEM module trashes private keys if login fails [3.16.1-2] - Restore use of indentation patch until another bug is resolved - Resolves: Bug 606022 - nss security tools lack man pages [3.16.1-1] - Update to nss-3.16.1 - Resolves: Bug 1099619 - Rebase nss in RHEL 6.6 to NSS 3.16.1 [3.15.3-11] - Resolves: Bug 689919 - build without any softoken or util sources in the tree - Add define-uint32.patch to deal with using older version of nss-softokn - Fix suboptimal test failure detection shell code in the %check section [3.15.3-10] - Prevent users from disabling the internal crypto module - Resolves: Bug 1059176 - nss segfaults with opencryptoki module [3.15.3-9] - Improve support for ECDSA algorithm via pluggable ECC - Document the purpose of the iquote.patch - Resolves: Bug 1057224 - Pluggable ECC in NSS not enabled on RHEL 6 and above [3.15.3-8] - Install man pages for the nss security tools - Resolves: Bug 606022 - nss security tools lack man pages [3.15.3-7] - Fix the numbering and naming of the patches - Resolves: Bug 895339 - [PEM] active FTPS with encrypted client key ends up with SSL_ERROR_TOKEN_INSERTION_REMOVAL [3.15.3-6] - make derEncodingsMatch work with encrypted keys - rename a patch, dropped the experimental moniker from it - Resolves: Bug 895339 - [PEM] active FTPS with encrypted client key ends up with SSL_ERROR_TOKEN_INSERTION_REMOVAL [3.15.3-5] - Resolves: Bug 895339 - [PEM] active FTPS with encrypted client key ends up with SSL_ERROR_TOKEN_INSERTION_REMOVAL [3.15.3-4] - Revoke trust in one mis-issued anssi certificate - Resolves: Bug 1042686 - nss: Mis-issued ANSSI/DCSSI certificate (MFSA 2013-117) [rhel-6.6] [3.15.3-3] - Disable hw gcm on rhel-5 based build environments where OS lacks support - Rollback changes to build nss without softokn until Bug 689919 is approved - Cipher suite was run as part of the nss-softokn build [3.15.3-2] - Build nss without softoken, freebl, or util sources in the build source tree - Resolves: Bug 1032472 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741 [3.15.3-1] - Update to NSS_3_15_3_RTM - Resolves: Bug 1032472 - CVE-2013-5605 CVE-2013-5606 CVE-2013-1741 - Resolves: Bug 1031238 - deadlock in trust domain lock and object lock [3.15.1-15] - Using export NSS_DISABLE_HW_GCM=1 to deal with some problemmatic build systems - Resolves: rhbz#1016044 - nss.s390: primary link for libnssckbi.so must be /usr/lib64/libnssckbi.so [3.15.1-14] - Add s390x and ia64 to the %define multilib_arches list used for defining alt_ckbi - Resolves: rhbz#1016044 - nss.s390: primary link for libnssckbi.so must be /usr/lib64/libnssckbi.so [3.15.1-13] - Add zero default value to DISABLETEST check and fix the TEST_FAILURES check and reporting - Resolves: rhbz#990631 - file permissions of pkcs11.txt/secmod.db must be kept when modified by NSS - Related: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x) [3.15.1-12] - Add a zero default value to the DISABLETEST and TEST_FAILURES checks - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x) [3.15.1-11] - Fix the test for zero failures in the %check section - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x) [3.15.1-10] - Restore a mistakenly removed patch - Resolves: rhbz#961659 - SQL backend does not reload certificates [3.15.1-9] - Rebuild for the pem module to link with freel from nss-softokn-3.14.3-6.el6 - Related: rhbz#993441 - NSS needs to conform to new FIPS standard. [rhel-6.5.0] - Related: rhbz#1010224 - NSS 3.15 breaks SSL in OpenLDAP clients [3.15.1-8] - Don't require nss-softokn-fips - Resolves: rhbz#993441 - NSS needs to conform to new FIPS standard. [rhel-6.5.0] [3.15.1-7] - Additional syntax fixes in nss-versus-softoken-test.patch - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x) [3.15.1-6] - Fix all.sh test for which application was last build by updating nss-versus-softoken-test.path - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x) [3.15.1-5] - Disable the cipher suite already run as part of the nss-softokn build - Resolves: rhbz#993441 - NSS needs to conform to new FIPS standard. [rhel-6.5.0] [3.15.1-4] - Require nss-softokn-fips - Resolves: rhbz#993441 - NSS needs to conform to new FIPS standard. [rhel-6.5.0] [3.15.1-3] - Require nspr-4.10.0 - Related: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x) [3.15.1-2] - Fix relative path in %check section to prevent undetected test failures - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x) [3.15.1-1] - Rebase to NSS_3.15.1_RTM - Resolves: rhbz#1002645 - Rebase RHEL 6 to NSS 3.15.1 (for FF 24.x) - Update patches on account of the shallow tree with the rebase to 3.15.1 - Update the pem module sources nss-pem-20130405.tar.bz2 with latest patches applied - Remove patches rendered obsolete by the nss rebase and the updated nss-pem sources - Enable the iquote.patch to access newly introduced types [3.14.3-37] - Do not hold issuer certificate handles in the crl cache - Resolves: rhbz#961659 - SQL backend does not reload certificates [3.14.3-36] - Resolves: rhbz#977341 - nss-tools certutil -H does not list all options [3.14.3-35] - Resolves: rhbz#702083 - dont require unique file basenames [3.14.3-34] - Fix race condition in cert code related to smart cards - Resolves: rhbz#903017 - Firefox hang when CAC/PIV smart card certificates are viewed in the certificate manager [3.14.3-33] - Configure libnssckbi.so to use the alternatives system in order to prepare for a drop in replacement. Please ensure that older packages that don't use the alternatives system for libnssckbi.so have a smaller n-v-r. [3.14.3-5] - Syncup with uptream changes for aes gcm and ecc suiteb - Enable ecc support for suite b - Apply several upstream AES GCM fixes - Use the pristine nss upstream sources with ecc included - Export NSS_ENABLE_ECC=1 in both the build and the check sections - Make failed requests for unsupoprted ssl pkcs 11 bypass non fatal - Resolves: rhbz#882408 - NSS_NO_PKCS11_BYPASS must preserve ABI - Related: rhbz#918950 - rebase nss to 3.14.3 [3.14.3-4] - Revert to accepting MD5 on digital signatures by default - Resolves: rhbz#918136 - nss 3.14 - MD5 hash algorithm disabled [3.14.3-3] - Ensure pem uses system freebl as with this update freebl brings in new API's - Resolves: rhbz#918950 - [RFE][RHEL6] Rebase to nss-3.14.3 to fix the lucky-13 issue * Tue Mar 26 2013 Elio Maldonado - 3.14.3-2 - Install sechash.h and secmodt.h which are now provided by nss-devel - Resolves: rhbz#918950 - [RFE][RHEL6] Rebase to nss-3.14.3 to fix the lucky-13 issue - Remove unsafe -r option from commands that remove headers already shipped by nss-util and nss-softoken [3.14.3-1] - Update to NSS_3.14.3_RTM - Resolves: rhbz#918950 - [RFE][RHEL6] Rebase to nss-3.14.3 to fix the lucky-13 issue - Update expired test certificates (fixed in upstream bug 852781) - Sync up pem module's rsawrapr.c with softoken's upstream changes for nss-3.14.3 - Reactivate the aia tests [3.14.0.0-12] - Recreate the distrust patch by backporting the upstream one - Resolves: rhpbz#890914 - Dis-trust TURKTRUST mis-issued *.google.com certificate [3.14.0.0-11] - Resolves: rhpbz#890914 - Dis-trust TURKTRUST mis-issued *.google.com certificate [3.14.0.0-10] - Remove a patch that caused a regression - Resolves: rhbz#883620 [3.14.0.0-9] - Fix locking issue causing curl hangs and authenticate to the correct session - Resolves: rhbz#872838 [3.14.0.0-8] - PEM peminit returns CKR_CANT_LOCK when needed to inform caller module isn't thread safe - Resolves: rhbz#555019 - [PEM] invalid writes in multi-threaded libcurl based application [3.14.0.0-7] - Add dummy sources file to test for and prevent breaking rhpkg commands - Enable testing for 'rhpk upload' and 'rhpk new-sources' breakage such as hangs - Related: rhbz#837089 [3.14.0.0-6] - Update the license to MPLv2.0 - turn off the aia tests - Resolves: rhbz#837089 [3.14.0.0-5] - Resolves: rhbz#702083 - NSS pem module should not require unique base file names [3.14.0.0-4] - turn on the aia tests - update nss-589636.patch to apply to httpdserv [3.14.0.0-3] - turn off aia tests for now [3.14.0.0-2] - turn off ocsp tests for now [3.14.0.0-1] - Rebase to nss-3.14.0.0-1 - Resolves: rhbz#837089 - Update ssl-cbc-random-iv patch for new sources - Remove patches rendered obsoleted by rebase to 3.14 - Add a patch to enforce no pkcs11 bypass [3.13.5-3] - Resolves: rhbz#830302 - require nspr 4.9.1 [3.13.5-2] - Resolves: rhbz#830302 - revert unwanted changes to nss.pc.in [3.13.5-1] - Resolves: rhbz#830302 - Update RHEL 6.x to NSS 3.13.5 and NSPR 4.9.1 for Mozilla 10.0.6 [3.13.3-7] - Resolves: rhbz#827351 invalid read and free on invalid cert load failure [3.13.3-6] - Resolves: #rhbz#805232 PEM module may attempt to free uninitialized pointer [3.13.3-5] - Resolves: rhbz#717913 - [PEM] various flaws detected by Coverity - Require nss-util 3.13.3 [3.13.3-4] - Resolves: rhbz#772628 nss_Init leaks memory [3.13.3-3] - Resolves: rhbz#746632 - pem_CreateObject mem leak on non existing file name - Use completed patch per code review [3.13.3-2] - Resolves: rhbz#746632 - pem_CreateObject mem leak on non existing file name - Resolves: rhbz#768669 - PEM unregistered callback causes SIGSEGV [3.13.3-1] - Update to 3.13.3 - Resolves: rhbz#798539 - Distrust MITM subCAs issued by TrustWave - Remove builtins-nssckbi_1_88_rtm.patch which the rebase obsoletes [3.13.1-6] - Resolves: rhbz#746632 - Adjust the patch for new sources [3.13.1-5] - Resolves: rhbz#746632 - pem_CreateObject() leaks memory given a non-existing file name [3.13.1-4] - Resolves: 784674 - Protect NSS_Shutdown from clients that fail to initialize nss [3.13.1-4] - Add two needed patches - Resolves: rhbz#783315 - Need nss workaround for freebl bug that causes openswan to drop connections - Resolves: rhbz#747387 - Unable to contact LDAP Server during winsync [3.13.1-3] - Rebuild [3.13.1-2] - Resolves: Bug 784490 - CVE-2011-3389 - Activate a patch that was left out in previous build [3.13.1-1] - Resolves: Bug 744070 - Update to 3.13.1 - Resolves: Bug 784674 - nss should protect against being called before nss_Init - Resolves: Bug 784490 - CVE-2011-3389 HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST) [3.12.10-17] - Resolves: Bug 761086 - Fix nss-735047.patch to not revert the nss-bz689031.patch [3.12.10-16] - Update builtins certs to those from NSSCKBI_1_88_RTM [3.12.10-15] - Bug 747387 - Unable to contact LDAP Server during winsync [3.12.10-14] - Add to the spec file the patch for Bug 671266 [3.12.10-13] - More coverity related fixes in the pem module [3.12.10-12] - Coverity related fixes [3.12.10-11] - Add relro support for executables and shared libraries [3.12.10-10] - Add partial RELRO support [3.12.10-9] - Fix the name of the last patch file [3.12.10-8] - Retagging to pick up two missing commits [3.12.10-7] - Update builtins certs to those from NSSCKBI_1_87_RTM [3.12.10-6] - Update builtins certs to those from NSSCKBI_1_86_RTM [3.12.10-5] - Update builtins certs to those from NSSCKBI_1_85_RTM [3.12.10-4] - Fix CMS to verify signed data when SignerInfo indicates signer by subjectKeyID [3.12.10-3] - Fix pem logging to deal with files originally created by root [3.12.10-2] - Retagging for updated patch missing from previous tag [3.12.10-1] - Update to 3.12.10 [3.12.9-11] - Resolves: rhbz# 703658 - Fix crmf hard-coded maximum size for wrapped private keys [3.12.9-10] - Resolves: rhbz#688423 - Enable NSS support for pluggable ECC [3.12.9-9] - Add 'Conflicts: curl < 7.19.7-26.el6' to fix Bug 694663 [3.12.9-8] - Construct private key nickname based on the full pathname of the pem file [3.12.9-7] - Update expired PayPayEE.cert test certificate - Conditionalize some database tests on user not being root [3.12.9-6] - Update to NSS_3.12.9_WITH_CKBI_1_82_RTM [3.12.9-5] - Fix memory leaks caused by SECKEY_ImportDERPublicKey [3.12.9-4] - Short-term fix for ssl test suites hangs on ipv6 type connections [3.12.9-3] - Add requires for pkcs11-devel on nss-softokn-freebl devel - Run the test suites in check section per packaging guidelines [3.12.9-2] - Prefer user database ca cert trust settings system's ones - Swap internal key slot on fips mode switches [3.12.9-1] - Update to 3.12.9 - Fix libnsspem to test for and reject directories [3.12.8-2] - Add suppport for pkcs8 formatted keys in the pem module - Add verify(not md5 size mtime) to configuration files attributes - Prevent nss-sysinit disabling on package upgrade - Create pkcs11.txt with correct permissions regardless of current umask - Add option to setup-nsssysinit.sh to report nss-sysinit status - Update test certificate which had expired [3.12.8-1] - Update to 3.12.8 [3.12.7-2] - Increase release version number, no code changes [3.12.7-1] - Update to 3.12.7 [3.12.6-6] - Rebuilt [3.12.6-5] - Appying the changes in previous log - Changing some BuildRequires to >= as well - Temporarily disabling all tests for faster builds [3.12.6-4] - Change some = to >= in Requires to enable a rebase next [3.12.6-3] - Fix SIGSEGV within CreateObject (#596783) - Update expired test certificate [3.12.6-2] - Fix nss.pc to not require nss-softokn [3.12.6-1.2] - rebuilt using nss-util 3.2.6 [3.12.6-1.1] - rebuilt using nspr-devel 4.8.4 [3.12.6-1] - Update to 3.12.6 [3.12.5.99-1] - Update to NSS_3_12_6_RC1 [3.12.5-8] - Fix curl related regression and general patch code clean up [3.12.5-7.3] - Resolves: #551784 rebuilt after nss-softokn and nss-util builds - this will generate the coorect nss.spec [3.12.5-7.2] - rebuilt for RHEL-6 candidate, Resolves: #551784 [3.12.5-7.1] - Updated to 3.12.5 from CVS import from Fedora 12 - Moved blank legacy databases to the lookaside cache - Reenabled the full test suite - Retagging for a RHEL-6-test-build [3.12.5-7] - Retagged [3.12.5-6] - retagging [3.12.5-2.1] - Fix SIGSEGV on call of NSS_Initialize (#553638) [3.12.5-2] - bump release number and rebuild [3.12.5-1.14] - Fix nsssysinit to allow root to modify the nss system database (#547860) [3.12.5-1.12.1] - Temporarily disabling the ssl tests until Bug 539183 is resolved [3.12.5-1.11] - Fix an error introduced when adapting the patch for 546211 [3.12.5-1.10] - Remove some left over trace statements from nsssysinit patching [3.12.5-1.8] - Fix nsssysinit to set the default flags on the crypto module (#545779) - Fix nsssysinit to enable apps to use the system cert store, patch contributed by David Woodhouse (#546221) - Fix segmentation fault when listing keys or certs in the database, patch contributed by Kamil Dudka (#540387) - Sysinit requires coreutils for post install scriplet (#547067) - Remove redundant header from the pem module [3.12.5-2.1] - Remove unneeded patch [3.12.5-1.2] - Update to 3.12.5 - CVE-2009-3555 TLS: MITM attacks via session renegotiation [3.12.4-15] - Require nss-softoken of same arch as nss (#527867) [3.12.4-14] - Fix bug where user was prompted for a password when listing keys on an empty system database (#527048) - Fix setup-nsssysinit to handle more general flags formats (#527051) [3.12.4-12] - Fix syntax error in setup-nsssysinit.sh [3.12.4-11] - Fix sysinit to be under mozilla/security/nss/lib [3.12.4-10] - Add nss-sysinit activation/deactivation script * Fri Sep 18 2009 Elio Maldonado<emaldona@redhat.com - 3.12.4-9 - Install blank databases and configuration file for system shared database - nsssysinit queries system for fips mode before relying on environment variable [3.12.4-8] - Restoring nssutil and -rpath-link to nss-config for now - 522477 * Tue Sep 08 2009 Elio Maldonado<emaldona@redhat.com - 3.12.4-7 - Add the nss-sysinit subpackage [3.12.4-6] - Installing shared libraries to %{_libdir} [3.12.4-5] - Retagging to pick up new sources [3.12.4-4] - Update pem enabling source tar with latest fixes (509705, 51209) [3.12.4-3] - PEM module implements memory management for internal objects - 509705 - PEM module doesn't crash when processing malformed key files - 512019 [3.12.4-2] - Remove symbolic links to shared libraries from devel - 521155 - No rpath-link in nss-softokn-config [3.12.4-1] - Update to 3.12.4 [3.12.3.99.3-30] - Fix FORTIFY_SOURCE buffer overflows in test suite on ppc and ppc64 - bug 519766 - Fixed requires and buildrequires as per recommendations in spec file review [3.12.3.99.3-29] - Restoring patches 2 and 7 as we still compile all sources - Applying the nss-nolocalsql.patch solves nss-tools sqlite dependency problems [3.12.3.99.3-28] - restore require sqlite [3.12.3.99.3-27] - Don't require sqlite for nss [3.12.3.99.3-26] - Ensure versions in the requires match those used when creating nss.pc [3.12.3.99.3-25] - Remove nss-prelink.conf as signed all shared libraries moved to nss-softokn - Add a temprary hack to nss.pc.in to unblock builds [3.12.3.99.3-24] - caolan's nss.pc patch [3.12.3.99.3-23] - Bump the release number for a chained build of nss-util, nss-softokn and nss [3.12.3.99.3-22] - Fix nss-config not to include nssutil - Add BuildRequires on nss-softokn and nss-util since build also runs the test suite [3.12.3.99.3-21] - disabling all tests while we investigate a buffer overflow bug [3.12.3.99.3-20] - disabling some tests while we investigate a buffer overflow bug - 519766 [3.12.3.99.3-19] - remove patches that are now in nss-softokn and - remove spurious exec-permissions for nss.pc per rpmlint - single requires line in nss.pc.in [3.12.3.99.3-18] - Fix BuildRequires: nss-softokn-devel release number * Wed Aug 26 2009 Elio Maldonado<emaldona@redhat.com - 3.12.3.99.3-17 - fix nss.pc.in to have one single requires line [3.12.3.99.3-16] - cleanups for softokn [3.12.3.99.3-15] - remove the softokn subpackages [3.12.3.99.3-14] - don install the nss-util pkgconfig bits [3.12.3.99.3-13] - remove from -devel the 3 headers that ship in nss-util-devel [3.12.3.99.3-12] - kill off the nss-util nss-util-devel subpackages * Sun Aug 23 2009 Elio Maldonado+emaldona@redhat.com - 3.12.3.99.3-11 - split off nss-softokn and nss-util as subpackages with their own rpms - first phase of splitting nss-softokn and nss-util as their own packages [3.12.3.99.3-10] - must install libnssutil3.since nss-util is untagged at the moment - preserve time stamps when installing various files [3.12.3.99.3-9] - dont install libnssutil3.so since its now in nss-util [3.12.3.99.3-7.1] - Fix spec file problems uncovered by Fedora_12_Mass_Rebuild [3.12.3.99.3-7] - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild [3.12.3.99.3-6] - removed two patch files which are no longer needed and fixed previous change log number [3.12.3.99.3-5] - updated pem module incorporates various patches - fix off-by-one error when computing size to reduce memory leak. (483855) - fix data type to work on x86_64 systems. (429175) - fix various memory leaks and free internal objects on module unload. (501080) - fix to not clone internal objects in collect_objects(). (501118) - fix to not bypass initialization if module arguments are omitted. (501058) - fix numerous gcc warnings. (500815) - fix to support arbitrarily long password while loading a private key. (500180) - fix memory leak in make_key and memory leaks and return values in pem_mdSession_Login (501191) [3.12.3.99.3-4] - add patch for bug 502133 upstream bug 496997 [3.12.3.99.3-3] - rebuild with higher release number for upgrade sanity [3.12.3.99.3-2] - updated to NSS_3_12_4_FIPS1_WITH_CKBI_1_75 [3.12.3-7] - re-enable test suite - add patch for upstream bug 488646 and add newer paypal certs in order to make the test suite pass [3.12.3-4] - add conflicts info in order to fix bug 499436 [3.12.3-3] - ship .chk files instead of running shlibsign at install time - include .chk file in softokn-freebl subpackage - add patch for upstream nss bug 488350 [3.12.3-2] - Update to NSS 3.12.3 [3.12.2.99.3-7] - temporarily disable the test suite because of bug 494266 [3.12.2.99.3-6] - fix softokn-freebl dependency for multilib (bug 494122) [3.12.2.99.3-5] - introduce separate nss-softokn-freebl package [3.12.2.99.3-4] - disable execstack when building freebl [3.12.2.99.3-3] - add upstream patch to fix bug 483855 [3.12.2.99.3-2] - build nspr-less freebl library [3.12.2.99.3-1] - Update to NSS_3_12_3_BETA4 [3.12.2.0-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild [3.12.2.0-3] - update to NSS_3_12_2_RC1 - use system zlib [3.12.1.1-4] - add sparc64 to the list of 64 bit arches [3.12.1.1-3] - bug 456847, move pkgconfig requirement to devel package [3.12.1.1-2] - Update to NSS_3_12_1_RC2 [3.12.1.0-2] - NSS 3.12.1 RC1 [3.12.0.3-7] - fix bug bug 429175 in libpem module [3.12.0.3-6] - bug 456847, add Requires: pkgconfig [3.12.0.3-3] - nss package should own /etc/prelink.conf.d folder, rhbz#452062 - use upstream patch to fix test suite abort [3.12.0.3-2] - Update to NSS_3_12_RC4 [3.12.0.1-1] - Update to NSS_3_12_RC2 [3.11.99.5-2] - Zapping old Obsoletes/Provides. No longer needed, causes multilib headache. [3.11.99.5-1] - Update to NSS_3_12_BETA3 [3.11.99.4-1] - NSS 3.12 Beta 2 - Use /usr/lib{64} as devel libdir, create symbolic links. [3.11.99.3-6] - Apply upstream patch for bug 417664, enable test suite on pcc. [3.11.99.3-5] - Support concurrent runs of the test suite on a single build host. [3.11.99.3-4] - disable test suite on ppc [3.11.99.3-3] - disable test suite on ppc64 [3.11.99.3-2] - Build against gcc 4.3.0, use workaround for bug 432146 - Run the test suite after the build and abort on failures. [3.11.99.3-1] * NSS 3.12 Beta 1 [3.11.99.2b-3] - move .so files to /lib [3.11.99.2b-2] - NSS 3.12 alpha 2b [3.11.99.2-2] - upstream patches to avoid calling netstat for random data [3.11.99.2-1] - NSS 3.12 alpha 2 [3.11.7-10] - Add /etc/prelink.conf.d/nss-prelink.conf in order to blacklist our signed libraries and protect them from modification. [3.11.7-9] - Fix off-by-one error in the PEM module [3.11.7-8] - fix a C++ mode compilation error [3.11.7-7] - Add 3.12 ckfw and libnsspem [3.11.7-6] - Updated license tag [3.11.7-5] - Ensure the workaround for mozilla bug 51429 really get's built. [3.11.7-4] - Better approach to ship freebl/softokn based on 3.11.5 - Remove link time dependency on softokn [3.11.7-3] - Fix unowned directories, rhbz#233890 [3.11.7-2] - Update to 3.11.7, but freebl/softokn remain at 3.11.5. - Use a workaround to avoid mozilla bug 51429. [3.11.5-2] - Fix rhbz#230545, failure to enable FIPS mode - Fix rhbz#220542, make NSS more tolerant of resets when in the middle of prompting for a user password. [3.11.5-1] - Update to 3.11.5 - This update fixes two security vulnerabilities with SSL 2 - Do not use -rpath link option - Added several unsupported tools to tools package [3.11.4-4] - disable ECC, cleanout dead code [3.11.4-1] - Update to 3.11.4 [3.11.3-2] - Revert the attempt to require latest NSPR, as it is not yet available in the build infrastructure. [3.11.3-1] - Update to 3.11.3 [3.11.2-2] - Add /etc/pki/nssdb [3.11.2-1.1] - rebuild [3.11.2-1] - Update to 3.11.2 - Enable executable bit on shared libs, also fixes debug info. [3.11.1-2] - Enable Elliptic Curve Cryptography (ECC) [3.11.1-1] - Update to 3.11.1 - Include upstream patch to limit curves [3.11-4] - add --noexecstack when compiling assembler on x86_64 [3.11-3.2] - bump again for double-long bug on ppc(64) [3.11-3.1] - rebuilt for new gcc4.1 snapshot and glibc changes [3.11-3] - rebuild [3.11-2] - Update file list for the devel packages [3.11-1] - Update to 3.11 [3.11-0.cvs.2] - Add patch to allow building on ppc* - Update the pkgconfig file to Require nspr [3.11-0.cvs] - Initial import into Fedora Core, based on a CVS snapshot of the NSS_3_11_RTM tag - Fix up the pkcs11-devel subpackage to contain the proper headers - Build with RPM_OPT_FLAGS - No need to have rpath of /usr/lib in the pc file * Thu Dec 15 2005 Kai Engert <kengert@redhat.com> - Adressed review comments by Wan-Teh Chang, Bob Relyea, Christopher Aillon. [3.10-1] - Initial build IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-0767 Oracle Linux 7 [4.14.35-2047.524.5] - rds/ib: Fix the softlock-up in RDS cache GC worker (Arumugam Kolappan) [Orabug: 35079728] [4.14.35-2047.524.4] - xfs: add missing cmap->br_state = XFS_EXT_NORM update (Gao Xiang) [Orabug: 35202792] - x86/tsc: Disable clocksource watchdog for TSC on qualified platorms (Feng Tang) [Orabug: 35181414] - x86/tsc: Add a timer to make sure TSC_adjust is always checked (Feng Tang) [Orabug: 35181414] [4.14.35-2047.524.3] - KVM: x86/pmu: Update AMD PMC sample period to fix guest NMI-watchdog (Like Xu) [Orabug: 35182018] - KVM: x86: Prevent set vCPU into INIT/SIPI_RECEIVED state when INIT are latched (Liran Alon) [Orabug: 35146837] - KVM: x86: Evaluate latched_init in KVM_SET_VCPU_EVENTS when vCPU not in SMM (Liran Alon) [Orabug: 35146837] - mm: use ktask for copying page ranges in vma_dup() (Anthony Yznaga) [Orabug: 35054623] - mm: parallelize unmap_page_range() for some large VMAs (Anthony Yznaga) [Orabug: 35054623] - hv_netvsc: Add check for kvmalloc_array (Jiasheng Jiang) [Orabug: 34951483] {CVE-2022-3107} - block: fix handling for BIO_NO_PAGE_REF (Ming Lei) [Orabug: 34602747] - block: add BIO_NO_PAGE_REF flag (Jens Axboe) [Orabug: 34602747] - block: implement bio helper to add iter bvec pages to bio (Jens Axboe) [Orabug: 34602747] - block: introduce mp_bvec_for_each_page() for iterating over page (Ming Lei) [Orabug: 34602747] [4.14.35-2047.524.2] - x86/kdump: Fall back to reserve high crashkernel memory (Dave Young) [Orabug: 35158700] - NFS: If the VFS sets LOOKUP_REVAL then force a lookup of the dentry (Trond Myklebust) [Orabug: 35136066] - nfsd: Do not refuse to serve out of cache (Trond Myklebust) [Orabug: 35136066] [4.14.35-2047.524.1] - Revert 'Change mincore() to count 'mapped' pages rather than 'cached' pages' (Linus Torvalds) [Orabug: 35124753] - Revert 'XFS: code enhancement to help debug' (Stephen Brennan) [Orabug: 35070084] - NFSv4: Fix OPEN / CLOSE race (Trond Myklebust) [Orabug: 34998974] - LTS version: v4.14.306 (Saeed Mirzamohammadi) - nilfs2: fix underflow in second superblock position calculations (Ryusuke Konishi) - kvm: initialize all of the kvm_debugregs structure before sending it to userspace (Greg Kroah-Hartman) - i40e: Add checking for null for nlmsg_find_attr() (Natalia Petrova) - ipv6: Fix tcp socket connection with DSCP. (Guillaume Nault) - ipv6: Fix datagram socket connection with DSCP. (Guillaume Nault) - net: mpls: fix stale pointer if allocation fails during device rename (Jakub Kicinski) - net: stmmac: Restrict warning on disabling DMA store and fwd mode (Cristian Ciocaltea) - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Miko Larsson) - dccp/tcp: Avoid negative sk_forward_alloc by ipv6_pinfo.pktoptions. (Kuniyuki Iwashima) - net: bgmac: fix BCM5358 support by setting correct flags (Rafa Mi ecki) - i40e: add double of VLAN header when computing the max MTU (Jason Xing) - revert 'squashfs: harden sanity check in squashfs_read_xattr_id_table' (Andrew Morton) - hugetlb: check for undefined shift on 32 bit architectures (Mike Kravetz) - ALSA: hda/conexant: add a new hda codec SN6180 (Bo Liu) - mmc: sdio: fix possible resource leaks in some error paths (Yang Yingliang) - Revert 'x86/fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN' (Greg Kroah-Hartman) - aio: fix mremap after fork null-deref (Seth Jenkins) - nvme-fc: fix a missing queue put in nvmet_fc_ls_create_association (Amit Engel) - net/rose: Fix to not accept on connected socket (Hyunwoo Kim) - tools/virtio: fix the vringh test for virtio ring changes (Shunsuke Mie) - migrate: hugetlb: check for hugetlb shared PMD in node migration (Mike Kravetz) - usb: core: add quirk for Alcor Link AK9563 smartcard reader (Mark Pearson) - net: USB: Fix wrong-direction WARNING in plusb.c (Alan Stern) - pinctrl: single: fix potential NULL dereference (Maxim Korotkov) - pinctrl: aspeed: Fix confusing types in return value (Joel Stanley) - ALSA: pci: lx6464es: fix a debug loop (Dan Carpenter) - ALSA: emux: Avoid potential array out-of-bound in snd_emux_xg_control() (Artemii Karasev) - btrfs: limit device extents to the device size (Josef Bacik) - serial: 8250_dma: Fix DMA Rx rearm race (Ilpo Jarvinen) - serial: 8250_dma: Fix DMA Rx completion race (Ilpo Jarvinen) - Squashfs: fix handling and sanity checking of xattr_ids count (Phillip Lougher) - mm/swapfile: add cond_resched() in get_swap_pages() (Longlong Xia) - mm: hugetlb: proc: check for hugetlb shared PMD in /proc/PID/smaps (Mike Kravetz) - parisc: Wire up PTRACE_GETREGS/PTRACE_SETREGS for compat case (Helge Deller) - parisc: Fix return code of pdc_iodc_print() (Helge Deller) - iio:adc:twl6030: Enable measurements of VUSB, VBAT and others (Andreas Kemnade) - iio: adc: berlin2-adc: Add missing of_node_put() in error path (Xiongfeng Wang) - iio: hid: fix the retval in accel_3d_capture_sample (Dmitry Perchanov) - efi: Accept version 2 of memory attributes table (Ard Biesheuvel) - watchdog: diag288_wdt: fix __diag288() inline assembly (Alexander Egorenkov) - watchdog: diag288_wdt: do not use stack buffers for hardware data (Alexander Egorenkov) - fbcon: Check font dimension limits (Samuel Thibault) - usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait (Udipto Goswami) - net/x25: Fix to not accept on connected socket (Hyunwoo Kim) - scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress (Mike Christie) - scsi: target: core: Fix warning on RT kernels (Maurizio Lombardi) - net: openvswitch: fix flow memory leak in ovs_flow_cmd_new (Fedor Pchelkin) - sctp: do not check hb_timer.expires when resetting hb_timer (Xin Long) - squashfs: harden sanity check in squashfs_read_xattr_id_table (Fedor Pchelkin) - netrom: Fix use-after-free caused by accept on already connected socket (Hyunwoo Kim) - ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() (Artemii Karasev) - bus: sunxi-rsb: Fix error handling in sunxi_rsb_init() (Yuan Can) - firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region (Takashi Sakamoto) - LTS version: v4.14.305 (Saeed Mirzamohammadi) - usb: host: xhci-plat: add wakeup entry at sysfs (Peter Chen) - ipv6: ensure sane device mtu in tunnels (Eric Dumazet) - mm: kvmalloc does not fallback to vmalloc for incompatible gfp flags (Michal Hocko) - exit: Use READ_ONCE() for all oops/warn limit reads (Kees Cook) - docs: Fix path paste-o for /sys/kernel/warn_count (Kees Cook) - panic: Expose 'warn_count' to sysfs (Kees Cook) - panic: Introduce warn_limit (Kees Cook) - panic: Consolidate open-coded panic_on_warn checks (Kees Cook) - exit: Allow oops_limit to be disabled (Kees Cook) - exit: Expose 'oops_count' to sysfs (Kees Cook) - exit: Put an upper limit on how often we can oops (Jann Horn) - ia64: make IA64_MCA_RECOVERY bool instead of tristate (Randy Dunlap) - h8300: Fix build errors from do_exit() to make_task_dead() transition (Nathan Chancellor) - hexagon: Fix function name in die() (Nathan Chancellor) - objtool: Add a missing comma to avoid string concatenation (Eric W. Biederman) - exit: Add and use make_task_dead. (Eric W. Biederman) - panic: unset panic_on_warn inside panic() (Tiezhu Yang) - sysctl: add a new register_sysctl_init() interface (Xiaoming Ni) - x86/entry/64: Add instruction suffix to SYSRET (Jan Beulich) - x86/asm: Fix an assembler warning with current binutils (Mikulas Patocka) - drm/radeon/dp: make radeon_dp_get_dp_link_config static (Alex Deucher) - wifi: brcmfmac: fix up incorrect 4.14.y backport for brcmf_fw_map_chip_to_name() (Greg Kroah-Hartman) - x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL (Thomas Gleixner) - Revert 'Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode' (Dmitry Torokhov) - net/tg3: resolve deadlock in tg3_reset_task() during EEH (David Christensen) - net: ravb: Fix possible hang if RIS2_QFF1 happen (Yoshihiro Shimoda) - sctp: fail if no bound addresses can be used for a given scope (Marcelo Ricardo Leitner) - netrom: Fix use-after-free of a listening socket. (Kuniyuki Iwashima) - netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE (Sriram Yagnaraman) - netlink: annotate data races around sk_state (Eric Dumazet) - netlink: annotate data races around dst_portid and dst_group (Eric Dumazet) - EDAC/device: Respect any driver-supplied workqueue polling value (Manivannan Sadhasivam) - ARM: 9280/1: mm: fix warning on phys_addr_t to void pointer assignment (Giulio Benetti) - tracing: Make sure trace_printk() can output as soon as it can be used (Steven Rostedt (Google)) - module: Don't wait for GOING modules (Petr Pavlu) - scsi: hpsa: Fix allocation size for scsi_host_alloc() (Alexey V. Vissarionov) - Bluetooth: hci_sync: cancel cmd_timer if hci_open failed (Archie Pusaka) - fs: reiserfs: remove useless new_opts in reiserfs_remount (Dongliang Mu) - comedi: adv_pci1760: Fix PWM instruction handling (Ian Abbott) - w1: fix WARNING after calling w1_process() (Yang Yingliang) - w1: fix deadloop in __w1_remove_master_device() (Yang Yingliang) - HID: betop: check shape of output reports (Pietro Borrello) - dmaengine: Fix double increment of client_count in dma_chan_get() (Koba Ko) - net: mlx5: eliminate anonymous module_init & module_exit (Randy Dunlap) - usb: gadget: f_fs: Ensure ep0req is dequeued before free_request (Udipto Goswami) - usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait (Udipto Goswami) - HID: check empty report_list in hid_validate_values() (Pietro Borrello) - net: mdio: validate parameter addr in mdiobus_get_phy() (Heiner Kallweit) - net: usb: sr9700: Handle negative len (Szymon Heidrich) - wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid (Szymon Heidrich) [Orabug: 35037714] {CVE-2023-23559} - net: nfc: Fix use-after-free in local_cleanup() (Jisoo Jang) - phy: rockchip-inno-usb2: Fix missing clk_disable_unprepare() in rockchip_usb2phy_power_on() (Shang XiaoJing) - amd-xgbe: TX Flow Ctrl Registers are h/w ver dependent (Raju Rangoju) - affs: initialize fsdata in affs_truncate() (Alexander Potapenko) - IB/hfi1: Reserve user expected TIDs (Dean Luick) - IB/hfi1: Reject a zero-length user expected buffer (Dean Luick) - tomoyo: fix broken dependency on *.conf.default (Masahiro Yamada) - EDAC/highbank: Fix memory leak in highbank_mc_probe() (Miaoqian Lin) - HID: intel_ish-hid: Add check for ishtp_dma_tx_map (Jiasheng Jiang) - ARM: dts: imx6qdl-gw560x: Remove incorrect 'uart-has-rtscts' (Fabio Estevam) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-23559 CVE-2022-3107 Oracle Linux 7 [4.14.35-2047.524.5.el7] - rds/ib: Fix the softlock-up in RDS cache GC worker (Arumugam Kolappan) [Orabug: 35079728] [4.14.35-2047.524.4.el7] - xfs: add missing cmap->br_state = XFS_EXT_NORM update (Gao Xiang) [Orabug: 35202792] - x86/tsc: Disable clocksource watchdog for TSC on qualified platorms (Feng Tang) [Orabug: 35181414] - x86/tsc: Add a timer to make sure TSC_adjust is always checked (Feng Tang) [Orabug: 35181414] [4.14.35-2047.524.3.el7] - KVM: x86/pmu: Update AMD PMC sample period to fix guest NMI-watchdog (Like Xu) [Orabug: 35182018] - KVM: x86: Prevent set vCPU into INIT/SIPI_RECEIVED state when INIT are latched (Liran Alon) [Orabug: 35146837] - KVM: x86: Evaluate latched_init in KVM_SET_VCPU_EVENTS when vCPU not in SMM (Liran Alon) [Orabug: 35146837] - mm: use ktask for copying page ranges in vma_dup() (Anthony Yznaga) [Orabug: 35054623] - mm: parallelize unmap_page_range() for some large VMAs (Anthony Yznaga) [Orabug: 35054623] - hv_netvsc: Add check for kvmalloc_array (Jiasheng Jiang) [Orabug: 34951483] {CVE-2022-3107} - block: fix handling for BIO_NO_PAGE_REF (Ming Lei) [Orabug: 34602747] - block: add BIO_NO_PAGE_REF flag (Jens Axboe) [Orabug: 34602747] - block: implement bio helper to add iter bvec pages to bio (Jens Axboe) [Orabug: 34602747] - block: introduce mp_bvec_for_each_page() for iterating over page (Ming Lei) [Orabug: 34602747] [4.14.35-2047.524.2.el7] - x86/kdump: Fall back to reserve high crashkernel memory (Dave Young) [Orabug: 35158700] - NFS: If the VFS sets LOOKUP_REVAL then force a lookup of the dentry (Trond Myklebust) [Orabug: 35136066] - nfsd: Do not refuse to serve out of cache (Trond Myklebust) [Orabug: 35136066] [4.14.35-2047.524.1.el7] - Revert 'Change mincore() to count 'mapped' pages rather than 'cached' pages' (Linus Torvalds) [Orabug: 35124753] - Revert 'XFS: code enhancement to help debug' (Stephen Brennan) [Orabug: 35070084] - NFSv4: Fix OPEN / CLOSE race (Trond Myklebust) [Orabug: 34998974] - LTS version: v4.14.306 (Saeed Mirzamohammadi) - nilfs2: fix underflow in second superblock position calculations (Ryusuke Konishi) - kvm: initialize all of the kvm_debugregs structure before sending it to userspace (Greg Kroah-Hartman) - i40e: Add checking for null for nlmsg_find_attr() (Natalia Petrova) - ipv6: Fix tcp socket connection with DSCP. (Guillaume Nault) - ipv6: Fix datagram socket connection with DSCP. (Guillaume Nault) - net: mpls: fix stale pointer if allocation fails during device rename (Jakub Kicinski) - net: stmmac: Restrict warning on disabling DMA store and fwd mode (Cristian Ciocaltea) - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Miko Larsson) - dccp/tcp: Avoid negative sk_forward_alloc by ipv6_pinfo.pktoptions. (Kuniyuki Iwashima) - net: bgmac: fix BCM5358 support by setting correct flags (Rafa Mi ecki) - i40e: add double of VLAN header when computing the max MTU (Jason Xing) - revert 'squashfs: harden sanity check in squashfs_read_xattr_id_table' (Andrew Morton) - hugetlb: check for undefined shift on 32 bit architectures (Mike Kravetz) - ALSA: hda/conexant: add a new hda codec SN6180 (Bo Liu) - mmc: sdio: fix possible resource leaks in some error paths (Yang Yingliang) - Revert 'x86/fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN' (Greg Kroah-Hartman) - aio: fix mremap after fork null-deref (Seth Jenkins) - nvme-fc: fix a missing queue put in nvmet_fc_ls_create_association (Amit Engel) - net/rose: Fix to not accept on connected socket (Hyunwoo Kim) - tools/virtio: fix the vringh test for virtio ring changes (Shunsuke Mie) - migrate: hugetlb: check for hugetlb shared PMD in node migration (Mike Kravetz) - usb: core: add quirk for Alcor Link AK9563 smartcard reader (Mark Pearson) - net: USB: Fix wrong-direction WARNING in plusb.c (Alan Stern) - pinctrl: single: fix potential NULL dereference (Maxim Korotkov) - pinctrl: aspeed: Fix confusing types in return value (Joel Stanley) - ALSA: pci: lx6464es: fix a debug loop (Dan Carpenter) - ALSA: emux: Avoid potential array out-of-bound in snd_emux_xg_control() (Artemii Karasev) - btrfs: limit device extents to the device size (Josef Bacik) - serial: 8250_dma: Fix DMA Rx rearm race (Ilpo Jarvinen) - serial: 8250_dma: Fix DMA Rx completion race (Ilpo Jarvinen) - Squashfs: fix handling and sanity checking of xattr_ids count (Phillip Lougher) - mm/swapfile: add cond_resched() in get_swap_pages() (Longlong Xia) - mm: hugetlb: proc: check for hugetlb shared PMD in /proc/PID/smaps (Mike Kravetz) - parisc: Wire up PTRACE_GETREGS/PTRACE_SETREGS for compat case (Helge Deller) - parisc: Fix return code of pdc_iodc_print() (Helge Deller) - iio:adc:twl6030: Enable measurements of VUSB, VBAT and others (Andreas Kemnade) - iio: adc: berlin2-adc: Add missing of_node_put() in error path (Xiongfeng Wang) - iio: hid: fix the retval in accel_3d_capture_sample (Dmitry Perchanov) - efi: Accept version 2 of memory attributes table (Ard Biesheuvel) - watchdog: diag288_wdt: fix __diag288() inline assembly (Alexander Egorenkov) - watchdog: diag288_wdt: do not use stack buffers for hardware data (Alexander Egorenkov) - fbcon: Check font dimension limits (Samuel Thibault) - usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait (Udipto Goswami) - net/x25: Fix to not accept on connected socket (Hyunwoo Kim) - scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress (Mike Christie) - scsi: target: core: Fix warning on RT kernels (Maurizio Lombardi) - net: openvswitch: fix flow memory leak in ovs_flow_cmd_new (Fedor Pchelkin) - sctp: do not check hb_timer.expires when resetting hb_timer (Xin Long) - netrom: Fix use-after-free caused by accept on already connected socket (Hyunwoo Kim) - ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() (Artemii Karasev) - bus: sunxi-rsb: Fix error handling in sunxi_rsb_init() (Yuan Can) - firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region (Takashi Sakamoto) - LTS version: v4.14.305 (Saeed Mirzamohammadi) - usb: host: xhci-plat: add wakeup entry at sysfs (Peter Chen) - ipv6: ensure sane device mtu in tunnels (Eric Dumazet) - mm: kvmalloc does not fallback to vmalloc for incompatible gfp flags (Michal Hocko) - exit: Use READ_ONCE() for all oops/warn limit reads (Kees Cook) - docs: Fix path paste-o for /sys/kernel/warn_count (Kees Cook) - panic: Expose 'warn_count' to sysfs (Kees Cook) - panic: Introduce warn_limit (Kees Cook) - panic: Consolidate open-coded panic_on_warn checks (Kees Cook) - exit: Allow oops_limit to be disabled (Kees Cook) - exit: Expose 'oops_count' to sysfs (Kees Cook) - exit: Put an upper limit on how often we can oops (Jann Horn) - ia64: make IA64_MCA_RECOVERY bool instead of tristate (Randy Dunlap) - h8300: Fix build errors from do_exit() to make_task_dead() transition (Nathan Chancellor) - hexagon: Fix function name in die() (Nathan Chancellor) - objtool: Add a missing comma to avoid string concatenation (Eric W. Biederman) - exit: Add and use make_task_dead. (Eric W. Biederman) - panic: unset panic_on_warn inside panic() (Tiezhu Yang) - sysctl: add a new register_sysctl_init() interface (Xiaoming Ni) - x86/entry/64: Add instruction suffix to SYSRET (Jan Beulich) - x86/asm: Fix an assembler warning with current binutils (Mikulas Patocka) - drm/radeon/dp: make radeon_dp_get_dp_link_config static (Alex Deucher) - wifi: brcmfmac: fix up incorrect 4.14.y backport for brcmf_fw_map_chip_to_name() (Greg Kroah-Hartman) - x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL (Thomas Gleixner) - Revert 'Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode' (Dmitry Torokhov) - net/tg3: resolve deadlock in tg3_reset_task() during EEH (David Christensen) - net: ravb: Fix possible hang if RIS2_QFF1 happen (Yoshihiro Shimoda) - sctp: fail if no bound addresses can be used for a given scope (Marcelo Ricardo Leitner) - netrom: Fix use-after-free of a listening socket. (Kuniyuki Iwashima) - netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE (Sriram Yagnaraman) - netlink: annotate data races around sk_state (Eric Dumazet) - netlink: annotate data races around dst_portid and dst_group (Eric Dumazet) - EDAC/device: Respect any driver-supplied workqueue polling value (Manivannan Sadhasivam) - ARM: 9280/1: mm: fix warning on phys_addr_t to void pointer assignment (Giulio Benetti) - tracing: Make sure trace_printk() can output as soon as it can be used (Steven Rostedt (Google)) - module: Don't wait for GOING modules (Petr Pavlu) - scsi: hpsa: Fix allocation size for scsi_host_alloc() (Alexey V. Vissarionov) - Bluetooth: hci_sync: cancel cmd_timer if hci_open failed (Archie Pusaka) - fs: reiserfs: remove useless new_opts in reiserfs_remount (Dongliang Mu) - comedi: adv_pci1760: Fix PWM instruction handling (Ian Abbott) - w1: fix WARNING after calling w1_process() (Yang Yingliang) - w1: fix deadloop in __w1_remove_master_device() (Yang Yingliang) - HID: betop: check shape of output reports (Pietro Borrello) - dmaengine: Fix double increment of client_count in dma_chan_get() (Koba Ko) - net: mlx5: eliminate anonymous module_init & module_exit (Randy Dunlap) - usb: gadget: f_fs: Ensure ep0req is dequeued before free_request (Udipto Goswami) - usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait (Udipto Goswami) - HID: check empty report_list in hid_validate_values() (Pietro Borrello) - net: mdio: validate parameter addr in mdiobus_get_phy() (Heiner Kallweit) - net: usb: sr9700: Handle negative len (Szymon Heidrich) - wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid (Szymon Heidrich) - net: nfc: Fix use-after-free in local_cleanup() (Jisoo Jang) - phy: rockchip-inno-usb2: Fix missing clk_disable_unprepare() in rockchip_usb2phy_power_on() (Shang XiaoJing) - amd-xgbe: TX Flow Ctrl Registers are h/w ver dependent (Raju Rangoju) - affs: initialize fsdata in affs_truncate() (Alexander Potapenko) - IB/hfi1: Reserve user expected TIDs (Dean Luick) - IB/hfi1: Reject a zero-length user expected buffer (Dean Luick) - tomoyo: fix broken dependency on *.conf.default (Masahiro Yamada) - EDAC/highbank: Fix memory leak in highbank_mc_probe() (Miaoqian Lin) - HID: intel_ish-hid: Add check for ishtp_dma_tx_map (Jiasheng Jiang) - ARM: dts: imx6qdl-gw560x: Remove incorrect 'uart-has-rtscts' (Fabio Estevam) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-23559 CVE-2022-3107 Oracle Linux 7 Oracle Linux 8 [5.4.17-2136.318.7.1] - KVM: arm64: Disabling disabled PMU counters wastes a lot of time (Alexandre Chartre) [Orabug: 33312587] - KVM: arm64: Don't zero the cycle count register when PMCR_EL0.P is set (Alexandru Elisei) [Orabug: 33312587] - KVM: arm64: pmu: Only handle supported event counters (Eric Auger) [Orabug: 33312587] [5.4.17-2136.318.7] - mm, compaction: Skip all pinned pages during scan (Khalid Aziz) [Orabug: 35251798] - xfs: add missing cmap->br_state = XFS_EXT_NORM update (Gao Xiang) [Orabug: 35214060] - rds/ib: Fix the softlock-up in RDS cache GC worker (Arumugam Kolappan) [Orabug: 35146761] - uek-rpm: Update linux-firmware dependency (Somasundaram Krishnasamy) [Orabug: 33755589] [5.4.17-2136.318.6] - net/rds: Flip the default value of 'rds_wq_strictly_ordered' (Gerd Rausch) [Orabug: 35197635] [5.4.17-2136.318.5] - udf: Fix file corruption when appending just after end of preallocated extent (Jan Kara) [Orabug: 35192763] - selftests/ftrace: Fix bash specific '==' operator (Masami Hiramatsu (Google)) [Orabug: 35192763] - arm64: kdump: Increase reserved memory for larger machines (Henry Willard) [Orabug: 35051468] - KVM: x86/pmu: Update AMD PMC sample period to fix guest NMI-watchdog (Like Xu) [Orabug: 34729426] - KVM: x86/pmu: Introduce pmc->is_paused to reduce the call time of perf interfaces (Like Xu) [Orabug: 34729426] - perf/x86/uncore: Don't WARN_ON_ONCE() for a broken discovery table (Kan Liang) [Orabug: 35053343] - perf/x86/uncore: Add a quirk for UPI on SPR (Kan Liang) [Orabug: 35053343] - perf/x86/uncore: Ignore broken units in discovery table (Kan Liang) [Orabug: 35053343] - perf/x86/uncore: Fix potential NULL pointer in uncore_get_alias_name (Kan Liang) [Orabug: 35053343] - perf/x86/uncore: Factor out uncore_device_to_die() (Kan Liang) [Orabug: 35053343] - Revert 'perf/x86/uncore: Factor out uncore_device_to_die()' (Thomas Tai) [Orabug: 35053343] - Revert 'perf/x86/uncore: Fix potential NULL pointer in uncore_get_alias_name' (Thomas Tai) [Orabug: 35053343] - Revert 'perf/x86/uncore: Ignore broken units in discovery table' (Thomas Tai) [Orabug: 35053343] - Revert 'perf/x86/uncore: Add a quirk for UPI on SPR' (Thomas Tai) [Orabug: 35053343] - Revert 'perf/x86/uncore: Don't WARN_ON_ONCE() for a broken discovery table' (Thomas Tai) [Orabug: 35053343] - Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions (Tom Lendacky) [Orabug: 35166671] {CVE-2022-27672} - KVM: x86: Mitigate the cross-thread return address predictions bug (Tom Lendacky) [Orabug: 35166671] {CVE-2022-27672} - x86/speculation: Identify processors vulnerable to SMT RSB predictions (Tom Lendacky) [Orabug: 35166671] {CVE-2022-27672} - uek-rpm: aarch64: embedded: Enable CONFIG_RANDOMIZE_BASE to support ksplice for T93 (Thomas Tai) [Orabug: 35180981] - drm/amdkfd: Check for null pointer after calling kmemdup (Jiasheng Jiang) [Orabug: 34951503] {CVE-2022-3108} - mm: use padata for copying page ranges in vma_dup() (Anthony Yznaga) [Orabug: 35054622] - mm: parallelize unmap_page_range() for some large VMAs (Anthony Yznaga) [Orabug: 35054622] - net/rds: serialize up+down-work to relax strict ordering (Gerd Rausch) [Orabug: 35094723] - rds: ib: Fix non-parenthetical mutex/semaphore use (Hakon Bugge) [Orabug: 35155114] - Revert 'btrfs: free device in btrfs_close_devices for a single device filesystem' (Vijayendra Suman) [Orabug: 35161536] [5.4.17-2136.318.4] - ipc: update semtimedop() to use hrtimer (Prakash Sangappa) [Orabug: 35069807] - rds: ib: Destroy fastreg resources correctly (Hakon Bugge) [Orabug: 35140658] - rds: ib: Use one-bit booleans in struct rds_ib_device and keep them adjacent (Hakon Bugge) [Orabug: 35140648] - mips64: drivers/watchdog: Add IRQF_NOBALANCING when requesting irq (Thomas Tai) [Orabug: 35159790] - net: mana: Fix IRQ name - add PCI and queue number (Haiyang Zhang) [Orabug: 35084730] - uek-rpm: Add opbmc to nano rpm (Somasundaram Krishnasamy) [Orabug: 35145857] [5.4.17-2136.318.3] - vc_screen: don't clobber return value in vcs_read (Thomas WeiBschuh) - LTS tag: v5.4.233 (Sherry Yang) - bpf: add missing header file include (Linus Torvalds) - Revert 'net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs' (Vladimir Oltean) - ext4: Fix function prototype mismatch for ext4_feat_ktype (Kees Cook) - wifi: mwifiex: Add missing compatible string for SD8787 (Lukas Wunner) - uaccess: Add speculation barrier to copy_from_user() (Dave Hansen) - mac80211: mesh: embedd mesh_paths and mpp_paths into ieee80211_if_mesh (Pavel Skripkin) - drm/i915/gvt: fix double free bug in split_2MB_gtt_entry (Zheng Wang) - alarmtimer: Prevent starvation by small intervals and SIG_IGN (Thomas Gleixner) - powerpc: dts: t208x: Disable 10G on MAC1 and MAC2 (Sean Anderson) - can: kvaser_usb: hydra: help gcc-13 to figure out cmd_len (Marc Kleine-Budde) - KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS (Jim Mattson) [Orabug: 34982694] {CVE-2022-2196} - KVM: x86: Fail emulation during EMULTYPE_SKIP on any exception (Sean Christopherson) - random: always mix cycle counter in add_latent_entropy() (Jason A. Donenfeld) - powerpc: dts: t208x: Mark MAC1 and MAC2 as 10G (Sean Anderson) - wifi: rtl8xxxu: gen2: Turn on the rate control (Bitterblue Smith) - drm/etnaviv: don't truncate physical page address (Lucas Stach) - drm: etnaviv: fix common struct sg_table related issues (Marek Szyprowski) - scatterlist: add generic wrappers for iterating over sgtable objects (Marek Szyprowski) - dma-mapping: add generic helpers for mapping sgtable objects (Marek Szyprowski) - LTS tag: v5.4.232 (Sherry Yang) - net: sched: sch: Fix off by one in htb_activate_prios() (Dan Carpenter) - ASoC: SOF: Intel: hda-dai: fix possible stream_tag leak (Pierre-Louis Bossart) - nilfs2: fix underflow in second superblock position calculations (Ryusuke Konishi) - kvm: initialize all of the kvm_debugregs structure before sending it to userspace (Greg Kroah-Hartman) - i40e: Add checking for null for nlmsg_find_attr() (Natalia Petrova) - ipv6: Fix tcp socket connection with DSCP. (Guillaume Nault) - ipv6: Fix datagram socket connection with DSCP. (Guillaume Nault) - ixgbe: add double of VLAN header when computing the max MTU (Jason Xing) - net: mpls: fix stale pointer if allocation fails during device rename (Jakub Kicinski) - net: stmmac: Restrict warning on disabling DMA store and fwd mode (Cristian Ciocaltea) - bnxt_en: Fix mqprio and XDP ring checking logic (Michael Chan) - net: stmmac: fix order of dwmac5 FlexPPS parametrization sequence (Johannes Zink) - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Miko Larsson) - dccp/tcp: Avoid negative sk_forward_alloc by ipv6_pinfo.pktoptions. (Kuniyuki Iwashima) - sctp: sctp_sock_filter(): avoid list_entry() on possibly empty list (Pietro Borrello) - net: bgmac: fix BCM5358 support by setting correct flags (Rafa Mi ecki) - i40e: add double of VLAN header when computing the max MTU (Jason Xing) - ixgbe: allow to increase MTU to 3K with XDP enabled (Jason Xing) - revert 'squashfs: harden sanity check in squashfs_read_xattr_id_table' (Andrew Morton) - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Felix Riemann) - Revert 'mm: Always release pages to the buddy allocator in memblock_free_late().' (Aaron Thompson) - hugetlb: check for undefined shift on 32 bit architectures (Mike Kravetz) - sched/psi: Fix use-after-free in ep_remove_wait_queue() (Munehisa Kamata) - ALSA: hda/realtek - fixed wrong gpio assigned (Kailang Yang) - ALSA: hda/conexant: add a new hda codec SN6180 (Bo Liu) - mmc: mmc_spi: fix error handling in mmc_spi_probe() (Yang Yingliang) - mmc: sdio: fix possible resource leaks in some error paths (Yang Yingliang) - ipv4: Fix incorrect route flushing when source address is deleted (Ido Schimmel) - Revert 'ipv4: Fix incorrect route flushing when source address is deleted' (Shaoying Xu) - xfs: sync lazy sb accounting on quiesce of read-only mounts (Brian Foster) - xfs: fix the forward progress assertion in xfs_iwalk_run_callbacks (Darrick J. Wong) - xfs: ensure inobt record walks always make forward progress (Darrick J. Wong) - xfs: fix missing CoW blocks writeback conversion retry (Darrick J. Wong) - xfs: fix finobt btree block recovery ordering (Dave Chinner) - xfs: remove the xfs_inode_log_item_t typedef (Christoph Hellwig) - xfs: remove the xfs_efd_log_item_t typedef (Christoph Hellwig) - xfs: remove the xfs_efi_log_item_t typedef (Christoph Hellwig) - netfilter: nft_tproxy: restrict to prerouting hook (Florian Westphal) - btrfs: free device in btrfs_close_devices for a single device filesystem (Anand Jain) - aio: fix mremap after fork null-deref (Seth Jenkins) - nvme-fc: fix a missing queue put in nvmet_fc_ls_create_association (Amit Engel) - s390/decompressor: specify __decompress() buf len to avoid overflow (Vasily Gorbik) - net: sched: sch: Bounds check priority (Kees Cook) - net: stmmac: do not stop RX_CLK in Rx LPI state for qcs404 SoC (Andrey Konovalov) - net/rose: Fix to not accept on connected socket (Hyunwoo Kim) - tools/virtio: fix the vringh test for virtio ring changes (Shunsuke Mie) - ASoC: cs42l56: fix DT probe (Arnd Bergmann) - selftests/bpf: Verify copy_register_state() preserves parent/live fields (Eduard Zingerman) - migrate: hugetlb: check for hugetlb shared PMD in node migration (Mike Kravetz) - bpf: Always return target ifindex in bpf_fib_lookup (Toke Hoiland-Jorgensen) - nvme-pci: Move enumeration by class to be last in the table (Andy Shevchenko) - arm64: dts: meson-axg: Make mmc host controller interrupts level-sensitive (Heiner Kallweit) - arm64: dts: meson-g12-common: Make mmc host controller interrupts level-sensitive (Heiner Kallweit) - arm64: dts: meson-gx: Make mmc host controller interrupts level-sensitive (Heiner Kallweit) - riscv: Fixup race condition on PG_dcache_clean in flush_icache_pte (Guo Ren) - ceph: flush cap releases when the session is flushed (Xiubo Li) - usb: typec: altmodes/displayport: Fix probe pin assign check (Prashant Malani) - usb: core: add quirk for Alcor Link AK9563 smartcard reader (Mark Pearson) - net: USB: Fix wrong-direction WARNING in plusb.c (Alan Stern) - pinctrl: intel: Restore the pins that used to be in Direct IRQ mode (Andy Shevchenko) - pinctrl: single: fix potential NULL dereference (Maxim Korotkov) - pinctrl: aspeed: Fix confusing types in return value (Joel Stanley) - ALSA: pci: lx6464es: fix a debug loop (Dan Carpenter) - selftests: forwarding: lib: quote the sysctl values (Hangbin Liu) - ice: Do not use WQ_MEM_RECLAIM flag for workqueue (Anirudh Venkataramanan) - net: phy: meson-gxl: use MMD access dummy stubs for GXL, internal PHY (Heiner Kallweit) - bonding: fix error checking in bond_debug_reregister() (Qi Zheng) - xfrm: fix bug with DSCP copy to v6 from v4 tunnel (Christian Hopps) - IB/IPoIB: Fix legacy IPoIB due to wrong number of queues (Dragos Tatulea) - IB/hfi1: Restore allocated resources on failed copyout (Dean Luick) - can: j1939: do not wait 250 ms if the same addr was already claimed (Devid Antonio Filoni) - tracing: Fix poll() and select() do not work on per_cpu trace_pipe and trace_pipe_raw (Shiju Jose) - ALSA: emux: Avoid potential array out-of-bound in snd_emux_xg_control() (Artemii Karasev) - btrfs: zlib: zero-initialize zlib workspace (Alexander Potapenko) - btrfs: limit device extents to the device size (Josef Bacik) - iio:adc:twl6030: Enable measurement of VAC (Andreas Kemnade) - wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads (Minsuk Kang) - f2fs: fix to do sanity check on i_extra_isize in is_alive() (Chao Yu) - fbdev: smscufx: fix error handling code in ufx_usb_probe (Dongliang Mu) - powerpc/imc-pmu: Revert nest_init_lock to being a mutex (Michael Ellerman) - serial: 8250_dma: Fix DMA Rx rearm race (Ilpo Jarvinen) - serial: 8250_dma: Fix DMA Rx completion race (Ilpo Jarvinen) - xprtrdma: Fix regbuf data not freed in rpcrdma_req_create() (Zhang Xiaoxu) - mm: swap: properly update readahead statistics in unuse_pte_range() (Andrea Righi) - nvmem: core: fix cell removal on error (Michael Walle) - Squashfs: fix handling and sanity checking of xattr_ids count (Phillip Lougher) - mm/swapfile: add cond_resched() in get_swap_pages() (Longlong Xia) - fpga: stratix10-soc: Fix return value check in s10_ops_write_init() (Zheng Yongjun) - mm: hugetlb: proc: check for hugetlb shared PMD in /proc/PID/smaps (Mike Kravetz) - riscv: disable generation of unwind tables (Andreas Schwab) - parisc: Wire up PTRACE_GETREGS/PTRACE_SETREGS for compat case (Helge Deller) - parisc: Fix return code of pdc_iodc_print() (Helge Deller) - iio:adc:twl6030: Enable measurements of VUSB, VBAT and others (Andreas Kemnade) - iio: adc: berlin2-adc: Add missing of_node_put() in error path (Xiongfeng Wang) - iio: hid: fix the retval in accel_3d_capture_sample (Dmitry Perchanov) - efi: Accept version 2 of memory attributes table (Ard Biesheuvel) - watchdog: diag288_wdt: fix __diag288() inline assembly (Alexander Egorenkov) - watchdog: diag288_wdt: do not use stack buffers for hardware data (Alexander Egorenkov) - fbcon: Check font dimension limits (Samuel Thibault) - Input: i8042 - add Clevo PCX0DX to i8042 quirk table (Werner Sembach) - Input: i8042 - add TUXEDO devices to i8042 quirk tables (Werner Sembach) - Input: i8042 - merge quirk tables (Werner Sembach) - Input: i8042 - move __initconst to fix code styling warning (Werner Sembach) - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF (George Kennedy) - usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait (Udipto Goswami) - usb: dwc3: qcom: enable vbus override when in OTG dr-mode (Neil Armstrong) - usb: dwc3: dwc3-qcom: Fix typo in the dwc3 vbus override API (Wesley Cheng) - iio: adc: stm32-dfsdm: fill module aliases (Olivier Moysan) - net/x25: Fix to not accept on connected socket (Hyunwoo Kim) - i2c: rk3x: fix a bunch of kernel-doc warnings (Randy Dunlap) - scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress (Mike Christie) - scsi: target: core: Fix warning on RT kernels (Maurizio Lombardi) - efi: fix potential NULL deref in efi_mem_reserve_persistent (Anton Gusev) - net: openvswitch: fix flow memory leak in ovs_flow_cmd_new (Fedor Pchelkin) - virtio-net: Keep stop() to follow mirror sequence of open() (Parav Pandit) - selftests: net: udpgso_bench_tx: Cater for pending datagrams zerocopy benchmarking (Andrei Gherzan) - selftests: net: udpgso_bench: Fix racing bug between the rx/tx programs (Andrei Gherzan) - selftests: net: udpgso_bench_rx/tx: Stop when wrong CLI args are provided (Andrei Gherzan) - selftests: net: udpgso_bench_rx: Fix 'used uninitialized' compiler warning (Andrei Gherzan) - ata: libata: Fix sata_down_spd_limit() when no link speed is reported (Damien Le Moal) - can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate (Ziyang Xuan) - net: phy: meson-gxl: Add generic dummy stubs for MMD register access (Chris Healy) - squashfs: harden sanity check in squashfs_read_xattr_id_table (Fedor Pchelkin) - netfilter: br_netfilter: disable sabotage_in hook after first suppression (Florian Westphal) - netrom: Fix use-after-free caused by accept on already connected socket (Hyunwoo Kim) - fix 'direction' argument of iov_iter_kvec() (Al Viro) - fix iov_iter_bvec() 'direction' argument (Al Viro) - WRITE is 'data source', not destination... (Al Viro) - scsi: Revert 'scsi: core: map PQ=1, PDT=other values to SCSI_SCAN_TARGET_PRESENT' (Martin K. Petersen) - arm64: dts: imx8mm: Fix pad control for UART1_DTE_RX (Pierluigi Passaro) - ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() (Artemii Karasev) - ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use (Andy Shevchenko) - bus: sunxi-rsb: Fix error handling in sunxi_rsb_init() (Yuan Can) - firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region (Takashi Sakamoto) - LTS tag: v5.4.231 (Sherry Yang) - usb: host: xhci-plat: add wakeup entry at sysfs (Peter Chen) - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (Soenke Huster) - ipv6: ensure sane device mtu in tunnels (Eric Dumazet) - exit: Use READ_ONCE() for all oops/warn limit reads (Kees Cook) - docs: Fix path paste-o for /sys/kernel/warn_count (Kees Cook) - panic: Expose 'warn_count' to sysfs (Kees Cook) - panic: Introduce warn_limit (Kees Cook) - panic: Consolidate open-coded panic_on_warn checks (Kees Cook) - exit: Allow oops_limit to be disabled (Kees Cook) - exit: Expose 'oops_count' to sysfs (Kees Cook) - exit: Put an upper limit on how often we can oops (Jann Horn) - ia64: make IA64_MCA_RECOVERY bool instead of tristate (Randy Dunlap) - csky: Fix function name in csky_alignment() and die() (Nathan Chancellor) - h8300: Fix build errors from do_exit() to make_task_dead() transition (Nathan Chancellor) - hexagon: Fix function name in die() (Nathan Chancellor) - objtool: Add a missing comma to avoid string concatenation (Eric W. Biederman) - exit: Add and use make_task_dead. (Eric W. Biederman) - mm: kasan: do not panic if both panic_on_warn and kasan_multishot set (David Gow) - panic: unset panic_on_warn inside panic() (Tiezhu Yang) - sysctl: add a new register_sysctl_init() interface (Xiaoming Ni) - dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init (Hui Wang) - blk-cgroup: fix missing pd_online_fn() while activating policy (Yu Kuai) - bpf: Skip task with pid=1 in send_signal_common() (Hao Sun) - ARM: dts: imx: Fix pca9547 i2c-mux node name (Geert Uytterhoeven) - x86/asm: Fix an assembler warning with current binutils (Mikulas Patocka) - clk: Fix pointer casting to prevent oops in devm_clk_release() (Uwe Kleine-Konig) - perf/x86/amd: fix potential integer overflow on shift of a int (Colin Ian King) - netfilter: conntrack: unify established states for SCTP paths (Sriram Yagnaraman) - x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL (Thomas Gleixner) - block: fix and cleanup bio_check_ro (Christoph Hellwig) - nfsd: Ensure knfsd shuts down when the 'nfsd' pseudofs is unmounted (Trond Myklebust) - Revert 'Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode' (Dmitry Torokhov) - net: mdio-mux-meson-g12a: force internal PHY off on mux switch (Jerome Brunet) - net: xgene: Move shared header file into include/linux (Andrew Lunn) - net/phy/mdio-i2c: Move header file to include/linux/mdio (Andrew Lunn) - net/tg3: resolve deadlock in tg3_reset_task() during EEH (David Christensen) - thermal: intel: int340x: Add locking to int340x_thermal_get_trip_type() (Rafael J. Wysocki) - net: ravb: Fix possible hang if RIS2_QFF1 happen (Yoshihiro Shimoda) - sctp: fail if no bound addresses can be used for a given scope (Marcelo Ricardo Leitner) - net/sched: sch_taprio: do not schedule in taprio_reset() (Eric Dumazet) - netrom: Fix use-after-free of a listening socket. (Kuniyuki Iwashima) - netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE (Sriram Yagnaraman) - ipv4: prevent potential spectre v1 gadget in fib_metrics_match() (Eric Dumazet) - ipv4: prevent potential spectre v1 gadget in ip_metrics_convert() (Eric Dumazet) - netlink: annotate data races around sk_state (Eric Dumazet) - netlink: annotate data races around dst_portid and dst_group (Eric Dumazet) - netlink: annotate data races around nlk->portid (Eric Dumazet) - netfilter: nft_set_rbtree: skip elements in transaction from garbage collection (Pablo Neira Ayuso) - net: fix UaF in netns ops registration error path (Paolo Abeni) - netlink: prevent potential spectre v1 gadgets (Eric Dumazet) - EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info (Manivannan Sadhasivam) - EDAC/device: Respect any driver-supplied workqueue polling value (Manivannan Sadhasivam) - ARM: 9280/1: mm: fix warning on phys_addr_t to void pointer assignment (Giulio Benetti) - thermal: intel: int340x: Protect trip temperature from concurrent updates (Srinivas Pandruvada) - KVM: x86/vmx: Do not skip segment attributes if unusable bit is set (Hendrik Borghorst) - cifs: Fix oops due to uncleared server->smbd_conn in reconnect (David Howells) - ftrace/scripts: Update the instructions for ftrace-bisect.sh (Steven Rostedt (Google)) - trace_events_hist: add check for return value of 'create_hist_field' (Natalia Petrova) - tracing: Make sure trace_printk() can output as soon as it can be used (Steven Rostedt (Google)) - module: Don't wait for GOING modules (Petr Pavlu) - scsi: hpsa: Fix allocation size for scsi_host_alloc() (Alexey V. Vissarionov) - Bluetooth: hci_sync: cancel cmd_timer if hci_open failed (Archie Pusaka) - Revert 'Revert 'xhci: Set HCD flag to defer primary roothub registration'' (Sasha Levin) - fs: reiserfs: remove useless new_opts in reiserfs_remount (Dongliang Mu) - mmc: sdhci-esdhc-imx: correct the tuning start tap and step setting (Haibo Chen) - mmc: sdhci-esdhc-imx: disable the CMD CRC check for standard tuning (Haibo Chen) - mmc: sdhci-esdhc-imx: clear pending interrupt and halt cqhci (Haibo Chen) - lockref: stop doing cpu_relax in the cmpxchg loop (Mateusz Guzik) - platform/x86: asus-nb-wmi: Add alternate mapping for KEY_SCREENLOCK (Hans de Goede) - platform/x86: touchscreen_dmi: Add info for the CSL Panther Tab HD (Michael Klein) - scsi: hisi_sas: Set a port invalid only if there are no devices attached when refreshing port id (Yihang Li) - KVM: s390: interrupt: use READ_ONCE() before cmpxchg() (Heiko Carstens) - spi: spidev: remove debug messages that access spidev->spi without locking (Bartosz Golaszewski) - ASoC: fsl-asoc-card: Fix naming of AC'97 CODEC widgets (Mark Brown) - ASoC: fsl_ssi: Rename AC'97 streams to avoid collisions with AC'97 CODEC (Mark Brown) - cpufreq: armada-37xx: stop using 0 as NULL pointer (Miles Chen) - s390/debug: add _ASM_S390_ prefix to header guard (Niklas Schnelle) - drm: Add orientation quirk for Lenovo ideapad D330-10IGL (Patrick Thompson) - ASoC: fsl_micfil: Correct the number of steps on SX controls (Chancel Liu) - cpufreq: Add Tegra234 to cpufreq-dt-platdev blocklist (Sumit Gupta) - tcp: fix rate_app_limited to default to 1 (David Morley) - net: dsa: microchip: ksz9477: port map correction in ALU table entry register (Rakesh Sankaranarayanan) - driver core: Fix test_async_probe_init saves device in wrong array (Chen Zhongjin) - w1: fix WARNING after calling w1_process() (Yang Yingliang) - w1: fix deadloop in __w1_remove_master_device() (Yang Yingliang) - tcp: avoid the lookup process failing to get sk in ehash table (Jason Xing) - dmaengine: xilinx_dma: call of_node_put() when breaking out of for_each_child_of_node() (Liu Shixin) - dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling (Swati Agarwal) - dmaengine: xilinx_dma: use devm_platform_ioremap_resource() (Radhey Shyam Pandey) - HID: betop: check shape of output reports (Pietro Borrello) - net: macb: fix PTP TX timestamp failure due to packet padding (Robert Hancock) - dmaengine: Fix double increment of client_count in dma_chan_get() (Koba Ko) - drm/panfrost: fix GENERIC_ATOMIC64 dependency (Arnd Bergmann) - net: mlx5: eliminate anonymous module_init & module_exit (Randy Dunlap) - usb: gadget: f_fs: Ensure ep0req is dequeued before free_request (Udipto Goswami) - usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait (Udipto Goswami) - HID: revert CHERRY_MOUSE_000C quirk (Jiri Kosina) - net: stmmac: fix invalid call to mdiobus_get_phy() (Heiner Kallweit) - HID: check empty report_list in bigben_probe() (Pietro Borrello) - HID: check empty report_list in hid_validate_values() (Pietro Borrello) - net: mdio: validate parameter addr in mdiobus_get_phy() (Heiner Kallweit) - net: usb: sr9700: Handle negative len (Szymon Heidrich) - l2tp: Don't sleep and disable BH under writer-side sk_callback_lock (Jakub Sitnicki) - l2tp: Serialize access to sk_user_data with sk_callback_lock (Jakub Sitnicki) [Orabug: 34951575] {CVE-2022-4129} - net: fix a concurrency bug in l2tp_tunnel_register() (Gong, Sishuai) - net/sched: sch_taprio: fix possible use-after-free (Eric Dumazet) - wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid (Szymon Heidrich) [Orabug: 35037713] {CVE-2023-23559} - gpio: mxc: Always set GPIOs used as interrupt source to INPUT mode (Marek Vasut) - net: wan: Add checks for NULL for utdm in undo_uhdlc_init and unmap_si_regs (Esina Ekaterina) - net: nfc: Fix use-after-free in local_cleanup() (Jisoo Jang) - phy: rockchip-inno-usb2: Fix missing clk_disable_unprepare() in rockchip_usb2phy_power_on() (Shang XiaoJing) - bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation (Luis Gerhorst) - amd-xgbe: Delay AN timeout during KR training (Raju Rangoju) - amd-xgbe: TX Flow Ctrl Registers are h/w ver dependent (Raju Rangoju) - affs: initialize fsdata in affs_truncate() (Alexander Potapenko) - IB/hfi1: Fix expected receive setup error exit issues (Dean Luick) - IB/hfi1: Reserve user expected TIDs (Dean Luick) - IB/hfi1: Reject a zero-length user expected buffer (Dean Luick) - RDMA/core: Fix ib block iterator counter overflow (Yonatan Nachum) - tomoyo: fix broken dependency on *.conf.default (Masahiro Yamada) - EDAC/highbank: Fix memory leak in highbank_mc_probe() (Miaoqian Lin) - HID: intel_ish-hid: Add check for ishtp_dma_tx_map (Jiasheng Jiang) - ARM: imx: add missing of_node_put() (Dario Binacchi) - ARM: imx35: Retrieve the IIM base address from devicetree (Fabio Estevam) - ARM: imx31: Retrieve the IIM base address from devicetree (Fabio Estevam) - ARM: imx27: Retrieve the SYSCTRL base address from devicetree (Fabio Estevam) - ARM: dts: imx6qdl-gw560x: Remove incorrect 'uart-has-rtscts' (Fabio Estevam) - memory: mvebu-devbus: Fix missing clk_disable_unprepare in mvebu_devbus_probe() (Gaosheng Cui) - memory: atmel-sdramc: Fix missing clk_disable_unprepare in atmel_ramc_probe() (Gaosheng Cui) - clk: Provide new devm_clk helpers for prepared and enabled clocks (Uwe Kleine-Konig) - clk: generalize devm_clk_get() a bit (Uwe Kleine-Konig) [5.4.17-2136.318.2] - iommu/amd: Increase kdump command sync timeout to 2secs (Joao Martins) [Orabug: 35117313] [5.4.17-2136.318.1] - uek-rpm: aarch64: embedded: Clean up T93 config file v2 (Henry Willard) [Orabug: 35029259] - uek-rpm: aarch64 embedded: make some modules built-in (Dave Kleikamp) [Orabug: 35029259] - uek-rpm: aarch64: pensando: config file update for January 2023 update (Dave Kleikamp) [Orabug: 35089950] - drivers/mtd/spi-nor: Winbond w25q02nw flash support. (Hiren Mehta) [Orabug: 35089950] - drivers/i2c: Reset Lattice RD1173 master for i2c_busy set. (Hiren Mehta) [Orabug: 35089950] - drivers/soc/pensando: boot_count to sysfs for kdump.log (Hiren Mehta) [Orabug: 35089950] - drivers/soc/pensando sbus driver (Hiren Mehta) [Orabug: 35089950] - drivers/reset: Add emmc hardware reset (Hiren Mehta) [Orabug: 35089950] - uek-rpm: Add missing dax_pmem_compat.ko to nano rpm (Somasundaram Krishnasamy) [Orabug: 35094871] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-27672 CVE-2022-3108 CVE-2022-2196 CVE-2022-4129 CVE-2023-23559 Oracle Linux 7 Oracle Linux 8 [5.4.17-2136.318.7.1.el7] - KVM: arm64: Disabling disabled PMU counters wastes a lot of time (Alexandre Chartre) [Orabug: 33312587] - KVM: arm64: Don't zero the cycle count register when PMCR_EL0.P is set (Alexandru Elisei) [Orabug: 33312587] - KVM: arm64: pmu: Only handle supported event counters (Eric Auger [5.4.17-2136.318.7.el8] - mm, compaction: Skip all pinned pages during scan (Khalid Aziz) [Orabug: 35251798] - xfs: add missing cmap->br_state = XFS_EXT_NORM update (Gao Xiang) [Orabug: 35214060] - rds/ib: Fix the softlock-up in RDS cache GC worker (Arumugam Kolappan) [Orabug: 35146761] - uek-rpm: Update linux-firmware dependency (Somasundaram Krishnasamy) [Orabug: 33755589] [5.4.17-2136.318.6.el8] - net/rds: Flip the default value of 'rds_wq_strictly_ordered' (Gerd Rausch) [Orabug: 35197635] [5.4.17-2136.318.5.el8] - udf: Fix file corruption when appending just after end of preallocated extent (Jan Kara) [Orabug: 35192763] - selftests/ftrace: Fix bash specific '==' operator (Masami Hiramatsu (Google)) [Orabug: 35192763] - arm64: kdump: Increase reserved memory for larger machines (Henry Willard) [Orabug: 35051468] - KVM: x86/pmu: Update AMD PMC sample period to fix guest NMI-watchdog (Like Xu) [Orabug: 34729426] - KVM: x86/pmu: Introduce pmc->is_paused to reduce the call time of perf interfaces (Like Xu) [Orabug: 34729426] - Revert 'perf/x86/uncore: Factor out uncore_device_to_die()' (Thomas Tai) [Orabug: 35053343] - Revert 'perf/x86/uncore: Fix potential NULL pointer in uncore_get_alias_name' (Thomas Tai) [Orabug: 35053343] - Revert 'perf/x86/uncore: Ignore broken units in discovery table' (Thomas Tai) [Orabug: 35053343] - Revert 'perf/x86/uncore: Add a quirk for UPI on SPR' (Thomas Tai) [Orabug: 35053343] - Revert 'perf/x86/uncore: Don't WARN_ON_ONCE() for a broken discovery table' (Thomas Tai) [Orabug: 35053343] - Documentation/hw-vuln: Add documentation for Cross-Thread Return Predictions (Tom Lendacky) [Orabug: 35166671] {CVE-2022-27672} - KVM: x86: Mitigate the cross-thread return address predictions bug (Tom Lendacky) [Orabug: 35166671] {CVE-2022-27672} - x86/speculation: Identify processors vulnerable to SMT RSB predictions (Tom Lendacky) [Orabug: 35166671] {CVE-2022-27672} - uek-rpm: aarch64: embedded: Enable CONFIG_RANDOMIZE_BASE to support ksplice for T93 (Thomas Tai) [Orabug: 35180981] - drm/amdkfd: Check for null pointer after calling kmemdup (Jiasheng Jiang) [Orabug: 34951503] {CVE-2022-3108} - mm: use padata for copying page ranges in vma_dup() (Anthony Yznaga) [Orabug: 35054622] - mm: parallelize unmap_page_range() for some large VMAs (Anthony Yznaga) [Orabug: 35054622] - net/rds: serialize up+down-work to relax strict ordering (Gerd Rausch) [Orabug: 35094723] - rds: ib: Fix non-parenthetical mutex/semaphore use (Hakon Bugge) [Orabug: 35155114] - Revert 'btrfs: free device in btrfs_close_devices for a single device filesystem' (Vijayendra Suman) [Orabug: 35161536] [5.4.17-2136.318.4.el8] - ipc: update semtimedop() to use hrtimer (Prakash Sangappa) [Orabug: 35069807] - rds: ib: Destroy fastreg resources correctly (Hakon Bugge) [Orabug: 35140658] - rds: ib: Use one-bit booleans in struct rds_ib_device and keep them adjacent (Hakon Bugge) [Orabug: 35140648] - mips64: drivers/watchdog: Add IRQF_NOBALANCING when requesting irq (Thomas Tai) [Orabug: 35159790] - net: mana: Fix IRQ name - add PCI and queue number (Haiyang Zhang) [Orabug: 35084730] - uek-rpm: Add opbmc to nano rpm (Somasundaram Krishnasamy) [Orabug: 35145857] [5.4.17-2136.318.3.el8] - vc_screen: don't clobber return value in vcs_read (Thomas WeiBschuh) - LTS tag: v5.4.233 (Sherry Yang) - bpf: add missing header file include (Linus Torvalds) - Revert 'net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs' (Vladimir Oltean) - ext4: Fix function prototype mismatch for ext4_feat_ktype (Kees Cook) - wifi: mwifiex: Add missing compatible string for SD8787 (Lukas Wunner) - uaccess: Add speculation barrier to copy_from_user() (Dave Hansen) - mac80211: mesh: embedd mesh_paths and mpp_paths into ieee80211_if_mesh (Pavel Skripkin) - drm/i915/gvt: fix double free bug in split_2MB_gtt_entry (Zheng Wang) - alarmtimer: Prevent starvation by small intervals and SIG_IGN (Thomas Gleixner) - powerpc: dts: t208x: Disable 10G on MAC1 and MAC2 (Sean Anderson) - can: kvaser_usb: hydra: help gcc-13 to figure out cmd_len (Marc Kleine-Budde) - KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS (Jim Mattson) {CVE-2022-2196} - KVM: x86: Fail emulation during EMULTYPE_SKIP on any exception (Sean Christopherson) - random: always mix cycle counter in add_latent_entropy() (Jason A. Donenfeld) - powerpc: dts: t208x: Mark MAC1 and MAC2 as 10G (Sean Anderson) - wifi: rtl8xxxu: gen2: Turn on the rate control (Bitterblue Smith) - drm/etnaviv: don't truncate physical page address (Lucas Stach) - drm: etnaviv: fix common struct sg_table related issues (Marek Szyprowski) - scatterlist: add generic wrappers for iterating over sgtable objects (Marek Szyprowski) - dma-mapping: add generic helpers for mapping sgtable objects (Marek Szyprowski) - LTS tag: v5.4.232 (Sherry Yang) - net: sched: sch: Fix off by one in htb_activate_prios() (Dan Carpenter) - ASoC: SOF: Intel: hda-dai: fix possible stream_tag leak (Pierre-Louis Bossart) - nilfs2: fix underflow in second superblock position calculations (Ryusuke Konishi) - kvm: initialize all of the kvm_debugregs structure before sending it to userspace (Greg Kroah-Hartman) - i40e: Add checking for null for nlmsg_find_attr() (Natalia Petrova) - ipv6: Fix tcp socket connection with DSCP. (Guillaume Nault) - ipv6: Fix datagram socket connection with DSCP. (Guillaume Nault) - ixgbe: add double of VLAN header when computing the max MTU (Jason Xing) - net: mpls: fix stale pointer if allocation fails during device rename (Jakub Kicinski) - net: stmmac: Restrict warning on disabling DMA store and fwd mode (Cristian Ciocaltea) - bnxt_en: Fix mqprio and XDP ring checking logic (Michael Chan) - net: stmmac: fix order of dwmac5 FlexPPS parametrization sequence (Johannes Zink) - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Miko Larsson) - dccp/tcp: Avoid negative sk_forward_alloc by ipv6_pinfo.pktoptions. (Kuniyuki Iwashima) - sctp: sctp_sock_filter(): avoid list_entry() on possibly empty list (Pietro Borrello) - net: bgmac: fix BCM5358 support by setting correct flags (Rafa Mi ecki) - i40e: add double of VLAN header when computing the max MTU (Jason Xing) - ixgbe: allow to increase MTU to 3K with XDP enabled (Jason Xing) - revert 'squashfs: harden sanity check in squashfs_read_xattr_id_table' (Andrew Morton) - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Felix Riemann) - Revert 'mm: Always release pages to the buddy allocator in memblock_free_late().' (Aaron Thompson) - hugetlb: check for undefined shift on 32 bit architectures (Mike Kravetz) - sched/psi: Fix use-after-free in ep_remove_wait_queue() (Munehisa Kamata) - ALSA: hda/realtek - fixed wrong gpio assigned (Kailang Yang) - ALSA: hda/conexant: add a new hda codec SN6180 (Bo Liu) - mmc: mmc_spi: fix error handling in mmc_spi_probe() (Yang Yingliang) - mmc: sdio: fix possible resource leaks in some error paths (Yang Yingliang) - Revert 'ipv4: Fix incorrect route flushing when source address is deleted' (Shaoying Xu) - xfs: sync lazy sb accounting on quiesce of read-only mounts (Brian Foster) - xfs: fix the forward progress assertion in xfs_iwalk_run_callbacks (Darrick J. Wong) - xfs: ensure inobt record walks always make forward progress (Darrick J. Wong) - xfs: fix missing CoW blocks writeback conversion retry (Darrick J. Wong) - xfs: fix finobt btree block recovery ordering (Dave Chinner) - xfs: remove the xfs_inode_log_item_t typedef (Christoph Hellwig) - xfs: remove the xfs_efd_log_item_t typedef (Christoph Hellwig) - xfs: remove the xfs_efi_log_item_t typedef (Christoph Hellwig) - netfilter: nft_tproxy: restrict to prerouting hook (Florian Westphal) - btrfs: free device in btrfs_close_devices for a single device filesystem (Anand Jain) - aio: fix mremap after fork null-deref (Seth Jenkins) - nvme-fc: fix a missing queue put in nvmet_fc_ls_create_association (Amit Engel) - s390/decompressor: specify __decompress() buf len to avoid overflow (Vasily Gorbik) - net: sched: sch: Bounds check priority (Kees Cook) - net: stmmac: do not stop RX_CLK in Rx LPI state for qcs404 SoC (Andrey Konovalov) - net/rose: Fix to not accept on connected socket (Hyunwoo Kim) - tools/virtio: fix the vringh test for virtio ring changes (Shunsuke Mie) - ASoC: cs42l56: fix DT probe (Arnd Bergmann) - selftests/bpf: Verify copy_register_state() preserves parent/live fields (Eduard Zingerman) - migrate: hugetlb: check for hugetlb shared PMD in node migration (Mike Kravetz) - bpf: Always return target ifindex in bpf_fib_lookup (Toke Hoiland-Jorgensen) - nvme-pci: Move enumeration by class to be last in the table (Andy Shevchenko) - arm64: dts: meson-axg: Make mmc host controller interrupts level-sensitive (Heiner Kallweit) - arm64: dts: meson-g12-common: Make mmc host controller interrupts level-sensitive (Heiner Kallweit) - arm64: dts: meson-gx: Make mmc host controller interrupts level-sensitive (Heiner Kallweit) - riscv: Fixup race condition on PG_dcache_clean in flush_icache_pte (Guo Ren) - ceph: flush cap releases when the session is flushed (Xiubo Li) - usb: typec: altmodes/displayport: Fix probe pin assign check (Prashant Malani) - usb: core: add quirk for Alcor Link AK9563 smartcard reader (Mark Pearson) - net: USB: Fix wrong-direction WARNING in plusb.c (Alan Stern) - pinctrl: intel: Restore the pins that used to be in Direct IRQ mode (Andy Shevchenko) - pinctrl: single: fix potential NULL dereference (Maxim Korotkov) - pinctrl: aspeed: Fix confusing types in return value (Joel Stanley) - ALSA: pci: lx6464es: fix a debug loop (Dan Carpenter) - selftests: forwarding: lib: quote the sysctl values (Hangbin Liu) - ice: Do not use WQ_MEM_RECLAIM flag for workqueue (Anirudh Venkataramanan) - net: phy: meson-gxl: use MMD access dummy stubs for GXL, internal PHY (Heiner Kallweit) - bonding: fix error checking in bond_debug_reregister() (Qi Zheng) - xfrm: fix bug with DSCP copy to v6 from v4 tunnel (Christian Hopps) - IB/IPoIB: Fix legacy IPoIB due to wrong number of queues (Dragos Tatulea) - IB/hfi1: Restore allocated resources on failed copyout (Dean Luick) - can: j1939: do not wait 250 ms if the same addr was already claimed (Devid Antonio Filoni) - tracing: Fix poll() and select() do not work on per_cpu trace_pipe and trace_pipe_raw (Shiju Jose) - ALSA: emux: Avoid potential array out-of-bound in snd_emux_xg_control() (Artemii Karasev) - btrfs: zlib: zero-initialize zlib workspace (Alexander Potapenko) - btrfs: limit device extents to the device size (Josef Bacik) - iio:adc:twl6030: Enable measurement of VAC (Andreas Kemnade) - wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads (Minsuk Kang) - f2fs: fix to do sanity check on i_extra_isize in is_alive() (Chao Yu) - fbdev: smscufx: fix error handling code in ufx_usb_probe (Dongliang Mu) - powerpc/imc-pmu: Revert nest_init_lock to being a mutex (Michael Ellerman) - serial: 8250_dma: Fix DMA Rx rearm race (Ilpo Jarvinen) - serial: 8250_dma: Fix DMA Rx completion race (Ilpo Jarvinen) - xprtrdma: Fix regbuf data not freed in rpcrdma_req_create() (Zhang Xiaoxu) - mm: swap: properly update readahead statistics in unuse_pte_range() (Andrea Righi) - nvmem: core: fix cell removal on error (Michael Walle) - Squashfs: fix handling and sanity checking of xattr_ids count (Phillip Lougher) - mm/swapfile: add cond_resched() in get_swap_pages() (Longlong Xia) - fpga: stratix10-soc: Fix return value check in s10_ops_write_init() (Zheng Yongjun) - mm: hugetlb: proc: check for hugetlb shared PMD in /proc/PID/smaps (Mike Kravetz) - riscv: disable generation of unwind tables (Andreas Schwab) - parisc: Wire up PTRACE_GETREGS/PTRACE_SETREGS for compat case (Helge Deller) - parisc: Fix return code of pdc_iodc_print() (Helge Deller) - iio:adc:twl6030: Enable measurements of VUSB, VBAT and others (Andreas Kemnade) - iio: adc: berlin2-adc: Add missing of_node_put() in error path (Xiongfeng Wang) - iio: hid: fix the retval in accel_3d_capture_sample (Dmitry Perchanov) - efi: Accept version 2 of memory attributes table (Ard Biesheuvel) - watchdog: diag288_wdt: fix __diag288() inline assembly (Alexander Egorenkov) - watchdog: diag288_wdt: do not use stack buffers for hardware data (Alexander Egorenkov) - fbcon: Check font dimension limits (Samuel Thibault) - Input: i8042 - add Clevo PCX0DX to i8042 quirk table (Werner Sembach) - Input: i8042 - add TUXEDO devices to i8042 quirk tables (Werner Sembach) - Input: i8042 - merge quirk tables (Werner Sembach) - Input: i8042 - move __initconst to fix code styling warning (Werner Sembach) - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF (George Kennedy) - usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait (Udipto Goswami) - usb: dwc3: qcom: enable vbus override when in OTG dr-mode (Neil Armstrong) - usb: dwc3: dwc3-qcom: Fix typo in the dwc3 vbus override API (Wesley Cheng) - iio: adc: stm32-dfsdm: fill module aliases (Olivier Moysan) - net/x25: Fix to not accept on connected socket (Hyunwoo Kim) - i2c: rk3x: fix a bunch of kernel-doc warnings (Randy Dunlap) - scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress (Mike Christie) - scsi: target: core: Fix warning on RT kernels (Maurizio Lombardi) - efi: fix potential NULL deref in efi_mem_reserve_persistent (Anton Gusev) - net: openvswitch: fix flow memory leak in ovs_flow_cmd_new (Fedor Pchelkin) - virtio-net: Keep stop() to follow mirror sequence of open() (Parav Pandit) - selftests: net: udpgso_bench_tx: Cater for pending datagrams zerocopy benchmarking (Andrei Gherzan) - selftests: net: udpgso_bench: Fix racing bug between the rx/tx programs (Andrei Gherzan) - selftests: net: udpgso_bench_rx/tx: Stop when wrong CLI args are provided (Andrei Gherzan) - selftests: net: udpgso_bench_rx: Fix 'used uninitialized' compiler warning (Andrei Gherzan) - ata: libata: Fix sata_down_spd_limit() when no link speed is reported (Damien Le Moal) - can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate (Ziyang Xuan) - net: phy: meson-gxl: Add generic dummy stubs for MMD register access (Chris Healy) - netfilter: br_netfilter: disable sabotage_in hook after first suppression (Florian Westphal) - netrom: Fix use-after-free caused by accept on already connected socket (Hyunwoo Kim) - fix 'direction' argument of iov_iter_kvec() (Al Viro) - fix iov_iter_bvec() 'direction' argument (Al Viro) - WRITE is 'data source', not destination... (Al Viro) - scsi: Revert 'scsi: core: map PQ=1, PDT=other values to SCSI_SCAN_TARGET_PRESENT' (Martin K. Petersen) - arm64: dts: imx8mm: Fix pad control for UART1_DTE_RX (Pierluigi Passaro) - ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() (Artemii Karasev) - ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use (Andy Shevchenko) - bus: sunxi-rsb: Fix error handling in sunxi_rsb_init() (Yuan Can) - firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region (Takashi Sakamoto) - LTS tag: v5.4.231 (Sherry Yang) - usb: host: xhci-plat: add wakeup entry at sysfs (Peter Chen) - Bluetooth: fix null ptr deref on hci_sync_conn_complete_evt (Soenke Huster) - ipv6: ensure sane device mtu in tunnels (Eric Dumazet) - exit: Use READ_ONCE() for all oops/warn limit reads (Kees Cook) - docs: Fix path paste-o for /sys/kernel/warn_count (Kees Cook) - panic: Expose 'warn_count' to sysfs (Kees Cook) - panic: Introduce warn_limit (Kees Cook) - panic: Consolidate open-coded panic_on_warn checks (Kees Cook) - exit: Allow oops_limit to be disabled (Kees Cook) - exit: Expose 'oops_count' to sysfs (Kees Cook) - exit: Put an upper limit on how often we can oops (Jann Horn) - ia64: make IA64_MCA_RECOVERY bool instead of tristate (Randy Dunlap) - csky: Fix function name in csky_alignment() and die() (Nathan Chancellor) - h8300: Fix build errors from do_exit() to make_task_dead() transition (Nathan Chancellor) - hexagon: Fix function name in die() (Nathan Chancellor) - objtool: Add a missing comma to avoid string concatenation (Eric W. Biederman) - exit: Add and use make_task_dead. (Eric W. Biederman) - mm: kasan: do not panic if both panic_on_warn and kasan_multishot set (David Gow) - panic: unset panic_on_warn inside panic() (Tiezhu Yang) - sysctl: add a new register_sysctl_init() interface (Xiaoming Ni) - dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init (Hui Wang) - blk-cgroup: fix missing pd_online_fn() while activating policy (Yu Kuai) - bpf: Skip task with pid=1 in send_signal_common() (Hao Sun) - ARM: dts: imx: Fix pca9547 i2c-mux node name (Geert Uytterhoeven) - x86/asm: Fix an assembler warning with current binutils (Mikulas Patocka) - clk: Fix pointer casting to prevent oops in devm_clk_release() (Uwe Kleine-Konig) - perf/x86/amd: fix potential integer overflow on shift of a int (Colin Ian King) - netfilter: conntrack: unify established states for SCTP paths (Sriram Yagnaraman) - x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL (Thomas Gleixner) - block: fix and cleanup bio_check_ro (Christoph Hellwig) - nfsd: Ensure knfsd shuts down when the 'nfsd' pseudofs is unmounted (Trond Myklebust) - Revert 'Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode' (Dmitry Torokhov) - net: mdio-mux-meson-g12a: force internal PHY off on mux switch (Jerome Brunet) - net: xgene: Move shared header file into include/linux (Andrew Lunn) - net/phy/mdio-i2c: Move header file to include/linux/mdio (Andrew Lunn) - net/tg3: resolve deadlock in tg3_reset_task() during EEH (David Christensen) - thermal: intel: int340x: Add locking to int340x_thermal_get_trip_type() (Rafael J. Wysocki) - net: ravb: Fix possible hang if RIS2_QFF1 happen (Yoshihiro Shimoda) - sctp: fail if no bound addresses can be used for a given scope (Marcelo Ricardo Leitner) - net/sched: sch_taprio: do not schedule in taprio_reset() (Eric Dumazet) - netrom: Fix use-after-free of a listening socket. (Kuniyuki Iwashima) - netfilter: conntrack: fix vtag checks for ABORT/SHUTDOWN_COMPLETE (Sriram Yagnaraman) - ipv4: prevent potential spectre v1 gadget in fib_metrics_match() (Eric Dumazet) - ipv4: prevent potential spectre v1 gadget in ip_metrics_convert() (Eric Dumazet) - netlink: annotate data races around sk_state (Eric Dumazet) - netlink: annotate data races around dst_portid and dst_group (Eric Dumazet) - netlink: annotate data races around nlk->portid (Eric Dumazet) - netfilter: nft_set_rbtree: skip elements in transaction from garbage collection (Pablo Neira Ayuso) - net: fix UaF in netns ops registration error path (Paolo Abeni) - netlink: prevent potential spectre v1 gadgets (Eric Dumazet) - EDAC/qcom: Do not pass llcc_driv_data as edac_device_ctl_info's pvt_info (Manivannan Sadhasivam) - EDAC/device: Respect any driver-supplied workqueue polling value (Manivannan Sadhasivam) - ARM: 9280/1: mm: fix warning on phys_addr_t to void pointer assignment (Giulio Benetti) - thermal: intel: int340x: Protect trip temperature from concurrent updates (Srinivas Pandruvada) - KVM: x86/vmx: Do not skip segment attributes if unusable bit is set (Hendrik Borghorst) - cifs: Fix oops due to uncleared server->smbd_conn in reconnect (David Howells) - ftrace/scripts: Update the instructions for ftrace-bisect.sh (Steven Rostedt (Google)) - trace_events_hist: add check for return value of 'create_hist_field' (Natalia Petrova) - tracing: Make sure trace_printk() can output as soon as it can be used (Steven Rostedt (Google)) - module: Don't wait for GOING modules (Petr Pavlu) - scsi: hpsa: Fix allocation size for scsi_host_alloc() (Alexey V. Vissarionov) - Bluetooth: hci_sync: cancel cmd_timer if hci_open failed (Archie Pusaka) - Revert 'Revert 'xhci: Set HCD flag to defer primary roothub registration'' (Sasha Levin) - fs: reiserfs: remove useless new_opts in reiserfs_remount (Dongliang Mu) - mmc: sdhci-esdhc-imx: correct the tuning start tap and step setting (Haibo Chen) - mmc: sdhci-esdhc-imx: disable the CMD CRC check for standard tuning (Haibo Chen) - mmc: sdhci-esdhc-imx: clear pending interrupt and halt cqhci (Haibo Chen) - lockref: stop doing cpu_relax in the cmpxchg loop (Mateusz Guzik) - platform/x86: asus-nb-wmi: Add alternate mapping for KEY_SCREENLOCK (Hans de Goede) - platform/x86: touchscreen_dmi: Add info for the CSL Panther Tab HD (Michael Klein) - scsi: hisi_sas: Set a port invalid only if there are no devices attached when refreshing port id (Yihang Li) - KVM: s390: interrupt: use READ_ONCE() before cmpxchg() (Heiko Carstens) - spi: spidev: remove debug messages that access spidev->spi without locking (Bartosz Golaszewski) - ASoC: fsl-asoc-card: Fix naming of AC'97 CODEC widgets (Mark Brown) - ASoC: fsl_ssi: Rename AC'97 streams to avoid collisions with AC'97 CODEC (Mark Brown) - cpufreq: armada-37xx: stop using 0 as NULL pointer (Miles Chen) - s390/debug: add _ASM_S390_ prefix to header guard (Niklas Schnelle) - drm: Add orientation quirk for Lenovo ideapad D330-10IGL (Patrick Thompson) - ASoC: fsl_micfil: Correct the number of steps on SX controls (Chancel Liu) - cpufreq: Add Tegra234 to cpufreq-dt-platdev blocklist (Sumit Gupta) - tcp: fix rate_app_limited to default to 1 (David Morley) - net: dsa: microchip: ksz9477: port map correction in ALU table entry register (Rakesh Sankaranarayanan) - driver core: Fix test_async_probe_init saves device in wrong array (Chen Zhongjin) - w1: fix WARNING after calling w1_process() (Yang Yingliang) - w1: fix deadloop in __w1_remove_master_device() (Yang Yingliang) - tcp: avoid the lookup process failing to get sk in ehash table (Jason Xing) - dmaengine: xilinx_dma: call of_node_put() when breaking out of for_each_child_of_node() (Liu Shixin) - dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling (Swati Agarwal) - dmaengine: xilinx_dma: use devm_platform_ioremap_resource() (Radhey Shyam Pandey) - HID: betop: check shape of output reports (Pietro Borrello) - net: macb: fix PTP TX timestamp failure due to packet padding (Robert Hancock) - dmaengine: Fix double increment of client_count in dma_chan_get() (Koba Ko) - drm/panfrost: fix GENERIC_ATOMIC64 dependency (Arnd Bergmann) - net: mlx5: eliminate anonymous module_init & module_exit (Randy Dunlap) - usb: gadget: f_fs: Ensure ep0req is dequeued before free_request (Udipto Goswami) - usb: gadget: f_fs: Prevent race during ffs_ep0_queue_wait (Udipto Goswami) - HID: revert CHERRY_MOUSE_000C quirk (Jiri Kosina) - net: stmmac: fix invalid call to mdiobus_get_phy() (Heiner Kallweit) - HID: check empty report_list in bigben_probe() (Pietro Borrello) - HID: check empty report_list in hid_validate_values() (Pietro Borrello) - net: mdio: validate parameter addr in mdiobus_get_phy() (Heiner Kallweit) - net: usb: sr9700: Handle negative len (Szymon Heidrich) - l2tp: Don't sleep and disable BH under writer-side sk_callback_lock (Jakub Sitnicki) - l2tp: Serialize access to sk_user_data with sk_callback_lock (Jakub Sitnicki) - net: fix a concurrency bug in l2tp_tunnel_register() (Gong, Sishuai) - net/sched: sch_taprio: fix possible use-after-free (Eric Dumazet) - wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid (Szymon Heidrich) - gpio: mxc: Always set GPIOs used as interrupt source to INPUT mode (Marek Vasut) - net: wan: Add checks for NULL for utdm in undo_uhdlc_init and unmap_si_regs (Esina Ekaterina) - net: nfc: Fix use-after-free in local_cleanup() (Jisoo Jang) - phy: rockchip-inno-usb2: Fix missing clk_disable_unprepare() in rockchip_usb2phy_power_on() (Shang XiaoJing) - bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation (Luis Gerhorst) - amd-xgbe: Delay AN timeout during KR training (Raju Rangoju) - amd-xgbe: TX Flow Ctrl Registers are h/w ver dependent (Raju Rangoju) - affs: initialize fsdata in affs_truncate() (Alexander Potapenko) - IB/hfi1: Fix expected receive setup error exit issues (Dean Luick) - IB/hfi1: Reserve user expected TIDs (Dean Luick) - IB/hfi1: Reject a zero-length user expected buffer (Dean Luick) - RDMA/core: Fix ib block iterator counter overflow (Yonatan Nachum) - tomoyo: fix broken dependency on *.conf.default (Masahiro Yamada) - EDAC/highbank: Fix memory leak in highbank_mc_probe() (Miaoqian Lin) - HID: intel_ish-hid: Add check for ishtp_dma_tx_map (Jiasheng Jiang) - ARM: imx: add missing of_node_put() (Dario Binacchi) - ARM: imx35: Retrieve the IIM base address from devicetree (Fabio Estevam) - ARM: imx31: Retrieve the IIM base address from devicetree (Fabio Estevam) - ARM: imx27: Retrieve the SYSCTRL base address from devicetree (Fabio Estevam) - ARM: dts: imx6qdl-gw560x: Remove incorrect 'uart-has-rtscts' (Fabio Estevam) - memory: mvebu-devbus: Fix missing clk_disable_unprepare in mvebu_devbus_probe() (Gaosheng Cui) - memory: atmel-sdramc: Fix missing clk_disable_unprepare in atmel_ramc_probe() (Gaosheng Cui) - clk: Provide new devm_clk helpers for prepared and enabled clocks (Uwe Kleine-Konig) - clk: generalize devm_clk_get() a bit (Uwe Kleine-Konig) [5.4.17-2136.318.2.el8] - iommu/amd: Increase kdump command sync timeout to 2secs (Joao Martins) [Orabug: 35117313] [5.4.17-2136.318.1.el8] - uek-rpm: aarch64: embedded: Clean up T93 config file v2 (Henry Willard) [Orabug: 35029259] - uek-rpm: aarch64 embedded: make some modules built-in (Dave Kleikamp) [Orabug: 35029259] - uek-rpm: aarch64: pensando: config file update for January 2023 update (Dave Kleikamp) [Orabug: 35089950] - drivers/mtd/spi-nor: Winbond w25q02nw flash support. (Hiren Mehta) [Orabug: 35089950] - drivers/i2c: Reset Lattice RD1173 master for i2c_busy set. (Hiren Mehta) [Orabug: 35089950] - drivers/soc/pensando: boot_count to sysfs for kdump.log (Hiren Mehta) [Orabug: 35089950] - drivers/soc/pensando sbus driver (Hiren Mehta) [Orabug: 35089950] - drivers/reset: Add emmc hardware reset (Hiren Mehta) [Orabug: 35089950] - uek-rpm: Add missing dax_pmem_compat.ko to nano rpm (Somasundaram Krishnasamy) [Orabug: 35094871] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-3108 CVE-2022-2196 CVE-2023-23559 CVE-2022-4129 CVE-2022-27672 Oracle Linux 6 [1.0.1e-59.0.4] - Backport fixes for CVE-2023-0286 [Orabug: 35212597] [1.0.1e-59.0.3] - Fix possible infinite loop in BN_mod_sqrt() [CVE-2022-0778][Orabug: 33969800] [1.0.1e-59.0.1] - Backport fixes for CVE-2020-1971 [Orabug: 32654738] [1.0.1e-58.0.1] - Oracle bug 28730228: backport CVE-2018-0732 - Oracle bug 28758493: backport CVE-2018-0737 - Merge upstream patch to fix CVE-2018-0739 - Avoid out-of-bounds read. Fixes CVE 2017-3735. By Rich Salz - sha256 is used for the RSA pairwise consistency test instead of sha1 [1.0.1e-58] - fix CVE-2019-1559 - 0-byte record padding oracle [1.0.1e-57] - fix CVE-2017-3731 - DoS via truncated packets with RC4-MD5 cipher [1.0.1e-55] - fix CVE-2016-8610 - DoS of single-threaded servers via excessive alerts [1.0.1e-54] - fix handling of ciphersuites present after the FALLBACK_SCSV ciphersuite entry (#1386350) [1.0.1e-53] - add README.legacy-settings [1.0.1e-52] - deprecate and disable verification of insecure hash algorithms - disallow DH keys with less than 1024 bits in TLS client - remove support for weak and export ciphersuites - use correct digest when exporting keying material in TLS1.2 (#1376741) [1.0.1e-50] - fix CVE-2016-2177 - possible integer overflow - fix CVE-2016-2178 - non-constant time DSA operations - fix CVE-2016-2179 - further DoS issues in DTLS - fix CVE-2016-2180 - OOB read in TS_OBJ_print_bio() - fix CVE-2016-2181 - DTLS1 replay protection and unprocessed records issue - fix CVE-2016-2182 - possible buffer overflow in BN_bn2dec() - fix CVE-2016-6302 - insufficient TLS session ticket HMAC length check - fix CVE-2016-6304 - unbound memory growth with OCSP status request - fix CVE-2016-6306 - certificate message OOB reads - mitigate CVE-2016-2183 - degrade all 64bit block ciphers and RC4 to 112 bit effective strength - replace expired testing certificates [1.0.1e-49] - fix CVE-2016-2105 - possible overflow in base64 encoding - fix CVE-2016-2106 - possible overflow in EVP_EncryptUpdate() - fix CVE-2016-2107 - padding oracle in stitched AES-NI CBC-MAC - fix CVE-2016-2108 - memory corruption in ASN.1 encoder - fix CVE-2016-2109 - possible DoS when reading ASN.1 data from BIO - fix CVE-2016-0799 - memory issues in BIO_printf [1.0.1e-48] - fix CVE-2016-0702 - side channel attack on modular exponentiation - fix CVE-2016-0705 - double-free in DSA private key parsing - fix CVE-2016-0797 - heap corruption in BN_hex2bn and BN_dec2bn [1.0.1e-47] - fix CVE-2015-3197 - SSLv2 ciphersuite enforcement - disable SSLv2 in the generic TLS method [1.0.1e-46] - fix 1-byte memory leak in pkcs12 parse (#1229871) - document some options of the speed command (#1197095) [1.0.1e-45] - fix high-precision timestamps in timestamping authority [1.0.1e-44] - fix CVE-2015-7575 - disallow use of MD5 in TLS1.2 [1.0.1e-43] - fix CVE-2015-3194 - certificate verify crash with missing PSS parameter - fix CVE-2015-3195 - X509_ATTRIBUTE memory leak - fix CVE-2015-3196 - race condition when handling PSK identity hint [1.0.1e-42] - fix regression caused by mistake in fix for CVE-2015-1791 [1.0.1e-41] - improved fix for CVE-2015-1791 - add missing parts of CVE-2015-0209 fix for corectness although unexploitable [1.0.1e-40] - fix CVE-2014-8176 - invalid free in DTLS buffering code - fix CVE-2015-1789 - out-of-bounds read in X509_cmp_time - fix CVE-2015-1790 - PKCS7 crash with missing EncryptedContent - fix CVE-2015-1791 - race condition handling NewSessionTicket - fix CVE-2015-1792 - CMS verify infinite loop with unknown hash function [1.0.1e-39] - fix CVE-2015-3216 - regression in RAND locking that can cause segfaults on read in multithreaded applications [1.0.1e-38] - fix CVE-2015-4000 - prevent the logjam attack on client - restrict the DH key size to at least 768 bits (limit will be increased in future) [1.0.1e-37] - drop the AES-GCM restriction of 2^32 operations because the IV is always 96 bits (32 bit fixed field + 64 bit invocation field) [1.0.1e-36] - update fix for CVE-2015-0287 to what was released upstream [1.0.1e-35] - fix CVE-2015-0209 - potential use after free in d2i_ECPrivateKey() - fix CVE-2015-0286 - improper handling of ASN.1 boolean comparison - fix CVE-2015-0287 - ASN.1 structure reuse decoding memory corruption - fix CVE-2015-0288 - X509_to_X509_REQ NULL pointer dereference - fix CVE-2015-0289 - NULL dereference decoding invalid PKCS#7 data - fix CVE-2015-0292 - integer underflow in base64 decoder - fix CVE-2015-0293 - triggerable assert in SSLv2 server [1.0.1e-34] - copy digest algorithm when handling SNI context switch - improve documentation of ciphersuites - patch by Hubert Kario - add support for setting Kerberos service and keytab in s_server and s_client [1.0.1e-33] - fix CVE-2014-3570 - incorrect computation in BN_sqr() - fix CVE-2014-3571 - possible crash in dtls1_get_record() - fix CVE-2014-3572 - possible downgrade of ECDH ciphersuite to non-PFS state - fix CVE-2014-8275 - various certificate fingerprint issues - fix CVE-2015-0204 - remove support for RSA ephemeral keys for non-export ciphersuites and on server - fix CVE-2015-0205 - do not allow unauthenticated client DH certificate - fix CVE-2015-0206 - possible memory leak when buffering DTLS records [1.0.1e-32] - use FIPS approved method for computation of d in RSA [1.0.1e-31] - fix CVE-2014-3567 - memory leak when handling session tickets - fix CVE-2014-3513 - memory leak in srtp support - add support for fallback SCSV to partially mitigate CVE-2014-3566 (padding attack on SSL3) [1.0.1e-30] - add ECC TLS extensions to DTLS (#1119800) [1.0.1e-29] - fix CVE-2014-3505 - doublefree in DTLS packet processing - fix CVE-2014-3506 - avoid memory exhaustion in DTLS - fix CVE-2014-3507 - avoid memory leak in DTLS - fix CVE-2014-3508 - fix OID handling to avoid information leak - fix CVE-2014-3509 - fix race condition when parsing server hello - fix CVE-2014-3510 - fix DoS in anonymous (EC)DH handling in DTLS - fix CVE-2014-3511 - disallow protocol downgrade via fragmentation [1.0.1e-28] - fix CVE-2014-0224 fix that broke EAP-FAST session resumption support [1.0.1e-26] - drop EXPORT, RC2, and DES from the default cipher list (#1057520) - print ephemeral key size negotiated in TLS handshake (#1057715) - do not include ECC ciphersuites in SSLv2 client hello (#1090952) - properly detect encryption failure in BIO (#1100819) - fail on hmac integrity check if the .hmac file is empty (#1105567) - FIPS mode: make the limitations on DSA, DH, and RSA keygen length enforced only if OPENSSL_ENFORCE_MODULUS_BITS environment variable is set [1.0.1e-25] - fix CVE-2010-5298 - possible use of memory after free - fix CVE-2014-0195 - buffer overflow via invalid DTLS fragment - fix CVE-2014-0198 - possible NULL pointer dereference - fix CVE-2014-0221 - DoS from invalid DTLS handshake packet - fix CVE-2014-0224 - SSL/TLS MITM vulnerability - fix CVE-2014-3470 - client-side DoS when using anonymous ECDH [1.0.1e-24] - add back support for secp521r1 EC curve [1.0.1e-23] - fix CVE-2014-0160 - information disclosure in TLS heartbeat extension [1.0.1e-22] - use 2048 bit RSA key in FIPS selftests [1.0.1e-21] - add DH_compute_key_padded needed for FIPS CAVS testing - make 3des strength to be 128 bits instead of 168 (#1056616) - FIPS mode: do not generate DSA keys and DH parameters < 2048 bits - FIPS mode: use approved RSA keygen (allows only 2048 and 3072 bit keys) - FIPS mode: add DH selftest - FIPS mode: reseed DRBG properly on RAND_add() - FIPS mode: add RSA encrypt/decrypt selftest - FIPS mode: add hard limit for 2^32 GCM block encryptions with the same key - use the key length from configuration file if req -newkey rsa is invoked [1.0.1e-20] - fix CVE-2013-4353 - Invalid TLS handshake crash [1.0.1e-19] - fix CVE-2013-6450 - possible MiTM attack on DTLS1 [1.0.1e-18] - fix CVE-2013-6449 - crash when version in SSL structure is incorrect [1.0.1e-17] - add back some no-op symbols that were inadvertently dropped [1.0.1e-16] - do not advertise ECC curves we do not support - fix CPU identification on Cyrix CPUs [1.0.1e-15] - make DTLS1 work in FIPS mode - avoid RSA and DSA 512 bits and Whirlpool in 'openssl speed' in FIPS mode [1.0.1e-14] - installation of dracut-fips marks that the FIPS module is installed [1.0.1e-13] - avoid dlopening libssl.so from libcrypto [1.0.1e-12] - fix small memory leak in FIPS aes selftest - fix segfault in openssl speed hmac in the FIPS mode [1.0.1e-11] - document the nextprotoneg option in manual pages original patch by Hubert Kario [1.0.1e-9] - always perform the FIPS selftests in library constructor if FIPS module is installed [1.0.1e-8] - fix use of rdrand if available - more commits cherry picked from upstream - documentation fixes [1.0.1e-7] - additional manual page fix - use symbol versioning also for the textual version [1.0.1e-6] - additional manual page fixes - cleanup speed command output for ECDH ECDSA [1.0.1e-5] - use _prefix macro [1.0.1e-4] - add relro linking flag [1.0.1e-2] - add support for the -trusted_first option for certificate chain verification [1.0.1e-1] - rebase to the 1.0.1e upstream version [1.0.0-28] - fix for CVE-2013-0169 - SSL/TLS CBC timing attack (#907589) - fix for CVE-2013-0166 - DoS in OCSP signatures checking (#908052) - enable compression only if explicitly asked for or OPENSSL_DEFAULT_ZLIB environment variable is set (fixes CVE-2012-4929 #857051) - use __secure_getenv() everywhere instead of getenv() (#839735) [1.0.0-27] - fix sslrand(1) and sslpasswd(1) reference in openssl(1) manpage (#841645) - drop superfluous lib64 fixup in pkgconfig .pc files (#770872) - force BIO_accept_new(*:<port-number>) to listen on IPv4 [1.0.0-26] - use PKCS#8 when writing private keys in FIPS mode as the old PEM encryption mode is not FIPS compatible (#812348) [1.0.0-25] - fix for CVE-2012-2333 - improper checking for record length in DTLS (#820686) - properly initialize tkeylen in the CVE-2012-0884 fix [1.0.0-24] - fix for CVE-2012-2110 - memory corruption in asn1_d2i_read_bio() (#814185) [1.0.0-23] - fix problem with the SGC restart patch that might terminate handshake incorrectly - fix for CVE-2012-0884 - MMA weakness in CMS and PKCS#7 code (#802725) - fix for CVE-2012-1165 - NULL read dereference on bad MIME headers (#802489) [1.0.0-22] - fix incorrect encryption of unaligned chunks in CFB, OFB and CTR modes [1.0.0-21] - fix for CVE-2011-4108 & CVE-2012-0050 - DTLS plaintext recovery vulnerability and additional DTLS fixes (#771770) - fix for CVE-2011-4576 - uninitialized SSL 3.0 padding (#771775) - fix for CVE-2011-4577 - possible DoS through malformed RFC 3779 data (#771778) - fix for CVE-2011-4619 - SGC restart DoS attack (#771780) [1.0.0-20] - fix x86cpuid.pl - patch by Paolo Bonzini [1.0.0-19] - add known answer test for SHA2 algorithms [1.0.0-18] - fix missing initialization of a variable in the CHIL engine (#740188) [1.0.0-17] - initialize the X509_STORE_CTX properly for CRL lookups - CVE-2011-3207 (#736087) [1.0.0-16] - merge the optimizations for AES-NI, SHA1, and RC4 from the intelx engine to the internal implementations [1.0.0-15] - better documentation of the available digests in apps (#693858) - backported CHIL engine fixes (#693863) - allow testing build without downstream patches (#708511) - enable partial RELRO when linking (#723994) - add intelx engine with improved performance on new Intel CPUs - add OPENSSL_DISABLE_AES_NI environment variable which disables the AES-NI support (does not affect the intelx engine) [1.0.0-14] - use the AES-NI engine in the FIPS mode [1.0.0-11] - add API necessary for CAVS testing of the new DSA parameter generation [1.0.0-10] - fix OCSP stapling vulnerability - CVE-2011-0014 (#676063) - correct the README.FIPS document [1.0.0-8] - add -x931 parameter to openssl genrsa command to use the ANSI X9.31 key generation method - use FIPS-186-3 method for DSA parameter generation - add OPENSSL_FIPS_NON_APPROVED_MD5_ALLOW environment variable to allow using MD5 when the system is in the maintenance state even if the /proc fips flag is on - make openssl pkcs12 command work by default in the FIPS mode [1.0.0-7] - listen on ipv6 wildcard in s_server so we accept connections from both ipv4 and ipv6 (#601612) - fix openssl speed command so it can be used in the FIPS mode with FIPS allowed ciphers (#619762) [1.0.0-6] - disable code for SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG - CVE-2010-3864 (#649304) [1.0.0-5] - fix race in extension parsing code - CVE-2010-3864 (#649304) [1.0.0-4] - openssl man page fix (#609484) [1.0.0-3] - fix wrong ASN.1 definition of OriginatorInfo - CVE-2010-0742 (#598738) - fix information leak in rsa_verify_recover - CVE-2010-1633 (#598732) [1.0.0-2] - make CA dir readable - the private keys are in private subdir (#584810) - a few fixes from upstream CVS - make X509_NAME_hash_old work in FIPS mode (#568395) [1.0.0-1] - update to final 1.0.0 upstream release [1.0.0-0.22.beta5] - make TLS work in the FIPS mode [1.0.0-0.21.beta5] - gracefully handle zero length in assembler implementations of OPENSSL_cleanse (#564029) - do not fail in s_server if client hostname not resolvable (#561260) [1.0.0-0.20.beta5] - new upstream release [1.0.0-0.19.beta4] - fix CVE-2009-4355 - leak in applications incorrectly calling CRYPTO_free_all_ex_data() before application exit (#546707) - upstream fix for future TLS protocol version handling [1.0.0-0.18.beta4] - add support for Intel AES-NI [1.0.0-0.17.beta4] - upstream fix compression handling on session resumption - various null checks and other small fixes from upstream - upstream changes for the renegotiation info according to the latest draft [1.0.0-0.16.beta4] - fix non-fips mingw build (patch by Kalev Lember) - add IPV6 fix for DTLS [1.0.0-0.15.beta4] - add better error reporting for the unsafe renegotiation [1.0.0-0.14.beta4] - fix build on s390x [1.0.0-0.13.beta4] - disable enforcement of the renegotiation extension on the client (#537962) - add fixes from the current upstream snapshot [1.0.0-0.12.beta4] - keep the beta status in version number at 3 so we do not have to rebuild openssh and possibly other dependencies with too strict version check [1.0.0-0.11.beta4] - update to new upstream version, no soname bump needed - fix CVE-2009-3555 - note that the fix is bypassed if SSL_OP_ALL is used so the compatibility with unfixed clients is not broken. The protocol extension is also not final. [1.0.0-0.10.beta3] - fix use of freed memory if SSL_CTX_free() is called before SSL_free() (#521342) [1.0.0-0.9.beta3] - fix typo in DTLS1 code (#527015) - fix leak in error handling of d2i_SSL_SESSION() [1.0.0-0.8.beta3] - fix RSA and DSA FIPS selftests - reenable fixed x86_64 camellia assembler code (#521127) [1.0.0-0.7.beta3] - temporarily disable x86_64 camellia assembler code (#521127) [1.0.0-0.6.beta3] - fix openssl dgst -dss1 (#520152) [1.0.0-0.5.beta3] - drop the compat symlink hacks [1.0.0-0.4.beta3] - constify SSL_CIPHER_description() [1.0.0-0.3.beta3] - fix WWW:Curl:Easy reference in tsget [1.0.0-0.2.beta3] - enable MD-2 [1.0.0-0.1.beta3] - update to new major upstream release [0.9.8k-7] - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild * Wed Jul 22 2009 Bill Nottingham <notting@redhat.com> - do not build special 'optimized' versions for i686, as that's the base arch in Fedora now [0.9.8k-6] - abort if selftests failed and random number generator is polled - mention EVP_aes and EVP_sha2xx routines in the manpages - add README.FIPS - make CA dir absolute path (#445344) - change default length for RSA key generation to 2048 (#484101) [0.9.8k-5] - fix CVE-2009-1377 CVE-2009-1378 CVE-2009-1379 (DTLS DoS problems) (#501253, #501254, #501572) [0.9.8k-4] - support compatibility DTLS mode for CISCO AnyConnect (#464629) [0.9.8k-3] - correct the SHLIB_VERSION define [0.9.8k-2] - add support for multiple CRLs with same subject - load only dynamic engine support in FIPS mode [0.9.8k-1] - update to new upstream release (minor bug fixes, security fixes and machine code optimizations only) [0.9.8j-10] - move libraries to /usr/lib (#239375) [0.9.8j-9] - add a static subpackage [0.9.8j-8] - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild [0.9.8j-7] - must also verify checksum of libssl.so in the FIPS mode - obtain the seed for FIPS rng directly from the kernel device - drop the temporary symlinks [0.9.8j-6] - drop the temporary triggerpostun and symlinking in post - fix the pkgconfig files and drop the unnecessary buildrequires on pkgconfig as it is a rpmbuild dependency (#481419) [0.9.8j-5] - add temporary triggerpostun to reinstate the symlinks [0.9.8j-4] - no pairwise key tests in non-fips mode (#479817) [0.9.8j-3] - even more robust test for the temporary symlinks [0.9.8j-2] - try to ensure the temporary symlinks exist [0.9.8j-1] - new upstream version with necessary soname bump (#455753) - temporarily provide symlink to old soname to make it possible to rebuild the dependent packages in rawhide - add eap-fast support (#428181) - add possibility to disable zlib by setting - add fips mode support for testing purposes - do not null dereference on some invalid smime files - add buildrequires pkgconfig (#479493) [0.9.8g-11] - do not add tls extensions to server hello for SSLv3 either [0.9.8g-10] - move root CA bundle to ca-certificates package [0.9.8g-9] - fix CVE-2008-0891 - server name extension crash (#448492) - fix CVE-2008-1672 - server key exchange message omit crash (#448495) [0.9.8g-8] - super-H arch support - drop workaround for bug 199604 as it should be fixed in gcc-4.3 [0.9.8g-7] - sparc handling [0.9.8g-6] - update to new root CA bundle from mozilla.org (r1.45) [0.9.8g-5] - Autorebuild for GCC 4.3 [0.9.8g-4] - merge review fixes (#226220) - adjust the SHLIB_VERSION_NUMBER to reflect library name (#429846) [0.9.8g-3] - set default paths when no explicit paths are set (#418771) - do not add tls extensions to client hello for SSLv3 (#422081) [0.9.8g-2] - enable some new crypto algorithms and features - add some more important bug fixes from openssl CVS [0.9.8g-1] - update to latest upstream release, SONAME bumped to 7 [0.9.8b-17] - update to new CA bundle from mozilla.org [0.9.8b-16] - fix CVE-2007-5135 - off-by-one in SSL_get_shared_ciphers (#309801) - fix CVE-2007-4995 - out of order DTLS fragments buffer overflow (#321191) - add alpha sub-archs (#296031) [0.9.8b-15] - rebuild [0.9.8b-14] - use localhost in testsuite, hopefully fixes slow build in koji - CVE-2007-3108 - fix side channel attack on private keys (#250577) - make ssl session cache id matching strict (#233599) [0.9.8b-13] - allow building on ARM architectures (#245417) - use reference timestamps to prevent multilib conflicts (#218064) - -devel package must require pkgconfig (#241031) [0.9.8b-12] - detect duplicates in add_dir properly (#206346) [0.9.8b-11] - the previous change still didn't make X509_NAME_cmp transitive [0.9.8b-10] - make X509_NAME_cmp transitive otherwise certificate lookup is broken (#216050) [0.9.8b-9] - aliasing bug in engine loading, patch by IBM (#213216) [0.9.8b-8] - CVE-2006-2940 fix was incorrect (#208744) [0.9.8b-7] - fix CVE-2006-2937 - mishandled error on ASN.1 parsing (#207276) - fix CVE-2006-2940 - parasitic public keys DoS (#207274) - fix CVE-2006-3738 - buffer overflow in SSL_get_shared_ciphers (#206940) - fix CVE-2006-4343 - sslv2 client DoS (#206940) [0.9.8b-6] - fix CVE-2006-4339 - prevent attack on PKCS#1 v1.5 signatures (#205180) [0.9.8b-5] - set buffering to none on stdio/stdout FILE when bufsize is set (#200580) patch by IBM [0.9.8b-4.1] - rebuild with new binutils (#200330) [0.9.8b-4] - add a temporary workaround for sha512 test failure on s390 (#199604) * Thu Jul 20 2006 Tomas Mraz <tmraz@redhat.com> - add ipv6 support to s_client and s_server (by Jan Pazdziora) (#198737) - add patches for BN threadsafety, AES cache collision attack hazard fix and pkcs7 code memleak fix from upstream CVS [0.9.8b-3.1] - rebuild [0.9.8b-3] - dropped libica and ica engine from build * Wed Jun 21 2006 Joe Orton <jorton@redhat.com> - update to new CA bundle from mozilla.org; adds CA certificates from netlock.hu and startcom.org [0.9.8b-2] - fixed a few rpmlint warnings - better fix for #173399 from upstream - upstream fix for pkcs12 [0.9.8b-1] - upgrade to new version, stays ABI compatible - there is no more linux/config.h (it was empty anyway) [0.9.8a-6] - fix stale open handles in libica (#177155) - fix build if 'rand' or 'passwd' in buildroot path (#178782) - initialize VIA Padlock engine (#186857) [0.9.8a-5.2] - bump again for double-long bug on ppc(64) [0.9.8a-5.1] - rebuilt for new gcc4.1 snapshot and glibc changes [0.9.8a-5] - don't include SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG in SSL_OP_ALL (#175779) * Fri Dec 09 2005 Jesse Keating <jkeating@redhat.com> - rebuilt [0.9.8a-4] - fix build (-lcrypto was erroneusly dropped) of the updated libica - updated ICA engine to 1.3.6-rc3 [0.9.8a-3] - disable builtin compression methods for now until they work properly (#173399) [0.9.8a-2] - don't set -rpath for openssl binary [0.9.8a-1] - new upstream version - patches partially renumbered [0.9.7f-11] - updated IBM ICA engine library and patch to latest upstream version [0.9.7f-10] - fix CAN-2005-2969 - remove SSL_OP_MSIE_SSLV2_RSA_PADDING which disables the countermeasure against man in the middle attack in SSLv2 (#169863) - use sha1 as default for CA and cert requests - CAN-2005-2946 (#169803) [0.9.7f-9] - add *.so.soversion as symlinks in /lib (#165264) - remove unpackaged symlinks (#159595) - fixes from upstream (constant time fixes for DSA, bn assembler div on ppc arch, initialize memory on realloc) [0.9.7f-8] - Updated ICA engine IBM patch to latest upstream version. [0.9.7f-7] - fix CAN-2005-0109 - use constant time/memory access mod_exp so bits of private key aren't leaked by cache eviction (#157631) - a few more fixes from upstream 0.9.7g [0.9.7f-6] - use poll instead of select in rand (#128285) - fix Makefile.certificate to point to /etc/pki/tls - change the default string mask in ASN1 to PrintableString+UTF8String [0.9.7f-5] - update to revision 1.37 of Mozilla CA bundle [0.9.7f-4] - move certificates to _sysconfdir/pki/tls (#143392) - move CA directories to _sysconfdir/pki/CA - patch the CA script and the default config so it points to the CA directories [0.9.7f-3] - uninitialized variable mustn't be used as input in inline assembly - reenable the x86_64 assembly again [0.9.7f-2] - add back RC4_CHAR on ia64 and x86_64 so the ABI isn't broken - disable broken bignum assembly on x86_64 [0.9.7f-1] - reenable optimizations on ppc64 and assembly code on ia64 - upgrade to new upstream version (no soname bump needed) - disable thread test - it was testing the backport of the RSA blinding - no longer needed - added support for changing serial number to Makefile.certificate (#151188) - make ca-bundle.crt a config file (#118903) [0.9.7e-3] - libcrypto shouldn't depend on libkrb5 (#135961) [0.9.7e-2] - rebuild [0.9.7e-1] - new upstream source, updated patches - added patch so we are hopefully ABI compatible with upcoming 0.9.7f * Thu Feb 10 2005 Tomas Mraz <tmraz@redhat.com> - Support UTF-8 charset in the Makefile.certificate (#134944) - Added cmp to BuildPrereq [0.9.7a-46] - generate new ca-bundle.crt from Mozilla certdata.txt (revision 1.32) [0.9.7a-45] - Fixed and updated libica-1.3.4-urandom.patch patch (#122967) [0.9.7a-44] - rebuild [0.9.7a-43] - rebuild [0.9.7a-42] - rebuild [0.9.7a-41] - remove der_chop, as upstream cvs has done (CAN-2004-0975, #140040) [0.9.7a-40] - Include latest libica version with important bugfixes * Tue Jun 15 2004 Elliot Lee <sopwith@redhat.com> - rebuilt [0.9.7a-38] - Updated ICA engine IBM patch to latest upstream version. [0.9.7a-37] - build for linux-alpha-gcc instead of alpha-gcc on alpha (Jeff Garzik) [0.9.7a-36] - handle %{_arch}=i486/i586/i686/athlon cases in the intermediate header (#124303) [0.9.7a-35] - add security fixes for CAN-2004-0079, CAN-2004-0112 * Tue Mar 16 2004 Phil Knirsch <pknirsch@redhat.com> - Fixed libica filespec. [0.9.7a-34] - ppc/ppc64 define __powerpc__/__powerpc64__, not __ppc__/__ppc64__, fix the intermediate header [0.9.7a-33] - add an intermediate <openssl/opensslconf.h> which points to the right arch-specific opensslconf.h on multilib arches * Tue Mar 02 2004 Elliot Lee <sopwith@redhat.com> - rebuilt [0.9.7a-32] - Updated libica to latest upstream version 1.3.5. [0.9.7a-31] - Update ICA crypto engine patch from IBM to latest version. * Fri Feb 13 2004 Elliot Lee <sopwith@redhat.com> - rebuilt [0.9.7a-29] - rebuilt [0.9.7a-28] - Fixed libica build. * Wed Feb 04 2004 Nalin Dahyabhai <nalin@redhat.com> - add '-ldl' to link flags added for Linux-on-ARM (#99313) [0.9.7a-27] - updated ca-bundle.crt: removed expired GeoTrust roots, added freessl.com root, removed trustcenter.de Class 0 root [0.9.7a-26] - Fix link line for libssl (bug #111154). [0.9.7a-25] - add dependency on zlib-devel for the -devel package, which depends on zlib symbols because we enable zlib for libssl (#102962) [0.9.7a-24] - Use /dev/urandom instead of PRNG for libica. - Apply libica-1.3.5 fix for /dev/urandom in icalinux.c - Use latest ICA engine patch from IBM. [0.9.7a-22.1] - rebuild [0.9.7a-22] - rebuild (22 wasn't actually built, fun eh?) [0.9.7a-23] - re-disable optimizations on ppc64 * Tue Sep 30 2003 Joe Orton <jorton@redhat.com> - add a_mbstr.c fix for 64-bit platforms from CVS [0.9.7a-22] - add -Wa,--noexecstack to RPM_OPT_FLAGS so that assembled modules get tagged as not needing executable stacks [0.9.7a-21] - rebuild * Thu Sep 25 2003 Nalin Dahyabhai <nalin@redhat.com> - re-enable optimizations on ppc64 * Thu Sep 25 2003 Nalin Dahyabhai <nalin@redhat.com> - remove exclusivearch [0.9.7a-20] - only parse a client cert if one was requested - temporarily exclusivearch for %{ix86} * Tue Sep 23 2003 Nalin Dahyabhai <nalin@redhat.com> - add security fixes for protocol parsing bugs (CAN-2003-0543, CAN-2003-0544) and heap corruption (CAN-2003-0545) - update RHNS-CA-CERT files - ease back on the number of threads used in the threading test [0.9.7a-19] - rebuild to fix gzipped file md5sums (#91211) [0.9.7a-18] - Updated libica to version 1.3.4. [0.9.7a-17] - rebuild [0.9.7a-10.9] - free the kssl_ctx structure when we free an SSL structure (#99066) [0.9.7a-16] - rebuild [0.9.7a-15] - lower thread test count on s390x [0.9.7a-14] - rebuild [0.9.7a-13] - disable assembly on arches where it seems to conflict with threading [0.9.7a-12] - Updated libica to latest upstream version 1.3.0 [0.9.7a-9.9] - rebuild [0.9.7a-11] - rebuild [0.9.7a-10] - ubsec: don't stomp on output data which might also be input data [0.9.7a-9] - temporarily disable optimizations on ppc64 * Mon Jun 09 2003 Nalin Dahyabhai <nalin@redhat.com> - backport fix for engine-used-for-everything from 0.9.7b - backport fix for prng not being seeded causing problems, also from 0.9.7b - add a check at build-time to ensure that RSA is thread-safe - keep perlpath from stomping on the libica configure scripts * Fri Jun 06 2003 Nalin Dahyabhai <nalin@redhat.com> - thread-safety fix for RSA blinding [0.9.7a-8] - rebuilt [0.9.7a-7] - Added libica-1.2 to openssl (featurerequest). [0.9.7a-6] - fix building with incorrect flags on ppc64 [0.9.7a-5] - add patch to harden against Klima-Pokorny-Rosa extension of Bleichenbacher's attack (CAN-2003-0131) [ 0.9.7a-4] - add patch to enable RSA blinding by default, closing a timing attack (CAN-2003-0147) [0.9.7a-3] - disable use of BN assembly module on x86_64, but continue to allow inline assembly (#83403) [0.9.7a-2] - disable EC algorithms [0.9.7a-1] - update to 0.9.7a [0.9.7-8] - add fix to guard against attempts to allocate negative amounts of memory - add patch for CAN-2003-0078, fixing a timing attack [0.9.7-7] - Add openssl-ppc64.patch [0.9.7-6] - EVP_DecryptInit should call EVP_CipherInit() instead of EVP_CipherInit_ex(), to get the right behavior when passed uninitialized context structures (#83766) - build with -mcpu=ev5 on alpha family (#83828) * Wed Jan 22 2003 Tim Powers <timp@redhat.com> - rebuilt [0.9.7-4] - Added IBM hw crypto support patch. * Wed Jan 15 2003 Nalin Dahyabhai <nalin@redhat.com> - add missing builddep on sed [0.9.7-3] - debloat - fix broken manpage symlinks [0.9.7-2] - fix double-free in 'openssl ca' [0.9.7-1] - update to 0.9.7 final [0.9.7-0] - update to 0.9.7 beta6 (DO NOT USE UNTIL UPDATED TO FINAL 0.9.7) * Wed Dec 11 2002 Nalin Dahyabhai <nalin@redhat.com> - update to 0.9.7 beta5 (DO NOT USE UNTIL UPDATED TO FINAL 0.9.7) [0.9.6b-30] - add configuration stanza for x86_64 and use it on x86_64 - build for linux-ppc on ppc - start running the self-tests again [0.9.6b-29hammer.3] - Merge fixes from previous hammer packages, including general x86-64 and multilib [0.9.6b-29] - rebuild [0.9.6b-28] - update asn patch to fix accidental reversal of a logic check [0.9.6b-27] - update asn patch to reduce chance that compiler optimization will remove one of the added tests [0.9.6b-26] - rebuild [0.9.6b-25] - add patch to fix ASN.1 vulnerabilities [0.9.6b-24] - add backport of Ben Laurie's patches for OpenSSL 0.9.6d [0.9.6b-23] - own {_datadir}/ssl/misc * Fri Jun 21 2002 Tim Powers <timp@redhat.com> - automated rebuild * Sun May 26 2002 Tim Powers <timp@redhat.com> - automated rebuild [0.9.6b-20] - free ride through the build system (whee!) [0.9.6b-19] - rebuild in new environment [0.9.6b-17, 0.9.6b-18] - merge RHL-specific bits into stronghold package, rename [stronghold-0.9.6c-2] - add support for Chrysalis Luna token * Tue Mar 26 2002 Gary Benson <gbenson@redhat.com> - disable AEP random number generation, other AEP fixes [0.9.6b-15] - only build subpackages on primary arches [0.9.6b-13] - on ia32, only disable use of assembler on i386 - enable assembly on ia64 [0.9.6b-11] - fix sparcv9 entry [stronghold-0.9.6c-1] - upgrade to 0.9.6c - bump BuildArch to i686 and enable assembler on all platforms - synchronise with shrimpy and rawhide - bump soversion to 3 * Wed Oct 10 2001 Florian La Roche <Florian.LaRoche@redhat.de> - delete BN_LLONG for s390x, patch from Oliver Paukstadt [0.9.6b-9] - update AEP driver patch * Mon Sep 10 2001 Nalin Dahyabhai <nalin@redhat.com> - adjust RNG disabling patch to match version of patch from Broadcom [0.9.6b-8] - disable the RNG in the ubsec engine driver [0.9.6b-7] - tweaks to the ubsec engine driver [0.9.6b-6] - tweaks to the ubsec engine driver [0.9.6b-5] - update ubsec engine driver from Broadcom [0.9.6b-4] - move man pages back to %{_mandir}/man?/foo.?ssl from %{_mandir}/man?ssl/foo.? - add an [ engine ] section to the default configuration file * Thu Aug 09 2001 Nalin Dahyabhai <nalin@redhat.com> - add a patch for selecting a default engine in SSL_library_init() [0.9.6b-3] - add patches for AEP hardware support - add patch to keep trying when we fail to load a cert from a file and there are more in the file - add missing prototype for ENGINE_ubsec() in engine_int.h [0.9.6b-2] - actually add hw_ubsec to the engine list * Tue Jul 17 2001 Nalin Dahyabhai <nalin@redhat.com> - add in the hw_ubsec driver from CVS [0.9.6b-1] - update to 0.9.6b * Thu Jul 05 2001 Nalin Dahyabhai <nalin@redhat.com> - move .so symlinks back to %{_libdir} * Tue Jul 03 2001 Nalin Dahyabhai <nalin@redhat.com> - move shared libraries to /lib (#38410) * Mon Jun 25 2001 Nalin Dahyabhai <nalin@redhat.com> - switch to engine code base * Mon Jun 18 2001 Nalin Dahyabhai <nalin@redhat.com> - add a script for creating dummy certificates - move man pages from %{_mandir}/man?/foo.?ssl to %{_mandir}/man?ssl/foo.? * Thu Jun 07 2001 Florian La Roche <Florian.LaRoche@redhat.de> - add s390x support * Fri Jun 01 2001 Nalin Dahyabhai <nalin@redhat.com> - change two memcpy() calls to memmove() - don't define L_ENDIAN on alpha [stronghold-0.9.6a-1] - Add 'stronghold-' prefix to package names. - Obsolete standard openssl packages. * Wed May 16 2001 Joe Orton <jorton@redhat.com> - Add BuildArch: i586 as per Nalin's advice. * Tue May 15 2001 Joe Orton <jorton@redhat.com> - Enable assembler on ix86 (using new .tar.bz2 which does include the asm directories). * Tue May 15 2001 Nalin Dahyabhai <nalin@redhat.com> - make subpackages depend on the main package * Tue May 01 2001 Nalin Dahyabhai <nalin@redhat.com> - adjust the hobble script to not disturb symlinks in include/ (fix from Joe Orton) * Fri Apr 27 2001 Nalin Dahyabhai <nalin@redhat.com> - drop the m2crypo patch we weren't using * Tue Apr 24 2001 Nalin Dahyabhai <nalin@redhat.com> - configure using 'shared' as well * Sun Apr 08 2001 Nalin Dahyabhai <nalin@redhat.com> - update to 0.9.6a - use the build-shared target to build shared libraries - bump the soversion to 2 because we're no longer compatible with our 0.9.5a packages or our 0.9.6 packages - drop the patch for making rsatest a no-op when rsa null support is used - put all man pages into <section>ssl instead of <section> - break the m2crypto modules into a separate package * Tue Mar 13 2001 Nalin Dahyabhai <nalin@redhat.com> - use BN_LLONG on s390 * Mon Mar 12 2001 Nalin Dahyabhai <nalin@redhat.com> - fix the s390 changes for 0.9.6 (isn't supposed to be marked as 64-bit) * Sat Mar 03 2001 Nalin Dahyabhai <nalin@redhat.com> - move c_rehash to the perl subpackage, because it's a perl script now * Fri Mar 02 2001 Nalin Dahyabhai <nalin@redhat.com> - update to 0.9.6 - enable MD2 - use the libcrypto.so and libssl.so targets to build shared libs with - bump the soversion to 1 because we're no longer compatible with any of the various 0.9.5a packages circulating around, which provide lib*.so.0 * Wed Feb 28 2001 Florian La Roche <Florian.LaRoche@redhat.de> - change hobble-openssl for disabling MD2 again * Tue Feb 27 2001 Nalin Dahyabhai <nalin@redhat.com> - re-disable MD2 -- the EVP_MD_CTX structure would grow from 100 to 152 bytes or so, causing EVP_DigestInit() to zero out stack variables in apps built against a version of the library without it * Mon Feb 26 2001 Nalin Dahyabhai <nalin@redhat.com> - disable some inline assembly, which on x86 is Pentium-specific - re-enable MD2 (see http://www.ietf.org/ietf/IPR/RSA-MD-all) * Thu Feb 08 2001 Florian La Roche <Florian.LaRoche@redhat.de> - fix s390 patch * Fri Dec 08 2000 Than Ngo <than@redhat.com> - added support s390 * Mon Nov 20 2000 Nalin Dahyabhai <nalin@redhat.com> - remove -Wa,* and -m* compiler flags from the default Configure file (#20656) - add the CA.pl man page to the perl subpackage * Thu Nov 02 2000 Nalin Dahyabhai <nalin@redhat.com> - always build with -mcpu=ev5 on alpha * Tue Oct 31 2000 Nalin Dahyabhai <nalin@redhat.com> - add a symlink from cert.pem to ca-bundle.crt * Wed Oct 25 2000 Nalin Dahyabhai <nalin@redhat.com> - add a ca-bundle file for packages like Samba to reference for CA certificates * Tue Oct 24 2000 Nalin Dahyabhai <nalin@redhat.com> - remove libcrypto's crypt(), which doesn't handle md5crypt (#19295) * Mon Oct 02 2000 Nalin Dahyabhai <nalin@redhat.com> - add unzip as a buildprereq (#17662) - update m2crypto to 0.05-snap4 * Tue Sep 26 2000 Bill Nottingham <notting@redhat.com> - fix some issues in building when it's not installed * Wed Sep 06 2000 Nalin Dahyabhai <nalin@redhat.com> - make sure the headers we include are the ones we built with (aaaaarrgh!) * Fri Sep 01 2000 Nalin Dahyabhai <nalin@redhat.com> - add Richard Henderson's patch for BN on ia64 - clean up the changelog * Tue Aug 29 2000 Nalin Dahyabhai <nalin@redhat.com> - fix the building of python modules without openssl-devel already installed * Wed Aug 23 2000 Nalin Dahyabhai <nalin@redhat.com> - byte-compile python extensions without the build-root - adjust the makefile to not remove temporary files (like .key files when building .csr files) by marking them as .PRECIOUS * Sat Aug 19 2000 Nalin Dahyabhai <nalin@redhat.com> - break out python extensions into a subpackage * Mon Jul 17 2000 Nalin Dahyabhai <nalin@redhat.com> - tweak the makefile some more * Tue Jul 11 2000 Nalin Dahyabhai <nalin@redhat.com> - disable MD2 support * Thu Jul 06 2000 Nalin Dahyabhai <nalin@redhat.com> - disable MDC2 support * Sun Jul 02 2000 Nalin Dahyabhai <nalin@redhat.com> - tweak the disabling of RC5, IDEA support - tweak the makefile * Thu Jun 29 2000 Nalin Dahyabhai <nalin@redhat.com> - strip binaries and libraries - rework certificate makefile to have the right parts for Apache * Wed Jun 28 2000 Nalin Dahyabhai <nalin@redhat.com> - use %{_perl} instead of /usr/bin/perl - disable alpha until it passes its own test suite * Fri Jun 09 2000 Nalin Dahyabhai <nalin@redhat.com> - move the passwd.1 man page out of the passwd package's way * Fri Jun 02 2000 Nalin Dahyabhai <nalin@redhat.com> - update to 0.9.5a, modified for U.S. - add perl as a build-time requirement - move certificate makefile to another package - disable RC5, IDEA, RSA support - remove optimizations for now * Wed Mar 01 2000 Florian La Roche <Florian.LaRoche@redhat.de> - Bero told me to move the Makefile into this package * Wed Mar 01 2000 Florian La Roche <Florian.LaRoche@redhat.de> - add lib*.so symlinks to link dynamically against shared libs * Tue Feb 29 2000 Florian La Roche <Florian.LaRoche@redhat.de> - update to 0.9.5 - run ldconfig directly in post/postun - add FAQ * Sat Dec 18 1999 Bernhard Rosenkrdnzer <bero@redhat.de> - Fix build on non-x86 platforms * Fri Nov 12 1999 Bernhard Rosenkrdnzer <bero@redhat.de> - move /usr/share/ssl/* from -devel to main package * Tue Oct 26 1999 Bernhard Rosenkrdnzer <bero@redhat.de> - inital packaging - changes from base: - Move /usr/local/ssl to /usr/share/ssl for FHS compliance - handle RPM_OPT_FLAGS IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-0286 Oracle Linux 8 [22.1-6.0.4.el8_7.2] - Fix log file permissions [Orabug: 35302985] [22.1-6.0.3.el8_7.2] - Fix CVE-2023-1786 [Orabug: 35302985] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-1786 Oracle Linux 9 [22.1-7.0.3.el9_1] - Fix log file permission [Orabug: 35302969] [22.1-7.0.2.el9_1] - Fix CVE-2023-1786 [Orabug: 35302969] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-1786 Oracle Linux 6 Oracle Linux 7 [4.1.12-124.74.2] - kvm: initialize all of the kvm_debugregs structure before sending it to userspace (Greg Kroah-Hartman) [Orabug: 35250098] {CVE-2023-1513} - staging: rtl8712: fix use after free bugs (Dan Carpenter) [Orabug: 35212876] {CVE-2022-4095} - staging: rtl8712: rtl8712_cmd.c: fixed comparison to null (Juliana Rodrigues) [Orabug: 35212876] {CVE-2022-4095} - wifi: rndis_wlan: Prevent buffer overflow in rndis_query_oid (Szymon Heidrich) [Orabug: 35037715] {CVE-2023-23559} [4.1.12-124.74.1] - seq_buf: Fix overflow in seq_buf_putmem_hex() (Yun Zhou) [Orabug: 35217595] {CVE-2023-28772} - net: mpls: fix stale pointer if allocation fails during device rename (Jakub Kicinski) [Orabug: 35181964] {CVE-2023-26545} IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-26545 CVE-2023-28772 CVE-2022-4095 CVE-2023-23559 CVE-2023-1513 Oracle Linux 6 [1.0.1e-59.0.4] - Backport fixes for CVE-2023-0286 [Orabug: 35212597] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-0286 Oracle Linux 9 [6.1.1-6.el9] - Update changelog (Karl Heubaum) [Orabug: 35343538] - ebpf: fix compatibility with libbpf 1.0+ (Shreesh Adiga) [Orabug: 35268538] - ebpf: replace deprecated bpf_program__set_socket_filter (Haochen Tong) [Orabug: 35268538] - CVE-2023-1544 is not applicable to Oracle QEMU 6.1.1 (Karl Heubaum) [Orabug: 35305727] {CVE-2023-1544} - virtio-gpu: do not byteswap padding (Paolo Bonzini) [Orabug: 35304723] - KVM: x86: workaround invalid CPUID[0xD,9] info on some AMD processors (Paolo Bonzini) [Orabug: 35241527] - qemu-kvm.spec: fix Linux io_uring support (Mark Kanda) [Orabug: 35265200] - hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219290] [6.1.1-5.el9] - hw/pvrdma: Protect against buggy or malicious guest driver (Yuval Shaia) [Orabug: 35064352] {CVE-2022-1050} - hw/display/qxl: Assert memory slot fits in preallocated MemoryRegion (Philippe Mathieu-Daude) [Orabug: 35060182] - hw/display/qxl: Avoid buffer overrun in qxl_phys2virt (CVE-2022-4144) (Philippe Mathieu-Daude) [Orabug: 35060182] {CVE-2022-4144} - hw/display/qxl: Pass requested buffer size to qxl_phys2virt() (Philippe Mathieu-Daude) [Orabug: 35060182] - hw/display/qxl: Document qxl_phys2virt() (Philippe Mathieu-Daude) [Orabug: 35060182] - hw/display/qxl: Have qxl_log_command Return early if no log_cmd handler (Philippe Mathieu-Daude) [Orabug: 35060182] - ui/vnc-clipboard: fix integer underflow in vnc_client_cut_text_ext (Mauro Matteo Cascella) [Orabug: 35060115] {CVE-2022-3165} - hw/arm/virt: build SMBIOS 19 table (Mihai Carabas) - vl: Add an -action option to override MCE handling (Mark Kanda) [Orabug: 34779160] - hw/acpi/erst.c: Fix memory handling issues (Christian A. Ehrhardt) [Orabug: 34779541] {CVE-2022-4172} - target/i386: kvm: do not access uninitialized variable on older kernels (Paolo Bonzini) [Orabug: 34492975] - x86: Support XFD and AMX xsave data migration (Zeng Guang) [Orabug: 34492975] - x86: add support for KVM_CAP_XSAVE2 and AMX state migration (Jing Liu) [Orabug: 34492975] - x86: Add AMX CPUIDs enumeration (Jing Liu) [Orabug: 34492975] - x86: Add XFD faulting bit for state components (Jing Liu) [Orabug: 34492975] - x86: Grant AMX permission for guest (Yang Zhong) [Orabug: 34492975] - x86: Add AMX XTILECFG and XTILEDATA components (Jing Liu) [Orabug: 34492975] - x86: Fix the 64-byte boundary enumeration for extended state (Jing Liu) [Orabug: 34492975] - linux-headers: include missing changes from 5.17 (Paolo Bonzini) [Orabug: 34492975] - linux-headers: Update headers to v5.17-rc1 (Vivek Goyal) [Orabug: 34492975] - linux-headers: update to 5.16-rc1 (Paolo Bonzini) [Orabug: 34492975] - i386/pc: restrict AMD only enforcing of 1Tb hole to new machine type (Joao Martins) - i386/pc: relocate 4g start to 1T where applicable (Joao Martins) - i386/pc: bounds check phys-bits against max used GPA (Joao Martins) - i386/pc: factor out device_memory base/size to helper (Joao Martins) - i386/pc: factor out above-4g end to an helper (Joao Martins) - i386/pc: pass pci_hole64_size to pc_memory_init() (Joao Martins) - i386/pc: create pci-host qdev prior to pc_memory_init() (Joao Martins) - hw/i386: add 4g boundary start to X86MachineState (Joao Martins) - vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)->async_tx.elem in virtio_net_reset (Si-Wei Liu) - net/vhost-vdpa.c: Fix clang compilation failure (Peter Maydell) - vhost-vdpa: allow passing opened vhostfd to vhost-vdpa (Si-Wei Liu) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-1544 Oracle Linux 7 [2.10.1-1.0.1] - Fix for CVE-2021-40348 [Orabug: 33531467] [2.10.1-1] - copy cert file instead of linking [2.8.4-1] - remove install/clean section initial cleanup - removed Group from specfile - removed BuildRoot from specfiles [2.8.3-1] - 1524221 - ship systemd target on RHEL 7 too [2.8.2-1] - don't use systemctl pager for output as we have '| less' [2.8.1-1] - purged changelog entries for Spacewalk 2.0 and older - Bumping package versions for 2.8. * Mon Jul 17 2017 Jan Dobes 2.7.1-1 - Updated links to github in spec files - Migrating Fedorahosted to GitHub - Bumping package versions for 2.7. * Wed Oct 12 2016 Grant Gainey 2.6.1-1 - Update specfile to be consistent about referring to both SW and Satellite - Bumping package versions for 2.6. * Fri May 20 2016 Grant Gainey 2.5.3-1 - remove monitoring from SUSE spacewalk target * Tue May 10 2016 Grant Gainey 2.5.2-1 - spacewalk-admin: build on openSUSE * Tue Nov 24 2015 Jan Dobes 2.5.1-1 - spacewalk-admin.spec: incorrect cd removed - spacewalk-admin: drop validate-sat-cert.pl - Bumping package versions for 2.5. * Thu Sep 24 2015 Jan Dobes 2.4.2-1 - Bumping copyright year. * Wed Aug 05 2015 Jan Dobes 2.4.1-1 - trust spacewalk CA certificate - Bumping package versions for 2.4. * Thu Mar 19 2015 Grant Gainey 2.3.4-1 - drop requires for perl-URI - seems to be unused - Updating copyright info for 2015 [2.3.3-1] - remove Monitoring and MonitoringScout from spacewalk.target and spacewalk- service [2.3.2-1] - Getting rid of trailing spaces in Perl - Getting rid of Tabs and trailing spaces in LICENSE, COPYING, and README files * Wed Jan 07 2015 Jan Dobes 2.3.1-1 - 1179374 - do not crash if rhn.conf does not exist - Bumping package versions for 2.3. [2.2.7-1] - we need to call restorecon with full path [2.2.6-1] - fix copyright years [2.2.5-1] - restorecon may have different path [2.2.4-1] - Set correct SELinux context on the target file [2.2.3-1] - Do not look at processes in containers. [2.2.2-1] - 1064287 - Use systemctl to get the pid since /var/run/tomcat.pid is empty. [2.2.1-1] - Add support to ConfigureSatelliteCommand to remove keys [2.1.2-1] - cleaning up old svn Ids * Thu Aug 08 2013 Jan Dobes 2.1.1-1 - fixing decrementation - 972626 - general waiting function - Bumping package versions for 2.1. IMPORTANT Copyright 2023 Oracle, Inc. CVE-2021-40348 Oracle Linux 8 Oracle Linux 9 [5.15.0-101.103.2.1] - Revert 'attr: use consistent sgid stripping checks' (Sherry Yang) [Orabug: 35346968] - Revert 'iommu: Force iommu shutdown on panic' (Boris Ostrovsky) [Orabug: 35346963] [5.15.0-101.103.2] - uek-rpm: mod-extra: Remove mt7921e.ko from extras list (Harshit Mogalapalli) [Orabug: 34999685] - crypto: allow ECDH and ECDSA algorithms in FIPS (Saeed Mirzamohammadi) [Orabug: 35230211] - uek-rpm: make CRYPTO_ECDSA builtin (Saeed Mirzamohammadi) [Orabug: 35230211] - KVM: arm64: PMU: Align chained counter implementation with architecture pseudocode (Marc Zyngier) [Orabug: 35243389] - net/mlx5: Fix memory leak in error flow of port set buffer (Maher Sanalla) [Orabug: 35246355] - net/mlx5e: Update shared buffer along with device buffer changes (Maher Sanalla) [Orabug: 35246355] - net/mlx5e: Add API to query/modify SBPR and SBCM registers (Maher Sanalla) [Orabug: 35246355] - net/mlx5: Expose shared buffer registers bits and structs (Maher Sanalla) [Orabug: 35246355] - PCI: Work around Intel I210 ROM BAR overlap defect (Bjorn Helgaas) [Orabug: 35250975] - net/rds: Adding TCP stats for TCP keepalive timeout (Nagappan Ramasamy Palaniappan) [Orabug: 35254377] - rds: slight code cleanup of RDS checksum code (William Kucharski) [Orabug: 35262486] - x86/acpi/boot: Correct acpi_is_processor_usable() check (Eric DeVolder) [Orabug: 35274587] - x86/ACPI/boot: Use FADT version to check support for online capable (Mario Limonciello) [Orabug: 35274587] - x86/acpi/boot: Do not register processors that cannot be onlined for x2APIC (Kishon Vijay Abraham I) [Orabug: 35274587] - x86/ACPI: Don't add CPUs that are not online capable (Mario Limonciello) [Orabug: 35274587] - ACPICA: Add support for MADT online enabled bit (Mario Limonciello) [Orabug: 35274587] - net/rds: use appropriate reason while dropping a connection (Praveen Kumar Kannoju) [Orabug: 35278121] - KVM: nVMX: add missing consistency checks for CR0 and CR4 (Paolo Bonzini) [Orabug: 35278210] {CVE-2023-30456} - Revert 'scsi: megaraid_sas: Skip syncing the RAID map on older controllers' (Sherry Yang) [Orabug: 35285941] [5.15.0-101.103.1] - Revert 'Revert 'x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments'' (Tom Saeger) - Revert 'Revert 'Makefile: link with -z noexecstack --no-warn-rwx-segments'' (Tom Saeger) - LTS version: v5.15.103 (Jack Vogel) - Makefile: use -gdwarf-{4|5} for assembler for DEBUG_INFO_DWARF{4|5} (Nick Desaulniers) - KVM: VMX: Fix crash due to uninitialized current_vmcs (Alexandru Matei) - KVM: VMX: Introduce vmx_msr_bitmap_l01_changed() helper (Vitaly Kuznetsov) - KVM: nVMX: Don't use Enlightened MSR Bitmap for L3 (Vitaly Kuznetsov) - fs: hold writers when changing mount's idmapping (Christian Brauner) - UML: define RUNTIME_DISCARD_EXIT (Masahiro Yamada) - xfs: remove xfs_setattr_time() declaration (Gaosheng Cui) - KVM: fix memoryleak in kvm_init() (Miaohe Lin) - tools bpftool: Fix compilation error with new binutils (Andres Freund) - tools bpf_jit_disasm: Fix compilation error with new binutils (Andres Freund) - tools perf: Fix compilation error with new binutils (Andres Freund) - tools include: add dis-asm-compat.h to handle version differences (Andres Freund) - tools build: Add feature test for init_disassemble_info API changes (Andres Freund) - sh: define RUNTIME_DISCARD_EXIT (Tom Saeger) - s390: define RUNTIME_DISCARD_EXIT to fix link error with GNU ld < 2.36 (Masahiro Yamada) - powerpc/vmlinux.lds: Don't discard .rela* for relocatable builds (Michael Ellerman) - powerpc/vmlinux.lds: Define RUNTIME_DISCARD_EXIT (Michael Ellerman) - arch: fix broken BuildID for arm64 and riscv (Masahiro Yamada) - ext4: block range must be validated before use in ext4_mb_clear_bb() (Lukas Czerner) - ext4: add strict range checks while freeing blocks (Ritesh Harjani) - ext4: add ext4_sb_block_valid() refactored out of ext4_inode_block_valid() (Ritesh Harjani) - ext4: refactor ext4_free_blocks() to pull out ext4_mb_clear_bb() (Ritesh Harjani) - filelocks: use mount idmapping for setlease permission check (Seth Forshee) - media: rc: gpio-ir-recv: add remove function (Li Jun) - media: ov5640: Fix analogue gain control (Paul Elder) - scripts: handle BrokenPipeError for python scripts (Masahiro Yamada) - PCI: Add SolidRun vendor ID (Alvaro Karsz) - macintosh: windfarm: Use unsigned type for 1-bit bitfields (Nathan Chancellor) - alpha: fix R_ALPHA_LITERAL reloc for large modules (Edward Humes) - powerpc/kcsan: Exclude udelay to prevent recursive instrumentation (Rohan McLure) - powerpc/iommu: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman) - MIPS: Fix a compilation issue (xurui) - fs: use consistent setgid checks in is_sxid() (Christian Brauner) - attr: use consistent sgid stripping checks (Christian Brauner) - attr: add setattr_should_drop_sgid() (Christian Brauner) - fs: move should_remove_suid() (Christian Brauner) - attr: add in_group_or_capable() (Christian Brauner) - fs: move S_ISGID stripping into the vfs_*() helpers (Yang Xu) - fs: add mode_strip_sgid() helper (Yang Xu) - xfs: set prealloc flag in xfs_alloc_file_space() (Dave Chinner) - xfs: fallocate() should call file_modified() (Dave Chinner) - xfs: remove XFS_PREALLOC_SYNC (Dave Chinner) - xfs: use setattr_copy to set vfs inode attributes (Darrick J. Wong) - tpm/eventlog: Don't abort tpm_read_log on faulty ACPI address (Morten Linderud) - watch_queue: fix IOC_WATCH_QUEUE_SET_SIZE alloc error paths (David Disseldorp) - staging: rtl8723bs: Fix key-store index handling (Hans de Goede) - staging: rtl8723bs: fix placement of braces (Hannes Braun) - Staging: rtl8723bs: Placing opening { braces in previous line (Jagath Jog J) - staging: rtl8723bs: clean up comparsions to NULL (Michael Straube) - iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter (Gavrilov Ilia) - iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and ivrs_acpihid options (Kim Phillips) - iommu/amd: Add PCI segment support for ivrs_[ioapic/hpet/acpihid] commands (Suravee Suthikulpanit) - nbd: use the correct block_device in nbd_bdev_reset (Christoph Hellwig) - irqdomain: Fix mapping-creation race (Johan Hovold) - ext4: Fix deadlock during directory rename (Jan Kara) - RISC-V: Don't check text_mutex during stop_machine (Conor Dooley) - s390/ftrace: remove dead code (Heiko Carstens) - riscv: Use READ_ONCE_NOCHECK in imprecise unwinding stack mode (Alexandre Ghiti) - af_unix: fix struct pid leaks in OOB support (Eric Dumazet) - af_unix: Remove unnecessary brackets around CONFIG_AF_UNIX_OOB. (Kuniyuki Iwashima) - net: dsa: mt7530: permit port 5 to work without port 6 on MT7621 SoC (Vladimir Oltean) - SUNRPC: Fix a server shutdown leak (Benjamin Coddington) - octeontx2-af: Unlock contexts in the queue context cache in case of fault detection (Suman Ghosh) - net/smc: fix fallback failed while sendmsg with fastopen (D. Wythe) - platform: x86: MLX_PLATFORM: select REGMAP instead of depending on it (Randy Dunlap) - netfilter: conntrack: adopt safer max chain length (Eric Dumazet) - scsi: megaraid_sas: Update max supported LD IDs to 240 (Chandrakanth Patil) - net: ethernet: mtk_eth_soc: fix RX data corruption issue (Daniel Golle) - net: phy: smsc: fix link up detection in forced irq mode (Heiner Kallweit) - net: phy: smsc: Cache interrupt mask (Lukas Wunner) - btf: fix resolving BTF_KIND_VAR after ARRAY, STRUCT, UNION, PTR (Lorenz Bauer) - netfilter: tproxy: fix deadlock due to missing BH disable (Florian Westphal) - netfilter: ctnetlink: revert to dumping mark regardless of event type (Ivan Delalande) - bnxt_en: Avoid order-5 memory allocation for TPA data (Michael Chan) - net: phylib: get rid of unnecessary locking (Russell King (Oracle)) - net: stmmac: add to set device wake up flag when stmmac init phy (Rongguang Wei) - drm/msm/dpu: fix len of sc7180 ctl blocks (Dmitry Baryshkov) - bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser() (Liu Jian) - ice: copy last block omitted in ice_get_module_eeprom() (Petr Oros) - net: caif: Fix use-after-free in cfusbl_device_notify() (Shigeru Yoshida) - net: lan78xx: fix accessing the LAN7800's internal phy specific registers from the MAC driver (Yuiko Oshino) - perf stat: Fix counting when initial delay configured (Changbin Du) - selftests: nft_nat: ensuring the listening side is up before starting the client (Hangbin Liu) - ila: do not generate empty messages in ila_xlat_nl_cmd_get_mapping() (Eric Dumazet) - powerpc: dts: t1040rdb: fix compatible string for Rev A boards (Vladimir Oltean) - nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties (Kang Chen) - bgmac: fix *initial* chip reset to support BCM5358 (Rafal Milecki) - drm/msm/a5xx: fix context faults during ring switch (Dmitry Baryshkov) - drm/msm/a5xx: fix the emptyness check in the preempt code (Dmitry Baryshkov) - drm/msm/a5xx: fix highest bank bit for a530 (Dmitry Baryshkov) - drm/msm/a5xx: fix setting of the CP_PREEMPT_ENABLE_LOCAL register (Dmitry Baryshkov) - drm/msm: Fix potential invalid ptr free (Rob Clark) - drm/nouveau/kms/nv50: fix nv50_wndw_new_ prototype (Jiri Slaby (SUSE)) - drm/nouveau/kms/nv50-: remove unused functions (Ben Skeggs) - ext4: Fix possible corruption when moving a directory (Jan Kara) - regulator: core: Use ktime_get_boottime() to determine how long a regulator was off (Matthias Kaehlcke) - regulator: core: Fix off-on-delay-us for always-on/boot-on regulators (Christian Kohlschutter) - regulator: Flag uncontrollable regulators as always_on (Mark Brown) - scsi: core: Remove the /proc/scsi/ directory earlier (Bart Van Assche) - riscv: Add header include guards to insn.h (Liao Chang) - riscv: Avoid enabling interrupts in die() (Mattias Nissler) - RISC-V: Avoid dereferening NULL regs in die() (Palmer Dabbelt) - arm64: efi: Make efi_rt_lock a raw_spinlock (Pierre Gondois) - brd: mark as nowait compatible (Jens Axboe) - block/brd: add error handling support for add_disk() (Luis Chamberlain) - iommu/vt-d: Fix PASID directory pointer coherency (Jacob Pan) - irqdomain: Refactor __irq_domain_alloc_irqs() (Johan Hovold) - f2fs: retry to update the inode page given data corruption (Jaegeuk Kim) - f2fs: do not bother checkpoint by f2fs_get_node_info (Jaegeuk Kim) - f2fs: avoid down_write on nat_tree_lock during checkpoint (Jaegeuk Kim) - udf: Fix off-by-one error when discarding preallocation (Jan Kara) - fs: dlm: start midcomms before scand (Alexander Aring) - fs: dlm: add midcomms init/start functions (Alexander Aring) - fs: dlm: fix log of lowcomms vs midcomms (Alexander Aring) - KVM: SVM: Process ICR on AVIC IPI delivery failure due to invalid target (Sean Christopherson) - KVM: SVM: Don't rewrite guest ICR on AVIC IPI virtualization failure (Sean Christopherson) - KVM: Register /dev/kvm as the _very_ last thing during initialization (Sean Christopherson) - KVM: Pre-allocate cpumasks for kvm_make_all_cpus_request_except() (Vitaly Kuznetsov) - KVM: Optimize kvm_make_vcpus_request_mask() a bit (Vitaly Kuznetsov) - nfc: change order inside nfc_se_io error path (Fedor Pchelkin) - ext4: zero i_disksize when initializing the bootloader inode (Zhihao Cheng) - ext4: fix WARNING in ext4_update_inline_data (Ye Bin) - ext4: move where set the MAY_INLINE_DATA flag is set (Ye Bin) - ext4: fix another off-by-one fsmap error on 1k block filesystems (Darrick J. Wong) - ext4: fix RENAME_WHITEOUT handling for inline directories (Eric Whitney) - ext4: fix cgroup writeback accounting with fs-layer encryption (Eric Biggers) - staging: rtl8723bs: Pass correct parameters to cfg80211_get_bss() (Hans de Goede) - drm/connector: print max_requested_bpc in state debugfs (Harry Wentland) - drm/amdgpu: fix error checking in amdgpu_read_mm_registers for soc15 (Alex Deucher) - x86/CPU/AMD: Disable XSAVES on AMD family 0x17 (Andrew Cooper) - fork: allow CLONE_NEWTIME in clone3 flags (Tobias Klauser) - perf inject: Fix --buildid-all not to eat up MMAP2 (Namhyung Kim) - btrfs: fix percent calculation for bg reclaim message (Johannes Thumshirn) - LTS version: v5.15.102 (Jack Vogel) - staging: rtl8192e: Remove call_usermodehelper starting RadioPower.sh (Philipp Hortmann) - staging: rtl8192e: Remove function ..dm_check_ac_dc_power calling a script (Philipp Hortmann) - wifi: cfg80211: Partial revert 'wifi: cfg80211: Fix use after free for wext' (Hector Martin) - LTS version: v5.15.101 (Jack Vogel) - Revert 'drm/i915: Don't use BAR mappings for ring buffers with LLC' (Greg Kroah-Hartman) - LTS version: v5.15.100 (Jack Vogel) - usb: gadget: uvc: fix missing mutex_unlock() if kstrtou8() fails (Yang Yingliang) - malidp: Fix NULL vs IS_ERR() checking (Miaoqian Lin) - scsi: mpt3sas: Remove usage of dma_get_required_mask() API (Sreekanth Reddy) - scsi: mpt3sas: re-do lost mpt3sas DMA mask fix (Sreekanth Reddy) - scsi: mpt3sas: Don't change DMA mask while reallocating pools (Sreekanth Reddy) - Revert 'scsi: mpt3sas: Fix return value check of dma_get_required_mask()' (Salvatore Bonaccorso) - drm/virtio: Fix error code in virtio_gpu_object_shmem_init() (Harshit Mogalapalli) - media: uvcvideo: Fix race condition with usb_kill_urb (Ricardo Ribalda) - Bluetooth: hci_sock: purge socket queues in the destruct() callback (Nguyen Dinh Phi) - drm/display/dp_mst: Fix down message handling after a packet reception error (Imre Deak) - drm/display/dp_mst: Fix down/up message handling after sink disconnect (Imre Deak) - x86/resctl: fix scheduler confusion with 'current' (Linus Torvalds) - net: tls: avoid hanging tasks on the tx_lock (Jakub Kicinski) - soundwire: cadence: Drain the RX FIFO after an IO timeout (Richard Fitzgerald) - soundwire: cadence: Remove wasted space in response_buf (Richard Fitzgerald) - phy: rockchip-typec: Fix unsigned comparison with less than zero (Jiapeng Chong) - PCI: Add ACS quirk for Wangxun NICs (Mengyuan Lou) - PCI: loongson: Add more devices that need MRRS quirk (Huacai Chen) - kernel/fail_function: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman) - drivers: base: dd: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman) - drivers: base: component: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman) - misc: vmw_balloon: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman) - tty: pcn_uart: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman) - PCI: Take other bus devices into account when distributing resources (Mika Westerberg) - PCI: Align extra resources for hotplug bridges properly (Mika Westerberg) - usb: gadget: uvc: Make bSourceID read/write (Daniel Scally) - usb: uvc: Enumerate valid values for color matching (Daniel Scally) - USB: ene_usb6250: Allocate enough memory for full object (Kees Cook) - usb: host: xhci: mvebu: Iterate over array indexes instead of using pointer math (Kees Cook) - USB: gadget: pxa27x_udc: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman) - USB: gadget: pxa25x_udc: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman) - USB: gadget: lpc32xx_udc: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman) - USB: gadget: bcm63xx_udc: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman) - USB: gadget: gr_udc: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman) - USB: isp1362: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman) - USB: isp116x: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman) - USB: fotg210: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman) - USB: sl811: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman) - USB: uhci: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman) - USB: chipidea: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman) - USB: dwc3: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman) - PCI: loongson: Prevent LS7A MRRS increases (Huacai Chen) - soundwire: bus_type: Avoid lockdep assert in sdw_drv_probe() (Richard Fitzgerald) - iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_config_word() (Harshit Mogalapalli) - iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_status_word() (Harshit Mogalapalli) - tools/iio/iio_utils:fix memory leak (Yulong Zhang) - mei: bus-fixup:upon error print return values of send and receive (Alexander Usyskin) - serial: sc16is7xx: setup GPIO controller later in probe (Isaac True) - tty: serial: fsl_lpuart: disable the CTS when send break signal (Sherry Sun) - tty: fix out-of-bounds access in tty_driver_lookup_tty() (Sven Schnelle) - staging: emxx_udc: Add checks for dma_alloc_coherent() (Yuan Can) - USB: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman) - media: uvcvideo: Silence memcpy() run-time false positive warnings (Kees Cook) - media: uvcvideo: Quirk for autosuspend in Logitech B910 and C910 (Ricardo Ribalda) - media: uvcvideo: Handle errors from calls to usb_string (Guenter Roeck) - media: uvcvideo: Handle cameras with invalid descriptors (Ricardo Ribalda) - media: uvcvideo: Remove format descriptions (Laurent Pinchart) - iommu/amd: Fix error handling for pdev_pri_ats_enable() (Vasant Hegde) - IB/hfi1: Update RMT size calculation (Dean Luick) - mfd: arizona: Use pm_runtime_resume_and_get() to prevent refcnt leak (Liang He) - bootconfig: Increase max nodes of bootconfig from 1024 to 8192 for DCC support (Souradeep Chowdhury) - firmware/efi sysfb_efi: Add quirk for Lenovo IdeaPad Duet 3 (Darrell Kavanagh) - kernel/printk/index.c: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman) - tracing: Add NULL checks for buffer in ring_buffer_free_read_page() (Jia-Ju Bai) - thermal: intel: BXT_PMIC: select REGMAP instead of depending on it (Randy Dunlap) - thermal: intel: quark_dts: fix error pointer dereference (Dan Carpenter) - ASoC: mediatek: mt8195: add missing initialization (Trevor Wu) - ASoC: zl38060 add gpiolib dependency (Arnd Bergmann) - ASoC: zl38060: Remove spurious gpiolib select (Mark Brown) - ASoC: adau7118: don't disable regulators on device unbind (Nuno Sa) - loop: loop_set_status_from_info() check before assignment (Zhong Jinghua) - rtc: allow rtc_read_alarm without read_alarm callback (Alexandre Belloni) - scsi: ipr: Work around fortify-string warning (Arnd Bergmann) - genirq: Add and use an irq_data_update_affinity helper (Samuel Holland) - genirq: Refactor accessors to use irq_data_get_affinity_mask (Samuel Holland) - rtc: sun6i: Always export the internal oscillator (Samuel Holland) - vc_screen: modify vcs_size() handling in vcs_read() (George Kennedy) - tcp: tcp_check_req() can be called from process context (Eric Dumazet) - ARM: dts: spear320-hmi: correct STMPE GPIO compatible (Krzysztof Kozlowski) - net/sched: act_sample: fix action bind logic (Pedro Tammela) - net/sched: act_mpls: fix action bind logic (Pedro Tammela) - net/sched: act_pedit: fix action bind logic (Pedro Tammela) - net/sched: transition act_pedit to rcu and percpu stats (Pedro Tammela) - nfc: fix memory leak of se_io context in nfc_genl_se_io (Fedor Pchelkin) - net/mlx5: Geneve, Fix handling of Geneve object id as error code (Maor Dickman) - net/mlx5e: Verify flow_source cap before using it (Roi Dayan) - 9p/rdma: unmap receive dma buffer in rdma_request()/post_recv() (Zhengchao Shao) - 9p/xen: fix connection sequence (Juergen Gross) - 9p/xen: fix version parsing (Juergen Gross) - net: fix __dev_kfree_skb_any() vs drop monitor (Eric Dumazet) - octeontx2-pf: Use correct struct reference in test condition (Deepak R Varma) - sctp: add a refcnt in sctp_stream_priorities to avoid a nested loop (Xin Long) - ipv6: Add lwtunnel encap size of all siblings in nexthop calculation (Lu Wei) - netfilter: x_tables: fix percpu counter block leak on error path when creating new netns (Pavel Tikhomirov) - netfilter: ebtables: fix table blob use-after-free (Florian Westphal) - netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack() (Hangyu Hua) - watchdog: sbsa_wdog: Make sure the timeout programming is within the limits (George Cherian) - watchdog: pcwd_usb: Fix attempting to access uninitialized memory (Li Hua) - watchdog: Fix kmemleak in watchdog_cdev_register (Chen Jun) - watchdog: at91sam9_wdt: use devm_request_irq to avoid missing free_irq() in error path (ruanjinjie) - um: virt-pci: properly remove PCI device from bus (Benjamin Berg) - um: virtio_uml: move device breaking into workqueue (Benjamin Berg) - um: virtio_uml: mark device as unregistered when breaking it (Benjamin Berg) - um: virtio_uml: free command if adding to virtqueue failed (Benjamin Berg) - x86: um: vdso: Add '%rcx' and '%r11' to the syscall clobber list (Ammar Faizi) - netfilter: nf_tables: allow to fetch set elements when table has an owner (Pablo Neira Ayuso) - ext4: use ext4_fc_tl_mem in fast-commit replay path (Eric Biggers) - f2fs: fix to avoid potential memory corruption in __update_iostat_latency() (Yangtao Li) - ubi: ubi_wl_put_peb: Fix infinite loop when wear-leveling work failed (Zhihao Cheng) - ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show() (Zhihao Cheng) - ubi: fastmap: Fix missed fm_anchor PEB in wear-leveling after disabling fastmap (Zhihao Cheng) - ubifs: ubifs_writepage: Mark page dirty after writing inode failed (Zhihao Cheng) - ubifs: dirty_cow_znode: Fix memleak in error handling path (Zhihao Cheng) - ubifs: Re-statistic cleaned znode count if commit failed (Zhihao Cheng) - ubi: Fix possible null-ptr-deref in ubi_free_volume() (Yang Yingliang) - ubifs: Fix memory leak in alloc_wbufs() (Li Zetao) - ubi: Fix unreferenced object reported by kmemleak in ubi_resize_volume() (Li Zetao) - ubi: Fix use-after-free when volume resizing failed (Li Zetao) - ubifs: Reserve one leb for each journal head while doing budget (Zhihao Cheng) - ubifs: do_rename: Fix wrong space budget when target inode's nlink > 1 (Zhihao Cheng) - ubifs: Fix wrong dirty space budget for dirty inode (Zhihao Cheng) - ubifs: Rectify space budget for ubifs_xrename() (Zhihao Cheng) - ubifs: Rectify space budget for ubifs_symlink() if symlink is encrypted (Zhihao Cheng) - ubifs: Fix build errors as symbol undefined (Li Hua) - ubi: ensure that VID header offset + VID header size <= alloc, size (George Kennedy) - um: vector: Fix memory leak in vector_config (Xiang Yang) - f2fs: allow set compression option of files without blocks (Yangtao Li) - fs: f2fs: initialize fsdata in pagecache_write() (Alexander Potapenko) - f2fs: use memcpy_{to,from}_page() where possible (Eric Biggers) - pwm: stm32-lp: fix the check on arr and cmp registers update (Fabrice Gasnier) - pwm: sifive: Always let the first pwm_apply_state succeed (Emil Renner Berthing) - pwm: sifive: Reduce time the controller lock is held (Uwe Kleine-Konig) - objtool: Fix memory leak in create_static_call_sections() (Miaoqian Lin) - fs/jfs: fix shift exponent db_agl2size negative (Liu Shixin via Jfs-discussion) - auxdisplay: hd44780: Fix potential memory leak in hd44780_remove() (Jianglei Nie) - LTS version: v5.15.99 (Jack Vogel) - kbuild: Port silent mode detection to future gnu make. (Dmitry Goncharov) - wifi: ath9k: use proper statements in conditionals (Arnd Bergmann) - arm64: dts: qcom: ipq8074: fix Gen2 PCIe QMP PHY (Robert Marko) - iommu/vt-d: Fix an unbalanced rcu_read_lock/rcu_read_unlock() (Christophe JAILLET) - media: uvcvideo: Fix memory leak of object map on error exit path (Colin Ian King) - qede: avoid uninitialized entries in coal_entry array (Michal Schmidt) - perf intel-pt: pkt-decoder: Add CFE and EVD packets (Adrian Hunter) - drm/edid: fix AVI infoframe aspect ratio handling (Jani Nikula) - drm/i915: Don't use BAR mappings for ring buffers with LLC (John Harrison) - drm/radeon: Fix eDP for single-display iMac11,2 (Mark Hawrylak) - drm/i915/quirks: Add inverted backlight quirk for HP 14-r206nv (Mavroudis Chatzilaridis) - vfio/type1: restore locked_vm (Steve Sistare) - vfio/type1: track locked_vm per dma (Steve Sistare) - vfio/type1: prevent underflow of locked_vm via exec() (Steve Sistare) - iommu/vt-d: Avoid superfluous IOTLB tracking in lazy mode (Jacob Pan) - PCI: Avoid FLR for AMD FCH AHCI adapters (Damien Le Moal) - PCI: hotplug: Allow marking devices as disconnected during bind/unbind (Lukas Wunner) - PCI/PM: Observe reset delay irrespective of bridge_d3 (Lukas Wunner) - MIPS: DTS: CI20: fix otg power gpio (H. Nikolaus Schaller) - riscv: ftrace: Reduce the detour code size to half (Guo Ren) - riscv: ftrace: Remove wasted nops for !RISCV_ISA_C (Guo Ren) - riscv, mm: Perform BPF exhandler fixup on page fault (Bjorn Topel) - riscv: jump_label: Fixup unaligned arch_static_branch function (Andy Chiu) - riscv: mm: fix regression due to update_mmu_cache change (Sergey Matyukevich) - RISC-V: add a spin_shadow_stack declaration (Conor Dooley) - scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() (Tomas Henzl) - scsi: ses: Fix possible desc_ptr out-of-bounds accesses (Tomas Henzl) - scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses (Tomas Henzl) - scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() (Tomas Henzl) - scsi: ses: Don't attach if enclosure has no components (James Bottomley) - tools/bootconfig: fix single & used for logical condition (Antonio Alvarez Feijoo) - ring-buffer: Handle race between rb_move_tail and rb_check_pages (Mukesh Ojha) - ktest.pl: Add RUN_TIMEOUT option with default unlimited (Steven Rostedt) - ktest.pl: Fix missing 'end_monitor' when machine check fails (Steven Rostedt) - ktest.pl: Give back console on Ctrt^C on monitor (Steven Rostedt) - mm/thp: check and bail out if page in deferred queue already (Yin Fengwei) - mm: memcontrol: deprecate charge moving (Johannes Weiner) - docs: gdbmacros: print newest record (John Ogness) - remoteproc/mtk_scp: Move clk ops outside send_lock (Chen-Yu Tsai) - media: ipu3-cio2: Fix PM runtime usage_count in driver unbind (Sakari Ailus) - mips: fix syscall_get_nr (Elvira Khabirova) - dax/kmem: Fix leak of memory-hotplug resources (Dan Williams) - alpha: fix FEN fault handling (Al Viro) - ceph: update the time stamps and try to drop the suid/sgid (Xiubo Li) - rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails (Ilya Dryomov) - fuse: add inode/permission checks to fileattr_get/fileattr_set (Alexander Mikhalitsyn) - ARM: dts: exynos: correct TMU phandle in Odroid HC1 (Krzysztof Kozlowski) - ARM: dts: exynos: correct TMU phandle in Odroid XU (Krzysztof Kozlowski) - ARM: dts: exynos: correct TMU phandle in Exynos5250 (Krzysztof Kozlowski) - ARM: dts: exynos: correct TMU phandle in Odroid XU3 family (Krzysztof Kozlowski) - ARM: dts: exynos: correct TMU phandle in Exynos4 (Krzysztof Kozlowski) - ARM: dts: exynos: correct TMU phandle in Exynos4210 (Krzysztof Kozlowski) - ARM: dts: qcom: sdx55: Add Qcom SMMU-500 as the fallback for IOMMU node (Manivannan Sadhasivam) - dm flakey: fix a bug with 32-bit highmem systems (Mikulas Patocka) - dm flakey: don't corrupt the zero page (Mikulas Patocka) - dm flakey: fix logic when corrupting a bio (Mikulas Patocka) - thermal: intel: powerclamp: Fix cur_state for multi package system (Srinivas Pandruvada) - qede: fix interrupt coalescing configuration (Manish Chopra) - wifi: cfg80211: Fix use after free for wext (Alexander Wetzel) - wifi: ath11k: allow system suspend to survive ath11k (Len Brown) - wifi: rtl8xxxu: Use a longer retry limit of 48 (Bitterblue Smith) - dm: add cond_resched() to dm_wq_work() (Pingfan Liu) - dm: send just one event on resize, not two (Mikulas Patocka) - mtd: spi-nor: Fix shift-out-of-bounds in spi_nor_set_erase_type (Louis Rannou) - mtd: spi-nor: spansion: Consider reserved bits in CFR5 register (Tudor Ambarus) - mtd: spi-nor: sfdp: Fix index value for SCCR dwords (Takahiro Kuwano) - ext4: refuse to create ea block when umounted (Jun Nie) - ext4: optimize ea_inode block expansion (Jun Nie) - jbd2: fix data missing when reusing bh which is ready to be checkpointed (Zhihao Cheng) - ALSA: hda/realtek: Add quirk for HP EliteDesk 800 G6 Tower PC (Lukasz Stelmach) - ALSA: ice1712: Do not left ice->gpio_mutex locked in aureon_add_controls() (Dmitry Fomin) - io_uring/poll: allow some retries for poll triggering spuriously (Jens Axboe) - io_uring: remove MSG_NOSIGNAL from recvmsg (David Lamparter) - io_uring/rsrc: disallow multi-source reg buffers (Pavel Begunkov) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-30456 Oracle Linux 8 hivex libguestfs libguestfs-winsupport libiscsi libnbd libvirt [5.7.0-40] - build: change dependency to allow post install erasing of /usr/bin/nc (Wim ten Have) [Orabug: 35289777] - util: Make virFileClose() quiet on success (Andrea Bolognani) [Orabug: 35090886] [5.7.0-39] - exadata: update maxvcpus for vNUMA only (Shaleen Bathla) [Orabug: 34863357] libvirt-dbus libvirt-python [5.7.0-40] - Bump version number to 5.7.0-40 to match libvirt (Karl Heubaum) [5.7.0-39] - Bump version number to 5.7.0-39 to match libvirt (Karl Heubaum) nbdkit netcf perl-Sys-Virt qemu-kvm [4.2.1-26] - migration: check magic value for deciding the mapping of channels (Manish Mishra) [Orabug: 34735462] - io: Add support for MSG_PEEK for socket channel (Manish Mishra) [Orabug: 34735462] - migration: Move channel setup out of postcopy_try_recover() (Peter Xu) [Orabug: 34735462] - vdpa: commit all host notifier MRs in a single MR transaction (Mike Longpeng) [Orabug: 35252234] - vhost: configure all host notifiers in a single MR transaction (Mike Longpeng) [Orabug: 35252234] - vhost: simplify vhost_dev_enable_notifiers (Mike Longpeng) [Orabug: 35252234] - pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 35055290] - qga/win32: Use rundll for VSS installation (Konstantin Kostiuk) [Orabug: 35206108] {CVE-2023-0664} - qga/win32: Remove change action from MSI installer (Konstantin Kostiuk) [Orabug: 35206108] {CVE-2023-0664} - hw/display/qxl: Assert memory slot fits in preallocated MemoryRegion (Philippe Mathieu-Daude) [Orabug: 34846087] - hw/display/qxl: Avoid buffer overrun in qxl_phys2virt (CVE-2022-4144) (Philippe Mathieu-Daude) [Orabug: 34846087] {CVE-2022-4144} - hw/display/qxl: Pass requested buffer size to qxl_phys2virt() (Philippe Mathieu-Daude) [Orabug: 34846087] - hw/display/qxl: Document qxl_phys2virt() (Philippe Mathieu-Daude) [Orabug: 34846087] - hw/display/qxl: Have qxl_log_command Return early if no log_cmd handler (Philippe Mathieu-Daude) [Orabug: 34846087] - virtio-blk: On restart, process queued requests in the proper context (Sergio Lopez) [Orabug: 35060530] - virtio-blk: Refactor the code that processes queued requests (Sergio Lopez) [Orabug: 35060530] - hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219223] - modules: load modules from /var/run/qemu/ directory firstly (Siddhi Katage) [Orabug: 34867783] - qemu.spec: Add post-install script for block storage modules (Siddhi Katage) [Orabug: 34867783] - qemu.spec: Enable '-module-upgrades' for OL7 (Siddhi Katage) [Orabug: 34867783] - module: increase dirs array size by one (Bruce Rogers) [Orabug: 34867783] - modules: load modules from versioned /var/run dir (Christian Ehrhardt) [Orabug: 34867783] - blockjob: Fix crash with IOthread when block commit after snapshot (Michael Qiu) [Orabug: 35118668] [4.2.1-25] - target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 34641255] - i386/kvm: fix a use-after-free when vcpu plug/unplug (Pan Nengyuan) [Orabug: 34859902] - memory: batch allocate ioeventfds[] in address_space_update_ioeventfds() (Stefan Hajnoczi) [Orabug: 34538900] - virtio-blk: Fix clean up of host notifiers for single MR transaction (Mark Mielke) [Orabug: 34538900] - virtio-scsi: Configure all host notifiers in a single MR transaction (Greg Kurz) [Orabug: 34538900] - virtio-scsi: Set host notifiers and callbacks separately (Greg Kurz) [Orabug: 34538900] - virtio-blk: Configure all host notifiers in a single MR transaction (Greg Kurz) [Orabug: 34538900] - virtio-blk: Fix rollback path in virtio_blk_data_plane_start() (Greg Kurz) [Orabug: 34538900] - event_notifier: Set ->initialized earlier in event_notifier_init() (Greg Kurz) [Orabug: 34538900] - virtio-scsi: don't process IO on fenced dataplane (Maxim Levitsky) [Orabug: 34538900] - virtio-scsi: don't uninitialize queues that we didn't initialize (Maxim Levitsky) [Orabug: 34538900] - hw/arm/virt: build SMBIOS 19 table (Mihai Carabas) seabios sgabios supermin IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-0664 CVE-2022-4144 Oracle Linux 7 [39.2.0-10.0.1] - Back port fix for CVE-2022-40897 [Orabug: 35034581] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-40897 Oracle Linux 7 [9.0.3-8.0.3] - CVE-2021-3572 [Orabug: 35240686] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2021-3572 Oracle Linux 8 istio [1.16.4-1] - Added Oracle specific files for 1.16.4-1 kubernetes [1.25.7-2] - libct/cg: add misc controller to v1 drivers (upstream runc patch) [1.25.7-1] - Added Oracle specific build files for Kubernetes olcne [1.6.1-8] - Update Istio config to include 1.15.7 to support upgrade from 1.5.x to 1.6.x [1.6.1-7] - Bugfix:Append a slash in oci-instance-metada query url [1.6.1-6] - Fixed helm installation in OLCNE upgrade [1.6.1-5] - Deprecate oci-private-key <path-on-control-plane-nodes> in favour of oci-private-key-file <path-on-operatpr-node> - Updated olcne_version argument in olcnectl provision to support <major.minor.patch> [1.6.1-4] - Update Istio version to 1.16.4 to address CVE's - CVE-2022-27496 - CVE-2022-27488 - CVE-2022-27493 - CVE-2022-27492 - CVE-2022-27491 - CVE-2022-27487 [1.6.1-3] - Resolved the issue to install multiple network cards using multus [1.6.1-2] - Update kubelet for upstream runc misc cgroups patch [1.6.1-1] - Fix the bug olcnectl provision fails if ol8_developer does not exist IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-27496 CVE-2022-27493 CVE-2022-27487 CVE-2022-27491 CVE-2022-27488 CVE-2022-27492 Oracle Linux 7 istio [1.16.4-1] - Added Oracle specific files for 1.16.4-1 kubernetes [1.25.7-2] - libct/cg: add misc controller to v1 drivers (upstream runc patch) olcne [1.6.1-8] - Update Istio config to include 1.15.7 to support upgrade from 1.5.x to 1.6.x [1.6.1-7] - Bugfix:Append a slash in oci-instance-metada query url [1.6.1-6] - Fixed helm installation in OLCNE upgrade [1.6.1-5] - Deprecate oci-private-key <path-on-control-plane-nodes> in favour of oci-private-key-file <path-on-operatpr-node> - Updated olcne_version argument in olcnectl provision to support <major.minor.patch> [1.6.1-4] - Update Istio version to 1.16.4 to address CVE's - CVE-2022-27496 - CVE-2022-27488 - CVE-2022-27493 - CVE-2022-27492 - CVE-2022-27491 - CVE-2022-27487 [1.6.1-3] - Resolved the issue to install multiple network cards using multus [1.6.1-2] - Update kubelet for upstream runc misc cgroups patch [1.6.1-1] - Fix the bug olcnectl provision fails if ol8_developer does not exist IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-27492 CVE-2022-27487 CVE-2022-27496 CVE-2022-27488 CVE-2022-27493 CVE-2022-27491 Oracle Linux 8 istio [1.15.7-1] - Added Oracle specific files for 1.15.7-1 kubernetes [1.24.8-2] - libct/cg: add misc controller to v1 drivers (upstream runc patch) [1.24.8-1] - Added Oracle specific build files for Kubernetes olcne [1.5.12-5] - Bug fix - Append a slash in oci-instance-metada url [1.5.12-4] - Update Istio version to 1.15.7 to address CVE's - CVE-2022-27496 - CVE-2022-27488 - CVE-2022-27493 - CVE-2022-27492 - CVE-2022-27491 - CVE-2022-27487 [1.5.12-3] - Updated olcne_version argument in olcnectl provision to support <major.minor.patch> [1.5.12-2] - Update kubelet for upstream runc misc cgroups patch [1.5.12-1] - Fix the bug olcnectl provision fails if ol8_developer does not exist IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-27496 CVE-2022-27488 CVE-2022-27491 CVE-2022-27487 CVE-2022-27492 CVE-2022-27493 Oracle Linux 7 istio [1.15.7-1] - Added Oracle specific files for 1.15.7-1 kubernetes [1.24.8-2] - libct/cg: add misc controller to v1 drivers (upstream runc patch) [1.24.8-1] - Added Oracle specific build files for Kubernetes olcne [1.5.12-5] - Bug fix - Append a slash in oci-instance-metada url [1.5.12-4] - Update Istio version to 1.15.7 to address CVE's - CVE-2022-27496 - CVE-2022-27488 - CVE-2022-27493 - CVE-2022-27492 - CVE-2022-27491 - CVE-2022-27487 [1.5.12-3] - Updated olcne_version argument in olcnectl provision to support <major.minor.patch> [1.5.12-2] - Update kubelet for upstream runc misc cgroups patch [1.5.12-1] - Fix the bug olcnectl provision fails if ol8_developer does not exist IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-27487 CVE-2022-27488 CVE-2022-27496 CVE-2022-27493 CVE-2022-27492 CVE-2022-27491 Oracle Linux 8 hivex libguestfs libguestfs-winsupport libiscsi libnbd libtpms libvirt libvirt-dbus libvirt-python nbdkit netcf perl-Sys-Virt qemu-kvm [6.1.1-6-el8] - CVE-2023-1544 is not applicable to Oracle QEMU 6.1.1 (Karl Heubaum) [Orabug: 35305727] {CVE-2023-1544} - virtio-gpu: do not byteswap padding (Paolo Bonzini) [Orabug: 35304723] - KVM: x86: workaround invalid CPUID[0xD,9] info on some AMD processors (Paolo Bonzini) [Orabug: 35241527] - qemu-kvm.spec: fix Linux io_uring support (Mark Kanda) [Orabug: 35265200] - hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219290] seabios sgabios supermin swtpm virt-v2v IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-1544 __Affected_cpe_list__ Oracle Linux 7 [15:4.2.1-26.el7] - migration: check magic value for deciding the mapping of channels (manish.mishra) [Orabug: 34735462] - io: Add support for MSG_PEEK for socket channel (manish.mishra) [Orabug: 34735462] - migration: Move channel setup out of postcopy_try_recover() (Peter Xu) [Orabug: 34735462] - vdpa: commit all host notifier MRs in a single MR transaction (Longpeng (Mike)) [Orabug: 35252234] - vhost: configure all host notifiers in a single MR transaction (Longpeng (Mike)) [Orabug: 35252234] - vhost: simplify vhost_dev_enable_notifiers (Longpeng (Mike)) [Orabug: 35252234] - pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 35055290] - qga/win32: Use rundll for VSS installation (Konstantin Kostiuk) [Orabug: 35206108] {CVE-2023-0664} - qga/win32: Remove change action from MSI installer (Konstantin Kostiuk) [Orabug: 35206108] {CVE-2023-0664} - hw/display/qxl: Assert memory slot fits in preallocated MemoryRegion (Philippe Mathieu-Daude) [Orabug: 34846087] {CVE-2022-4144} - hw/display/qxl: Avoid buffer overrun in qxl_phys2virt (CVE-2022-4144) (Philippe Mathieu-Daude) [Orabug: 34846087] {CVE-2022-4144} - hw/display/qxl: Pass requested buffer size to qxl_phys2virt() (Philippe Mathieu-Daude) [Orabug: 34846087] {CVE-2022-4144} - hw/display/qxl: Document qxl_phys2virt() (Philippe Mathieu-Daude) [Orabug: 34846087] {CVE-2022-4144} - hw/display/qxl: Have qxl_log_command Return early if no log_cmd handler (Philippe Mathieu-Daude) [Orabug: 34846087] {CVE-2022-4144} - virtio-blk: On restart, process queued requests in the proper context (Sergio Lopez) [Orabug: 35060530] - virtio-blk: Refactor the code that processes queued requests (Sergio Lopez) [Orabug: 35060530] - hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219223] - modules: load modules from /var/run/qemu/ directory firstly (Siddhi Katage) [Orabug: 34867783] - qemu.spec: Add post-install script for block storage modules (Siddhi Katage) [Orabug: 34867783] - qemu.spec: Enable '-module-upgrades' for OL7 (Siddhi Katage) [Orabug: 34867783] - module: increase dirs array size by one (Bruce Rogers) [Orabug: 34867783] - modules: load modules from versioned /var/run dir (Christian Ehrhardt) [Orabug: 34867783] - blockjob: Fix crash with IOthread when block commit after snapshot (Michael Qiu) [Orabug: 35118668] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-0664 CVE-2022-4144 __Affected_cpe_list__ Oracle Linux 6 Oracle Linux 7 [4.1.12-124.75.3] - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Gwangun Jung) [Orabug: 35354791] {CVE-2023-2248} [4.1.12-124.75.2] - prlimit: do_prlimit needs to have a speculation check (Greg Kroah-Hartman) [Orabug: 35354303] {CVE-2023-0458} - kernel/sys.c: fix potential Spectre v1 issue (Gustavo A. R. Silva) [Orabug: 35354303] - xirc2ps_cs: Fix use after free bug in xirc2ps_detach (Zheng Wang) [Orabug: 35250898] {CVE-2023-1670} - net: sched: cbq: dont intepret cls results when asked to drop (Jamal Hadi Salim) [Orabug: 34983586] {CVE-2023-23454} [4.1.12-124.75.1] - media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() (Baisong Zhong) [Orabug: 35312830] {CVE-2023-28328} - scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress (Mike Christie) [Orabug: 35312683] {CVE-2023-2162} - nvme: restrict management ioctls to admin (Keith Busch) [Orabug: 34619368] {CVE-2022-3169} IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-2162 CVE-2023-23454 CVE-2022-3169 CVE-2023-0458 CVE-2023-28328 CVE-2023-1670 CVE-2023-2248 __Affected_cpe_list__ Oracle Linux 8 Oracle Linux 9 [5.15.0-102.110.5] - RISC-V: Fix up a cherry-pick warning in setup_vm_final() (Alexandre Ghiti) - Revert 'Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work' (Liu Jian) - riscv: mm: remove redundant parameter of create_fdt_early_page_table (Song Shuai) - kernfs: change kernfs_rename_lock into a read-write lock. (Imran Khan) [Orabug: 35257584] - kernfs: Use a per-fs rwsem to protect per-fs list of kernfs_super_info. (Imran Khan) [Orabug: 35257584] - kernfs: Introduce separate rwsem to protect inode attributes. (Imran Khan) [Orabug: 35257584] - debugfs: allow access blktrace trace files in lockdown mode (Junxiao Bi) [Orabug: 35275017] - rds: Add time_spent and payload info for send_cqe handler (Rohit Nair) [Orabug: 35302534] - KVM: x86: Always enable legacy FP/SSE in allowed user XFEATURES (Dr. David Alan Gilbert) [Orabug: 35309074] - KVM: x86: Reinstate kvm_vcpu_arch.guest_supported_xcr0 (Sean Christopherson) [Orabug: 35309074] - x86/kvm: Fix compilation warning in non-x86_64 builds (Leonardo Bras) [Orabug: 35309074] - x86/kvm/fpu: Remove kvm_vcpu_arch.guest_supported_xcr0 (Leonardo Bras) [Orabug: 35309074] - x86/kvm/fpu: Limit guest user_xfeatures to supported bits of XCR0 (Leonardo Bras) [Orabug: 35309074] - KVM: x86: Move CPUID.(EAX=0x12,ECX=1) mangling to __kvm_update_cpuid_runtime() (Vitaly Kuznetsov) [Orabug: 35309074] - KVM: x86: Remove defunct setting of XCR0 for guest during vCPU create (Sean Christopherson) [Orabug: 35309074] - netfilter: nf_tables: deactivate anonymous set from preparation phase (Pablo Neira Ayuso) [Orabug: 35382083] {CVE-2023-32233} - uek-rpm: Enable CONFIG_VIRTIO_FS in UEK7 (Harshit Mogalapalli) [Orabug: 35383136] - drm/hyperv: Add ratelimit on error message (Saurabh Sengar) [Orabug: 35388012] - drm/hyperv: Don't overwrite dirt_needed value set by host (Saurabh Sengar) [Orabug: 35388012] - SUNRPC: remove the maximum number of retries in call_bind_status (Dai Ngo) [Orabug: 35397524] - scsi: target: iscsi: Handle abort for WRITE_PENDING cmds (Dmitry Bogdanov) [Orabug: 35404019] - scsi: target: iscsit: Fix TAS handling during conn cleanup (Mike Christie) [Orabug: 35404019] - scsi: target: Fix multiple LUN_RESET handling (Mike Christie) [Orabug: 35404019] - scsi: target: iscsit: Free cmds before session free (Dmitry Bogdanov) [Orabug: 35404019] - scsi: target: iscsit: Stop/wait on cmds during conn close (Mike Christie) [Orabug: 35404019] - scsi: target: iscsit: isert: Alloc per conn cmd counter (Mike Christie) [Orabug: 35404019] - scsi: target: Pass in cmd counter to use during cmd setup (Mike Christie) [Orabug: 35404019] - scsi: target: Move cmd counter allocation (Mike Christie) [Orabug: 35404019] - scsi: target: Move sess cmd counter to new struct (Mike Christie) [Orabug: 35404019] - net/rds: Fix copy&paste error (Gerd Rausch) [Orabug: 35416946] [5.15.0-102.110.4] - vdpa/mlx5: Extend driver support for new features (Eli Cohen) [Orabug: 35210565] - vdpa/mlx5: Make VIRTIO_NET_F_MRG_RXBUF off by default (Eli Cohen) [Orabug: 35210565] - vhost-vdpa: free iommu domain after last use during cleanup (Gautam Dawar) [Orabug: 35210565] - vdpa/mlx5: should not activate virtq object when suspended (Si-Wei Liu) [Orabug: 35210565] - vp_vdpa: fix the crash in hot unplug with vp_vdpa (Cindy Lu) [Orabug: 35210565] - vdpa/mlx5: support device features provisioning (Si-Wei Liu) [Orabug: 35210565] - vdpa/mlx5: make MTU/STATUS presence conditional on feature bits (Si-Wei Liu) [Orabug: 35210565] - vdpa: validate device feature provisioning against supported class (Si-Wei Liu) [Orabug: 35210565] - vdpa: validate provisioned device features against specified attribute (Si-Wei Liu) [Orabug: 35210565] - vdpa: conditionally read STATUS in config space (Si-Wei Liu) [Orabug: 35210565] - vdpa: fix improper error message when adding vdpa dev (Si-Wei Liu) [Orabug: 35210565] - vdpa/mlx5: Initialize CVQ iotlb spinlock (Eli Cohen) [Orabug: 35210565] - vdpa/mlx5: Don't clear mr struct on destroy MR (Eli Cohen) [Orabug: 35210565] - vdpa/mlx5: Directly assign memory key (Eli Cohen) [Orabug: 35210565] - vhost-vdpa: print warning when vhost_vdpa_alloc_domain fails (Alvaro Karsz) [Orabug: 35210565] - vdpa: Fix a couple of spelling mistakes in some messages (Colin Ian King) [Orabug: 35210565] - vdpa: mlx5: support per virtqueue dma device (Jason Wang) [Orabug: 35210565] - vdpa: set dma mask for vDPA device (Jason Wang) [Orabug: 35210565] - virtio-vdpa: support per vq dma device (Jason Wang) [Orabug: 35210565] - vdpa: introduce get_vq_dma_device() (Jason Wang) [Orabug: 35210565] - virtio_ring: per virtqueue dma device (Jason Wang) [Orabug: 35210565] - vhost: remove unused paramete (Liming Wu) [Orabug: 35210565] - vhost-test: remove meaningless debug info (Liming Wu) [Orabug: 35210565] - vdpa_sim: get rid of DMA ops (Jason Wang) [Orabug: 35210565] - vdpa_sim_net: vendor satistics (Jason Wang) [Orabug: 35210565] - vdpa_sim: support vendor statistics (Jason Wang) [Orabug: 35210565] - vdpasim: customize allocation size (Jason Wang) [Orabug: 35210565] - vdpa_sim: switch to use __vdpa_alloc_device() (Jason Wang) [Orabug: 35210565] - vdpa_sim: use weak barriers (Jason Wang) [Orabug: 35210565] - vdpa_sim: Implement resume vdpa op (Sebastien Boeuf) [Orabug: 35210565] - vhost-vdpa: uAPI to resume the device (Sebastien Boeuf) [Orabug: 35210565] - vhost-vdpa: Introduce RESUME backend feature bit (Sebastien Boeuf) [Orabug: 35210565] - vdpa: Add resume operation (Sebastien Boeuf) [Orabug: 35210565] - vdpa_sim_net: Offer VIRTIO_NET_F_STATUS (Eugenio Perez) [Orabug: 35210565] - vdpa/mlx5: Move some definitions to a new header file (Eli Cohen) [Orabug: 35210565] - vdpa_sim_net: should not drop the multicast/broadcast packet (Cindy Lu) [Orabug: 35210565] - vdpasim: fix memory leak when freeing IOTLBs (Jason Wang) [Orabug: 35210565] - vdpa: conditionally fill max max queue pair for stats (Jason Wang) [Orabug: 35210565] - vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove (Rong Wang) [Orabug: 35210565] - vhost_vdpa: fix the crash in unmap a large memory (Cindy Lu) [Orabug: 35210565] - vhost-vdpa: fix an iotlb memory leak (Stefano Garzarella) [Orabug: 35210565] - RDMA/mlx5: remove variable i (Colin Ian King) [Orabug: 35210565] - vdpa/mlx5: Avoid overwriting CVQ iotlb (Eli Cohen) [Orabug: 35210565] - vdpa/mlx5: Avoid using reslock in event_handler (Eli Cohen) [Orabug: 35210565] - vdpa/mlx5: Fix wrong mac address deletion (Eli Cohen) [Orabug: 35210565] - vdpa/mlx5: Return error on vlan ctrl commands if not supported (Eli Cohen) [Orabug: 35210565] - vdpa/mlx5: Fix rule forwarding VLAN to TIR (Eli Cohen) [Orabug: 35210565] - vdpa: merge functionally duplicated dev_features attributes (Si-Wei Liu) [Orabug: 35210565] - vDPA: conditionally read MTU and MAC in dev cfg space (Zhu Lingshan) [Orabug: 35210565] - vDPA: fix spars cast warning in vdpa_dev_net_mq_config_fill (Zhu Lingshan) [Orabug: 35210565] - vDPA: check virtio device features to detect MQ (Zhu Lingshan) [Orabug: 35210565] - vDPA: check VIRTIO_NET_F_RSS for max_virtqueue_paris's presence (Zhu Lingshan) [Orabug: 35210565] - vDPA: only report driver features if FEATURES_OK is set (Zhu Lingshan) [Orabug: 35210565] - vDPA: allow userspace to query features of a vDPA device (Zhu Lingshan) [Orabug: 35210565] - vp_vdpa: support feature provisioning (Jason Wang) [Orabug: 35210565] - vdpa_sim_net: support feature provisioning (Jason Wang) [Orabug: 35210565] - vdpa: device feature provisioning (Jason Wang) [Orabug: 35210565] - virtio: drop vp_legacy_set_queue_size (Michael S. Tsirkin) [Orabug: 35210565] - vdpa/mlx5: Fix MQ to support non power of two num queues (Eli Cohen) [Orabug: 35210565] - vdpa/mlx5: Fix possible uninitialized return value (Eli Cohen) [Orabug: 35210565] - vdpa/mlx5: Support different address spaces for control and data (Eli Cohen) [Orabug: 35210565] - vdpa/mlx5: Implement susupend virtqueue callback (Eli Cohen) [Orabug: 35210565] - vdpa/mlx5: Use eth_broadcast_addr() to assign broadcast address (Xu Qiang) [Orabug: 35210565] - vdpa_sim: Implement suspend vdpa op (Eugenio Perez) [Orabug: 35210565] - vhost-vdpa: uAPI to suspend the device (Eugenio Perez) [Orabug: 35210565] - vhost-vdpa: introduce SUSPEND backend feature bit (Eugenio Perez) [Orabug: 35210565] - vdpa: Add suspend operation (Eugenio Perez) [Orabug: 35210565] - vhost-vdpa: Call ida_simple_remove() when failed (Bo Liu) [Orabug: 35210565] - vDPA: fix 'cast to restricted le16' warnings in vdpa.c (Zhu Lingshan) [Orabug: 35210565] - vDPA: !FEATURES_OK should not block querying device config space (Zhu Lingshan) [Orabug: 35210565] - vdpa_sim: use max_iotlb_entries as a limit in vhost_iotlb_init (Stefano Garzarella) [Orabug: 35210565] - vringh: iterate on iotlb_translate to handle large translations (Stefano Garzarella) [Orabug: 35210565] - vhost-vdpa: call vhost_vdpa_cleanup during the release (Stefano Garzarella) [Orabug: 35210565] - vdpa/mlx5: Add RX MAC VLAN filter support (Eli Cohen) [Orabug: 35210565] - vdpa/mlx5: Remove flow counter from steering (Eli Cohen) [Orabug: 35210565] - vhost-vdpa: return -EFAULT on copy_to_user() failure (Dan Carpenter) [Orabug: 35210565] - vdpasim: Off by one in vdpasim_set_group_asid() (Dan Carpenter) [Orabug: 35210565] - vdpa/vp_vdpa : add vdpa tool support in vp_vdpa (Cindy Lu) [Orabug: 35210565] - vdpasim: control virtqueue support (Gautam Dawar) [Orabug: 35210565] - vdpa_sim: filter destination mac address (Gautam Dawar) [Orabug: 35210565] - vdpa_sim: factor out buffer completion logic (Gautam Dawar) [Orabug: 35210565] - vdpa_sim: advertise VIRTIO_NET_F_MTU (Gautam Dawar) [Orabug: 35210565] - vhost-vdpa: support ASID based IOTLB API (Gautam Dawar) [Orabug: 35210565] - vhost-vdpa: introduce uAPI to set group ASID (Gautam Dawar) [Orabug: 35210565] - vhost-vdpa: uAPI to get virtqueue group id (Gautam Dawar) [Orabug: 35210565] - vhost-vdpa: introduce uAPI to get the number of address spaces (Gautam Dawar) [Orabug: 35210565] - vhost-vdpa: introduce uAPI to get the number of virtqueue groups (Gautam Dawar) [Orabug: 35210565] - vhost-vdpa: introduce asid based IOTLB (Gautam Dawar) [Orabug: 35210565] - vhost: support ASID in IOTLB API (Gautam Dawar) [Orabug: 35210565] - vhost_iotlb: split out IOTLB initialization (Gautam Dawar) [Orabug: 35210565] - vdpa: introduce config operations for associating ASID to a virtqueue group (Gautam Dawar) [Orabug: 35210565] - vdpa: multiple address spaces support (Gautam Dawar) [Orabug: 35210565] - vdpa: introduce virtqueue groups (Gautam Dawar) [Orabug: 35210565] - vhost-vdpa: switch to use vhost-vdpa specific IOTLB (Gautam Dawar) [Orabug: 35210565] - vhost-vdpa: passing iotlb to IOMMU mapping helpers (Gautam Dawar) [Orabug: 35210565] - virtio-vdpa: don't set callback if virtio doesn't need it (Gautam Dawar) [Orabug: 35210565] - vhost: move the backend feature bits to vhost_types.h (Gautam Dawar) [Orabug: 35210565] - vdpa/mlx5: Use readers/writers semaphore instead of mutex (Eli Cohen) [Orabug: 35210565] - vdpa/mlx5: Add support for reading descriptor statistics (Eli Cohen) [Orabug: 35210565] - net/vdpa: Use readers/writers semaphore instead of cf_mutex (Eli Cohen) [Orabug: 35210565] - net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex (Eli Cohen) [Orabug: 35210565] - vdpa: Add support for querying vendor statistics (Eli Cohen) [Orabug: 35210565] - net/mlx5: Add support for configuring max device MTU (Eli Cohen) [Orabug: 35210565] - uek-rpm: Install dtb files under /lib/modules (Dave Kleikamp) [Orabug: 35333240] - Revert 'mm: track driver pinned pages across exec' (Anthony Yznaga) [Orabug: 35346656] - Revert 'cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset' (Tom Hromatka) [Orabug: 35361250] - Revert 'rds: ib: Fix non-parenthetical mutex/semaphore use' (Hakon Bugge) [Orabug: 35377399] [5.15.0-102.110.3] - uek-rpm: Fix the core lists to match changes in qrtr build. (Jack Vogel) - Revert 'KVM: arm64: PMU: Restore the guest's EL0 event counting after migration' (Jack Vogel) [5.15.0-102.110.2] - LTS version: v5.15.110 (Jack Vogel) - riscv: No need to relocate the dtb as it lies in the fixmap region (Alexandre Ghiti) - riscv: Do not set initial_boot_params to the linear address of the dtb (Alexandre Ghiti) - riscv: Move early dtb mapping into the fixmap region (Alexandre Ghiti) - selftests: mptcp: join: fix 'invalid address, ADD_ADDR timeout' (Matthieu Baerts) - driver core: Don't require dynamic_debug for initcall_debug probe timing (Stephen Boyd) - USB: serial: option: add UNISOC vendor and TOZED LT70C product (Ar?nc UNAL) - bluetooth: Perform careful capability checks in hci_sock_ioctl() (Ruihan Li) - drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var (Daniel Vetter) - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() (Jisoo Jang) - KVM: arm64: Fix buffer overflow in kvm_arm_set_fw_reg() (Dan Carpenter) - KVM: arm64: Retry fault if vma_lookup() results become invalid (David Matlack) - selftests/kselftest/runner/run_one(): allow running non-executable files (SeongJae Park) - PCI/ASPM: Remove pcie_aspm_pm_state_change() (Kai-Heng Feng) - LTS version: v5.15.109 (Jack Vogel) - soc: sifive: l2_cache: fix missing of_node_put() in sifive_l2_init() (Yang Yingliang) - soc: sifive: l2_cache: fix missing free_irq() in error path in sifive_l2_init() (Yang Yingliang) - soc: sifive: l2_cache: fix missing iounmap() in error path in sifive_l2_init() (Yang Yingliang) - ASN.1: Fix check for strdup() success (Ekaterina Orlova) - ASoC: fsl_asrc_dma: fix potential null-ptr-deref (Nikita Zhandarovich) - mm/page_alloc: fix potential deadlock on zonelist_update_seq seqlock (Tetsuo Handa) - iio: adc: at91-sama5d2_adc: fix an error code in at91_adc_allocate_trigger() (Dan Carpenter) - counter: 104-quad-8: Fix race condition between FLAG and CNTR reads (William Breathitt Gray) - pwm: hibvt: Explicitly set .polarity in .get_state() (Uwe Kleine-Konig) - pwm: iqs620a: Explicitly set .polarity in .get_state() (Uwe Kleine-Konig) - pwm: meson: Explicitly set .polarity in .get_state() (Uwe Kleine-Konig) - sctp: Call inet6_destroy_sock() via sk->sk_destruct(). (Kuniyuki Iwashima) - dccp: Call inet6_destroy_sock() via sk->sk_destruct(). (Kuniyuki Iwashima) - inet6: Remove inet6_destroy_sock() in sk->sk_prot->destroy(). (Kuniyuki Iwashima) - tcp/udp: Call inet6_destroy_sock() in IPv6 sk->sk_destruct(). (Kuniyuki Iwashima) - udp: Call inet6_destroy_sock() in setsockopt(IPV6_ADDRFORM). (Kuniyuki Iwashima) - fuse: fix deadlock between atomic O_TRUNC and page invalidation (Miklos Szeredi) - fuse: always revalidate rename target dentry (Jiachen Zhang) - fuse: fix attr version comparison in fuse_read_update_size() (Miklos Szeredi) - purgatory: fix disabling debug info (Alyssa Ross) - docs: futex: Fix kernel-doc references after code split-up preparation (Salvatore Bonaccorso) - MIPS: Define RUNTIME_DISCARD_EXIT in LD script (Jiaxun Yang) - sched/fair: Fixes for capacity inversion detection (Qais Yousef) - sched/uclamp: Fix a uninitialized variable warnings (Qais Yousef) - sched/fair: Consider capacity inversion in util_fits_cpu() (Qais Yousef) - sched/fair: Detect capacity inversion (Qais Yousef) - sched/uclamp: Cater for uclamp in find_energy_efficient_cpu()'s early exit condition (Qais Yousef) - sched/uclamp: Make cpu_overutilized() use util_fits_cpu() (Qais Yousef) - sched/uclamp: Fix fits_capacity() check in feec() (Qais Yousef) - mm: page_alloc: skip regions with hugetlbfs pages when allocating 1G pages (Mel Gorman) - mm/khugepaged: check again on anon uffd-wp during isolation (Peter Xu) - drm/i915: Fix fast wake AUX sync len (Ville Syrjala) - mmc: sdhci_am654: Set HIGH_SPEED_ENA for SDR12 and SDR25 (Bhavya Kapoor) - kernel/sys.c: fix and improve control flow in __sys_setres[ug]id() (Ondrej Mosnacek) - memstick: fix memory leak if card device is never registered (Greg Kroah-Hartman) - nilfs2: initialize unused bytes in segment summary blocks (Ryusuke Konishi) - iio: light: tsl2772: fix reading proximity-diodes from device tree (Brian Masney) - rtmutex: Add acquire semantics for rtmutex lock acquisition slow path (Mel Gorman) - platform/x86: gigabyte-wmi: add support for X570S AORUS ELITE (Hans de Goede) - xen/netback: use same error messages for same errors (Juergen Gross) - nvme-tcp: fix a possible UAF when failing to allocate an io queue (Sagi Grimberg) - s390/ptrace: fix PTRACE_GET_LAST_BREAK error handling (Heiko Carstens) - net: dsa: b53: mmap: add phy ops (Alvaro Fernandez Rojas) - scsi: core: Improve scsi_vpd_inquiry() checks (Damien Le Moal) - scsi: megaraid_sas: Fix fw_crash_buffer_show() (Tomas Henzl) - selftests: sigaltstack: fix -Wuninitialized (Nick Desaulniers) - platform/x86 (gigabyte-wmi): Add support for A320M-S2H V2 (Frank Crawford) - Input: i8042 - add quirk for Fujitsu Lifebook A574/H (Jonathan Denose) - f2fs: Fix f2fs_truncate_partial_nodes ftrace event (Douglas Raillard) - e1000e: Disable TSO on i219-LM card to increase speed (Sebastian Basierski) - bpf: Fix incorrect verifier pruning due to missing register precision taints (Daniel Borkmann) - spi: spi-rockchip: Fix missing unwind goto in rockchip_sfc_probe() (Li Lanzhe) - mlxsw: pci: Fix possible crash during initialization (Ido Schimmel) - net: rpl: fix rpl header size calculation (Alexander Aring) - bonding: Fix memory leak when changing bond type to Ethernet (Ido Schimmel) - mlxfw: fix null-ptr-deref in mlxfw_mfa2_tlv_next() (Nikita Zhandarovich) - bnxt_en: Do not initialize PTP on older P3/P4 chips (Michael Chan) - netfilter: nf_tables: tighten netlink attribute requirements for catch-all elements (Pablo Neira Ayuso) - netfilter: nf_tables: validate catch-all set elements (Pablo Neira Ayuso) - i40e: fix i40e_setup_misc_vector() error handling (Aleksandr Loktionov) - i40e: fix accessing vsi->active_filters without holding lock (Aleksandr Loktionov) - netfilter: nf_tables: fix ifdef to also consider nf_tables=m (Florian Westphal) - sfc: Fix use-after-free due to selftest_work (Ding Hui) - sfc: Split STATE_READY in to STATE_NET_DOWN and STATE_NET_UP. (Jonathan Cooper) - virtio_net: bugfix overflow inside xdp_linearize_page() (Xuan Zhuo) - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Gwangun Jung) - regulator: fan53555: Fix wrong TCS_SLEW_MASK (Cristian Ciocaltea) - regulator: fan53555: Explicitly include bits header (Cristian Ciocaltea) - netfilter: br_netfilter: fix recent physdev match breakage (Florian Westphal) - arm64: dts: imx8mm-evk: correct pmic clock source (Peng Fan) - arm64: dts: meson-g12-common: specify full DMC range (Marc Gonzalez) - arm64: dts: qcom: ipq8074-hk01: enable QMP device, not the PHY node (Dmitry Baryshkov) - ARM: dts: rockchip: fix a typo error for rk3288 spdif node (Jianqun Xu) - LTS version: v5.15.108 (Jack Vogel) - nvme-pci: avoid the deepest sleep state on ZHITAI TiPro5000 SSDs (Xi Ruoyao) - counter: Add the necessary colons and indents to the comments of counter_compi (Yanteng Si) - counter: fix docum. build problems after filename change (Randy Dunlap) - panic, kexec: make __crash_kexec() NMI safe (Valentin Schneider) - kexec: turn all kexec_mutex acquisitions into trylocks (Valentin Schneider) - nvme-pci: add NVME_QUIRK_BOGUS_NID for T-FORCE Z330 SSD (Duy Truong) - nvme-pci: mark Lexar NM760 as IGNORE_DEV_SUBNQN (Juraj Pecigos) - nvme-pci: add NVME_QUIRK_BOGUS_NID for Lexar NM760 (Abhijit) - nvme-pci: add NVME_QUIRK_BOGUS_NID for Lexar NM610 (Shyamin Ayesh) - nvme-pci: Crucial P2 has bogus namespace ids (Tobias Gruetzmacher) - nvme-pci: avoid the deepest sleep state on ZHITAI TiPro7000 SSDs (Ning Wang) - nvme-pci: add NVME_QUIRK_BOGUS_NID for ADATA XPG GAMMIX S50 (Stefan Reiter) - i2c: ocores: generate stop condition after timeout in polling mode (Gregor Herburger) - x86/rtc: Remove __init for runtime functions (Matija Glavinic Pecotic) - sched/fair: Fix imbalance overflow (Vincent Guittot) - sched/fair: Move calculate of avg_load to a better location (zgpeng) - powerpc/papr_scm: Update the NUMA distance table for the target node (Aneesh Kumar K.V) - ubi: Fix deadlock caused by recursively holding work_sem (ZhaoLong Wang) - ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size (Zhihao Cheng) - mptcp: stricter state check in mptcp_worker (Paolo Abeni) - mptcp: use mptcp_schedule_work instead of open-coding it (Paolo Abeni) - cgroup/cpuset: Wake up cpuset_attach_wq tasks in cpuset_cancel_attach() (Waiman Long) - x86/PCI: Add quirk for AMD XHCI controller that loses MSI-X state in D3hot (Basavaraj Natikar) - scsi: ses: Handle enclosure with just a primary component gracefully (Jiri Kosina) - net: phy: nxp-c45-tja11xx: fix unsigned long multiplication overflow (Radu Pirea (OSS)) - net: phy: nxp-c45-tja11xx: add remove callback (Radu Pirea (OSS)) - net: sfp: initialize sfp->i2c_block_size at sfp allocation (Ivan Bornyakov) - riscv: add icache flush for nommu sigreturn trampoline (Mathis Salmen) - drm/i915: fix race condition UAF in i915_perf_add_config_ioctl (Min Li) - i915/perf: Replace DRM_DEBUG with driver specific drm_dbg call (Umesh Nerlige Ramappa) - tracing: Have tracing_snapshot_instance_cond() write errors to the appropriate instance (Steven Rostedt (Google)) - tracing: Add trace_array_puts() to write into instance (Steven Rostedt (Google)) - counter: 104-quad-8: Fix Synapse action reported for Index signals (William Breathitt Gray) - counter: Internalize sysfs interface code (William Breathitt Gray) - counter: stm32-timer-cnt: Provide defines for slave mode selection (William Breathitt Gray) - counter: stm32-lptimer-cnt: Provide defines for clock polarities (William Breathitt Gray) - ACPI: resource: Add Medion S17413 to IRQ override quirk (Aymeric Wibo) - wifi: iwlwifi: mvm: fix mvmtxq->stopped handling (Johannes Berg) - asymmetric_keys: log on fatal failures in PE/pkcs7 (Robbie Harwood) - verify_pefile: relax wrapper length check (Robbie Harwood) - drm: panel-orientation-quirks: Add quirk for Lenovo Yoga Book X90F (Hans de Goede) - efi: sysfb_efi: Add quirk for Lenovo Yoga Book X91F/L (Hans de Goede) - i2c: hisi: Avoid redundant interrupts (Yicong Yang) - i2c: imx-lpi2c: clean rx/tx buffers upon new message (Alexander Stein) - wifi: mwifiex: mark OF related data as maybe unused (Krzysztof Kozlowski) - power: supply: cros_usbpd: reclassify 'default case!' as debug (Grant Grundler) - ARM: 9290/1: uaccess: Fix KASAN false-positives (Andrew Jeffery) - libbpf: Fix single-line struct definition output in btf_dump (Andrii Nakryiko) - skbuff: Fix a race between coalescing and releasing SKBs (Liang Chen) - net: macb: fix a memory corruption in extended buffer descriptor mode (Roman Gushchin) - udp6: fix potential access to stale information (Eric Dumazet) - RDMA/core: Fix GID entry ref leak when create_ah fails (Saravanan Vajravel) - sctp: fix a potential overflow in sctp_ifwdtsn_skip (Xin Long) - net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume() (Ziyang Xuan) - qlcnic: check pci_reset_function result (Denis Plotnikov) - drm/armada: Fix a potential double free in an error handling path (Christophe JAILLET) - tcp: restrict net.ipv4.tcp_app_win (YueHaibing) - niu: Fix missing unwind goto in niu_alloc_channels() (Harshit Mogalapalli) - 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition (Zheng Wang) - bpf: tcp: Use sock_gen_put instead of sock_put in bpf_iter_tcp (Martin KaFai Lau) - IB/mlx5: Add support for 400G_8X lane speed (Maher Sanalla) - RDMA/irdma: Add ipv4 check to irdma_find_listener() (Tatyana Nikolova) - RDMA/irdma: Increase iWARP CM default rexmit count (Mustafa Ismail) - RDMA/irdma: Fix memory leak of PBLE objects (Mustafa Ismail) - clk: sprd: set max_register according to mapping range (Chunyan Zhang) - drm/i915/dsi: fix DSS CTL register offsets for TGL+ (Jani Nikula) - KVM: arm64: PMU: Restore the guest's EL0 event counting after migration (Reiji Watanabe) - mtd: rawnand: stm32_fmc2: use timings.mode instead of checking tRC_min (Christophe Kerello) - mtd: rawnand: stm32_fmc2: remove unsupported EDO mode (Christophe Kerello) - mtd: rawnand: meson: fix bitmask for length in command word (Arseniy Krasnov) - mtdblock: tolerate corrected bit-flips (Bang Li) - fbmem: Reject FB_ACTIVATE_KD_TEXT from userspace (Daniel Vetter) - btrfs: fix fast csum implementation detection (Christoph Hellwig) - btrfs: print checksum type and implementation at mount time (David Sterba) - Bluetooth: Fix race condition in hidp_session_thread (Min Li) - Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} (Luiz Augusto von Dentz) - ALSA: hda/sigmatel: fix S/PDIF out on Intel D*45* motherboards (Oswald Buddenhagen) - ALSA: emu10k1: don't create old pass-through playback device on Audigy (Oswald Buddenhagen) - ALSA: firewire-tascam: add missing unwind goto in snd_tscm_stream_start_duplex() (Xu Biang) - ALSA: i2c/cs8427: fix iec958 mixer control deactivation (Oswald Buddenhagen) - ALSA: hda/sigmatel: add pin overrides for Intel DP45SG motherboard (Oswald Buddenhagen) - ALSA: emu10k1: fix capture interrupt handler unlinking (Oswald Buddenhagen) - Revert 'pinctrl: amd: Disable and mask interrupts on resume' (Kornel Duleba) - LTS version: v5.15.107 (Jack Vogel) - bpftool: Print newline before '}' for struct with padding only fields (Eduard Zingerman) - ocfs2: fix freeing uninitialized resource on ocfs2_dlm_shutdown (Heming Zhao) - kbuild: fix single directory build (Masahiro Yamada) - mm: take a page reference when removing device exclusive entries (Alistair Popple) - drm/bridge: lt9611: Fix PLL being unable to lock (Robert Foss) - mm/swap: fix swap_info_struct race between swapoff and get_swap_pages() (Rongwei Wang) - ring-buffer: Fix race while reader and writer are on the same page (Zheng Yejian) - drm/nouveau/disp: Support more modes by checking with lower bpc (Karol Herbst) - drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path (Boris Brezillon) - mm: vmalloc: avoid warn_alloc noise caused by fatal signal (Yafang Shao) - ASoC: hdac_hdmi: use set_stream() instead of set_tdm_slots() (Jason Montleon) - tracing: Free error logs of tracing instances (Steven Rostedt (Google)) - can: isotp: isotp_ops: fix poll() to not report false EPOLLOUT events (Michal Sojka) - can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory access (Oleksij Rempel) - fs: drop peer group ids under namespace lock (Christian Brauner) - ftrace: Fix issue that 'direct->addr' not restored in modify_ftrace_direct() (Zheng Yejian) - ftrace: Mark get_lock_parent_ip() __always_inline (John Keeping) - perf/core: Fix the same task check in perf_event_set_output (Kan Liang) - cifs: sanitize paths in cifs_update_super_prepath. (Thiago Rafael Becker) - smb3: lower default deferred close timeout to address perf regression (Steve French) - smb3: allow deferred close timeout to be configurable (Steve French) - scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param() (Zhong Jinghua) - scsi: qla2xxx: Fix memory leak in qla2x00_probe_one() (Li Zetao) - iio: adc: ad7791: fix IRQ flags (Nuno Sa) - coresight-etm4: Fix for() loop drvdata->nr_addr_cmp range bug (Steve Clevenger) - coresight: etm4x: Do not access TRCIDR1 for identification (Suzuki K Poulose) - ALSA: hda/realtek: Add quirk for Clevo X370SNW (Jeremy Soller) - ksmbd: do not call kvmalloc() with __GFP_NORETRY | __GFP_NO_WARN (Marios Makassikis) - dt-bindings: serial: renesas,scif: Fix 4th IRQ for 4-IRQ SCIFs (Geert Uytterhoeven) - nilfs2: fix sysfs interface lifetime (Ryusuke Konishi) - nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread() (Ryusuke Konishi) - tty: serial: fsl_lpuart: avoid checking for transfer complete when UARTCTRL_SBK is asserted in lpuart32_tx_empty (Sherry Sun) - tty: serial: sh-sci: Fix Rx on RZ/G2L SCI (Biju Das) - tty: serial: sh-sci: Fix transmit end interrupt handler (Biju Das) - iio: light: cm32181: Unregister second I2C client if present (Kai-Heng Feng) - iio: dac: cio-dac: Fix max DAC write value check for 12-bit (William Breathitt Gray) - iio: adc: ti-ads7950: Set can_sleep flag for GPIO chip (Lars-Peter Clausen) - iio: adis16480: select CONFIG_CRC32 (Arnd Bergmann) - USB: serial: option: add Quectel RM500U-CN modem (Bj?rn Mork) - USB: serial: option: add Telit FE990 compositions (Enrico Sau) - usb: typec: altmodes/displayport: Fix configure initial pin assignment (RD Babiera) - USB: serial: cp210x: add Silicon Labs IFS-USB-DATACABLE IDs (Kees Jan Koster) - usb: dwc3: pci: add support for the Intel Meteor Lake-S (Heikki Krogerus) - usb: cdnsp: Fixes error: uninitialized symbol 'len' (Pawel Laszczak) - xhci: also avoid the XHCI_ZERO_64B_REGS quirk with a passthrough iommu (D Scott Phillips) - usb: xhci: tegra: fix sleep in atomic call (Wayne Chang) - kbuild: refactor single builds of *.ko (Masahiro Yamada) - gve: Secure enough bytes in the first TX desc for all TCP pkts (Shailend Chand) - ethtool: reset #lanes when lanes is omitted (Andy Roulin) - ice: Reset FDIR counter in FDIR init stage (Lingyu Liu) - ice: fix wrong fallback logic for FDIR (Simei Su) - NFSD: callback request does not use correct credential for AUTH_SYS (Dai Ngo) - sunrpc: only free unix grouplist after RCU settles (Jeff Layton) - net: stmmac: fix up RX flow hash indirection table when setting channels (Corinna Vinschen) - net: ethernet: ti: am65-cpsw: Fix mdio cleanup in probe (Siddharth Vadapalli) - gpio: davinci: Add irq chip flag to skip set wake (Dhruva Gole) - platform/x86: think-lmi: Clean up display of current_value on Thinkstation (Mark Pearson) - platform/x86: think-lmi: Fix memory leaks when parsing ThinkStation WMI strings (Mark Pearson) - platform/x86: think-lmi: Fix memory leak when showing current settings (Armin Wolf) - ipv6: Fix an uninit variable access bug in __ip6_make_skb() (Ziyang Xuan) - net: qrtr: Do not do DEL_SERVER broadcast after DEL_CLIENT (Sricharan Ramabadhran) - sctp: check send stream number after wait_for_sndbuf (Xin Long) - net: dsa: mv88e6xxx: Reset mv88e6393x force WD event bit (Gustav Ekelund) - net: don't let netpoll invoke NAPI if in xmit context (Jakub Kicinski) - icmp: guard against too small mtu (Eric Dumazet) - NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL (Chuck Lever) - net: qrtr: Fix a refcount bug in qrtr_recvmsg() (Ziyang Xuan) - net: qrtr: combine nameservice into main module (Luca Weiss) - wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta (Felix Fietkau) - KVM: s390: pv: fix external interruption loop not always detected (Nico Boehr) - pwm: sprd: Explicitly set .polarity in .get_state() (Uwe Kleine-Konig) - pwm: cros-ec: Explicitly set .polarity in .get_state() (Uwe Kleine-Konig) - Drivers: vmbus: Check for channel allocation before looking up relids (Mohammed Gamal) - gpio: GPIO_REGMAP: select REGMAP instead of depending on it (Randy Dunlap) - bpf: hash map, avoid deadlock with suitable hash mask (Tonghao Zhang) - serial: exar: Add support for Sealevel 7xxxC serial cards (Matthew Howell) - serial: 8250_exar: derive nr_ports from PCI ID for Acces I/O cards (Andy Shevchenko) - iavf/iavf_main: actually log ->src mask when talking about it (Daniil Tatianin) - iavf: return errno code instead of status code (Jacob Keller) - platform/x86: int3472/discrete: Ensure the clk/power enable pins are in output mode (Hans de Goede) - platform/x86: int3472: Split into 2 drivers (Hans de Goede) - RDMA/irdma: Do not request 2-level PBLEs for CQ alloc (Mustafa Ismail) - NFSD: pass range end to vfs_fsync_range() instead of count (Brian Foster) - NFSD: Fix sparse warning (Chuck Lever) - ocfs2: fix memory leak in ocfs2_mount_volume() (Li Zetao) - ocfs2: rewrite error handling of ocfs2_fill_super (Heming Zhao via Ocfs2-devel) - ocfs2: ocfs2_mount_volume does cleanup job before return error (Heming Zhao via Ocfs2-devel) - LTS version: v5.15.106 (Jack Vogel) - x86/PVH: avoid 32-bit build warning when obtaining VGA console info (Jan Beulich) - hsr: ratelimit only when errors are printed (Matthieu Baerts) - libbpf: Fix btf_dump's packed struct determination (Andrii Nakryiko) - selftests/bpf: Add few corner cases to test padding handling of btf_dump (Andrii Nakryiko) - libbpf: Fix BTF-to-C converter's padding logic (Andrii Nakryiko) - selftests/bpf: Test btf dump for struct with padding only fields (Eduard Zingerman) - zonefs: Fix error message in zonefs_file_dio_append() (Damien Le Moal) hrtimer dance to common x86 (Sean Christopherson) - s390/uaccess: add missing earlyclobber annotations to __clear_user() (Heiko Carstens) - KVM: arm64: Disable interrupts while walking userspace PTs (Marc Zyngier) - drm/amd/display: Add DSC Support for Synaptics Cascaded MST Hub (Fangzhi Zuo) - drm/etnaviv: fix reference leak when mmaping imported buffer (Lucas Stach) - rcu: Fix rcu_torture_read ftrace event (Douglas Raillard) - xtensa: fix KASAN report for show_stack (Max Filippov) - ALSA: hda/realtek: Add quirk for Lenovo ZhaoYang CF4620Z (huangwenhui) - ALSA: hda/realtek: Add quirks for some Clevo laptops (Tim Crawford) - ALSA: usb-audio: Fix regression on detection of Roland VS-100 (Takashi Iwai) - ALSA: hda/conexant: Partial revert of a quirk for Lenovo (Takashi Iwai) - NFSv4: Fix hangs when recovering open state after a server reboot (Trond Myklebust) - powerpc: Don't try to copy PPR for task with NULL pt_regs (Jens Axboe) - pinctrl: at91-pio4: fix domain name assignment (Johan Hovold) - pinctrl: amd: Disable and mask interrupts on resume (Kornel Duleba) - net: phy: dp83869: fix default value for tx-/rx-internal-delay (Josua Mayer) - xen/netback: don't do grant copy across page boundary (Juergen Gross) - can: j1939: prevent deadlock by moving j1939_sk_errqueue() (Oleksij Rempel) - zonefs: Always invalidate last cached page on append write (Damien Le Moal) - btrfs: scan device in non-exclusive mode (Anand Jain) - btrfs: fix race between quota disable and quota assign ioctls (Filipe Manana) - Input: goodix - add Lenovo Yoga Book X90F to nine_bytes_report DMI table (Hans de Goede) - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (David Disseldorp) - cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara) - Input: focaltech - use explicitly signed char type (Jason A. Donenfeld) - Input: alps - fix compatibility with -funsigned-char (msizanoen) - iommu/vt-d: Allow zero SAGAW if second-stage not supported (Lu Baolu) - pinctrl: ocelot: Fix alt mode for ocelot (Horatiu Vultur) - net: ethernet: mtk_eth_soc: fix flow block refcounting logic (Felix Fietkau) - net: dsa: mv88e6xxx: Enable IGMP snooping on user ports only (Steffen Batz) - bnxt_en: Add missing 200G link speed reporting (Michael Chan) - bnxt_en: Fix typo in PCI id to device description string mapping (Kalesh AP) - bnxt_en: Fix reporting of test result in ethtool selftest (Kalesh AP) - i40e: fix registers dump after run ethtool adapter self test (Radoslaw Tyl) - net: ipa: compute DMA pool size properly (Alex Elder) - ALSA: ymfpci: Fix BUG_ON in probe function (Tasos Sahanidis) - ALSA: ymfpci: Create card with device-managed snd_devm_card_new() (Tasos Sahanidis) - ice: fix invalid check for empty list in ice_sched_assoc_vsi_to_agg() (Jakob Koschel) - ice: add profile conflict check for AVF FDIR (Junfeng Guo) - smsc911x: avoid PHY being resumed when interface is not up (Wolfram Sang) - net: mvpp2: parser fix PPPoE (Sven Auhagen) - net: mvpp2: parser fix QinQ (Sven Auhagen) - net: mvpp2: classifier flow fix fragmentation flags (Sven Auhagen) - loop: LOOP_CONFIGURE: send uevents for partitions (Alyssa Ross) - loop: suppress uevents while reconfiguring the device (Christoph Hellwig) - s390/vfio-ap: fix memory leak in vfio_ap device driver (Tony Krowiak) - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Ivan Orlov) - platform/x86/intel/pmc: Alder Lake PCH slp_s0_residency fix (Rajvi Jingar) - drm/i915/tc: Fix the ICL PHY ownership check in TC-cold state (Imre Deak) - net: stmmac: don't reject VLANs when IFF_PROMISC is set (Vladimir Oltean) - net/net_failover: fix txq exceeding warning (Faicker Mo) - regulator: Handle deferred clk (Christophe JAILLET) - r8169: fix RTL8168H and RTL8107E rx crc error (ChunHao Lin) - net: dsa: microchip: ksz8863_smi: fix bulk access (Oleksij Rempel) - ptp_qoriq: fix memory leak in probe() (SongJingyi) - scsi: mpt3sas: Don't print sense pool info twice (Jerry Snitselaar) - scsi: megaraid_sas: Fix crash after a double completion (Tomas Henzl) - sfc: ef10: don't overwrite offload features at NIC reset (Inigo Huguet) - SUNRPC: fix shutdown of NFS TCP client socket (Siddharth Kawar) - mtd: rawnand: meson: invalidate cache on polling ECC bit (Arseniy Krasnov) - platform/x86: think-lmi: Add possible_values for ThinkStation (Mark Pearson) - platform/x86: think-lmi: only display possible_values if available (Mark Pearson) - platform/x86: think-lmi: use correct possible_values delimiters (Mark Pearson) - platform/x86: think-lmi: add missing type attribute (Mark Pearson) - ALSA: usb-audio: Fix recursive locking at XRUN during syncing (Takashi Iwai) - mips: bmips: BCM6358: disable RAC flush for TP1 (Alvaro Fernandez Rojas) - ca8210: Fix unsigned mac_len comparison with zero in ca8210_skb_tx() (Harshit Mogalapalli) - tracing: Fix wrong return in kprobe_event_gen_test.c (Anton Gusev) - tools/power turbostat: fix decoding of HWP_STATUS (Antti Laakso) - tools/power turbostat: Fix /dev/cpu_dma_latency warnings (Prarit Bhargava) - fbdev: au1200fb: Fix potential divide by zero (Wei Chen) - fbdev: lxfb: Fix potential divide by zero (Wei Chen) - fbdev: intelfb: Fix potential divide by zero (Wei Chen) - fbdev: nvidia: Fix potential divide by zero (Wei Chen) - sched_getaffinity: don't assume 'cpumask_size()' is fully initialized (Linus Torvalds) - fbdev: tgafb: Fix potential divide by zero (Wei Chen) - ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set() (Kuninori Morimoto) - ALSA: asihpi: check pao in control_message() (Kuninori Morimoto) - net: hsr: Don't log netdev_err message on unknown prp dst node (Kristian Overskeid) - x86/PVH: obtain VGA console info in Dom0 (Jan Beulich) - md: avoid signed overflow in slot_store() (NeilBrown) - ASoC: codecs: tx-macro: Fix for KASAN: slab-out-of-bounds (Ravulapati Vishnu Vardhan Rao) - xfrm: Zero padding when dumping algos and encap (Herbert Xu) - bus: imx-weim: fix branch condition evaluates to a garbage value (Ivan Bornyakov) - ksmbd: don't terminate inactive sessions after a few seconds (Namjae Jeon) - kcsan: avoid passing -g for test (Marco Elver) - kernel: kcsan: kcsan_test: build without structleak plugin (Anders Roxell) - usb: dwc3: gadget: Add 1ms delay after end transfer command without IOC (Wesley Cheng) - usb: dwc3: gadget: move cmd_endtransfer to extra function (Michael Grzeschik) - fsverity: don't drop pagecache at end of FS_IOC_ENABLE_VERITY (Eric Biggers) - LTS version: v5.15.105 (Jack Vogel) - NFSD: fix use-after-free in __nfs42_ssc_open() (Dai Ngo) - ocfs2: fix data corruption after failed write (Jan Kara via Ocfs2-devel) - mm: kfence: fix using kfence_metadata without initialization in show_object() (Muchun Song) - sched/fair: Sanitize vruntime of entity being migrated (Vincent Guittot) - sched/fair: sanitize vruntime of entity being placed (Zhang Qiao) - dm crypt: avoid accessing uninitialized tasklet (Mike Snitzer) - dm crypt: add cond_resched() to dmcrypt_write() (Mikulas Patocka) - dm stats: check for and propagate alloc_percpu failure (Jiasheng Jiang) - i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() (Wei Chen) - firmware: arm_scmi: Fix device node validation for mailbox transport (Cristian Marussi) - tee: amdtee: fix race condition in amdtee_open_session (Rijo Thomas) - riscv: Handle zicsr/zifencei issues between clang and binutils (Nathan Chancellor) - riscv: mm: Fix incorrect ASID argument when flushing TLB (Dylan Jhong) - drm/i915: Preserve crtc_state->inherited during state clearing (Ville Syrjala) - drm/i915/active: Fix missing debug object activation (Nirmoy Das) - drm/amdgpu/nv: Apply ASPM quirk on Intel ADL + AMD Navi (Kai-Heng Feng) - drm/meson: fix missing component unbind on bind errors (Johan Hovold) - drm/bridge: lt8912b: return EPROBE_DEFER if bridge is not found (Matheus Castello) - nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy() (Ryusuke Konishi) - wifi: mac80211: fix qos on mesh interfaces (Felix Fietkau) - ksmbd: return unsupported error on smb1 mount (Namjae Jeon) - ksmbd: return STATUS_NOT_SUPPORTED on unsupported smb2.0 dialect (Namjae Jeon) - ksmbd: set FILE_NAMED_STREAMS attribute in FS_ATTRIBUTE_INFORMATION (Namjae Jeon) - KVM: x86: hyper-v: Avoid calling kvm_make_vcpus_request_mask() with vcpu_mask==NULL (Vitaly Kuznetsov) - kfence: avoid passing -g for test (Marco Elver) - usb: ucsi: Fix NULL pointer deref in ucsi_connector_change() (Hans de Goede) - usb: chipidea: core: fix possible concurrent when switch role (Xu Yang) - usb: chipdea: core: fix return -EINVAL if request role is the same with current role (Xu Yang) - usb: cdnsp: changes PCI Device ID to fix conflict with CNDS3 driver (Pawel Laszczak) - usb: cdnsp: Fixes issue with redundant Status Stage (Pawel Laszczak) - usb: cdns3: Fix issue with using incorrect PCI device function (Pawel Laszczak) - usb: typec: tcpm: fix warning when handle discover_identity message (Xu Yang) - dm thin: fix deadlock when swapping to thin device (Coly Li) - igb: revert rtnl_lock() that causes deadlock (Lin Ma) - arm64: dts: imx8mm-nitrogen-r2: fix WM8960 clock name (Krzysztof Kozlowski) - lockd: set file_lock start and end when decoding nlm4 testargs (Jeff Layton) - fsverity: Remove WQ_UNBOUND from fsverity read workqueue (Nathan Huckleberry) - fscrypt: destroy keyring after security_sb_delete() (Eric Biggers) - mm/slab: Fix undefined init_cache_node_node() for NUMA and !SMP (Geert Uytterhoeven) - efi: sysfb_efi: Fix DMI quirks not working for simpledrm (Hans de Goede) - usb: gadget: u_audio: don't let userspace block driver unbind (Alvin Sipraga) - usb: dwc2: fix a devres leak in hw_enable upon suspend resume (Fabrice Gasnier) - scsi: core: Add BLIST_SKIP_VPD_PAGES for SKhynix H28U74301AMR (Joel Selvaraj) - cifs: print session id while listing open files (Shyam Prasad N) - cifs: empty interface list when server doesn't support query interfaces (Shyam Prasad N) - act_mirred: use the backlog for nested calls to mirred ingress (Davide Caratti) - net/sched: act_mirred: better wording on protection against excessive stack growth (Davide Caratti) - sh: sanitize the flags on sigreturn (Al Viro) - net: usb: qmi_wwan: add Telit 0x1080 composition (Enrico Sau) - net: usb: cdc_mbim: avoid altsetting toggling for Telit FE990 (Enrico Sau) - scsi: storvsc: Handle BlockSize change in Hyper-V VHD/VHDX file (Michael Kelley) - scsi: lpfc: Avoid usage of list iterator variable after loop (Jakob Koschel) - scsi: lpfc: Check kzalloc() in lpfc_sli4_cgn_params_read() (Justin Tee) - scsi: ufs: core: Add soft dependency on governor_simpleondemand (Adrien Thierry) - scsi: hisi_sas: Check devm_add_action() return value (Kang Chen) - scsi: target: iscsi: Fix an error message in iscsi_check_key() (Maurizio Lombardi) - selftests/bpf: check that modifier resolves after pointer (Lorenz Bauer) - m68k: Only force 030 bus error if PC not in exception table (Michael Schmitz) - HID: intel-ish-hid: ipc: Fix potential use-after-free in work function (Reka Norman) - ca8210: fix mac_len negative array access (Alexander Aring) - HID: cp2112: Fix driver not registering GPIO IRQ chip as threaded (Danny Kaehn) - drm/cirrus: NULL-check pipe->plane.state->fb in cirrus_pipe_update() (Alexandr Sapozhnikov) - riscv: Bump COMMAND_LINE_SIZE value to 1024 (Alexandre Ghiti) - ACPI: x86: utils: Add Cezanne to the list for forcing StorageD3Enable (Mario Limonciello) - thunderbolt: Rename shadowed variables bit to interrupt_bit and auto_clear_bit (Tom Rix) - thunderbolt: Use const qualifier for ring_interrupt_index (Mario Limonciello) - thunderbolt: Add missing UNSET_INBOUND_SBTX for retimer access (Gil Fine) - thunderbolt: Disable interrupt auto clear for rings (Mario Limonciello) - thunderbolt: Call tb_check_quirks() after initializing adapters (Mika Westerberg) - thunderbolt: Use scale field when allocating USB3 bandwidth (Mika Westerberg) - uas: Add US_FL_NO_REPORT_OPCODES for JMicron JMS583Gen 2 (Yaroslav Furman) - hwmon (it87): Fix voltage scaling for chips with 10.9mV ADCs (Frank Crawford) - hwmon: fix potential sensor registration fail if of_node is missing (Phinex Hung) - entry/rcu: Check TIF_RESCHED _after_ delayed RCU wake-up (Frederic Weisbecker) - entry: Snapshot thread flags (Mark Rutland) - thread_info: Add helpers to snapshot thread flags (Mark Rutland) - platform/chrome: cros_ec_chardev: fix kernel data leak from ioctl (Tzung-Bi Shih) - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work (Zheng Wang) - Bluetooth: L2CAP: Fix responding with wrong PDU type (Luiz Augusto von Dentz) - Bluetooth: btqcomsmd: Fix command timeout after setting BD address (Stephan Gerhold) - net: mdio: thunder: Add missing fwnode_handle_put() (Liang He) - net: dsa: mt7530: move setting ssc_delta to PHY_INTERFACE_MODE_TRGMII case (Ar?nc UNAL) - net: dsa: mt7530: move lowering TRGMII driving to mt7530_setup() (Ar?nc UNAL) - net: dsa: mt7530: move enabling disabling core clock to mt7530_pll_setup() (Ar?nc UNAL) - gve: Cache link_speed value from device (Joshua Washington) - ksmbd: fix possible refcount leak in smb2_open() (ChenXiaoSong) - ksmbd: add low bound validation to FSCTL_QUERY_ALLOCATED_RANGES (Namjae Jeon) - ksmbd: add low bound validation to FSCTL_SET_ZERO_DATA (Namjae Jeon) - hvc/xen: prevent concurrent accesses to the shared ring (Roger Pau Monne) - nvme-tcp: fix nvme_tcp_term_pdu to match spec (Caleb Sander) - net/sonic: use dma_mapping_error() for error check (Zhang Changzhong) - erspan: do not use skb_mac_header() in ndo_start_xmit() (Eric Dumazet) - atm: idt77252: fix kmemleak when rmmod idt77252 (Li Zetao) - net: dsa: tag_brcm: legacy: fix daisy-chained switches (Alvaro Fernandez Rojas) - net/mlx5: E-Switch, Fix an Oops in error handling code (Dan Carpenter) - net/mlx5: Read the TC mapping of all priorities on ETS query (Maher Sanalla) - net/mlx5: Fix steering rules cleanup (Lama Kayal) - net/mlx5e: Set uplink rep as NETNS_LOCAL (Gavin Li) - bpf: Adjust insufficient default bpf_jit_limit (Daniel Borkmann) - i40e: fix flow director packet filter programming (Radoslaw Tyl) - iavf: fix hang on reboot with ice (Stefan Assmann) - keys: Do not cache key in task struct if key is requested from kernel thread (David Howells) - bootconfig: Fix testcase to increase max node (Masami Hiramatsu (Google)) - octeontx2-vf: Add missing free for alloc_percpu (Jiasheng Jiang) - net/ps3_gelic_net: Use dma_mapping_error (Geoff Levand) - net/ps3_gelic_net: Fix RX sk_buff length (Geoff Levand) - net: qcom/emac: Fix use after free bug in emac_remove due to race condition (Zheng Wang) - drm/i915/gt: perform uc late init after probe error injection (Andrzej Hajda) - net: mdio: fix owner field for mdio buses registered using ACPI (Florian Fainelli) - net: mdio: fix owner field for mdio buses registered using device-tree (Maxime Bizon) - net: phy: Ensure state transitions are processed from phy_stop() (Florian Fainelli) - xirc2ps_cs: Fix use after free bug in xirc2ps_detach (Zheng Wang) - qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info (Daniil Tatianin) - net: usb: smsc95xx: Limit packet length to skb->len (Szymon Heidrich) - net: dsa: b53: mmap: fix device tree support (Alvaro Fernandez Rojas) - scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate() (Yu Kuai) - i2c: hisi: Only use the completion interrupt to finish the transfer (Yicong Yang) - i2c: imx-lpi2c: check only for enabled interrupt flags (Alexander Stein) - igc: fix the validation logic for taprio's gate list (AKASHI Takahiro) - igbvf: Regard vf reset nack as success (Akihiko Odaki) - intel/igbvf: free irq on the error path in igbvf_request_msix() (Gaosheng Cui) - iavf: fix non-tunneled IPv6 UDP packet type and hashing (Alexander Lobakin) - iavf: fix inverted Rx hash condition leading to disabled hash (Alexander Lobakin) - xsk: Add missing overflow check in xdp_umem_reg (Kal Conley) - arm64: dts: imx8mn: specify #sound-dai-cells for SAI nodes (Marek Vasut) - ARM: dts: imx6sl: tolino-shine2hd: fix usbotg1 pinctrl (Peng Fan) - ARM: dts: imx6sll: e60k02: fix usbotg1 pinctrl (Peng Fan) - power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition (Zheng Wang) - power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition (Zheng Wang) - power: supply: bq24190_charger: using pm_runtime_resume_and_get instead of pm_runtime_get_sync (Minghao Chi) - net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() (Hangyu Hua) - trace/hwlat: Do not start per-cpu thread if it is already running (Tero Kristo) - trace/hwlat: make use of the helper function kthread_run_on_cpu() (Cai Huoqing) - kthread: add the helper function kthread_run_on_cpu() (Cai Huoqing) - serial: 8250: ASPEED_VUART: select REGMAP instead of depending on it (Randy Dunlap) - serial: 8250: SERIAL_8250_ASPEED_VUART should depend on ARCH_ASPEED (Geert Uytterhoeven) - tty: serial: fsl_lpuart: fix race on RX DMA shutdown (Alexander Sverdlin) - tty: serial: fsl_lpuart: switch to new dmaengine_terminate_* API (Sherry Sun) - serial: fsl_lpuart: Fix comment typo (Jason Wang) - tracing/hwlat: Replace sched_setaffinity with set_cpus_allowed_ptr (Costa Shulyupin) - perf: fix perf_event_context->time (Song Liu) - perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output (Yang Jihong) - interconnect: qcom: osm-l3: fix icc_onecell_data allocation (Dmitry Baryshkov) - LTS version: v5.15.104 (Jack Vogel) - perf: Fix check before add_event_to_groups() in perf_group_detach() (Budimir Markovic) - HID: uhid: Over-ride the default maximum data buffer value with our own (Lee Jones) - HID: core: Provide new max_buffer_size attribute to over-ride the default (Lee Jones) - PCI/DPC: Await readiness of secondary bus after reset (Lukas Wunner) - PCI: Unify delay handling for reset and resume (Lukas Wunner) - io_uring: avoid null-ptr-deref in io_arm_poll_handler (Fedor Pchelkin) - drm/i915/active: Fix misuse of non-idle barriers as fence trackers (Janusz Krzysztofik) - drm/i915: Don't use stolen memory for ring buffers with LLC (John Harrison) - x86/resctrl: Clear staged_config[] before and after it is used (Shawn Wang) - x86/mm: Fix use of uninitialized buffer in sme_enable() (Nikita Zhandarovich) - x86/mce: Make sure logged MCEs are processed after sysfs update (Yazen Ghannam) - cpuidle: psci: Iterate backwards over list in psci_pd_remove() (Shawn Guo) - net: phy: nxp-c45-tja11xx: fix MII_BASIC_CONFIG_REV bit (Radu Pirea (OSS)) - trace/hwlat: Do not wipe the contents of per-cpu thread data (Tero Kristo) - fbdev: stifb: Provide valid pixelclock and add fb_check_var() checks (Helge Deller) - mmc: sdhci_am654: lower power-on failed message severity (Francesco Dolcini) - mm/userfaultfd: propagate uffd-wp bit when PTE-mapping the huge zeropage (David Hildenbrand) - ice: avoid bonding causing auxiliary plug/unplug under RTNL lock (Dave Ertman) - nvme-pci: add NVME_QUIRK_BOGUS_NID for Netac NV3000 (Elmer Miroslav Mosher Golovin) - ftrace: Fix invalid address access in lookup_rec() when index is 0 (Chen Zhongjin) - mptcp: fix lockdep false positive in mptcp_pm_nl_create_listen_socket() (Paolo Abeni) - mptcp: avoid setting TCP_CLOSE state twice (Matthieu Baerts) - mptcp: add ro_after_init for tcp{,v6}_prot_override (Geliang Tang) - mptcp: fix possible deadlock in subflow_error_report (Paolo Abeni) - drm/amd/pm: Fix sienna cichlid incorrect OD volage after resume (Blazej Szczygiel) - drm/sun4i: fix missing component unbind on bind errors (Johan Hovold) - drm/shmem-helper: Remove another errant put in error path (Dmitry Osipenko) - riscv: asid: Fixup stale TLB entry cause application crash (Guo Ren) - Revert 'riscv: mm: notify remote harts about mmu cache updates' (Sergey Matyukevich) - ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro (Hamidreza H. Fard) - ALSA: hda: intel-dsp-config: add MTL PCI id (Bard Liao) - cifs: Fix smb2_set_path_size() (Volker Lendecke) - tracing: Make tracepoint lockdep check actually test something (Steven Rostedt (Google)) - tracing: Check field value in hist_field_name() (Steven Rostedt (Google)) - tracing: Make splice_read available again (Sung-hun Kim) - interconnect: exynos: fix node leak in probe PM QoS error path (Johan Hovold) - interconnect: fix mem leak when freeing nodes (Johan Hovold) - s390/ipl: add missing intersection check to ipl_report handling (Sven Schnelle) - firmware: xilinx: don't make a sleepable memory allocation from an atomic context (Roman Gushchin) - serial: 8250_fsl: fix handle_irq locking (Johan Hovold) - serial: 8250_em: Fix UART port type (Biju Das) - tty: serial: fsl_lpuart: skip waiting for transmission complete when UARTCTRL_SBK is asserted (Sherry Sun) - ext4: fix possible double unlock when moving a directory (Theodore Ts'o) - drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes (Alex Hung) - sh: intc: Avoid spurious sizeof-pointer-div warning (Michael Karcher) - net/9p: fix bug in client create for .L (Eric Van Hensbergen) - drm/amdkfd: Fix an illegal memory access (Qu Huang) - ext4: fix task hung in ext4_xattr_delete_inode (Baokun Li) - ext4: update s_journal_inum if it changes after journal replay (Baokun Li) - ext4: fail ext4_iget if special inode unallocated (Baokun Li) - jffs2: correct logic when creating a hole in jffs2_write_begin (Yifei Liu) - mmc: atmel-mci: fix race between stop command and start of next command (Tobias Schramm) - media: m5mols: fix off-by-one loop termination error (Linus Torvalds) - hwmon: (ltc2992) Set can_sleep flag for GPIO chip (Lars-Peter Clausen) - hwmon: (adm1266) Set can_sleep flag for GPIO chip (Lars-Peter Clausen) - kconfig: Update config changed flag before calling callback (Jurica Vukadin) - hwmon: tmp512: drop of_match_ptr for ID table (Krzysztof Kozlowski) - hwmon: (ucd90320) Add minimum delay between bus accesses (Lars-Peter Clausen) - hwmon: (ina3221) return prober error code (Marcus Folkesson) - hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition (Zheng Wang) - hwmon: (adt7475) Fix masking of hysteresis registers (Tony O'Brien) - hwmon: (adt7475) Display smoothing attributes in correct order (Tony O'Brien) - bonding: restore bond's IFF_SLAVE flag if a non-eth dev enslave fails (Nikolay Aleksandrov) - bonding: restore IFF_MASTER/SLAVE flags on bond enslave ether type change (Nikolay Aleksandrov) - ethernet: sun: add check for the mdesc_grab() (Liang He) - qed/qed_mng_tlv: correctly zero out ->min instead of ->hour (Daniil Tatianin) - selftests: net: devlink_port_split.py: skip test if no suitable device available (Po-Hsu Lin) - net/iucv: Fix size of interrupt data (Alexandra Winter) - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (Szymon Heidrich) - ipv4: Fix incorrect table ID in IOCTL path (Ido Schimmel) - sh_eth: avoid PHY being resumed when interface is not up (Wolfram Sang) - ravb: avoid PHY being resumed when interface is not up (Wolfram Sang) - net: dsa: mv88e6xxx: fix max_mtu of 1492 on 6165, 6191, 6220, 6250, 6290 (Vladimir Oltean) - ice: xsk: disable txq irq before flushing hw (Maciej Fijalkowski) - block: sunvdc: add check for mdesc_grab() returning NULL (Liang He) - nvmet: avoid potential UAF in nvmet_req_complete() (Damien Le Moal) - nvme: fix handling single range discard request (Ming Lei) - block: null_blk: Fix handling of fake timeout request (Damien Le Moal) - drm/bridge: Fix returned array size name for atomic_get_input_bus_fmts kdoc (Liu Ying) - net: usb: smsc75xx: Limit packet length to skb->len (Szymon Heidrich) - net/smc: fix deadlock triggered by cancel_delayed_work_syn() (Wenjia Zhang) - nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition (Zheng Wang) - net: phy: smsc: bail out in lan87xx_read_status if genphy_read_status fails (Heiner Kallweit) - net: tunnels: annotate lockless accesses to dev->needed_headroom (Eric Dumazet) - loop: Fix use-after-free issues (Bart Van Assche) - net: dsa: mt7530: set PLL frequency and trgmii only when trgmii is used (Ar?nc UNAL) - net: dsa: mt7530: remove now incorrect comment regarding port 5 (Ar?nc UNAL) - qed/qed_dev: guard against a possible division by zero (Daniil Tatianin) - net/smc: fix NULL sndbuf_desc in smc_cdc_tx_handler() (D. Wythe) - drm/i915/psr: Use calculated io and fast wake lines (Jouni Hogander) - drm/i915/display: clean up comments (Tom Rix) - drm/i915/display/psr: Handle plane and pipe restrictions at every page flip (Jose Roberto de Souza) - drm/i915/display/psr: Use drm damage helpers to calculate plane damaged area (Jose Roberto de Souza) - drm/i915/display: Workaround cursor left overs with PSR2 selective fetch enabled (Jose Roberto de Souza) - PCI: s390: Fix use-after-free of PCI resources with per-function hotplug (Niklas Schnelle) - vdpa_sim: set last_used_idx as last_avail_idx in vdpasim_queue_ready (Eugenio Perez) - vdpa_sim: not reset state in vdpasim_queue_ready (Eugenio Perez) - i40e: Fix kernel crash during reboot when adapter is in recovery mode (Ivan Vecera) - ipvlan: Make skb->skb_iif track skb->dev for l3s mode (Jianguo Wu) - nfc: pn533: initialize struct pn533_out_arg properly (Fedor Pchelkin) - tcp: tcp_make_synack() can be called from process context (Breno Leitao) - scsi: core: Fix a procfs host directory removal regression (Bart Van Assche) - netfilter: nft_redir: correct value of inet type .maxattrs (Jeremy Sowden) - netfilter: nft_redir: correct length for loading protocol registers (Jeremy Sowden) - netfilter: nft_masq: correct length for loading protocol registers (Jeremy Sowden) - netfilter: nft_nat: correct length for loading protocol registers (Jeremy Sowden) - ALSA: hda: Match only Intel devices with CONTROLLER_IN_GPU() (Bjorn Helgaas) - scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add() (Wenchao Hao) - docs: Correct missing 'd_' prefix for dentry_operations member d_weak_revalidate (Glenn Washburn) - clk: HI655X: select REGMAP instead of depending on it (Randy Dunlap) - drm/meson: fix 1px pink line on GXM when scaling video overlay (Christian Hewitt) - cifs: Move the in_send statistic to __smb_send_rqst() (Zhang Xiaoxu) - drm/panfrost: Don't sync rpm suspension after mmu flushing (Dmitry Osipenko) - xfrm: Allow transport-mode states with AF_UNSPEC selector (Herbert Xu) - net: mana: Fix accessing freed irq affinity_hint (Haiyang Zhang) [Orabug: 35097498] - net: mana: Assign interrupts to CPUs based on NUMA nodes (Saurabh Sengar) [Orabug: 35097498] - crypto: qat - drop log level of msg in get_instance_node() (Giovanni Cabiddu) [Orabug: 35177771] - crypto: qat - add resubmit logic for decompression (Giovanni Cabiddu) [Orabug: 35177771] - crypto: acomp - define max size for destination (Giovanni Cabiddu) [Orabug: 35177771] - crypto: qat - enable deflate for QAT GEN4 (Giovanni Cabiddu) [Orabug: 35177771] - crypto: qat - expose deflate through acomp api for QAT GEN2 (Giovanni Cabiddu) [Orabug: 35177771] - crypto: qat - rename and relocate GEN2 config function (Giovanni Cabiddu) [Orabug: 35177771] - crypto: qat - relocate qat_algs_alloc_flags() (Giovanni Cabiddu) [Orabug: 35177771] - crypto: qat - relocate backlog related structures (Giovanni Cabiddu) [Orabug: 35177771] - crypto: qat - extend buffer list interface (Giovanni Cabiddu) [Orabug: 35177771] - crypto: qat - generalize crypto request buffers (Giovanni Cabiddu) [Orabug: 35177771] - crypto: qat - change bufferlist logic interface (Giovanni Cabiddu) [Orabug: 35177771] - crypto: qat - rename bufferlist functions (Giovanni Cabiddu) [Orabug: 35177771] - crypto: qat - relocate bufferlist logic (Giovanni Cabiddu) [Orabug: 35177771] - crypto: qat - fix error return code in adf_probe (Wang Yufen) [Orabug: 35177771] - crypto: qat - expose device state through sysfs for 4xxx (Giovanni Cabiddu) [Orabug: 35177771] - crypto: qat - honor CRYPTO_TFM_REQ_MAY_SLEEP flag (Giovanni Cabiddu) [Orabug: 35177771] - crypto: qat - fix initialization of pfvf rts_map_msg structures (Giovanni Cabiddu) [Orabug: 35177771] - crypto: qat - fix initialization of pfvf cap_msg structures (Giovanni Cabiddu) [Orabug: 35177771] - crypto: qat - enable power management for QAT GEN4 (Wojciech Ziemba) [Orabug: 35177771] - crypto: qat - move and rename GEN4 error register definitions (Wojciech Ziemba) [Orabug: 35177771] - crypto: qat - add misc workqueue (Wojciech Ziemba) [Orabug: 35177771] - crypto: qat - fix access to PFVF interrupt registers for GEN4 (Giovanni Cabiddu) [Orabug: 35177771] - crypto: qat - fix a signedness bug in get_service_enabled() (Dan Carpenter) [Orabug: 35177771] - crypto: qat - fix definition of ring reset results (Giovanni Cabiddu) [Orabug: 35177771] - crypto: qat - add support for compression for 4xxx (Tomasz Kowalik) [Orabug: 35177771] - crypto: qat - allow detection of dc capabilities for 4xxx (Giovanni Cabiddu) [Orabug: 35177771] - crypto: qat - add PFVF support to enable the reset of ring pairs (Marco Chiappero) [Orabug: 35177771] - crypto: qat - add PFVF support to the GEN4 host driver (Marco Chiappero) [Orabug: 35177771] - crypto: qat - config VFs based on ring-to-svc mapping (Marco Chiappero) [Orabug: 35177771] - crypto: qat - exchange ring-to-service mappings over PFVF (Marco Chiappero) [Orabug: 35177771] - crypto: qat - support fast ACKs in the PFVF protocol (Marco Chiappero) [Orabug: 35177771] - crypto: qat - exchange device capabilities over PFVF (Marco Chiappero) [Orabug: 35177771] - crypto: qat - introduce support for PFVF block messages (Marco Chiappero) [Orabug: 35177771] - crypto: qat - store the ring-to-service mapping (Marco Chiappero) [Orabug: 35177771] - crypto: qat - store the PFVF protocol version of the endpoints (Marco Chiappero) [Orabug: 35177771] - crypto: qat - improve the ACK timings in PFVF send (Marco Chiappero) [Orabug: 35177771] - crypto: qat - leverage read_poll_timeout in PFVF send (Marco Chiappero) [Orabug: 35177771] - crypto: qat - leverage bitfield.h utils for PFVF messages (Marco Chiappero) [Orabug: 35177771] - crypto: qat - abstract PFVF messages with struct pfvf_message (Marco Chiappero) [Orabug: 35177771] - crypto: qat - set PFVF_MSGORIGIN just before sending (Marco Chiappero) [Orabug: 35177771] - crypto: qat - make PFVF send and receive direction agnostic (Marco Chiappero) [Orabug: 35177771] - crypto: qat - make PFVF message construction direction agnostic (Marco Chiappero) [Orabug: 35177771] - crypto: qat - add the adf_get_pmisc_base() helper function (Marco Chiappero) [Orabug: 35177771] - crypto: qat - support the reset of ring pairs on PF (Marco Chiappero) [Orabug: 35177771] - crypto: qat - extend crypto capability detection for 4xxx (Giovanni Cabiddu) [Orabug: 35177771] - crypto: qat - get compression extended capabilities (Giovanni Cabiddu) [Orabug: 35177771] - crypto: qat - improve logging of PFVF messages (Marco Chiappero) [Orabug: 35177771] - crypto: qat - fix VF IDs in PFVF log messages (Marco Chiappero) [Orabug: 35177771] - crypto: qat - do not rely on min version (Marco Chiappero) [Orabug: 35177771] - crypto: qat - refactor pfvf version request messages (Marco Chiappero) [Orabug: 35177771] - crypto: qat - pass the PF2VF responses back to the callers (Marco Chiappero) [Orabug: 35177771] - crypto: qat - use enums for PFVF protocol codes (Marco Chiappero) [Orabug: 35177771] - crypto: qat - reorganize PFVF protocol definitions (Marco Chiappero) [Orabug: 35177771] - crypto: qat - reorganize PFVF code (Marco Chiappero) [Orabug: 35177771] - crypto: qat - abstract PFVF receive logic (Giovanni Cabiddu) [Orabug: 35177771] - crypto: qat - abstract PFVF send function (Marco Chiappero) [Orabug: 35177771] - crypto: qat - differentiate between pf2vf and vf2pf offset (Marco Chiappero) [Orabug: 35177771] - crypto: qat - add pfvf_ops (Marco Chiappero) [Orabug: 35177771] - crypto: qat - relocate PFVF disabled function (Giovanni Cabiddu) [Orabug: 35177771] - crypto: qat - relocate PFVF VF related logic (Marco Chiappero) [Orabug: 35177771] - crypto: qat - relocate PFVF PF related logic (Marco Chiappero) [Orabug: 35177771] - crypto: qat - handle retries due to collisions in adf_iov_putmsg() (Marco Chiappero) [Orabug: 35177771] - crypto: qat - split PFVF message decoding from handling (Marco Chiappero) [Orabug: 35177771] - crypto: qat - re-enable interrupts for legacy PFVF messages (Giovanni Cabiddu) [Orabug: 35177771] - crypto: qat - change PFVF ACK behaviour (Giovanni Cabiddu) [Orabug: 35177771] - crypto: qat - move interrupt code out of the PFVF handler (Marco Chiappero) [Orabug: 35177771] - crypto: qat - move VF message handler to adf_vf2pf_msg.c (Marco Chiappero) [Orabug: 35177771] - crypto: qat - move vf2pf interrupt helpers (Giovanni Cabiddu) [Orabug: 35177771] - crypto: qat - refactor PF top half for PFVF (Marco Chiappero) [Orabug: 35177771] - crypto: qat - fix undetected PFVF timeout in ACK loop (Giovanni Cabiddu) [Orabug: 35177771] - crypto: qat - do not handle PFVF sources for qat_4xxx (Giovanni Cabiddu) [Orabug: 35177771] - crypto: testmgr - Only disable migration in crypto_disable_simd_for_test() (Sebastian Andrzej Siewior) [Orabug: 35177771] - crypto: qat - share adf_enable_pf2vf_comms() from adf_pf2vf_msg.c (Marco Chiappero) [Orabug: 35177771] - crypto: qat - extract send and wait from adf_vf2pf_request_version() (Marco Chiappero) [Orabug: 35177771] - crypto: qat - add VF and PF wrappers to common send function (Marco Chiappero) [Orabug: 35177771] - crypto: qat - rename pfvf collision constants (Marco Chiappero) [Orabug: 35177771] - crypto: qat - move pfvf collision detection values (Marco Chiappero) [Orabug: 35177771] - crypto: qat - make pfvf send message direction agnostic (Marco Chiappero) [Orabug: 35177771] - crypto: qat - use hweight for bit counting (Giovanni Cabiddu) [Orabug: 35177771] - crypto: qat - remove duplicated logic across GEN2 drivers (Marco Chiappero) [Orabug: 35177771] - crypto: qat - fix handling of VF to PF interrupts (Marco Chiappero) [Orabug: 35177771] - crypto: qat - remove unneeded packed attribute (Giovanni Cabiddu) [Orabug: 35177771] - Revert 'crypto: qat - make pfvf send message direction agnostic' (Thomas Tai) [Orabug: 35177771] - Revert 'crypto: qat - fix undetected PFVF timeout in ACK loop' (Thomas Tai) [Orabug: 35177771] - uek: kabi: Add with_kabichk flag to control kABI checking (Saeed Mirzamohammadi) [Orabug: 35241564] - rds: Fix incorrect error pointer reference (William Kucharski) [Orabug: 35315449] - Revert 'attr: use consistent sgid stripping checks' (Sherry Yang) [Orabug: 35335373] [5.15.0-102.103.1] - Revert 'iommu: Force iommu shutdown on panic' (Boris Ostrovsky) [Orabug: 35317719] - perf/arm-cmn: Add more bits to child node address offset field (Ilkka Koskinen) [Orabug: 35289157] - char: misc: Increase the maximum number of dynamic misc devices to 1048448 (D Scott Phillips) [Orabug: 35289110] - net/rds: use appropriate return code while dropping a connection (Praveen Kumar Kannoju) [Orabug: 35279326] - mm, hugepages: add hugetlb vma mremap() test (Mina Almasry) [Orabug: 35176740] - mm: hugetlb: considering PMD sharing when flushing cache/TLBs (Baolin Wang) [Orabug: 35176740] - mm: mremap: fix sign for EFAULT error return value (Niels Dossche) [Orabug: 35176740] - mm/hugetlb: fix kernel crash with hugetlb mremap (Aneesh Kumar K.V) [Orabug: 35176740] - hugetlbfs: flush before unlock on move_hugetlb_page_tables() (Nadav Amit) [Orabug: 35176740] - hugetlb: fix hugetlb cgroup refcounting during mremap (Bui Quang Minh) [Orabug: 35176740] - mm, hugepages: add mremap() support for hugepage backed vma (Mina Almasry) [Orabug: 35176740] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-32233 cpe:/a:oracle:linux:8::UEKR7 cpe:/o:oracle:linux:9::baseos_latest cpe:/o:oracle:linux:9:2:baseos_patch cpe:/a:oracle:linux:8::developer_UEKR7 cpe:/a:oracle:linux:9::UEKR7 cpe:/a:oracle:linux:9::developer_UEKR7 Oracle Linux 7 Oracle Linux 8 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-30456 CVE-2023-32233 cpe:/o:oracle:linux:8::baseos_latest cpe:/a:oracle:linux:8::UEKR6 cpe:/a:oracle:linux:7::UEKR6 cpe:/o:oracle:linux:8:8:baseos_patch Oracle Linux 7 [5.4.17-2136.320.7.el7] - selftests: fib_tests: mute cleanup error message (Po-Hsu Lin) - KVM: arm64: PMU: Align chained counter implementation with architecture pseudocode (Marc Zyngier) [Orabug: 35449815] - KVM: arm64: Filter out v8.1+ events on v8.0 HW (Marc Zyngier) [Orabug: 35449815] - KVM: arm64: Add kvm_vcpu_has_pmu() helper (Marc Zyngier) [Orabug: 35449815] - KVM: arm64: Fix some documentation build warnings (Mauro Carvalho Chehab) [Orabug: 35449815] - KVM: arm64: Document PMU filtering API (Marc Zyngier) [Orabug: 35449815] - KVM: arm64: Mask out filtered events in PCMEID{0,1}_EL1 (Marc Zyngier) [Orabug: 35449815] - KVM: arm64: Add PMU event filtering infrastructure (Marc Zyngier) [Orabug: 35449815] - KVM: arm64: Use event mask matching architecture revision (Marc Zyngier) [Orabug: 35449815] - KVM: arm64: Refactor PMU attribute error handling (Marc Zyngier) [Orabug: 35449815] - KVM: arm64: Move virt/kvm/arm to arch/arm64 (Marc Zyngier) [Orabug: 35449815] - KVM: arm/arm64: Fix up includes for trace.h (Jeremy Cline) [Orabug: 35449815] - perf/core: Optimize perf_init_event() for TYPE_SOFTWARE (Liang, Kan) [Orabug: 35449815] - Revert 'net/mlx5: Fix unpublish devlink parameters' (Si-Wei Liu) [Orabug: 35431929] - Revert 'net/mlx5: Support enable_eth devlink dev param' (Si-Wei Liu) [Orabug: 35431929] - Revert 'net/mlx5: Support enable_rdma devlink dev param' (Si-Wei Liu) [Orabug: 35431929] - Revert 'net/mlx5: Support enable_vnet devlink dev param' (Si-Wei Liu) [Orabug: 35431929] [5.4.17-2136.320.6.el7] - ipmi:ssif: Add send_retries increment (Corey Minyard) - Revert 'ubifs: dirty_cow_znode: Fix memleak in error handling path' (Zhihao Cheng) - Revert 'Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work' (Liu Jian) - scsi: target: iscsi: Handle abort for WRITE_PENDING cmds (Dmitry Bogdanov) [Orabug: 34136927] - scsi: target: iscsit: Fix TAS handling during conn cleanup (Mike Christie) [Orabug: 34136927] - scsi: target: Fix multiple LUN_RESET handling (Mike Christie) [Orabug: 34136927] - scsi: target: iscsit: Free cmds before session free (Dmitry Bogdanov) [Orabug: 34136927] - scsi: target: iscsit: Stop/wait on cmds during conn close (Mike Christie) [Orabug: 34136927] - scsi: target: iscsit: isert: Alloc per conn cmd counter (Mike Christie) [Orabug: 34136927] - scsi: target: Pass in cmd counter to use during cmd setup (Mike Christie) [Orabug: 34136927] - scsi: target: Move cmd counter allocation (Mike Christie) [Orabug: 34136927] - scsi: target: Move sess cmd counter to new struct (Mike Christie) [Orabug: 34136927] - kernfs: change kernfs_rename_lock into a read-write lock. (Imran Khan) [Orabug: 35257585] - kernfs: Use a per-fs rwsem to protect per-fs list of kernfs_super_info. (Imran Khan) [Orabug: 35257585] - kernfs: Introduce separate rwsem to protect inode attributes. (Imran Khan) [Orabug: 35257585] - debugfs: allow access blktrace trace files in lockdown mode (Junxiao Bi) [Orabug: 35262590] - rds: Add time_spent and payload info for send_cqe handler (Rohit Nair) [Orabug: 35302535] - netfilter: nf_tables: deactivate anonymous set from preparation phase (Pablo Neira Ayuso) [Orabug: 35382084] {CVE-2023-32233} - SUNRPC: remove the maximum number of retries in call_bind_status (Dai Ngo) [Orabug: 35397526] - net/rds: Fix copy&paste error (Gerd Rausch) [Orabug: 35416948] - rds: Fix incorrect error pointer reference (William Kucharski) [Orabug: 35315450] [5.4.17-2136.320.5.el7] - vdpa/mlx5: Extend driver support for new features (Eli Cohen) [Orabug: 35210546] - vdpa/mlx5: Make VIRTIO_NET_F_MRG_RXBUF off by default (Eli Cohen) [Orabug: 35210546] - vdpa_sim: set last_used_idx as last_avail_idx in vdpasim_queue_ready (Eugenio Perez) [Orabug: 35210546] - vhost-vdpa: free iommu domain after last use during cleanup (Gautam Dawar) [Orabug: 35210546] - vdpa/mlx5: should not activate virtq object when suspended (Si-Wei Liu) [Orabug: 35210546] - vp_vdpa: fix the crash in hot unplug with vp_vdpa (Cindy Lu) [Orabug: 35210546] - vdpa/mlx5: support device features provisioning (Si-Wei Liu) [Orabug: 35210546] - vdpa/mlx5: make MTU/STATUS presence conditional on feature bits (Si-Wei Liu) [Orabug: 35210546] - vdpa: validate device feature provisioning against supported class (Si-Wei Liu) [Orabug: 35210546] - vdpa: validate provisioned device features against specified attribute (Si-Wei Liu) [Orabug: 35210546] - vdpa: conditionally read STATUS in config space (Si-Wei Liu) [Orabug: 35210546] - vdpa: fix improper error message when adding vdpa dev (Si-Wei Liu) [Orabug: 35210546] - vdpa/mlx5: Initialize CVQ iotlb spinlock (Eli Cohen) [Orabug: 35210546] - vdpa/mlx5: Don't clear mr struct on destroy MR (Eli Cohen) [Orabug: 35210546] - vdpa/mlx5: Directly assign memory key (Eli Cohen) [Orabug: 35210546] - vhost-vdpa: print warning when vhost_vdpa_alloc_domain fails (Alvaro Karsz) [Orabug: 35210546] - vdpa: Fix a couple of spelling mistakes in some messages (Colin Ian King) [Orabug: 35210546] - vdpa: mlx5: support per virtqueue dma device (Jason Wang) [Orabug: 35210546] - vdpa: set dma mask for vDPA device (Jason Wang) [Orabug: 35210546] - virtio-vdpa: support per vq dma device (Jason Wang) [Orabug: 35210546] - vdpa: introduce get_vq_dma_device() (Jason Wang) [Orabug: 35210546] - virtio_ring: per virtqueue dma device (Jason Wang) [Orabug: 35210546] - vdpa_sim: get rid of DMA ops (Jason Wang) [Orabug: 35210546] - vdpa_sim_net: vendor satistics (Jason Wang) [Orabug: 35210546] - vdpa_sim: support vendor statistics (Jason Wang) [Orabug: 35210546] - vdpasim: customize allocation size (Jason Wang) [Orabug: 35210546] - vdpa_sim: switch to use __vdpa_alloc_device() (Jason Wang) [Orabug: 35210546] - vdpa_sim: use weak barriers (Jason Wang) [Orabug: 35210546] - vdpa_sim: Implement resume vdpa op (Sebastien Boeuf) [Orabug: 35210546] - vhost-vdpa: uAPI to resume the device (Sebastien Boeuf) [Orabug: 35210546] - vhost-vdpa: Introduce RESUME backend feature bit (Sebastien Boeuf) [Orabug: 35210546] - vdpa: Add resume operation (Sebastien Boeuf) [Orabug: 35210546] - vdpa_sim_net: Offer VIRTIO_NET_F_STATUS (Eugenio Perez) [Orabug: 35210546] - vdpa/mlx5: Move some definitions to a new header file (Eli Cohen) [Orabug: 35210546] - vdpa_sim: not reset state in vdpasim_queue_ready (Eugenio Perez) [Orabug: 35210546] - vdpa_sim_net: should not drop the multicast/broadcast packet (Cindy Lu) [Orabug: 35210546] - vdpasim: fix memory leak when freeing IOTLBs (Jason Wang) [Orabug: 35210546] - vdpa: conditionally fill max max queue pair for stats (Jason Wang) [Orabug: 35210546] - vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove (Rong Wang) [Orabug: 35210546] - vhost_vdpa: fix the crash in unmap a large memory (Cindy Lu) [Orabug: 35210546] - vdpa_sim: fix vringh initialization in vdpasim_queue_ready() (Stefano Garzarella) [Orabug: 35210546] - vhost-vdpa: fix an iotlb memory leak (Stefano Garzarella) [Orabug: 35210546] - vringh: fix range used in iotlb_translate() (Stefano Garzarella) [Orabug: 35210546] - vdpa_sim: fix possible memory leak in vdpasim_net_init() and vdpasim_blk_init() (ruanjinjie) [Orabug: 35210546] - RDMA/mlx5: remove variable i (Colin Ian King) [Orabug: 35210546] - vdpa/mlx5: Avoid overwriting CVQ iotlb (Eli Cohen) [Orabug: 35210546] - vdpa/mlx5: Avoid using reslock in event_handler (Eli Cohen) [Orabug: 35210546] - vdpa/mlx5: Fix wrong mac address deletion (Eli Cohen) [Orabug: 35210546] - vdpa/mlx5: Return error on vlan ctrl commands if not supported (Eli Cohen) [Orabug: 35210546] - vdpa/mlx5: Fix rule forwarding VLAN to TIR (Eli Cohen) [Orabug: 35210546] - vdpa: merge functionally duplicated dev_features attributes (Si-Wei Liu) [Orabug: 35210546] - vDPA: conditionally read MTU and MAC in dev cfg space (Zhu Lingshan) [Orabug: 35210546] - vDPA: fix spars cast warning in vdpa_dev_net_mq_config_fill (Zhu Lingshan) [Orabug: 35210546] - vDPA: check virtio device features to detect MQ (Zhu Lingshan) [Orabug: 35210546] - vDPA: check VIRTIO_NET_F_RSS for max_virtqueue_paris's presence (Zhu Lingshan) [Orabug: 35210546] - vDPA: only report driver features if FEATURES_OK is set (Zhu Lingshan) [Orabug: 35210546] - vDPA: allow userspace to query features of a vDPA device (Zhu Lingshan) [Orabug: 35210546] - vp_vdpa: support feature provisioning (Jason Wang) [Orabug: 35210546] - vdpa_sim_net: support feature provisioning (Jason Wang) [Orabug: 35210546] - vdpa: device feature provisioning (Jason Wang) [Orabug: 35210546] - virtio: drop vp_legacy_set_queue_size (Michael S. Tsirkin) [Orabug: 35210546] - vdpa/mlx5: Fix MQ to support non power of two num queues (Eli Cohen) [Orabug: 35210546] - vdpa/mlx5: Fix possible uninitialized return value (Eli Cohen) [Orabug: 35210546] - vdpa/mlx5: Support different address spaces for control and data (Eli Cohen) [Orabug: 35210546] - vdpa/mlx5: Implement susupend virtqueue callback (Eli Cohen) [Orabug: 35210546] - vdpa/mlx5: Use eth_broadcast_addr() to assign broadcast address (Xu Qiang) [Orabug: 35210546] - vdpa_sim: Implement suspend vdpa op (Eugenio Perez) [Orabug: 35210546] - vhost-vdpa: uAPI to suspend the device (Eugenio Perez) [Orabug: 35210546] - vhost-vdpa: introduce SUSPEND backend feature bit (Eugenio Perez) [Orabug: 35210546] - vdpa: Add suspend operation (Eugenio Perez) [Orabug: 35210546] - vhost-vdpa: Call ida_simple_remove() when failed (Bo Liu) [Orabug: 35210546] - vDPA: fix 'cast to restricted le16' warnings in vdpa.c (Zhu Lingshan) [Orabug: 35210546] - vDPA: !FEATURES_OK should not block querying device config space (Zhu Lingshan) [Orabug: 35210546] - vdpa_sim: use max_iotlb_entries as a limit in vhost_iotlb_init (Stefano Garzarella) [Orabug: 35210546] - vringh: iterate on iotlb_translate to handle large translations (Stefano Garzarella) [Orabug: 35210546] - vhost-vdpa: call vhost_vdpa_cleanup during the release (Stefano Garzarella) [Orabug: 35210546] - vdpa/mlx5: Initialize CVQ vringh only once (Eli Cohen) [Orabug: 35210546] - vdpa/mlx5: Update Control VQ callback information (Eli Cohen) [Orabug: 35210546] - vdpa/mlx5: Add RX MAC VLAN filter support (Eli Cohen) [Orabug: 35210546] - vdpa/mlx5: Remove flow counter from steering (Eli Cohen) [Orabug: 35210546] - vhost-vdpa: return -EFAULT on copy_to_user() failure (Dan Carpenter) [Orabug: 35210546] - vdpasim: Off by one in vdpasim_set_group_asid() (Dan Carpenter) [Orabug: 35210546] - vdpasim: allow to enable a vq repeatedly (Eugenio Perez) [Orabug: 35210546] - vdpa/vp_vdpa : add vdpa tool support in vp_vdpa (Cindy Lu) [Orabug: 35210546] - virtio: pci: Fix an error handling path in vp_modern_probe() (Christophe JAILLET) [Orabug: 35210546] - vdpasim: control virtqueue support (Gautam Dawar) [Orabug: 35210546] - vdpa_sim: filter destination mac address (Gautam Dawar) [Orabug: 35210546] - vdpa_sim: factor out buffer completion logic (Gautam Dawar) [Orabug: 35210546] - vdpa_sim: advertise VIRTIO_NET_F_MTU (Gautam Dawar) [Orabug: 35210546] - vhost-vdpa: support ASID based IOTLB API (Gautam Dawar) [Orabug: 35210546] - vhost-vdpa: introduce uAPI to set group ASID (Gautam Dawar) [Orabug: 35210546] - vhost-vdpa: uAPI to get virtqueue group id (Gautam Dawar) [Orabug: 35210546] - vhost-vdpa: introduce uAPI to get the number of address spaces (Gautam Dawar) [Orabug: 35210546] - vhost-vdpa: introduce uAPI to get the number of virtqueue groups (Gautam Dawar) [Orabug: 35210546] - vhost-vdpa: introduce asid based IOTLB (Gautam Dawar) [Orabug: 35210546] - vhost: support ASID in IOTLB API (Gautam Dawar) [Orabug: 35210546] - vhost_iotlb: split out IOTLB initialization (Gautam Dawar) [Orabug: 35210546] - vdpa: introduce config operations for associating ASID to a virtqueue group (Gautam Dawar) [Orabug: 35210546] - vdpa: multiple address spaces support (Gautam Dawar) [Orabug: 35210546] - vdpa: introduce virtqueue groups (Gautam Dawar) [Orabug: 35210546] - vhost-vdpa: switch to use vhost-vdpa specific IOTLB (Gautam Dawar) [Orabug: 35210546] - vhost-vdpa: passing iotlb to IOMMU mapping helpers (Gautam Dawar) [Orabug: 35210546] - virtio-vdpa: don't set callback if virtio doesn't need it (Gautam Dawar) [Orabug: 35210546] - vhost: move the backend feature bits to vhost_types.h (Gautam Dawar) [Orabug: 35210546] - vdpa/mlx5: Use readers/writers semaphore instead of mutex (Eli Cohen) [Orabug: 35210546] - vdpa/mlx5: Add support for reading descriptor statistics (Eli Cohen) [Orabug: 35210546] - net/vdpa: Use readers/writers semaphore instead of cf_mutex (Eli Cohen) [Orabug: 35210546] - net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex (Eli Cohen) [Orabug: 35210546] - vdpa: Add support for querying vendor statistics (Eli Cohen) [Orabug: 35210546] - vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit (Eli Cohen) [Orabug: 35210546] - net/mlx5: Support enable_vnet devlink dev param (Parav Pandit) [Orabug: 35210546] - net/mlx5: Support enable_rdma devlink dev param (Parav Pandit) [Orabug: 35210546] - net/mlx5: Support enable_eth devlink dev param (Parav Pandit) [Orabug: 35210546] - net/mlx5: Fix unpublish devlink parameters (Parav Pandit) [Orabug: 35210546] - devlink: Add APIs to publish, unpublish individual parameter (Parav Pandit) [Orabug: 35210546] - devlink: Add API to register and unregister single parameter (Parav Pandit) [Orabug: 35210546] - devlink: Create a helper function for one parameter registration (Parav Pandit) [Orabug: 35210546] - devlink: Add new 'enable_vnet' generic device param (Parav Pandit) [Orabug: 35210546] - devlink: Add new 'enable_rdma' generic device param (Parav Pandit) [Orabug: 35210546] - devlink: Add new 'enable_eth' generic device param (Parav Pandit) [Orabug: 35210546] - virtio-net: Introduce hash report feature (Yuri Benditovich) [Orabug: 35210546] - virtio-net: Introduce RSS receive steering feature (Yuri Benditovich) [Orabug: 35210546] - virtio-net: Introduce extended RSC feature (Yuri Benditovich) [Orabug: 35210546] - kprobes: Free kretprobe_instance with RCU callback (Masami Hiramatsu) [Orabug: 35333569] - kprobes: Remove NMI context check (Masami Hiramatsu) [Orabug: 35333569] - sparc: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu) [Orabug: 35333569] - sh: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu) [Orabug: 35333569] - s390: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu) [Orabug: 35333569] - powerpc: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu) [Orabug: 35333569] - parisc: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu) [Orabug: 35333569] - mips: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu) [Orabug: 35333569] - arm64: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu) [Orabug: 35333569] - arm: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu) [Orabug: 35333569] - x86/kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu) [Orabug: 35333569] - kprobes: Add generic kretprobe trampoline handler (Masami Hiramatsu) [Orabug: 35333569] - uek-rpm: Install dtb files under /lib/modules (Dave Kleikamp) [Orabug: 35338877] - Revert 'rds: ib: Fix non-parenthetical mutex/semaphore use' (Hakon Bugge) [Orabug: 35377400] - net: rtnetlink: add linkprop commands to add and delete alternative ifnames (Samasth Norway Ananda) [Orabug: 33664332] - rds: slight code cleanup of RDS checksum code (William Kucharski) [Orabug: 35262486] [Orabug: 35262487] - uek-rds: Add csum to protect bcopy payload end-to-end (William Kucharski) [Orabug: 33579925] [Orabug: 35206620] - Revert 'scsi: megaraid_sas: Skip syncing the RAID map on older controllers' (Sherry Yang) [Orabug: 35285969] - uek-rpm: aarch64: embedded: Disable MARVELL_FWLOG (Henry Willard) [Orabug: 35369953] - iommu/vt-d: Simplify check in identity_mapping() (Joerg Roedel) [Orabug: 35379426] - iommu/vt-d: Remove deferred_attach_domain() (Joerg Roedel) [Orabug: 35379426] - iommu/vt-d: Do deferred attachment in iommu_need_mapping() (Joerg Roedel) [Orabug: 35379426] - iommu/vt-d: Move deferred device attachment into helper function (Joerg Roedel) [Orabug: 35379426] - iommu/vt-d: Add attach_deferred() helper (Joerg Roedel) [Orabug: 35379426] - iommu/vt-d: Refactor find_domain() helper (Lu Baolu) [Orabug: 35379426] - Revert 'cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset' (Tom Hromatka) [Orabug: 35365180] [5.4.17-2136.320.4.el7] - LTS tag: v5.4.242 (Sherry Yang) - ASN.1: Fix check for strdup() success (Ekaterina Orlova) - iio: adc: at91-sama5d2_adc: fix an error code in at91_adc_allocate_trigger() (Dan Carpenter) - pwm: meson: Explicitly set .polarity in .get_state() (Uwe Kleine-Konig) - xfs: fix forkoff miscalculation related to XFS_LITINO(mp) (Gao Xiang) - sctp: Call inet6_destroy_sock() via sk->sk_destruct(). (Kuniyuki Iwashima) - dccp: Call inet6_destroy_sock() via sk->sk_destruct(). (Kuniyuki Iwashima) - inet6: Remove inet6_destroy_sock() in sk->sk_prot->destroy(). (Kuniyuki Iwashima) - tcp/udp: Call inet6_destroy_sock() in IPv6 sk->sk_destruct(). (Kuniyuki Iwashima) - udp: Call inet6_destroy_sock() in setsockopt(IPV6_ADDRFORM). (Kuniyuki Iwashima) - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Ritesh Harjani) - Revert 'ext4: fix use-after-free in ext4_xattr_set_entry' (Tudor Ambarus) - x86/purgatory: Don't generate debug info for purgatory.ro (Pingfan Liu) - MIPS: Define RUNTIME_DISCARD_EXIT in LD script (Jiaxun Yang) - mmc: sdhci_am654: Set HIGH_SPEED_ENA for SDR12 and SDR25 (Bhavya Kapoor) - memstick: fix memory leak if card device is never registered (Greg Kroah-Hartman) - nilfs2: initialize unused bytes in segment summary blocks (Ryusuke Konishi) - iio: light: tsl2772: fix reading proximity-diodes from device tree (Brian Masney) - xen/netback: use same error messages for same errors (Juergen Gross) - nvme-tcp: fix a possible UAF when failing to allocate an io queue (Sagi Grimberg) - s390/ptrace: fix PTRACE_GET_LAST_BREAK error handling (Heiko Carstens) - net: dsa: b53: mmap: add phy ops (Alvaro Fernandez Rojas) - scsi: core: Improve scsi_vpd_inquiry() checks (Damien Le Moal) - scsi: megaraid_sas: Fix fw_crash_buffer_show() (Tomas Henzl) - selftests: sigaltstack: fix -Wuninitialized (Nick Desaulniers) - Input: i8042 - add quirk for Fujitsu Lifebook A574/H (Jonathan Denose) - f2fs: Fix f2fs_truncate_partial_nodes ftrace event (Douglas Raillard) - e1000e: Disable TSO on i219-LM card to increase speed (Sebastian Basierski) - bpf: Fix incorrect verifier pruning due to missing register precision taints (Daniel Borkmann) - mlxfw: fix null-ptr-deref in mlxfw_mfa2_tlv_next() (Nikita Zhandarovich) - i40e: fix i40e_setup_misc_vector() error handling (Aleksandr Loktionov) - i40e: fix accessing vsi->active_filters without holding lock (Aleksandr Loktionov) - netfilter: nf_tables: fix ifdef to also consider nf_tables=m (Florian Westphal) - virtio_net: bugfix overflow inside xdp_linearize_page() (Xuan Zhuo) - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Gwangun Jung) - regulator: fan53555: Explicitly include bits header (Cristian Ciocaltea) - netfilter: br_netfilter: fix recent physdev match breakage (Florian Westphal) - arm64: dts: meson-g12-common: specify full DMC range (Marc Gonzalez) - ARM: dts: rockchip: fix a typo error for rk3288 spdif node (Jianqun Xu) - LTS tag: v5.4.241 (Sherry Yang) - xfs: force log and push AIL to clear pinned inodes when aborting mount (Darrick J. Wong) - xfs: consider shutdown in bmapbt cursor delete assert (Brian Foster) - xfs: shut down the filesystem if we screw up quota reservation (Darrick J. Wong) - xfs: report corruption only as a regular error (Darrick J. Wong) - xfs: set inode size after creating symlink (Jeffrey Mitchell) - xfs: fix up non-directory creation in SGID directories (Christoph Hellwig) - xfs: remove the di_version field from struct icdinode (Christoph Hellwig) - xfs: simplify a check in xfs_ioctl_setattr_check_cowextsize (Christoph Hellwig) - xfs: simplify di_flags2 inheritance in xfs_ialloc (Christoph Hellwig) - xfs: only check the superblock version for dinode size calculation (Christoph Hellwig) - xfs: add a new xfs_sb_version_has_v3inode helper (Christoph Hellwig) - xfs: remove the kuid/kgid conversion wrappers (Christoph Hellwig) - xfs: remove the icdinode di_uid/di_gid members (Christoph Hellwig) - xfs: ensure that the inode uid/gid match values match the icdinode ones (Christoph Hellwig) - xfs: merge the projid fields in struct xfs_icdinode (Christoph Hellwig) - coresight-etm4: Fix for() loop drvdata->nr_addr_cmp range bug (Steve Clevenger) - watchdog: sbsa_wdog: Make sure the timeout programming is within the limits (George Cherian) - i2c: ocores: generate stop condition after timeout in polling mode (Gregor Herburger) - ubi: Fix deadlock caused by recursively holding work_sem (ZhaoLong Wang) - mtd: ubi: wl: Fix a couple of kernel-doc issues (Lee Jones) - asymmetric_keys: log on fatal failures in PE/pkcs7 (Robbie Harwood) - verify_pefile: relax wrapper length check (Robbie Harwood) - drm: panel-orientation-quirks: Add quirk for Lenovo Yoga Book X90F (Hans de Goede) - efi: sysfb_efi: Add quirk for Lenovo Yoga Book X91F/L (Hans de Goede) - i2c: imx-lpi2c: clean rx/tx buffers upon new message (Alexander Stein) - power: supply: cros_usbpd: reclassify 'default case!' as debug (Grant Grundler) - net: macb: fix a memory corruption in extended buffer descriptor mode (Roman Gushchin) - udp6: fix potential access to stale information (Eric Dumazet) - RDMA/core: Fix GID entry ref leak when create_ah fails (Saravanan Vajravel) - sctp: fix a potential overflow in sctp_ifwdtsn_skip (Xin Long) - qlcnic: check pci_reset_function result (Denis Plotnikov) - niu: Fix missing unwind goto in niu_alloc_channels() (Harshit Mogalapalli) - 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition (Zheng Wang) - mtd: rawnand: stm32_fmc2: remove unsupported EDO mode (Christophe Kerello) - mtd: rawnand: meson: fix bitmask for length in command word (Arseniy Krasnov) - mtdblock: tolerate corrected bit-flips (Bang Li) - btrfs: fix fast csum implementation detection (Christoph Hellwig) - btrfs: print checksum type and implementation at mount time (David Sterba) - Bluetooth: Fix race condition in hidp_session_thread (Min Li) - Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} (Luiz Augusto von Dentz) - ALSA: hda/sigmatel: fix S/PDIF out on Intel D*45* motherboards (Oswald Buddenhagen) - ALSA: firewire-tascam: add missing unwind goto in snd_tscm_stream_start_duplex() (Xu Biang) - ALSA: i2c/cs8427: fix iec958 mixer control deactivation (Oswald Buddenhagen) - ALSA: hda/sigmatel: add pin overrides for Intel DP45SG motherboard (Oswald Buddenhagen) - ALSA: emu10k1: fix capture interrupt handler unlinking (Oswald Buddenhagen) - Revert 'pinctrl: amd: Disable and mask interrupts on resume' (Kornel Duleba) - irqdomain: Fix mapping-creation race (Johan Hovold) - irqdomain: Refactor __irq_domain_alloc_irqs() (Johan Hovold) - irqdomain: Look for existing mapping only once (Johan Hovold) - mm/swap: fix swap_info_struct race between swapoff and get_swap_pages() (Rongwei Wang) - ring-buffer: Fix race while reader and writer are on the same page (Zheng Yejian) - drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path (Boris Brezillon) - tracing: Free error logs of tracing instances (Steven Rostedt (Google)) - can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory access (Oleksij Rempel) - ftrace: Mark get_lock_parent_ip() __always_inline (John Keeping) - perf/core: Fix the same task check in perf_event_set_output (Kan Liang) - ALSA: hda/realtek: Add quirk for Clevo X370SNW (Jeremy Soller) - nilfs2: fix sysfs interface lifetime (Ryusuke Konishi) - nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread() (Ryusuke Konishi) - tty: serial: fsl_lpuart: avoid checking for transfer complete when UARTCTRL_SBK is asserted in lpuart32_tx_empty (Sherry Sun) - tty: serial: sh-sci: Fix Rx on RZ/G2L SCI (Biju Das) - tty: serial: sh-sci: Fix transmit end interrupt handler (Biju Das) - iio: dac: cio-dac: Fix max DAC write value check for 12-bit (William Breathitt Gray) - iio: adc: ti-ads7950: Set can_sleep flag for GPIO chip (Lars-Peter Clausen) - USB: serial: option: add Quectel RM500U-CN modem (Bj?rn Mork) - USB: serial: option: add Telit FE990 compositions (Enrico Sau) - usb: typec: altmodes/displayport: Fix configure initial pin assignment (RD Babiera) - USB: serial: cp210x: add Silicon Labs IFS-USB-DATACABLE IDs (Kees Jan Koster) - xhci: also avoid the XHCI_ZERO_64B_REGS quirk with a passthrough iommu (D Scott Phillips) - NFSD: callback request does not use correct credential for AUTH_SYS (Dai Ngo) - sunrpc: only free unix grouplist after RCU settles (Jeff Layton) - gpio: davinci: Add irq chip flag to skip set wake (Dhruva Gole) - ipv6: Fix an uninit variable access bug in __ip6_make_skb() (Ziyang Xuan) - sctp: check send stream number after wait_for_sndbuf (Xin Long) - net: don't let netpoll invoke NAPI if in xmit context (Jakub Kicinski) - icmp: guard against too small mtu (Eric Dumazet) - wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta (Felix Fietkau) - pwm: sprd: Explicitly set .polarity in .get_state() (Uwe Kleine-Konig) - pwm: cros-ec: Explicitly set .polarity in .get_state() (Uwe Kleine-Konig) - pinctrl: amd: disable and mask interrupts on probe (Sachi King) - pinctrl: amd: Use irqchip template (Linus Walleij) - smb3: fix problem with null cifs super block with previous patch (Steve French) - treewide: Replace DECLARE_TASKLET() with DECLARE_TASKLET_OLD() (Kees Cook) - Revert 'treewide: Replace DECLARE_TASKLET() with DECLARE_TASKLET_OLD()' (Tom Saeger) - cgroup/cpuset: Wake up cpuset_attach_wq tasks in cpuset_cancel_attach() (Waiman Long) - x86/PCI: Add quirk for AMD XHCI controller that loses MSI-X state in D3hot (Basavaraj Natikar) - ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size (Zhihao Cheng) - net_sched: prevent NULL dereference if default qdisc setup failed (Pratyush Yadav) - scsi: ses: Handle enclosure with just a primary component gracefully (Jiri Kosina) - LTS tag: v5.4.240 (Sherry Yang) - gfs2: Always check inode size of inline inodes (Andreas Gruenbacher) - firmware: arm_scmi: Fix device node validation for mailbox transport (Cristian Marussi) - net: sched: fix race condition in qdisc_graft() (Eric Dumazet) - net_sched: add __rcu annotation to netdev->qdisc (Eric Dumazet) - ext4: fix kernel BUG in 'ext4_write_inline_data_end()' (Ye Bin) - btrfs: scan device in non-exclusive mode (Anand Jain) - s390/uaccess: add missing earlyclobber annotations to __clear_user() (Heiko Carstens) - drm/etnaviv: fix reference leak when mmaping imported buffer (Lucas Stach) - ALSA: usb-audio: Fix regression on detection of Roland VS-100 (Takashi Iwai) - ALSA: hda/conexant: Partial revert of a quirk for Lenovo (Takashi Iwai) - NFSv4: Fix hangs when recovering open state after a server reboot (Trond Myklebust) - pinctrl: at91-pio4: fix domain name assignment (Johan Hovold) - xen/netback: don't do grant copy across page boundary (Juergen Gross) - Input: goodix - add Lenovo Yoga Book X90F to nine_bytes_report DMI table (Hans de Goede) - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (David Disseldorp) - cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara) - Input: focaltech - use explicitly signed char type (Jason A. Donenfeld) - Input: alps - fix compatibility with -funsigned-char (msizanoen) - pinctrl: ocelot: Fix alt mode for ocelot (Horatiu Vultur) - net: mvneta: make tx buffer array agnostic (Lorenzo Bianconi) - net: dsa: mv88e6xxx: Enable IGMP snooping on user ports only (Steffen Batz) - bnxt_en: Fix typo in PCI id to device description string mapping (Kalesh AP) - i40e: fix registers dump after run ethtool adapter self test (Radoslaw Tyl) - s390/vfio-ap: fix memory leak in vfio_ap device driver (Tony Krowiak) - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Ivan Orlov) - net/net_failover: fix txq exceeding warning (Faicker Mo) - regulator: Handle deferred clk (Christophe JAILLET) - regulator: fix spelling mistake 'Cant' -> 'Can't' (Colin Ian King) - ptp_qoriq: fix memory leak in probe() (SongJingyi) - scsi: megaraid_sas: Fix crash after a double completion (Tomas Henzl) - mtd: rawnand: meson: invalidate cache on polling ECC bit (Arseniy Krasnov) - mips: bmips: BCM6358: disable RAC flush for TP1 (Alvaro Fernandez Rojas) - dma-mapping: drop the dev argument to arch_sync_dma_for_* (Christoph Hellwig) - ca8210: Fix unsigned mac_len comparison with zero in ca8210_skb_tx() (Harshit Mogalapalli) - fbdev: au1200fb: Fix potential divide by zero (Wei Chen) - fbdev: lxfb: Fix potential divide by zero (Wei Chen) - fbdev: intelfb: Fix potential divide by zero (Wei Chen) - fbdev: nvidia: Fix potential divide by zero (Wei Chen) - sched_getaffinity: don't assume 'cpumask_size()' is fully initialized (Linus Torvalds) - fbdev: tgafb: Fix potential divide by zero (Wei Chen) - ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set() (Kuninori Morimoto) - ALSA: asihpi: check pao in control_message() (Kuninori Morimoto) - md: avoid signed overflow in slot_store() (NeilBrown) - bus: imx-weim: fix branch condition evaluates to a garbage value (Ivan Bornyakov) - fsverity: don't drop pagecache at end of FS_IOC_ENABLE_VERITY (Eric Biggers) - ocfs2: fix data corruption after failed write (Jan Kara via Ocfs2-devel) - tun: avoid double free in tun_free_netdev (George Kennedy) - sched/fair: Sanitize vruntime of entity being migrated (Vincent Guittot) - sched/fair: sanitize vruntime of entity being placed (Zhang Qiao) - dm crypt: add cond_resched() to dmcrypt_write() (Mikulas Patocka) - dm stats: check for and propagate alloc_percpu failure (Jiasheng Jiang) - i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() (Wei Chen) - nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy() (Ryusuke Konishi) - wifi: mac80211: fix qos on mesh interfaces (Felix Fietkau) - usb: chipidea: core: fix possible concurrent when switch role (Xu Yang) - usb: chipdea: core: fix return -EINVAL if request role is the same with current role (Xu Yang) - usb: cdns3: Fix issue with using incorrect PCI device function (Pawel Laszczak) - dm thin: fix deadlock when swapping to thin device (Coly Li) - igb: revert rtnl_lock() that causes deadlock (Lin Ma) - fsverity: Remove WQ_UNBOUND from fsverity read workqueue (Nathan Huckleberry) - usb: gadget: u_audio: don't let userspace block driver unbind (Alvin Sipraga) - scsi: core: Add BLIST_SKIP_VPD_PAGES for SKhynix H28U74301AMR (Joel Selvaraj) - cifs: empty interface list when server doesn't support query interfaces (Shyam Prasad N) - sh: sanitize the flags on sigreturn (Al Viro) - net: usb: qmi_wwan: add Telit 0x1080 composition (Enrico Sau) - net: usb: cdc_mbim: avoid altsetting toggling for Telit FE990 (Enrico Sau) - scsi: lpfc: Avoid usage of list iterator variable after loop (Jakob Koschel) - scsi: ufs: core: Add soft dependency on governor_simpleondemand (Adrien Thierry) - scsi: target: iscsi: Fix an error message in iscsi_check_key() (Maurizio Lombardi) - selftests/bpf: check that modifier resolves after pointer (Lorenz Bauer) - m68k: Only force 030 bus error if PC not in exception table (Michael Schmitz) - ca8210: fix mac_len negative array access (Alexander Aring) - riscv: Bump COMMAND_LINE_SIZE value to 1024 (Alexandre Ghiti) - thunderbolt: Use const qualifier for ring_interrupt_index (Mario Limonciello) - uas: Add US_FL_NO_REPORT_OPCODES for JMicron JMS583Gen 2 (Yaroslav Furman) - scsi: qla2xxx: Perform lockless command completion in abort path (Nilesh Javali) - hwmon (it87): Fix voltage scaling for chips with 10.9mV ADCs (Frank Crawford) - platform/chrome: cros_ec_chardev: fix kernel data leak from ioctl (Tzung-Bi Shih) - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work (Zheng Wang) - Bluetooth: btqcomsmd: Fix command timeout after setting BD address (Stephan Gerhold) - net: mdio: thunder: Add missing fwnode_handle_put() (Liang He) - hvc/xen: prevent concurrent accesses to the shared ring (Roger Pau Monne) - nvme-tcp: fix nvme_tcp_term_pdu to match spec (Caleb Sander) - net/sonic: use dma_mapping_error() for error check (Zhang Changzhong) - erspan: do not use skb_mac_header() in ndo_start_xmit() (Eric Dumazet) - atm: idt77252: fix kmemleak when rmmod idt77252 (Li Zetao) - net/mlx5: Read the TC mapping of all priorities on ETS query (Maher Sanalla) - bpf: Adjust insufficient default bpf_jit_limit (Daniel Borkmann) - keys: Do not cache key in task struct if key is requested from kernel thread (David Howells) - net/ps3_gelic_net: Use dma_mapping_error (Geoff Levand) - net/ps3_gelic_net: Fix RX sk_buff length (Geoff Levand) - net: qcom/emac: Fix use after free bug in emac_remove due to race condition (Zheng Wang) - xirc2ps_cs: Fix use after free bug in xirc2ps_detach (Zheng Wang) - qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info (Daniil Tatianin) - net: usb: smsc95xx: Limit packet length to skb->len (Szymon Heidrich) - scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate() (Yu Kuai) - i2c: imx-lpi2c: check only for enabled interrupt flags (Alexander Stein) - igbvf: Regard vf reset nack as success (Akihiko Odaki) - intel/igbvf: free irq on the error path in igbvf_request_msix() (Gaosheng Cui) - iavf: fix non-tunneled IPv6 UDP packet type and hashing (Alexander Lobakin) - iavf: fix inverted Rx hash condition leading to disabled hash (Alexander Lobakin) - power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition (Zheng Wang) - net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() (Hangyu Hua) - LTS tag: v5.4.239 (Sherry Yang) - selftests: Fix the executable permissions for fib_tests.sh (Rishabh Bhatnagar) - LTS tag: v5.4.238 (Sherry Yang) - HID: uhid: Over-ride the default maximum data buffer value with our own (Lee Jones) - HID: core: Provide new max_buffer_size attribute to over-ride the default (Lee Jones) - PCI: Unify delay handling for reset and resume (Lukas Wunner) - s390/ipl: add missing intersection check to ipl_report handling (Sven Schnelle) - serial: 8250_em: Fix UART port type (Biju Das) - drm/i915: Don't use stolen memory for ring buffers with LLC (John Harrison) - x86/mm: Fix use of uninitialized buffer in sme_enable() (Nikita Zhandarovich) - fbdev: stifb: Provide valid pixelclock and add fb_check_var() checks (Helge Deller) - ftrace: Fix invalid address access in lookup_rec() when index is 0 (Chen Zhongjin) - tracing: Make tracepoint lockdep check actually test something (Steven Rostedt (Google)) - tracing: Check field value in hist_field_name() (Steven Rostedt (Google)) - interconnect: fix mem leak when freeing nodes (Johan Hovold) - tty: serial: fsl_lpuart: skip waiting for transmission complete when UARTCTRL_SBK is asserted (Sherry Sun) - ext4: fix possible double unlock when moving a directory (Theodore Ts'o) - sh: intc: Avoid spurious sizeof-pointer-div warning (Michael Karcher) - drm/amdkfd: Fix an illegal memory access (Qu Huang) - ext4: fix task hung in ext4_xattr_delete_inode (Baokun Li) - ext4: fail ext4_iget if special inode unallocated (Baokun Li) - jffs2: correct logic when creating a hole in jffs2_write_begin (Yifei Liu) - mmc: atmel-mci: fix race between stop command and start of next command (Tobias Schramm) - media: m5mols: fix off-by-one loop termination error (Linus Torvalds) - hwmon: (ina3221) return prober error code (Marcus Folkesson) - hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition (Zheng Wang) - hwmon: (adt7475) Fix masking of hysteresis registers (Tony O'Brien) - hwmon: (adt7475) Display smoothing attributes in correct order (Tony O'Brien) - ethernet: sun: add check for the mdesc_grab() (Liang He) - net/iucv: Fix size of interrupt data (Alexandra Winter) - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (Szymon Heidrich) - block: sunvdc: add check for mdesc_grab() returning NULL (Liang He) - nvmet: avoid potential UAF in nvmet_req_complete() (Damien Le Moal) - net: usb: smsc75xx: Limit packet length to skb->len (Szymon Heidrich) - nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition (Zheng Wang) - net: phy: smsc: bail out in lan87xx_read_status if genphy_read_status fails (Heiner Kallweit) - net: tunnels: annotate lockless accesses to dev->needed_headroom (Eric Dumazet) - qed/qed_dev: guard against a possible division by zero (Daniil Tatianin) - i40e: Fix kernel crash during reboot when adapter is in recovery mode (Ivan Vecera) - ipvlan: Make skb->skb_iif track skb->dev for l3s mode (Jianguo Wu) - nfc: pn533: initialize struct pn533_out_arg properly (Fedor Pchelkin) - tcp: tcp_make_synack() can be called from process context (Breno Leitao) - scsi: core: Fix a procfs host directory removal regression (Bart Van Assche) - scsi: core: Fix a comment in function scsi_host_dev_release() (Xiang Chen) - netfilter: nft_redir: correct value of inet type .maxattrs (Jeremy Sowden) - ALSA: hda: Match only Intel devices with CONTROLLER_IN_GPU() (Bjorn Helgaas) - ALSA: hda: Add Intel DG2 PCI ID and HDMI codec vid (Kai Vehmanen) - ALSA: hda: Add Alderlake-S PCI ID and HDMI codec vid (Kai Vehmanen) - ALSA: hda - controller is in GPU on the DG1 (Kai Vehmanen) - ALSA: hda - add Intel DG1 PCI and HDMI ids (Kai Vehmanen) - scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add() (Wenchao Hao) - docs: Correct missing 'd_' prefix for dentry_operations member d_weak_revalidate (Glenn Washburn) - clk: HI655X: select REGMAP instead of depending on it (Randy Dunlap) - drm/meson: fix 1px pink line on GXM when scaling video overlay (Christian Hewitt) - cifs: Move the in_send statistic to __smb_send_rqst() (Zhang Xiaoxu) - drm/panfrost: Don't sync rpm suspension after mmu flushing (Dmitry Osipenko) - xfrm: Allow transport-mode states with AF_UNSPEC selector (Herbert Xu) - ext4: fix cgroup writeback accounting with fs-layer encryption (Eric Biggers) - LTS tag: v5.4.237 (Sherry Yang) - s390/dasd: add missing discipline function (Stefan Haberland) - UML: define RUNTIME_DISCARD_EXIT (Masahiro Yamada) - sh: define RUNTIME_DISCARD_EXIT (Tom Saeger) - s390: define RUNTIME_DISCARD_EXIT to fix link error with GNU ld < 2.36 (Masahiro Yamada) - powerpc/vmlinux.lds: Don't discard .rela* for relocatable builds (Michael Ellerman) - powerpc/vmlinux.lds: Define RUNTIME_DISCARD_EXIT (Michael Ellerman) - arch: fix broken BuildID for arm64 and riscv (Masahiro Yamada) - x86, vmlinux.lds: Add RUNTIME_DISCARD_EXIT to generic DISCARDS (H.J. Lu) - drm/i915: Don't use BAR mappings for ring buffers with LLC (John Harrison) - ipmi:watchdog: Set panic count to proper value on a panic (Corey Minyard) - ipmi/watchdog: replace atomic_add() and atomic_sub() (Yejune Deng) - media: ov5640: Fix analogue gain control (Paul Elder) - PCI: Add SolidRun vendor ID (Alvaro Karsz) - macintosh: windfarm: Use unsigned type for 1-bit bitfields (Nathan Chancellor) - alpha: fix R_ALPHA_LITERAL reloc for large modules (Edward Humes) - MIPS: Fix a compilation issue (xurui) - ext4: Fix deadlock during directory rename (Jan Kara) - riscv: Use READ_ONCE_NOCHECK in imprecise unwinding stack mode (Alexandre Ghiti) - net/smc: fix fallback failed while sendmsg with fastopen (D. Wythe) - scsi: megaraid_sas: Update max supported LD IDs to 240 (Chandrakanth Patil) - btf: fix resolving BTF_KIND_VAR after ARRAY, STRUCT, UNION, PTR (Lorenz Bauer) - netfilter: tproxy: fix deadlock due to missing BH disable (Florian Westphal) - bnxt_en: Avoid order-5 memory allocation for TPA data (Michael Chan) - net: caif: Fix use-after-free in cfusbl_device_notify() (Shigeru Yoshida) - net: lan78xx: fix accessing the LAN7800's internal phy specific registers from the MAC driver (Yuiko Oshino) - net: usb: lan78xx: Remove lots of set but unused 'ret' variables (Lee Jones) - selftests: nft_nat: ensuring the listening side is up before starting the client (Hangbin Liu) - ila: do not generate empty messages in ila_xlat_nl_cmd_get_mapping() (Eric Dumazet) - nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties (Kang Chen) - drm/msm/a5xx: fix setting of the CP_PREEMPT_ENABLE_LOCAL register (Dmitry Baryshkov) - ext4: Fix possible corruption when moving a directory (Jan Kara) - scsi: core: Remove the /proc/scsi/ directory earlier (Bart Van Assche) - cifs: Fix uninitialized memory read in smb3_qfs_tcon() (Volker Lendecke) - SMB3: Backup intent flag missing from some more ops (Amir Goldstein) - iommu/vt-d: Fix PASID directory pointer coherency (Jacob Pan) - irqdomain: Fix domain registration race (Marc Zyngier) - irqdomain: Change the type of 'size' in __irq_domain_add() to be consistent (Bixuan Cui) - ipmi:ssif: Add a timer between request retries (Corey Minyard) - ipmi:ssif: Increase the message retry time (Corey Minyard) - ipmi:ssif: Remove rtc_us_timer (Corey Minyard) - ipmi:ssif: resend_msg() cannot fail (Corey Minyard) - ipmi:ssif: make ssif_i2c_send() void (Liguang Zhang) - iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter (Gavrilov Ilia) - iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and ivrs_acpihid options (Kim Phillips) - iommu/amd: Add PCI segment support for ivrs_[ioapic/hpet/acpihid] commands (Suravee Suthikulpanit) - nfc: change order inside nfc_se_io error path (Fedor Pchelkin) - ext4: zero i_disksize when initializing the bootloader inode (Zhihao Cheng) - ext4: fix WARNING in ext4_update_inline_data (Ye Bin) - ext4: move where set the MAY_INLINE_DATA flag is set (Ye Bin) - ext4: fix another off-by-one fsmap error on 1k block filesystems (Darrick J. Wong) - ext4: fix RENAME_WHITEOUT handling for inline directories (Eric Whitney) - drm/connector: print max_requested_bpc in state debugfs (Harry Wentland) - x86/CPU/AMD: Disable XSAVES on AMD family 0x17 (Andrew Cooper) - fs: prevent out-of-bounds array speculation when closing a file descriptor (Theodore Ts'o) - LTS tag: v5.4.236 (Sherry Yang) - staging: rtl8192e: Remove call_usermodehelper starting RadioPower.sh (Philipp Hortmann) - staging: rtl8192e: Remove function ..dm_check_ac_dc_power calling a script (Philipp Hortmann) - wifi: cfg80211: Partial revert 'wifi: cfg80211: Fix use after free for wext' (Hector Martin) - LTS tag: v5.4.235 (Sherry Yang) - dt-bindings: rtc: sun6i-a31-rtc: Loosen the requirements on the clocks (Maxime Ripard) - media: uvcvideo: Fix race condition with usb_kill_urb (Ricardo Ribalda) - media: uvcvideo: Provide sync and async uvc_ctrl_status_event (Ricardo Ribalda) - tcp: Fix listen() regression in 5.4.229. (Kuniyuki Iwashima) - Bluetooth: hci_sock: purge socket queues in the destruct() callback (Nguyen Dinh Phi) - x86/resctl: fix scheduler confusion with 'current' (Linus Torvalds) - x86/resctrl: Apply READ_ONCE/WRITE_ONCE to task_struct.{rmid,closid} (Valentin Schneider) - net: tls: avoid hanging tasks on the tx_lock (Jakub Kicinski) - phy: rockchip-typec: Fix unsigned comparison with less than zero (Jiapeng Chong) - PCI: Add ACS quirk for Wangxun NICs (Mengyuan Lou) - kernel/fail_function: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman) - usb: uvc: Enumerate valid values for color matching (Daniel Scally) - USB: ene_usb6250: Allocate enough memory for full object (Kees Cook) - usb: host: xhci: mvebu: Iterate over array indexes instead of using pointer math (Kees Cook) - iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_config_word() (Harshit Mogalapalli) - iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_status_word() (Harshit Mogalapalli) - tools/iio/iio_utils:fix memory leak (Yulong Zhang) - mei: bus-fixup:upon error print return values of send and receive (Alexander Usyskin) - tty: serial: fsl_lpuart: disable the CTS when send break signal (Sherry Sun) - tty: fix out-of-bounds access in tty_driver_lookup_tty() (Sven Schnelle) - staging: emxx_udc: Add checks for dma_alloc_coherent() (Yuan Can) - media: uvcvideo: Silence memcpy() run-time false positive warnings (Kees Cook) - media: uvcvideo: Quirk for autosuspend in Logitech B910 and C910 (Ricardo Ribalda) - media: uvcvideo: Handle errors from calls to usb_string (Guenter Roeck) - media: uvcvideo: Handle cameras with invalid descriptors (Ricardo Ribalda) - mfd: arizona: Use pm_runtime_resume_and_get() to prevent refcnt leak (Liang He) - firmware/efi sysfb_efi: Add quirk for Lenovo IdeaPad Duet 3 (Darrell Kavanagh) - tracing: Add NULL checks for buffer in ring_buffer_free_read_page() (Jia-Ju Bai) - thermal: intel: BXT_PMIC: select REGMAP instead of depending on it (Randy Dunlap) - thermal: intel: quark_dts: fix error pointer dereference (Dan Carpenter) - scsi: ipr: Work around fortify-string warning (Arnd Bergmann) - rtc: sun6i: Always export the internal oscillator (Samuel Holland) - rtc: sun6i: Make external 32k oscillator optional (Jernej Skrabec) - tcp: tcp_check_req() can be called from process context (Eric Dumazet) - ARM: dts: spear320-hmi: correct STMPE GPIO compatible (Krzysztof Kozlowski) - net/sched: act_sample: fix action bind logic (Pedro Tammela) - nfc: fix memory leak of se_io context in nfc_genl_se_io (Fedor Pchelkin) - net/mlx5: Geneve, Fix handling of Geneve object id as error code (Maor Dickman) - 9p/rdma: unmap receive dma buffer in rdma_request()/post_recv() (Zhengchao Shao) - 9p/xen: fix connection sequence (Juergen Gross) - 9p/xen: fix version parsing (Juergen Gross) - net: fix __dev_kfree_skb_any() vs drop monitor (Eric Dumazet) - sctp: add a refcnt in sctp_stream_priorities to avoid a nested loop (Xin Long) - ipv6: Add lwtunnel encap size of all siblings in nexthop calculation (Lu Wei) - netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack() (Hangyu Hua) - watchdog: pcwd_usb: Fix attempting to access uninitialized memory (Li Hua) - watchdog: Fix kmemleak in watchdog_cdev_register (Chen Jun) - watchdog: at91sam9_wdt: use devm_request_irq to avoid missing free_irq() in error path (ruanjinjie) - x86: um: vdso: Add '%rcx' and '%r11' to the syscall clobber list (Ammar Faizi) - ubi: ubi_wl_put_peb: Fix infinite loop when wear-leveling work failed (Zhihao Cheng) - ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show() (Zhihao Cheng) - ubifs: ubifs_writepage: Mark page dirty after writing inode failed (Zhihao Cheng) - ubifs: dirty_cow_znode: Fix memleak in error handling path (Zhihao Cheng) - ubifs: Re-statistic cleaned znode count if commit failed (Zhihao Cheng) - ubi: Fix possible null-ptr-deref in ubi_free_volume() (Yang Yingliang) - ubifs: Fix memory leak in alloc_wbufs() (Li Zetao) - ubi: Fix unreferenced object reported by kmemleak in ubi_resize_volume() (Li Zetao) - ubi: Fix use-after-free when volume resizing failed (Li Zetao) - ubifs: Reserve one leb for each journal head while doing budget (Zhihao Cheng) - ubifs: do_rename: Fix wrong space budget when target inode's nlink > 1 (Zhihao Cheng) - ubifs: Fix wrong dirty space budget for dirty inode (Zhihao Cheng) - ubifs: Rectify space budget for ubifs_xrename() (Zhihao Cheng) - ubifs: Rectify space budget for ubifs_symlink() if symlink is encrypted (Zhihao Cheng) - ubifs: Fix build errors as symbol undefined (Li Hua) - ubi: ensure that VID header offset + VID header size <= alloc, size (George Kennedy) - um: vector: Fix memory leak in vector_config (Xiang Yang) - fs: f2fs: initialize fsdata in pagecache_write() (Alexander Potapenko) - f2fs: use memcpy_{to,from}_page() where possible (Eric Biggers) - pwm: stm32-lp: fix the check on arr and cmp registers update (Fabrice Gasnier) - pwm: sifive: Always let the first pwm_apply_state succeed (Emil Renner Berthing) - pwm: sifive: Reduce time the controller lock is held (Uwe Kleine-Konig) - fs/jfs: fix shift exponent db_agl2size negative (Liu Shixin via Jfs-discussion) - kbuild: Port silent mode detection to future gnu make. (Dmitry Goncharov) - wifi: ath9k: use proper statements in conditionals (Arnd Bergmann) - drm/radeon: Fix eDP for single-display iMac11,2 (Mark Hawrylak) - drm/i915/quirks: Add inverted backlight quirk for HP 14-r206nv (Mavroudis Chatzilaridis) - PCI: Avoid FLR for AMD FCH AHCI adapters (Damien Le Moal) - PCI: hotplug: Allow marking devices as disconnected during bind/unbind (Lukas Wunner) - PCI/PM: Observe reset delay irrespective of bridge_d3 (Lukas Wunner) - scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() (Tomas Henzl) - scsi: ses: Fix possible desc_ptr out-of-bounds accesses (Tomas Henzl) - scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses (Tomas Henzl) - scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() (Tomas Henzl) - scsi: ses: Don't attach if enclosure has no components (James Bottomley) - scsi: qla2xxx: Fix erroneous link down (Quinn Tran) - scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests (Arun Easi) - scsi: qla2xxx: Fix link failure in NPIV environment (Quinn Tran) - ktest.pl: Add RUN_TIMEOUT option with default unlimited (Steven Rostedt) - ktest.pl: Fix missing 'end_monitor' when machine check fails (Steven Rostedt) - ktest.pl: Give back console on Ctrt^C on monitor (Steven Rostedt) - mm/thp: check and bail out if page in deferred queue already (Yin Fengwei) - mm: memcontrol: deprecate charge moving (Johannes Weiner) - media: ipu3-cio2: Fix PM runtime usage_count in driver unbind (Sakari Ailus) - mips: fix syscall_get_nr (Elvira Khabirova) - alpha: fix FEN fault handling (Al Viro) - rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails (Ilya Dryomov) - ARM: dts: exynos: correct TMU phandle in Odroid XU (Krzysztof Kozlowski) - ARM: dts: exynos: correct TMU phandle in Exynos4 (Krzysztof Kozlowski) - dm flakey: don't corrupt the zero page (Mikulas Patocka) - dm flakey: fix logic when corrupting a bio (Mikulas Patocka) - thermal: intel: powerclamp: Fix cur_state for multi package system (Srinivas Pandruvada) - wifi: rtl8xxxu: Use a longer retry limit of 48 (Bitterblue Smith) - ext4: refuse to create ea block when umounted (Jun Nie) - ext4: optimize ea_inode block expansion (Jun Nie) - ALSA: hda/realtek: Add quirk for HP EliteDesk 800 G6 Tower PC (Lukasz Stelmach) - ALSA: ice1712: Do not left ice->gpio_mutex locked in aureon_add_controls() (Dmitry Fomin) - irqdomain: Drop bogus fwspec-mapping error handling (Johan Hovold) - irqdomain: Fix disassociation race (Johan Hovold) - irqdomain: Fix association race (Johan Hovold) - ima: Align ima_file_mmap() parameters with mmap_file LSM hook (Roberto Sassu) - Documentation/hw-vuln: Document the interaction between IBRS and STIBP (KP Singh) - x86/microcode/AMD: Fix mixed steppings support (Borislav Petkov (AMD)) - x86/microcode/AMD: Add a @cpu parameter to the reloading functions (Borislav Petkov (AMD)) - x86/microcode/amd: Remove load_microcode_amd()'s bsp parameter (Borislav Petkov (AMD)) - x86/kprobes: Fix arch_check_optimized_kprobe check within optimized_kprobe range (Yang Jihong) - x86/kprobes: Fix __recover_optprobed_insn check optimizing logic (Yang Jihong) - x86/reboot: Disable SVM, not just VMX, when stopping CPUs (Sean Christopherson) - x86/reboot: Disable virtualization in an emergency if SVM is supported (Sean Christopherson) - x86/crash: Disable virt in core NMI crash handler to avoid double shootdown (Sean Christopherson) - x86/reboot: Force all cpus to exit VMX root if VMX is supported (Sean Christopherson) - x86/virt: Force GIF=1 prior to disabling SVM (for reboot flows) (Sean Christopherson) - KVM: s390: disable migration mode when dirty tracking is disabled (Nico Boehr) - KVM: Destroy target device if coalesced MMIO unregistration fails (Sean Christopherson) - udf: Detect system inodes linked into directory hierarchy (Jan Kara) - udf: Preserve link count of system files (Jan Kara) - udf: Do not update file length for failed writes to inline files (Jan Kara) - udf: Do not bother merging very long extents (Jan Kara) - udf: Truncate added extents on failed expansion (Jan Kara) - ocfs2: fix non-auto defrag path not working issue (Heming Zhao via Ocfs2-devel) - ocfs2: fix defrag path triggering jbd2 ASSERT (Heming Zhao via Ocfs2-devel) - f2fs: fix cgroup writeback accounting with fs-layer encryption (Eric Biggers) - f2fs: fix information leak in f2fs_move_inline_dirents() (Eric Biggers) - fs: hfsplus: fix UAF issue in hfsplus_put_super (Dongliang Mu) - hfs: fix missing hfs_bnode_get() in __hfs_bnode_create (Liu Shixin) - ARM: dts: exynos: correct HDMI phy compatible in Exynos4 (Krzysztof Kozlowski) - s390/kprobes: fix current_kprobe never cleared after kprobes reenter (Vasily Gorbik) - s390/kprobes: fix irq mask clobbering on kprobe reenter from post_handler (Vasily Gorbik) - s390: discard .interp section (Ilya Leoshkevich) - ipmi_ssif: Rename idle state and check (Corey Minyard) - rtc: pm8xxx: fix set-alarm race (Johan Hovold) - firmware: coreboot: framebuffer: Ignore reserved pixel color bits (Alper Nebi Yasak) - wifi: rtl8xxxu: fixing transmisison failure for rtl8192eu (Jun ASAKA) - nfsd: zero out pointers after putting nfsd_files on COPY setup error (Jeff Layton) - dm cache: add cond_resched() to various workqueue loops (Mike Snitzer) - dm thin: add cond_resched() to various workqueue loops (Mike Snitzer) - drm: panel-orientation-quirks: Add quirk for Lenovo IdeaPad Duet 3 10IGL5 (Darrell Kavanagh) - pinctrl: at91: use devm_kasprintf() to avoid potential leaks (Claudiu Beznea) - hwmon: (coretemp) Simplify platform device handling (Robin Murphy) - regulator: s5m8767: Bounds check id indexing into arrays (Kees Cook) - regulator: max77802: Bounds check regulator id against opmode (Kees Cook) - ASoC: kirkwood: Iterate over array indexes instead of using pointer math (Kees Cook) - docs/scripts/gdb: add necessary make scripts_gdb step (Jakob Koschel) - drm/msm/dsi: Add missing check for alloc_ordered_workqueue (Jiasheng Jiang) - drm/radeon: free iio for atombios when driver shutdown (Liwei Song) - HID: Add Mapping for System Microphone Mute (Jingyuan Liang) - drm/omap: dsi: Fix excessive stack usage (Tomi Valkeinen) - drm/amd/display: Fix potential null-deref in dm_resume (Roman Li) - uaccess: Add minimum bounds check on kernel buffer size (Kees Cook) [5.4.17-2136.320.3.el7] - pensando: kpcimgr: avoid panic when device tree is corrupt (Rob Gardner) [Orabug: 35079751] - net: mana: Fix accessing freed irq affinity_hint (Haiyang Zhang) [Orabug: 35085105] - net: mana: Assign interrupts to CPUs based on NUMA nodes (Saurabh Sengar) [Orabug: 35085105] - net: mana: Add rmb after checking owner bits (Haiyang Zhang) [Orabug: 35085105] - IB/mad: Don't call to function that might sleep while in atomic context (Leonid Ravich) [Orabug: 35072250] [5.4.17-2136.320.2.el7] - netfilter: nf_tables: NULL pointer dereference in nf_tables_updobj() (Alok Tiwari) [Orabug: 34301053] - Revert 'iommu/amd: Increase kdump command sync timeout to 2secs' (Boris Ostrovsky) [Orabug: 35099730] - Revert 'iommu: Force iommu shutdown on panic' (Boris Ostrovsky) [Orabug: 35099730] - mm, hugepages: add hugetlb vma mremap() test (Mina Almasry) [Orabug: 35176741] - mm: hugetlb: considering PMD sharing when flushing cache/TLBs (Baolin Wang) [Orabug: 35176741] - mm: mremap: fix sign for EFAULT error return value (Niels Dossche) [Orabug: 35176741] - mm/hugetlb: fix kernel crash with hugetlb mremap (Aneesh Kumar K.V) [Orabug: 35176741] - hugetlbfs: flush before unlock on move_hugetlb_page_tables() (Nadav Amit) [Orabug: 35176741] - mm, hugepages: add mremap() support for hugepage backed vma (Mina Almasry) [Orabug: 35176741] - Arm64: Pensando: Fix tps53679 driver to include power readings (Austin Sehnert) [Orabug: 35274783] - net/rds: use appropriate return code while dropping a connection (Praveen Kumar Kannoju) [Orabug: 35279327] - uek-rpm: aarch64: embedded: Enable CONFIG_QFMT_V2 to support T93 disk quota (Thomas Tai) [Orabug: 35323244] [5.4.17-2136.320.1.el7] - MIPS: Don't clear _PAGE_SPECIAL in _PAGE_CHG_MASK (Henry Willard) [Orabug: 35218786] - net/mlx5: Fix memory leak in error flow of port set buffer (Maher Sanalla) [Orabug: 34988317] - net/mlx5e: Update shared buffer along with device buffer changes (Maher Sanalla) [Orabug: 34988317] - net/mlx5e: Add API to query/modify SBPR and SBCM registers (Maher Sanalla) [Orabug: 34988317] - net/mlx5: Expose shared buffer registers bits and structs (Maher Sanalla) [Orabug: 34988317] - net/mlx5e: Fix the calling of update_buffer_lossy() API (Mark Zhang) [Orabug: 34988317] - net/mlx5e: Fix port buffers cell size value (Eran Ben Elisha) [Orabug: 34988317] - net/rds: Adding TCP stats for TCP keepalive timeout (Nagappan Ramasamy Palaniappan) [Orabug: 35254379] - x86/acpi/boot: Correct acpi_is_processor_usable() check (Eric DeVolder) [Orabug: 35274588] - x86/ACPI/boot: Use FADT version to check support for online capable (Mario Limonciello) [Orabug: 35274588] - x86/acpi/boot: Do not register processors that cannot be onlined for x2APIC (Kishon Vijay Abraham I) [Orabug: 35274588] - x86/ACPI: Don't add CPUs that are not online capable (Mario Limonciello) [Orabug: 35274588] - ACPICA: Add support for MADT online enabled bit (Mario Limonciello) [Orabug: 35274588] - net/rds: use appropriate reason while dropping a connection (Praveen Kumar Kannoju) [Orabug: 35278122] - KVM: nVMX: add missing consistency checks for CR0 and CR4 (Paolo Bonzini) [Orabug: 35278212] {CVE-2023-30456} - uek-rpm: pensando: enable config options for fips (Dave Kleikamp) [Orabug: 35305291] - x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3 (Pawan Gupta) [Orabug: 35310366] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-30456 CVE-2023-32233 cpe:/a:oracle:linux:7::UEKR6 Oracle Linux 8 [5.4.17-2136.320.7.el8] - selftests: fib_tests: mute cleanup error message (Po-Hsu Lin) - KVM: arm64: PMU: Align chained counter implementation with architecture pseudocode (Marc Zyngier) [Orabug: 35449815] - KVM: arm64: Filter out v8.1+ events on v8.0 HW (Marc Zyngier) [Orabug: 35449815] - KVM: arm64: Add kvm_vcpu_has_pmu() helper (Marc Zyngier) [Orabug: 35449815] - KVM: arm64: Fix some documentation build warnings (Mauro Carvalho Chehab) [Orabug: 35449815] - KVM: arm64: Document PMU filtering API (Marc Zyngier) [Orabug: 35449815] - KVM: arm64: Mask out filtered events in PCMEID{0,1}_EL1 (Marc Zyngier) [Orabug: 35449815] - KVM: arm64: Add PMU event filtering infrastructure (Marc Zyngier) [Orabug: 35449815] - KVM: arm64: Use event mask matching architecture revision (Marc Zyngier) [Orabug: 35449815] - KVM: arm64: Refactor PMU attribute error handling (Marc Zyngier) [Orabug: 35449815] - KVM: arm64: Move virt/kvm/arm to arch/arm64 (Marc Zyngier) [Orabug: 35449815] - KVM: arm/arm64: Fix up includes for trace.h (Jeremy Cline) [Orabug: 35449815] - perf/core: Optimize perf_init_event() for TYPE_SOFTWARE (Liang, Kan) [Orabug: 35449815] - Revert 'net/mlx5: Fix unpublish devlink parameters' (Si-Wei Liu) [Orabug: 35431929] - Revert 'net/mlx5: Support enable_eth devlink dev param' (Si-Wei Liu) [Orabug: 35431929] - Revert 'net/mlx5: Support enable_rdma devlink dev param' (Si-Wei Liu) [Orabug: 35431929] - Revert 'net/mlx5: Support enable_vnet devlink dev param' (Si-Wei Liu) [Orabug: 35431929] [5.4.17-2136.320.6.el8] - ipmi:ssif: Add send_retries increment (Corey Minyard) - Revert 'ubifs: dirty_cow_znode: Fix memleak in error handling path' (Zhihao Cheng) - Revert 'Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work' (Liu Jian) - scsi: target: iscsi: Handle abort for WRITE_PENDING cmds (Dmitry Bogdanov) [Orabug: 34136927] - scsi: target: iscsit: Fix TAS handling during conn cleanup (Mike Christie) [Orabug: 34136927] - scsi: target: Fix multiple LUN_RESET handling (Mike Christie) [Orabug: 34136927] - scsi: target: iscsit: Free cmds before session free (Dmitry Bogdanov) [Orabug: 34136927] - scsi: target: iscsit: Stop/wait on cmds during conn close (Mike Christie) [Orabug: 34136927] - scsi: target: iscsit: isert: Alloc per conn cmd counter (Mike Christie) [Orabug: 34136927] - scsi: target: Pass in cmd counter to use during cmd setup (Mike Christie) [Orabug: 34136927] - scsi: target: Move cmd counter allocation (Mike Christie) [Orabug: 34136927] - scsi: target: Move sess cmd counter to new struct (Mike Christie) [Orabug: 34136927] - kernfs: change kernfs_rename_lock into a read-write lock. (Imran Khan) [Orabug: 35257585] - kernfs: Use a per-fs rwsem to protect per-fs list of kernfs_super_info. (Imran Khan) [Orabug: 35257585] - kernfs: Introduce separate rwsem to protect inode attributes. (Imran Khan) [Orabug: 35257585] - debugfs: allow access blktrace trace files in lockdown mode (Junxiao Bi) [Orabug: 35262590] - rds: Add time_spent and payload info for send_cqe handler (Rohit Nair) [Orabug: 35302535] - netfilter: nf_tables: deactivate anonymous set from preparation phase (Pablo Neira Ayuso) [Orabug: 35382084] {CVE-2023-32233} - SUNRPC: remove the maximum number of retries in call_bind_status (Dai Ngo) [Orabug: 35397526] - net/rds: Fix copy&paste error (Gerd Rausch) [Orabug: 35416948] - rds: Fix incorrect error pointer reference (William Kucharski) [Orabug: 35315450] [5.4.17-2136.320.5.el8] - vdpa/mlx5: Extend driver support for new features (Eli Cohen) [Orabug: 35210546] - vdpa/mlx5: Make VIRTIO_NET_F_MRG_RXBUF off by default (Eli Cohen) [Orabug: 35210546] - vdpa_sim: set last_used_idx as last_avail_idx in vdpasim_queue_ready (Eugenio Perez) [Orabug: 35210546] - vhost-vdpa: free iommu domain after last use during cleanup (Gautam Dawar) [Orabug: 35210546] - vdpa/mlx5: should not activate virtq object when suspended (Si-Wei Liu) [Orabug: 35210546] - vp_vdpa: fix the crash in hot unplug with vp_vdpa (Cindy Lu) [Orabug: 35210546] - vdpa/mlx5: support device features provisioning (Si-Wei Liu) [Orabug: 35210546] - vdpa/mlx5: make MTU/STATUS presence conditional on feature bits (Si-Wei Liu) [Orabug: 35210546] - vdpa: validate device feature provisioning against supported class (Si-Wei Liu) [Orabug: 35210546] - vdpa: validate provisioned device features against specified attribute (Si-Wei Liu) [Orabug: 35210546] - vdpa: conditionally read STATUS in config space (Si-Wei Liu) [Orabug: 35210546] - vdpa: fix improper error message when adding vdpa dev (Si-Wei Liu) [Orabug: 35210546] - vdpa/mlx5: Initialize CVQ iotlb spinlock (Eli Cohen) [Orabug: 35210546] - vdpa/mlx5: Don't clear mr struct on destroy MR (Eli Cohen) [Orabug: 35210546] - vdpa/mlx5: Directly assign memory key (Eli Cohen) [Orabug: 35210546] - vhost-vdpa: print warning when vhost_vdpa_alloc_domain fails (Alvaro Karsz) [Orabug: 35210546] - vdpa: Fix a couple of spelling mistakes in some messages (Colin Ian King) [Orabug: 35210546] - vdpa: mlx5: support per virtqueue dma device (Jason Wang) [Orabug: 35210546] - vdpa: set dma mask for vDPA device (Jason Wang) [Orabug: 35210546] - virtio-vdpa: support per vq dma device (Jason Wang) [Orabug: 35210546] - vdpa: introduce get_vq_dma_device() (Jason Wang) [Orabug: 35210546] - virtio_ring: per virtqueue dma device (Jason Wang) [Orabug: 35210546] - vdpa_sim: get rid of DMA ops (Jason Wang) [Orabug: 35210546] - vdpa_sim_net: vendor satistics (Jason Wang) [Orabug: 35210546] - vdpa_sim: support vendor statistics (Jason Wang) [Orabug: 35210546] - vdpasim: customize allocation size (Jason Wang) [Orabug: 35210546] - vdpa_sim: switch to use __vdpa_alloc_device() (Jason Wang) [Orabug: 35210546] - vdpa_sim: use weak barriers (Jason Wang) [Orabug: 35210546] - vdpa_sim: Implement resume vdpa op (Sebastien Boeuf) [Orabug: 35210546] - vhost-vdpa: uAPI to resume the device (Sebastien Boeuf) [Orabug: 35210546] - vhost-vdpa: Introduce RESUME backend feature bit (Sebastien Boeuf) [Orabug: 35210546] - vdpa: Add resume operation (Sebastien Boeuf) [Orabug: 35210546] - vdpa_sim_net: Offer VIRTIO_NET_F_STATUS (Eugenio Perez) [Orabug: 35210546] - vdpa/mlx5: Move some definitions to a new header file (Eli Cohen) [Orabug: 35210546] - vdpa_sim: not reset state in vdpasim_queue_ready (Eugenio Perez) [Orabug: 35210546] - vdpa_sim_net: should not drop the multicast/broadcast packet (Cindy Lu) [Orabug: 35210546] - vdpasim: fix memory leak when freeing IOTLBs (Jason Wang) [Orabug: 35210546] - vdpa: conditionally fill max max queue pair for stats (Jason Wang) [Orabug: 35210546] - vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove (Rong Wang) [Orabug: 35210546] - vhost_vdpa: fix the crash in unmap a large memory (Cindy Lu) [Orabug: 35210546] - vdpa_sim: fix vringh initialization in vdpasim_queue_ready() (Stefano Garzarella) [Orabug: 35210546] - vhost-vdpa: fix an iotlb memory leak (Stefano Garzarella) [Orabug: 35210546] - vringh: fix range used in iotlb_translate() (Stefano Garzarella) [Orabug: 35210546] - vdpa_sim: fix possible memory leak in vdpasim_net_init() and vdpasim_blk_init() (ruanjinjie) [Orabug: 35210546] - RDMA/mlx5: remove variable i (Colin Ian King) [Orabug: 35210546] - vdpa/mlx5: Avoid overwriting CVQ iotlb (Eli Cohen) [Orabug: 35210546] - vdpa/mlx5: Avoid using reslock in event_handler (Eli Cohen) [Orabug: 35210546] - vdpa/mlx5: Fix wrong mac address deletion (Eli Cohen) [Orabug: 35210546] - vdpa/mlx5: Return error on vlan ctrl commands if not supported (Eli Cohen) [Orabug: 35210546] - vdpa/mlx5: Fix rule forwarding VLAN to TIR (Eli Cohen) [Orabug: 35210546] - vdpa: merge functionally duplicated dev_features attributes (Si-Wei Liu) [Orabug: 35210546] - vDPA: conditionally read MTU and MAC in dev cfg space (Zhu Lingshan) [Orabug: 35210546] - vDPA: fix spars cast warning in vdpa_dev_net_mq_config_fill (Zhu Lingshan) [Orabug: 35210546] - vDPA: check virtio device features to detect MQ (Zhu Lingshan) [Orabug: 35210546] - vDPA: check VIRTIO_NET_F_RSS for max_virtqueue_paris's presence (Zhu Lingshan) [Orabug: 35210546] - vDPA: only report driver features if FEATURES_OK is set (Zhu Lingshan) [Orabug: 35210546] - vDPA: allow userspace to query features of a vDPA device (Zhu Lingshan) [Orabug: 35210546] - vp_vdpa: support feature provisioning (Jason Wang) [Orabug: 35210546] - vdpa_sim_net: support feature provisioning (Jason Wang) [Orabug: 35210546] - vdpa: device feature provisioning (Jason Wang) [Orabug: 35210546] - virtio: drop vp_legacy_set_queue_size (Michael S. Tsirkin) [Orabug: 35210546] - vdpa/mlx5: Fix MQ to support non power of two num queues (Eli Cohen) [Orabug: 35210546] - vdpa/mlx5: Fix possible uninitialized return value (Eli Cohen) [Orabug: 35210546] - vdpa/mlx5: Support different address spaces for control and data (Eli Cohen) [Orabug: 35210546] - vdpa/mlx5: Implement susupend virtqueue callback (Eli Cohen) [Orabug: 35210546] - vdpa/mlx5: Use eth_broadcast_addr() to assign broadcast address (Xu Qiang) [Orabug: 35210546] - vdpa_sim: Implement suspend vdpa op (Eugenio Perez) [Orabug: 35210546] - vhost-vdpa: uAPI to suspend the device (Eugenio Perez) [Orabug: 35210546] - vhost-vdpa: introduce SUSPEND backend feature bit (Eugenio Perez) [Orabug: 35210546] - vdpa: Add suspend operation (Eugenio Perez) [Orabug: 35210546] - vhost-vdpa: Call ida_simple_remove() when failed (Bo Liu) [Orabug: 35210546] - vDPA: fix 'cast to restricted le16' warnings in vdpa.c (Zhu Lingshan) [Orabug: 35210546] - vDPA: !FEATURES_OK should not block querying device config space (Zhu Lingshan) [Orabug: 35210546] - vdpa_sim: use max_iotlb_entries as a limit in vhost_iotlb_init (Stefano Garzarella) [Orabug: 35210546] - vringh: iterate on iotlb_translate to handle large translations (Stefano Garzarella) [Orabug: 35210546] - vhost-vdpa: call vhost_vdpa_cleanup during the release (Stefano Garzarella) [Orabug: 35210546] - vdpa/mlx5: Initialize CVQ vringh only once (Eli Cohen) [Orabug: 35210546] - vdpa/mlx5: Update Control VQ callback information (Eli Cohen) [Orabug: 35210546] - vdpa/mlx5: Add RX MAC VLAN filter support (Eli Cohen) [Orabug: 35210546] - vdpa/mlx5: Remove flow counter from steering (Eli Cohen) [Orabug: 35210546] - vhost-vdpa: return -EFAULT on copy_to_user() failure (Dan Carpenter) [Orabug: 35210546] - vdpasim: Off by one in vdpasim_set_group_asid() (Dan Carpenter) [Orabug: 35210546] - vdpasim: allow to enable a vq repeatedly (Eugenio Perez) [Orabug: 35210546] - vdpa/vp_vdpa : add vdpa tool support in vp_vdpa (Cindy Lu) [Orabug: 35210546] - virtio: pci: Fix an error handling path in vp_modern_probe() (Christophe JAILLET) [Orabug: 35210546] - vdpasim: control virtqueue support (Gautam Dawar) [Orabug: 35210546] - vdpa_sim: filter destination mac address (Gautam Dawar) [Orabug: 35210546] - vdpa_sim: factor out buffer completion logic (Gautam Dawar) [Orabug: 35210546] - vdpa_sim: advertise VIRTIO_NET_F_MTU (Gautam Dawar) [Orabug: 35210546] - vhost-vdpa: support ASID based IOTLB API (Gautam Dawar) [Orabug: 35210546] - vhost-vdpa: introduce uAPI to set group ASID (Gautam Dawar) [Orabug: 35210546] - vhost-vdpa: uAPI to get virtqueue group id (Gautam Dawar) [Orabug: 35210546] - vhost-vdpa: introduce uAPI to get the number of address spaces (Gautam Dawar) [Orabug: 35210546] - vhost-vdpa: introduce uAPI to get the number of virtqueue groups (Gautam Dawar) [Orabug: 35210546] - vhost-vdpa: introduce asid based IOTLB (Gautam Dawar) [Orabug: 35210546] - vhost: support ASID in IOTLB API (Gautam Dawar) [Orabug: 35210546] - vhost_iotlb: split out IOTLB initialization (Gautam Dawar) [Orabug: 35210546] - vdpa: introduce config operations for associating ASID to a virtqueue group (Gautam Dawar) [Orabug: 35210546] - vdpa: multiple address spaces support (Gautam Dawar) [Orabug: 35210546] - vdpa: introduce virtqueue groups (Gautam Dawar) [Orabug: 35210546] - vhost-vdpa: switch to use vhost-vdpa specific IOTLB (Gautam Dawar) [Orabug: 35210546] - vhost-vdpa: passing iotlb to IOMMU mapping helpers (Gautam Dawar) [Orabug: 35210546] - virtio-vdpa: don't set callback if virtio doesn't need it (Gautam Dawar) [Orabug: 35210546] - vhost: move the backend feature bits to vhost_types.h (Gautam Dawar) [Orabug: 35210546] - vdpa/mlx5: Use readers/writers semaphore instead of mutex (Eli Cohen) [Orabug: 35210546] - vdpa/mlx5: Add support for reading descriptor statistics (Eli Cohen) [Orabug: 35210546] - net/vdpa: Use readers/writers semaphore instead of cf_mutex (Eli Cohen) [Orabug: 35210546] - net/vdpa: Use readers/writers semaphore instead of vdpa_dev_mutex (Eli Cohen) [Orabug: 35210546] - vdpa: Add support for querying vendor statistics (Eli Cohen) [Orabug: 35210546] - vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit (Eli Cohen) [Orabug: 35210546] - net/mlx5: Support enable_vnet devlink dev param (Parav Pandit) [Orabug: 35210546] - net/mlx5: Support enable_rdma devlink dev param (Parav Pandit) [Orabug: 35210546] - net/mlx5: Support enable_eth devlink dev param (Parav Pandit) [Orabug: 35210546] - net/mlx5: Fix unpublish devlink parameters (Parav Pandit) [Orabug: 35210546] - devlink: Add APIs to publish, unpublish individual parameter (Parav Pandit) [Orabug: 35210546] - devlink: Add API to register and unregister single parameter (Parav Pandit) [Orabug: 35210546] - devlink: Create a helper function for one parameter registration (Parav Pandit) [Orabug: 35210546] - devlink: Add new 'enable_vnet' generic device param (Parav Pandit) [Orabug: 35210546] - devlink: Add new 'enable_rdma' generic device param (Parav Pandit) [Orabug: 35210546] - devlink: Add new 'enable_eth' generic device param (Parav Pandit) [Orabug: 35210546] - virtio-net: Introduce hash report feature (Yuri Benditovich) [Orabug: 35210546] - virtio-net: Introduce RSS receive steering feature (Yuri Benditovich) [Orabug: 35210546] - virtio-net: Introduce extended RSC feature (Yuri Benditovich) [Orabug: 35210546] - kprobes: Free kretprobe_instance with RCU callback (Masami Hiramatsu) [Orabug: 35333569] - kprobes: Remove NMI context check (Masami Hiramatsu) [Orabug: 35333569] - sparc: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu) [Orabug: 35333569] - sh: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu) [Orabug: 35333569] - s390: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu) [Orabug: 35333569] - powerpc: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu) [Orabug: 35333569] - parisc: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu) [Orabug: 35333569] - mips: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu) [Orabug: 35333569] - arm64: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu) [Orabug: 35333569] - arm: kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu) [Orabug: 35333569] - x86/kprobes: Use generic kretprobe trampoline handler (Masami Hiramatsu) [Orabug: 35333569] - kprobes: Add generic kretprobe trampoline handler (Masami Hiramatsu) [Orabug: 35333569] - uek-rpm: Install dtb files under /lib/modules (Dave Kleikamp) [Orabug: 35338877] - Revert 'rds: ib: Fix non-parenthetical mutex/semaphore use' (Hakon Bugge) [Orabug: 35377400] - net: rtnetlink: add linkprop commands to add and delete alternative ifnames (Samasth Norway Ananda) [Orabug: 33664332] - rds: slight code cleanup of RDS checksum code (William Kucharski) [Orabug: 35262486] [Orabug: 35262487] - uek-rds: Add csum to protect bcopy payload end-to-end (William Kucharski) [Orabug: 33579925] [Orabug: 35206620] - Revert 'scsi: megaraid_sas: Skip syncing the RAID map on older controllers' (Sherry Yang) [Orabug: 35285969] - uek-rpm: aarch64: embedded: Disable MARVELL_FWLOG (Henry Willard) [Orabug: 35369953] - iommu/vt-d: Simplify check in identity_mapping() (Joerg Roedel) [Orabug: 35379426] - iommu/vt-d: Remove deferred_attach_domain() (Joerg Roedel) [Orabug: 35379426] - iommu/vt-d: Do deferred attachment in iommu_need_mapping() (Joerg Roedel) [Orabug: 35379426] - iommu/vt-d: Move deferred device attachment into helper function (Joerg Roedel) [Orabug: 35379426] - iommu/vt-d: Add attach_deferred() helper (Joerg Roedel) [Orabug: 35379426] - iommu/vt-d: Refactor find_domain() helper (Lu Baolu) [Orabug: 35379426] - Revert 'cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset' (Tom Hromatka) [Orabug: 35365180] [5.4.17-2136.320.4.el8] - LTS tag: v5.4.242 (Sherry Yang) - ASN.1: Fix check for strdup() success (Ekaterina Orlova) - iio: adc: at91-sama5d2_adc: fix an error code in at91_adc_allocate_trigger() (Dan Carpenter) - pwm: meson: Explicitly set .polarity in .get_state() (Uwe Kleine-Konig) - xfs: fix forkoff miscalculation related to XFS_LITINO(mp) (Gao Xiang) - sctp: Call inet6_destroy_sock() via sk->sk_destruct(). (Kuniyuki Iwashima) - dccp: Call inet6_destroy_sock() via sk->sk_destruct(). (Kuniyuki Iwashima) - inet6: Remove inet6_destroy_sock() in sk->sk_prot->destroy(). (Kuniyuki Iwashima) - tcp/udp: Call inet6_destroy_sock() in IPv6 sk->sk_destruct(). (Kuniyuki Iwashima) - udp: Call inet6_destroy_sock() in setsockopt(IPV6_ADDRFORM). (Kuniyuki Iwashima) - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Ritesh Harjani) - Revert 'ext4: fix use-after-free in ext4_xattr_set_entry' (Tudor Ambarus) - x86/purgatory: Don't generate debug info for purgatory.ro (Pingfan Liu) - MIPS: Define RUNTIME_DISCARD_EXIT in LD script (Jiaxun Yang) - mmc: sdhci_am654: Set HIGH_SPEED_ENA for SDR12 and SDR25 (Bhavya Kapoor) - memstick: fix memory leak if card device is never registered (Greg Kroah-Hartman) - nilfs2: initialize unused bytes in segment summary blocks (Ryusuke Konishi) - iio: light: tsl2772: fix reading proximity-diodes from device tree (Brian Masney) - xen/netback: use same error messages for same errors (Juergen Gross) - nvme-tcp: fix a possible UAF when failing to allocate an io queue (Sagi Grimberg) - s390/ptrace: fix PTRACE_GET_LAST_BREAK error handling (Heiko Carstens) - net: dsa: b53: mmap: add phy ops (Alvaro Fernandez Rojas) - scsi: core: Improve scsi_vpd_inquiry() checks (Damien Le Moal) - scsi: megaraid_sas: Fix fw_crash_buffer_show() (Tomas Henzl) - selftests: sigaltstack: fix -Wuninitialized (Nick Desaulniers) - Input: i8042 - add quirk for Fujitsu Lifebook A574/H (Jonathan Denose) - f2fs: Fix f2fs_truncate_partial_nodes ftrace event (Douglas Raillard) - e1000e: Disable TSO on i219-LM card to increase speed (Sebastian Basierski) - bpf: Fix incorrect verifier pruning due to missing register precision taints (Daniel Borkmann) - mlxfw: fix null-ptr-deref in mlxfw_mfa2_tlv_next() (Nikita Zhandarovich) - i40e: fix i40e_setup_misc_vector() error handling (Aleksandr Loktionov) - i40e: fix accessing vsi->active_filters without holding lock (Aleksandr Loktionov) - netfilter: nf_tables: fix ifdef to also consider nf_tables=m (Florian Westphal) - virtio_net: bugfix overflow inside xdp_linearize_page() (Xuan Zhuo) - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Gwangun Jung) - regulator: fan53555: Explicitly include bits header (Cristian Ciocaltea) - netfilter: br_netfilter: fix recent physdev match breakage (Florian Westphal) - arm64: dts: meson-g12-common: specify full DMC range (Marc Gonzalez) - ARM: dts: rockchip: fix a typo error for rk3288 spdif node (Jianqun Xu) - LTS tag: v5.4.241 (Sherry Yang) - xfs: force log and push AIL to clear pinned inodes when aborting mount (Darrick J. Wong) - xfs: consider shutdown in bmapbt cursor delete assert (Brian Foster) - xfs: shut down the filesystem if we screw up quota reservation (Darrick J. Wong) - xfs: report corruption only as a regular error (Darrick J. Wong) - xfs: set inode size after creating symlink (Jeffrey Mitchell) - xfs: fix up non-directory creation in SGID directories (Christoph Hellwig) - xfs: remove the di_version field from struct icdinode (Christoph Hellwig) - xfs: simplify a check in xfs_ioctl_setattr_check_cowextsize (Christoph Hellwig) - xfs: simplify di_flags2 inheritance in xfs_ialloc (Christoph Hellwig) - xfs: only check the superblock version for dinode size calculation (Christoph Hellwig) - xfs: add a new xfs_sb_version_has_v3inode helper (Christoph Hellwig) - xfs: remove the kuid/kgid conversion wrappers (Christoph Hellwig) - xfs: remove the icdinode di_uid/di_gid members (Christoph Hellwig) - xfs: ensure that the inode uid/gid match values match the icdinode ones (Christoph Hellwig) - xfs: merge the projid fields in struct xfs_icdinode (Christoph Hellwig) - coresight-etm4: Fix for() loop drvdata->nr_addr_cmp range bug (Steve Clevenger) - watchdog: sbsa_wdog: Make sure the timeout programming is within the limits (George Cherian) - i2c: ocores: generate stop condition after timeout in polling mode (Gregor Herburger) - ubi: Fix deadlock caused by recursively holding work_sem (ZhaoLong Wang) - mtd: ubi: wl: Fix a couple of kernel-doc issues (Lee Jones) - asymmetric_keys: log on fatal failures in PE/pkcs7 (Robbie Harwood) - verify_pefile: relax wrapper length check (Robbie Harwood) - drm: panel-orientation-quirks: Add quirk for Lenovo Yoga Book X90F (Hans de Goede) - efi: sysfb_efi: Add quirk for Lenovo Yoga Book X91F/L (Hans de Goede) - i2c: imx-lpi2c: clean rx/tx buffers upon new message (Alexander Stein) - power: supply: cros_usbpd: reclassify 'default case!' as debug (Grant Grundler) - net: macb: fix a memory corruption in extended buffer descriptor mode (Roman Gushchin) - udp6: fix potential access to stale information (Eric Dumazet) - RDMA/core: Fix GID entry ref leak when create_ah fails (Saravanan Vajravel) - sctp: fix a potential overflow in sctp_ifwdtsn_skip (Xin Long) - qlcnic: check pci_reset_function result (Denis Plotnikov) - niu: Fix missing unwind goto in niu_alloc_channels() (Harshit Mogalapalli) - 9p/xen : Fix use after free bug in xen_9pfs_front_remove due to race condition (Zheng Wang) - mtd: rawnand: stm32_fmc2: remove unsupported EDO mode (Christophe Kerello) - mtd: rawnand: meson: fix bitmask for length in command word (Arseniy Krasnov) - mtdblock: tolerate corrected bit-flips (Bang Li) - btrfs: fix fast csum implementation detection (Christoph Hellwig) - btrfs: print checksum type and implementation at mount time (David Sterba) - Bluetooth: Fix race condition in hidp_session_thread (Min Li) - Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} (Luiz Augusto von Dentz) - ALSA: hda/sigmatel: fix S/PDIF out on Intel D*45* motherboards (Oswald Buddenhagen) - ALSA: firewire-tascam: add missing unwind goto in snd_tscm_stream_start_duplex() (Xu Biang) - ALSA: i2c/cs8427: fix iec958 mixer control deactivation (Oswald Buddenhagen) - ALSA: hda/sigmatel: add pin overrides for Intel DP45SG motherboard (Oswald Buddenhagen) - ALSA: emu10k1: fix capture interrupt handler unlinking (Oswald Buddenhagen) - Revert 'pinctrl: amd: Disable and mask interrupts on resume' (Kornel Duleba) - irqdomain: Fix mapping-creation race (Johan Hovold) - irqdomain: Refactor __irq_domain_alloc_irqs() (Johan Hovold) - irqdomain: Look for existing mapping only once (Johan Hovold) - mm/swap: fix swap_info_struct race between swapoff and get_swap_pages() (Rongwei Wang) - ring-buffer: Fix race while reader and writer are on the same page (Zheng Yejian) - drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path (Boris Brezillon) - tracing: Free error logs of tracing instances (Steven Rostedt (Google)) - can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory access (Oleksij Rempel) - ftrace: Mark get_lock_parent_ip() __always_inline (John Keeping) - perf/core: Fix the same task check in perf_event_set_output (Kan Liang) - ALSA: hda/realtek: Add quirk for Clevo X370SNW (Jeremy Soller) - nilfs2: fix sysfs interface lifetime (Ryusuke Konishi) - nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread() (Ryusuke Konishi) - tty: serial: fsl_lpuart: avoid checking for transfer complete when UARTCTRL_SBK is asserted in lpuart32_tx_empty (Sherry Sun) - tty: serial: sh-sci: Fix Rx on RZ/G2L SCI (Biju Das) - tty: serial: sh-sci: Fix transmit end interrupt handler (Biju Das) - iio: dac: cio-dac: Fix max DAC write value check for 12-bit (William Breathitt Gray) - iio: adc: ti-ads7950: Set can_sleep flag for GPIO chip (Lars-Peter Clausen) - USB: serial: option: add Quectel RM500U-CN modem (Bj?rn Mork) - USB: serial: option: add Telit FE990 compositions (Enrico Sau) - usb: typec: altmodes/displayport: Fix configure initial pin assignment (RD Babiera) - USB: serial: cp210x: add Silicon Labs IFS-USB-DATACABLE IDs (Kees Jan Koster) - xhci: also avoid the XHCI_ZERO_64B_REGS quirk with a passthrough iommu (D Scott Phillips) - NFSD: callback request does not use correct credential for AUTH_SYS (Dai Ngo) - sunrpc: only free unix grouplist after RCU settles (Jeff Layton) - gpio: davinci: Add irq chip flag to skip set wake (Dhruva Gole) - ipv6: Fix an uninit variable access bug in __ip6_make_skb() (Ziyang Xuan) - sctp: check send stream number after wait_for_sndbuf (Xin Long) - net: don't let netpoll invoke NAPI if in xmit context (Jakub Kicinski) - icmp: guard against too small mtu (Eric Dumazet) - wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta (Felix Fietkau) - pwm: sprd: Explicitly set .polarity in .get_state() (Uwe Kleine-Konig) - pwm: cros-ec: Explicitly set .polarity in .get_state() (Uwe Kleine-Konig) - pinctrl: amd: disable and mask interrupts on probe (Sachi King) - pinctrl: amd: Use irqchip template (Linus Walleij) - smb3: fix problem with null cifs super block with previous patch (Steve French) - treewide: Replace DECLARE_TASKLET() with DECLARE_TASKLET_OLD() (Kees Cook) - Revert 'treewide: Replace DECLARE_TASKLET() with DECLARE_TASKLET_OLD()' (Tom Saeger) - cgroup/cpuset: Wake up cpuset_attach_wq tasks in cpuset_cancel_attach() (Waiman Long) - x86/PCI: Add quirk for AMD XHCI controller that loses MSI-X state in D3hot (Basavaraj Natikar) - ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size (Zhihao Cheng) - net_sched: prevent NULL dereference if default qdisc setup failed (Pratyush Yadav) - scsi: ses: Handle enclosure with just a primary component gracefully (Jiri Kosina) - LTS tag: v5.4.240 (Sherry Yang) - gfs2: Always check inode size of inline inodes (Andreas Gruenbacher) - firmware: arm_scmi: Fix device node validation for mailbox transport (Cristian Marussi) - net: sched: fix race condition in qdisc_graft() (Eric Dumazet) - net_sched: add __rcu annotation to netdev->qdisc (Eric Dumazet) - ext4: fix kernel BUG in 'ext4_write_inline_data_end()' (Ye Bin) - btrfs: scan device in non-exclusive mode (Anand Jain) - s390/uaccess: add missing earlyclobber annotations to __clear_user() (Heiko Carstens) - drm/etnaviv: fix reference leak when mmaping imported buffer (Lucas Stach) - ALSA: usb-audio: Fix regression on detection of Roland VS-100 (Takashi Iwai) - ALSA: hda/conexant: Partial revert of a quirk for Lenovo (Takashi Iwai) - NFSv4: Fix hangs when recovering open state after a server reboot (Trond Myklebust) - pinctrl: at91-pio4: fix domain name assignment (Johan Hovold) - xen/netback: don't do grant copy across page boundary (Juergen Gross) - Input: goodix - add Lenovo Yoga Book X90F to nine_bytes_report DMI table (Hans de Goede) - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (David Disseldorp) - cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara) - Input: focaltech - use explicitly signed char type (Jason A. Donenfeld) - Input: alps - fix compatibility with -funsigned-char (msizanoen) - pinctrl: ocelot: Fix alt mode for ocelot (Horatiu Vultur) - net: mvneta: make tx buffer array agnostic (Lorenzo Bianconi) - net: dsa: mv88e6xxx: Enable IGMP snooping on user ports only (Steffen Batz) - bnxt_en: Fix typo in PCI id to device description string mapping (Kalesh AP) - i40e: fix registers dump after run ethtool adapter self test (Radoslaw Tyl) - s390/vfio-ap: fix memory leak in vfio_ap device driver (Tony Krowiak) - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (Ivan Orlov) - net/net_failover: fix txq exceeding warning (Faicker Mo) - regulator: Handle deferred clk (Christophe JAILLET) - regulator: fix spelling mistake 'Cant' -> 'Can't' (Colin Ian King) - ptp_qoriq: fix memory leak in probe() (SongJingyi) - scsi: megaraid_sas: Fix crash after a double completion (Tomas Henzl) - mtd: rawnand: meson: invalidate cache on polling ECC bit (Arseniy Krasnov) - mips: bmips: BCM6358: disable RAC flush for TP1 (Alvaro Fernandez Rojas) - dma-mapping: drop the dev argument to arch_sync_dma_for_* (Christoph Hellwig) - ca8210: Fix unsigned mac_len comparison with zero in ca8210_skb_tx() (Harshit Mogalapalli) - fbdev: au1200fb: Fix potential divide by zero (Wei Chen) - fbdev: lxfb: Fix potential divide by zero (Wei Chen) - fbdev: intelfb: Fix potential divide by zero (Wei Chen) - fbdev: nvidia: Fix potential divide by zero (Wei Chen) - sched_getaffinity: don't assume 'cpumask_size()' is fully initialized (Linus Torvalds) - fbdev: tgafb: Fix potential divide by zero (Wei Chen) - ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set() (Kuninori Morimoto) - ALSA: asihpi: check pao in control_message() (Kuninori Morimoto) - md: avoid signed overflow in slot_store() (NeilBrown) - bus: imx-weim: fix branch condition evaluates to a garbage value (Ivan Bornyakov) - fsverity: don't drop pagecache at end of FS_IOC_ENABLE_VERITY (Eric Biggers) - ocfs2: fix data corruption after failed write (Jan Kara via Ocfs2-devel) - tun: avoid double free in tun_free_netdev (George Kennedy) - sched/fair: Sanitize vruntime of entity being migrated (Vincent Guittot) - sched/fair: sanitize vruntime of entity being placed (Zhang Qiao) - dm crypt: add cond_resched() to dmcrypt_write() (Mikulas Patocka) - dm stats: check for and propagate alloc_percpu failure (Jiasheng Jiang) - i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() (Wei Chen) - nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy() (Ryusuke Konishi) - wifi: mac80211: fix qos on mesh interfaces (Felix Fietkau) - usb: chipidea: core: fix possible concurrent when switch role (Xu Yang) - usb: chipdea: core: fix return -EINVAL if request role is the same with current role (Xu Yang) - usb: cdns3: Fix issue with using incorrect PCI device function (Pawel Laszczak) - dm thin: fix deadlock when swapping to thin device (Coly Li) - igb: revert rtnl_lock() that causes deadlock (Lin Ma) - fsverity: Remove WQ_UNBOUND from fsverity read workqueue (Nathan Huckleberry) - usb: gadget: u_audio: don't let userspace block driver unbind (Alvin Sipraga) - scsi: core: Add BLIST_SKIP_VPD_PAGES for SKhynix H28U74301AMR (Joel Selvaraj) - cifs: empty interface list when server doesn't support query interfaces (Shyam Prasad N) - sh: sanitize the flags on sigreturn (Al Viro) - net: usb: qmi_wwan: add Telit 0x1080 composition (Enrico Sau) - net: usb: cdc_mbim: avoid altsetting toggling for Telit FE990 (Enrico Sau) - scsi: lpfc: Avoid usage of list iterator variable after loop (Jakob Koschel) - scsi: ufs: core: Add soft dependency on governor_simpleondemand (Adrien Thierry) - scsi: target: iscsi: Fix an error message in iscsi_check_key() (Maurizio Lombardi) - selftests/bpf: check that modifier resolves after pointer (Lorenz Bauer) - m68k: Only force 030 bus error if PC not in exception table (Michael Schmitz) - ca8210: fix mac_len negative array access (Alexander Aring) - riscv: Bump COMMAND_LINE_SIZE value to 1024 (Alexandre Ghiti) - thunderbolt: Use const qualifier for ring_interrupt_index (Mario Limonciello) - uas: Add US_FL_NO_REPORT_OPCODES for JMicron JMS583Gen 2 (Yaroslav Furman) - scsi: qla2xxx: Perform lockless command completion in abort path (Nilesh Javali) - hwmon (it87): Fix voltage scaling for chips with 10.9mV ADCs (Frank Crawford) - platform/chrome: cros_ec_chardev: fix kernel data leak from ioctl (Tzung-Bi Shih) - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work (Zheng Wang) - Bluetooth: btqcomsmd: Fix command timeout after setting BD address (Stephan Gerhold) - net: mdio: thunder: Add missing fwnode_handle_put() (Liang He) - hvc/xen: prevent concurrent accesses to the shared ring (Roger Pau Monne) - nvme-tcp: fix nvme_tcp_term_pdu to match spec (Caleb Sander) - net/sonic: use dma_mapping_error() for error check (Zhang Changzhong) - erspan: do not use skb_mac_header() in ndo_start_xmit() (Eric Dumazet) - atm: idt77252: fix kmemleak when rmmod idt77252 (Li Zetao) - net/mlx5: Read the TC mapping of all priorities on ETS query (Maher Sanalla) - bpf: Adjust insufficient default bpf_jit_limit (Daniel Borkmann) - keys: Do not cache key in task struct if key is requested from kernel thread (David Howells) - net/ps3_gelic_net: Use dma_mapping_error (Geoff Levand) - net/ps3_gelic_net: Fix RX sk_buff length (Geoff Levand) - net: qcom/emac: Fix use after free bug in emac_remove due to race condition (Zheng Wang) - xirc2ps_cs: Fix use after free bug in xirc2ps_detach (Zheng Wang) - qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info (Daniil Tatianin) - net: usb: smsc95xx: Limit packet length to skb->len (Szymon Heidrich) - scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate() (Yu Kuai) - i2c: imx-lpi2c: check only for enabled interrupt flags (Alexander Stein) - igbvf: Regard vf reset nack as success (Akihiko Odaki) - intel/igbvf: free irq on the error path in igbvf_request_msix() (Gaosheng Cui) - iavf: fix non-tunneled IPv6 UDP packet type and hashing (Alexander Lobakin) - iavf: fix inverted Rx hash condition leading to disabled hash (Alexander Lobakin) - power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition (Zheng Wang) - net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() (Hangyu Hua) - LTS tag: v5.4.239 (Sherry Yang) - selftests: Fix the executable permissions for fib_tests.sh (Rishabh Bhatnagar) - LTS tag: v5.4.238 (Sherry Yang) - HID: uhid: Over-ride the default maximum data buffer value with our own (Lee Jones) - HID: core: Provide new max_buffer_size attribute to over-ride the default (Lee Jones) - PCI: Unify delay handling for reset and resume (Lukas Wunner) - s390/ipl: add missing intersection check to ipl_report handling (Sven Schnelle) - serial: 8250_em: Fix UART port type (Biju Das) - drm/i915: Don't use stolen memory for ring buffers with LLC (John Harrison) - x86/mm: Fix use of uninitialized buffer in sme_enable() (Nikita Zhandarovich) - fbdev: stifb: Provide valid pixelclock and add fb_check_var() checks (Helge Deller) - ftrace: Fix invalid address access in lookup_rec() when index is 0 (Chen Zhongjin) - tracing: Make tracepoint lockdep check actually test something (Steven Rostedt (Google)) - tracing: Check field value in hist_field_name() (Steven Rostedt (Google)) - interconnect: fix mem leak when freeing nodes (Johan Hovold) - tty: serial: fsl_lpuart: skip waiting for transmission complete when UARTCTRL_SBK is asserted (Sherry Sun) - ext4: fix possible double unlock when moving a directory (Theodore Ts'o) - sh: intc: Avoid spurious sizeof-pointer-div warning (Michael Karcher) - drm/amdkfd: Fix an illegal memory access (Qu Huang) - ext4: fix task hung in ext4_xattr_delete_inode (Baokun Li) - ext4: fail ext4_iget if special inode unallocated (Baokun Li) - jffs2: correct logic when creating a hole in jffs2_write_begin (Yifei Liu) - mmc: atmel-mci: fix race between stop command and start of next command (Tobias Schramm) - media: m5mols: fix off-by-one loop termination error (Linus Torvalds) - hwmon: (ina3221) return prober error code (Marcus Folkesson) - hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition (Zheng Wang) - hwmon: (adt7475) Fix masking of hysteresis registers (Tony O'Brien) - hwmon: (adt7475) Display smoothing attributes in correct order (Tony O'Brien) - ethernet: sun: add check for the mdesc_grab() (Liang He) - net/iucv: Fix size of interrupt data (Alexandra Winter) - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (Szymon Heidrich) - block: sunvdc: add check for mdesc_grab() returning NULL (Liang He) - nvmet: avoid potential UAF in nvmet_req_complete() (Damien Le Moal) - net: usb: smsc75xx: Limit packet length to skb->len (Szymon Heidrich) - nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition (Zheng Wang) - net: phy: smsc: bail out in lan87xx_read_status if genphy_read_status fails (Heiner Kallweit) - net: tunnels: annotate lockless accesses to dev->needed_headroom (Eric Dumazet) - qed/qed_dev: guard against a possible division by zero (Daniil Tatianin) - i40e: Fix kernel crash during reboot when adapter is in recovery mode (Ivan Vecera) - ipvlan: Make skb->skb_iif track skb->dev for l3s mode (Jianguo Wu) - nfc: pn533: initialize struct pn533_out_arg properly (Fedor Pchelkin) - tcp: tcp_make_synack() can be called from process context (Breno Leitao) - scsi: core: Fix a procfs host directory removal regression (Bart Van Assche) - scsi: core: Fix a comment in function scsi_host_dev_release() (Xiang Chen) - netfilter: nft_redir: correct value of inet type .maxattrs (Jeremy Sowden) - ALSA: hda: Match only Intel devices with CONTROLLER_IN_GPU() (Bjorn Helgaas) - ALSA: hda: Add Intel DG2 PCI ID and HDMI codec vid (Kai Vehmanen) - ALSA: hda: Add Alderlake-S PCI ID and HDMI codec vid (Kai Vehmanen) - ALSA: hda - controller is in GPU on the DG1 (Kai Vehmanen) - ALSA: hda - add Intel DG1 PCI and HDMI ids (Kai Vehmanen) - scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add() (Wenchao Hao) - docs: Correct missing 'd_' prefix for dentry_operations member d_weak_revalidate (Glenn Washburn) - clk: HI655X: select REGMAP instead of depending on it (Randy Dunlap) - drm/meson: fix 1px pink line on GXM when scaling video overlay (Christian Hewitt) - cifs: Move the in_send statistic to __smb_send_rqst() (Zhang Xiaoxu) - drm/panfrost: Don't sync rpm suspension after mmu flushing (Dmitry Osipenko) - xfrm: Allow transport-mode states with AF_UNSPEC selector (Herbert Xu) - ext4: fix cgroup writeback accounting with fs-layer encryption (Eric Biggers) - LTS tag: v5.4.237 (Sherry Yang) - s390/dasd: add missing discipline function (Stefan Haberland) - UML: define RUNTIME_DISCARD_EXIT (Masahiro Yamada) - sh: define RUNTIME_DISCARD_EXIT (Tom Saeger) - s390: define RUNTIME_DISCARD_EXIT to fix link error with GNU ld < 2.36 (Masahiro Yamada) - powerpc/vmlinux.lds: Don't discard .rela* for relocatable builds (Michael Ellerman) - powerpc/vmlinux.lds: Define RUNTIME_DISCARD_EXIT (Michael Ellerman) - arch: fix broken BuildID for arm64 and riscv (Masahiro Yamada) - x86, vmlinux.lds: Add RUNTIME_DISCARD_EXIT to generic DISCARDS (H.J. Lu) - drm/i915: Don't use BAR mappings for ring buffers with LLC (John Harrison) - ipmi:watchdog: Set panic count to proper value on a panic (Corey Minyard) - ipmi/watchdog: replace atomic_add() and atomic_sub() (Yejune Deng) - media: ov5640: Fix analogue gain control (Paul Elder) - PCI: Add SolidRun vendor ID (Alvaro Karsz) - macintosh: windfarm: Use unsigned type for 1-bit bitfields (Nathan Chancellor) - alpha: fix R_ALPHA_LITERAL reloc for large modules (Edward Humes) - MIPS: Fix a compilation issue (xurui) - ext4: Fix deadlock during directory rename (Jan Kara) - riscv: Use READ_ONCE_NOCHECK in imprecise unwinding stack mode (Alexandre Ghiti) - net/smc: fix fallback failed while sendmsg with fastopen (D. Wythe) - scsi: megaraid_sas: Update max supported LD IDs to 240 (Chandrakanth Patil) - btf: fix resolving BTF_KIND_VAR after ARRAY, STRUCT, UNION, PTR (Lorenz Bauer) - netfilter: tproxy: fix deadlock due to missing BH disable (Florian Westphal) - bnxt_en: Avoid order-5 memory allocation for TPA data (Michael Chan) - net: caif: Fix use-after-free in cfusbl_device_notify() (Shigeru Yoshida) - net: lan78xx: fix accessing the LAN7800's internal phy specific registers from the MAC driver (Yuiko Oshino) - net: usb: lan78xx: Remove lots of set but unused 'ret' variables (Lee Jones) - selftests: nft_nat: ensuring the listening side is up before starting the client (Hangbin Liu) - ila: do not generate empty messages in ila_xlat_nl_cmd_get_mapping() (Eric Dumazet) - nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties (Kang Chen) - drm/msm/a5xx: fix setting of the CP_PREEMPT_ENABLE_LOCAL register (Dmitry Baryshkov) - ext4: Fix possible corruption when moving a directory (Jan Kara) - scsi: core: Remove the /proc/scsi/ directory earlier (Bart Van Assche) - cifs: Fix uninitialized memory read in smb3_qfs_tcon() (Volker Lendecke) - SMB3: Backup intent flag missing from some more ops (Amir Goldstein) - iommu/vt-d: Fix PASID directory pointer coherency (Jacob Pan) - irqdomain: Fix domain registration race (Marc Zyngier) - irqdomain: Change the type of 'size' in __irq_domain_add() to be consistent (Bixuan Cui) - ipmi:ssif: Add a timer between request retries (Corey Minyard) - ipmi:ssif: Increase the message retry time (Corey Minyard) - ipmi:ssif: Remove rtc_us_timer (Corey Minyard) - ipmi:ssif: resend_msg() cannot fail (Corey Minyard) - ipmi:ssif: make ssif_i2c_send() void (Liguang Zhang) - iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter (Gavrilov Ilia) - iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and ivrs_acpihid options (Kim Phillips) - iommu/amd: Add PCI segment support for ivrs_[ioapic/hpet/acpihid] commands (Suravee Suthikulpanit) - nfc: change order inside nfc_se_io error path (Fedor Pchelkin) - ext4: zero i_disksize when initializing the bootloader inode (Zhihao Cheng) - ext4: fix WARNING in ext4_update_inline_data (Ye Bin) - ext4: move where set the MAY_INLINE_DATA flag is set (Ye Bin) - ext4: fix another off-by-one fsmap error on 1k block filesystems (Darrick J. Wong) - ext4: fix RENAME_WHITEOUT handling for inline directories (Eric Whitney) - drm/connector: print max_requested_bpc in state debugfs (Harry Wentland) - x86/CPU/AMD: Disable XSAVES on AMD family 0x17 (Andrew Cooper) - fs: prevent out-of-bounds array speculation when closing a file descriptor (Theodore Ts'o) - LTS tag: v5.4.236 (Sherry Yang) - staging: rtl8192e: Remove call_usermodehelper starting RadioPower.sh (Philipp Hortmann) - staging: rtl8192e: Remove function ..dm_check_ac_dc_power calling a script (Philipp Hortmann) - wifi: cfg80211: Partial revert 'wifi: cfg80211: Fix use after free for wext' (Hector Martin) - LTS tag: v5.4.235 (Sherry Yang) - dt-bindings: rtc: sun6i-a31-rtc: Loosen the requirements on the clocks (Maxime Ripard) - media: uvcvideo: Fix race condition with usb_kill_urb (Ricardo Ribalda) - media: uvcvideo: Provide sync and async uvc_ctrl_status_event (Ricardo Ribalda) - tcp: Fix listen() regression in 5.4.229. (Kuniyuki Iwashima) - Bluetooth: hci_sock: purge socket queues in the destruct() callback (Nguyen Dinh Phi) - x86/resctl: fix scheduler confusion with 'current' (Linus Torvalds) - x86/resctrl: Apply READ_ONCE/WRITE_ONCE to task_struct.{rmid,closid} (Valentin Schneider) - net: tls: avoid hanging tasks on the tx_lock (Jakub Kicinski) - phy: rockchip-typec: Fix unsigned comparison with less than zero (Jiapeng Chong) - PCI: Add ACS quirk for Wangxun NICs (Mengyuan Lou) - kernel/fail_function: fix memory leak with using debugfs_lookup() (Greg Kroah-Hartman) - usb: uvc: Enumerate valid values for color matching (Daniel Scally) - USB: ene_usb6250: Allocate enough memory for full object (Kees Cook) - usb: host: xhci: mvebu: Iterate over array indexes instead of using pointer math (Kees Cook) - iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_config_word() (Harshit Mogalapalli) - iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_status_word() (Harshit Mogalapalli) - tools/iio/iio_utils:fix memory leak (Yulong Zhang) - mei: bus-fixup:upon error print return values of send and receive (Alexander Usyskin) - tty: serial: fsl_lpuart: disable the CTS when send break signal (Sherry Sun) - tty: fix out-of-bounds access in tty_driver_lookup_tty() (Sven Schnelle) - staging: emxx_udc: Add checks for dma_alloc_coherent() (Yuan Can) - media: uvcvideo: Silence memcpy() run-time false positive warnings (Kees Cook) - media: uvcvideo: Quirk for autosuspend in Logitech B910 and C910 (Ricardo Ribalda) - media: uvcvideo: Handle errors from calls to usb_string (Guenter Roeck) - media: uvcvideo: Handle cameras with invalid descriptors (Ricardo Ribalda) - mfd: arizona: Use pm_runtime_resume_and_get() to prevent refcnt leak (Liang He) - firmware/efi sysfb_efi: Add quirk for Lenovo IdeaPad Duet 3 (Darrell Kavanagh) - tracing: Add NULL checks for buffer in ring_buffer_free_read_page() (Jia-Ju Bai) - thermal: intel: BXT_PMIC: select REGMAP instead of depending on it (Randy Dunlap) - thermal: intel: quark_dts: fix error pointer dereference (Dan Carpenter) - scsi: ipr: Work around fortify-string warning (Arnd Bergmann) - rtc: sun6i: Always export the internal oscillator (Samuel Holland) - rtc: sun6i: Make external 32k oscillator optional (Jernej Skrabec) - tcp: tcp_check_req() can be called from process context (Eric Dumazet) - ARM: dts: spear320-hmi: correct STMPE GPIO compatible (Krzysztof Kozlowski) - net/sched: act_sample: fix action bind logic (Pedro Tammela) - nfc: fix memory leak of se_io context in nfc_genl_se_io (Fedor Pchelkin) - net/mlx5: Geneve, Fix handling of Geneve object id as error code (Maor Dickman) - 9p/rdma: unmap receive dma buffer in rdma_request()/post_recv() (Zhengchao Shao) - 9p/xen: fix connection sequence (Juergen Gross) - 9p/xen: fix version parsing (Juergen Gross) - net: fix __dev_kfree_skb_any() vs drop monitor (Eric Dumazet) - sctp: add a refcnt in sctp_stream_priorities to avoid a nested loop (Xin Long) - ipv6: Add lwtunnel encap size of all siblings in nexthop calculation (Lu Wei) - netfilter: ctnetlink: fix possible refcount leak in ctnetlink_create_conntrack() (Hangyu Hua) - watchdog: pcwd_usb: Fix attempting to access uninitialized memory (Li Hua) - watchdog: Fix kmemleak in watchdog_cdev_register (Chen Jun) - watchdog: at91sam9_wdt: use devm_request_irq to avoid missing free_irq() in error path (ruanjinjie) - x86: um: vdso: Add '%rcx' and '%r11' to the syscall clobber list (Ammar Faizi) - ubi: ubi_wl_put_peb: Fix infinite loop when wear-leveling work failed (Zhihao Cheng) - ubi: Fix UAF wear-leveling entry in eraseblk_count_seq_show() (Zhihao Cheng) - ubifs: ubifs_writepage: Mark page dirty after writing inode failed (Zhihao Cheng) - ubifs: dirty_cow_znode: Fix memleak in error handling path (Zhihao Cheng) - ubifs: Re-statistic cleaned znode count if commit failed (Zhihao Cheng) - ubi: Fix possible null-ptr-deref in ubi_free_volume() (Yang Yingliang) - ubifs: Fix memory leak in alloc_wbufs() (Li Zetao) - ubi: Fix unreferenced object reported by kmemleak in ubi_resize_volume() (Li Zetao) - ubi: Fix use-after-free when volume resizing failed (Li Zetao) - ubifs: Reserve one leb for each journal head while doing budget (Zhihao Cheng) - ubifs: do_rename: Fix wrong space budget when target inode's nlink > 1 (Zhihao Cheng) - ubifs: Fix wrong dirty space budget for dirty inode (Zhihao Cheng) - ubifs: Rectify space budget for ubifs_xrename() (Zhihao Cheng) - ubifs: Rectify space budget for ubifs_symlink() if symlink is encrypted (Zhihao Cheng) - ubifs: Fix build errors as symbol undefined (Li Hua) - ubi: ensure that VID header offset + VID header size <= alloc, size (George Kennedy) - um: vector: Fix memory leak in vector_config (Xiang Yang) - fs: f2fs: initialize fsdata in pagecache_write() (Alexander Potapenko) - f2fs: use memcpy_{to,from}_page() where possible (Eric Biggers) - pwm: stm32-lp: fix the check on arr and cmp registers update (Fabrice Gasnier) - pwm: sifive: Always let the first pwm_apply_state succeed (Emil Renner Berthing) - pwm: sifive: Reduce time the controller lock is held (Uwe Kleine-Konig) - fs/jfs: fix shift exponent db_agl2size negative (Liu Shixin via Jfs-discussion) - kbuild: Port silent mode detection to future gnu make. (Dmitry Goncharov) - wifi: ath9k: use proper statements in conditionals (Arnd Bergmann) - drm/radeon: Fix eDP for single-display iMac11,2 (Mark Hawrylak) - drm/i915/quirks: Add inverted backlight quirk for HP 14-r206nv (Mavroudis Chatzilaridis) - PCI: Avoid FLR for AMD FCH AHCI adapters (Damien Le Moal) - PCI: hotplug: Allow marking devices as disconnected during bind/unbind (Lukas Wunner) - PCI/PM: Observe reset delay irrespective of bridge_d3 (Lukas Wunner) - scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() (Tomas Henzl) - scsi: ses: Fix possible desc_ptr out-of-bounds accesses (Tomas Henzl) - scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses (Tomas Henzl) - scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() (Tomas Henzl) - scsi: ses: Don't attach if enclosure has no components (James Bottomley) - scsi: qla2xxx: Fix erroneous link down (Quinn Tran) - scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests (Arun Easi) - scsi: qla2xxx: Fix link failure in NPIV environment (Quinn Tran) - ktest.pl: Add RUN_TIMEOUT option with default unlimited (Steven Rostedt) - ktest.pl: Fix missing 'end_monitor' when machine check fails (Steven Rostedt) - ktest.pl: Give back console on Ctrt^C on monitor (Steven Rostedt) - mm/thp: check and bail out if page in deferred queue already (Yin Fengwei) - mm: memcontrol: deprecate charge moving (Johannes Weiner) - media: ipu3-cio2: Fix PM runtime usage_count in driver unbind (Sakari Ailus) - mips: fix syscall_get_nr (Elvira Khabirova) - alpha: fix FEN fault handling (Al Viro) - rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails (Ilya Dryomov) - ARM: dts: exynos: correct TMU phandle in Odroid XU (Krzysztof Kozlowski) - ARM: dts: exynos: correct TMU phandle in Exynos4 (Krzysztof Kozlowski) - dm flakey: don't corrupt the zero page (Mikulas Patocka) - dm flakey: fix logic when corrupting a bio (Mikulas Patocka) - thermal: intel: powerclamp: Fix cur_state for multi package system (Srinivas Pandruvada) - wifi: rtl8xxxu: Use a longer retry limit of 48 (Bitterblue Smith) - ext4: refuse to create ea block when umounted (Jun Nie) - ext4: optimize ea_inode block expansion (Jun Nie) - ALSA: hda/realtek: Add quirk for HP EliteDesk 800 G6 Tower PC (Lukasz Stelmach) - ALSA: ice1712: Do not left ice->gpio_mutex locked in aureon_add_controls() (Dmitry Fomin) - irqdomain: Drop bogus fwspec-mapping error handling (Johan Hovold) - irqdomain: Fix disassociation race (Johan Hovold) - irqdomain: Fix association race (Johan Hovold) - ima: Align ima_file_mmap() parameters with mmap_file LSM hook (Roberto Sassu) - Documentation/hw-vuln: Document the interaction between IBRS and STIBP (KP Singh) - x86/microcode/AMD: Fix mixed steppings support (Borislav Petkov (AMD)) - x86/microcode/AMD: Add a @cpu parameter to the reloading functions (Borislav Petkov (AMD)) - x86/microcode/amd: Remove load_microcode_amd()'s bsp parameter (Borislav Petkov (AMD)) - x86/kprobes: Fix arch_check_optimized_kprobe check within optimized_kprobe range (Yang Jihong) - x86/kprobes: Fix __recover_optprobed_insn check optimizing logic (Yang Jihong) - x86/reboot: Disable SVM, not just VMX, when stopping CPUs (Sean Christopherson) - x86/reboot: Disable virtualization in an emergency if SVM is supported (Sean Christopherson) - x86/crash: Disable virt in core NMI crash handler to avoid double shootdown (Sean Christopherson) - x86/reboot: Force all cpus to exit VMX root if VMX is supported (Sean Christopherson) - x86/virt: Force GIF=1 prior to disabling SVM (for reboot flows) (Sean Christopherson) - KVM: s390: disable migration mode when dirty tracking is disabled (Nico Boehr) - KVM: Destroy target device if coalesced MMIO unregistration fails (Sean Christopherson) - udf: Detect system inodes linked into directory hierarchy (Jan Kara) - udf: Preserve link count of system files (Jan Kara) - udf: Do not update file length for failed writes to inline files (Jan Kara) - udf: Do not bother merging very long extents (Jan Kara) - udf: Truncate added extents on failed expansion (Jan Kara) - ocfs2: fix non-auto defrag path not working issue (Heming Zhao via Ocfs2-devel) - ocfs2: fix defrag path triggering jbd2 ASSERT (Heming Zhao via Ocfs2-devel) - f2fs: fix cgroup writeback accounting with fs-layer encryption (Eric Biggers) - f2fs: fix information leak in f2fs_move_inline_dirents() (Eric Biggers) - fs: hfsplus: fix UAF issue in hfsplus_put_super (Dongliang Mu) - hfs: fix missing hfs_bnode_get() in __hfs_bnode_create (Liu Shixin) - ARM: dts: exynos: correct HDMI phy compatible in Exynos4 (Krzysztof Kozlowski) - s390/kprobes: fix current_kprobe never cleared after kprobes reenter (Vasily Gorbik) - s390/kprobes: fix irq mask clobbering on kprobe reenter from post_handler (Vasily Gorbik) - s390: discard .interp section (Ilya Leoshkevich) - ipmi_ssif: Rename idle state and check (Corey Minyard) - rtc: pm8xxx: fix set-alarm race (Johan Hovold) - firmware: coreboot: framebuffer: Ignore reserved pixel color bits (Alper Nebi Yasak) - wifi: rtl8xxxu: fixing transmisison failure for rtl8192eu (Jun ASAKA) - nfsd: zero out pointers after putting nfsd_files on COPY setup error (Jeff Layton) - dm cache: add cond_resched() to various workqueue loops (Mike Snitzer) - dm thin: add cond_resched() to various workqueue loops (Mike Snitzer) - drm: panel-orientation-quirks: Add quirk for Lenovo IdeaPad Duet 3 10IGL5 (Darrell Kavanagh) - pinctrl: at91: use devm_kasprintf() to avoid potential leaks (Claudiu Beznea) - hwmon: (coretemp) Simplify platform device handling (Robin Murphy) - regulator: s5m8767: Bounds check id indexing into arrays (Kees Cook) - regulator: max77802: Bounds check regulator id against opmode (Kees Cook) - ASoC: kirkwood: Iterate over array indexes instead of using pointer math (Kees Cook) - docs/scripts/gdb: add necessary make scripts_gdb step (Jakob Koschel) - drm/msm/dsi: Add missing check for alloc_ordered_workqueue (Jiasheng Jiang) - drm/radeon: free iio for atombios when driver shutdown (Liwei Song) - HID: Add Mapping for System Microphone Mute (Jingyuan Liang) - drm/omap: dsi: Fix excessive stack usage (Tomi Valkeinen) - drm/amd/display: Fix potential null-deref in dm_resume (Roman Li) - uaccess: Add minimum bounds check on kernel buffer size (Kees Cook) [5.4.17-2136.320.3.el8] - pensando: kpcimgr: avoid panic when device tree is corrupt (Rob Gardner) [Orabug: 35079751] - net: mana: Fix accessing freed irq affinity_hint (Haiyang Zhang) [Orabug: 35085105] - net: mana: Assign interrupts to CPUs based on NUMA nodes (Saurabh Sengar) [Orabug: 35085105] - net: mana: Add rmb after checking owner bits (Haiyang Zhang) [Orabug: 35085105] - IB/mad: Don't call to function that might sleep while in atomic context (Leonid Ravich) [Orabug: 35072250] [5.4.17-2136.320.2.el8] - netfilter: nf_tables: NULL pointer dereference in nf_tables_updobj() (Alok Tiwari) [Orabug: 34301053] - Revert 'iommu/amd: Increase kdump command sync timeout to 2secs' (Boris Ostrovsky) [Orabug: 35099730] - Revert 'iommu: Force iommu shutdown on panic' (Boris Ostrovsky) [Orabug: 35099730] - mm, hugepages: add hugetlb vma mremap() test (Mina Almasry) [Orabug: 35176741] - mm: hugetlb: considering PMD sharing when flushing cache/TLBs (Baolin Wang) [Orabug: 35176741] - mm: mremap: fix sign for EFAULT error return value (Niels Dossche) [Orabug: 35176741] - mm/hugetlb: fix kernel crash with hugetlb mremap (Aneesh Kumar K.V) [Orabug: 35176741] - hugetlbfs: flush before unlock on move_hugetlb_page_tables() (Nadav Amit) [Orabug: 35176741] - mm, hugepages: add mremap() support for hugepage backed vma (Mina Almasry) [Orabug: 35176741] - Arm64: Pensando: Fix tps53679 driver to include power readings (Austin Sehnert) [Orabug: 35274783] - net/rds: use appropriate return code while dropping a connection (Praveen Kumar Kannoju) [Orabug: 35279327] - uek-rpm: aarch64: embedded: Enable CONFIG_QFMT_V2 to support T93 disk quota (Thomas Tai) [Orabug: 35323244] [5.4.17-2136.320.1.el8] - MIPS: Don't clear _PAGE_SPECIAL in _PAGE_CHG_MASK (Henry Willard) [Orabug: 35218786] - net/mlx5: Fix memory leak in error flow of port set buffer (Maher Sanalla) [Orabug: 34988317] - net/mlx5e: Update shared buffer along with device buffer changes (Maher Sanalla) [Orabug: 34988317] - net/mlx5e: Add API to query/modify SBPR and SBCM registers (Maher Sanalla) [Orabug: 34988317] - net/mlx5: Expose shared buffer registers bits and structs (Maher Sanalla) [Orabug: 34988317] - net/mlx5e: Fix the calling of update_buffer_lossy() API (Mark Zhang) [Orabug: 34988317] - net/mlx5e: Fix port buffers cell size value (Eran Ben Elisha) [Orabug: 34988317] - net/rds: Adding TCP stats for TCP keepalive timeout (Nagappan Ramasamy Palaniappan) [Orabug: 35254379] - x86/acpi/boot: Correct acpi_is_processor_usable() check (Eric DeVolder) [Orabug: 35274588] - x86/ACPI/boot: Use FADT version to check support for online capable (Mario Limonciello) [Orabug: 35274588] - x86/acpi/boot: Do not register processors that cannot be onlined for x2APIC (Kishon Vijay Abraham I) [Orabug: 35274588] - x86/ACPI: Don't add CPUs that are not online capable (Mario Limonciello) [Orabug: 35274588] - ACPICA: Add support for MADT online enabled bit (Mario Limonciello) [Orabug: 35274588] - net/rds: use appropriate reason while dropping a connection (Praveen Kumar Kannoju) [Orabug: 35278122] - KVM: nVMX: add missing consistency checks for CR0 and CR4 (Paolo Bonzini) [Orabug: 35278212] {CVE-2023-30456} - uek-rpm: pensando: enable config options for fips (Dave Kleikamp) [Orabug: 35305291] - x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3 (Pawan Gupta) [Orabug: 35310366] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-32233 CVE-2023-30456 cpe:/a:oracle:linux:8::UEKR6 Oracle Linux 6 [2.6.32-754.35.1.0.8.el6.OL6] - Fix epoll: Keep a reference on files added to the check list (Julian Pidancet) {CVE-2020-0466} [Orabug: 34625224] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2020-0466 cpe:/a:oracle:linux:6:10:ELS Oracle Linux 8 [3.79.0-11] - Fix CVE-2023-0767 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-0767 Oracle Linux 8 kubernetes [1.24.8-2] - libct/cg: add misc controller to v1 drivers (upstream runc patch) [1.24.8-1] - Added Oracle specific build files for Kubernetes olcne [1.5.13-1] - CVE-2023-2727, CVE-2023-2728 Kubernetes upgraded to 1.24.15 - Added script to support upgrade from OL7 to OL8 using leapp IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-2728 CVE-2023-2727 cpe:/a:oracle:linux:8::olcne15 Oracle Linux 7 kubernetes [1.24.8-2] - libct/cg: add misc controller to v1 drivers (upstream runc patch) [1.24.8-1] - Added Oracle specific build files for Kubernetes olcne [1.5.13-1] - CVE-2023-2727, CVE-2023-2728 Kubernetes upgraded to 1.24.15 - Added script to support upgrade from OL7 to OL8 using leapp IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-2728 CVE-2023-2727 cpe:/a:oracle:linux:7::olcne15 Oracle Linux 7 kubernetes [1.25.11-1] - Added Oracle specific build files for Kubernetes olcne [1.6.2-1] - CVE-2023-2727, CVE-2023-2728 Kubernetes upgraded to 1.25.11 - Add all modules to registry-image-helper - update yq to 4.x [1.6.1-9] - Updated the CVE ID's in Istio-1.16.4 changelog entry [1.6.1-8] - Update Istio config to include 1.15.7 to support upgrade from 1.5.x to 1.6.x [1.6.1-7] - Bugfix:Append a slash in oci-instance-metada query url [1.6.1-6] - Fixed helm installation in OLCNE upgrade [1.6.1-5] - Deprecate oci-private-key <path-on-control-plane-nodes> in favour of oci-private-key-file <path-on-operatpr-node> - Updated olcne_version argument in olcnectl provision to support <major.minor.patch> [1.6.1-4] - Update Istio version to 1.16.4 to address CVE's - CVE-2023-27496 - CVE-2023-27488 - CVE-2023-27493 - CVE-2023-27492 - CVE-2023-27491 - CVE-2023-27487 [1.6.1-3] - Resolved the issue to install multiple network cards using multus [1.6.1-2] - Update kubelet for upstream runc misc cgroups patch [1.6.1-1] - Fix the bug olcnectl provision fails if ol8_developer does not exist [1.6.0-4] - Removed PodSecurityPolicy from the Grafana Helm chart due to the removal of the API in Kubernetes 1.25 - Fixed an issue where creating an instance of the Istio module without Helm already installed would fail [1.6.0-3] - Move template to olcne-api-server and provide default calico config [1.6.0-2] - Update KubeVirt version to 0.58.0 [1.6.0-1] - Update Kubernetes version to 1.25.7 - Update Helm version to 3.11.1 - Update Istio version to 1.16.2 - Add Calico CNI 3.25 - Add Multus CNI 3.9.3 - Technical preview for KubeVirt 0.52.0 - Technical preview for Rook 1.10.9 - Add subcommand to olcnectl that lists version information for modules - Add support for --control-plane-nodes argument to the Kubernetes module for specifying control plane nodes - olcnectl provision can now update existing module instances - Deprecate Helm module in favor of automatically installing Helm with Kubernetes - Deprecate --master-nodes argument to the Kubernetes module - Deprecate Kata container runtime - Deprecate Flannel CNI - Deprecate GlusterFS CSI Driver [1.5.11-1] - Expose metrics endpoints for kube-system services - Support installation with or without firewalld running - Open port 9100 on nodes when installing Kubernetes module - Make disable swap persist after reboot of control plane node [1.5.10-2] - Update istio to 1.15.3 to address Istio CVE-2022-392787 [1.5.9-1] - Fix a regression during provisioning where arguments for the externalip restriction webhook are handled incorrectly [1.5.8-4] - Fix 1.21 kubernetes version to align with last upstream release [1.5.8-3] - Increase timeout value for update module [1.5.8-2] - Resolve kubernetes CVE-2022-3294 & CVE-2022-3162 for version 1.24 - Resolve kubernetes CVE-2022-3294 & CVE-2022-3162 for version 1.23 - Resolve kubernetes CVE-2022-3294 & CVE-2022-3162 for version 1.22 - Resolve kubernetes CVE-2022-3294 & CVE-2022-3162 for version 1.21 [1.5.8-1] - Improve error reporting and logging when using olcnectl provision - Environment creation is now idempotent [1.5.7-6] - Unpinned podman for OL7 [1.5.7-5] - Updated the kubernetes-dashboard version to v2.5.1 in the registry-image-helper.sh script for kubernetes-1.24.5 [1.5.7-4] - Upgraded helm-3.7.1 to 3.9.4 [1.5.7-3] - Resolved kubernetes-1.22.14 upgrade issue [1.5.7-1] - Upgrade Kubernetes to 1.24.5 - Upgrade Istio to 1.14.3 - Update OCI-CCM to 1.24.0 for kubernetes 1.24 - Update kubernetes-dashboard to v2.5.1 - Added support for custom profiles to the Istio module - Added support for multiple instances of the Istio module with independent profiles - Implemented automation within olcnectl for provisioning of Platform components and modules for existing compute resources [1.5.6-1] - Upgraded kubernetes-1.23.7 to 1.23.11, 1.22.8 to 1.22.14 and 1.21.6 to 1.21.14 - Resolve Kubernetes CVE-2022-3172 for version 1.21 - Resolve Kubernetes CVE-2022-3172 for version 1.22 - Resolve Kubernetes CVE-2022-3172 for version 1.23 [1.5.5-1] - Upgrade Istio from 1.13.5 to 1.13.7 to resolve the CVE-2022-31045 [1.5.4-3] - Fix bug in gen-certs-helper script to change permission of node.key to allow opc user to copy over [1.5.4-2] - Istio CVE-2022-31045, CVE-2022-29225, CVE-2022-29224,CVE-2022-29226,CVE-2022-29228,CVE-2022-29227 [1.5.4-1] - Upgrade Kubernetes to 1.23.7 [1.5.3-1] - Address qemu CVE-2022-26353, CVE-2021-3748 [1.5.2-1] - Excluded unnecessary directories from k8s backup files [1.5.1-1] - Fixed the bug in fetching node metadata for non-cloud nodes [1.5.0-2] - Upgrade Helm to 3.7.1-2 [1.5.0-2] - fix null pointer exception in systemd service state validation [1.5.0-1] - Introduce support for compact Kubernetes clusters - Introduce MetalLB - Introduce Oracle Cloud Infrastructure Cloud Controller Manager - Improved log messages in Platform API Server and Platform Agent - Upgrade Kubernetes to 1.22.8 - Upgrade Istio to 1.13.2 - Renamed the oci-csi module to oci-ccm [1.5.0-20.alpha] - Update istio-1.13.2 grafana to 7.5.15 [1.5.0-14.alpha] - Metallb fix [1.5.0-11.alpha] - Remove module directories when olcne rpm is uninstalled [1.5.0-10.alpha] - OCI CCM 0.13.0 [1.5.0-9.alpha] - Reworked log messages [1.5.0-8.alpha] - Update Istio to 1.13.2(prometheus-2.31.1, grafana-8.4.6) [1.5.0-7.alpha] - Update Istio to 1.12.6(prometheus-2.30.1, grafana-7.5.15) [1.5.0-6.alpha] - Update to k8s 1.22 with golang 1.17 [1.5.0-5.alpha] - Update internal docs for oci-ccm module [1.5.0-4.alpha] - Extend oci-ccm module to support load balancer [1.5.0-3.alpha] - Firewall pre-req [1.5.0-2.alpha] - Ensure that config map settings needed by metallb is preserved during k8s upgrade [1.5.0-1.alpha] - Metallb module [1.4.1-14] - Added 1.4 extra images to registry-image-helper.sh script [1.4.1-13] - Update sudoers file and changed its permissions to '0440' [1.4.1-12] - Update olcne-kubernetes.md file for 'compact' flag [1.4.1-11] - Ensure that the order of items in an upgraded config file is stable with respect to the original file [1.4.1-10] - Ensure that old olcnectl config files are upgraded [1.4.1-9] - Rename oci-csi module to oci-ccm and add support for oci-ccm loadbalancer creation [1.4.1-8] - Make 'compact' flag updatable [1.4.1-7] - Introduce 'compact' that enables control-plane nodes to run any workloads [1.4.1-6] - Ability to label 1 or more kubernetes nodes [1.4.1-5] - Fixed a bug where specifying a port in the container-registry argument to the Kubernetes module would result in pods not being able to start. [1.4.1-4] - Update helm to 3.7.1 [1.4.1-3] - Update versions to Istio-1.12.2, prometheus-2.31.1 and grafana-7.5.11 [1.4.1-2] - Allow loadbalancer to be configured regardless of security list mode [1.4.0-4] - Fix bug in initialising certs manager when environment name not mentioned [1.4.0-3] - Fix bug in fetching report for multi-environment [1.4.0-2] - Pause image is 3.4.1 [1.4.0-1] - CSI plugin - Reports feature - Kubernetes-1.20.6 to Kubernetes-1.21.6 upgrade - Istio-1.9.4 to Istio-1.11.4 upgrade - Component upgrades - Config file feature [1.3.0-13] - Fix iptables issue when running on OL7 host using OL8 image [1.3.0-12] - Address CVE's ISTIO-SECURITY-2021-003, ISTIO-SECURITY-2021-005, ISTIO-SECURITY-2021-006, ISTIO-SECURITY-2021-007 [1.3.0-11] - Fixed yaml file to stop olcne-nginx and keepalived services at uninstall [Orabug: 32296282] [1.3.0-10] - Fixed missing double semicolon in registry image helper [1.3.0-9] yq [4.34.1-1] - Added Oracle specific build files IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-2727 CVE-2023-2728 cpe:/a:oracle:linux:7::olcne16 Oracle Linux 8 kubernetes [1.25.11-1] - Added Oracle specific build files for Kubernetes olcne [1.6.2-1] - CVE-2023-2727, CVE-2023-2728 Kubernetes upgraded to 1.25.11 - Add all modules to registry-image-helper - update yq to 4.x [1.6.1-9] - Updated the CVE ID's in Istio-1.16.4 changelog entry [1.6.1-8] - Update Istio config to include 1.15.7 to support upgrade from 1.5.x to 1.6.x [1.6.1-7] - Bugfix:Append a slash in oci-instance-metada query url [1.6.1-6] - Fixed helm installation in OLCNE upgrade [1.6.1-5] - Deprecate oci-private-key <path-on-control-plane-nodes> in favour of oci-private-key-file <path-on-operatpr-node> - Updated olcne_version argument in olcnectl provision to support <major.minor.patch> [1.6.1-4] - Update Istio version to 1.16.4 to address CVE's - CVE-2023-27496 - CVE-2023-27488 - CVE-2023-27493 - CVE-2023-27492 - CVE-2023-27491 - CVE-2023-27487 [1.6.1-3] - Resolved the issue to install multiple network cards using multus [1.6.1-2] - Update kubelet for upstream runc misc cgroups patch [1.6.1-1] - Fix the bug olcnectl provision fails if ol8_developer does not exist [1.6.0-4] - Removed PodSecurityPolicy from the Grafana Helm chart due to the removal of the API in Kubernetes 1.25 - Fixed an issue where creating an instance of the Istio module without Helm already installed would fail [1.6.0-3] - Move template to olcne-api-server and provide default calico config [1.6.0-2] - Update KubeVirt version to 0.58.0 [1.6.0-1] - Update Kubernetes version to 1.25.7 - Update Helm version to 3.11.1 - Update Istio version to 1.16.2 - Add Calico CNI 3.25 - Add Multus CNI 3.9.3 - Technical preview for KubeVirt 0.52.0 - Technical preview for Rook 1.10.9 - Add subcommand to olcnectl that lists version information for modules - Add support for --control-plane-nodes argument to the Kubernetes module for specifying control plane nodes - olcnectl provision can now update existing module instances - Deprecate Helm module in favor of automatically installing Helm with Kubernetes - Deprecate --master-nodes argument to the Kubernetes module - Deprecate Kata container runtime - Deprecate Flannel CNI - Deprecate GlusterFS CSI Driver [1.5.11-1] - Expose metrics endpoints for kube-system services - Support installation with or without firewalld running - Open port 9100 on nodes when installing Kubernetes module - Make disable swap persist after reboot of control plane node [1.5.10-2] - Update istio to 1.15.3 to address Istio CVE-2022-392787 [1.5.9-1] - Fix a regression during provisioning where arguments for the externalip restriction webhook are handled incorrectly [1.5.8-4] - Fix 1.21 kubernetes version to align with last upstream release [1.5.8-3] - Increase timeout value for update module [1.5.8-2] - Resolve kubernetes CVE-2022-3294 & CVE-2022-3162 for version 1.24 - Resolve kubernetes CVE-2022-3294 & CVE-2022-3162 for version 1.23 - Resolve kubernetes CVE-2022-3294 & CVE-2022-3162 for version 1.22 - Resolve kubernetes CVE-2022-3294 & CVE-2022-3162 for version 1.21 [1.5.8-1] - Improve error reporting and logging when using olcnectl provision - Environment creation is now idempotent [1.5.7-6] - Unpinned podman for OL7 [1.5.7-5] - Updated the kubernetes-dashboard version to v2.5.1 in the registry-image-helper.sh script for kubernetes-1.24.5 [1.5.7-4] - Upgraded helm-3.7.1 to 3.9.4 [1.5.7-3] - Resolved kubernetes-1.22.14 upgrade issue [1.5.7-1] - Upgrade Kubernetes to 1.24.5 - Upgrade Istio to 1.14.3 - Update OCI-CCM to 1.24.0 for kubernetes 1.24 - Update kubernetes-dashboard to v2.5.1 - Added support for custom profiles to the Istio module - Added support for multiple instances of the Istio module with independent profiles - Implemented automation within olcnectl for provisioning of Platform components and modules for existing compute resources [1.5.6-1] - Upgraded kubernetes-1.23.7 to 1.23.11, 1.22.8 to 1.22.14 and 1.21.6 to 1.21.14 - Resolve Kubernetes CVE-2022-3172 for version 1.21 - Resolve Kubernetes CVE-2022-3172 for version 1.22 - Resolve Kubernetes CVE-2022-3172 for version 1.23 [1.5.5-1] - Upgrade Istio from 1.13.5 to 1.13.7 to resolve the CVE-2022-31045 [1.5.4-3] - Fix bug in gen-certs-helper script to change permission of node.key to allow opc user to copy over [1.5.4-2] - Istio CVE-2022-31045, CVE-2022-29225, CVE-2022-29224,CVE-2022-29226,CVE-2022-29228,CVE-2022-29227 [1.5.4-1] - Upgrade Kubernetes to 1.23.7 [1.5.3-1] - Address qemu CVE-2022-26353, CVE-2021-3748 [1.5.2-1] - Excluded unnecessary directories from k8s backup files [1.5.1-1] - Fixed the bug in fetching node metadata for non-cloud nodes [1.5.0-2] - Upgrade Helm to 3.7.1-2 [1.5.0-2] - fix null pointer exception in systemd service state validation [1.5.0-1] - Introduce support for compact Kubernetes clusters - Introduce MetalLB - Introduce Oracle Cloud Infrastructure Cloud Controller Manager - Improved log messages in Platform API Server and Platform Agent - Upgrade Kubernetes to 1.22.8 - Upgrade Istio to 1.13.2 - Renamed the oci-csi module to oci-ccm [1.5.0-20.alpha] - Update istio-1.13.2 grafana to 7.5.15 [1.5.0-14.alpha] - Metallb fix [1.5.0-11.alpha] - Remove module directories when olcne rpm is uninstalled [1.5.0-10.alpha] - OCI CCM 0.13.0 [1.5.0-9.alpha] - Reworked log messages [1.5.0-8.alpha] - Update Istio to 1.13.2(prometheus-2.31.1, grafana-8.4.6) [1.5.0-7.alpha] - Update Istio to 1.12.6(prometheus-2.30.1, grafana-7.5.15) [1.5.0-6.alpha] - Update to k8s 1.22 with golang 1.17 [1.5.0-5.alpha] - Update internal docs for oci-ccm module [1.5.0-4.alpha] - Extend oci-ccm module to support load balancer [1.5.0-3.alpha] - Firewall pre-req [1.5.0-2.alpha] - Ensure that config map settings needed by metallb is preserved during k8s upgrade [1.5.0-1.alpha] - Metallb module [1.4.1-14] - Added 1.4 extra images to registry-image-helper.sh script [1.4.1-13] - Update sudoers file and changed its permissions to '0440' [1.4.1-12] - Update olcne-kubernetes.md file for 'compact' flag [1.4.1-11] - Ensure that the order of items in an upgraded config file is stable with respect to the original file [1.4.1-10] - Ensure that old olcnectl config files are upgraded [1.4.1-9] - Rename oci-csi module to oci-ccm and add support for oci-ccm loadbalancer creation [1.4.1-8] - Make 'compact' flag updatable [1.4.1-7] - Introduce 'compact' that enables control-plane nodes to run any workloads [1.4.1-6] - Ability to label 1 or more kubernetes nodes [1.4.1-5] - Fixed a bug where specifying a port in the container-registry argument to the Kubernetes module would result in pods not being able to start. [1.4.1-4] - Update helm to 3.7.1 [1.4.1-3] - Update versions to Istio-1.12.2, prometheus-2.31.1 and grafana-7.5.11 [1.4.1-2] - Allow loadbalancer to be configured regardless of security list mode [1.4.0-4] - Fix bug in initialising certs manager when environment name not mentioned [1.4.0-3] - Fix bug in fetching report for multi-environment [1.4.0-2] - Pause image is 3.4.1 [1.4.0-1] - CSI plugin - Reports feature - Kubernetes-1.20.6 to Kubernetes-1.21.6 upgrade - Istio-1.9.4 to Istio-1.11.4 upgrade - Component upgrades - Config file feature [1.3.0-13] - Fix iptables issue when running on OL7 host using OL8 image [1.3.0-12] - Address CVE's ISTIO-SECURITY-2021-003, ISTIO-SECURITY-2021-005, ISTIO-SECURITY-2021-006, ISTIO-SECURITY-2021-007 [1.3.0-11] - Fixed yaml file to stop olcne-nginx and keepalived services at uninstall [Orabug: 32296282] [1.3.0-10] - Fixed missing double semicolon in registry image helper [1.3.0-9] yq [4.34.1-1] - Added Oracle specific build files IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-2728 CVE-2023-2727 cpe:/a:oracle:linux:8::olcne16 Oracle Linux 6 [4.1.12-124.76.2] - firewire: fix potential uaf in outbound_phy_packet_callback() (Chengfeng Ye) [Orabug: 35493606] {CVE-2023-3159} - ath9k: fix use-after-free in ath9k_hif_usb_rx_cb (Pavel Skripkin) [Orabug: 35448003] {CVE-2022-1679} - dm ioctl: fix nested locking in table_clear() to remove deadlock concern (Mike Snitzer) [Orabug: 35354880] {CVE-2023-2269} - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() (Duoming Zhou) [Orabug: 35181652] {CVE-2023-1118} - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os (Zheng Wang) [Orabug: 35180779] {CVE-2022-3424} [4.1.12-124.76.1] - ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum (Tudor Ambarus) [Orabug: 35457204] {CVE-2023-34256} - igmp: Add ip_mc_list lock in ip_check_mc_rcu (Liu Jian) [Orabug: 35448048] {CVE-2022-20141} IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-3159 CVE-2023-2269 CVE-2023-1118 CVE-2022-3424 CVE-2023-34256 CVE-2022-1679 CVE-2022-20141 cpe:/a:oracle:linux:6:10:UEKR4_ELS Oracle Linux 7 [4.1.12-124.76.2] - firewire: fix potential uaf in outbound_phy_packet_callback() (Chengfeng Ye) [Orabug: 35493606] {CVE-2023-3159} - ath9k: fix use-after-free in ath9k_hif_usb_rx_cb (Pavel Skripkin) [Orabug: 35448003] {CVE-2022-1679} - dm ioctl: fix nested locking in table_clear() to remove deadlock concern (Mike Snitzer) [Orabug: 35354880] {CVE-2023-2269} - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() (Duoming Zhou) [Orabug: 35181652] {CVE-2023-1118} - misc: sgi-gru: fix use-after-free error in gru_set_context_option, gru_fault and gru_handle_user_call_os (Zheng Wang) [Orabug: 35180779] {CVE-2022-3424} [4.1.12-124.76.1] - ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum (Tudor Ambarus) [Orabug: 35457204] {CVE-2023-34256} - igmp: Add ip_mc_list lock in ip_check_mc_rcu (Liu Jian) [Orabug: 35448048] {CVE-2022-20141} IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-2269 CVE-2023-3159 CVE-2023-34256 CVE-2023-1118 CVE-2022-1679 CVE-2022-20141 CVE-2022-3434 cpe:/a:oracle:linux:7::UEKR4 Oracle Linux 8 runc [1:1.1.4-1.0.1] - rootless: fix /sys/fs/cgroup mounts to prevent CVE-2023-25809 - rootfs: prohibit symlinks that conflicts with readonlyPaths and/or maskedPaths to prevent CVE-2023-27561 - Prohibit /proc and /sys to be symlinks to prevent CVE-2023-28642 - JIRA: OLDIS-25589 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-28642 CVE-2023-25809 CVE-2023-27561 cpe:/a:oracle:linux:8:8:appstream_base cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::appstream_developer Oracle Linux 8 runc [1:1.1.4-1.0.1] - rootless: fix /sys/fs/cgroup mounts to prevent CVE-2023-25809 - rootfs: prohibit symlinks that conflicts with readonlyPaths and/or maskedPaths to prevent CVE-2023-27561 - Prohibit /proc and /sys to be symlinks to prevent CVE-2023-28642 - JIRA: OLDIS-25589 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-25809 CVE-2023-27561 CVE-2023-28642 cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8:8:appstream_base cpe:/a:oracle:exadata_dbserver:23.1.3.0.0::ol8 Oracle Linux 7 Oracle Linux 8 [5.4.17-2136.321.4] - tick/common: Align tick period during sched_timer setup (Thomas Gleixner) [Orabug: 35520079] - net/rds: Fix endless rds_send_xmit() loop if cp_index > 0 (Gerd Rausch) [Orabug: 35510149] [5.4.17-2136.321.3] - selinux: don't use make's grouped targets feature yet (Paul Moore) - lib: cpu_rmap: Fix potential use-after-free in irq_cpu_rmap_release() (Ben Hutchings) - Revert 'staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE' (Greg Kroah-Hartman) - iommu/amd: Fix compile error for unused function (Joerg Roedel) [Orabug: 35070061] - iommu/amd: Do not Invalidate IRT when IRTE caching is disabled (Suravee Suthikulpanit) [Orabug: 35070061] - iommu/amd: Introduce Disable IRTE Caching Support (Suravee Suthikulpanit) [Orabug: 35070061] - iommu/amd: Remove the unused struct amd_ir_data.ref (Suravee Suthikulpanit) [Orabug: 35070061] - iommu/amd: Switch amd_iommu_update_ga() to use modify_irte_ga() (Joao Martins) [Orabug: 35070061] - iommu/amd: Handle GALog overflows (Joao Martins) [Orabug: 35070061] - iommu/amd: Fix 'Guest Virtual APIC Table Root Pointer' configuration in IRTE (Kishon Vijay Abraham I) [Orabug: 35070061] - KVM: x86: ioapic: Fix level-triggered EOI and userspace I/OAPIC reconfigure race (Adamos Ttofari) [Orabug: 35070061] - xfs: fix AGFL allocation deadlock (Wengang Wang) [Orabug: 35159734] - crypto: api - Demote BUG_ON() in crypto_unregister_alg() to a WARN_ON() (Toke H?iland-J?rgensen) [Orabug: 35152388] - crypto: qat - drop log level of msg in get_instance_node() (Giovanni Cabiddu) [Orabug: 35152388] - crypto: algapi - make unregistration functions return void (Eric Biggers) [Orabug: 35152388] - bnxt_en: Clear DEFRAG flag in firmware message when retry flashing. (Pavan Chebbi) [Orabug: 35365203] - bnxt_en: Enable batch mode when using HWRM_NVM_MODIFY to flash packages. (Michael Chan) [Orabug: 35365203] - bnxt_en: Retry installing FW package under NO_SPACE error condition. (Pavan Chebbi) [Orabug: 35365203] - bnxt_en: Restructure bnxt_flash_package_from_fw_obj() to execute in a loop. (Pavan Chebbi) [Orabug: 35365203] - bnxt_en: Rearrange the logic in bnxt_flash_package_from_fw_obj(). (Michael Chan) [Orabug: 35365203] - bnxt_en: Refactor bnxt_flash_nvram. (Pavan Chebbi) [Orabug: 35365203] [5.4.17-2136.321.2] - LTS tag: v5.4.245 (Sherry Yang) - netfilter: ctnetlink: Support offloaded conntrack entry deletion (Paul Blakey) - ipv{4,6}/raw: fix output xfrm lookup wrt protocol (Nicolas Dichtel) - binder: fix UAF caused by faulty buffer cleanup (Carlos Llamas) - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (Ruihan Li) - cdc_ncm: Fix the build warning (Alexander Bersenev) - net/mlx5: Devcom, serialize devcom registration (Shay Drory) - net/mlx5: devcom only supports 2 ports (Mark Bloch) - fs: fix undefined behavior in bit shift for SB_NOUSER (Hao Ge) - power: supply: bq24190: Call power_supply_changed() after updating input current (Hans de Goede) - power: supply: core: Refactor power_supply_set_input_current_limit_from_supplier() (Hans de Goede) - power: supply: bq27xxx: After charger plug in/out wait 0.5s for things to stabilize (Hans de Goede) - net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize (Tudor Ambarus) - cdc_ncm: Implement the 32-bit version of NCM Transfer Block (Alexander Bersenev) - LTS tag: v5.4.244 (Sherry Yang) - 3c589_cs: Fix an error handling path in tc589_probe() (Christophe JAILLET) - net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device (Shay Drory) - net/mlx5: Fix error message when failing to allocate device memory (Roi Dayan) - forcedeth: Fix an error handling path in nv_probe() (Christophe JAILLET) - ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg (Cezary Rojewski) - x86/show_trace_log_lvl: Ensure stack pointer is aligned, again (Vernon Lovejoy) - xen/pvcalls-back: fix double frees with pvcalls_new_active_socket() (Dan Carpenter) - coresight: Fix signedness bug in tmc_etr_buf_insert_barrier_packet() (Dan Carpenter) - power: supply: sbs-charger: Fix INHIBITED bit for Status reg (Daisuke Nojiri) - power: supply: bq27xxx: Fix poll_interval handling and races on remove (Hans de Goede) - power: supply: bq27xxx: Fix I2C IRQ race on remove (Hans de Goede) - power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition (Hans de Goede) - power: supply: leds: Fix blink to LED on transition (Hans de Goede) - ipv6: Fix out-of-bounds access in ipv6_find_tlv() (Gavrilov Ilia) - bpf: Fix mask generation for 32-bit narrow loads of 64-bit fields (Will Deacon) - net: fix skb leak in __skb_tstamp_tx() (Pratyush Yadav) - media: radio-shark: Add endpoint checks (Alan Stern) - USB: sisusbvga: Add endpoint checks (Alan Stern) - USB: core: Add routines for endpoint checks in old drivers (Alan Stern) - udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated(). (Kuniyuki Iwashima) - net: fix stack overflow when LRO is disabled for virtual interfaces (Taehee Yoo) - fbdev: udlfb: Fix endpoint check (Alan Stern) - debugobjects: Don't wake up kswapd from fill_pool() (Tetsuo Handa) - x86/topology: Fix erroneous smp_num_siblings on Intel Hybrid platforms (Zhang Rui) - parisc: Fix flush_dcache_page() for usage from irq context (Helge Deller) - selftests/memfd: Fix unknown type name build failure (Hardik Garg) - x86/mm: Avoid incomplete Global INVLPG flushes (Dave Hansen) - btrfs: use nofs when cleaning up aborted transactions (Josef Bacik) - gpio: mockup: Fix mode of debugfs files (Zev Weiss) - parisc: Allow to reboot machine after system halt (Helge Deller) - parisc: Handle kgdb breakpoints only in kernel context (Helge Deller) - m68k: Move signal frame following exception on 68020/030 (Finn Thain) - ALSA: hda/realtek: Enable headset onLenovo M70/M90 (Bin Li) - ALSA: hda/ca0132: add quirk for EVGA X299 DARK (Adam Stylinski) - mt76: mt7615: Fix build with older compilers (Pablo Greco) - spi: fsl-cpm: Use 16 bit mode for large transfers with even size (Christophe Leroy) - spi: fsl-spi: Re-organise transfer bits_per_word adaptation (Christophe Leroy) - watchdog: sp5100_tco: Immediately trigger upon starting. (Gregory Oakes) - s390/qdio: fix do_sqbs() inline assembly constraint (Heiko Carstens) - s390/qdio: get rid of register asm (Heiko Carstens) - vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF (George Kennedy) - vc_screen: rewrite vcs_size to accept vc, not inode (Jiri Slaby) - usb: gadget: u_ether: Fix host MAC address case (Konrad Grafe) - usb: gadget: u_ether: Convert prints to device prints (Jon Hunter) - lib/string_helpers: Introduce string_upper() and string_lower() helpers (Vadim Pasternak) - HID: wacom: add three styli to wacom_intuos_get_tool_type (Ping Cheng) - HID: wacom: Add new Intuos Pro Small (PTH-460) device IDs (Ping Cheng) - HID: wacom: Force pen out of prox if no events have been received in a while (Jason Gerecke) - netfilter: nf_tables: hold mutex on netns pre_exit path (Pablo Neira Ayuso) - netfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on NFT_SET_OBJECT flag (Pablo Neira Ayuso) - netfilter: nf_tables: stricter validation of element data (Pablo Neira Ayuso) [Orabug: 34362006] {CVE-2022-34918} - netfilter: nf_tables: allow up to 64 bytes in the set element data area (Pablo Neira Ayuso) - netfilter: nf_tables: add nft_setelem_parse_key() (Pablo Neira Ayuso) - netfilter: nf_tables: validate registers coming from userspace. (Pablo Neira Ayuso) - netfilter: nftables: statify nft_parse_register() (Pablo Neira Ayuso) - netfilter: nftables: add nft_parse_register_store() and use it (Pablo Neira Ayuso) - netfilter: nftables: add nft_parse_register_load() and use it (Pablo Neira Ayuso) - nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode() (Ryusuke Konishi) - powerpc/64s/radix: Fix soft dirty tracking (Michael Ellerman) - tpm/tpm_tis: Disable interrupts for more Lenovo devices (Jerry Snitselaar) - ceph: force updating the msg pointer in non-split case (Xiubo Li) - serial: Add support for Advantech PCI-1611U card (Vitaliy Tomin) - statfs: enforce statfs[64] structure initialization (Ilya Leoshkevich) - KVM: x86: do not report a vCPU as preempted outside instruction boundaries (Paolo Bonzini) [Orabug: 34571001] {CVE-2022-39189} - can: kvaser_pciefd: Disable interrupts in probe error path (Jimmy Assarsson) - can: kvaser_pciefd: Do not send EFLUSH command on TFD interrupt (Jimmy Assarsson) - can: kvaser_pciefd: Clear listen-only bit if not explicitly requested (Jimmy Assarsson) - can: kvaser_pciefd: Empty SRB buffer in probe (Jimmy Assarsson) - can: kvaser_pciefd: Call request_irq() before enabling interrupts (Jimmy Assarsson) - can: kvaser_pciefd: Set CAN_STATE_STOPPED in kvaser_pciefd_stop() (Jimmy Assarsson) - can: j1939: recvmsg(): allow MSG_CMSG_COMPAT flag (Oliver Hartkopp) - ALSA: hda/realtek: Add quirk for 2nd ASUS GU603 (Luke D. Jones) - ALSA: hda/realtek: Add a quirk for HP EliteDesk 805 (Ai Chao) - ALSA: hda: Add NVIDIA codec IDs a3 through a7 to patch table (Nikhil Mahale) - ALSA: hda: Fix Oops by 9.1 surround channel names (Takashi Iwai) - usb: typec: altmodes/displayport: fix pin_assignment_show (Badhri Jagan Sridharan) - usb: dwc3: debugfs: Resume dwc3 before accessing registers (Udipto Goswami) - USB: UHCI: adjust zhaoxin UHCI controllers OverCurrent bit value (Weitao Wang) - usb-storage: fix deadlock when a scsi command timeouts more than once (Maxime Bizon) - USB: usbtmc: Fix direction for 0-length ioctl control messages (Alan Stern) - vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit() (Eric Dumazet) - igb: fix bit_shift to be in [1..8] range (Aleksandr Loktionov) - cassini: Fix a memory leak in the error handling path of cas_init_one() (Christophe JAILLET) - wifi: iwlwifi: mvm: don't trust firmware n_channels (Johannes Berg) - net: bcmgenet: Restore phy_stop() depending upon suspend/close (Florian Fainelli) - net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop() (Florian Fainelli) - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (Dong Chenchen) - drm/exynos: fix g2d_open/close helper function definitions (Arnd Bergmann) - media: netup_unidvb: fix use-after-free at del_timer() (Duoming Zhou) - net: hns3: fix reset delay time to avoid configuration timeout (Jie Wang) - net: hns3: fix sending pfc frames after reset issue (Jijie Shao) - erspan: get the proto with the md version for collect_md (Xin Long) - ip_gre, ip6_gre: Fix race condition on o_seqno in collect_md mode (Peilin Ye) - ip6_gre: Make o_seqno start from 0 in native mode (Peilin Ye) - ip6_gre: Fix skb_under_panic in __gre6_xmit() (Peilin Ye) - serial: arc_uart: fix of_iomap leak in arc_serial_probe (Ke Zhang) - vsock: avoid to close connected socket after the timeout (Zhuang Shengen) - ALSA: firewire-digi00x: prevent potential use after free (Dan Carpenter) - net: fec: Better handle pm_runtime_get() failing in .remove() (Uwe Kleine-Konig) - af_key: Reject optional tunnel/BEET mode templates in outbound policies (Tobias Brunner) - cpupower: Make TSC read per CPU for Mperf monitor (Wyes Karny) - ASoC: fsl_micfil: register platform component before registering cpu dai (Shengjiu Wang) - btrfs: fix space cache inconsistency after error loading it from disk (Filipe Manana) - btrfs: replace calls to btrfs_find_free_ino with btrfs_find_free_objectid (Nikolay Borisov) - mfd: dln2: Fix memory leak in dln2_probe() (Qiang Ning) - phy: st: miphy28lp: use _poll_timeout functions for waits (Alain Volmat) - Input: xpad - add constants for GIP interface numbers (Vicki Pfau) - iommu/arm-smmu-v3: Acknowledge pri/event queue overflow if any (Tomas Krcka) - clk: tegra20: fix gcc-7 constant overflow warning (Arnd Bergmann) - RDMA/core: Fix multiple -Warray-bounds warnings (Gustavo A. R. Silva) - recordmcount: Fix memory leaks in the uwrite function (Hao Zeng) - sched: Fix KCSAN noinstr violation (Josh Poimboeuf) - mcb-pci: Reallocate memory region to avoid memory overlapping (Rodriguez Barbarin, Jose Javier) - serial: 8250: Reinit port->pm on port specific driver unbind (Tony Lindgren) - usb: typec: tcpm: fix multiple times discover svids error (Frank Wang) - HID: wacom: generic: Set battery quirk only when we see battery data (Jason Gerecke) - spi: spi-imx: fix MX51_ECSPI_* macros when cs > 3 (Kevin Groeneveld) - HID: logitech-hidpp: Reconcile USB and Unifying serials (Bastien Nocera) - HID: logitech-hidpp: Don't use the USB serial for USB devices (Bastien Nocera) - staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE (Philipp Hortmann) - Bluetooth: L2CAP: fix 'bad unlock balance' in l2cap_disconnect_rsp (Min Li) - wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace (Hans de Goede) - wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf (Hyunwoo Kim) - wifi: iwlwifi: pcie: fix possible NULL pointer dereference (Daniel Gabay) - samples/bpf: Fix fout leak in hbm's run_bpf_prog (Hao Zeng) - f2fs: fix to drop all dirty pages during umount() if cp_error is set (Chao Yu) - ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa() (Ojaswin Mujoo) - ext4: set goal start correctly in ext4_mb_normalize_request (Kemeng Shi) - gfs2: Fix inode height consistency check (Andreas Gruenbacher) - scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition (Zheng Wang) - lib: cpu_rmap: Avoid use after free on rmap->obj array entries (Eli Cohen) - net: Catch invalid index in XPS mapping (Nick Child) - net: pasemi: Fix return type of pasemi_mac_start_tx() (Nathan Chancellor) - scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow (Justin Tee) - ext2: Check block size validity during mount (Jan Kara) - wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex (Hector Martin) - ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects (void0red) - ACPICA: Avoid undefined behavior: applying zero offset to null pointer (Tamir Duberstein) - drm/tegra: Avoid potential 32-bit integer overflow (Nur Hussein) - ACPI: EC: Fix oops when removing custom query handlers (Armin Wolf) - firmware: arm_sdei: Fix sleep from invalid context BUG (Sherry Yang) - memstick: r592: Fix UAF bug in r592_remove due to race condition (Zheng Wang) - regmap: cache: Return error in cache sync operations for REGCACHE_NONE (Alexander Stein) - drm/amd/display: Use DC_LOG_DC in the trasform pixel function (Rodrigo Siqueira) - fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode() (Tetsuo Handa) - af_unix: Fix data races around sk->sk_shutdown. (Kuniyuki Iwashima) - af_unix: Fix a data race of sk->sk_receive_queue->qlen. (Kuniyuki Iwashima) - net: datagram: fix data-races in datagram_poll() (Eric Dumazet) - ipvlan:Fix out-of-bounds caused by unclear skb->cb (t.feng) - net: add vlan_get_protocol_and_depth() helper (Eric Dumazet) - net: tap: check vlan with eth_type_vlan() method (Menglong Dong) - net: annotate sk->sk_err write from do_recvmmsg() (Eric Dumazet) - netlink: annotate accesses to nlk->cb_running (Eric Dumazet) - netfilter: conntrack: fix possible bug_on with enable_hooks=1 (Florian Westphal) - net: Fix load-tearing on sk->sk_stamp in sock_recv_cmsgs(). (Kuniyuki Iwashima) - linux/dim: Do nothing if no time delta between samples (Roy Novich) - ARM: 9296/1: HP Jornada 7XX: fix kernel-doc warnings (Randy Dunlap) - drm/mipi-dsi: Set the fwnode for mipi_dsi_device (Saravana Kannan) - driver core: add a helper to setup both the of_node and fwnode of a device (Ioana Ciornei) - LTS tag: v5.4.243 (Sherry Yang) - drm/amd/display: Fix hang when skipping modeset (Aurabindo Pillai) - mm/page_alloc: fix potential deadlock on zonelist_update_seq seqlock (Tetsuo Handa) - drm/exynos: move to use request_irq by IRQF_NO_AUTOEN flag (Tian Tao) - drm/msm/adreno: Fix null ptr access in adreno_gpu_cleanup() (Akhil P Oommen) - firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe() (Yang Yingliang) - drm/msm: Fix double pm_runtime_disable() call (Maximilian Luz) - PM: domains: Restore comment indentation for generic_pm_domain.child_links (Geert Uytterhoeven) - printk: declare printk_deferred_{enter,safe}() in include/linux/printk.h (Tetsuo Handa) - PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock (Lukas Wunner) - PCI: pciehp: Use down_read/write_nested(reset_lock) to fix lockdep errors (Hans de Goede) - drbd: correctly submit flush bio on barrier (Christoph Bohmwalder) - serial: 8250: Fix serial8250_tx_empty() race with DMA Tx (Ilpo Jarvinen) - tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH (Ilpo Jarvinen) - ext4: fix invalid free tracking in ext4_xattr_move_to_block() (Theodore Ts'o) - ext4: remove a BUG_ON in ext4_mb_release_group_pa() (Theodore Ts'o) - ext4: bail out of ext4_xattr_ibody_get() fails for any reason (Theodore Ts'o) - ext4: add bounds checking in get_max_inline_xattr_value_size() (Theodore Ts'o) - ext4: fix deadlock when converting an inline directory in nojournal mode (Theodore Ts'o) - ext4: improve error recovery code paths in __ext4_remount() (Theodore Ts'o) - ext4: fix data races when using cached status extents (Jan Kara) - ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum (Tudor Ambarus) - ext4: fix WARNING in mb_find_extent (Ye Bin) - HID: wacom: insert timestamp to packed Bluetooth (BT) events (Ping Cheng) - HID: wacom: Set a default resolution for older tablets (Ping Cheng) - drm/amdgpu: disable sdma ecc irq only when sdma RAS is enabled in suspend (Guchun Chen) - drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy gfx ras (Guchun Chen) - drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini() (Hamza Mahfooz) - drm/panel: otm8009a: Set backlight parent to panel device (James Cowgill) - f2fs: fix potential corruption when moving a directory (Jaegeuk Kim) - ARM: dts: s5pv210: correct MIPI CSIS clock name (Krzysztof Kozlowski) - ARM: dts: exynos: fix WM8960 clock name in Itop Elite (Krzysztof Kozlowski) - remoteproc: st: Call of_node_put() on iteration error (Mathieu Poirier) - remoteproc: stm32: Call of_node_put() on iteration error (Mathieu Poirier) - sh: nmi_debug: fix return value of __setup handler (Randy Dunlap) - sh: init: use OF_EARLY_FLATTREE for early init (Randy Dunlap) - sh: math-emu: fix macro redefined warning (Randy Dunlap) - inotify: Avoid reporting event with invalid wd (Jan Kara) - platform/x86: touchscreen_dmi: Add info for the Dexp Ursus KX210i (Andrey Avdeev) - cifs: fix pcchunk length type in smb2_copychunk_range (Pawel Witek) - btrfs: print-tree: parent bytenr must be aligned to sector size (Anastasia Belova) - btrfs: don't free qgroup space unless specified (Josef Bacik) - btrfs: fix btrfs_prev_leaf() to not return the same key twice (Filipe Manana) - perf symbols: Fix return incorrect build_id size in elf_read_build_id() (Yang Jihong) - perf map: Delete two variable initialisations before null pointer checks in sort__sym_from_cmp() (Markus Elfring) - perf vendor events power9: Remove UTF-8 characters from JSON files (Kajol Jain) - virtio_net: suppress cpu stall when free_unused_bufs (Wenliang Wang) - virtio_net: split free_unused_bufs() (Xuan Zhuo) - net: dsa: mt7530: fix corrupt frames using trgmii on 40 MHz XTAL MT7621 (Ar?nc UNAL) - ALSA: caiaq: input: Add error handling for unsupported input methods in snd_usb_caiaq_input_init (Ruliang Lin) - drm/amdgpu: add a missing lock for AMDGPU_SCHED (Chia-I Wu) - af_packet: Don't send zero-byte data in packet_sendmsg_spkt(). (Kuniyuki Iwashima) - ionic: remove noise from ethtool rxnfc error msg (Shannon Nelson) - rxrpc: Fix hard call timeout units (David Howells) - net/sched: act_mirred: Add carrier check (Victor Nogueira) - writeback: fix call of incorrect macro (Maxim Korotkov) - net: dsa: mv88e6xxx: add mv88e6321 rsvd2cpu (Angelo Dureghello) - sit: update dev->needed_headroom in ipip6_tunnel_bind_dev() (Cong Wang) - net/sched: cls_api: remove block_cb from driver_list before freeing (Vlad Buslov) - net/ncsi: clear Tx enable mode when handling a Config required AEN (Cosmo Chou) - relayfs: fix out-of-bounds access in relay_file_read (Zhang Zhengming) - kernel/relay.c: fix read_pos error when multiple readers (Pengcheng Yang) - crypto: safexcel - Cleanup ring IRQ workqueues on load failure (Jonathan McDowell) - crypto: inside-secure - irq balance (Sven Auhagen) - dm verity: fix error handling for check_at_most_once on FEC (Yeongjin Gil) - dm verity: skip redundant verity_handle_err() on I/O errors (Akilesh Kailash) - mailbox: zynqmp: Fix counts of child nodes (Tanmay Shah) - mailbox: zynq: Switch to flexible array to simplify code (Christophe JAILLET) - tick/nohz: Fix cpu_is_hotpluggable() by checking with nohz subsystem (Joel Fernandes (Google)) - nohz: Add TICK_DEP_BIT_RCU (Frederic Weisbecker) - debugobject: Ensure pool refill (again) (Thomas Gleixner) - perf intel-pt: Fix CYC timestamps after standalone CBR (Adrian Hunter) - perf auxtrace: Fix address filter entire kernel size (Adrian Hunter) - dm ioctl: fix nested locking in table_clear() to remove deadlock concern (Mike Snitzer) - dm flakey: fix a crash with invalid table line (Mikulas Patocka) - dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path (Mike Snitzer) - dm clone: call kmem_cache_destroy() in dm_clone_init() error path (Mike Snitzer) - s390/dasd: fix hanging blockdevice after request requeue (Stefan Haberland) - btrfs: scrub: reject unsupported scrub flags (Qu Wenruo) - scripts/gdb: fix lx-timerlist for Python3 (Peng Liu) - clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent (Quentin Schulz) - wifi: rtl8xxxu: RTL8192EU always needs full init (Bitterblue Smith) - mailbox: zynqmp: Fix typo in IPI documentation (Tanmay Shah) - mailbox: zynqmp: Fix IPI isr handling (Tanmay Shah) - md/raid10: fix null-ptr-deref in raid10_sync_request (Li Nan) - nilfs2: fix infinite loop in nilfs_mdt_get_block() (Ryusuke Konishi) - nilfs2: do not write dirty data after degenerating to read-only (Ryusuke Konishi) - parisc: Fix argument pointer in real64_call_asm() (Helge Deller) - afs: Fix updating of i_size with dv jump from server (Marc Dionne) - dmaengine: at_xdmac: do not enable all cyclic channels (Claudiu Beznea) - dmaengine: dw-edma: Fix to enable to issue dma request on DMA processing (Shunsuke Mie) - dmaengine: dw-edma: Fix to change for continuous transfer (Shunsuke Mie) - phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port (Gaosheng Cui) - pwm: mtk-disp: Disable shadow registers before setting backlight values (AngeloGioacchino Del Regno) - pwm: mtk-disp: Adjust the clocks to avoid them mismatch (Jitao Shi) - pwm: mtk-disp: Don't check the return code of pwmchip_remove() (Uwe Kleine-Konig) - dmaengine: mv_xor_v2: Fix an error code. (Christophe JAILLET) - leds: TI_LMU_COMMON: select REGMAP instead of depending on it (Randy Dunlap) - ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline (Ye Bin) - openrisc: Properly store r31 to pt_regs on unhandled exceptions (Stafford Horne) - clocksource/drivers/davinci: Fix memory leak in davinci_timer_register when init fails (Qinrun Dai) - clocksource: davinci: axe a pointless __GFP_NOFAIL (Christophe JAILLET) - clocksource/drivers/davinci: Avoid trailing ' ' hidden in pr_fmt() (Christophe JAILLET) - RDMA/mlx5: Use correct device num_ports when modify DC (Mark Zhang) - Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe (Miaoqian Lin) - input: raspberrypi-ts: Release firmware handle when not needed (Nicolas Saenz Julienne) - firmware: raspberrypi: Introduce devm_rpi_firmware_get() (Nicolas Saenz Julienne) - firmware: raspberrypi: Keep count of all consumers (Nicolas Saenz Julienne) - NFSv4.1: Always send a RECLAIM_COMPLETE after establishing lease (Trond Myklebust) - IB/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order (Patrick Kelsey) - RDMA/siw: Remove namespace check from siw_netdev_event() (Tetsuo Handa) - clk: add missing of_node_put() in 'assigned-clocks' property parsing (Clement Leger) - power: supply: generic-adc-battery: fix unit scaling (Sebastian Reichel) - rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current time (Martin Blumenstingl) - RDMA/mlx4: Prevent shift wrapping in set_user_sq_size() (Dan Carpenter) - rtc: omap: include header for omap_rtc_power_off_program prototype (Krzysztof Kozlowski) - RDMA/rdmavt: Delete unnecessary NULL check (Natalia Petrova) - RDMA/siw: Fix potential page_array out of range access (Daniil Dulov) - perf/core: Fix hardlockup failure caused by perf throttle (Yang Jihong) - powerpc/rtas: use memmove for potentially overlapping buffer copy (Nathan Lynch) - macintosh: via-pmu-led: requires ATA to be set (Randy Dunlap) - powerpc/sysdev/tsi108: fix resource printk format warnings (Randy Dunlap) - powerpc/wii: fix resource printk format warnings (Randy Dunlap) - powerpc/mpc512x: fix resource printk format warning (Randy Dunlap) - macintosh/windfarm_smu_sat: Add missing of_node_put() (Liang He) - spmi: Add a check for remove callback when removing a SPMI driver (Jishnu Prakash) - staging: rtl8192e: Fix W_DISABLE# does not work after stop/start (Philipp Hortmann) - serial: 8250: Add missing wakeup event reporting (Florian Fainelli) - tty: serial: fsl_lpuart: adjust buffer length to the intended size (Shenwei Wang) - firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe (Dan Carpenter) - usb: mtu3: fix kernel panic at qmu transfer done irq handler (Chunfeng Yun) - usb: chipidea: fix missing goto in ci_hdrc_probe (Yinhao Hu) - sh: sq: Fix incorrect element size for allocating bitmap buffer (John Paul Adrian Glaubitz) - uapi/linux/const.h: prefer ISO-friendly __typeof__ (Kevin Brodsky) - spi: cadence-quadspi: fix suspend-resume implementations (Dhruva Gole) - mtd: spi-nor: cadence-quadspi: Handle probe deferral while requesting DMA channel (Vignesh Raghavendra) - mtd: spi-nor: cadence-quadspi: Don't initialize rx_dma_complete on failure (Vignesh Raghavendra) - mtd: spi-nor: cadence-quadspi: Make driver independent of flash geometry (Vignesh Raghavendra) - scripts/gdb: bail early if there are no generic PD (Florian Fainelli) - PM: domains: Fix up terminology with parent/child (Kees Cook) - scripts/gdb: bail early if there are no clocks (Florian Fainelli) - ia64: salinfo: placate defined-but-not-used warning (Randy Dunlap) - ia64: mm/contig: fix section mismatch warning/error (Randy Dunlap) - of: Fix modalias string generation (Miquel Raynal) - vmci_host: fix a race condition in vmci_host_poll() causing GPF (Dae R. Jeong) - spi: fsl-spi: Fix CPM/QE mode Litte Endian (Christophe Leroy) - spi: qup: Don't skip cleanup in remove's error path (Uwe Kleine-Konig) - linux/vt_buffer.h: allow either builtin or modular for macros (Randy Dunlap) - ASoC: es8316: Handle optional IRQ assignment (Cristian Ciocaltea) - ASoC: es8316: Use IRQF_NO_AUTOEN when requesting the IRQ (Hans de Goede) - genirq: Add IRQF_NO_AUTOEN for request_irq/nmi() (Barry Song) - PCI: imx6: Install the fault handler only on compatible match (H. Nikolaus Schaller) - usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition (Zheng Wang) - iio: light: max44009: add missing OF device matching (Krzysztof Kozlowski) - fpga: bridge: fix kernel-doc parameter description (Marco Pagani) - usb: host: xhci-rcar: remove leftover quirk handling (Wolfram Sang) - pstore: Revert pmsg_lock back to a normal mutex (John Stultz) - tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp. (Kuniyuki Iwashima) - net: amd: Fix link leak when verifying config failed (Gencen Gan) - netlink: Use copy_to_user() for optval in netlink_getsockopt(). (Kuniyuki Iwashima) - ipv4: Fix potential uninit variable access bug in __ip_make_skb() (Ziyang Xuan) - netfilter: nf_tables: don't write table validation state without mutex (Florian Westphal) - bpf: Don't EFAULT for getsockopt with optval=NULL (Stanislav Fomichev) - ixgbe: Enable setting RSS table to default values (Joe Damato) - ixgbe: Allow flow hash to be set via ethtool (Joe Damato) - wifi: iwlwifi: mvm: check firmware response size (Johannes Berg) - wifi: iwlwifi: make the loop for card preparation effective (Emmanuel Grumbach) - md/raid10: fix memleak of md thread (Yu Kuai) - md: update the optimal I/O size on reshape (Christoph Hellwig) - md/raid10: fix memleak for 'conf->bio_split' (Yu Kuai) - md/raid10: fix leak of 'r10bio->remaining' for recovery (Yu Kuai) - bpf, sockmap: Revert buggy deadlock fix in the sockhash and sockmap (Daniel Borkmann) - nvme-fcloop: fix 'inconsistent {IN-HARDIRQ-W} -> {HARDIRQ-ON-W} usage' (Ming Lei) - nvme: fix async event trace event (Keith Busch) - nvme: handle the persistent internal error AER (Michael Kelley) - bpf, sockmap: fix deadlocks in the sockhash and sockmap (Xin Liu) - scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() (Shuchang Li) - crypto: drbg - Only fail when jent is unavailable in FIPS mode (Herbert Xu) - crypto: drbg - make drbg_prepare_hrng() handle jent instantiation errors (Nicolai Stange) - bpftool: Fix bug for long instructions in program CFG dumps (Quentin Monnet) - wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg() (Wei Chen) - wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg() (Wei Chen) - rtlwifi: Replace RT_TRACE with rtl_dbg (Larry Finger) - rtlwifi: Start changing RT_TRACE into rtl_dbg (Larry Finger) - f2fs: handle dqget error in f2fs_transfer_project_quota() (Yangtao Li) - scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS (Danila Chernetsov) - net/packet: convert po->auxdata to an atomic flag (Eric Dumazet) - net/packet: convert po->origdev to an atomic flag (Eric Dumazet) - net/packet: annotate accesses to po->xmit (Eric Dumazet) - vlan: partially enable SIOCSHWTSTAMP in container (Vadim Fedorenko) - scm: fix MSG_CTRUNC setting condition for SO_PASSSEC (Alexander Mikhalitsyn) - wifi: rtw88: mac: Return the original error from rtw_mac_power_switch() (Martin Blumenstingl) - wifi: rtw88: mac: Return the original error from rtw_pwr_seq_parser() (Martin Blumenstingl) - tools: bpftool: Remove invalid \' json escape (Luis Gerhorst) - wifi: ath6kl: reduce WARN to dev_dbg() in callback (Fedor Pchelkin) - wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list() (Dan Carpenter) - wifi: ath9k: hif_usb: fix memory leak of remain_skbs (Fedor Pchelkin) - wifi: ath6kl: minor fix for allocation size (Alexey V. Vissarionov) - tick/common: Align tick period with the HZ tick. (Sebastian Andrzej Siewior) - tick: Get rid of tick_period (Thomas Gleixner) - tick/sched: Optimize tick_do_update_jiffies64() further (Thomas Gleixner) - tick/sched: Reduce seqcount held scope in tick_do_update_jiffies64() (Yunfeng Ye) - tick/sched: Use tick_next_period for lockless quick check (Thomas Gleixner) - timekeeping: Split jiffies seqlock (Thomas Gleixner) - debugobject: Prevent init race with static objects (Thomas Gleixner) - arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step (Sumit Garg) - x86/ioapic: Don't return 0 from arch_dynirq_lower_bound() (Saurabh Sengar) - regulator: stm32-pwr: fix of_iomap leak (YAN SHI) - media: rc: gpio-ir-recv: Fix support for wake-up (Florian Fainelli) - media: rcar_fdp1: Fix refcount leak in probe and remove function (Miaoqian Lin) - media: rcar_fdp1: Fix the correct variable assignments (Tang Bin) - media: rcar_fdp1: Make use of the helper function devm_platform_ioremap_resource() (Cai Huoqing) - media: rcar_fdp1: fix pm_runtime_get_sync() usage count (Mauro Carvalho Chehab) - media: rcar_fdp1: simplify error check logic at fdp_open() (Mauro Carvalho Chehab) - media: saa7134: fix use after free bug in saa7134_finidev due to race condition (Zheng Wang) - media: dm1105: Fix use after free bug in dm1105_remove due to race condition (Zheng Wang) - x86/apic: Fix atomic update of offset in reserve_eilvt_offset() (Uros Bizjak) - regulator: core: Avoid lockdep reports when resolving supplies (Douglas Anderson) - regulator: core: Consistently set mutex_owner when using ww_mutex_lock_slow() (Douglas Anderson) - drm/lima/lima_drv: Add missing unwind goto in lima_pdev_probe() (Harshit Mogalapalli) - mmc: sdhci-of-esdhc: fix quirk to ignore command inhibit for data (Georgii Kruglov) - drm/msm/adreno: drop bogus pm_runtime_set_active() (Johan Hovold) - drm/msm/adreno: Defer enabling runpm until hw_init() (Rob Clark) - drm/msm: fix unbalanced pm_runtime_enable in adreno_gpu_{init, cleanup} (Jonathan Marek) - firmware: qcom_scm: Clear download bit during reboot (Mukesh Ojha) - media: av7110: prevent underflow in write_ts_to_decoder() (Dan Carpenter) - media: uapi: add MEDIA_BUS_FMT_METADATA_FIXED media bus format. (Dafna Hirschfeld) - media: bdisp: Add missing check for create_workqueue (Jiasheng Jiang) - ARM: dts: qcom: ipq8064: Fix the PCI I/O port range (Manivannan Sadhasivam) - ARM: dts: qcom: ipq8064: reduce pci IO size to 64K (Christian Marangi) - ARM: dts: qcom: ipq4019: Fix the PCI I/O port range (Manivannan Sadhasivam) - EDAC/skx: Fix overflows on the DRAM row address mapping arrays (Qiuxu Zhuo) - arm64: dts: renesas: r8a774c0: Remove bogus voltages from OPP table (Geert Uytterhoeven) - arm64: dts: renesas: r8a77990: Remove bogus voltages from OPP table (Geert Uytterhoeven) - drm/probe-helper: Cancel previous job before starting new one (Dom Cobley) - drm/vgem: add missing mutex_destroy (Maira Canal) - drm/rockchip: Drop unbalanced obj unref (Rob Clark) - erofs: fix potential overflow calculating xattr_isize (Jingbo Xu) - erofs: stop parsing non-compact HEAD index if clusterofs is invalid (Gao Xiang) - tpm, tpm_tis: Do not skip reset of original interrupt vector (Lino Sanfilippo) - selinux: ensure av_permissions.h is built when needed (Paul Moore) - selinux: fix Makefile dependencies of flask.h (Ondrej Mosnacek) - ubifs: Free memory for tmpfile name (Marten Lindahl) - ubi: Fix return value overwrite issue in try_write_vid_and_data() (Wang YanQing) - ubifs: Fix memleak when insert_old_idx() failed (Zhihao Cheng) - i2c: omap: Fix standard mode false ACK readings (Reid Tonking) - KVM: nVMX: Emulate NOPs in L2, and PAUSE if it's not intercepted (Sean Christopherson) - reiserfs: Add security prefix to xattr name in reiserfs_security_write() (Roberto Sassu) - ring-buffer: Sync IRQ works before buffer destruction (Johannes Berg) - pwm: meson: Fix g12a ao clk81 name (Heiner Kallweit) - pwm: meson: Fix axg ao mux parents (Heiner Kallweit) - kheaders: Use array declaration instead of char (Kees Cook) - ipmi: fix SSIF not responding under certain cond. (Zhang Yuchen) - MIPS: fw: Allow firmware to pass a empty env (Jiaxun Yang) - xhci: fix debugfs register accesses while suspended (Johan Hovold) - debugfs: regset32: Add Runtime PM support (Geert Uytterhoeven) - staging: iio: resolver: ads1210: fix config mode (Nuno Sa) - perf sched: Cast PTHREAD_STACK_MIN to int as it may turn into sysconf(__SC_THREAD_STACK_MIN_VALUE) (Arnaldo Carvalho de Melo) - USB: dwc3: fix runtime pm imbalance on unbind (Johan Hovold) - USB: dwc3: fix runtime pm imbalance on probe errors (Johan Hovold) - asm-generic/io.h: suppress endianness warnings for readq() and writeq() (Vladimir Oltean) - ASoC: Intel: bytcr_rt5640: Add quirk for the Acer Iconia One 7 B1-750 (Hans de Goede) - iio: adc: palmas_gpadc: fix NULL dereference on rmmod (Patrik Dahlstrom) - USB: serial: option: add UNISOC vendor and TOZED LT70C product (Ar?nc UNAL) - bluetooth: Perform careful capability checks in hci_sock_ioctl() (Ruihan Li) - drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var (Daniel Vetter) - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() (Jisoo Jang) - counter: 104-quad-8: Fix race condition between FLAG and CNTR reads (William Breathitt Gray) [5.4.17-2136.321.1] - uek-rpm: Blacklist cls_tcindex module (Somasundaram Krishnasamy) [Orabug: 35408335] - uek_kabi: Add UEK_KABI_DEPRECATE_ENUM (Sherry Yang) [Orabug: 35469883] - perf kvm: Add kvm-stat for arm64 (Sergey Senozhatsky) [Orabug: 35415996] - dsc-drivers: update ionic drivers to 23.04.1-001 (Dave Kleikamp) [Orabug: 35416310] - dsc-drivers: update ionic drivers to 22.11.1-001 (Dave Kleikamp) [Orabug: 35416310] - dsc-drivers: update drivers for 1.15.9-C-100 (Dave Kleikamp) [Orabug: 35416310] - elba.dtsi: Improved sdclk and sdclk-hsmmc timing. (David Clear) [Orabug: 35416310] - drivers/i2c: Fix Lattice RD1173 interrupt handling (Hiren Mehta) [Orabug: 35416310] - defconfig: cleanup elba_defconfig (Hiren Mehta) [Orabug: 35416310] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-39189 CVE-2022-34918 cpe:/o:oracle:linux:8::baseos_latest cpe:/a:oracle:linux:8::UEKR6 cpe:/a:oracle:linux:7::UEKR6 cpe:/o:oracle:linux:8:8:baseos_patch Oracle Linux 7 [5.4.17-2136.321.4.el7] - tick/common: Align tick period during sched_timer setup (Thomas Gleixner) [Orabug: 35520079] - net/rds: Fix endless rds_send_xmit() loop if cp_index > 0 (Gerd Rausch) [Orabug: 35510149] [5.4.17-2136.321.3.el7] - selinux: don't use make's grouped targets feature yet (Paul Moore) - lib: cpu_rmap: Fix potential use-after-free in irq_cpu_rmap_release() (Ben Hutchings) - Revert 'staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE' (Greg Kroah-Hartman) - iommu/amd: Fix compile error for unused function (Joerg Roedel) [Orabug: 35070061] - iommu/amd: Do not Invalidate IRT when IRTE caching is disabled (Suravee Suthikulpanit) [Orabug: 35070061] - iommu/amd: Introduce Disable IRTE Caching Support (Suravee Suthikulpanit) [Orabug: 35070061] - iommu/amd: Remove the unused struct amd_ir_data.ref (Suravee Suthikulpanit) [Orabug: 35070061] - iommu/amd: Switch amd_iommu_update_ga() to use modify_irte_ga() (Joao Martins) [Orabug: 35070061] - iommu/amd: Handle GALog overflows (Joao Martins) [Orabug: 35070061] - iommu/amd: Fix 'Guest Virtual APIC Table Root Pointer' configuration in IRTE (Kishon Vijay Abraham I) [Orabug: 35070061] - KVM: x86: ioapic: Fix level-triggered EOI and userspace I/OAPIC reconfigure race (Adamos Ttofari) [Orabug: 35070061] - xfs: fix AGFL allocation deadlock (Wengang Wang) [Orabug: 35159734] - crypto: api - Demote BUG_ON() in crypto_unregister_alg() to a WARN_ON() (Toke H?iland-J?rgensen) [Orabug: 35152388] - crypto: qat - drop log level of msg in get_instance_node() (Giovanni Cabiddu) [Orabug: 35152388] - crypto: algapi - make unregistration functions return void (Eric Biggers) [Orabug: 35152388] - bnxt_en: Clear DEFRAG flag in firmware message when retry flashing. (Pavan Chebbi) [Orabug: 35365203] - bnxt_en: Enable batch mode when using HWRM_NVM_MODIFY to flash packages. (Michael Chan) [Orabug: 35365203] - bnxt_en: Retry installing FW package under NO_SPACE error condition. (Pavan Chebbi) [Orabug: 35365203] - bnxt_en: Restructure bnxt_flash_package_from_fw_obj() to execute in a loop. (Pavan Chebbi) [Orabug: 35365203] - bnxt_en: Rearrange the logic in bnxt_flash_package_from_fw_obj(). (Michael Chan) [Orabug: 35365203] - bnxt_en: Refactor bnxt_flash_nvram. (Pavan Chebbi) [Orabug: 35365203] [5.4.17-2136.321.2.el7] - LTS tag: v5.4.245 (Sherry Yang) - netfilter: ctnetlink: Support offloaded conntrack entry deletion (Paul Blakey) - ipv{4,6}/raw: fix output xfrm lookup wrt protocol (Nicolas Dichtel) - binder: fix UAF caused by faulty buffer cleanup (Carlos Llamas) - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (Ruihan Li) - cdc_ncm: Fix the build warning (Alexander Bersenev) - net/mlx5: Devcom, serialize devcom registration (Shay Drory) - net/mlx5: devcom only supports 2 ports (Mark Bloch) - fs: fix undefined behavior in bit shift for SB_NOUSER (Hao Ge) - power: supply: bq24190: Call power_supply_changed() after updating input current (Hans de Goede) - power: supply: core: Refactor power_supply_set_input_current_limit_from_supplier() (Hans de Goede) - power: supply: bq27xxx: After charger plug in/out wait 0.5s for things to stabilize (Hans de Goede) - net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize (Tudor Ambarus) - cdc_ncm: Implement the 32-bit version of NCM Transfer Block (Alexander Bersenev) - LTS tag: v5.4.244 (Sherry Yang) - 3c589_cs: Fix an error handling path in tc589_probe() (Christophe JAILLET) - net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device (Shay Drory) - net/mlx5: Fix error message when failing to allocate device memory (Roi Dayan) - forcedeth: Fix an error handling path in nv_probe() (Christophe JAILLET) - ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg (Cezary Rojewski) - x86/show_trace_log_lvl: Ensure stack pointer is aligned, again (Vernon Lovejoy) - xen/pvcalls-back: fix double frees with pvcalls_new_active_socket() (Dan Carpenter) - coresight: Fix signedness bug in tmc_etr_buf_insert_barrier_packet() (Dan Carpenter) - power: supply: sbs-charger: Fix INHIBITED bit for Status reg (Daisuke Nojiri) - power: supply: bq27xxx: Fix poll_interval handling and races on remove (Hans de Goede) - power: supply: bq27xxx: Fix I2C IRQ race on remove (Hans de Goede) - power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition (Hans de Goede) - power: supply: leds: Fix blink to LED on transition (Hans de Goede) - ipv6: Fix out-of-bounds access in ipv6_find_tlv() (Gavrilov Ilia) - bpf: Fix mask generation for 32-bit narrow loads of 64-bit fields (Will Deacon) - net: fix skb leak in __skb_tstamp_tx() (Pratyush Yadav) - media: radio-shark: Add endpoint checks (Alan Stern) - USB: sisusbvga: Add endpoint checks (Alan Stern) - USB: core: Add routines for endpoint checks in old drivers (Alan Stern) - udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated(). (Kuniyuki Iwashima) - net: fix stack overflow when LRO is disabled for virtual interfaces (Taehee Yoo) - fbdev: udlfb: Fix endpoint check (Alan Stern) - debugobjects: Don't wake up kswapd from fill_pool() (Tetsuo Handa) - x86/topology: Fix erroneous smp_num_siblings on Intel Hybrid platforms (Zhang Rui) - parisc: Fix flush_dcache_page() for usage from irq context (Helge Deller) - selftests/memfd: Fix unknown type name build failure (Hardik Garg) - x86/mm: Avoid incomplete Global INVLPG flushes (Dave Hansen) - btrfs: use nofs when cleaning up aborted transactions (Josef Bacik) - gpio: mockup: Fix mode of debugfs files (Zev Weiss) - parisc: Allow to reboot machine after system halt (Helge Deller) - parisc: Handle kgdb breakpoints only in kernel context (Helge Deller) - m68k: Move signal frame following exception on 68020/030 (Finn Thain) - ALSA: hda/realtek: Enable headset onLenovo M70/M90 (Bin Li) - ALSA: hda/ca0132: add quirk for EVGA X299 DARK (Adam Stylinski) - mt76: mt7615: Fix build with older compilers (Pablo Greco) - spi: fsl-cpm: Use 16 bit mode for large transfers with even size (Christophe Leroy) - spi: fsl-spi: Re-organise transfer bits_per_word adaptation (Christophe Leroy) - watchdog: sp5100_tco: Immediately trigger upon starting. (Gregory Oakes) - s390/qdio: fix do_sqbs() inline assembly constraint (Heiko Carstens) - s390/qdio: get rid of register asm (Heiko Carstens) - vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF (George Kennedy) - vc_screen: rewrite vcs_size to accept vc, not inode (Jiri Slaby) - usb: gadget: u_ether: Fix host MAC address case (Konrad Grafe) - usb: gadget: u_ether: Convert prints to device prints (Jon Hunter) - lib/string_helpers: Introduce string_upper() and string_lower() helpers (Vadim Pasternak) - HID: wacom: add three styli to wacom_intuos_get_tool_type (Ping Cheng) - HID: wacom: Add new Intuos Pro Small (PTH-460) device IDs (Ping Cheng) - HID: wacom: Force pen out of prox if no events have been received in a while (Jason Gerecke) - netfilter: nf_tables: hold mutex on netns pre_exit path (Pablo Neira Ayuso) - netfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on NFT_SET_OBJECT flag (Pablo Neira Ayuso) - netfilter: nf_tables: stricter validation of element data (Pablo Neira Ayuso) - netfilter: nf_tables: allow up to 64 bytes in the set element data area (Pablo Neira Ayuso) - netfilter: nf_tables: add nft_setelem_parse_key() (Pablo Neira Ayuso) - netfilter: nf_tables: validate registers coming from userspace. (Pablo Neira Ayuso) - netfilter: nftables: statify nft_parse_register() (Pablo Neira Ayuso) - netfilter: nftables: add nft_parse_register_store() and use it (Pablo Neira Ayuso) - netfilter: nftables: add nft_parse_register_load() and use it (Pablo Neira Ayuso) - nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode() (Ryusuke Konishi) - powerpc/64s/radix: Fix soft dirty tracking (Michael Ellerman) - tpm/tpm_tis: Disable interrupts for more Lenovo devices (Jerry Snitselaar) - ceph: force updating the msg pointer in non-split case (Xiubo Li) - serial: Add support for Advantech PCI-1611U card (Vitaliy Tomin) - statfs: enforce statfs[64] structure initialization (Ilya Leoshkevich) - KVM: x86: do not report a vCPU as preempted outside instruction boundaries (Paolo Bonzini) - can: kvaser_pciefd: Disable interrupts in probe error path (Jimmy Assarsson) - can: kvaser_pciefd: Do not send EFLUSH command on TFD interrupt (Jimmy Assarsson) - can: kvaser_pciefd: Clear listen-only bit if not explicitly requested (Jimmy Assarsson) - can: kvaser_pciefd: Empty SRB buffer in probe (Jimmy Assarsson) - can: kvaser_pciefd: Call request_irq() before enabling interrupts (Jimmy Assarsson) - can: kvaser_pciefd: Set CAN_STATE_STOPPED in kvaser_pciefd_stop() (Jimmy Assarsson) - can: j1939: recvmsg(): allow MSG_CMSG_COMPAT flag (Oliver Hartkopp) - ALSA: hda/realtek: Add quirk for 2nd ASUS GU603 (Luke D. Jones) - ALSA: hda/realtek: Add a quirk for HP EliteDesk 805 (Ai Chao) - ALSA: hda: Add NVIDIA codec IDs a3 through a7 to patch table (Nikhil Mahale) - ALSA: hda: Fix Oops by 9.1 surround channel names (Takashi Iwai) - usb: typec: altmodes/displayport: fix pin_assignment_show (Badhri Jagan Sridharan) - usb: dwc3: debugfs: Resume dwc3 before accessing registers (Udipto Goswami) - USB: UHCI: adjust zhaoxin UHCI controllers OverCurrent bit value (Weitao Wang) - usb-storage: fix deadlock when a scsi command timeouts more than once (Maxime Bizon) - USB: usbtmc: Fix direction for 0-length ioctl control messages (Alan Stern) - vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit() (Eric Dumazet) - igb: fix bit_shift to be in [1..8] range (Aleksandr Loktionov) - cassini: Fix a memory leak in the error handling path of cas_init_one() (Christophe JAILLET) - wifi: iwlwifi: mvm: don't trust firmware n_channels (Johannes Berg) - net: bcmgenet: Restore phy_stop() depending upon suspend/close (Florian Fainelli) - net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop() (Florian Fainelli) - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (Dong Chenchen) - drm/exynos: fix g2d_open/close helper function definitions (Arnd Bergmann) - media: netup_unidvb: fix use-after-free at del_timer() (Duoming Zhou) - net: hns3: fix reset delay time to avoid configuration timeout (Jie Wang) - net: hns3: fix sending pfc frames after reset issue (Jijie Shao) - erspan: get the proto with the md version for collect_md (Xin Long) - ip_gre, ip6_gre: Fix race condition on o_seqno in collect_md mode (Peilin Ye) - ip6_gre: Make o_seqno start from 0 in native mode (Peilin Ye) - ip6_gre: Fix skb_under_panic in __gre6_xmit() (Peilin Ye) - serial: arc_uart: fix of_iomap leak in arc_serial_probe (Ke Zhang) - vsock: avoid to close connected socket after the timeout (Zhuang Shengen) - ALSA: firewire-digi00x: prevent potential use after free (Dan Carpenter) - net: fec: Better handle pm_runtime_get() failing in .remove() (Uwe Kleine-Konig) - af_key: Reject optional tunnel/BEET mode templates in outbound policies (Tobias Brunner) - cpupower: Make TSC read per CPU for Mperf monitor (Wyes Karny) - ASoC: fsl_micfil: register platform component before registering cpu dai (Shengjiu Wang) - btrfs: fix space cache inconsistency after error loading it from disk (Filipe Manana) - btrfs: replace calls to btrfs_find_free_ino with btrfs_find_free_objectid (Nikolay Borisov) - mfd: dln2: Fix memory leak in dln2_probe() (Qiang Ning) - phy: st: miphy28lp: use _poll_timeout functions for waits (Alain Volmat) - Input: xpad - add constants for GIP interface numbers (Vicki Pfau) - iommu/arm-smmu-v3: Acknowledge pri/event queue overflow if any (Tomas Krcka) - clk: tegra20: fix gcc-7 constant overflow warning (Arnd Bergmann) - RDMA/core: Fix multiple -Warray-bounds warnings (Gustavo A. R. Silva) - recordmcount: Fix memory leaks in the uwrite function (Hao Zeng) - sched: Fix KCSAN noinstr violation (Josh Poimboeuf) - mcb-pci: Reallocate memory region to avoid memory overlapping (Rodriguez Barbarin, Jose Javier) - serial: 8250: Reinit port->pm on port specific driver unbind (Tony Lindgren) - usb: typec: tcpm: fix multiple times discover svids error (Frank Wang) - HID: wacom: generic: Set battery quirk only when we see battery data (Jason Gerecke) - spi: spi-imx: fix MX51_ECSPI_* macros when cs > 3 (Kevin Groeneveld) - HID: logitech-hidpp: Reconcile USB and Unifying serials (Bastien Nocera) - HID: logitech-hidpp: Don't use the USB serial for USB devices (Bastien Nocera) - staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE (Philipp Hortmann) - Bluetooth: L2CAP: fix 'bad unlock balance' in l2cap_disconnect_rsp (Min Li) - wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace (Hans de Goede) - wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf (Hyunwoo Kim) - wifi: iwlwifi: pcie: fix possible NULL pointer dereference (Daniel Gabay) - samples/bpf: Fix fout leak in hbm's run_bpf_prog (Hao Zeng) - f2fs: fix to drop all dirty pages during umount() if cp_error is set (Chao Yu) - ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa() (Ojaswin Mujoo) - ext4: set goal start correctly in ext4_mb_normalize_request (Kemeng Shi) - gfs2: Fix inode height consistency check (Andreas Gruenbacher) - scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition (Zheng Wang) - lib: cpu_rmap: Avoid use after free on rmap->obj array entries (Eli Cohen) - net: Catch invalid index in XPS mapping (Nick Child) - net: pasemi: Fix return type of pasemi_mac_start_tx() (Nathan Chancellor) - scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow (Justin Tee) - ext2: Check block size validity during mount (Jan Kara) - wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex (Hector Martin) - ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects (void0red) - ACPICA: Avoid undefined behavior: applying zero offset to null pointer (Tamir Duberstein) - drm/tegra: Avoid potential 32-bit integer overflow (Nur Hussein) - ACPI: EC: Fix oops when removing custom query handlers (Armin Wolf) - firmware: arm_sdei: Fix sleep from invalid context BUG (Sherry Yang) - memstick: r592: Fix UAF bug in r592_remove due to race condition (Zheng Wang) - regmap: cache: Return error in cache sync operations for REGCACHE_NONE (Alexander Stein) - drm/amd/display: Use DC_LOG_DC in the trasform pixel function (Rodrigo Siqueira) - fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode() (Tetsuo Handa) - af_unix: Fix data races around sk->sk_shutdown. (Kuniyuki Iwashima) - af_unix: Fix a data race of sk->sk_receive_queue->qlen. (Kuniyuki Iwashima) - net: datagram: fix data-races in datagram_poll() (Eric Dumazet) - ipvlan:Fix out-of-bounds caused by unclear skb->cb (t.feng) - net: add vlan_get_protocol_and_depth() helper (Eric Dumazet) - net: tap: check vlan with eth_type_vlan() method (Menglong Dong) - net: annotate sk->sk_err write from do_recvmmsg() (Eric Dumazet) - netlink: annotate accesses to nlk->cb_running (Eric Dumazet) - netfilter: conntrack: fix possible bug_on with enable_hooks=1 (Florian Westphal) - net: Fix load-tearing on sk->sk_stamp in sock_recv_cmsgs(). (Kuniyuki Iwashima) - linux/dim: Do nothing if no time delta between samples (Roy Novich) - ARM: 9296/1: HP Jornada 7XX: fix kernel-doc warnings (Randy Dunlap) - drm/mipi-dsi: Set the fwnode for mipi_dsi_device (Saravana Kannan) - driver core: add a helper to setup both the of_node and fwnode of a device (Ioana Ciornei) - LTS tag: v5.4.243 (Sherry Yang) - drm/amd/display: Fix hang when skipping modeset (Aurabindo Pillai) - mm/page_alloc: fix potential deadlock on zonelist_update_seq seqlock (Tetsuo Handa) - drm/exynos: move to use request_irq by IRQF_NO_AUTOEN flag (Tian Tao) - drm/msm/adreno: Fix null ptr access in adreno_gpu_cleanup() (Akhil P Oommen) - firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe() (Yang Yingliang) - drm/msm: Fix double pm_runtime_disable() call (Maximilian Luz) - PM: domains: Restore comment indentation for generic_pm_domain.child_links (Geert Uytterhoeven) - printk: declare printk_deferred_{enter,safe}() in include/linux/printk.h (Tetsuo Handa) - PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock (Lukas Wunner) - PCI: pciehp: Use down_read/write_nested(reset_lock) to fix lockdep errors (Hans de Goede) - drbd: correctly submit flush bio on barrier (Christoph Bohmwalder) - serial: 8250: Fix serial8250_tx_empty() race with DMA Tx (Ilpo Jarvinen) - tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH (Ilpo Jarvinen) - ext4: fix invalid free tracking in ext4_xattr_move_to_block() (Theodore Ts'o) - ext4: remove a BUG_ON in ext4_mb_release_group_pa() (Theodore Ts'o) - ext4: bail out of ext4_xattr_ibody_get() fails for any reason (Theodore Ts'o) - ext4: add bounds checking in get_max_inline_xattr_value_size() (Theodore Ts'o) - ext4: fix deadlock when converting an inline directory in nojournal mode (Theodore Ts'o) - ext4: improve error recovery code paths in __ext4_remount() (Theodore Ts'o) - ext4: fix data races when using cached status extents (Jan Kara) - ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum (Tudor Ambarus) - ext4: fix WARNING in mb_find_extent (Ye Bin) - HID: wacom: insert timestamp to packed Bluetooth (BT) events (Ping Cheng) - HID: wacom: Set a default resolution for older tablets (Ping Cheng) - drm/amdgpu: disable sdma ecc irq only when sdma RAS is enabled in suspend (Guchun Chen) - drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy gfx ras (Guchun Chen) - drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini() (Hamza Mahfooz) - drm/panel: otm8009a: Set backlight parent to panel device (James Cowgill) - f2fs: fix potential corruption when moving a directory (Jaegeuk Kim) - ARM: dts: s5pv210: correct MIPI CSIS clock name (Krzysztof Kozlowski) - ARM: dts: exynos: fix WM8960 clock name in Itop Elite (Krzysztof Kozlowski) - remoteproc: st: Call of_node_put() on iteration error (Mathieu Poirier) - remoteproc: stm32: Call of_node_put() on iteration error (Mathieu Poirier) - sh: nmi_debug: fix return value of __setup handler (Randy Dunlap) - sh: init: use OF_EARLY_FLATTREE for early init (Randy Dunlap) - sh: math-emu: fix macro redefined warning (Randy Dunlap) - inotify: Avoid reporting event with invalid wd (Jan Kara) - platform/x86: touchscreen_dmi: Add info for the Dexp Ursus KX210i (Andrey Avdeev) - cifs: fix pcchunk length type in smb2_copychunk_range (Pawel Witek) - btrfs: print-tree: parent bytenr must be aligned to sector size (Anastasia Belova) - btrfs: don't free qgroup space unless specified (Josef Bacik) - btrfs: fix btrfs_prev_leaf() to not return the same key twice (Filipe Manana) - perf symbols: Fix return incorrect build_id size in elf_read_build_id() (Yang Jihong) - perf map: Delete two variable initialisations before null pointer checks in sort__sym_from_cmp() (Markus Elfring) - perf vendor events power9: Remove UTF-8 characters from JSON files (Kajol Jain) - virtio_net: suppress cpu stall when free_unused_bufs (Wenliang Wang) - virtio_net: split free_unused_bufs() (Xuan Zhuo) - net: dsa: mt7530: fix corrupt frames using trgmii on 40 MHz XTAL MT7621 (Ar?nc UNAL) - ALSA: caiaq: input: Add error handling for unsupported input methods in snd_usb_caiaq_input_init (Ruliang Lin) - drm/amdgpu: add a missing lock for AMDGPU_SCHED (Chia-I Wu) - af_packet: Don't send zero-byte data in packet_sendmsg_spkt(). (Kuniyuki Iwashima) - ionic: remove noise from ethtool rxnfc error msg (Shannon Nelson) - rxrpc: Fix hard call timeout units (David Howells) - net/sched: act_mirred: Add carrier check (Victor Nogueira) - writeback: fix call of incorrect macro (Maxim Korotkov) - net: dsa: mv88e6xxx: add mv88e6321 rsvd2cpu (Angelo Dureghello) - sit: update dev->needed_headroom in ipip6_tunnel_bind_dev() (Cong Wang) - net/sched: cls_api: remove block_cb from driver_list before freeing (Vlad Buslov) - net/ncsi: clear Tx enable mode when handling a Config required AEN (Cosmo Chou) - relayfs: fix out-of-bounds access in relay_file_read (Zhang Zhengming) - kernel/relay.c: fix read_pos error when multiple readers (Pengcheng Yang) - crypto: safexcel - Cleanup ring IRQ workqueues on load failure (Jonathan McDowell) - crypto: inside-secure - irq balance (Sven Auhagen) - dm verity: fix error handling for check_at_most_once on FEC (Yeongjin Gil) - dm verity: skip redundant verity_handle_err() on I/O errors (Akilesh Kailash) - mailbox: zynqmp: Fix counts of child nodes (Tanmay Shah) - mailbox: zynq: Switch to flexible array to simplify code (Christophe JAILLET) - tick/nohz: Fix cpu_is_hotpluggable() by checking with nohz subsystem (Joel Fernandes (Google)) - nohz: Add TICK_DEP_BIT_RCU (Frederic Weisbecker) - debugobject: Ensure pool refill (again) (Thomas Gleixner) - perf intel-pt: Fix CYC timestamps after standalone CBR (Adrian Hunter) - perf auxtrace: Fix address filter entire kernel size (Adrian Hunter) - dm ioctl: fix nested locking in table_clear() to remove deadlock concern (Mike Snitzer) - dm flakey: fix a crash with invalid table line (Mikulas Patocka) - dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path (Mike Snitzer) - dm clone: call kmem_cache_destroy() in dm_clone_init() error path (Mike Snitzer) - s390/dasd: fix hanging blockdevice after request requeue (Stefan Haberland) - btrfs: scrub: reject unsupported scrub flags (Qu Wenruo) - scripts/gdb: fix lx-timerlist for Python3 (Peng Liu) - clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent (Quentin Schulz) - wifi: rtl8xxxu: RTL8192EU always needs full init (Bitterblue Smith) - mailbox: zynqmp: Fix typo in IPI documentation (Tanmay Shah) - mailbox: zynqmp: Fix IPI isr handling (Tanmay Shah) - md/raid10: fix null-ptr-deref in raid10_sync_request (Li Nan) - nilfs2: fix infinite loop in nilfs_mdt_get_block() (Ryusuke Konishi) - nilfs2: do not write dirty data after degenerating to read-only (Ryusuke Konishi) - parisc: Fix argument pointer in real64_call_asm() (Helge Deller) - afs: Fix updating of i_size with dv jump from server (Marc Dionne) - dmaengine: at_xdmac: do not enable all cyclic channels (Claudiu Beznea) - dmaengine: dw-edma: Fix to enable to issue dma request on DMA processing (Shunsuke Mie) - dmaengine: dw-edma: Fix to change for continuous transfer (Shunsuke Mie) - phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port (Gaosheng Cui) - pwm: mtk-disp: Disable shadow registers before setting backlight values (AngeloGioacchino Del Regno) - pwm: mtk-disp: Adjust the clocks to avoid them mismatch (Jitao Shi) - pwm: mtk-disp: Don't check the return code of pwmchip_remove() (Uwe Kleine-Konig) - dmaengine: mv_xor_v2: Fix an error code. (Christophe JAILLET) - leds: TI_LMU_COMMON: select REGMAP instead of depending on it (Randy Dunlap) - ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline (Ye Bin) - openrisc: Properly store r31 to pt_regs on unhandled exceptions (Stafford Horne) - clocksource/drivers/davinci: Fix memory leak in davinci_timer_register when init fails (Qinrun Dai) - clocksource: davinci: axe a pointless __GFP_NOFAIL (Christophe JAILLET) - clocksource/drivers/davinci: Avoid trailing '\n' hidden in pr_fmt() (Christophe JAILLET) - RDMA/mlx5: Use correct device num_ports when modify DC (Mark Zhang) - Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe (Miaoqian Lin) - input: raspberrypi-ts: Release firmware handle when not needed (Nicolas Saenz Julienne) - firmware: raspberrypi: Introduce devm_rpi_firmware_get() (Nicolas Saenz Julienne) - firmware: raspberrypi: Keep count of all consumers (Nicolas Saenz Julienne) - NFSv4.1: Always send a RECLAIM_COMPLETE after establishing lease (Trond Myklebust) - IB/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order (Patrick Kelsey) - RDMA/siw: Remove namespace check from siw_netdev_event() (Tetsuo Handa) - clk: add missing of_node_put() in 'assigned-clocks' property parsing (Clement Leger) - power: supply: generic-adc-battery: fix unit scaling (Sebastian Reichel) - rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current time (Martin Blumenstingl) - RDMA/mlx4: Prevent shift wrapping in set_user_sq_size() (Dan Carpenter) - rtc: omap: include header for omap_rtc_power_off_program prototype (Krzysztof Kozlowski) - RDMA/rdmavt: Delete unnecessary NULL check (Natalia Petrova) - RDMA/siw: Fix potential page_array out of range access (Daniil Dulov) - perf/core: Fix hardlockup failure caused by perf throttle (Yang Jihong) - powerpc/rtas: use memmove for potentially overlapping buffer copy (Nathan Lynch) - macintosh: via-pmu-led: requires ATA to be set (Randy Dunlap) - powerpc/sysdev/tsi108: fix resource printk format warnings (Randy Dunlap) - powerpc/wii: fix resource printk format warnings (Randy Dunlap) - powerpc/mpc512x: fix resource printk format warning (Randy Dunlap) - macintosh/windfarm_smu_sat: Add missing of_node_put() (Liang He) - spmi: Add a check for remove callback when removing a SPMI driver (Jishnu Prakash) - staging: rtl8192e: Fix W_DISABLE# does not work after stop/start (Philipp Hortmann) - serial: 8250: Add missing wakeup event reporting (Florian Fainelli) - tty: serial: fsl_lpuart: adjust buffer length to the intended size (Shenwei Wang) - firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe (Dan Carpenter) - usb: mtu3: fix kernel panic at qmu transfer done irq handler (Chunfeng Yun) - usb: chipidea: fix missing goto in ci_hdrc_probe (Yinhao Hu) - sh: sq: Fix incorrect element size for allocating bitmap buffer (John Paul Adrian Glaubitz) - uapi/linux/const.h: prefer ISO-friendly __typeof__ (Kevin Brodsky) - spi: cadence-quadspi: fix suspend-resume implementations (Dhruva Gole) - mtd: spi-nor: cadence-quadspi: Handle probe deferral while requesting DMA channel (Vignesh Raghavendra) - mtd: spi-nor: cadence-quadspi: Don't initialize rx_dma_complete on failure (Vignesh Raghavendra) - mtd: spi-nor: cadence-quadspi: Make driver independent of flash geometry (Vignesh Raghavendra) - scripts/gdb: bail early if there are no generic PD (Florian Fainelli) - PM: domains: Fix up terminology with parent/child (Kees Cook) - scripts/gdb: bail early if there are no clocks (Florian Fainelli) - ia64: salinfo: placate defined-but-not-used warning (Randy Dunlap) - ia64: mm/contig: fix section mismatch warning/error (Randy Dunlap) - of: Fix modalias string generation (Miquel Raynal) - vmci_host: fix a race condition in vmci_host_poll() causing GPF (Dae R. Jeong) - spi: fsl-spi: Fix CPM/QE mode Litte Endian (Christophe Leroy) - spi: qup: Don't skip cleanup in remove's error path (Uwe Kleine-Konig) - linux/vt_buffer.h: allow either builtin or modular for macros (Randy Dunlap) - ASoC: es8316: Handle optional IRQ assignment (Cristian Ciocaltea) - ASoC: es8316: Use IRQF_NO_AUTOEN when requesting the IRQ (Hans de Goede) - genirq: Add IRQF_NO_AUTOEN for request_irq/nmi() (Barry Song) - PCI: imx6: Install the fault handler only on compatible match (H. Nikolaus Schaller) - usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition (Zheng Wang) - iio: light: max44009: add missing OF device matching (Krzysztof Kozlowski) - fpga: bridge: fix kernel-doc parameter description (Marco Pagani) - usb: host: xhci-rcar: remove leftover quirk handling (Wolfram Sang) - pstore: Revert pmsg_lock back to a normal mutex (John Stultz) - tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp. (Kuniyuki Iwashima) - net: amd: Fix link leak when verifying config failed (Gencen Gan) - netlink: Use copy_to_user() for optval in netlink_getsockopt(). (Kuniyuki Iwashima) - ipv4: Fix potential uninit variable access bug in __ip_make_skb() (Ziyang Xuan) - netfilter: nf_tables: don't write table validation state without mutex (Florian Westphal) - bpf: Don't EFAULT for getsockopt with optval=NULL (Stanislav Fomichev) - ixgbe: Enable setting RSS table to default values (Joe Damato) - ixgbe: Allow flow hash to be set via ethtool (Joe Damato) - wifi: iwlwifi: mvm: check firmware response size (Johannes Berg) - wifi: iwlwifi: make the loop for card preparation effective (Emmanuel Grumbach) - md/raid10: fix memleak of md thread (Yu Kuai) - md: update the optimal I/O size on reshape (Christoph Hellwig) - md/raid10: fix memleak for 'conf->bio_split' (Yu Kuai) - md/raid10: fix leak of 'r10bio->remaining' for recovery (Yu Kuai) - bpf, sockmap: Revert buggy deadlock fix in the sockhash and sockmap (Daniel Borkmann) - nvme-fcloop: fix 'inconsistent {IN-HARDIRQ-W} -> {HARDIRQ-ON-W} usage' (Ming Lei) - nvme: fix async event trace event (Keith Busch) - nvme: handle the persistent internal error AER (Michael Kelley) - bpf, sockmap: fix deadlocks in the sockhash and sockmap (Xin Liu) - scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() (Shuchang Li) - crypto: drbg - Only fail when jent is unavailable in FIPS mode (Herbert Xu) - crypto: drbg - make drbg_prepare_hrng() handle jent instantiation errors (Nicolai Stange) - bpftool: Fix bug for long instructions in program CFG dumps (Quentin Monnet) - wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg() (Wei Chen) - wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg() (Wei Chen) - rtlwifi: Replace RT_TRACE with rtl_dbg (Larry Finger) - rtlwifi: Start changing RT_TRACE into rtl_dbg (Larry Finger) - f2fs: handle dqget error in f2fs_transfer_project_quota() (Yangtao Li) - scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS (Danila Chernetsov) - net/packet: convert po->auxdata to an atomic flag (Eric Dumazet) - net/packet: convert po->origdev to an atomic flag (Eric Dumazet) - net/packet: annotate accesses to po->xmit (Eric Dumazet) - vlan: partially enable SIOCSHWTSTAMP in container (Vadim Fedorenko) - scm: fix MSG_CTRUNC setting condition for SO_PASSSEC (Alexander Mikhalitsyn) - wifi: rtw88: mac: Return the original error from rtw_mac_power_switch() (Martin Blumenstingl) - wifi: rtw88: mac: Return the original error from rtw_pwr_seq_parser() (Martin Blumenstingl) - tools: bpftool: Remove invalid \' json escape (Luis Gerhorst) - wifi: ath6kl: reduce WARN to dev_dbg() in callback (Fedor Pchelkin) - wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list() (Dan Carpenter) - wifi: ath9k: hif_usb: fix memory leak of remain_skbs (Fedor Pchelkin) - wifi: ath6kl: minor fix for allocation size (Alexey V. Vissarionov) - tick/common: Align tick period with the HZ tick. (Sebastian Andrzej Siewior) - tick: Get rid of tick_period (Thomas Gleixner) - tick/sched: Optimize tick_do_update_jiffies64() further (Thomas Gleixner) - tick/sched: Reduce seqcount held scope in tick_do_update_jiffies64() (Yunfeng Ye) - tick/sched: Use tick_next_period for lockless quick check (Thomas Gleixner) - timekeeping: Split jiffies seqlock (Thomas Gleixner) - debugobject: Prevent init race with static objects (Thomas Gleixner) - arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step (Sumit Garg) - x86/ioapic: Don't return 0 from arch_dynirq_lower_bound() (Saurabh Sengar) - regulator: stm32-pwr: fix of_iomap leak (YAN SHI) - media: rc: gpio-ir-recv: Fix support for wake-up (Florian Fainelli) - media: rcar_fdp1: Fix refcount leak in probe and remove function (Miaoqian Lin) - media: rcar_fdp1: Fix the correct variable assignments (Tang Bin) - media: rcar_fdp1: Make use of the helper function devm_platform_ioremap_resource() (Cai Huoqing) - media: rcar_fdp1: fix pm_runtime_get_sync() usage count (Mauro Carvalho Chehab) - media: rcar_fdp1: simplify error check logic at fdp_open() (Mauro Carvalho Chehab) - media: saa7134: fix use after free bug in saa7134_finidev due to race condition (Zheng Wang) - media: dm1105: Fix use after free bug in dm1105_remove due to race condition (Zheng Wang) - x86/apic: Fix atomic update of offset in reserve_eilvt_offset() (Uros Bizjak) - regulator: core: Avoid lockdep reports when resolving supplies (Douglas Anderson) - regulator: core: Consistently set mutex_owner when using ww_mutex_lock_slow() (Douglas Anderson) - drm/lima/lima_drv: Add missing unwind goto in lima_pdev_probe() (Harshit Mogalapalli) - mmc: sdhci-of-esdhc: fix quirk to ignore command inhibit for data (Georgii Kruglov) - drm/msm/adreno: drop bogus pm_runtime_set_active() (Johan Hovold) - drm/msm/adreno: Defer enabling runpm until hw_init() (Rob Clark) - drm/msm: fix unbalanced pm_runtime_enable in adreno_gpu_{init, cleanup} (Jonathan Marek) - firmware: qcom_scm: Clear download bit during reboot (Mukesh Ojha) - media: av7110: prevent underflow in write_ts_to_decoder() (Dan Carpenter) - media: uapi: add MEDIA_BUS_FMT_METADATA_FIXED media bus format. (Dafna Hirschfeld) - media: bdisp: Add missing check for create_workqueue (Jiasheng Jiang) - ARM: dts: qcom: ipq8064: Fix the PCI I/O port range (Manivannan Sadhasivam) - ARM: dts: qcom: ipq8064: reduce pci IO size to 64K (Christian Marangi) - ARM: dts: qcom: ipq4019: Fix the PCI I/O port range (Manivannan Sadhasivam) - EDAC/skx: Fix overflows on the DRAM row address mapping arrays (Qiuxu Zhuo) - arm64: dts: renesas: r8a774c0: Remove bogus voltages from OPP table (Geert Uytterhoeven) - arm64: dts: renesas: r8a77990: Remove bogus voltages from OPP table (Geert Uytterhoeven) - drm/probe-helper: Cancel previous job before starting new one (Dom Cobley) - drm/vgem: add missing mutex_destroy (Maira Canal) - drm/rockchip: Drop unbalanced obj unref (Rob Clark) - erofs: fix potential overflow calculating xattr_isize (Jingbo Xu) - erofs: stop parsing non-compact HEAD index if clusterofs is invalid (Gao Xiang) - tpm, tpm_tis: Do not skip reset of original interrupt vector (Lino Sanfilippo) - selinux: ensure av_permissions.h is built when needed (Paul Moore) - selinux: fix Makefile dependencies of flask.h (Ondrej Mosnacek) - ubifs: Free memory for tmpfile name (Marten Lindahl) - ubi: Fix return value overwrite issue in try_write_vid_and_data() (Wang YanQing) - ubifs: Fix memleak when insert_old_idx() failed (Zhihao Cheng) - i2c: omap: Fix standard mode false ACK readings (Reid Tonking) - KVM: nVMX: Emulate NOPs in L2, and PAUSE if it's not intercepted (Sean Christopherson) - reiserfs: Add security prefix to xattr name in reiserfs_security_write() (Roberto Sassu) - ring-buffer: Sync IRQ works before buffer destruction (Johannes Berg) - pwm: meson: Fix g12a ao clk81 name (Heiner Kallweit) - pwm: meson: Fix axg ao mux parents (Heiner Kallweit) - kheaders: Use array declaration instead of char (Kees Cook) - ipmi: fix SSIF not responding under certain cond. (Zhang Yuchen) - MIPS: fw: Allow firmware to pass a empty env (Jiaxun Yang) - xhci: fix debugfs register accesses while suspended (Johan Hovold) - debugfs: regset32: Add Runtime PM support (Geert Uytterhoeven) - staging: iio: resolver: ads1210: fix config mode (Nuno Sa) - perf sched: Cast PTHREAD_STACK_MIN to int as it may turn into sysconf(__SC_THREAD_STACK_MIN_VALUE) (Arnaldo Carvalho de Melo) - USB: dwc3: fix runtime pm imbalance on unbind (Johan Hovold) - USB: dwc3: fix runtime pm imbalance on probe errors (Johan Hovold) - asm-generic/io.h: suppress endianness warnings for readq() and writeq() (Vladimir Oltean) - ASoC: Intel: bytcr_rt5640: Add quirk for the Acer Iconia One 7 B1-750 (Hans de Goede) - iio: adc: palmas_gpadc: fix NULL dereference on rmmod (Patrik Dahlstrom) - USB: serial: option: add UNISOC vendor and TOZED LT70C product (Ar?nc UNAL) - bluetooth: Perform careful capability checks in hci_sock_ioctl() (Ruihan Li) - drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var (Daniel Vetter) - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() (Jisoo Jang) - counter: 104-quad-8: Fix race condition between FLAG and CNTR reads (William Breathitt Gray) [5.4.17-2136.321.1.el7] - uek-rpm: Blacklist cls_tcindex module (Somasundaram Krishnasamy) [Orabug: 35408335] - uek_kabi: Add UEK_KABI_DEPRECATE_ENUM (Sherry Yang) [Orabug: 35469883] - perf kvm: Add kvm-stat for arm64 (Sergey Senozhatsky) [Orabug: 35415996] - dsc-drivers: update ionic drivers to 23.04.1-001 (Dave Kleikamp) [Orabug: 35416310] - dsc-drivers: update ionic drivers to 22.11.1-001 (Dave Kleikamp) [Orabug: 35416310] - dsc-drivers: update drivers for 1.15.9-C-100 (Dave Kleikamp) [Orabug: 35416310] - elba.dtsi: Improved sdclk and sdclk-hsmmc timing. (David Clear) [Orabug: 35416310] - drivers/i2c: Fix Lattice RD1173 interrupt handling (Hiren Mehta) [Orabug: 35416310] - defconfig: cleanup elba_defconfig (Hiren Mehta) [Orabug: 35416310] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-34918 CVE-2022-39189 cpe:/a:oracle:linux:7::UEKR6 Oracle Linux 8 [5.4.17-2136.321.4.el8] - tick/common: Align tick period during sched_timer setup (Thomas Gleixner) [Orabug: 35520079] - net/rds: Fix endless rds_send_xmit() loop if cp_index > 0 (Gerd Rausch) [Orabug: 35510149] [5.4.17-2136.321.3.el8] - selinux: don't use make's grouped targets feature yet (Paul Moore) - lib: cpu_rmap: Fix potential use-after-free in irq_cpu_rmap_release() (Ben Hutchings) - Revert 'staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE' (Greg Kroah-Hartman) - iommu/amd: Fix compile error for unused function (Joerg Roedel) [Orabug: 35070061] - iommu/amd: Do not Invalidate IRT when IRTE caching is disabled (Suravee Suthikulpanit) [Orabug: 35070061] - iommu/amd: Introduce Disable IRTE Caching Support (Suravee Suthikulpanit) [Orabug: 35070061] - iommu/amd: Remove the unused struct amd_ir_data.ref (Suravee Suthikulpanit) [Orabug: 35070061] - iommu/amd: Switch amd_iommu_update_ga() to use modify_irte_ga() (Joao Martins) [Orabug: 35070061] - iommu/amd: Handle GALog overflows (Joao Martins) [Orabug: 35070061] - iommu/amd: Fix 'Guest Virtual APIC Table Root Pointer' configuration in IRTE (Kishon Vijay Abraham I) [Orabug: 35070061] - KVM: x86: ioapic: Fix level-triggered EOI and userspace I/OAPIC reconfigure race (Adamos Ttofari) [Orabug: 35070061] - xfs: fix AGFL allocation deadlock (Wengang Wang) [Orabug: 35159734] - crypto: api - Demote BUG_ON() in crypto_unregister_alg() to a WARN_ON() (Toke H?iland-J?rgensen) [Orabug: 35152388] - crypto: qat - drop log level of msg in get_instance_node() (Giovanni Cabiddu) [Orabug: 35152388] - crypto: algapi - make unregistration functions return void (Eric Biggers) [Orabug: 35152388] - bnxt_en: Clear DEFRAG flag in firmware message when retry flashing. (Pavan Chebbi) [Orabug: 35365203] - bnxt_en: Enable batch mode when using HWRM_NVM_MODIFY to flash packages. (Michael Chan) [Orabug: 35365203] - bnxt_en: Retry installing FW package under NO_SPACE error condition. (Pavan Chebbi) [Orabug: 35365203] - bnxt_en: Restructure bnxt_flash_package_from_fw_obj() to execute in a loop. (Pavan Chebbi) [Orabug: 35365203] - bnxt_en: Rearrange the logic in bnxt_flash_package_from_fw_obj(). (Michael Chan) [Orabug: 35365203] - bnxt_en: Refactor bnxt_flash_nvram. (Pavan Chebbi) [Orabug: 35365203] [5.4.17-2136.321.2.el8] - LTS tag: v5.4.245 (Sherry Yang) - netfilter: ctnetlink: Support offloaded conntrack entry deletion (Paul Blakey) - ipv{4,6}/raw: fix output xfrm lookup wrt protocol (Nicolas Dichtel) - binder: fix UAF caused by faulty buffer cleanup (Carlos Llamas) - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (Ruihan Li) - cdc_ncm: Fix the build warning (Alexander Bersenev) - net/mlx5: Devcom, serialize devcom registration (Shay Drory) - net/mlx5: devcom only supports 2 ports (Mark Bloch) - fs: fix undefined behavior in bit shift for SB_NOUSER (Hao Ge) - power: supply: bq24190: Call power_supply_changed() after updating input current (Hans de Goede) - power: supply: core: Refactor power_supply_set_input_current_limit_from_supplier() (Hans de Goede) - power: supply: bq27xxx: After charger plug in/out wait 0.5s for things to stabilize (Hans de Goede) - net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize (Tudor Ambarus) - cdc_ncm: Implement the 32-bit version of NCM Transfer Block (Alexander Bersenev) - LTS tag: v5.4.244 (Sherry Yang) - 3c589_cs: Fix an error handling path in tc589_probe() (Christophe JAILLET) - net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device (Shay Drory) - net/mlx5: Fix error message when failing to allocate device memory (Roi Dayan) - forcedeth: Fix an error handling path in nv_probe() (Christophe JAILLET) - ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg (Cezary Rojewski) - x86/show_trace_log_lvl: Ensure stack pointer is aligned, again (Vernon Lovejoy) - xen/pvcalls-back: fix double frees with pvcalls_new_active_socket() (Dan Carpenter) - coresight: Fix signedness bug in tmc_etr_buf_insert_barrier_packet() (Dan Carpenter) - power: supply: sbs-charger: Fix INHIBITED bit for Status reg (Daisuke Nojiri) - power: supply: bq27xxx: Fix poll_interval handling and races on remove (Hans de Goede) - power: supply: bq27xxx: Fix I2C IRQ race on remove (Hans de Goede) - power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition (Hans de Goede) - power: supply: leds: Fix blink to LED on transition (Hans de Goede) - ipv6: Fix out-of-bounds access in ipv6_find_tlv() (Gavrilov Ilia) - bpf: Fix mask generation for 32-bit narrow loads of 64-bit fields (Will Deacon) - net: fix skb leak in __skb_tstamp_tx() (Pratyush Yadav) - media: radio-shark: Add endpoint checks (Alan Stern) - USB: sisusbvga: Add endpoint checks (Alan Stern) - USB: core: Add routines for endpoint checks in old drivers (Alan Stern) - udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated(). (Kuniyuki Iwashima) - net: fix stack overflow when LRO is disabled for virtual interfaces (Taehee Yoo) - fbdev: udlfb: Fix endpoint check (Alan Stern) - debugobjects: Don't wake up kswapd from fill_pool() (Tetsuo Handa) - x86/topology: Fix erroneous smp_num_siblings on Intel Hybrid platforms (Zhang Rui) - parisc: Fix flush_dcache_page() for usage from irq context (Helge Deller) - selftests/memfd: Fix unknown type name build failure (Hardik Garg) - x86/mm: Avoid incomplete Global INVLPG flushes (Dave Hansen) - btrfs: use nofs when cleaning up aborted transactions (Josef Bacik) - gpio: mockup: Fix mode of debugfs files (Zev Weiss) - parisc: Allow to reboot machine after system halt (Helge Deller) - parisc: Handle kgdb breakpoints only in kernel context (Helge Deller) - m68k: Move signal frame following exception on 68020/030 (Finn Thain) - ALSA: hda/realtek: Enable headset onLenovo M70/M90 (Bin Li) - ALSA: hda/ca0132: add quirk for EVGA X299 DARK (Adam Stylinski) - mt76: mt7615: Fix build with older compilers (Pablo Greco) - spi: fsl-cpm: Use 16 bit mode for large transfers with even size (Christophe Leroy) - spi: fsl-spi: Re-organise transfer bits_per_word adaptation (Christophe Leroy) - watchdog: sp5100_tco: Immediately trigger upon starting. (Gregory Oakes) - s390/qdio: fix do_sqbs() inline assembly constraint (Heiko Carstens) - s390/qdio: get rid of register asm (Heiko Carstens) - vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF (George Kennedy) - vc_screen: rewrite vcs_size to accept vc, not inode (Jiri Slaby) - usb: gadget: u_ether: Fix host MAC address case (Konrad Grafe) - usb: gadget: u_ether: Convert prints to device prints (Jon Hunter) - lib/string_helpers: Introduce string_upper() and string_lower() helpers (Vadim Pasternak) - HID: wacom: add three styli to wacom_intuos_get_tool_type (Ping Cheng) - HID: wacom: Add new Intuos Pro Small (PTH-460) device IDs (Ping Cheng) - HID: wacom: Force pen out of prox if no events have been received in a while (Jason Gerecke) - netfilter: nf_tables: hold mutex on netns pre_exit path (Pablo Neira Ayuso) - netfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on NFT_SET_OBJECT flag (Pablo Neira Ayuso) - netfilter: nf_tables: stricter validation of element data (Pablo Neira Ayuso) - netfilter: nf_tables: allow up to 64 bytes in the set element data area (Pablo Neira Ayuso) - netfilter: nf_tables: add nft_setelem_parse_key() (Pablo Neira Ayuso) - netfilter: nf_tables: validate registers coming from userspace. (Pablo Neira Ayuso) - netfilter: nftables: statify nft_parse_register() (Pablo Neira Ayuso) - netfilter: nftables: add nft_parse_register_store() and use it (Pablo Neira Ayuso) - netfilter: nftables: add nft_parse_register_load() and use it (Pablo Neira Ayuso) - nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode() (Ryusuke Konishi) - powerpc/64s/radix: Fix soft dirty tracking (Michael Ellerman) - tpm/tpm_tis: Disable interrupts for more Lenovo devices (Jerry Snitselaar) - ceph: force updating the msg pointer in non-split case (Xiubo Li) - serial: Add support for Advantech PCI-1611U card (Vitaliy Tomin) - statfs: enforce statfs[64] structure initialization (Ilya Leoshkevich) - KVM: x86: do not report a vCPU as preempted outside instruction boundaries (Paolo Bonzini) - can: kvaser_pciefd: Disable interrupts in probe error path (Jimmy Assarsson) - can: kvaser_pciefd: Do not send EFLUSH command on TFD interrupt (Jimmy Assarsson) - can: kvaser_pciefd: Clear listen-only bit if not explicitly requested (Jimmy Assarsson) - can: kvaser_pciefd: Empty SRB buffer in probe (Jimmy Assarsson) - can: kvaser_pciefd: Call request_irq() before enabling interrupts (Jimmy Assarsson) - can: kvaser_pciefd: Set CAN_STATE_STOPPED in kvaser_pciefd_stop() (Jimmy Assarsson) - can: j1939: recvmsg(): allow MSG_CMSG_COMPAT flag (Oliver Hartkopp) - ALSA: hda/realtek: Add quirk for 2nd ASUS GU603 (Luke D. Jones) - ALSA: hda/realtek: Add a quirk for HP EliteDesk 805 (Ai Chao) - ALSA: hda: Add NVIDIA codec IDs a3 through a7 to patch table (Nikhil Mahale) - ALSA: hda: Fix Oops by 9.1 surround channel names (Takashi Iwai) - usb: typec: altmodes/displayport: fix pin_assignment_show (Badhri Jagan Sridharan) - usb: dwc3: debugfs: Resume dwc3 before accessing registers (Udipto Goswami) - USB: UHCI: adjust zhaoxin UHCI controllers OverCurrent bit value (Weitao Wang) - usb-storage: fix deadlock when a scsi command timeouts more than once (Maxime Bizon) - USB: usbtmc: Fix direction for 0-length ioctl control messages (Alan Stern) - vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit() (Eric Dumazet) - igb: fix bit_shift to be in [1..8] range (Aleksandr Loktionov) - cassini: Fix a memory leak in the error handling path of cas_init_one() (Christophe JAILLET) - wifi: iwlwifi: mvm: don't trust firmware n_channels (Johannes Berg) - net: bcmgenet: Restore phy_stop() depending upon suspend/close (Florian Fainelli) - net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop() (Florian Fainelli) - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (Dong Chenchen) - drm/exynos: fix g2d_open/close helper function definitions (Arnd Bergmann) - media: netup_unidvb: fix use-after-free at del_timer() (Duoming Zhou) - net: hns3: fix reset delay time to avoid configuration timeout (Jie Wang) - net: hns3: fix sending pfc frames after reset issue (Jijie Shao) - erspan: get the proto with the md version for collect_md (Xin Long) - ip_gre, ip6_gre: Fix race condition on o_seqno in collect_md mode (Peilin Ye) - ip6_gre: Make o_seqno start from 0 in native mode (Peilin Ye) - ip6_gre: Fix skb_under_panic in __gre6_xmit() (Peilin Ye) - serial: arc_uart: fix of_iomap leak in arc_serial_probe (Ke Zhang) - vsock: avoid to close connected socket after the timeout (Zhuang Shengen) - ALSA: firewire-digi00x: prevent potential use after free (Dan Carpenter) - net: fec: Better handle pm_runtime_get() failing in .remove() (Uwe Kleine-Konig) - af_key: Reject optional tunnel/BEET mode templates in outbound policies (Tobias Brunner) - cpupower: Make TSC read per CPU for Mperf monitor (Wyes Karny) - ASoC: fsl_micfil: register platform component before registering cpu dai (Shengjiu Wang) - btrfs: fix space cache inconsistency after error loading it from disk (Filipe Manana) - btrfs: replace calls to btrfs_find_free_ino with btrfs_find_free_objectid (Nikolay Borisov) - mfd: dln2: Fix memory leak in dln2_probe() (Qiang Ning) - phy: st: miphy28lp: use _poll_timeout functions for waits (Alain Volmat) - Input: xpad - add constants for GIP interface numbers (Vicki Pfau) - iommu/arm-smmu-v3: Acknowledge pri/event queue overflow if any (Tomas Krcka) - clk: tegra20: fix gcc-7 constant overflow warning (Arnd Bergmann) - RDMA/core: Fix multiple -Warray-bounds warnings (Gustavo A. R. Silva) - recordmcount: Fix memory leaks in the uwrite function (Hao Zeng) - sched: Fix KCSAN noinstr violation (Josh Poimboeuf) - mcb-pci: Reallocate memory region to avoid memory overlapping (Rodriguez Barbarin, Jose Javier) - serial: 8250: Reinit port->pm on port specific driver unbind (Tony Lindgren) - usb: typec: tcpm: fix multiple times discover svids error (Frank Wang) - HID: wacom: generic: Set battery quirk only when we see battery data (Jason Gerecke) - spi: spi-imx: fix MX51_ECSPI_* macros when cs > 3 (Kevin Groeneveld) - HID: logitech-hidpp: Reconcile USB and Unifying serials (Bastien Nocera) - HID: logitech-hidpp: Don't use the USB serial for USB devices (Bastien Nocera) - staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE (Philipp Hortmann) - Bluetooth: L2CAP: fix 'bad unlock balance' in l2cap_disconnect_rsp (Min Li) - wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace (Hans de Goede) - wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf (Hyunwoo Kim) - wifi: iwlwifi: pcie: fix possible NULL pointer dereference (Daniel Gabay) - samples/bpf: Fix fout leak in hbm's run_bpf_prog (Hao Zeng) - f2fs: fix to drop all dirty pages during umount() if cp_error is set (Chao Yu) - ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa() (Ojaswin Mujoo) - ext4: set goal start correctly in ext4_mb_normalize_request (Kemeng Shi) - gfs2: Fix inode height consistency check (Andreas Gruenbacher) - scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition (Zheng Wang) - lib: cpu_rmap: Avoid use after free on rmap->obj array entries (Eli Cohen) - net: Catch invalid index in XPS mapping (Nick Child) - net: pasemi: Fix return type of pasemi_mac_start_tx() (Nathan Chancellor) - scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow (Justin Tee) - ext2: Check block size validity during mount (Jan Kara) - wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex (Hector Martin) - ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects (void0red) - ACPICA: Avoid undefined behavior: applying zero offset to null pointer (Tamir Duberstein) - drm/tegra: Avoid potential 32-bit integer overflow (Nur Hussein) - ACPI: EC: Fix oops when removing custom query handlers (Armin Wolf) - firmware: arm_sdei: Fix sleep from invalid context BUG (Sherry Yang) - memstick: r592: Fix UAF bug in r592_remove due to race condition (Zheng Wang) - regmap: cache: Return error in cache sync operations for REGCACHE_NONE (Alexander Stein) - drm/amd/display: Use DC_LOG_DC in the trasform pixel function (Rodrigo Siqueira) - fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode() (Tetsuo Handa) - af_unix: Fix data races around sk->sk_shutdown. (Kuniyuki Iwashima) - af_unix: Fix a data race of sk->sk_receive_queue->qlen. (Kuniyuki Iwashima) - net: datagram: fix data-races in datagram_poll() (Eric Dumazet) - ipvlan:Fix out-of-bounds caused by unclear skb->cb (t.feng) - net: add vlan_get_protocol_and_depth() helper (Eric Dumazet) - net: tap: check vlan with eth_type_vlan() method (Menglong Dong) - net: annotate sk->sk_err write from do_recvmmsg() (Eric Dumazet) - netlink: annotate accesses to nlk->cb_running (Eric Dumazet) - netfilter: conntrack: fix possible bug_on with enable_hooks=1 (Florian Westphal) - net: Fix load-tearing on sk->sk_stamp in sock_recv_cmsgs(). (Kuniyuki Iwashima) - linux/dim: Do nothing if no time delta between samples (Roy Novich) - ARM: 9296/1: HP Jornada 7XX: fix kernel-doc warnings (Randy Dunlap) - drm/mipi-dsi: Set the fwnode for mipi_dsi_device (Saravana Kannan) - driver core: add a helper to setup both the of_node and fwnode of a device (Ioana Ciornei) - LTS tag: v5.4.243 (Sherry Yang) - drm/amd/display: Fix hang when skipping modeset (Aurabindo Pillai) - mm/page_alloc: fix potential deadlock on zonelist_update_seq seqlock (Tetsuo Handa) - drm/exynos: move to use request_irq by IRQF_NO_AUTOEN flag (Tian Tao) - drm/msm/adreno: Fix null ptr access in adreno_gpu_cleanup() (Akhil P Oommen) - firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe() (Yang Yingliang) - drm/msm: Fix double pm_runtime_disable() call (Maximilian Luz) - PM: domains: Restore comment indentation for generic_pm_domain.child_links (Geert Uytterhoeven) - printk: declare printk_deferred_{enter,safe}() in include/linux/printk.h (Tetsuo Handa) - PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock (Lukas Wunner) - PCI: pciehp: Use down_read/write_nested(reset_lock) to fix lockdep errors (Hans de Goede) - drbd: correctly submit flush bio on barrier (Christoph Bohmwalder) - serial: 8250: Fix serial8250_tx_empty() race with DMA Tx (Ilpo Jarvinen) - tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH (Ilpo Jarvinen) - ext4: fix invalid free tracking in ext4_xattr_move_to_block() (Theodore Ts'o) - ext4: remove a BUG_ON in ext4_mb_release_group_pa() (Theodore Ts'o) - ext4: bail out of ext4_xattr_ibody_get() fails for any reason (Theodore Ts'o) - ext4: add bounds checking in get_max_inline_xattr_value_size() (Theodore Ts'o) - ext4: fix deadlock when converting an inline directory in nojournal mode (Theodore Ts'o) - ext4: improve error recovery code paths in __ext4_remount() (Theodore Ts'o) - ext4: fix data races when using cached status extents (Jan Kara) - ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum (Tudor Ambarus) - ext4: fix WARNING in mb_find_extent (Ye Bin) - HID: wacom: insert timestamp to packed Bluetooth (BT) events (Ping Cheng) - HID: wacom: Set a default resolution for older tablets (Ping Cheng) - drm/amdgpu: disable sdma ecc irq only when sdma RAS is enabled in suspend (Guchun Chen) - drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy gfx ras (Guchun Chen) - drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini() (Hamza Mahfooz) - drm/panel: otm8009a: Set backlight parent to panel device (James Cowgill) - f2fs: fix potential corruption when moving a directory (Jaegeuk Kim) - ARM: dts: s5pv210: correct MIPI CSIS clock name (Krzysztof Kozlowski) - ARM: dts: exynos: fix WM8960 clock name in Itop Elite (Krzysztof Kozlowski) - remoteproc: st: Call of_node_put() on iteration error (Mathieu Poirier) - remoteproc: stm32: Call of_node_put() on iteration error (Mathieu Poirier) - sh: nmi_debug: fix return value of __setup handler (Randy Dunlap) - sh: init: use OF_EARLY_FLATTREE for early init (Randy Dunlap) - sh: math-emu: fix macro redefined warning (Randy Dunlap) - inotify: Avoid reporting event with invalid wd (Jan Kara) - platform/x86: touchscreen_dmi: Add info for the Dexp Ursus KX210i (Andrey Avdeev) - cifs: fix pcchunk length type in smb2_copychunk_range (Pawel Witek) - btrfs: print-tree: parent bytenr must be aligned to sector size (Anastasia Belova) - btrfs: don't free qgroup space unless specified (Josef Bacik) - btrfs: fix btrfs_prev_leaf() to not return the same key twice (Filipe Manana) - perf symbols: Fix return incorrect build_id size in elf_read_build_id() (Yang Jihong) - perf map: Delete two variable initialisations before null pointer checks in sort__sym_from_cmp() (Markus Elfring) - perf vendor events power9: Remove UTF-8 characters from JSON files (Kajol Jain) - virtio_net: suppress cpu stall when free_unused_bufs (Wenliang Wang) - virtio_net: split free_unused_bufs() (Xuan Zhuo) - net: dsa: mt7530: fix corrupt frames using trgmii on 40 MHz XTAL MT7621 (Ar?nc UNAL) - ALSA: caiaq: input: Add error handling for unsupported input methods in snd_usb_caiaq_input_init (Ruliang Lin) - drm/amdgpu: add a missing lock for AMDGPU_SCHED (Chia-I Wu) - af_packet: Don't send zero-byte data in packet_sendmsg_spkt(). (Kuniyuki Iwashima) - ionic: remove noise from ethtool rxnfc error msg (Shannon Nelson) - rxrpc: Fix hard call timeout units (David Howells) - net/sched: act_mirred: Add carrier check (Victor Nogueira) - writeback: fix call of incorrect macro (Maxim Korotkov) - net: dsa: mv88e6xxx: add mv88e6321 rsvd2cpu (Angelo Dureghello) - sit: update dev->needed_headroom in ipip6_tunnel_bind_dev() (Cong Wang) - net/sched: cls_api: remove block_cb from driver_list before freeing (Vlad Buslov) - net/ncsi: clear Tx enable mode when handling a Config required AEN (Cosmo Chou) - relayfs: fix out-of-bounds access in relay_file_read (Zhang Zhengming) - kernel/relay.c: fix read_pos error when multiple readers (Pengcheng Yang) - crypto: safexcel - Cleanup ring IRQ workqueues on load failure (Jonathan McDowell) - crypto: inside-secure - irq balance (Sven Auhagen) - dm verity: fix error handling for check_at_most_once on FEC (Yeongjin Gil) - dm verity: skip redundant verity_handle_err() on I/O errors (Akilesh Kailash) - mailbox: zynqmp: Fix counts of child nodes (Tanmay Shah) - mailbox: zynq: Switch to flexible array to simplify code (Christophe JAILLET) - tick/nohz: Fix cpu_is_hotpluggable() by checking with nohz subsystem (Joel Fernandes (Google)) - nohz: Add TICK_DEP_BIT_RCU (Frederic Weisbecker) - debugobject: Ensure pool refill (again) (Thomas Gleixner) - perf intel-pt: Fix CYC timestamps after standalone CBR (Adrian Hunter) - perf auxtrace: Fix address filter entire kernel size (Adrian Hunter) - dm ioctl: fix nested locking in table_clear() to remove deadlock concern (Mike Snitzer) - dm flakey: fix a crash with invalid table line (Mikulas Patocka) - dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path (Mike Snitzer) - dm clone: call kmem_cache_destroy() in dm_clone_init() error path (Mike Snitzer) - s390/dasd: fix hanging blockdevice after request requeue (Stefan Haberland) - btrfs: scrub: reject unsupported scrub flags (Qu Wenruo) - scripts/gdb: fix lx-timerlist for Python3 (Peng Liu) - clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent (Quentin Schulz) - wifi: rtl8xxxu: RTL8192EU always needs full init (Bitterblue Smith) - mailbox: zynqmp: Fix typo in IPI documentation (Tanmay Shah) - mailbox: zynqmp: Fix IPI isr handling (Tanmay Shah) - md/raid10: fix null-ptr-deref in raid10_sync_request (Li Nan) - nilfs2: fix infinite loop in nilfs_mdt_get_block() (Ryusuke Konishi) - nilfs2: do not write dirty data after degenerating to read-only (Ryusuke Konishi) - parisc: Fix argument pointer in real64_call_asm() (Helge Deller) - afs: Fix updating of i_size with dv jump from server (Marc Dionne) - dmaengine: at_xdmac: do not enable all cyclic channels (Claudiu Beznea) - dmaengine: dw-edma: Fix to enable to issue dma request on DMA processing (Shunsuke Mie) - dmaengine: dw-edma: Fix to change for continuous transfer (Shunsuke Mie) - phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port (Gaosheng Cui) - pwm: mtk-disp: Disable shadow registers before setting backlight values (AngeloGioacchino Del Regno) - pwm: mtk-disp: Adjust the clocks to avoid them mismatch (Jitao Shi) - pwm: mtk-disp: Don't check the return code of pwmchip_remove() (Uwe Kleine-Konig) - dmaengine: mv_xor_v2: Fix an error code. (Christophe JAILLET) - leds: TI_LMU_COMMON: select REGMAP instead of depending on it (Randy Dunlap) - ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline (Ye Bin) - openrisc: Properly store r31 to pt_regs on unhandled exceptions (Stafford Horne) - clocksource/drivers/davinci: Fix memory leak in davinci_timer_register when init fails (Qinrun Dai) - clocksource: davinci: axe a pointless __GFP_NOFAIL (Christophe JAILLET) - clocksource/drivers/davinci: Avoid trailing '\n' hidden in pr_fmt() (Christophe JAILLET) - RDMA/mlx5: Use correct device num_ports when modify DC (Mark Zhang) - Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe (Miaoqian Lin) - input: raspberrypi-ts: Release firmware handle when not needed (Nicolas Saenz Julienne) - firmware: raspberrypi: Introduce devm_rpi_firmware_get() (Nicolas Saenz Julienne) - firmware: raspberrypi: Keep count of all consumers (Nicolas Saenz Julienne) - NFSv4.1: Always send a RECLAIM_COMPLETE after establishing lease (Trond Myklebust) - IB/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order (Patrick Kelsey) - RDMA/siw: Remove namespace check from siw_netdev_event() (Tetsuo Handa) - clk: add missing of_node_put() in 'assigned-clocks' property parsing (Clement Leger) - power: supply: generic-adc-battery: fix unit scaling (Sebastian Reichel) - rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current time (Martin Blumenstingl) - RDMA/mlx4: Prevent shift wrapping in set_user_sq_size() (Dan Carpenter) - rtc: omap: include header for omap_rtc_power_off_program prototype (Krzysztof Kozlowski) - RDMA/rdmavt: Delete unnecessary NULL check (Natalia Petrova) - RDMA/siw: Fix potential page_array out of range access (Daniil Dulov) - perf/core: Fix hardlockup failure caused by perf throttle (Yang Jihong) - powerpc/rtas: use memmove for potentially overlapping buffer copy (Nathan Lynch) - macintosh: via-pmu-led: requires ATA to be set (Randy Dunlap) - powerpc/sysdev/tsi108: fix resource printk format warnings (Randy Dunlap) - powerpc/wii: fix resource printk format warnings (Randy Dunlap) - powerpc/mpc512x: fix resource printk format warning (Randy Dunlap) - macintosh/windfarm_smu_sat: Add missing of_node_put() (Liang He) - spmi: Add a check for remove callback when removing a SPMI driver (Jishnu Prakash) - staging: rtl8192e: Fix W_DISABLE# does not work after stop/start (Philipp Hortmann) - serial: 8250: Add missing wakeup event reporting (Florian Fainelli) - tty: serial: fsl_lpuart: adjust buffer length to the intended size (Shenwei Wang) - firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe (Dan Carpenter) - usb: mtu3: fix kernel panic at qmu transfer done irq handler (Chunfeng Yun) - usb: chipidea: fix missing goto in ci_hdrc_probe (Yinhao Hu) - sh: sq: Fix incorrect element size for allocating bitmap buffer (John Paul Adrian Glaubitz) - uapi/linux/const.h: prefer ISO-friendly __typeof__ (Kevin Brodsky) - spi: cadence-quadspi: fix suspend-resume implementations (Dhruva Gole) - mtd: spi-nor: cadence-quadspi: Handle probe deferral while requesting DMA channel (Vignesh Raghavendra) - mtd: spi-nor: cadence-quadspi: Don't initialize rx_dma_complete on failure (Vignesh Raghavendra) - mtd: spi-nor: cadence-quadspi: Make driver independent of flash geometry (Vignesh Raghavendra) - scripts/gdb: bail early if there are no generic PD (Florian Fainelli) - PM: domains: Fix up terminology with parent/child (Kees Cook) - scripts/gdb: bail early if there are no clocks (Florian Fainelli) - ia64: salinfo: placate defined-but-not-used warning (Randy Dunlap) - ia64: mm/contig: fix section mismatch warning/error (Randy Dunlap) - of: Fix modalias string generation (Miquel Raynal) - vmci_host: fix a race condition in vmci_host_poll() causing GPF (Dae R. Jeong) - spi: fsl-spi: Fix CPM/QE mode Litte Endian (Christophe Leroy) - spi: qup: Don't skip cleanup in remove's error path (Uwe Kleine-Konig) - linux/vt_buffer.h: allow either builtin or modular for macros (Randy Dunlap) - ASoC: es8316: Handle optional IRQ assignment (Cristian Ciocaltea) - ASoC: es8316: Use IRQF_NO_AUTOEN when requesting the IRQ (Hans de Goede) - genirq: Add IRQF_NO_AUTOEN for request_irq/nmi() (Barry Song) - PCI: imx6: Install the fault handler only on compatible match (H. Nikolaus Schaller) - usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition (Zheng Wang) - iio: light: max44009: add missing OF device matching (Krzysztof Kozlowski) - fpga: bridge: fix kernel-doc parameter description (Marco Pagani) - usb: host: xhci-rcar: remove leftover quirk handling (Wolfram Sang) - pstore: Revert pmsg_lock back to a normal mutex (John Stultz) - tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp. (Kuniyuki Iwashima) - net: amd: Fix link leak when verifying config failed (Gencen Gan) - netlink: Use copy_to_user() for optval in netlink_getsockopt(). (Kuniyuki Iwashima) - ipv4: Fix potential uninit variable access bug in __ip_make_skb() (Ziyang Xuan) - netfilter: nf_tables: don't write table validation state without mutex (Florian Westphal) - bpf: Don't EFAULT for getsockopt with optval=NULL (Stanislav Fomichev) - ixgbe: Enable setting RSS table to default values (Joe Damato) - ixgbe: Allow flow hash to be set via ethtool (Joe Damato) - wifi: iwlwifi: mvm: check firmware response size (Johannes Berg) - wifi: iwlwifi: make the loop for card preparation effective (Emmanuel Grumbach) - md/raid10: fix memleak of md thread (Yu Kuai) - md: update the optimal I/O size on reshape (Christoph Hellwig) - md/raid10: fix memleak for 'conf->bio_split' (Yu Kuai) - md/raid10: fix leak of 'r10bio->remaining' for recovery (Yu Kuai) - bpf, sockmap: Revert buggy deadlock fix in the sockhash and sockmap (Daniel Borkmann) - nvme-fcloop: fix 'inconsistent {IN-HARDIRQ-W} -> {HARDIRQ-ON-W} usage' (Ming Lei) - nvme: fix async event trace event (Keith Busch) - nvme: handle the persistent internal error AER (Michael Kelley) - bpf, sockmap: fix deadlocks in the sockhash and sockmap (Xin Liu) - scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() (Shuchang Li) - crypto: drbg - Only fail when jent is unavailable in FIPS mode (Herbert Xu) - crypto: drbg - make drbg_prepare_hrng() handle jent instantiation errors (Nicolai Stange) - bpftool: Fix bug for long instructions in program CFG dumps (Quentin Monnet) - wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg() (Wei Chen) - wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg() (Wei Chen) - rtlwifi: Replace RT_TRACE with rtl_dbg (Larry Finger) - rtlwifi: Start changing RT_TRACE into rtl_dbg (Larry Finger) - f2fs: handle dqget error in f2fs_transfer_project_quota() (Yangtao Li) - scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS (Danila Chernetsov) - net/packet: convert po->auxdata to an atomic flag (Eric Dumazet) - net/packet: convert po->origdev to an atomic flag (Eric Dumazet) - net/packet: annotate accesses to po->xmit (Eric Dumazet) - vlan: partially enable SIOCSHWTSTAMP in container (Vadim Fedorenko) - scm: fix MSG_CTRUNC setting condition for SO_PASSSEC (Alexander Mikhalitsyn) - wifi: rtw88: mac: Return the original error from rtw_mac_power_switch() (Martin Blumenstingl) - wifi: rtw88: mac: Return the original error from rtw_pwr_seq_parser() (Martin Blumenstingl) - tools: bpftool: Remove invalid \' json escape (Luis Gerhorst) - wifi: ath6kl: reduce WARN to dev_dbg() in callback (Fedor Pchelkin) - wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list() (Dan Carpenter) - wifi: ath9k: hif_usb: fix memory leak of remain_skbs (Fedor Pchelkin) - wifi: ath6kl: minor fix for allocation size (Alexey V. Vissarionov) - tick/common: Align tick period with the HZ tick. (Sebastian Andrzej Siewior) - tick: Get rid of tick_period (Thomas Gleixner) - tick/sched: Optimize tick_do_update_jiffies64() further (Thomas Gleixner) - tick/sched: Reduce seqcount held scope in tick_do_update_jiffies64() (Yunfeng Ye) - tick/sched: Use tick_next_period for lockless quick check (Thomas Gleixner) - timekeeping: Split jiffies seqlock (Thomas Gleixner) - debugobject: Prevent init race with static objects (Thomas Gleixner) - arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step (Sumit Garg) - x86/ioapic: Don't return 0 from arch_dynirq_lower_bound() (Saurabh Sengar) - regulator: stm32-pwr: fix of_iomap leak (YAN SHI) - media: rc: gpio-ir-recv: Fix support for wake-up (Florian Fainelli) - media: rcar_fdp1: Fix refcount leak in probe and remove function (Miaoqian Lin) - media: rcar_fdp1: Fix the correct variable assignments (Tang Bin) - media: rcar_fdp1: Make use of the helper function devm_platform_ioremap_resource() (Cai Huoqing) - media: rcar_fdp1: fix pm_runtime_get_sync() usage count (Mauro Carvalho Chehab) - media: rcar_fdp1: simplify error check logic at fdp_open() (Mauro Carvalho Chehab) - media: saa7134: fix use after free bug in saa7134_finidev due to race condition (Zheng Wang) - media: dm1105: Fix use after free bug in dm1105_remove due to race condition (Zheng Wang) - x86/apic: Fix atomic update of offset in reserve_eilvt_offset() (Uros Bizjak) - regulator: core: Avoid lockdep reports when resolving supplies (Douglas Anderson) - regulator: core: Consistently set mutex_owner when using ww_mutex_lock_slow() (Douglas Anderson) - drm/lima/lima_drv: Add missing unwind goto in lima_pdev_probe() (Harshit Mogalapalli) - mmc: sdhci-of-esdhc: fix quirk to ignore command inhibit for data (Georgii Kruglov) - drm/msm/adreno: drop bogus pm_runtime_set_active() (Johan Hovold) - drm/msm/adreno: Defer enabling runpm until hw_init() (Rob Clark) - drm/msm: fix unbalanced pm_runtime_enable in adreno_gpu_{init, cleanup} (Jonathan Marek) - firmware: qcom_scm: Clear download bit during reboot (Mukesh Ojha) - media: av7110: prevent underflow in write_ts_to_decoder() (Dan Carpenter) - media: uapi: add MEDIA_BUS_FMT_METADATA_FIXED media bus format. (Dafna Hirschfeld) - media: bdisp: Add missing check for create_workqueue (Jiasheng Jiang) - ARM: dts: qcom: ipq8064: Fix the PCI I/O port range (Manivannan Sadhasivam) - ARM: dts: qcom: ipq8064: reduce pci IO size to 64K (Christian Marangi) - ARM: dts: qcom: ipq4019: Fix the PCI I/O port range (Manivannan Sadhasivam) - EDAC/skx: Fix overflows on the DRAM row address mapping arrays (Qiuxu Zhuo) - arm64: dts: renesas: r8a774c0: Remove bogus voltages from OPP table (Geert Uytterhoeven) - arm64: dts: renesas: r8a77990: Remove bogus voltages from OPP table (Geert Uytterhoeven) - drm/probe-helper: Cancel previous job before starting new one (Dom Cobley) - drm/vgem: add missing mutex_destroy (Maira Canal) - drm/rockchip: Drop unbalanced obj unref (Rob Clark) - erofs: fix potential overflow calculating xattr_isize (Jingbo Xu) - erofs: stop parsing non-compact HEAD index if clusterofs is invalid (Gao Xiang) - tpm, tpm_tis: Do not skip reset of original interrupt vector (Lino Sanfilippo) - selinux: ensure av_permissions.h is built when needed (Paul Moore) - selinux: fix Makefile dependencies of flask.h (Ondrej Mosnacek) - ubifs: Free memory for tmpfile name (Marten Lindahl) - ubi: Fix return value overwrite issue in try_write_vid_and_data() (Wang YanQing) - ubifs: Fix memleak when insert_old_idx() failed (Zhihao Cheng) - i2c: omap: Fix standard mode false ACK readings (Reid Tonking) - KVM: nVMX: Emulate NOPs in L2, and PAUSE if it's not intercepted (Sean Christopherson) - reiserfs: Add security prefix to xattr name in reiserfs_security_write() (Roberto Sassu) - ring-buffer: Sync IRQ works before buffer destruction (Johannes Berg) - pwm: meson: Fix g12a ao clk81 name (Heiner Kallweit) - pwm: meson: Fix axg ao mux parents (Heiner Kallweit) - kheaders: Use array declaration instead of char (Kees Cook) - ipmi: fix SSIF not responding under certain cond. (Zhang Yuchen) - MIPS: fw: Allow firmware to pass a empty env (Jiaxun Yang) - xhci: fix debugfs register accesses while suspended (Johan Hovold) - debugfs: regset32: Add Runtime PM support (Geert Uytterhoeven) - staging: iio: resolver: ads1210: fix config mode (Nuno Sa) - perf sched: Cast PTHREAD_STACK_MIN to int as it may turn into sysconf(__SC_THREAD_STACK_MIN_VALUE) (Arnaldo Carvalho de Melo) - USB: dwc3: fix runtime pm imbalance on unbind (Johan Hovold) - USB: dwc3: fix runtime pm imbalance on probe errors (Johan Hovold) - asm-generic/io.h: suppress endianness warnings for readq() and writeq() (Vladimir Oltean) - ASoC: Intel: bytcr_rt5640: Add quirk for the Acer Iconia One 7 B1-750 (Hans de Goede) - iio: adc: palmas_gpadc: fix NULL dereference on rmmod (Patrik Dahlstrom) - USB: serial: option: add UNISOC vendor and TOZED LT70C product (Ar?nc UNAL) - bluetooth: Perform careful capability checks in hci_sock_ioctl() (Ruihan Li) - drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var (Daniel Vetter) - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() (Jisoo Jang) - counter: 104-quad-8: Fix race condition between FLAG and CNTR reads (William Breathitt Gray) [5.4.17-2136.321.1.el8] - uek-rpm: Blacklist cls_tcindex module (Somasundaram Krishnasamy) [Orabug: 35408335] - uek_kabi: Add UEK_KABI_DEPRECATE_ENUM (Sherry Yang) [Orabug: 35469883] - perf kvm: Add kvm-stat for arm64 (Sergey Senozhatsky) [Orabug: 35415996] - dsc-drivers: update ionic drivers to 23.04.1-001 (Dave Kleikamp) [Orabug: 35416310] - dsc-drivers: update ionic drivers to 22.11.1-001 (Dave Kleikamp) [Orabug: 35416310] - dsc-drivers: update drivers for 1.15.9-C-100 (Dave Kleikamp) [Orabug: 35416310] - elba.dtsi: Improved sdclk and sdclk-hsmmc timing. (David Clear) [Orabug: 35416310] - drivers/i2c: Fix Lattice RD1173 interrupt handling (Hiren Mehta) [Orabug: 35416310] - defconfig: cleanup elba_defconfig (Hiren Mehta) [Orabug: 35416310] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-39189 CVE-2022-34918 cpe:/a:oracle:linux:8::UEKR6 Oracle Linux 9 [0.11.4-7] - Fix displaying differences between configuration checkpoints in "pcs config checkpoint diff" command - Fix "pcs stonith update-scsi-devices" command which was broken since Pacemaker-2.1.5-rc1 - Fixed loading of cluster status in the web interface when fencing levels are configured - Fixed a vulnerability in pcs-web-ui-node-modules - Updated bundled rubygem rack - Resolves: rhbz#2179901 rhbz#2180697 rhbz#2180704 rhbz#2180708 rhbz#2180978 rhbz#2183180 [0.11.4-6] - Fixed broken filtering in create resource/fence device wizards in the web interface - Added BuildRequires: pam - needed for tier0 tests during build - Resolves: rhbz#2167471 [0.11.4-5] - Fixed enabling/disabling sbd when cluster is not running - Resolves: rhbz#2166249 [0.11.4-4] - Rebuilt with fixed patches - Resolves: rhbz#2158790 rhbz#2159454 [0.11.4-3] - Allow time values in stonith-watchdog-time property - Resource/stonith agent self-validation of instance attributes is now disabled by default, as many agents do not work with it properly. - Updated bundled rubygems: rack, rack-protection, sinatra - Added license for ruby2_keywords - Resolves: rhbz#2158790 rhbz#2159454 [0.11.4-2] - Fixed stopping of pcsd service using systemctl stop pcsd command - Fixed smoke test execution during gating - Added warning when omitting validation of misconfigured resource - Fixed displaying of bool and integer values in pcs resource config command - Updated bundled rubygems: ethon, rack-protection, sinatra - Resolves: rhbz#2148124 rhbz#2151164 rhbz#2151524 [0.11.4-1] - Rebased to latest upstream sources (see CHANGELOG.md) - Updated pcs-web-ui - Resolves: rhbz#1620043 rhbz#2019464 rhbz#2099653 rhbz#2109633 rhbz#2112293 rhbz#2116295 rhbz#2117600 rhbz#2117601 [0.11.3-5] - Rebased to latest upstream sources (see CHANGELOG.md) - Updated pcs-web-ui - Added bundled rubygem: childprocess - Removed bundled rubygem: open4 - Updated bundled rubygems: mustermann, rack, rack-protection, rack-test, sinatra, tilt - Resolves: rhbz#1493416 rhbz#1796827 rhbz#2059147 rhbz#2092950 rhbz#2112079 rhbz#2112270 rhbz#2112293 rhbz#2117599 rhbz#2117601 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-27530 CVE-2023-27539 CVE-2023-2319 cpe:/a:oracle:linux:9::addons Oracle Linux 7 [20230516-999.20.git6c9e0ed5.el7] - cd72938cb480 linux-firmware: Update AMD fam17h cpu microcode - 92624e57af69 linux-firmware: Update AMD cpu microcode CRITICAL Copyright 2023 Oracle, Inc. CVE-2023-20593 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7:9:patch cpe:/a:oracle:linux:7::optional_latest Oracle Linux 8 [20230516-999.20.git6c9e0ed5.el8] - cd72938cb480 linux-firmware: Update AMD fam17h cpu microcode - 92624e57af69 linux-firmware: Update AMD cpu microcode [20230516-999.19.git6c9e0ed5.el8] - Rebase to upstream - Revert removal of old iwlwifi firmwares (Orabug: 35260375) CRITICAL Copyright 2023 Oracle, Inc. CVE-2023-20593 cpe:/o:oracle:linux:8::baseos_latest cpe:/o:oracle:linux:8:8:baseos_patch Oracle Linux 9 [20230516-999.20.git6c9e0ed5.el9] - cd72938cb480 linux-firmware: Update AMD fam17h cpu microcode - 92624e57af69 linux-firmware: Update AMD cpu microcode [20230516-999.19.git6c9e0ed5.el9] - Rebase to upstream - Revert removal of old iwlwifi firmwares (Orabug: 35260375) CRITICAL Copyright 2023 Oracle, Inc. CVE-2023-20593 cpe:/o:oracle:linux:9::baseos_latest cpe:/o:oracle:linux:9:2:baseos_patch Oracle Linux 7 [20230516-999.20.git6c9e0ed5.el7] - cd72938cb480 linux-firmware: Update AMD fam17h cpu microcode - 92624e57af69 linux-firmware: Update AMD cpu microcode [20230516-999.19.git6c9e0ed5.el7] - Rebase to upstream - Revert removal of old iwlwifi firmwares (Orabug: 35260375) CRITICAL Copyright 2023 Oracle, Inc. CVE-2023-20593 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7::optional_latest cpe:/a:oracle:linux:7:9:patch Oracle Linux 6 Oracle Linux 7 [4.1.12-124.77.2] - media: dm1105: Fix use after free bug in dm1105_remove due to race condition (Zheng Wang) [Orabug: 35514108] {CVE-2023-35824} - media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() (Takashi Iwai) [Orabug: 35477742] {CVE-2023-31084} - media: dvb_frontend: fix locking issues at dvb_frontend_get_event() (Mauro Carvalho Chehab) [Orabug: 35477742] {CVE-2023-31084} - media: dvb-core: Fix UAF due to refcount races at releasing (Takashi Iwai) [Orabug: 34820632] {CVE-2022-41218} - media: dvb: dmx: fixed coding style issues of spacing (devendra sharma) [Orabug: 34820632] [4.1.12-124.77.1] - ipvlan:Fix out-of-bounds caused by unclear skb->cb (t.feng) [Orabug: 35550146] {CVE-2023-3090} - memstick: r592: Fix UAF bug in r592_remove due to race condition (Zheng Wang) [Orabug: 35514146] {CVE-2023-3141} - fbcon: Check font dimension limits (Samuel Thibault) [Orabug: 35493679] {CVE-2023-3161} - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() (Jisoo Jang) [Orabug: 35250538] {CVE-2023-1380} IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-1380 CVE-2023-3090 CVE-2023-31084 CVE-2023-3141 CVE-2023-35824 CVE-2023-3161 CVE-2022-41218 cpe:/a:oracle:linux:6:10:UEKR4_ELS cpe:/a:oracle:linux:7::UEKR4 Oracle Linux 7 [20230516-999.22.git6c9e0ed5.el7] - remove amd-ucode/README (Orabug: 35645306) - Resolves 'Zenbleed' (Orabug: 35650345) {CVE-2023-20593} CRITICAL Copyright 2023 Oracle, Inc. CVE-2023-20593 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7:9:patch cpe:/a:oracle:linux:7::optional_latest Oracle Linux 7 [20230516-999.22.git6c9e0ed5.el7] - remove amd-ucode/README (Orabug: 35645306) - Resolves 'Zenbleed' (Orabug: 35650345) {CVE-2023-20593} CRITICAL Copyright 2023 Oracle, Inc. CVE-2023-20593 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7::optional_latest cpe:/a:oracle:linux:7:9:patch Oracle Linux 8 [20230516-999.22.git6c9e0ed5.el8] - remove amd-ucode/README (Orabug: 35645306) - Resolves 'Zenbleed' (Orabug: 35650345) {CVE-2023-20593} CRITICAL Copyright 2023 Oracle, Inc. CVE-2023-20593 cpe:/o:oracle:linux:8::baseos_latest cpe:/o:oracle:linux:8:8:baseos_patch Oracle Linux 9 [20230516-999.23.git6c9e0ed5.el9] - Firmware files need to be uncompressed for early kernel load to work - Resolves 'Zenbleed' (Orabug: 35650345) {CVE-2023-20593} [20230516-999.22.git6c9e0ed5.el9] - Move the README removal, it needs to happen during build (Orabug: 35650021) - Resolves 'Zenbleed' (Orabug: 35650345) {CVE-2023-20593} [20230516-999.21.git6c9e0ed5.el9] - remove amd-ucode/README (Orabug: 35645306) CRITICAL Copyright 2023 Oracle, Inc. CVE-2023-20593 cpe:/o:oracle:linux:9::baseos_latest cpe:/o:oracle:linux:9:2:baseos_patch Oracle Linux 8 [0.12.2-4.0.1] - Fix CVE-2023-23934 [Orabug: 35662419] - Fix CVE-2023-25577 [Orabug: 35662419] - enable tests [Orabug: 35662419] LOW Copyright 2023 Oracle, Inc. CVE-2023-25577 CVE-2023-23934 cpe:/a:oracle:linux:8::appstream Oracle Linux 8 [0.12.2-4.0.1] - Fix for CVE-2023-30861 [Orabug: 35662469] - Add test for CVE-2023-30861 [Orabug: 35662469] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-30861 cpe:/a:oracle:linux:8::appstream Oracle Linux 7 [7.4p1-23.0.1_fips] - Change Epoch from 1 to 10 - Enable fips KDF POST [Orabug: 32461750] - Disable diffie-hellman-group-exchange-sha256 KEX FIPS method [Orabug: 32461739] [7.4p1-23.0.1] - enlarge format buffer size for certificate serial number so the log message can record any 64-bit integer without truncation (openssh bz#3012) [Orabug: 30448895] [7.4p1-23 + 0.10.3-2] - Avoid remote code execution in ssh-agent PKCS#11 support Resolves: CVE-2023-38408 CRITICAL Copyright 2023 Oracle, Inc. CVE-2023-38408 cpe:/a:oracle:linux:7::u8_security_validation Oracle Linux 7 [20230516-999.25.git6c9e0ed5.el7] - Add missing amd-ucode/ files to nano rpm (Orabug: 35642190) - Add posttrans scriptlet to reload microcode on AMD (Orabug: 35636951) - Recreate initramfs for AMD systems (Orabug: 35636951) [20230516-999.24.git6c9e0ed5.el7] - 8a07fa49 linux-firmware: Update AMD fam19h cpu microcode (Orabug: 35659485) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-20569 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7:9:patch cpe:/a:oracle:linux:7::optional_latest Oracle Linux 7 [20230516-999.25.git6c9e0ed5.el7] - Add missing amd-ucode/ files to nano rpm (Orabug: 35642190) - Add posttrans scriptlet to reload microcode on AMD (Orabug: 35636951) - Recreate initramfs for AMD systems (Orabug: 35636951) [20230516-999.24.git6c9e0ed5.el7] - 8a07fa49 linux-firmware: Update AMD fam19h cpu microcode (Orabug: 35659485) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-20569 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7::optional_latest cpe:/a:oracle:linux:7:9:patch Oracle Linux 8 [20230516-999.25.git6c9e0ed5.el8] - Add missing amd-ucode/ files to nano and core rpm (Orabug: 35642190) - Add posttrans scriptlet to reload microcode on AMD (Orabug: 35636951) - Recreate initramfs for AMD systems (Orabug: 35636951) [20230516-999.24.git6c9e0ed5.el7] - 8a07fa49 linux-firmware: Update AMD fam19h cpu microcode (Orabug: 35659485) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-20569 cpe:/o:oracle:linux:8::baseos_latest cpe:/o:oracle:linux:8:8:baseos_patch Oracle Linux 9 [20230516-999.25.git6c9e0ed5.el9] - Add missing amd-ucode/ files to nano and core rpm (Orabug: 35642190) - Add posttrans scriptlet to reload microcode on AMD (Orabug: 35636951) - Recreate initramfs for AMD systems (Orabug: 35636951) [20230516-999.24.git6c9e0ed5.el7] - 8a07fa49 linux-firmware: Update AMD fam19h cpu microcode (Orabug: 35659485) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-20569 cpe:/o:oracle:linux:9::baseos_latest cpe:/o:oracle:linux:9:2:baseos_patch Oracle Linux 7 [2:2.1-73.15.0.6] - also rebuild initramfs for kernel-ueknano [Orabug: 35698043] [2:2.1-73.15.0.5] - update 06-55-04 to 0x2007006 - update 06-55-06 to 0x4003604 - update 06-55-07 to 0x5003604 - update 06-6a-06 to 0xd0003a5 - Resolves for Oracle hardware: {CVE-2022-40982} [Orabug: 35692745] [2:2.1-73.15.0.2] - update 06-6a-06 to 0xd000389 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-40982 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7:9:patch cpe:/a:oracle:linux:7::optional_latest Oracle Linux 8 [4:20230214-2.0.3] - update 06-55-04 to 0x2007006 - update 06-55-06 to 0x4003604 - update 06-55-07 to 0x5003604 - update 06-6a-06 to 0xd0003a5 - Resolves for Oracle hardware: {CVE-2022-40982} [Orabug: 35692741] MODERATE Copyright 2023 Oracle, Inc. CVE-2022-40982 cpe:/o:oracle:linux:8::baseos_latest cpe:/o:oracle:linux:8:8:baseos_patch Oracle Linux 9 [4:20220809-2.20230214.1.0.3] - update 06-55-04 to 0x2007006 - update 06-55-06 to 0x4003604 - update 06-55-07 to 0x5003604 - update 06-6a-06 to 0xd0003a5 - Resolves for Oracle hardware: {CVE-2022-40982} [Orabug: 35692740] MODERATE Copyright 2023 Oracle, Inc. CVE-2022-40982 cpe:/o:oracle:linux:9::baseos_latest cpe:/o:oracle:linux:9:2:baseos_patch Oracle Linux 6 Oracle Linux 7 [4.1.12-124.78.2] - xfrm: fix crash in XFRM_MSG_GETSA netlink handler (Vegard Nossum) [Orabug: 35598955] {CVE-2023-3106} - netfilter: nf_tables: validate registers coming from userspace (Harshvardhan Jha) [Orabug: 34012909] {CVE-2022-1015} [4.1.12-124.78.1] - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF (George Kennedy) [Orabug: 35649493] {CVE-2023-3567} IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-3567 CVE-2022-1015 CVE-2023-3106 cpe:/a:oracle:linux:6:10:UEKR4_ELS cpe:/a:oracle:linux:7::UEKR4 Oracle Linux 9 [3.0.7-16.0.1] - Replace upstream references [Orabug: 34340177] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-1255 CVE-2023-0464 CVE-2023-2650 CVE-2023-0465 CVE-2023-0466 cpe:/a:oracle:linux:9::userspace_ksplice Oracle Linux 9 istio [1.17.5-1] - Addresses CVE CVE-2023-35941, CVE-2023-35942, CVE-2023-35943, CVE-2023-35944. kubevirt [0.58.0-3] - Ensure that selinux build tags are set for all Go builds olcne [1.7.2-2] - Update kubevirt image versions fixing selinux=enforce not being supported [1.7.2-1] - Add Istio-1.17.5 and Istio-1.16.7 to address CVE's - CVE-2023-35941 - CVE-2023-35942 - CVE-2023-35943 - CVE-2023-35944 [1.7.0-10] - Remove worker-nodes enforcement from olcnectl provision [1.7.0-9] - Add resolutions for jenkins build failures IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-35943 CVE-2023-35944 CVE-2023-35941 CVE-2023-35942 cpe:/a:oracle:linux:9::olcne17 Oracle Linux 8 istio [1.17.5-1] - Addresses CVE CVE-2023-35941, CVE-2023-35942, CVE-2023-35943, CVE-2023-35944. kubevirt [0.58.0-3] - Ensure that selinux build tags are set for all Go builds olcne [1.7.2-3] - Mofify kubevirt image tag to use virt-operator tag instead of kubevirt-version [1.7.2-2] - Update kubevirt image versions fixing selinux=enforce not being supported [1.7.2-1] - Add Istio-1.17.5 and Istio-1.16.7 to address CVE's - CVE-2023-35941 - CVE-2023-35942 - CVE-2023-35943 - CVE-2023-35944 [1.7.0-10] - Remove worker-nodes enforcement from olcnectl provision [1.7.0-9] - Add resolutions for jenkins build failures IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-35942 CVE-2023-35941 CVE-2023-35943 CVE-2023-35944 cpe:/a:oracle:linux:8::olcne17 Oracle Linux 8 istio [1.16.7-1] - Addresses CVE CVE-2023-35941, CVE-2023-35942, CVE-2023-35943, CVE-2023-35944. olcne [1.6.3-1] - Add Istio-1.16.7 to address CVE's - CVE-2023-35941 - CVE-2023-35942 - CVE-2023-35943 - CVE-2023-35944 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-35942 CVE-2023-35941 CVE-2023-35944 CVE-2023-35943 cpe:/a:oracle:linux:8::olcne16 Oracle Linux 7 istio [1.16.7-1] - Addresses CVE CVE-2023-35941, CVE-2023-35942, CVE-2023-35943, CVE-2023-35944. olcne [1.6.3-1] - Add Istio-1.16.7 to address CVE's - CVE-2023-35941 - CVE-2023-35942 - CVE-2023-35943 - CVE-2023-35944 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-35943 CVE-2023-35944 CVE-2023-35942 CVE-2023-35941 cpe:/a:oracle:linux:7::olcne16 Oracle Linux 7 Oracle Linux 8 [5.4.17-2136.323.8] - vhost-scsi: Fix alignment handling with windows (Mike Christie) [Orabug: 35769318] - Revert 'vhost/scsi: support non zerocopy iovecs' (Rajan Shanmugavelu) [Orabug: 35769318] [5.4.17-2136.323.7] - x86: change default to spec_store_bypass_disable=prctl spectre_v2_user=prctl (Andrea Arcangeli) [Orabug: 35725160] - KVM: SVM: Add support for Virtual SPEC_CTRL (Babu Moger) [Orabug: 35725160] - x86/cpufeatures: Add the Virtual SPEC_CTRL feature (Babu Moger) [Orabug: 35725160] - x86/mm: Initialize text poking earlier (Peter Zijlstra) [Orabug: 35744495] - mm: Move mm_cachep initialization to mm_init() (Peter Zijlstra) [Orabug: 35744495] - x86/mm: Use mm_alloc() in poking_init() (Peter Zijlstra) [Orabug: 35744495] - mips: add support for TIF_NOTIFY_SIGNAL (Jens Axboe) [Orabug: 35749111] [5.4.17-2136.323.6] - ek-rpm: Update kernel's linux-firmware dependency. (Brian Maly) [Orabug: 35742717] - nbd: make sure request completion won't concurrent (Yu Kuai) [Orabug: 35339589] - nbd: don't handle response without a corresponding request message (Yu Kuai) [Orabug: 35339589] - nvme: handle effects after freeing the request (Alan Adamson) [Orabug: 35411534] - x86/pkeys: Revert a5eff7259790 ('x86/pkeys: Add PKRU value to init_fpstate') (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - Documentation/x86: Fix backwards on/off logic about YMM support (Dave Hansen) [Orabug: 35714800] {CVE-2022-40982} - x86/xen: Fix secondary processors' FPU initialization (Juergen Gross) [Orabug: 35714800] {CVE-2022-40982} - KVM: Add GDS_NO support to KVM (Daniel Sneddon) [Orabug: 35714800] {CVE-2022-40982} - x86/speculation: Add Kconfig option for GDS (Daniel Sneddon) [Orabug: 35714800] {CVE-2022-40982} - x86/speculation: Add force option to GDS mitigation (Daniel Sneddon) [Orabug: 35714800] {CVE-2022-40982} - x86/speculation: Add Gather Data Sampling mitigation (Daniel Sneddon) [Orabug: 35714800] {CVE-2022-40982} - x86/fpu: Move FPU initialization into arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - x86/fpu: Mark init functions __init (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - x86/fpu: Remove cpuinfo argument from init functions (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - init, x86: Move mem_encrypt_init() into arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - init: Invoke arch_cpu_finalize_init() earlier (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - init: Remove check_bugs() leftovers (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - um/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - sparc/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - sh/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - mips/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - m68k/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - ia64/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - ARM: cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - x86/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - init: Provide arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - scsi: lpfc: Fix null pointer dereference due to prematurely released ndlp (Ketan Mukadam) [Orabug: 35729915] [5.4.17-2136.323.5] - io_uring/net: save msghdr->msg_control for retries (Jens Axboe) [Orabug: 35495339] - io_uring/net: clear msg_controllen on partial sendmsg retry (Jens Axboe) [Orabug: 35495339] - io_uring/net: disable partial retries for recvmsg with cmsg (Jens Axboe) [Orabug: 35495339] - io_uring: hold uring mutex around poll removal (Jens Axboe) [Orabug: 35495339] - io_uring: avoid null-ptr-deref in io_arm_poll_handler (Fedor Pchelkin) [Orabug: 35495339] - io_uring/poll: allow some retries for poll triggering spuriously (Jens Axboe) [Orabug: 35495339] - io_uring: remove MSG_NOSIGNAL from recvmsg (David Lamparter) [Orabug: 35495339] - io_uring/rsrc: disallow multi-source reg buffers (Pavel Begunkov) [Orabug: 35495339] - io_uring: add a conditional reschedule to the IOPOLL cancelation loop (Jens Axboe) [Orabug: 35495339] - io_uring: mark task TASK_RUNNING before handling resume/task work (Jens Axboe) [Orabug: 35495339] - io_uring: handle TIF_NOTIFY_RESUME when checking for task_work (Jens Axboe) [Orabug: 35495339] - io_uring: ensure that io_init_req() passes in the right issue_flags (Jens Axboe) [Orabug: 35495339] - io_uring: add missing lock in io_get_file_fixed (Bing-Jhong Billy Jheng) [Orabug: 35495339] - io_uring/rw: remove leftover debug statement (Jens Axboe) [Orabug: 35495339] - io_uring/rw: ensure kiocb_end_write() is always called (Jens Axboe) [Orabug: 35495339] - io_uring: fix double poll leak on repolling (Pavel Begunkov) [Orabug: 35495339] - io_uring: Clean up a false-positive warning from GCC 9.3.0 (Alviro Iskandar Setiawan) [Orabug: 35495339] - io_uring/net: fix fast_iov assignment in io_setup_async_msg() (Stefan Metzmacher) [Orabug: 35495339] - io_uring: io_kiocb_update_pos() should not touch file for non -1 offset (Jens Axboe) [Orabug: 35495339] - io_uring/rw: defer fsnotify calls to task context (Jens Axboe) [Orabug: 35495339] - io_uring: do not recalculate ppos unnecessarily (Dylan Yudaken) [Orabug: 35495339] - io_uring: update kiocb->ki_pos at execution time (Dylan Yudaken) [Orabug: 35495339] - io_uring: remove duplicated calls to io_kiocb_ppos (Dylan Yudaken) [Orabug: 35495339] - io_uring: ensure that cached task references are always put on exit (Jens Axboe) [Orabug: 35495339] - io_uring: fix CQ waiting timeout handling (Pavel Begunkov) [Orabug: 35495339] - io_uring: lock overflowing for IOPOLL (Pavel Begunkov) [Orabug: 35495339] - io_uring: check for valid register opcode earlier (Jens Axboe) [Orabug: 35495339] - io_uring: fix async accept on O_NONBLOCK sockets (Dylan Yudaken) [Orabug: 35495339] - io_uring: allow re-poll if we made progress (Jens Axboe) [Orabug: 35495339] - io_uring: support MSG_WAITALL for IORING_OP_SEND(MSG) (Jens Axboe) [Orabug: 35495339] - io_uring: add flag for disabling provided buffer recycling (Jens Axboe) [Orabug: 35495339] - io_uring: ensure recv and recvmsg handle MSG_WAITALL correctly (Jens Axboe) [Orabug: 35495339] - io_uring: improve send/recv error handling (Pavel Begunkov) [Orabug: 35495339] - io_uring: don't gate task_work run on TIF_NOTIFY_SIGNAL (Jens Axboe) [Orabug: 35495339] - io_uring/io-wq: only free worker if it was allocated for creation (Jens Axboe) [Orabug: 35495339] - io_uring/io-wq: free worker if task_work creation is canceled (Jens Axboe) [Orabug: 35495339] - io_uring: Fix unsigned 'res' comparison with zero in io_fixup_rw_res() (Harshit Mogalapalli) [Orabug: 35495339] - io_uring: pass in EPOLL_URING_WAKE for eventfd signaling and wakeups (Jens Axboe) [Orabug: 35495339] - eventpoll: add EPOLL_URING_WAKE poll wakeup flag (Jens Axboe) [Orabug: 35495339] - epoll: simplify ep_poll_safewake() for CONFIG_DEBUG_LOCK_ALLOC (Jason Baron) [Orabug: 35495339] - eventfd: provide a eventfd_signal_mask() helper (Jens Axboe) [Orabug: 35495339] - signal: kill JOBCTL_TASK_WORK (Jens Axboe) [Orabug: 35495339] - net: remove cmsg restriction from io_uring based send/recvmsg calls (Jens Axboe) [Orabug: 35495339] - io_uring: import 5.15-stable io_uring (Jens Axboe) [Orabug: 35495339] - fs: provide locked helper variant of close_fd_get_file() (Jens Axboe) [Orabug: 35495339] - file: Rename __close_fd_get_file close_fd_get_file (Eric W. Biederman) [Orabug: 35495339] - fs: push the getname from do_rmdir into the callers (Christoph Hellwig) [Orabug: 35495339] - task_work: unconditionally run task_work from get_signal() (Jens Axboe) [Orabug: 35495339] - Revert 'proc: don't allow async path resolution of /proc/self components' (Jens Axboe) [Orabug: 35495339] - tools headers UAPI: Sync openat2.h with the kernel sources (Arnaldo Carvalho de Melo) [Orabug: 35495339] - fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED (Jens Axboe) [Orabug: 35495339] - fix handling of nd->depth on LOOKUP_CACHED failures in try_to_unlazy* (Al Viro) [Orabug: 35495339] - fs: add support for LOOKUP_CACHED (Jens Axboe) [Orabug: 35495339] - x86/process: setup io_threads more like normal user space threads (Stefan Metzmacher) [Orabug: 35495339] - arch: setup PF_IO_WORKER threads like PF_KTHREAD (Jens Axboe) [Orabug: 35495339] - task_work: remove legacy TWA_SIGNAL path (Jens Axboe) [Orabug: 35495339] - Make sure nd->path.mnt and nd->path.dentry are always valid pointers (Al Viro) [Orabug: 35495339] - fs: make do_renameat2() take struct filename (Jens Axboe) [Orabug: 35495339] - kernel: allow fork with TIF_NOTIFY_SIGNAL pending (Jens Axboe) [Orabug: 35495339] - coredump: Limit what can interrupt coredumps (Eric W. Biederman) [Orabug: 35495339] - arm64: add support for TIF_NOTIFY_SIGNAL (Jens Axboe) [Orabug: 35495339] - arm: add support for TIF_NOTIFY_SIGNAL (Jens Axboe) [Orabug: 35495339] - task_work: Use TIF_NOTIFY_SIGNAL if available (Jens Axboe) [Orabug: 35495339] - entry: Add support for TIF_NOTIFY_SIGNAL (Jens Axboe) [Orabug: 35495339] - x86: Wire up TIF_NOTIFY_SIGNAL (Jens Axboe) [Orabug: 35495339] - signal: Add task_sigpending() helper (Jens Axboe) [Orabug: 35495339] - net: add accept helper not installing fd (Pavel Begunkov) [Orabug: 35495339] - net: provide __sys_shutdown_sock() that takes a socket (Jens Axboe) [Orabug: 35495339] - task_work: add helper for more targeted task_work canceling (Jens Axboe) [Orabug: 35495339] - kernel: don't call do_exit() for PF_IO_WORKER threads (Jens Axboe) [Orabug: 35495339] - kernel: stop masking signals in create_io_thread() (Jens Axboe) [Orabug: 35495339] - iov_iter: add helper to save iov_iter state (Jens Axboe) [Orabug: 35495339] - kernel: provide create_io_thread() helper (Jens Axboe) [Orabug: 35495339] - io_uring: add missing item types for splice request (Bing-Jhong Billy Jheng) [Orabug: 35495339] - io_uring: don't hold uring_lock when calling io_run_task_work* (Hao Xu) [Orabug: 35495339] - io_uring: kill goto error handling in io_sqpoll_wait_sq() (Jens Axboe) [Orabug: 35495339] - io_uring: correct pinned_vm accounting (Pavel Begunkov) [Orabug: 35495339] - io_uring: Use original task for req identity in io_identity_cow() (Lee Jones) [Orabug: 35495339] - io_uring: ensure that send/sendmsg and recv/recvmsg check sqe->ioprio (Jens Axboe) [Orabug: 35495339] - io_uring: use separate list entry for iopoll requests (Jens Axboe) [Orabug: 35495339] - io_uring: add missing item types for various requests (Jens Axboe) [Orabug: 35495339] - io_uring: fix using under-expanded iters (Pavel Begunkov) [Orabug: 35495339] - io_uring: don't re-import iovecs from callbacks (Pavel Begunkov) [Orabug: 35495339] - arm64: Remove TIF_NOHZ (Frederic Weisbecker) [Orabug: 35495339] - arm: Remove TIF_NOHZ (Frederic Weisbecker) [Orabug: 35495339] - x86: Remove TIF_NOHZ (Frederic Weisbecker) [Orabug: 35495339] - context-tracking: Introduce CONFIG_HAVE_TIF_NOHZ (Frederic Weisbecker) [Orabug: 35495339] - x86/entry: Remove _TIF_NOHZ from _TIF_WORK_SYSCALL_ENTRY (Thomas Gleixner) [Orabug: 35495339] - mm: allow a controlled amount of unfairness in the page lock (Linus Torvalds) [Orabug: 35565406] [5.4.17-2136.323.4] - uek-rpm: Disable cls_tcindex in file tcindex-disable.conf (Sherry Yang) [Orabug: 35676248] - uek-rpm: Update kernel's linux-firmware dependency. (Somasundaram Krishnasamy) [Orabug: 35678692] - Revert 'sched/fair: sanitize vruntime of entity being placed' (Saeed Mirzamohammadi) [Orabug: 35683806] - Revert 'sched/fair: Sanitize vruntime of entity being migrated' (Saeed Mirzamohammadi) [Orabug: 35683806] [5.4.17-2136.323.3] - LTS tag: v5.4.251 (Sherry Yang) - tracing/histograms: Return an error if we fail to add histogram to hist_vars list (Mohamed Khalfella) - tcp: annotate data-races around fastopenq.max_qlen (Eric Dumazet) - tcp: annotate data-races around tp->notsent_lowat (Eric Dumazet) - tcp: annotate data-races around rskq_defer_accept (Eric Dumazet) - tcp: annotate data-races around tp->linger2 (Eric Dumazet) - net: Replace the limit of TCP_LINGER2 with TCP_FIN_TIMEOUT_MAX (Cambda Zhu) - tcp: annotate data-races around tp->tcp_tx_delay (Eric Dumazet) - netfilter: nf_tables: can't schedule in nft_chain_validate (Florian Westphal) - netfilter: nf_tables: fix spurious set element insertion failure (Florian Westphal) - llc: Don't drop packet from non-root netns. (Kuniyuki Iwashima) - fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe (Zhang Shurong) - Revert 'tcp: avoid the lookup process failing to get sk in ehash table' (Kuniyuki Iwashima) - net:ipv6: check return value of pskb_trim() (Yuanjun Gong) - iavf: Fix use-after-free in free_netdev (Ding Hui) - net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()/cpsw_ale_set_field() (Tanmay Patil) - pinctrl: amd: Use amd_pinconf_set() for all config options (Mario Limonciello) - fbdev: imxfb: warn about invalid left/right margin (Martin Kaiser) - spi: bcm63xx: fix max prepend length (Jonas Gorski) - igb: Fix igb_down hung on surprise removal (Ying Hsu) - wifi: iwlwifi: mvm: avoid baid size integer overflow (Johannes Berg) - wifi: wext-core: Fix -Wstringop-overflow warning in ioctl_standard_iw_point() (Gustavo A. R. Silva) - devlink: report devlink_port_type_warn source device (Petr Oros) - bpf: Address KCSAN report on bpf_lru_list (Martin KaFai Lau) - sched/fair: Don't balance task to its current running CPU (Yicong Yang) - arm64: mm: fix VA-range sanity check (Mark Rutland) - posix-timers: Ensure timer ID search-loop limit is valid (Thomas Gleixner) - md/raid10: prevent soft lockup while flush writes (Yu Kuai) - md: fix data corruption for raid456 when reshape restart while grow up (Yu Kuai) - nbd: Add the maximum limit of allocated index in nbd_dev_add (Zhong Jinghua) - debugobjects: Recheck debug_objects_enabled before reporting (Tetsuo Handa) - ext4: correct inline offset when handling xattrs in inode body (Eric Whitney) - drm/client: Fix memory leak in drm_client_modeset_probe (Jocelyn Falempe) - drm/client: Fix memory leak in drm_client_target_cloned (Jocelyn Falempe) - can: bcm: Fix UAF in bcm_proc_show() (YueHaibing) - selftests: tc: set timeout to 15 minutes (Matthieu Baerts) - fuse: revalidate: don't invalidate if interrupted (Miklos Szeredi) - btrfs: fix warning when putting transaction with qgroups enabled after abort (Filipe Manana) - perf probe: Add test for regression introduced by switch to die_get_decl_file() (Georg Muller) - drm/atomic: Fix potential use-after-free in nonblocking commits (Daniel Vetter) - scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue (Manish Rangankar) - scsi: qla2xxx: Pointer may be dereferenced (Shreyas Deodhar) - scsi: qla2xxx: Correct the index of array (Bikash Hazarika) - scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() (Nilesh Javali) - scsi: qla2xxx: Fix potential NULL pointer dereference (Bikash Hazarika) - scsi: qla2xxx: Wait for io return on terminate rport (Quinn Tran) - tracing/probes: Fix not to count error code to total length (Masami Hiramatsu (Google)) - tracing: Fix null pointer dereference in tracing_err_log_open() (Mateusz Stachyra) - xtensa: ISS: fix call to split_if_spec (Max Filippov) - ring-buffer: Fix deadloop issue on reading trace_pipe (Zheng Yejian) - tracing/histograms: Add histograms to hist_vars if they have referenced variables (Mohamed Khalfella) - tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk (Christophe JAILLET) - tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error (Christophe JAILLET) - Revert '8250: add support for ASIX devices with a FIFO bug' (Jiaqing Zhao) - meson saradc: fix clock divider mask length (George Stark) - ceph: don't let check_caps skip sending responses for revoke msgs (Xiubo Li) - hwrng: imx-rngc - fix the timeout for init and self check (Martin Kaiser) - firmware: stratix10-svc: Fix a potential resource leak in svc_create_memory_pool() (Christophe JAILLET) - serial: atmel: don't enable IRQs prematurely (Dan Carpenter) - drm/rockchip: vop: Leave vblank enabled in self-refresh (Brian Norris) - drm/atomic: Allow vblank-enabled + self-refresh 'disable' (Brian Norris) - fs: dlm: return positive pid value for F_GETLK (Alexander Aring) - md/raid0: add discard support for the 'original' layout (Jason Baron) - misc: pci_endpoint_test: Re-init completion for every test (Damien Le Moal) - misc: pci_endpoint_test: Free IRQs before removing the device (Damien Le Moal) - PCI: rockchip: Set address alignment for endpoint mode (Damien Le Moal) - PCI: rockchip: Use u32 variable to access 32-bit registers (Rick Wertenbroek) - PCI: rockchip: Fix legacy IRQ generation for RK3399 PCIe endpoint core (Rick Wertenbroek) - PCI: rockchip: Add poll and timeout to wait for PHY PLLs to be locked (Rick Wertenbroek) - PCI: rockchip: Write PCI Device ID to correct register (Rick Wertenbroek) - PCI: rockchip: Assert PCI Configuration Enable bit after probe (Rick Wertenbroek) - PCI: qcom: Disable write access to read only registers for IP v2.3.3 (Manivannan Sadhasivam) - PCI: Add function 1 DMA alias quirk for Marvell 88SE9235 (Robin Murphy) - PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold (Ondrej Zary) - jfs: jfs_dmap: Validate db_l2nbperpage while mounting (Siddh Raman Pant) - ext4: only update i_reserved_data_blocks on successful block allocation (Baokun Li) - ext4: fix wrong unit use in ext4_mb_clear_bb (Kemeng Shi) - erofs: fix compact 4B support for 16k block size (Gao Xiang) - SUNRPC: Fix UAF in svc_tcp_listen_data_ready() (Ding Hui) - misc: fastrpc: Create fastrpc scalar with correct buffer count (Ekansh Gupta) - powerpc: Fail build if using recordmcount with binutils v2.37 (Naveen N Rao) - net: bcmgenet: Ensure MDIO unregistration has clocks enabled (Florian Fainelli) - mtd: rawnand: meson: fix unaligned DMA buffers handling (Arseniy Krasnov) - tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation (Jarkko Sakkinen) - pinctrl: amd: Only use special debounce behavior for GPIO 0 (Mario Limonciello) - pinctrl: amd: Detect internal GPIO0 debounce handling (Mario Limonciello) - pinctrl: amd: Fix mistake in handling clearing pins at startup (Mario Limonciello) - net/sched: make psched_mtu() RTNL-less safe (Pedro Tammela) - net/sched: flower: Ensure both minimum and maximum ports are specified (Ido Schimmel) - cls_flower: Add extack support for src and dst port range options (Guillaume Nault) - wifi: airo: avoid uninitialized warning in airo_get_rate() (Randy Dunlap) - erofs: avoid infinite loop in z_erofs_do_read_page() when reading beyond EOF (Chunhai Guo) - platform/x86: wmi: Break possible infinite loop when parsing GUID (Andy Shevchenko) - platform/x86: wmi: move variables (Barnabas Pocze) - platform/x86: wmi: use guid_t and guid_equal() (Barnabas Pocze) - platform/x86: wmi: remove unnecessary argument (Barnabas Pocze) - platform/x86: wmi: Fix indentation in some cases (Andy Shevchenko) - platform/x86: wmi: Replace UUID redefinitions by their originals (Andy Shevchenko) - ipv6/addrconf: fix a potential refcount underflow for idev (Ziyang Xuan) - NTB: ntb_tool: Add check for devm_kcalloc (Jiasheng Jiang) - NTB: ntb_transport: fix possible memory leak while device_register() fails (Yang Yingliang) - ntb: intel: Fix error handling in intel_ntb_pci_driver_init() (Yuan Can) - NTB: amd: Fix error handling in amd_ntb_pci_driver_init() (Yuan Can) - ntb: idt: Fix error handling in idt_pci_driver_init() (Yuan Can) - udp6: fix udp6_ehashfn() typo (Eric Dumazet) - icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev(). (Kuniyuki Iwashima) - ionic: remove WARN_ON to prevent panic_on_warn (Nitya Sunkad) - net/sched: cls_fw: Fix improper refcount update leads to use-after-free (M A Ramdhan) - net: mvneta: fix txq_map in case of txq_number==1 (Klaus Kudielka) - scsi: qla2xxx: Fix error code in qla2x00_start_sp() (Dan Carpenter) - igc: set TP bit in 'supported' and 'advertising' fields of ethtool_link_ksettings (Prasad Koya) - igc: Remove delay during TX ring configuration (Muhammad Husaini Zulkifli) - drm/panel: simple: Add connector_type for innolux_at043tn24 (Fabio Estevam) - drm/panel: Add and fill drm_panel type field (Laurent Pinchart) - drm/panel: Initialise panel dev and funcs through drm_panel_init() (Laurent Pinchart) - workqueue: clean up WORK_* constant types, clarify masking (Linus Torvalds) - net: lan743x: Don't sleep in atomic context (Moritz Fischer) - block/partition: fix signedness issue for Amiga partitions (Michael Schmitz) - tty: serial: fsl_lpuart: add earlycon for imx8ulp platform (Sherry Sun) - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Thadeu Lima de Souza Cascardo) - netfilter: conntrack: Avoid nf_ct_helper_hash uses after free (Florent Revest) - netfilter: nf_tables: fix scheduling-while-atomic splat (Florian Westphal) - netfilter: nf_tables: unbind non-anonymous set if rule construction fails (Pablo Neira Ayuso) - netfilter: nf_tables: reject unbound anonymous set before commit phase (Pablo Neira Ayuso) - netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain (Pablo Neira Ayuso) - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE (Pablo Neira Ayuso) - netfilter: nf_tables: add rescheduling points during loop detection walks (Florian Westphal) - netfilter: nf_tables: use net_generic infra for transaction data (Florian Westphal) - netfilter: add helper function to set up the nfnetlink header and use it (Pablo Neira Ayuso) - netfilter: nftables: add helper function to set the base sequence number (Pablo Neira Ayuso) - netfilter: nf_tables: fix nat hook table deletion (Florian Westphal) - block: add overflow checks for Amiga partition support (Michael Schmitz) - fanotify: disallow mount/sb marks on kernel internal pseudo fs (Amir Goldstein) - fs: no need to check source (Jan Kara) - ARM: orion5x: fix d2net gpio initialization (Arnd Bergmann) - btrfs: fix race when deleting quota root from the dirty cow roots list (Filipe Manana) - fs: Lock moved directories (Jan Kara) - fs: Establish locking order for unrelated directories (Jan Kara) - Revert 'f2fs: fix potential corruption when moving a directory' (Jan Kara) - ext4: Remove ext4 locking of moved directory (Jan Kara) - fs: avoid empty option when generating legacy mount string (Thomas Weissschuh) - jffs2: reduce stack usage in jffs2_build_xattr_subsystem() (Fabian Frederick) - integrity: Fix possible multiple allocation in integrity_inode_get() (Tianjia Zhang) - bcache: Remove unnecessary NULL point check in node allocations (Zheng Wang) - mmc: sdhci: fix DMA configure compatibility issue when 64bit DMA mode is used. (Chevron Li) - mmc: core: disable TRIM on Micron MTFC4GACAJCN-1M (Robert Marko) - mmc: core: disable TRIM on Kingston EMMC04G-M627 (Robert Marko) - NFSD: add encoding of op_recall flag for write delegation (Dai Ngo) - ALSA: jack: Fix mutex call in snd_jack_report() (Takashi Iwai) - i2c: xiic: Don't try to handle more interrupt events after error (Robert Hancock) - i2c: xiic: Defer xiic_wakeup() and __xiic_start_xfer() in xiic_process() (Marek Vasut) - sh: dma: Fix DMA channel offset calculation (Artur Rojek) - net: dsa: tag_sja1105: fix MAC DA patching from meta frames (Vladimir Oltean) - net/sched: act_pedit: Add size check for TCA_PEDIT_PARMS_EX (Lin Ma) - xsk: Honor SO_BINDTODEVICE on bind (Ilya Maximets) - xsk: Improve documentation for AF_XDP (Magnus Karlsson) - tcp: annotate data races in __tcp_oow_rate_limited() (Eric Dumazet) - net: bridge: keep ports without IFF_UNICAST_FLT in BR_PROMISC mode (Vladimir Oltean) - powerpc: allow PPC_EARLY_DEBUG_CPM only when SERIAL_CPM=y (Randy Dunlap) - f2fs: fix error path handling in truncate_dnode() (Chao Yu) - mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0 (Nishanth Menon) - spi: bcm-qspi: return error if neither hif_mspi nor mspi is available (Jonas Gorski) - Add MODULE_FIRMWARE() for FIRMWARE_TG357766. (Tobias Heider) - sctp: fix potential deadlock on &net->sctp.addr_wq_lock (Chengfeng Ye) - rtc: st-lpc: Release some resources in st_rtc_probe() in case of error (Christophe JAILLET) - pwm: sysfs: Do not apply state to already disabled PWMs (Marek Vasut) - pwm: imx-tpm: force 'real_period' to be zero in suspend (Fancy Fang) - mfd: stmpe: Only disable the regulators if they are enabled (Christophe JAILLET) - KVM: s390: vsie: fix the length of APCB bitmap (Pierre Morel) - mfd: stmfx: Fix error path in stmfx_chip_init (Amelie Delaunay) - serial: 8250_omap: Use force_suspend and resume for system suspend (Tony Lindgren) - mfd: intel-lpss: Add missing check for platform_get_resource (Jiasheng Jiang) - usb: dwc3: qcom: Release the correct resources in dwc3_qcom_remove() (Christophe JAILLET) - KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes (Nico Boehr) - mfd: rt5033: Drop rt5033-battery sub-device (Stephan Gerhold) - usb: hide unused usbfs_notify_suspend/resume functions (Arnd Bergmann) - usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe() (Li Yang) - extcon: Fix kernel doc of property capability fields to avoid warnings (Andy Shevchenko) - extcon: Fix kernel doc of property fields to avoid warnings (Andy Shevchenko) - usb: dwc3: qcom: Fix potential memory leak (Vladislav Efanov) - media: usb: siano: Fix warning due to null work_func_t function pointer (Duoming Zhou) - media: videodev2.h: Fix struct v4l2_input tuner index comment (Marek Vasut) - media: usb: Check az6007_read() return value (Daniil Dulov) - sh: j2: Use ioremap() to translate device tree address into kernel memory (John Paul Adrian Glaubitz) - w1: fix loop in w1_fini() (Dan Carpenter) - block: change all __u32 annotations to __be32 in affs_hardblocks.h (Michael Schmitz) - block: fix signed int overflow in Amiga partition support (Michael Schmitz) - usb: dwc3: gadget: Propagate core init errors to UDC during pullup (Krishna Kurapati) - USB: serial: option: add LARA-R6 01B PIDs (Davide Tronchin) - hwrng: st - keep clock enabled while hwrng is registered (Martin Kaiser) - hwrng: st - Fix W=1 unused variable warning (Herbert Xu) - NFSv4.1: freeze the session table upon receiving NFS4ERR_BADSESSION (Olga Kornievskaia) - ARC: define ASM_NL and __ALIGN(_STR) outside #ifdef __ASSEMBLY__ guard (Masahiro Yamada) - modpost: fix off by one in is_executable_section() (Dan Carpenter) - crypto: marvell/cesa - Fix type mismatch warning (Arnd Bergmann) - modpost: fix section mismatch message for R_ARM_{PC24,CALL,JUMP24} (Masahiro Yamada) - modpost: fix section mismatch message for R_ARM_ABS32 (Masahiro Yamada) - crypto: nx - fix build warnings when DEBUG_FS is not enabled (Randy Dunlap) - hwrng: virtio - Fix race on data_avail and actual data (Herbert Xu) - hwrng: virtio - always add a pending request (Laurent Vivier) - hwrng: virtio - don't waste entropy (Laurent Vivier) - hwrng: virtio - don't wait on cleanup (Laurent Vivier) - hwrng: virtio - add an internal buffer (Laurent Vivier) - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Aneesh Kumar K.V) - pinctrl: at91-pio4: check return value of devm_kasprintf() (Claudiu Beznea) - perf dwarf-aux: Fix off-by-one in die_get_varname() (Namhyung Kim) - pinctrl: cherryview: Return correct value if pin in push-pull mode (Andy Shevchenko) - PCI: Add pci_clear_master() stub for non-CONFIG_PCI (Sui Jingfeng) - PCI: ftpci100: Release the clock resources (Junyan Ye) - PCI: pciehp: Cancel bringup sequence if card is not present (Rongguang Wei) - scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() (Yuchen Yang) - PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free (Ding Hui) - scsi: qedf: Fix NULL dereference in error handling (Jinhong Zhu) - ASoC: imx-audmix: check return value of devm_kasprintf() (Claudiu Beznea) - clk: keystone: sci-clk: check return value of kasprintf() (Claudiu Beznea) - clk: cdce925: check return value of kasprintf() (Claudiu Beznea) - ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer (Su Hui) - clk: tegra: tegra124-emc: Fix potential memory leak (Yuan Can) - drm/radeon: fix possible division-by-zero errors (Nikita Zhandarovich) - drm/amdkfd: Fix potential deallocation of previously deallocated memory. (Daniil Dulov) - fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe() (Christophe JAILLET) - arm64: dts: renesas: ulcb-kf: Remove flow control for SCIF1 (Wolfram Sang) - IB/hfi1: Fix sdma.h tx->num_descs off-by-one errors (Patrick Kelsey) - soc/fsl/qe: fix usb.c build errors (Randy Dunlap) - ASoC: es8316: Do not set rate constraints for unsupported MCLKs (Cristian Ciocaltea) - ASoC: es8316: Increment max value for ALC Capture Target Volume control (Cristian Ciocaltea) - memory: brcmstb_dpfe: fix testing array offset after use (Krzysztof Kozlowski) - ARM: ep93xx: fix missing-prototype warnings (Arnd Bergmann) - drm/panel: simple: fix active size for Ampire AM-480272H3TMQW-T01H (Dario Binacchi) - arm64: dts: qcom: msm8916: correct camss unit address (Krzysztof Kozlowski) - ARM: dts: gta04: Move model property out of pinctrl node (Tony Lindgren) - RDMA/bnxt_re: Fix to remove an unnecessary log (Kalesh AP) - drm: sun4i_tcon: use devm_clk_get_enabled in sun4i_tcon_init_clocks (XuDong Liu) - Input: adxl34x - do not hardcode interrupt trigger type (Marek Vasut) - ARM: dts: BCM5301X: Drop 'clock-names' from the SPI node (Rafal Milecki) - Input: drv260x - sleep between polling GO bit (Luca Weiss) - radeon: avoid double free in ci_dpm_init() (Nikita Zhandarovich) - netlink: Add __sock_i_ino() for __netlink_diag_dump(). (Kuniyuki Iwashima) - ipvlan: Fix return value of ipvlan_queue_xmit() (Cambda Zhu) - netfilter: nf_conntrack_sip: fix the ct_sip_parse_numerical_param() return value. (Ilia.Gavrilov) - netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one (Florian Westphal) - lib/ts_bm: reset initial match offset for every block of text (Jeremy Sowden) - net: nfc: Fix use-after-free caused by nfc_llcp_find_local (Lin Ma) - nfc: llcp: simplify llcp_sock_connect() error paths (Krzysztof Kozlowski) - gtp: Fix use-after-free in __gtp_encap_destroy(). (Kuniyuki Iwashima) - selftests: rtnetlink: remove netdevsim device after ipsec offload test (Sabrina Dubroca) - netlink: do not hard code device address lenth in fdb dumps (Eric Dumazet) - netlink: fix potential deadlock in netlink_set_err() (Eric Dumazet) - wifi: ath9k: convert msecs to jiffies where needed (Dmitry Antipov) - wifi: cfg80211: rewrite merging of inherited elements (Benjamin Berg) - wifi: iwlwifi: pull from TXQs with softirqs disabled (Johannes Berg) - rtnetlink: extend RTEXT_FILTER_SKIP_STATS to IFLA_VF_INFO (Edwin Peer) - wifi: ath9k: Fix possible stall on ath9k_txq_list_has_key() (Remi Pommarel) - memstick r592: make memstick_debug_get_tpc_name() static (Arnd Bergmann) - kexec: fix a memory leak in crash_shrink_memory() (Zhen Lei) - watchdog/perf: more properly prevent false positives with turbo modes (Douglas Anderson) - watchdog/perf: define dummy watchdog_update_hrtimer_threshold() on correct config (Douglas Anderson) - wifi: rsi: Do not set MMC_PM_KEEP_POWER in shutdown (Marek Vasut) - wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes (Fedor Pchelkin) - wifi: ray_cs: Fix an error handling path in ray_probe() (Christophe JAILLET) - wifi: ray_cs: Drop useless status variable in parse_addr() (Andy Shevchenko) - wifi: ray_cs: Utilize strnlen() in parse_addr() (Andy Shevchenko) - wifi: wl3501_cs: Fix an error handling path in wl3501_probe() (Christophe JAILLET) - wl3501_cs: use eth_hw_addr_set() (Jakub Kicinski) - net: create netdev->dev_addr assignment helpers (Jakub Kicinski) - wl3501_cs: Fix misspelling and provide missing documentation (Lee Jones) - wl3501_cs: Remove unnecessary NULL check (Alex Dewar) - wl3501_cs: Fix a bunch of formatting issues related to function docs (Lee Jones) - wifi: atmel: Fix an error handling path in atmel_probe() (Christophe JAILLET) - wifi: orinoco: Fix an error handling path in orinoco_cs_probe() (Christophe JAILLET) - wifi: orinoco: Fix an error handling path in spectrum_cs_probe() (Christophe JAILLET) - regulator: core: Streamline debugfs operations (Geert Uytterhoeven) - regulator: core: Fix more error checking for debugfs_create_dir() (Geert Uytterhoeven) - nfc: llcp: fix possible use of uninitialized variable in nfc_llcp_send_connect() (Krzysztof Kozlowski) - nfc: constify several pointers to u8, char and sk_buff (Krzysztof Kozlowski) - wifi: mwifiex: Fix the size of a memory allocation in mwifiex_ret_802_11_scan() (Christophe JAILLET) - spi: spi-geni-qcom: Correct CS_TOGGLE bit in SPI_TRANS_CFG (Vijaya Krishna Nivarthi) - samples/bpf: Fix buffer overflow in tcp_basertt (Pengcheng Yang) - wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx (Fedor Pchelkin) - wifi: ath9k: fix AR9003 mac hardware hang check register offset calculation (Peter Seiderer) - ima: Fix build warnings (Roberto Sassu) - pstore/ram: Add check for kstrdup (Jiasheng Jiang) - evm: Complete description of evm_inode_setattr() (Roberto Sassu) - ARM: 9303/1: kprobes: avoid missing-declaration warnings (Arnd Bergmann) - powercap: RAPL: Fix CONFIG_IOSF_MBI dependency (Zhang Rui) - PM: domains: fix integer overflow issues in genpd_parse_state() (Nikita Zhandarovich) - clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe (Feng Mingxi) - clocksource/drivers/cadence-ttc: Use ttc driver as platform driver (Rajan Vaja) - tracing/timer: Add missing hrtimer modes to decode_hrtimer_mode(). (Sebastian Andrzej Siewior) - irqchip/jcore-aic: Fix missing allocation of IRQ descriptors (John Paul Adrian Glaubitz) - irqchip/jcore-aic: Kill use of irq_create_strict_mappings() (Marc Zyngier) - md/raid10: fix io loss while replacement replace rdev (Li Nan) - md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request (Li Nan) - md/raid10: fix wrong setting of max_corr_read_errors (Li Nan) - md/raid10: fix overflow of md/safe_mode_delay (Li Nan) - md/raid10: check slab-out-of-bounds in md_bitmap_get_counter (Li Nan) - x86/resctrl: Only show tasks' pid in current pid namespace (Shawn Wang) - x86/resctrl: Use is_closid_match() in more places (James Morse) - bgmac: fix *initial* chip reset to support BCM5358 (Rafal Milecki) - drm/amdgpu: Validate VM ioctl flags. (Bas Nieuwenhuizen) - scripts/tags.sh: Resolve gtags empty index generation (Ahmed S. Darwish) - drm/i915: Initialise outparam for error return from wait_for_register (Chris Wilson) - HID: wacom: Use ktime_t rather than int when dealing with timestamps (Jason Gerecke) - fbdev: imsttfb: Fix use after free bug in imsttfb_probe (Zheng Wang) - video: imsttfb: check for ioremap() failures (Greg Kroah-Hartman) - x86/smp: Use dedicated cache-line for mwait_play_dead() (Thomas Gleixner) - gfs2: Don't deref jdesc in evict (Bob Peterson) - LTS tag: v5.4.250 (Sherry Yang) [5.4.17-2136.323.2] - x86/cpu/amd: Add a Zenbleed fix (Borislav Petkov (AMD)) [Orabug: 35641578] - x86/cpu/amd: Move the errata checking functionality up (Borislav Petkov (AMD)) [Orabug: 35641578] - ocfs2: always read both high and low parts of dinode link count (Alexey Asemov) [Orabug: 35643003] - ovl: Always reevaluate the file signature for IMA (Eric Snowberg) [Orabug: 35646439] - bpf: fix NULL pointer dereferences when vmlinux BTF is absent (Alan Maguire) [Orabug: 35623657] - SUNRPC: Ensure the transport backchannel association (Benjamin Coddington) [Orabug: 35643879] [5.4.17-2136.323.1] - uek-rpm: Change the toolchain version in OL8 (Jack Vogel) [Orabug: 35378775] - net/rds: Allow MSG_NOSIGNAL in sendmsg (Gerd Rausch) [Orabug: 35640816] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-40982 cpe:/o:oracle:linux:8::baseos_latest cpe:/a:oracle:linux:8::UEKR6 cpe:/a:oracle:linux:7::UEKR6 cpe:/o:oracle:linux:8:8:baseos_patch Oracle Linux 7 [5.4.17-2136.323.8.el7] - vhost-scsi: Fix alignment handling with windows (Mike Christie) [Orabug: 35769318] - Revert 'vhost/scsi: support non zerocopy iovecs' (Rajan Shanmugavelu) [Orabug: 35769318] [5.4.17-2136.323.7.el7] - x86: change default to spec_store_bypass_disable=prctl spectre_v2_user=prctl (Andrea Arcangeli) [Orabug: 35725160] - KVM: SVM: Add support for Virtual SPEC_CTRL (Babu Moger) [Orabug: 35725160] - x86/cpufeatures: Add the Virtual SPEC_CTRL feature (Babu Moger) [Orabug: 35725160] - x86/mm: Initialize text poking earlier (Peter Zijlstra) [Orabug: 35744495] - mm: Move mm_cachep initialization to mm_init() (Peter Zijlstra) [Orabug: 35744495] - x86/mm: Use mm_alloc() in poking_init() (Peter Zijlstra) [Orabug: 35744495] - mips: add support for TIF_NOTIFY_SIGNAL (Jens Axboe) [Orabug: 35749111] [5.4.17-2136.323.6.el7] - ek-rpm: Update kernel's linux-firmware dependency. (Brian Maly) [Orabug: 35742717] - nbd: make sure request completion won't concurrent (Yu Kuai) [Orabug: 35339589] - nbd: don't handle response without a corresponding request message (Yu Kuai) [Orabug: 35339589] - nvme: handle effects after freeing the request (Alan Adamson) [Orabug: 35411534] - x86/pkeys: Revert a5eff7259790 ('x86/pkeys: Add PKRU value to init_fpstate') (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - Documentation/x86: Fix backwards on/off logic about YMM support (Dave Hansen) [Orabug: 35714800] {CVE-2022-40982} - x86/xen: Fix secondary processors' FPU initialization (Juergen Gross) [Orabug: 35714800] {CVE-2022-40982} - KVM: Add GDS_NO support to KVM (Daniel Sneddon) [Orabug: 35714800] {CVE-2022-40982} - x86/speculation: Add Kconfig option for GDS (Daniel Sneddon) [Orabug: 35714800] {CVE-2022-40982} - x86/speculation: Add force option to GDS mitigation (Daniel Sneddon) [Orabug: 35714800] {CVE-2022-40982} - x86/speculation: Add Gather Data Sampling mitigation (Daniel Sneddon) [Orabug: 35714800] {CVE-2022-40982} - x86/fpu: Move FPU initialization into arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - x86/fpu: Mark init functions __init (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - x86/fpu: Remove cpuinfo argument from init functions (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - init, x86: Move mem_encrypt_init() into arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - init: Invoke arch_cpu_finalize_init() earlier (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - init: Remove check_bugs() leftovers (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - um/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - sparc/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - sh/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - mips/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - m68k/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - ia64/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - ARM: cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - x86/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - init: Provide arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - scsi: lpfc: Fix null pointer dereference due to prematurely released ndlp (Ketan Mukadam) [Orabug: 35729915] [5.4.17-2136.323.5.el7] - io_uring/net: save msghdr->msg_control for retries (Jens Axboe) [Orabug: 35495339] - io_uring/net: clear msg_controllen on partial sendmsg retry (Jens Axboe) [Orabug: 35495339] - io_uring/net: disable partial retries for recvmsg with cmsg (Jens Axboe) [Orabug: 35495339] - io_uring: hold uring mutex around poll removal (Jens Axboe) [Orabug: 35495339] - io_uring: avoid null-ptr-deref in io_arm_poll_handler (Fedor Pchelkin) [Orabug: 35495339] - io_uring/poll: allow some retries for poll triggering spuriously (Jens Axboe) [Orabug: 35495339] - io_uring: remove MSG_NOSIGNAL from recvmsg (David Lamparter) [Orabug: 35495339] - io_uring/rsrc: disallow multi-source reg buffers (Pavel Begunkov) [Orabug: 35495339] - io_uring: add a conditional reschedule to the IOPOLL cancelation loop (Jens Axboe) [Orabug: 35495339] - io_uring: mark task TASK_RUNNING before handling resume/task work (Jens Axboe) [Orabug: 35495339] - io_uring: handle TIF_NOTIFY_RESUME when checking for task_work (Jens Axboe) [Orabug: 35495339] - io_uring: ensure that io_init_req() passes in the right issue_flags (Jens Axboe) [Orabug: 35495339] - io_uring: add missing lock in io_get_file_fixed (Bing-Jhong Billy Jheng) [Orabug: 35495339] - io_uring/rw: remove leftover debug statement (Jens Axboe) [Orabug: 35495339] - io_uring/rw: ensure kiocb_end_write() is always called (Jens Axboe) [Orabug: 35495339] - io_uring: fix double poll leak on repolling (Pavel Begunkov) [Orabug: 35495339] - io_uring: Clean up a false-positive warning from GCC 9.3.0 (Alviro Iskandar Setiawan) [Orabug: 35495339] - io_uring/net: fix fast_iov assignment in io_setup_async_msg() (Stefan Metzmacher) [Orabug: 35495339] - io_uring: io_kiocb_update_pos() should not touch file for non -1 offset (Jens Axboe) [Orabug: 35495339] - io_uring/rw: defer fsnotify calls to task context (Jens Axboe) [Orabug: 35495339] - io_uring: do not recalculate ppos unnecessarily (Dylan Yudaken) [Orabug: 35495339] - io_uring: update kiocb->ki_pos at execution time (Dylan Yudaken) [Orabug: 35495339] - io_uring: remove duplicated calls to io_kiocb_ppos (Dylan Yudaken) [Orabug: 35495339] - io_uring: ensure that cached task references are always put on exit (Jens Axboe) [Orabug: 35495339] - io_uring: fix CQ waiting timeout handling (Pavel Begunkov) [Orabug: 35495339] - io_uring: lock overflowing for IOPOLL (Pavel Begunkov) [Orabug: 35495339] - io_uring: check for valid register opcode earlier (Jens Axboe) [Orabug: 35495339] - io_uring: fix async accept on O_NONBLOCK sockets (Dylan Yudaken) [Orabug: 35495339] - io_uring: allow re-poll if we made progress (Jens Axboe) [Orabug: 35495339] - io_uring: support MSG_WAITALL for IORING_OP_SEND(MSG) (Jens Axboe) [Orabug: 35495339] - io_uring: add flag for disabling provided buffer recycling (Jens Axboe) [Orabug: 35495339] - io_uring: ensure recv and recvmsg handle MSG_WAITALL correctly (Jens Axboe) [Orabug: 35495339] - io_uring: improve send/recv error handling (Pavel Begunkov) [Orabug: 35495339] - io_uring: don't gate task_work run on TIF_NOTIFY_SIGNAL (Jens Axboe) [Orabug: 35495339] - io_uring/io-wq: only free worker if it was allocated for creation (Jens Axboe) [Orabug: 35495339] - io_uring/io-wq: free worker if task_work creation is canceled (Jens Axboe) [Orabug: 35495339] - io_uring: Fix unsigned 'res' comparison with zero in io_fixup_rw_res() (Harshit Mogalapalli) [Orabug: 35495339] - io_uring: pass in EPOLL_URING_WAKE for eventfd signaling and wakeups (Jens Axboe) [Orabug: 35495339] - eventpoll: add EPOLL_URING_WAKE poll wakeup flag (Jens Axboe) [Orabug: 35495339] - epoll: simplify ep_poll_safewake() for CONFIG_DEBUG_LOCK_ALLOC (Jason Baron) [Orabug: 35495339] - eventfd: provide a eventfd_signal_mask() helper (Jens Axboe) [Orabug: 35495339] - signal: kill JOBCTL_TASK_WORK (Jens Axboe) [Orabug: 35495339] - net: remove cmsg restriction from io_uring based send/recvmsg calls (Jens Axboe) [Orabug: 35495339] - io_uring: import 5.15-stable io_uring (Jens Axboe) [Orabug: 35495339] - fs: provide locked helper variant of close_fd_get_file() (Jens Axboe) [Orabug: 35495339] - file: Rename __close_fd_get_file close_fd_get_file (Eric W. Biederman) [Orabug: 35495339] - fs: push the getname from do_rmdir into the callers (Christoph Hellwig) [Orabug: 35495339] - task_work: unconditionally run task_work from get_signal() (Jens Axboe) [Orabug: 35495339] - Revert 'proc: don't allow async path resolution of /proc/self components' (Jens Axboe) [Orabug: 35495339] - tools headers UAPI: Sync openat2.h with the kernel sources (Arnaldo Carvalho de Melo) [Orabug: 35495339] - fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED (Jens Axboe) [Orabug: 35495339] - fix handling of nd->depth on LOOKUP_CACHED failures in try_to_unlazy* (Al Viro) [Orabug: 35495339] - fs: add support for LOOKUP_CACHED (Jens Axboe) [Orabug: 35495339] - x86/process: setup io_threads more like normal user space threads (Stefan Metzmacher) [Orabug: 35495339] - arch: setup PF_IO_WORKER threads like PF_KTHREAD (Jens Axboe) [Orabug: 35495339] - task_work: remove legacy TWA_SIGNAL path (Jens Axboe) [Orabug: 35495339] - Make sure nd->path.mnt and nd->path.dentry are always valid pointers (Al Viro) [Orabug: 35495339] - fs: make do_renameat2() take struct filename (Jens Axboe) [Orabug: 35495339] - kernel: allow fork with TIF_NOTIFY_SIGNAL pending (Jens Axboe) [Orabug: 35495339] - coredump: Limit what can interrupt coredumps (Eric W. Biederman) [Orabug: 35495339] - arm64: add support for TIF_NOTIFY_SIGNAL (Jens Axboe) [Orabug: 35495339] - arm: add support for TIF_NOTIFY_SIGNAL (Jens Axboe) [Orabug: 35495339] - task_work: Use TIF_NOTIFY_SIGNAL if available (Jens Axboe) [Orabug: 35495339] - entry: Add support for TIF_NOTIFY_SIGNAL (Jens Axboe) [Orabug: 35495339] - x86: Wire up TIF_NOTIFY_SIGNAL (Jens Axboe) [Orabug: 35495339] - signal: Add task_sigpending() helper (Jens Axboe) [Orabug: 35495339] - net: add accept helper not installing fd (Pavel Begunkov) [Orabug: 35495339] - net: provide __sys_shutdown_sock() that takes a socket (Jens Axboe) [Orabug: 35495339] - task_work: add helper for more targeted task_work canceling (Jens Axboe) [Orabug: 35495339] - kernel: don't call do_exit() for PF_IO_WORKER threads (Jens Axboe) [Orabug: 35495339] - kernel: stop masking signals in create_io_thread() (Jens Axboe) [Orabug: 35495339] - iov_iter: add helper to save iov_iter state (Jens Axboe) [Orabug: 35495339] - kernel: provide create_io_thread() helper (Jens Axboe) [Orabug: 35495339] - io_uring: add missing item types for splice request (Bing-Jhong Billy Jheng) [Orabug: 35495339] - io_uring: don't hold uring_lock when calling io_run_task_work* (Hao Xu) [Orabug: 35495339] - io_uring: kill goto error handling in io_sqpoll_wait_sq() (Jens Axboe) [Orabug: 35495339] - io_uring: correct pinned_vm accounting (Pavel Begunkov) [Orabug: 35495339] - io_uring: Use original task for req identity in io_identity_cow() (Lee Jones) [Orabug: 35495339] - io_uring: ensure that send/sendmsg and recv/recvmsg check sqe->ioprio (Jens Axboe) [Orabug: 35495339] - io_uring: use separate list entry for iopoll requests (Jens Axboe) [Orabug: 35495339] - io_uring: add missing item types for various requests (Jens Axboe) [Orabug: 35495339] - io_uring: fix using under-expanded iters (Pavel Begunkov) [Orabug: 35495339] - io_uring: don't re-import iovecs from callbacks (Pavel Begunkov) [Orabug: 35495339] - arm64: Remove TIF_NOHZ (Frederic Weisbecker) [Orabug: 35495339] - arm: Remove TIF_NOHZ (Frederic Weisbecker) [Orabug: 35495339] - x86: Remove TIF_NOHZ (Frederic Weisbecker) [Orabug: 35495339] - context-tracking: Introduce CONFIG_HAVE_TIF_NOHZ (Frederic Weisbecker) [Orabug: 35495339] - x86/entry: Remove _TIF_NOHZ from _TIF_WORK_SYSCALL_ENTRY (Thomas Gleixner) [Orabug: 35495339] - mm: allow a controlled amount of unfairness in the page lock (Linus Torvalds) [Orabug: 35565406] [5.4.17-2136.323.4.el7] - uek-rpm: Disable cls_tcindex in file tcindex-disable.conf (Sherry Yang) [Orabug: 35676248] - uek-rpm: Update kernel's linux-firmware dependency. (Somasundaram Krishnasamy) [Orabug: 35678692] - Revert 'sched/fair: sanitize vruntime of entity being placed' (Saeed Mirzamohammadi) [Orabug: 35683806] - Revert 'sched/fair: Sanitize vruntime of entity being migrated' (Saeed Mirzamohammadi) [Orabug: 35683806] [5.4.17-2136.323.3.el7] - LTS tag: v5.4.251 (Sherry Yang) - tracing/histograms: Return an error if we fail to add histogram to hist_vars list (Mohamed Khalfella) - tcp: annotate data-races around fastopenq.max_qlen (Eric Dumazet) - tcp: annotate data-races around tp->notsent_lowat (Eric Dumazet) - tcp: annotate data-races around rskq_defer_accept (Eric Dumazet) - tcp: annotate data-races around tp->linger2 (Eric Dumazet) - net: Replace the limit of TCP_LINGER2 with TCP_FIN_TIMEOUT_MAX (Cambda Zhu) - tcp: annotate data-races around tp->tcp_tx_delay (Eric Dumazet) - netfilter: nf_tables: can't schedule in nft_chain_validate (Florian Westphal) - netfilter: nf_tables: fix spurious set element insertion failure (Florian Westphal) - llc: Don't drop packet from non-root netns. (Kuniyuki Iwashima) - fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe (Zhang Shurong) - Revert 'tcp: avoid the lookup process failing to get sk in ehash table' (Kuniyuki Iwashima) - net:ipv6: check return value of pskb_trim() (Yuanjun Gong) - iavf: Fix use-after-free in free_netdev (Ding Hui) - net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()/cpsw_ale_set_field() (Tanmay Patil) - pinctrl: amd: Use amd_pinconf_set() for all config options (Mario Limonciello) - fbdev: imxfb: warn about invalid left/right margin (Martin Kaiser) - spi: bcm63xx: fix max prepend length (Jonas Gorski) - igb: Fix igb_down hung on surprise removal (Ying Hsu) - wifi: iwlwifi: mvm: avoid baid size integer overflow (Johannes Berg) - wifi: wext-core: Fix -Wstringop-overflow warning in ioctl_standard_iw_point() (Gustavo A. R. Silva) - devlink: report devlink_port_type_warn source device (Petr Oros) - bpf: Address KCSAN report on bpf_lru_list (Martin KaFai Lau) - sched/fair: Don't balance task to its current running CPU (Yicong Yang) - arm64: mm: fix VA-range sanity check (Mark Rutland) - posix-timers: Ensure timer ID search-loop limit is valid (Thomas Gleixner) - md/raid10: prevent soft lockup while flush writes (Yu Kuai) - md: fix data corruption for raid456 when reshape restart while grow up (Yu Kuai) - nbd: Add the maximum limit of allocated index in nbd_dev_add (Zhong Jinghua) - debugobjects: Recheck debug_objects_enabled before reporting (Tetsuo Handa) - ext4: correct inline offset when handling xattrs in inode body (Eric Whitney) - drm/client: Fix memory leak in drm_client_modeset_probe (Jocelyn Falempe) - drm/client: Fix memory leak in drm_client_target_cloned (Jocelyn Falempe) - can: bcm: Fix UAF in bcm_proc_show() (YueHaibing) - selftests: tc: set timeout to 15 minutes (Matthieu Baerts) - fuse: revalidate: don't invalidate if interrupted (Miklos Szeredi) - btrfs: fix warning when putting transaction with qgroups enabled after abort (Filipe Manana) - perf probe: Add test for regression introduced by switch to die_get_decl_file() (Georg Muller) - drm/atomic: Fix potential use-after-free in nonblocking commits (Daniel Vetter) - scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue (Manish Rangankar) - scsi: qla2xxx: Pointer may be dereferenced (Shreyas Deodhar) - scsi: qla2xxx: Correct the index of array (Bikash Hazarika) - scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() (Nilesh Javali) - scsi: qla2xxx: Fix potential NULL pointer dereference (Bikash Hazarika) - scsi: qla2xxx: Wait for io return on terminate rport (Quinn Tran) - tracing/probes: Fix not to count error code to total length (Masami Hiramatsu (Google)) - tracing: Fix null pointer dereference in tracing_err_log_open() (Mateusz Stachyra) - xtensa: ISS: fix call to split_if_spec (Max Filippov) - ring-buffer: Fix deadloop issue on reading trace_pipe (Zheng Yejian) - tracing/histograms: Add histograms to hist_vars if they have referenced variables (Mohamed Khalfella) - tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk (Christophe JAILLET) - tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error (Christophe JAILLET) - Revert '8250: add support for ASIX devices with a FIFO bug' (Jiaqing Zhao) - meson saradc: fix clock divider mask length (George Stark) - ceph: don't let check_caps skip sending responses for revoke msgs (Xiubo Li) - hwrng: imx-rngc - fix the timeout for init and self check (Martin Kaiser) - firmware: stratix10-svc: Fix a potential resource leak in svc_create_memory_pool() (Christophe JAILLET) - serial: atmel: don't enable IRQs prematurely (Dan Carpenter) - drm/rockchip: vop: Leave vblank enabled in self-refresh (Brian Norris) - drm/atomic: Allow vblank-enabled + self-refresh 'disable' (Brian Norris) - fs: dlm: return positive pid value for F_GETLK (Alexander Aring) - md/raid0: add discard support for the 'original' layout (Jason Baron) - misc: pci_endpoint_test: Re-init completion for every test (Damien Le Moal) - misc: pci_endpoint_test: Free IRQs before removing the device (Damien Le Moal) - PCI: rockchip: Set address alignment for endpoint mode (Damien Le Moal) - PCI: rockchip: Use u32 variable to access 32-bit registers (Rick Wertenbroek) - PCI: rockchip: Fix legacy IRQ generation for RK3399 PCIe endpoint core (Rick Wertenbroek) - PCI: rockchip: Add poll and timeout to wait for PHY PLLs to be locked (Rick Wertenbroek) - PCI: rockchip: Write PCI Device ID to correct register (Rick Wertenbroek) - PCI: rockchip: Assert PCI Configuration Enable bit after probe (Rick Wertenbroek) - PCI: qcom: Disable write access to read only registers for IP v2.3.3 (Manivannan Sadhasivam) - PCI: Add function 1 DMA alias quirk for Marvell 88SE9235 (Robin Murphy) - PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold (Ondrej Zary) - jfs: jfs_dmap: Validate db_l2nbperpage while mounting (Siddh Raman Pant) - ext4: only update i_reserved_data_blocks on successful block allocation (Baokun Li) - ext4: fix wrong unit use in ext4_mb_clear_bb (Kemeng Shi) - erofs: fix compact 4B support for 16k block size (Gao Xiang) - SUNRPC: Fix UAF in svc_tcp_listen_data_ready() (Ding Hui) - misc: fastrpc: Create fastrpc scalar with correct buffer count (Ekansh Gupta) - powerpc: Fail build if using recordmcount with binutils v2.37 (Naveen N Rao) - net: bcmgenet: Ensure MDIO unregistration has clocks enabled (Florian Fainelli) - mtd: rawnand: meson: fix unaligned DMA buffers handling (Arseniy Krasnov) - tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation (Jarkko Sakkinen) - pinctrl: amd: Only use special debounce behavior for GPIO 0 (Mario Limonciello) - pinctrl: amd: Detect internal GPIO0 debounce handling (Mario Limonciello) - pinctrl: amd: Fix mistake in handling clearing pins at startup (Mario Limonciello) - net/sched: make psched_mtu() RTNL-less safe (Pedro Tammela) - net/sched: flower: Ensure both minimum and maximum ports are specified (Ido Schimmel) - cls_flower: Add extack support for src and dst port range options (Guillaume Nault) - wifi: airo: avoid uninitialized warning in airo_get_rate() (Randy Dunlap) - erofs: avoid infinite loop in z_erofs_do_read_page() when reading beyond EOF (Chunhai Guo) - platform/x86: wmi: Break possible infinite loop when parsing GUID (Andy Shevchenko) - platform/x86: wmi: move variables (Barnabas Pocze) - platform/x86: wmi: use guid_t and guid_equal() (Barnabas Pocze) - platform/x86: wmi: remove unnecessary argument (Barnabas Pocze) - platform/x86: wmi: Fix indentation in some cases (Andy Shevchenko) - platform/x86: wmi: Replace UUID redefinitions by their originals (Andy Shevchenko) - ipv6/addrconf: fix a potential refcount underflow for idev (Ziyang Xuan) - NTB: ntb_tool: Add check for devm_kcalloc (Jiasheng Jiang) - NTB: ntb_transport: fix possible memory leak while device_register() fails (Yang Yingliang) - ntb: intel: Fix error handling in intel_ntb_pci_driver_init() (Yuan Can) - NTB: amd: Fix error handling in amd_ntb_pci_driver_init() (Yuan Can) - ntb: idt: Fix error handling in idt_pci_driver_init() (Yuan Can) - udp6: fix udp6_ehashfn() typo (Eric Dumazet) - icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev(). (Kuniyuki Iwashima) - ionic: remove WARN_ON to prevent panic_on_warn (Nitya Sunkad) - net/sched: cls_fw: Fix improper refcount update leads to use-after-free (M A Ramdhan) - net: mvneta: fix txq_map in case of txq_number==1 (Klaus Kudielka) - scsi: qla2xxx: Fix error code in qla2x00_start_sp() (Dan Carpenter) - igc: set TP bit in 'supported' and 'advertising' fields of ethtool_link_ksettings (Prasad Koya) - igc: Remove delay during TX ring configuration (Muhammad Husaini Zulkifli) - drm/panel: simple: Add connector_type for innolux_at043tn24 (Fabio Estevam) - drm/panel: Add and fill drm_panel type field (Laurent Pinchart) - drm/panel: Initialise panel dev and funcs through drm_panel_init() (Laurent Pinchart) - workqueue: clean up WORK_* constant types, clarify masking (Linus Torvalds) - net: lan743x: Don't sleep in atomic context (Moritz Fischer) - block/partition: fix signedness issue for Amiga partitions (Michael Schmitz) - tty: serial: fsl_lpuart: add earlycon for imx8ulp platform (Sherry Sun) - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Thadeu Lima de Souza Cascardo) - netfilter: conntrack: Avoid nf_ct_helper_hash uses after free (Florent Revest) - netfilter: nf_tables: fix scheduling-while-atomic splat (Florian Westphal) - netfilter: nf_tables: unbind non-anonymous set if rule construction fails (Pablo Neira Ayuso) - netfilter: nf_tables: reject unbound anonymous set before commit phase (Pablo Neira Ayuso) - netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain (Pablo Neira Ayuso) - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE (Pablo Neira Ayuso) - netfilter: nf_tables: add rescheduling points during loop detection walks (Florian Westphal) - netfilter: nf_tables: use net_generic infra for transaction data (Florian Westphal) - netfilter: add helper function to set up the nfnetlink header and use it (Pablo Neira Ayuso) - netfilter: nftables: add helper function to set the base sequence number (Pablo Neira Ayuso) - netfilter: nf_tables: fix nat hook table deletion (Florian Westphal) - block: add overflow checks for Amiga partition support (Michael Schmitz) - fanotify: disallow mount/sb marks on kernel internal pseudo fs (Amir Goldstein) - fs: no need to check source (Jan Kara) - ARM: orion5x: fix d2net gpio initialization (Arnd Bergmann) - btrfs: fix race when deleting quota root from the dirty cow roots list (Filipe Manana) - fs: Lock moved directories (Jan Kara) - fs: Establish locking order for unrelated directories (Jan Kara) - Revert 'f2fs: fix potential corruption when moving a directory' (Jan Kara) - ext4: Remove ext4 locking of moved directory (Jan Kara) - fs: avoid empty option when generating legacy mount string (Thomas Weissschuh) - jffs2: reduce stack usage in jffs2_build_xattr_subsystem() (Fabian Frederick) - integrity: Fix possible multiple allocation in integrity_inode_get() (Tianjia Zhang) - bcache: Remove unnecessary NULL point check in node allocations (Zheng Wang) - mmc: sdhci: fix DMA configure compatibility issue when 64bit DMA mode is used. (Chevron Li) - mmc: core: disable TRIM on Micron MTFC4GACAJCN-1M (Robert Marko) - mmc: core: disable TRIM on Kingston EMMC04G-M627 (Robert Marko) - NFSD: add encoding of op_recall flag for write delegation (Dai Ngo) - ALSA: jack: Fix mutex call in snd_jack_report() (Takashi Iwai) - i2c: xiic: Don't try to handle more interrupt events after error (Robert Hancock) - i2c: xiic: Defer xiic_wakeup() and __xiic_start_xfer() in xiic_process() (Marek Vasut) - sh: dma: Fix DMA channel offset calculation (Artur Rojek) - net: dsa: tag_sja1105: fix MAC DA patching from meta frames (Vladimir Oltean) - net/sched: act_pedit: Add size check for TCA_PEDIT_PARMS_EX (Lin Ma) - xsk: Honor SO_BINDTODEVICE on bind (Ilya Maximets) - xsk: Improve documentation for AF_XDP (Magnus Karlsson) - tcp: annotate data races in __tcp_oow_rate_limited() (Eric Dumazet) - net: bridge: keep ports without IFF_UNICAST_FLT in BR_PROMISC mode (Vladimir Oltean) - powerpc: allow PPC_EARLY_DEBUG_CPM only when SERIAL_CPM=y (Randy Dunlap) - f2fs: fix error path handling in truncate_dnode() (Chao Yu) - mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0 (Nishanth Menon) - spi: bcm-qspi: return error if neither hif_mspi nor mspi is available (Jonas Gorski) - Add MODULE_FIRMWARE() for FIRMWARE_TG357766. (Tobias Heider) - sctp: fix potential deadlock on &net->sctp.addr_wq_lock (Chengfeng Ye) - rtc: st-lpc: Release some resources in st_rtc_probe() in case of error (Christophe JAILLET) - pwm: sysfs: Do not apply state to already disabled PWMs (Marek Vasut) - pwm: imx-tpm: force 'real_period' to be zero in suspend (Fancy Fang) - mfd: stmpe: Only disable the regulators if they are enabled (Christophe JAILLET) - KVM: s390: vsie: fix the length of APCB bitmap (Pierre Morel) - mfd: stmfx: Fix error path in stmfx_chip_init (Amelie Delaunay) - serial: 8250_omap: Use force_suspend and resume for system suspend (Tony Lindgren) - mfd: intel-lpss: Add missing check for platform_get_resource (Jiasheng Jiang) - usb: dwc3: qcom: Release the correct resources in dwc3_qcom_remove() (Christophe JAILLET) - KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes (Nico Boehr) - mfd: rt5033: Drop rt5033-battery sub-device (Stephan Gerhold) - usb: hide unused usbfs_notify_suspend/resume functions (Arnd Bergmann) - usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe() (Li Yang) - extcon: Fix kernel doc of property capability fields to avoid warnings (Andy Shevchenko) - extcon: Fix kernel doc of property fields to avoid warnings (Andy Shevchenko) - usb: dwc3: qcom: Fix potential memory leak (Vladislav Efanov) - media: usb: siano: Fix warning due to null work_func_t function pointer (Duoming Zhou) - media: videodev2.h: Fix struct v4l2_input tuner index comment (Marek Vasut) - media: usb: Check az6007_read() return value (Daniil Dulov) - sh: j2: Use ioremap() to translate device tree address into kernel memory (John Paul Adrian Glaubitz) - w1: fix loop in w1_fini() (Dan Carpenter) - block: change all __u32 annotations to __be32 in affs_hardblocks.h (Michael Schmitz) - block: fix signed int overflow in Amiga partition support (Michael Schmitz) - usb: dwc3: gadget: Propagate core init errors to UDC during pullup (Krishna Kurapati) - USB: serial: option: add LARA-R6 01B PIDs (Davide Tronchin) - hwrng: st - keep clock enabled while hwrng is registered (Martin Kaiser) - hwrng: st - Fix W=1 unused variable warning (Herbert Xu) - NFSv4.1: freeze the session table upon receiving NFS4ERR_BADSESSION (Olga Kornievskaia) - ARC: define ASM_NL and __ALIGN(_STR) outside #ifdef __ASSEMBLY__ guard (Masahiro Yamada) - modpost: fix off by one in is_executable_section() (Dan Carpenter) - crypto: marvell/cesa - Fix type mismatch warning (Arnd Bergmann) - modpost: fix section mismatch message for R_ARM_{PC24,CALL,JUMP24} (Masahiro Yamada) - modpost: fix section mismatch message for R_ARM_ABS32 (Masahiro Yamada) - crypto: nx - fix build warnings when DEBUG_FS is not enabled (Randy Dunlap) - hwrng: virtio - Fix race on data_avail and actual data (Herbert Xu) - hwrng: virtio - always add a pending request (Laurent Vivier) - hwrng: virtio - don't waste entropy (Laurent Vivier) - hwrng: virtio - don't wait on cleanup (Laurent Vivier) - hwrng: virtio - add an internal buffer (Laurent Vivier) - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Aneesh Kumar K.V) - pinctrl: at91-pio4: check return value of devm_kasprintf() (Claudiu Beznea) - perf dwarf-aux: Fix off-by-one in die_get_varname() (Namhyung Kim) - pinctrl: cherryview: Return correct value if pin in push-pull mode (Andy Shevchenko) - PCI: Add pci_clear_master() stub for non-CONFIG_PCI (Sui Jingfeng) - PCI: ftpci100: Release the clock resources (Junyan Ye) - PCI: pciehp: Cancel bringup sequence if card is not present (Rongguang Wei) - scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() (Yuchen Yang) - PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free (Ding Hui) - scsi: qedf: Fix NULL dereference in error handling (Jinhong Zhu) - ASoC: imx-audmix: check return value of devm_kasprintf() (Claudiu Beznea) - clk: keystone: sci-clk: check return value of kasprintf() (Claudiu Beznea) - clk: cdce925: check return value of kasprintf() (Claudiu Beznea) - ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer (Su Hui) - clk: tegra: tegra124-emc: Fix potential memory leak (Yuan Can) - drm/radeon: fix possible division-by-zero errors (Nikita Zhandarovich) - drm/amdkfd: Fix potential deallocation of previously deallocated memory. (Daniil Dulov) - fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe() (Christophe JAILLET) - arm64: dts: renesas: ulcb-kf: Remove flow control for SCIF1 (Wolfram Sang) - IB/hfi1: Fix sdma.h tx->num_descs off-by-one errors (Patrick Kelsey) - soc/fsl/qe: fix usb.c build errors (Randy Dunlap) - ASoC: es8316: Do not set rate constraints for unsupported MCLKs (Cristian Ciocaltea) - ASoC: es8316: Increment max value for ALC Capture Target Volume control (Cristian Ciocaltea) - memory: brcmstb_dpfe: fix testing array offset after use (Krzysztof Kozlowski) - ARM: ep93xx: fix missing-prototype warnings (Arnd Bergmann) - drm/panel: simple: fix active size for Ampire AM-480272H3TMQW-T01H (Dario Binacchi) - arm64: dts: qcom: msm8916: correct camss unit address (Krzysztof Kozlowski) - ARM: dts: gta04: Move model property out of pinctrl node (Tony Lindgren) - RDMA/bnxt_re: Fix to remove an unnecessary log (Kalesh AP) - drm: sun4i_tcon: use devm_clk_get_enabled in sun4i_tcon_init_clocks (XuDong Liu) - Input: adxl34x - do not hardcode interrupt trigger type (Marek Vasut) - ARM: dts: BCM5301X: Drop 'clock-names' from the SPI node (Rafal Milecki) - Input: drv260x - sleep between polling GO bit (Luca Weiss) - radeon: avoid double free in ci_dpm_init() (Nikita Zhandarovich) - netlink: Add __sock_i_ino() for __netlink_diag_dump(). (Kuniyuki Iwashima) - ipvlan: Fix return value of ipvlan_queue_xmit() (Cambda Zhu) - netfilter: nf_conntrack_sip: fix the ct_sip_parse_numerical_param() return value. (Ilia.Gavrilov) - netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one (Florian Westphal) - lib/ts_bm: reset initial match offset for every block of text (Jeremy Sowden) - net: nfc: Fix use-after-free caused by nfc_llcp_find_local (Lin Ma) - nfc: llcp: simplify llcp_sock_connect() error paths (Krzysztof Kozlowski) - gtp: Fix use-after-free in __gtp_encap_destroy(). (Kuniyuki Iwashima) - selftests: rtnetlink: remove netdevsim device after ipsec offload test (Sabrina Dubroca) - netlink: do not hard code device address lenth in fdb dumps (Eric Dumazet) - netlink: fix potential deadlock in netlink_set_err() (Eric Dumazet) - wifi: ath9k: convert msecs to jiffies where needed (Dmitry Antipov) - wifi: cfg80211: rewrite merging of inherited elements (Benjamin Berg) - wifi: iwlwifi: pull from TXQs with softirqs disabled (Johannes Berg) - rtnetlink: extend RTEXT_FILTER_SKIP_STATS to IFLA_VF_INFO (Edwin Peer) - wifi: ath9k: Fix possible stall on ath9k_txq_list_has_key() (Remi Pommarel) - memstick r592: make memstick_debug_get_tpc_name() static (Arnd Bergmann) - kexec: fix a memory leak in crash_shrink_memory() (Zhen Lei) - watchdog/perf: more properly prevent false positives with turbo modes (Douglas Anderson) - watchdog/perf: define dummy watchdog_update_hrtimer_threshold() on correct config (Douglas Anderson) - wifi: rsi: Do not set MMC_PM_KEEP_POWER in shutdown (Marek Vasut) - wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes (Fedor Pchelkin) - wifi: ray_cs: Fix an error handling path in ray_probe() (Christophe JAILLET) - wifi: ray_cs: Drop useless status variable in parse_addr() (Andy Shevchenko) - wifi: ray_cs: Utilize strnlen() in parse_addr() (Andy Shevchenko) - wifi: wl3501_cs: Fix an error handling path in wl3501_probe() (Christophe JAILLET) - wl3501_cs: use eth_hw_addr_set() (Jakub Kicinski) - net: create netdev->dev_addr assignment helpers (Jakub Kicinski) - wl3501_cs: Fix misspelling and provide missing documentation (Lee Jones) - wl3501_cs: Remove unnecessary NULL check (Alex Dewar) - wl3501_cs: Fix a bunch of formatting issues related to function docs (Lee Jones) - wifi: atmel: Fix an error handling path in atmel_probe() (Christophe JAILLET) - wifi: orinoco: Fix an error handling path in orinoco_cs_probe() (Christophe JAILLET) - wifi: orinoco: Fix an error handling path in spectrum_cs_probe() (Christophe JAILLET) - regulator: core: Streamline debugfs operations (Geert Uytterhoeven) - regulator: core: Fix more error checking for debugfs_create_dir() (Geert Uytterhoeven) - nfc: llcp: fix possible use of uninitialized variable in nfc_llcp_send_connect() (Krzysztof Kozlowski) - nfc: constify several pointers to u8, char and sk_buff (Krzysztof Kozlowski) - wifi: mwifiex: Fix the size of a memory allocation in mwifiex_ret_802_11_scan() (Christophe JAILLET) - spi: spi-geni-qcom: Correct CS_TOGGLE bit in SPI_TRANS_CFG (Vijaya Krishna Nivarthi) - samples/bpf: Fix buffer overflow in tcp_basertt (Pengcheng Yang) - wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx (Fedor Pchelkin) - wifi: ath9k: fix AR9003 mac hardware hang check register offset calculation (Peter Seiderer) - ima: Fix build warnings (Roberto Sassu) - pstore/ram: Add check for kstrdup (Jiasheng Jiang) - evm: Complete description of evm_inode_setattr() (Roberto Sassu) - ARM: 9303/1: kprobes: avoid missing-declaration warnings (Arnd Bergmann) - powercap: RAPL: Fix CONFIG_IOSF_MBI dependency (Zhang Rui) - PM: domains: fix integer overflow issues in genpd_parse_state() (Nikita Zhandarovich) - clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe (Feng Mingxi) - clocksource/drivers/cadence-ttc: Use ttc driver as platform driver (Rajan Vaja) - tracing/timer: Add missing hrtimer modes to decode_hrtimer_mode(). (Sebastian Andrzej Siewior) - irqchip/jcore-aic: Fix missing allocation of IRQ descriptors (John Paul Adrian Glaubitz) - irqchip/jcore-aic: Kill use of irq_create_strict_mappings() (Marc Zyngier) - md/raid10: fix io loss while replacement replace rdev (Li Nan) - md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request (Li Nan) - md/raid10: fix wrong setting of max_corr_read_errors (Li Nan) - md/raid10: fix overflow of md/safe_mode_delay (Li Nan) - md/raid10: check slab-out-of-bounds in md_bitmap_get_counter (Li Nan) - x86/resctrl: Only show tasks' pid in current pid namespace (Shawn Wang) - x86/resctrl: Use is_closid_match() in more places (James Morse) - bgmac: fix *initial* chip reset to support BCM5358 (Rafal Milecki) - drm/amdgpu: Validate VM ioctl flags. (Bas Nieuwenhuizen) - scripts/tags.sh: Resolve gtags empty index generation (Ahmed S. Darwish) - drm/i915: Initialise outparam for error return from wait_for_register (Chris Wilson) - HID: wacom: Use ktime_t rather than int when dealing with timestamps (Jason Gerecke) - fbdev: imsttfb: Fix use after free bug in imsttfb_probe (Zheng Wang) - video: imsttfb: check for ioremap() failures (Greg Kroah-Hartman) - x86/smp: Use dedicated cache-line for mwait_play_dead() (Thomas Gleixner) - gfs2: Don't deref jdesc in evict (Bob Peterson) - LTS tag: v5.4.250 (Sherry Yang) [5.4.17-2136.323.2.el7] - x86/cpu/amd: Add a Zenbleed fix (Borislav Petkov (AMD)) [Orabug: 35641578] - x86/cpu/amd: Move the errata checking functionality up (Borislav Petkov (AMD)) [Orabug: 35641578] - ocfs2: always read both high and low parts of dinode link count (Alexey Asemov) [Orabug: 35643003] - ovl: Always reevaluate the file signature for IMA (Eric Snowberg) [Orabug: 35646439] - bpf: fix NULL pointer dereferences when vmlinux BTF is absent (Alan Maguire) [Orabug: 35623657] - SUNRPC: Ensure the transport backchannel association (Benjamin Coddington) [Orabug: 35643879] [5.4.17-2136.323.1.el7] - uek-rpm: Change the toolchain version in OL8 (Jack Vogel) [Orabug: 35378775] - net/rds: Allow MSG_NOSIGNAL in sendmsg (Gerd Rausch) [Orabug: 35640816] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-40982 cpe:/a:oracle:linux:7::UEKR6 Oracle Linux 8 [5.4.17-2136.323.8.el8] - vhost-scsi: Fix alignment handling with windows (Mike Christie) [Orabug: 35769318] - Revert 'vhost/scsi: support non zerocopy iovecs' (Rajan Shanmugavelu) [Orabug: 35769318] [5.4.17-2136.323.7.el8] - x86: change default to spec_store_bypass_disable=prctl spectre_v2_user=prctl (Andrea Arcangeli) [Orabug: 35725160] - KVM: SVM: Add support for Virtual SPEC_CTRL (Babu Moger) [Orabug: 35725160] - x86/cpufeatures: Add the Virtual SPEC_CTRL feature (Babu Moger) [Orabug: 35725160] - x86/mm: Initialize text poking earlier (Peter Zijlstra) [Orabug: 35744495] - mm: Move mm_cachep initialization to mm_init() (Peter Zijlstra) [Orabug: 35744495] - x86/mm: Use mm_alloc() in poking_init() (Peter Zijlstra) [Orabug: 35744495] - mips: add support for TIF_NOTIFY_SIGNAL (Jens Axboe) [Orabug: 35749111] [5.4.17-2136.323.6.el8] - ek-rpm: Update kernel's linux-firmware dependency. (Brian Maly) [Orabug: 35742717] - nbd: make sure request completion won't concurrent (Yu Kuai) [Orabug: 35339589] - nbd: don't handle response without a corresponding request message (Yu Kuai) [Orabug: 35339589] - nvme: handle effects after freeing the request (Alan Adamson) [Orabug: 35411534] - x86/pkeys: Revert a5eff7259790 ('x86/pkeys: Add PKRU value to init_fpstate') (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - Documentation/x86: Fix backwards on/off logic about YMM support (Dave Hansen) [Orabug: 35714800] {CVE-2022-40982} - x86/xen: Fix secondary processors' FPU initialization (Juergen Gross) [Orabug: 35714800] {CVE-2022-40982} - KVM: Add GDS_NO support to KVM (Daniel Sneddon) [Orabug: 35714800] {CVE-2022-40982} - x86/speculation: Add Kconfig option for GDS (Daniel Sneddon) [Orabug: 35714800] {CVE-2022-40982} - x86/speculation: Add force option to GDS mitigation (Daniel Sneddon) [Orabug: 35714800] {CVE-2022-40982} - x86/speculation: Add Gather Data Sampling mitigation (Daniel Sneddon) [Orabug: 35714800] {CVE-2022-40982} - x86/fpu: Move FPU initialization into arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - x86/fpu: Mark init functions __init (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - x86/fpu: Remove cpuinfo argument from init functions (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - init, x86: Move mem_encrypt_init() into arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - init: Invoke arch_cpu_finalize_init() earlier (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - init: Remove check_bugs() leftovers (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - um/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - sparc/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - sh/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - mips/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - m68k/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - ia64/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - ARM: cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - x86/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - init: Provide arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - scsi: lpfc: Fix null pointer dereference due to prematurely released ndlp (Ketan Mukadam) [Orabug: 35729915] [5.4.17-2136.323.5.el8] - io_uring/net: save msghdr->msg_control for retries (Jens Axboe) [Orabug: 35495339] - io_uring/net: clear msg_controllen on partial sendmsg retry (Jens Axboe) [Orabug: 35495339] - io_uring/net: disable partial retries for recvmsg with cmsg (Jens Axboe) [Orabug: 35495339] - io_uring: hold uring mutex around poll removal (Jens Axboe) [Orabug: 35495339] - io_uring: avoid null-ptr-deref in io_arm_poll_handler (Fedor Pchelkin) [Orabug: 35495339] - io_uring/poll: allow some retries for poll triggering spuriously (Jens Axboe) [Orabug: 35495339] - io_uring: remove MSG_NOSIGNAL from recvmsg (David Lamparter) [Orabug: 35495339] - io_uring/rsrc: disallow multi-source reg buffers (Pavel Begunkov) [Orabug: 35495339] - io_uring: add a conditional reschedule to the IOPOLL cancelation loop (Jens Axboe) [Orabug: 35495339] - io_uring: mark task TASK_RUNNING before handling resume/task work (Jens Axboe) [Orabug: 35495339] - io_uring: handle TIF_NOTIFY_RESUME when checking for task_work (Jens Axboe) [Orabug: 35495339] - io_uring: ensure that io_init_req() passes in the right issue_flags (Jens Axboe) [Orabug: 35495339] - io_uring: add missing lock in io_get_file_fixed (Bing-Jhong Billy Jheng) [Orabug: 35495339] - io_uring/rw: remove leftover debug statement (Jens Axboe) [Orabug: 35495339] - io_uring/rw: ensure kiocb_end_write() is always called (Jens Axboe) [Orabug: 35495339] - io_uring: fix double poll leak on repolling (Pavel Begunkov) [Orabug: 35495339] - io_uring: Clean up a false-positive warning from GCC 9.3.0 (Alviro Iskandar Setiawan) [Orabug: 35495339] - io_uring/net: fix fast_iov assignment in io_setup_async_msg() (Stefan Metzmacher) [Orabug: 35495339] - io_uring: io_kiocb_update_pos() should not touch file for non -1 offset (Jens Axboe) [Orabug: 35495339] - io_uring/rw: defer fsnotify calls to task context (Jens Axboe) [Orabug: 35495339] - io_uring: do not recalculate ppos unnecessarily (Dylan Yudaken) [Orabug: 35495339] - io_uring: update kiocb->ki_pos at execution time (Dylan Yudaken) [Orabug: 35495339] - io_uring: remove duplicated calls to io_kiocb_ppos (Dylan Yudaken) [Orabug: 35495339] - io_uring: ensure that cached task references are always put on exit (Jens Axboe) [Orabug: 35495339] - io_uring: fix CQ waiting timeout handling (Pavel Begunkov) [Orabug: 35495339] - io_uring: lock overflowing for IOPOLL (Pavel Begunkov) [Orabug: 35495339] - io_uring: check for valid register opcode earlier (Jens Axboe) [Orabug: 35495339] - io_uring: fix async accept on O_NONBLOCK sockets (Dylan Yudaken) [Orabug: 35495339] - io_uring: allow re-poll if we made progress (Jens Axboe) [Orabug: 35495339] - io_uring: support MSG_WAITALL for IORING_OP_SEND(MSG) (Jens Axboe) [Orabug: 35495339] - io_uring: add flag for disabling provided buffer recycling (Jens Axboe) [Orabug: 35495339] - io_uring: ensure recv and recvmsg handle MSG_WAITALL correctly (Jens Axboe) [Orabug: 35495339] - io_uring: improve send/recv error handling (Pavel Begunkov) [Orabug: 35495339] - io_uring: don't gate task_work run on TIF_NOTIFY_SIGNAL (Jens Axboe) [Orabug: 35495339] - io_uring/io-wq: only free worker if it was allocated for creation (Jens Axboe) [Orabug: 35495339] - io_uring/io-wq: free worker if task_work creation is canceled (Jens Axboe) [Orabug: 35495339] - io_uring: Fix unsigned 'res' comparison with zero in io_fixup_rw_res() (Harshit Mogalapalli) [Orabug: 35495339] - io_uring: pass in EPOLL_URING_WAKE for eventfd signaling and wakeups (Jens Axboe) [Orabug: 35495339] - eventpoll: add EPOLL_URING_WAKE poll wakeup flag (Jens Axboe) [Orabug: 35495339] - epoll: simplify ep_poll_safewake() for CONFIG_DEBUG_LOCK_ALLOC (Jason Baron) [Orabug: 35495339] - eventfd: provide a eventfd_signal_mask() helper (Jens Axboe) [Orabug: 35495339] - signal: kill JOBCTL_TASK_WORK (Jens Axboe) [Orabug: 35495339] - net: remove cmsg restriction from io_uring based send/recvmsg calls (Jens Axboe) [Orabug: 35495339] - io_uring: import 5.15-stable io_uring (Jens Axboe) [Orabug: 35495339] - fs: provide locked helper variant of close_fd_get_file() (Jens Axboe) [Orabug: 35495339] - file: Rename __close_fd_get_file close_fd_get_file (Eric W. Biederman) [Orabug: 35495339] - fs: push the getname from do_rmdir into the callers (Christoph Hellwig) [Orabug: 35495339] - task_work: unconditionally run task_work from get_signal() (Jens Axboe) [Orabug: 35495339] - Revert 'proc: don't allow async path resolution of /proc/self components' (Jens Axboe) [Orabug: 35495339] - tools headers UAPI: Sync openat2.h with the kernel sources (Arnaldo Carvalho de Melo) [Orabug: 35495339] - fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED (Jens Axboe) [Orabug: 35495339] - fix handling of nd->depth on LOOKUP_CACHED failures in try_to_unlazy* (Al Viro) [Orabug: 35495339] - fs: add support for LOOKUP_CACHED (Jens Axboe) [Orabug: 35495339] - x86/process: setup io_threads more like normal user space threads (Stefan Metzmacher) [Orabug: 35495339] - arch: setup PF_IO_WORKER threads like PF_KTHREAD (Jens Axboe) [Orabug: 35495339] - task_work: remove legacy TWA_SIGNAL path (Jens Axboe) [Orabug: 35495339] - Make sure nd->path.mnt and nd->path.dentry are always valid pointers (Al Viro) [Orabug: 35495339] - fs: make do_renameat2() take struct filename (Jens Axboe) [Orabug: 35495339] - kernel: allow fork with TIF_NOTIFY_SIGNAL pending (Jens Axboe) [Orabug: 35495339] - coredump: Limit what can interrupt coredumps (Eric W. Biederman) [Orabug: 35495339] - arm64: add support for TIF_NOTIFY_SIGNAL (Jens Axboe) [Orabug: 35495339] - arm: add support for TIF_NOTIFY_SIGNAL (Jens Axboe) [Orabug: 35495339] - task_work: Use TIF_NOTIFY_SIGNAL if available (Jens Axboe) [Orabug: 35495339] - entry: Add support for TIF_NOTIFY_SIGNAL (Jens Axboe) [Orabug: 35495339] - x86: Wire up TIF_NOTIFY_SIGNAL (Jens Axboe) [Orabug: 35495339] - signal: Add task_sigpending() helper (Jens Axboe) [Orabug: 35495339] - net: add accept helper not installing fd (Pavel Begunkov) [Orabug: 35495339] - net: provide __sys_shutdown_sock() that takes a socket (Jens Axboe) [Orabug: 35495339] - task_work: add helper for more targeted task_work canceling (Jens Axboe) [Orabug: 35495339] - kernel: don't call do_exit() for PF_IO_WORKER threads (Jens Axboe) [Orabug: 35495339] - kernel: stop masking signals in create_io_thread() (Jens Axboe) [Orabug: 35495339] - iov_iter: add helper to save iov_iter state (Jens Axboe) [Orabug: 35495339] - kernel: provide create_io_thread() helper (Jens Axboe) [Orabug: 35495339] - io_uring: add missing item types for splice request (Bing-Jhong Billy Jheng) [Orabug: 35495339] - io_uring: don't hold uring_lock when calling io_run_task_work* (Hao Xu) [Orabug: 35495339] - io_uring: kill goto error handling in io_sqpoll_wait_sq() (Jens Axboe) [Orabug: 35495339] - io_uring: correct pinned_vm accounting (Pavel Begunkov) [Orabug: 35495339] - io_uring: Use original task for req identity in io_identity_cow() (Lee Jones) [Orabug: 35495339] - io_uring: ensure that send/sendmsg and recv/recvmsg check sqe->ioprio (Jens Axboe) [Orabug: 35495339] - io_uring: use separate list entry for iopoll requests (Jens Axboe) [Orabug: 35495339] - io_uring: add missing item types for various requests (Jens Axboe) [Orabug: 35495339] - io_uring: fix using under-expanded iters (Pavel Begunkov) [Orabug: 35495339] - io_uring: don't re-import iovecs from callbacks (Pavel Begunkov) [Orabug: 35495339] - arm64: Remove TIF_NOHZ (Frederic Weisbecker) [Orabug: 35495339] - arm: Remove TIF_NOHZ (Frederic Weisbecker) [Orabug: 35495339] - x86: Remove TIF_NOHZ (Frederic Weisbecker) [Orabug: 35495339] - context-tracking: Introduce CONFIG_HAVE_TIF_NOHZ (Frederic Weisbecker) [Orabug: 35495339] - x86/entry: Remove _TIF_NOHZ from _TIF_WORK_SYSCALL_ENTRY (Thomas Gleixner) [Orabug: 35495339] - mm: allow a controlled amount of unfairness in the page lock (Linus Torvalds) [Orabug: 35565406] [5.4.17-2136.323.4.el8] - uek-rpm: Disable cls_tcindex in file tcindex-disable.conf (Sherry Yang) [Orabug: 35676248] - uek-rpm: Update kernel's linux-firmware dependency. (Somasundaram Krishnasamy) [Orabug: 35678692] - Revert 'sched/fair: sanitize vruntime of entity being placed' (Saeed Mirzamohammadi) [Orabug: 35683806] - Revert 'sched/fair: Sanitize vruntime of entity being migrated' (Saeed Mirzamohammadi) [Orabug: 35683806] [5.4.17-2136.323.3.el8] - LTS tag: v5.4.251 (Sherry Yang) - tracing/histograms: Return an error if we fail to add histogram to hist_vars list (Mohamed Khalfella) - tcp: annotate data-races around fastopenq.max_qlen (Eric Dumazet) - tcp: annotate data-races around tp->notsent_lowat (Eric Dumazet) - tcp: annotate data-races around rskq_defer_accept (Eric Dumazet) - tcp: annotate data-races around tp->linger2 (Eric Dumazet) - net: Replace the limit of TCP_LINGER2 with TCP_FIN_TIMEOUT_MAX (Cambda Zhu) - tcp: annotate data-races around tp->tcp_tx_delay (Eric Dumazet) - netfilter: nf_tables: can't schedule in nft_chain_validate (Florian Westphal) - netfilter: nf_tables: fix spurious set element insertion failure (Florian Westphal) - llc: Don't drop packet from non-root netns. (Kuniyuki Iwashima) - fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe (Zhang Shurong) - Revert 'tcp: avoid the lookup process failing to get sk in ehash table' (Kuniyuki Iwashima) - net:ipv6: check return value of pskb_trim() (Yuanjun Gong) - iavf: Fix use-after-free in free_netdev (Ding Hui) - net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()/cpsw_ale_set_field() (Tanmay Patil) - pinctrl: amd: Use amd_pinconf_set() for all config options (Mario Limonciello) - fbdev: imxfb: warn about invalid left/right margin (Martin Kaiser) - spi: bcm63xx: fix max prepend length (Jonas Gorski) - igb: Fix igb_down hung on surprise removal (Ying Hsu) - wifi: iwlwifi: mvm: avoid baid size integer overflow (Johannes Berg) - wifi: wext-core: Fix -Wstringop-overflow warning in ioctl_standard_iw_point() (Gustavo A. R. Silva) - devlink: report devlink_port_type_warn source device (Petr Oros) - bpf: Address KCSAN report on bpf_lru_list (Martin KaFai Lau) - sched/fair: Don't balance task to its current running CPU (Yicong Yang) - arm64: mm: fix VA-range sanity check (Mark Rutland) - posix-timers: Ensure timer ID search-loop limit is valid (Thomas Gleixner) - md/raid10: prevent soft lockup while flush writes (Yu Kuai) - md: fix data corruption for raid456 when reshape restart while grow up (Yu Kuai) - nbd: Add the maximum limit of allocated index in nbd_dev_add (Zhong Jinghua) - debugobjects: Recheck debug_objects_enabled before reporting (Tetsuo Handa) - ext4: correct inline offset when handling xattrs in inode body (Eric Whitney) - drm/client: Fix memory leak in drm_client_modeset_probe (Jocelyn Falempe) - drm/client: Fix memory leak in drm_client_target_cloned (Jocelyn Falempe) - can: bcm: Fix UAF in bcm_proc_show() (YueHaibing) - selftests: tc: set timeout to 15 minutes (Matthieu Baerts) - fuse: revalidate: don't invalidate if interrupted (Miklos Szeredi) - btrfs: fix warning when putting transaction with qgroups enabled after abort (Filipe Manana) - perf probe: Add test for regression introduced by switch to die_get_decl_file() (Georg Muller) - drm/atomic: Fix potential use-after-free in nonblocking commits (Daniel Vetter) - scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue (Manish Rangankar) - scsi: qla2xxx: Pointer may be dereferenced (Shreyas Deodhar) - scsi: qla2xxx: Correct the index of array (Bikash Hazarika) - scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() (Nilesh Javali) - scsi: qla2xxx: Fix potential NULL pointer dereference (Bikash Hazarika) - scsi: qla2xxx: Wait for io return on terminate rport (Quinn Tran) - tracing/probes: Fix not to count error code to total length (Masami Hiramatsu (Google)) - tracing: Fix null pointer dereference in tracing_err_log_open() (Mateusz Stachyra) - xtensa: ISS: fix call to split_if_spec (Max Filippov) - ring-buffer: Fix deadloop issue on reading trace_pipe (Zheng Yejian) - tracing/histograms: Add histograms to hist_vars if they have referenced variables (Mohamed Khalfella) - tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk (Christophe JAILLET) - tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error (Christophe JAILLET) - Revert '8250: add support for ASIX devices with a FIFO bug' (Jiaqing Zhao) - meson saradc: fix clock divider mask length (George Stark) - ceph: don't let check_caps skip sending responses for revoke msgs (Xiubo Li) - hwrng: imx-rngc - fix the timeout for init and self check (Martin Kaiser) - firmware: stratix10-svc: Fix a potential resource leak in svc_create_memory_pool() (Christophe JAILLET) - serial: atmel: don't enable IRQs prematurely (Dan Carpenter) - drm/rockchip: vop: Leave vblank enabled in self-refresh (Brian Norris) - drm/atomic: Allow vblank-enabled + self-refresh 'disable' (Brian Norris) - fs: dlm: return positive pid value for F_GETLK (Alexander Aring) - md/raid0: add discard support for the 'original' layout (Jason Baron) - misc: pci_endpoint_test: Re-init completion for every test (Damien Le Moal) - misc: pci_endpoint_test: Free IRQs before removing the device (Damien Le Moal) - PCI: rockchip: Set address alignment for endpoint mode (Damien Le Moal) - PCI: rockchip: Use u32 variable to access 32-bit registers (Rick Wertenbroek) - PCI: rockchip: Fix legacy IRQ generation for RK3399 PCIe endpoint core (Rick Wertenbroek) - PCI: rockchip: Add poll and timeout to wait for PHY PLLs to be locked (Rick Wertenbroek) - PCI: rockchip: Write PCI Device ID to correct register (Rick Wertenbroek) - PCI: rockchip: Assert PCI Configuration Enable bit after probe (Rick Wertenbroek) - PCI: qcom: Disable write access to read only registers for IP v2.3.3 (Manivannan Sadhasivam) - PCI: Add function 1 DMA alias quirk for Marvell 88SE9235 (Robin Murphy) - PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold (Ondrej Zary) - jfs: jfs_dmap: Validate db_l2nbperpage while mounting (Siddh Raman Pant) - ext4: only update i_reserved_data_blocks on successful block allocation (Baokun Li) - ext4: fix wrong unit use in ext4_mb_clear_bb (Kemeng Shi) - erofs: fix compact 4B support for 16k block size (Gao Xiang) - SUNRPC: Fix UAF in svc_tcp_listen_data_ready() (Ding Hui) - misc: fastrpc: Create fastrpc scalar with correct buffer count (Ekansh Gupta) - powerpc: Fail build if using recordmcount with binutils v2.37 (Naveen N Rao) - net: bcmgenet: Ensure MDIO unregistration has clocks enabled (Florian Fainelli) - mtd: rawnand: meson: fix unaligned DMA buffers handling (Arseniy Krasnov) - tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation (Jarkko Sakkinen) - pinctrl: amd: Only use special debounce behavior for GPIO 0 (Mario Limonciello) - pinctrl: amd: Detect internal GPIO0 debounce handling (Mario Limonciello) - pinctrl: amd: Fix mistake in handling clearing pins at startup (Mario Limonciello) - net/sched: make psched_mtu() RTNL-less safe (Pedro Tammela) - net/sched: flower: Ensure both minimum and maximum ports are specified (Ido Schimmel) - cls_flower: Add extack support for src and dst port range options (Guillaume Nault) - wifi: airo: avoid uninitialized warning in airo_get_rate() (Randy Dunlap) - erofs: avoid infinite loop in z_erofs_do_read_page() when reading beyond EOF (Chunhai Guo) - platform/x86: wmi: Break possible infinite loop when parsing GUID (Andy Shevchenko) - platform/x86: wmi: move variables (Barnabas Pocze) - platform/x86: wmi: use guid_t and guid_equal() (Barnabas Pocze) - platform/x86: wmi: remove unnecessary argument (Barnabas Pocze) - platform/x86: wmi: Fix indentation in some cases (Andy Shevchenko) - platform/x86: wmi: Replace UUID redefinitions by their originals (Andy Shevchenko) - ipv6/addrconf: fix a potential refcount underflow for idev (Ziyang Xuan) - NTB: ntb_tool: Add check for devm_kcalloc (Jiasheng Jiang) - NTB: ntb_transport: fix possible memory leak while device_register() fails (Yang Yingliang) - ntb: intel: Fix error handling in intel_ntb_pci_driver_init() (Yuan Can) - NTB: amd: Fix error handling in amd_ntb_pci_driver_init() (Yuan Can) - ntb: idt: Fix error handling in idt_pci_driver_init() (Yuan Can) - udp6: fix udp6_ehashfn() typo (Eric Dumazet) - icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev(). (Kuniyuki Iwashima) - ionic: remove WARN_ON to prevent panic_on_warn (Nitya Sunkad) - net/sched: cls_fw: Fix improper refcount update leads to use-after-free (M A Ramdhan) - net: mvneta: fix txq_map in case of txq_number==1 (Klaus Kudielka) - scsi: qla2xxx: Fix error code in qla2x00_start_sp() (Dan Carpenter) - igc: set TP bit in 'supported' and 'advertising' fields of ethtool_link_ksettings (Prasad Koya) - igc: Remove delay during TX ring configuration (Muhammad Husaini Zulkifli) - drm/panel: simple: Add connector_type for innolux_at043tn24 (Fabio Estevam) - drm/panel: Add and fill drm_panel type field (Laurent Pinchart) - drm/panel: Initialise panel dev and funcs through drm_panel_init() (Laurent Pinchart) - workqueue: clean up WORK_* constant types, clarify masking (Linus Torvalds) - net: lan743x: Don't sleep in atomic context (Moritz Fischer) - block/partition: fix signedness issue for Amiga partitions (Michael Schmitz) - tty: serial: fsl_lpuart: add earlycon for imx8ulp platform (Sherry Sun) - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Thadeu Lima de Souza Cascardo) - netfilter: conntrack: Avoid nf_ct_helper_hash uses after free (Florent Revest) - netfilter: nf_tables: fix scheduling-while-atomic splat (Florian Westphal) - netfilter: nf_tables: unbind non-anonymous set if rule construction fails (Pablo Neira Ayuso) - netfilter: nf_tables: reject unbound anonymous set before commit phase (Pablo Neira Ayuso) - netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain (Pablo Neira Ayuso) - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE (Pablo Neira Ayuso) - netfilter: nf_tables: add rescheduling points during loop detection walks (Florian Westphal) - netfilter: nf_tables: use net_generic infra for transaction data (Florian Westphal) - netfilter: add helper function to set up the nfnetlink header and use it (Pablo Neira Ayuso) - netfilter: nftables: add helper function to set the base sequence number (Pablo Neira Ayuso) - netfilter: nf_tables: fix nat hook table deletion (Florian Westphal) - block: add overflow checks for Amiga partition support (Michael Schmitz) - fanotify: disallow mount/sb marks on kernel internal pseudo fs (Amir Goldstein) - fs: no need to check source (Jan Kara) - ARM: orion5x: fix d2net gpio initialization (Arnd Bergmann) - btrfs: fix race when deleting quota root from the dirty cow roots list (Filipe Manana) - fs: Lock moved directories (Jan Kara) - fs: Establish locking order for unrelated directories (Jan Kara) - Revert 'f2fs: fix potential corruption when moving a directory' (Jan Kara) - ext4: Remove ext4 locking of moved directory (Jan Kara) - fs: avoid empty option when generating legacy mount string (Thomas Weissschuh) - jffs2: reduce stack usage in jffs2_build_xattr_subsystem() (Fabian Frederick) - integrity: Fix possible multiple allocation in integrity_inode_get() (Tianjia Zhang) - bcache: Remove unnecessary NULL point check in node allocations (Zheng Wang) - mmc: sdhci: fix DMA configure compatibility issue when 64bit DMA mode is used. (Chevron Li) - mmc: core: disable TRIM on Micron MTFC4GACAJCN-1M (Robert Marko) - mmc: core: disable TRIM on Kingston EMMC04G-M627 (Robert Marko) - NFSD: add encoding of op_recall flag for write delegation (Dai Ngo) - ALSA: jack: Fix mutex call in snd_jack_report() (Takashi Iwai) - i2c: xiic: Don't try to handle more interrupt events after error (Robert Hancock) - i2c: xiic: Defer xiic_wakeup() and __xiic_start_xfer() in xiic_process() (Marek Vasut) - sh: dma: Fix DMA channel offset calculation (Artur Rojek) - net: dsa: tag_sja1105: fix MAC DA patching from meta frames (Vladimir Oltean) - net/sched: act_pedit: Add size check for TCA_PEDIT_PARMS_EX (Lin Ma) - xsk: Honor SO_BINDTODEVICE on bind (Ilya Maximets) - xsk: Improve documentation for AF_XDP (Magnus Karlsson) - tcp: annotate data races in __tcp_oow_rate_limited() (Eric Dumazet) - net: bridge: keep ports without IFF_UNICAST_FLT in BR_PROMISC mode (Vladimir Oltean) - powerpc: allow PPC_EARLY_DEBUG_CPM only when SERIAL_CPM=y (Randy Dunlap) - f2fs: fix error path handling in truncate_dnode() (Chao Yu) - mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0 (Nishanth Menon) - spi: bcm-qspi: return error if neither hif_mspi nor mspi is available (Jonas Gorski) - Add MODULE_FIRMWARE() for FIRMWARE_TG357766. (Tobias Heider) - sctp: fix potential deadlock on &net->sctp.addr_wq_lock (Chengfeng Ye) - rtc: st-lpc: Release some resources in st_rtc_probe() in case of error (Christophe JAILLET) - pwm: sysfs: Do not apply state to already disabled PWMs (Marek Vasut) - pwm: imx-tpm: force 'real_period' to be zero in suspend (Fancy Fang) - mfd: stmpe: Only disable the regulators if they are enabled (Christophe JAILLET) - KVM: s390: vsie: fix the length of APCB bitmap (Pierre Morel) - mfd: stmfx: Fix error path in stmfx_chip_init (Amelie Delaunay) - serial: 8250_omap: Use force_suspend and resume for system suspend (Tony Lindgren) - mfd: intel-lpss: Add missing check for platform_get_resource (Jiasheng Jiang) - usb: dwc3: qcom: Release the correct resources in dwc3_qcom_remove() (Christophe JAILLET) - KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes (Nico Boehr) - mfd: rt5033: Drop rt5033-battery sub-device (Stephan Gerhold) - usb: hide unused usbfs_notify_suspend/resume functions (Arnd Bergmann) - usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe() (Li Yang) - extcon: Fix kernel doc of property capability fields to avoid warnings (Andy Shevchenko) - extcon: Fix kernel doc of property fields to avoid warnings (Andy Shevchenko) - usb: dwc3: qcom: Fix potential memory leak (Vladislav Efanov) - media: usb: siano: Fix warning due to null work_func_t function pointer (Duoming Zhou) - media: videodev2.h: Fix struct v4l2_input tuner index comment (Marek Vasut) - media: usb: Check az6007_read() return value (Daniil Dulov) - sh: j2: Use ioremap() to translate device tree address into kernel memory (John Paul Adrian Glaubitz) - w1: fix loop in w1_fini() (Dan Carpenter) - block: change all __u32 annotations to __be32 in affs_hardblocks.h (Michael Schmitz) - block: fix signed int overflow in Amiga partition support (Michael Schmitz) - usb: dwc3: gadget: Propagate core init errors to UDC during pullup (Krishna Kurapati) - USB: serial: option: add LARA-R6 01B PIDs (Davide Tronchin) - hwrng: st - keep clock enabled while hwrng is registered (Martin Kaiser) - hwrng: st - Fix W=1 unused variable warning (Herbert Xu) - NFSv4.1: freeze the session table upon receiving NFS4ERR_BADSESSION (Olga Kornievskaia) - ARC: define ASM_NL and __ALIGN(_STR) outside #ifdef __ASSEMBLY__ guard (Masahiro Yamada) - modpost: fix off by one in is_executable_section() (Dan Carpenter) - crypto: marvell/cesa - Fix type mismatch warning (Arnd Bergmann) - modpost: fix section mismatch message for R_ARM_{PC24,CALL,JUMP24} (Masahiro Yamada) - modpost: fix section mismatch message for R_ARM_ABS32 (Masahiro Yamada) - crypto: nx - fix build warnings when DEBUG_FS is not enabled (Randy Dunlap) - hwrng: virtio - Fix race on data_avail and actual data (Herbert Xu) - hwrng: virtio - always add a pending request (Laurent Vivier) - hwrng: virtio - don't waste entropy (Laurent Vivier) - hwrng: virtio - don't wait on cleanup (Laurent Vivier) - hwrng: virtio - add an internal buffer (Laurent Vivier) - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Aneesh Kumar K.V) - pinctrl: at91-pio4: check return value of devm_kasprintf() (Claudiu Beznea) - perf dwarf-aux: Fix off-by-one in die_get_varname() (Namhyung Kim) - pinctrl: cherryview: Return correct value if pin in push-pull mode (Andy Shevchenko) - PCI: Add pci_clear_master() stub for non-CONFIG_PCI (Sui Jingfeng) - PCI: ftpci100: Release the clock resources (Junyan Ye) - PCI: pciehp: Cancel bringup sequence if card is not present (Rongguang Wei) - scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() (Yuchen Yang) - PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free (Ding Hui) - scsi: qedf: Fix NULL dereference in error handling (Jinhong Zhu) - ASoC: imx-audmix: check return value of devm_kasprintf() (Claudiu Beznea) - clk: keystone: sci-clk: check return value of kasprintf() (Claudiu Beznea) - clk: cdce925: check return value of kasprintf() (Claudiu Beznea) - ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer (Su Hui) - clk: tegra: tegra124-emc: Fix potential memory leak (Yuan Can) - drm/radeon: fix possible division-by-zero errors (Nikita Zhandarovich) - drm/amdkfd: Fix potential deallocation of previously deallocated memory. (Daniil Dulov) - fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe() (Christophe JAILLET) - arm64: dts: renesas: ulcb-kf: Remove flow control for SCIF1 (Wolfram Sang) - IB/hfi1: Fix sdma.h tx->num_descs off-by-one errors (Patrick Kelsey) - soc/fsl/qe: fix usb.c build errors (Randy Dunlap) - ASoC: es8316: Do not set rate constraints for unsupported MCLKs (Cristian Ciocaltea) - ASoC: es8316: Increment max value for ALC Capture Target Volume control (Cristian Ciocaltea) - memory: brcmstb_dpfe: fix testing array offset after use (Krzysztof Kozlowski) - ARM: ep93xx: fix missing-prototype warnings (Arnd Bergmann) - drm/panel: simple: fix active size for Ampire AM-480272H3TMQW-T01H (Dario Binacchi) - arm64: dts: qcom: msm8916: correct camss unit address (Krzysztof Kozlowski) - ARM: dts: gta04: Move model property out of pinctrl node (Tony Lindgren) - RDMA/bnxt_re: Fix to remove an unnecessary log (Kalesh AP) - drm: sun4i_tcon: use devm_clk_get_enabled in sun4i_tcon_init_clocks (XuDong Liu) - Input: adxl34x - do not hardcode interrupt trigger type (Marek Vasut) - ARM: dts: BCM5301X: Drop 'clock-names' from the SPI node (Rafal Milecki) - Input: drv260x - sleep between polling GO bit (Luca Weiss) - radeon: avoid double free in ci_dpm_init() (Nikita Zhandarovich) - netlink: Add __sock_i_ino() for __netlink_diag_dump(). (Kuniyuki Iwashima) - ipvlan: Fix return value of ipvlan_queue_xmit() (Cambda Zhu) - netfilter: nf_conntrack_sip: fix the ct_sip_parse_numerical_param() return value. (Ilia.Gavrilov) - netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one (Florian Westphal) - lib/ts_bm: reset initial match offset for every block of text (Jeremy Sowden) - net: nfc: Fix use-after-free caused by nfc_llcp_find_local (Lin Ma) - nfc: llcp: simplify llcp_sock_connect() error paths (Krzysztof Kozlowski) - gtp: Fix use-after-free in __gtp_encap_destroy(). (Kuniyuki Iwashima) - selftests: rtnetlink: remove netdevsim device after ipsec offload test (Sabrina Dubroca) - netlink: do not hard code device address lenth in fdb dumps (Eric Dumazet) - netlink: fix potential deadlock in netlink_set_err() (Eric Dumazet) - wifi: ath9k: convert msecs to jiffies where needed (Dmitry Antipov) - wifi: cfg80211: rewrite merging of inherited elements (Benjamin Berg) - wifi: iwlwifi: pull from TXQs with softirqs disabled (Johannes Berg) - rtnetlink: extend RTEXT_FILTER_SKIP_STATS to IFLA_VF_INFO (Edwin Peer) - wifi: ath9k: Fix possible stall on ath9k_txq_list_has_key() (Remi Pommarel) - memstick r592: make memstick_debug_get_tpc_name() static (Arnd Bergmann) - kexec: fix a memory leak in crash_shrink_memory() (Zhen Lei) - watchdog/perf: more properly prevent false positives with turbo modes (Douglas Anderson) - watchdog/perf: define dummy watchdog_update_hrtimer_threshold() on correct config (Douglas Anderson) - wifi: rsi: Do not set MMC_PM_KEEP_POWER in shutdown (Marek Vasut) - wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes (Fedor Pchelkin) - wifi: ray_cs: Fix an error handling path in ray_probe() (Christophe JAILLET) - wifi: ray_cs: Drop useless status variable in parse_addr() (Andy Shevchenko) - wifi: ray_cs: Utilize strnlen() in parse_addr() (Andy Shevchenko) - wifi: wl3501_cs: Fix an error handling path in wl3501_probe() (Christophe JAILLET) - wl3501_cs: use eth_hw_addr_set() (Jakub Kicinski) - net: create netdev->dev_addr assignment helpers (Jakub Kicinski) - wl3501_cs: Fix misspelling and provide missing documentation (Lee Jones) - wl3501_cs: Remove unnecessary NULL check (Alex Dewar) - wl3501_cs: Fix a bunch of formatting issues related to function docs (Lee Jones) - wifi: atmel: Fix an error handling path in atmel_probe() (Christophe JAILLET) - wifi: orinoco: Fix an error handling path in orinoco_cs_probe() (Christophe JAILLET) - wifi: orinoco: Fix an error handling path in spectrum_cs_probe() (Christophe JAILLET) - regulator: core: Streamline debugfs operations (Geert Uytterhoeven) - regulator: core: Fix more error checking for debugfs_create_dir() (Geert Uytterhoeven) - nfc: llcp: fix possible use of uninitialized variable in nfc_llcp_send_connect() (Krzysztof Kozlowski) - nfc: constify several pointers to u8, char and sk_buff (Krzysztof Kozlowski) - wifi: mwifiex: Fix the size of a memory allocation in mwifiex_ret_802_11_scan() (Christophe JAILLET) - spi: spi-geni-qcom: Correct CS_TOGGLE bit in SPI_TRANS_CFG (Vijaya Krishna Nivarthi) - samples/bpf: Fix buffer overflow in tcp_basertt (Pengcheng Yang) - wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx (Fedor Pchelkin) - wifi: ath9k: fix AR9003 mac hardware hang check register offset calculation (Peter Seiderer) - ima: Fix build warnings (Roberto Sassu) - pstore/ram: Add check for kstrdup (Jiasheng Jiang) - evm: Complete description of evm_inode_setattr() (Roberto Sassu) - ARM: 9303/1: kprobes: avoid missing-declaration warnings (Arnd Bergmann) - powercap: RAPL: Fix CONFIG_IOSF_MBI dependency (Zhang Rui) - PM: domains: fix integer overflow issues in genpd_parse_state() (Nikita Zhandarovich) - clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe (Feng Mingxi) - clocksource/drivers/cadence-ttc: Use ttc driver as platform driver (Rajan Vaja) - tracing/timer: Add missing hrtimer modes to decode_hrtimer_mode(). (Sebastian Andrzej Siewior) - irqchip/jcore-aic: Fix missing allocation of IRQ descriptors (John Paul Adrian Glaubitz) - irqchip/jcore-aic: Kill use of irq_create_strict_mappings() (Marc Zyngier) - md/raid10: fix io loss while replacement replace rdev (Li Nan) - md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request (Li Nan) - md/raid10: fix wrong setting of max_corr_read_errors (Li Nan) - md/raid10: fix overflow of md/safe_mode_delay (Li Nan) - md/raid10: check slab-out-of-bounds in md_bitmap_get_counter (Li Nan) - x86/resctrl: Only show tasks' pid in current pid namespace (Shawn Wang) - x86/resctrl: Use is_closid_match() in more places (James Morse) - bgmac: fix *initial* chip reset to support BCM5358 (Rafal Milecki) - drm/amdgpu: Validate VM ioctl flags. (Bas Nieuwenhuizen) - scripts/tags.sh: Resolve gtags empty index generation (Ahmed S. Darwish) - drm/i915: Initialise outparam for error return from wait_for_register (Chris Wilson) - HID: wacom: Use ktime_t rather than int when dealing with timestamps (Jason Gerecke) - fbdev: imsttfb: Fix use after free bug in imsttfb_probe (Zheng Wang) - video: imsttfb: check for ioremap() failures (Greg Kroah-Hartman) - x86/smp: Use dedicated cache-line for mwait_play_dead() (Thomas Gleixner) - gfs2: Don't deref jdesc in evict (Bob Peterson) - LTS tag: v5.4.250 (Sherry Yang) [5.4.17-2136.323.2.el8] - x86/cpu/amd: Add a Zenbleed fix (Borislav Petkov (AMD)) [Orabug: 35641578] - x86/cpu/amd: Move the errata checking functionality up (Borislav Petkov (AMD)) [Orabug: 35641578] - ocfs2: always read both high and low parts of dinode link count (Alexey Asemov) [Orabug: 35643003] - ovl: Always reevaluate the file signature for IMA (Eric Snowberg) [Orabug: 35646439] - bpf: fix NULL pointer dereferences when vmlinux BTF is absent (Alan Maguire) [Orabug: 35623657] - SUNRPC: Ensure the transport backchannel association (Benjamin Coddington) [Orabug: 35643879] [5.4.17-2136.323.1.el8] - uek-rpm: Change the toolchain version in OL8 (Jack Vogel) [Orabug: 35378775] - net/rds: Allow MSG_NOSIGNAL in sendmsg (Gerd Rausch) [Orabug: 35640816] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-40982 cpe:/a:oracle:linux:8::UEKR6 Oracle Linux 8 Oracle Linux 9 gcc [el8] [8.5.0-18.0.5] - CVE-2023-4039 GCC mitigation. Orabug 35751743. Includes removal of aarch64-preserve-args.patch. - CVE-2022-40982 'Intel Downfall' mitigation. Orabug 35751810. Add two patches originally from GCC upstream releases/gcc-11 branch. with major adjustment. gcc11-downfall-disable-gather-in-vec.patch gcc11-downfall-support-mno-gather.patch Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> gcc [el9] [11.3.1-4.3.0.4] - CVE-2023-4039 GCC mitigation. Orabug 35751837. - CVE-2022-40982 'Intel Downfall' mitigation. Orabug 35751842. Add two patches originally from GCC upstream releases/gcc-11 branch. gcc11-downfall-disable-gather-in-vec.patch gcc11-downfall-support-mno-gather.patch Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> gcc-toolset-11-gcc [el8] [11.2.1-9.1.0.6] - CVE-2023-4039 GCC mitigation. Orabug 35751885. - CVE-2022-40982 'Intel Downfall' mitigation. Orabug 35751901. Add two patches originally from GCC upstream releases/gcc-11 branch. gcc11-downfall-disable-gather-in-vec.patch gcc11-downfall-support-mno-gather.patch Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> gcc-toolset-12-gcc [el8/el9] [12.2.1-7.4.0.2] - CVE-2023-4039 GCC mitigation. Orabug 35751931. - CVE-2022-40982 'Intel Downfall' mitigation. Orabug 35751938. Add two patches originally from GCC upstream releases/gcc-11 branch. gcc12-downfall-disable-gather-in-vec.patch gcc12-downfall-support-mno-gather.patch - Introduce 'oracle_release' into .spec file. Echo it to gcc/DEV-PHASE. LOW Copyright 2023 Oracle, Inc. CVE-2023-4039 CVE-2022-40982 cpe:/o:oracle:linux:8:8:baseos_patch cpe:/o:oracle:linux:9::baseos_latest cpe:/o:oracle:linux:9:2:baseos_patch cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:9::codeready_builder cpe:/o:oracle:linux:8::baseos_latest cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 7 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-3567 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7::optional_latest cpe:/a:oracle:linux:7::developer_UEKR5 cpe:/a:oracle:linux:7::UEKR5 cpe:/a:oracle:linux:7:9:patch Oracle Linux 8 Oracle Linux 9 [5.15.0-105.125.6.2.1] - rds: Fix lack of reentrancy for connection reset with dst addr zero (Haakon Bugge) [Orabug: 35713695] {CVE-2023-22024} IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-22024 cpe:/a:oracle:linux:8::UEKR7 cpe:/a:oracle:linux:9::UEKR7 cpe:/o:oracle:linux:9::baseos_latest cpe:/o:oracle:linux:9:2:baseos_patch Oracle Linux 7 [4.14.35-2047.529.3.1] - rds: Fix lack of reentrancy for connection reset with dst addr zero (Haakon Bugge) [Orabug: 35708852] {CVE-2023-22024} IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-22024 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7:9:patch cpe:/a:oracle:linux:7::UEKR5 cpe:/a:oracle:linux:7::optional_latest Oracle Linux 7 Oracle Linux 6 [4.1.12-124.78.4.1] - rds: Fix lack of reentrancy for connection reset with dst addr zero (Haakon Bugge) [Orabug: 35741584] {CVE-2023-22024} IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-22024 cpe:/a:oracle:linux:6:10:UEKR4_ELS cpe:/a:oracle:linux:7::UEKR4 Oracle Linux 8 [5.4.17-2136.323.8.1.el8] - rds: Fix lack of reentrancy for connection reset with dst addr zero (Haakon Bugge) [Orabug: 35713696] {CVE-2023-22024} IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-22024 cpe:/a:oracle:linux:8::UEKR6 Oracle Linux 7 [5.4.17-2136.323.8.1.el7] - rds: Fix lack of reentrancy for connection reset with dst addr zero (Haakon Bugge) [Orabug: 35713696] {CVE-2023-22024} IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-22024 cpe:/a:oracle:linux:7::UEKR6 Oracle Linux 7 Oracle Linux 8 [5.4.17-2136.323.8.1] - rds: Fix lack of reentrancy for connection reset with dst addr zero (Haakon Bugge) [Orabug: 35713696] {CVE-2023-22024} IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-22024 cpe:/o:oracle:linux:8::baseos_latest cpe:/a:oracle:linux:8::UEKR6 cpe:/a:oracle:linux:7::UEKR6 cpe:/o:oracle:linux:8:8:baseos_patch Oracle Linux 8 Oracle Linux 9 [5.15.0-105.125.6.2.2] - netfilter: nfnetlink_osf: avoid OOB read (Wander Lairson Costa) [Orabug: 35824297] - netfilter: nftables: exthdr: fix 4-byte stack OOB write (Florian Westphal) [Orabug: 35824297] - netfilter: xt_sctp: validate the flag_info count (Wander Lairson Costa) [Orabug: 35824297] - netfilter: xt_u32: validate user space input (Wander Lairson Costa) [Orabug: 35824297] - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Kyle Zeng) [Orabug: 35824297] {CVE-2023-42753} IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-42753 cpe:/a:oracle:linux:8::UEKR7 cpe:/a:oracle:linux:9::UEKR7 cpe:/o:oracle:linux:9::baseos_latest cpe:/o:oracle:linux:9:2:baseos_patch Oracle Linux 7 Oracle Linux 8 [5.4.17-2136.323.8.2] - netfilter: nfnetlink_osf: avoid OOB read (Wander Lairson Costa) [Orabug: 35824307] - netfilter: xt_sctp: validate the flag_info count (Wander Lairson Costa) [Orabug: 35824307] - netfilter: xt_u32: validate user space input (Wander Lairson Costa) [Orabug: 35824307] - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Kyle Zeng) [Orabug: 35824307] {CVE-2023-42753} IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-42753 cpe:/o:oracle:linux:8::baseos_latest cpe:/a:oracle:linux:8::UEKR6 cpe:/a:oracle:linux:7::UEKR6 cpe:/o:oracle:linux:8:8:baseos_patch Oracle Linux 7 [4.14.35-2047.529.3.2] - netfilter: xt_sctp: validate the flag_info count (Wander Lairson Costa) [Orabug: 35824309] - netfilter: xt_u32: validate user space input (Wander Lairson Costa) [Orabug: 35824309] - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Kyle Zeng) [Orabug: 35824309] {CVE-2023-42753} IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-42753 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7:9:patch cpe:/a:oracle:linux:7::UEKR5 cpe:/a:oracle:linux:7::optional_latest Oracle Linux 7 [15:4.2.1-28.el7] - virtio-crypto: verify src&dst buffer length for sym request (Zhenwei Pi) [Orabug: 35724113] {CVE-2023-3180} - hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35724112] {CVE-2023-0330} - kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35719844] - KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35719844] - accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35719844] - KVM: Use a big lock to replace per-kml slots_lock (Peter Xu) [Orabug: 35719844] - pcie: don't set link state active if the slot is empty (Laurent Vivier) [Orabug: 35707933] - vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35662850] {CVE-2023-3301} MODERATE Copyright 2023 Oracle, Inc. CVE-2023-3301 CVE-2023-0330 CVE-2023-3180 cpe:/a:oracle:linux:7::kvm_utils Oracle Linux 7 [15:4.2.1-28.el7] - virtio-crypto: verify src&dst buffer length for sym request (Zhenwei Pi) [Orabug: 35724113] {CVE-2023-3180} - hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35724112] {CVE-2023-0330} - kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35719844] - KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35719844] - accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35719844] - KVM: Use a big lock to replace per-kml slots_lock (Peter Xu) [Orabug: 35719844] - pcie: don't set link state active if the slot is empty (Laurent Vivier) [Orabug: 35707933] - vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35662850] {CVE-2023-3301} MODERATE Copyright 2023 Oracle, Inc. CVE-2023-0330 CVE-2023-3180 CVE-2023-3301 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7:9:patch cpe:/a:oracle:linux:7::kvm_utils cpe:/a:oracle:linux:7::optional_latest Oracle Linux 9 [5.14.0-284.30.1.el9_2] - x86/microcode/intel: Expose collect_cpu_info_early() for IFS - x86/cpu: Load microcode during restore_processor_state() - x86/microcode: Rip out the OLD_INTERFACE - x86/microcode: Default-disable late loading - x86/microcode: Taint and warn on late loading - x86/microcode: Remove unnecessary perf callback - x86/microcode: Print previous version of microcode after reload - x86/microcode: Rip out the subsys interface gunk - x86/microcode: Simplify init path even more - x86/microcode/AMD: Rename a couple of functions {CVE-2023-20593} - x86/microcode: Add a parameter to microcode_check() to store CPU capabilities {CVE-2023-20593} - x86/microcode: Check CPU capabilities after late microcode update correctly {CVE-2023-20593} - x86/microcode: Adjust late loading result reporting message {CVE-2023-20593} - x86/amd: Cache debug register values in percpu variables {CVE-2023-20593} - x86/microcode: Remove ->request_microcode_user() - x86/microcode: Kill refresh_fw - x86/microcode/amd: Remove load_microcode_amd()'s bsp parameter {CVE-2023-20593} - x86/microcode: Drop struct ucode_cpu_info.valid - x86/microcode/AMD: Add a @cpu parameter to the reloading functions {CVE-2023-20593} - x86/microcode/AMD: Track patch allocation size explicitly - x86/microcode/AMD: Fix mixed steppings support {CVE-2023-20593} - x86/microcode/core: Return an error only when necessary {CVE-2023-20593} - x86/apic: Don't disable x2APIC if locked - x86/cpu/amd: Move the errata checking functionality up {CVE-2023-20593} - x86/cpu: Remove redundant extern x86_read_arch_cap_msr() - x86/cpu, kvm: Add support for CPUID_80000021_EAX - KVM: x86: Advertise that the SMM_CTL MSR is not supported - KVM: x86: Move open-coded CPUID leaf 0x80000021 EAX bit propagation code - x86/cpu, kvm: Add the NO_NESTED_DATA_BP feature - x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3 - x86/cpu: Support AMD Automatic IBRS - x86/CPU/AMD: Make sure EFER[AIBRSE] is set - x86/cpu/amd: Add a Zenbleed fix {CVE-2023-20593} IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-20593 CVE-2023-3610 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::codeready_builder cpe:/o:oracle:linux:9::baseos_latest cpe:/o:oracle:linux:9:2:baseos_patch Oracle Linux 8 [4.18.0-477.27.1.el8_8.OL8] - x86/microcode/intel: Expose collect_cpu_info_early() for IFS - x86/cpu: Load microcode during restore_processor_state() - x86/microcode: Deprecate MICROCODE_OLD_INTERFACE - x86/microcode: Rip out the OLD_INTERFACE - x86/microcode: Default-disable late loading - x86/microcode: Taint and warn on late loading - x86/microcode: Remove unnecessary perf callback - x86/microcode: Print previous version of microcode after reload - x86/microcode: Rip out the subsys interface gunk - x86/microcode: Simplify init path even more - x86/microcode/AMD: Rename a couple of functions {CVE-2023-20593} - x86/microcode: Add a parameter to microcode_check() to store CPU capabilities {CVE-2023-20593} - x86/microcode: Check CPU capabilities after late microcode update correctly {CVE-2023-20593} - x86/microcode: Adjust late loading result reporting message {CVE-2023-20593} - x86/amd: Cache debug register values in percpu variables {CVE-2023-20593} - x86/microcode: Remove ->request_microcode_user() - x86/microcode: Kill refresh_fw - x86/microcode/amd: Remove load_microcode_amd()'s bsp parameter {CVE-2023-20593} - x86/microcode: Drop struct ucode_cpu_info.valid - x86/microcode/AMD: Add a @cpu parameter to the reloading functions {CVE-2023-20593} - x86/microcode/AMD: Track patch allocation size explicitly - x86/microcode/AMD: Fix mixed steppings support {CVE-2023-20593} - x86/microcode/core: Return an error only when necessary {CVE-2023-20593} - x86/apic: Don't disable x2APIC if locked - x86/cpu/amd: Move the errata checking functionality up {CVE-2023-20593} - x86/cpu: Remove redundant extern x86_read_arch_cap_msr() - x86/cpu, kvm: Add support for CPUID_80000021_EAX - KVM: x86: Advertise that the SMM_CTL MSR is not supported - KVM: x86: Move open-coded CPUID leaf 0x80000021 EAX bit propagation code - x86/cpu, kvm: Add the NO_NESTED_DATA_BP feature - x86/bugs: Make sure MSR_SPEC_CTRL is updated properly upon resume from S3 - x86/cpu: Support AMD Automatic IBRS - x86/CPU/AMD: Make sure EFER[AIBRSE] is set - x86/cpu/amd: Add a Zenbleed fix {CVE-2023-20593} - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE {CVE-2023-3390} IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-3390 CVE-2023-20593 cpe:/o:oracle:linux:8::baseos_latest cpe:/o:oracle:linux:8:8:baseos_patch cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 6 Oracle Linux 7 [4.1.12-124.79.2] - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (valis) [Orabug: 35814273] {CVE-2023-4206} - net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Pedro Tammela) [Orabug: 35636291] {CVE-2023-3611} - rds: Fix lack of reentrancy for connection reset with dst addr zero (Hakon Bugge) [Orabug: 35741584] [Orabug: 35818110] {CVE-2023-22024} [4.1.12-124.79.1] - xfrm: add NULL check in xfrm_update_ae_params (Lin Ma) [Orabug: 35754509] {CVE-2023-3772} - net: vmxnet3: fix possible NULL pointer dereference in vmxnet3_rq_cleanup() (Zixuan Fu) [Orabug: 35732892] {CVE-2023-4459} - net: vmxnet3: fix possible use-after-free bugs in vmxnet3_rq_alloc_rx_buf() (Zixuan Fu) [Orabug: 35732764] {CVE-2023-4387} - net/sched: cls_fw: Fix improper refcount update leads to use-after-free (M A Ramdhan) [Orabug: 35636313] {CVE-2023-3776} - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Thadeu Lima de Souza Cascardo) [Orabug: 35609787] {CVE-2023-35001} - ext4: fix use-after-free in ext4_xattr_set_entry (Baokun Li) [Orabug: 35382025] {CVE-2023-2513} - ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h (Baokun Li) [Orabug: 35382025] {CVE-2023-2513} - netfilter: nf_tables: stricter validation of element data (Pablo Neira Ayuso) [Orabug: 34362008] {CVE-2022-34918} IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-34918 CVE-2023-2513 CVE-2023-4387 CVE-2023-22024 CVE-2023-3772 CVE-2023-35001 CVE-2023-4206 CVE-2023-3611 CVE-2023-4459 CVE-2023-3776 cpe:/a:oracle:linux:6:10:UEKR4_ELS cpe:/a:oracle:linux:7::UEKR4 Oracle Linux 9 [2.34-60.0.3] - CVE-2023-4911: tunables: Terminate immediately if end of input is reached Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com> IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-4911 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::codeready_builder cpe:/o:oracle:linux:9::baseos_latest cpe:/o:oracle:linux:9:2:baseos_patch Oracle Linux 8 [2.28-225.0.4] - CVE-2023-4911: tunables: Terminate immediately if end of input is reached Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com> IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-4911 cpe:/o:oracle:linux:8::baseos_latest cpe:/a:oracle:linux:8::appstream cpe:/o:oracle:linux:8:8:baseos_patch cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 8 [2.28-225.0.4] - CVE-2023-4911: tunables: Terminate immediately if end of input is reached Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com> IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-4911 cpe:/a:oracle:linux:8::userspace_ksplice Oracle Linux 9 [2.34-60.0.3] - CVE-2023-4911: tunables: Terminate immediately if end of input is reached Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com> IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-4911 cpe:/a:oracle:linux:9::userspace_ksplice Oracle Linux 8 hivex libguestfs libguestfs-winsupport libiscsi libnbd libtpms libvirt [9.0.0-3.el8] - storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (Peter Krempa) [Orabug: 35644221] {CVE-2023-3750} - virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700} - qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (Peter Krempa) [Orabug: 35636469] libvirt-dbus libvirt-python [9.0.0-3.el8] - Update to libvirt 9.0.0-3 (Karl Heubaum) nbdkit netcf perl-Sys-Virt qemu-kvm [7.2.0-5.el8] - virtio-crypto: verify src&dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180} - io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrange) [Orabug: 35683826] {CVE-2023-3354} - ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255} - hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330} - vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301} - qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda) seabios sgabios supermin swtpm virt-v2v IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-3301 CVE-2023-3255 CVE-2023-2700 CVE-2023-3354 CVE-2023-3750 CVE-2023-0330 CVE-2023-3180 cpe:/a:oracle:linux:8::kvm_appstream Oracle Linux 8 Oracle Linux 9 [5.15.0-106.131.4] - jbd2: check 'jh->b_transaction' before removing it from checkpoint (Zhihao Cheng) - jbd2: fix checkpoint cleanup performance regression (Zhang Yi) - scsi: qla2xxx: Fix TMF leak through (Quinn Tran) - scsi: qla2xxx: Fix command flush during TMF (Quinn Tran) - scsi: qla2xxx: Limit TMF to 8 per function (Quinn Tran) - Revert 'drm/amdgpu: install stub fence into potential unused fence pointers' (Greg Kroah-Hartman) - dlm: fix plock lookup when using multiple lockspaces (Alexander Aring) - Revert 'scsi: qla2xxx: Fix buffer overrun' (Nilesh Javali) - media: dvb: symbol fixup for dvb_attach() (Greg Kroah-Hartman) - PCI: rockchip: Use 64-bit mask on MSI 64-bit PCI address (Rick Wertenbroek) - x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Dave Hansen) - clk: qcom: reset: Use the correct type of sleep/delay based on length (Konrad Dybcio) - ALSA: ac97: Fix possible error value of *rac97 (Su Hui) - md/raid0: Fix performance regression for large sequential writes (Jan Kara) - md/raid0: Factor out helper for mapping and submitting a bio (Jan Kara) - md: add error_handlers for raid0 and linear (Mariusz Tkaczyk) - md: Set MD_BROKEN for RAID1 and RAID10 (Mariusz Tkaczyk) - LTS version: v5.15.131 (Jack Vogel) - usb: typec: tcpci: clear the fault status bit (Marco Felsch) - usb: typec: tcpci: move tcpci.h to include/linux/usb/ (Xin Ji) - pinctrl: amd: Don't show Invalid config param errors (Mario Limonciello) - nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse (Ryusuke Konishi) - nilfs2: fix general protection fault in nilfs_lookup_dirty_data_buffers() (Ryusuke Konishi) - tcpm: Avoid soft reset when partner does not support get_status (Badhri Jagan Sridharan) - fsi: master-ast-cf: Add MODULE_FIRMWARE macro (Juerg Haefliger) - firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe (Wang Ming) - serial: sc16is7xx: fix bug when first setting GPIO direction (Hugo Villeneuve) - serial: sc16is7xx: fix broken port 0 uart init (Hugo Villeneuve) - serial: qcom-geni: fix opp vote on shutdown (Johan Hovold) - wifi: mt76: mt7921: do not support one stream on secondary antenna only (Deren Wu) - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition (Zheng Wang) - staging: rtl8712: fix race condition (Nam Cao) - HID: wacom: remove the battery when the EKR is off (Aaron Armstrong Skomra) - usb: chipidea: imx: improve logic if samsung,picophy-* parameter is 0 (Xu Yang) - usb: dwc3: meson-g12a: do post init to fix broken usb after resumption (Luke Lu) - ALSA: usb-audio: Fix init call orders for UAC1 (Takashi Iwai) - USB: serial: option: add FOXCONN T99W368/T99W373 product (Slark Xiao) - USB: serial: option: add Quectel EM05G variant (0x030e) (Martin Kohn) - modules: only allow symbol_get of EXPORT_SYMBOL_GPL modules (Christoph Hellwig) - rtc: ds1685: use EXPORT_SYMBOL_GPL for ds1685_rtc_poweroff (Christoph Hellwig) - net: enetc: use EXPORT_SYMBOL_GPL for enetc_phc_index (Christoph Hellwig) - mmc: au1xmmc: force non-modular build and remove symbol_get usage (Christoph Hellwig) - ARM: pxa: remove use of symbol_get() (Arnd Bergmann) - ksmbd: replace one-element array with flex-array member in struct smb2_ea_info (Namjae Jeon) - ksmbd: fix wrong DataOffset validation of create context (Namjae Jeon) - erofs: ensure that the post-EOF tails are all zeroed (Gao Xiang) - netfilter: nfnetlink_osf: avoid OOB read (Wander Lairson Costa) [Orabug: 35824286] - netfilter: nftables: exthdr: fix 4-byte stack OOB write (Florian Westphal) [Orabug: 35824286] - netfilter: xt_sctp: validate the flag_info count (Wander Lairson Costa) [Orabug: 35824286] - netfilter: xt_u32: validate user space input (Wander Lairson Costa) [Orabug: 35824286] - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Kyle Zeng) [Orabug: 35824286] {CVE-2023-42753} - rds: Fix lack of reentrancy for connection reset with dst addr zero (Hakon Bugge) [Orabug: 35655833] {CVE-2023-22024} - attr: use consistent sgid stripping checks (Christian Brauner) [Orabug: 35520042] - Revert 'perf build-ids: Fall back to debuginfod query if debuginfo not found' (Samasth Norway Ananda) [Orabug: 35617848] - KEYS: use kfree_sensitive with key (Saeed Mirzamohammadi) [Orabug: 35746757] - kernfs: fix missing kernfs_iattr_rwsem locking (Ian Kent) [Orabug: 35796770] - scsi: megaraid_sas: Fix deadlock on firmware crashdump (Junxiao Bi) [Orabug: 35819592] [5.15.0-106.130.3] - KVM: arm64: Skip instruction after emulating write to TCR_EL1 (Oliver Upton) [Orabug: 35677037] - uek-rpm: aarch64: enable ACPI_AGDI (Mihai Carabas) [Orabug: 35761254] - arm64: sdei: abort running SDEI handlers during crash (D Scott Phillips) [Orabug: 35761254] - ACPI: AGDI: Fix missing prototype warning for acpi_agdi_init() (Ilkka Koskinen) [Orabug: 35761254] - ACPI: AGDI: Add driver for Arm Generic Diagnostic Dump and Reset device (Ilkka Koskinen) [Orabug: 35761254] - ACPI: tables: Add AGDI to the list of known table signatures (Ilkka Koskinen) [Orabug: 35761254] - ACPICA: iASL: Add suppport for AGDI table (Ilkka Koskinen) [Orabug: 35761254] - net/rds: Avoid unpin_user_pages_dirty_lock() in tasklets (Gerd Rausch) [Orabug: 35765163] - x86/CPU/AMD: Fix the DIV(0) initial fix attempt (Borislav Petkov (AMD)) [Orabug: 35776935] {CVE-2023-20588} - x86/CPU/AMD: Do not leak quotient data after a division by 0 (Borislav Petkov (AMD)) [Orabug: 35776935] {CVE-2023-20588} - x86: change default to spec_store_bypass_disable=prctl spectre_v2_user=prctl (Andrea Arcangeli) [Orabug: 35778852] [5.15.0-106.130.2] - LTS version: v5.15.130 (Jack Vogel) - rcu-tasks: Add trc_inspect_reader() checks for exiting critical section (Paul E. McKenney) - rcu-tasks: Wait for trc_read_check_handler() IPIs (Paul E. McKenney) - rcu-tasks: Fix IPI failure handling in trc_wait_for_one_reader (Neeraj Upadhyay) - rcu: Prevent expedited GP from enabling tick on offline CPU (Paul E. McKenney) - ARM: module: Use module_init_layout_section() to spot init sections (James Morse) - arm64: module: Use module_init_layout_section() to spot init sections (James Morse) - arm64: module-plts: inline linux/moduleloader.h (Arnd Bergmann) - module: Expose module_init_layout_section() (James Morse) - ACPI: thermal: Drop nocrt parameter (Mario Limonciello) - LTS version: v5.15.129 (Jack Vogel) - mm,ima,kexec,of: use memblock_free_late from ima_free_kexec_buffer (Rik van Riel) - mm: memory-failure: fix unexpected return value in soft_offline_page() (Miaohe Lin) - mm: memory-failure: kill soft_offline_free_page() (Kefeng Wang) - dma-buf/sw_sync: Avoid recursive lock during fence signal (Rob Clark) - pinctrl: renesas: rza2: Add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} (Biju Das) - clk: Fix undefined reference to clk_rate_exclusive_{get,put}' (Biju Das) - scsi: core: raid_class: Remove raid_component_add() (Zhu Wang) - scsi: snic: Fix double free in snic_tgt_create() (Zhu Wang) - can: raw: add missing refcount for memory leak fix (Oliver Hartkopp) - drm/i915: Fix premature release of request's reusable memory (Janusz Krzysztofik) - cgroup/cpuset: Free DL BW in case can_attach() fails (Dietmar Eggemann) - sched/deadline: Create DL BW alloc, free & check overflow interface (Dietmar Eggemann) - cgroup/cpuset: Iterate only if DEADLINE tasks are present (Juri Lelli) - sched/cpuset: Keep track of SCHED_DEADLINE task in cpusets (Juri Lelli) - sched/cpuset: Bring back cpuset_mutex (Juri Lelli) - cgroup/cpuset: Rename functions dealing with DEADLINE accounting (Juri Lelli) - torture: Fix hang during kthread shutdown phase (Joel Fernandes (Google)) - nfsd: use vfs setgid helper (Christian Brauner) - nfs: use vfs setgid helper (Christian Brauner) - x86/fpu: Set X86_FEATURE_OSXSAVE feature after enabling OSXSAVE in CR4 (Feng Tang) - x86/fpu: Invalidate FPU state correctly on exec() (Rick Edgecombe) - drm/display/dp: Fix the DP DSC Receiver cap size (Ankit Nautiyal) - drm/vmwgfx: Fix shader stage validation (Zack Rusin) - PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus (Igor Mammedov) - media: vcodec: Fix potential array out-of-bounds in encoder queue_setup (Wei Chen) - of: dynamic: Refactor action prints to not use '%pOF' inside devtree_lock (Rob Herring) - of: unittest: Fix EXPECT for parse_phandle_with_args_map() test (Rob Herring) - radix tree: remove unused variable (Arnd Bergmann) - lib/clz_ctz.c: Fix __clzdi2() and __ctzdi2() for 32-bit kernels (Helge Deller) - batman-adv: Hold rtnl lock during MTU update via netlink (Sven Eckelmann) - batman-adv: Fix batadv_v_ogm_aggr_send memory leak (Remi Pommarel) - batman-adv: Fix TT global entry leak when client roamed back (Remi Pommarel) - batman-adv: Do not get eth header before batadv_check_management_packet (Remi Pommarel) - batman-adv: Don't increase MTU when set by user (Sven Eckelmann) - batman-adv: Trigger events for auto adjusted MTU (Sven Eckelmann) - selinux: set next pointer before attaching to list (Christian Gottsche) - nfsd: Fix race to FREE_STATEID and cl_revoked (Benjamin Coddington) - NFS: Fix a use after free in nfs_direct_join_group() (Trond Myklebust) - mm: add a call to flush_cache_vmap() in vmap_pfn() (Alexandre Ghiti) - ALSA: ymfpci: Fix the missing snd_card_free() call at probe error (Takashi Iwai) - clk: Fix slab-out-of-bounds error in devm_clk_release() (Andrey Skvortsov) - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) - ibmveth: Use dcbf rather than dcbfl (Michael Ellerman) - Revert 'KVM: x86: enable TDP MMU by default' (Sean Christopherson) - net/ncsi: change from ndo_set_mac_address to dev_set_mac_address (Ivan Mikhaylov) - net/ncsi: make one oem_gma function for all mfr id (Ivan Mikhaylov) - bonding: fix macvlan over alb bond support (Hangbin Liu) - net: remove bond_slave_has_mac_rcu() (Jakub Kicinski) - rtnetlink: Reject negative ifindexes in RTM_NEWLINK (Ido Schimmel) - rtnetlink: return ENODEV when ifname does not exist and group is given (Florent Fourcot) - netfilter: nf_tables: fix out of memory error handling (Florian Westphal) - netfilter: nf_tables: flush pending destroy work before netlink notifier (Pablo Neira Ayuso) - net/sched: fix a qdisc modification with ambiguous command request (Jamal Hadi Salim) - igc: Fix the typo in the PTM Control macro (Sasha Neftin) - igb: Avoid starting unnecessary workqueues (Alessio Igor Bogani) - ice: fix receive buffer size miscalculation (Jesse Brandeburg) - net: validate veth and vxcan peer ifindexes (Jakub Kicinski) - net: bcmgenet: Fix return value check for fixed_phy_register() (Ruan Jinjie) - net: bgmac: Fix return value check for fixed_phy_register() (Ruan Jinjie) - ipvlan: Fix a reference count leak warning in ipvlan_ns_exit() (Lu Wei) - dccp: annotate data-races in dccp_poll() (Eric Dumazet) - sock: annotate data-races around prot->memory_pressure (Eric Dumazet) - octeontx2-af: SDP: fix receive link config (Hariprasad Kelam) - tracing: Fix memleak due to race between current_tracer and trace (Zheng Yejian) - tracing: Fix cpu buffers unavailable due to 'record_disabled' missed (Zheng Yejian) - can: raw: fix lockdep issue in raw_release() (Eric Dumazet) - drm/amd/display: check TG is non-null before checking if enabled (Taimur Hassan) - drm/amd/display: do not wait for mpc idle if tg is disabled (Josip Pavic) - can: raw: fix receiver memory leak (Ziyang Xuan) - jbd2: fix a race when checking checkpoint buffer busy (Zhang Yi) - jbd2: remove journal_clean_one_cp_list() (Zhang Yi) - jbd2: remove t_checkpoint_io_list (Zhang Yi) - ALSA: pcm: Fix potential data race at PCM memory allocation helpers (Takashi Iwai) - fbdev: fix potential OOB read in fast_imageblit() (Zhang Shurong) - fbdev: Fix sys_imageblit() for arbitrary image widths (Thomas Zimmermann) - fbdev: Improve performance of sys_imageblit() (Thomas Zimmermann) - MIPS: cpu-features: Use boot_cpu_type for CPU type based features (Jiaxun Yang) - MIPS: cpu-features: Enable octeon_cache by cpu_type (Jiaxun Yang) - fs: dlm: fix mismatch of plock results from userspace (Alexander Aring) - fs: dlm: use dlm_plock_info for do_unlock_close (Alexander Aring) - fs: dlm: change plock interrupted message to debug again (Alexander Aring) - fs: dlm: add pid to debug log (Alexander Aring) - dlm: replace usage of found with dedicated list iterator variable (Jakob Koschel) - dlm: improve plock logging if interrupted (Alexander Aring) - PCI: acpiphp: Reassign resources on bridge if necessary (Igor Mammedov) - xprtrdma: Remap Receive buffers after a reconnect (Chuck Lever) - NFSv4: fix out path in __nfs4_get_acl_uncached (Fedor Pchelkin) - NFSv4.2: fix error handling in nfs42_proc_getxattr (Fedor Pchelkin) - objtool/x86: Fix SRSO mess (Peter Zijlstra) - LTS version: v5.15.128 (Jack Vogel) - x86/srso: Correct the mitigation status when SMT is disabled (Borislav Petkov (AMD)) - objtool/x86: Fixup frame-pointer vs rethunk (Peter Zijlstra) - x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (Petr Pavlu) - x86/srso: Disable the mitigation on unaffected configurations (Borislav Petkov (AMD)) - x86/retpoline: Don't clobber RFLAGS during srso_safe_ret() (Sean Christopherson) - x86/static_call: Fix __static_call_fixup() (Peter Zijlstra) - x86/srso: Explain the untraining sequences a bit more (Borislav Petkov (AMD)) - x86/cpu: Cleanup the untrain mess (Peter Zijlstra) - x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (Peter Zijlstra) - x86/cpu: Rename original retbleed methods (Peter Zijlstra) - x86/cpu: Clean up SRSO return thunk mess (Peter Zijlstra) - x86/ibt: Add ANNOTATE_NOENDBR (Peter Zijlstra) - objtool: Add frame-pointer-specific function ignore (Josh Poimboeuf) - x86/alternative: Make custom return thunk unconditional (Peter Zijlstra) - x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (Peter Zijlstra) - x86/cpu: Fix __x86_return_thunk symbol type (Peter Zijlstra) - mmc: f-sdh30: fix order of function calls in sdhci_f_sdh30_remove (Yangtao Li) - net: fix the RTO timer retransmitting skb every 1ms if linear option is enabled (Jason Xing) - virtio-net: set queues after driver_ok (Jason Wang) - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Kuniyuki Iwashima) - arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4 (Christopher Obbard) - exfat: check if filename entries exceeds max filename length (Namjae Jeon) - netfilter: set default timeout to 3 secs for sctp shutdown send and recv state (Xin Long) - drm/amd: flush any delayed gfxoff on suspend entry (Mario Limonciello) - drm/qxl: fix UAF on handle creation (Wander Lairson Costa) - mmc: block: Fix in_flight[issue_type] value error (Yibin Ding) - mmc: wbsd: fix double mmc_free_host() in wbsd_init() (Yang Yingliang) - cifs: Release folio lock on fscache read hit. (Russell Harmon via samba-technical) - ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces. (dengxiang) - serial: 8250: Fix oops for port->pm on uart_change_pm() (Tony Lindgren) - riscv: uaccess: Return the number of bytes effectively not copied (Alexandre Ghiti) - ALSA: hda/realtek - Remodified 3k pull low procedure (Kailang Yang) - soc: aspeed: socinfo: Add kfree for kstrdup (Jiasheng Jiang) - ASoC: meson: axg-tdm-formatter: fix channel slot allocation (Jerome Brunet) - ASoC: rt5665: add missed regulator_bulk_disable (Zhang Shurong) - ARM: dts: imx: Set default tuning step for imx6sx usdhc (Xiaolei Wang) - arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict (Dmitry Baryshkov) - bus: ti-sysc: Flush posted write on enable before reset (Tony Lindgren) - net: do not allow gso_size to be set to GSO_BY_FRAGS (Eric Dumazet) - sock: Fix misuse of sk_under_memory_pressure() (Abel Wu) - net: dsa: mv88e6xxx: Wait for EEPROM done before HW reset (Alfred Lee) - i40e: fix misleading debug logs (Andrii Staikov) - iavf: fix FDIR rule fields masks validation (Piotr Gardocki) - team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves (Ziyang Xuan) - net: phy: broadcom: stub c45 read/write for 54810 (Justin Chen) - netfilter: nft_dynset: disallow object maps (Pablo Neira Ayuso) - ipvs: fix racy memcpy in proc_do_sync_threshold (Sishuai Gong) - netfilter: nf_tables: deactivate catchall elements in next generation (Florian Westphal) - netfilter: nf_tables: fix false-positive lockdep splat (Florian Westphal) - drm/panel: simple: Fix AUO G121EAN01 panel timings according to the docs (Luca Ceresoli) - selftests: mirror_gre_changes: Tighten up the TTL test match (Petr Machata) - net: phy: fix IRQ-based wake-on-lan over hibernate / power off (Russell King (Oracle)) - xfrm: add forgotten nla_policy for XFRMA_MTIMER_THRESH (Lin Ma) - xfrm: add NULL check in xfrm_update_ae_params (Lin Ma) - ip_vti: fix potential slab-use-after-free in decode_session6 (Zhengchao Shao) - ip6_vti: fix slab-use-after-free in decode_session6 (Zhengchao Shao) - xfrm: fix slab-use-after-free in decode_session6 (Zhengchao Shao) - net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure (Lin Ma) - net: af_key: fix sadb_x_filter validation (Lin Ma) - net: xfrm: Fix xfrm_address_filter OOB read (Lin Ma) - i2c: designware: Handle invalid SMBus block data response length value (Tam Nguyen) - i2c: designware: Correct length byte validation logic (Quan Nguyen) - btrfs: fix BUG_ON condition in btrfs_cancel_balance (xiaoshoukui) - tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32 platforms (Sherry Sun) - tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux (Yi Yang) - powerpc/rtas_flash: allow user copy to flash block cache objects (Nathan Lynch) - fbdev: mmp: fix value check in mmphw_probe() (Yuanjun Gong) - i2c: hisi: Only handle the interrupt of the driver's transfer (Yicong Yang) - i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue (Chengfeng Ye) - cifs: fix potential oops in cifs_oplock_break (Steve French) - vduse: Use proper spinlock for IRQ injection (Maxime Coquelin) - virtio-mmio: don't break lifecycle of vm_dev (Wolfram Sang) - btrfs: move out now unused BG from the reclaim list (Naohiro Aota) - ARM: dts: nxp/imx6sll: fix wrong property name in usbphy node (Xu Yang) - ARM: dts: imx6sll: fixup of operating points (Andreas Kemnade) - mmc: sunxi: fix deferred probing (Sergey Shtylyov) - mmc: bcm2835: fix deferred probing (Sergey Shtylyov) - USB: dwc3: fix use-after-free on core driver unbind (Johan Hovold) - USB: dwc3: qcom: fix NULL-deref on suspend (Johan Hovold) - tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A (Robert Hodaszi) - tty: serial: fsl_lpuart: make rx_watermark configurable for different platforms (Sherry Sun) - tty: serial: fsl_lpuart: Add i.MXRT1050 support (Jesse Taube) - usb: dwc3: gadget: Improve dwc3_gadget_suspend() and dwc3_gadget_resume() (Roger Quadros) - USB: dwc3: gadget: drop dead hibernation code (Johan Hovold) - usb: dwc3: Fix typos in gadget.c (Kushagra Verma) - usb: dwc3: Remove DWC3 locking during gadget suspend/resume (Wesley Cheng) - usb: dwc3: gadget: Synchronize IRQ between soft connect/disconnect (Wesley Cheng) - drm/amd/display: fix access hdcp_workqueue assert (Hersen Wu) - drm/amd/display: phase3 mst hdcp for multiple displays (hersen wu) - drm/amd/display: save restore hdcp state when display is unplugged from mst hub (hersen wu) - ARM: dts: aspeed: asrock: Correct firmware flash SPI clocks (Zev Weiss) - igc: read before write to SRRCTL register (Song Yoong Siang) - iio: addac: stx104: Fix race condition when converting analog-to-digital (William Breathitt Gray) - iio: addac: stx104: Fix race condition for stx104_write_raw() (William Breathitt Gray) - iio: stx104: Move to addac subdirectory (William Breathitt Gray) - iio: adc: stx104: Implement and utilize register structures (William Breathitt Gray) - iio: adc: stx104: Utilize iomap interface (William Breathitt Gray) - iio: add addac subdirectory (Cosmin Tanislav) - ring-buffer: Do not swap cpu_buffer during resize process (Chen Lin) - powerpc/kasan: Disable KCOV in KASAN code (Benjamin Gray) - ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() (Tuo Li) - ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 & Q760 (dengxiang) - fs/ntfs3: Mark ntfs dirty when on-disk struct is corrupted (Konstantin Komarov) - fs: ntfs3: Fix possible null-pointer dereferences in mi_read() (Jia-Ju Bai) - fs/ntfs3: Enhance sanity check while generating attr_list (Edward Lo) - drm/amdgpu: Fix potential fence use-after-free v2 (shanzhulig) - Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally (Matthew Anderson) - Bluetooth: L2CAP: Fix use-after-free (Zhengping Jiang) - watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller Hub) (Yuechao Zhao) - firewire: net: fix use after free in fwnet_finish_incoming_packet() (Zhang Shurong) - pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db() (Armin Wolf) - gfs2: Fix possible data races in gfs2_show_options() (Tuo Li) - usb: chipidea: imx: add missing USB PHY DPDM wakeup setting (Xu Yang) - usb: chipidea: imx: don't request QoS for imx8ulp (Xu Yang) - thunderbolt: Read retimer NVM authentication status prior tb_retimer_set_inbound_sbtx() (Mika Westerberg) - media: platform: mediatek: vpu: fix NULL ptr dereference (Hans Verkuil) - usb: gadget: u_serial: Avoid spinlock recursion in __gs_console_push (Prashanth K) - media: v4l2-mem2mem: add lock to protect parameter num_rdy (Yunfei Dong) - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara) - ovl: check type and offset of struct vfsmount in ovl_entry (Christian Brauner) - RDMA/mlx5: Return the firmware result upon destroying QP/RQ (Patrisious Haddad) - HID: add quirk for 03f0:464a HP Elite Presenter Mouse (Marco Morandini) - drm/amdgpu: install stub fence into potential unused fence pointers (Lang Yu) - HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech G915 TKL Keyboard (stuarthayhurst) - dma-remap: use kvmalloc_array/kvfree for larger dma memory remap (gaoxu) - ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion (Pierre-Louis Bossart) - iopoll: Call cpu_relax() in busy loops (Geert Uytterhoeven) - ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB related warnings (Oleksij Rempel) - PCI: tegra194: Fix possible array out of bounds access (Sumit Gupta) - net: tls: avoid discarding data on record close (Jakub Kicinski) - net/tls: Multi-threaded calls to TX tls_dev_del (Tariq Toukan) - net/tls: Perform immediate device ctx cleanup when possible (Tariq Toukan) - macsec: use DEV_STATS_INC() (Eric Dumazet) - macsec: Fix traffic counters/statistics (Clayton Yager) - selftests: forwarding: tc_actions: Use ncat instead of nc (Ido Schimmel) - selftests: forwarding: tc_actions: cleanup temporary files when test is aborted (Davide Caratti) - mmc: sdhci-f-sdh30: Replace with sdhci_pltfm (Kunihiko Hayashi) - LTS version: v5.15.127 (Jack Vogel) - timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Frederic Weisbecker) - timers/nohz: Switch to ONESHOT_STOPPED in the low-res handler when the tick is stopped (Nicholas Piggin) - tick: Detect and fix jiffies update stall (Frederic Weisbecker) - sch_netem: fix issues in netem_change() vs get_dist_table() (Eric Dumazet) - alpha: remove __init annotation from exported page_is_ram() (Masahiro Yamada) - scsi: qedf: Fix firmware halt over suspend and resume (Nilesh Javali) - scsi: qedi: Fix firmware halt over suspend and resume (Nilesh Javali) - scsi: fnic: Replace return codes in fnic_clean_pending_aborts() (Karan Tilak Kumar) - scsi: core: Fix possible memory leak if device_add() fails (Zhu Wang) - scsi: snic: Fix possible memory leak if device_add() fails (Zhu Wang) - scsi: 53c700: Check that command slot is not NULL (Alexandra Diupina) - scsi: storvsc: Fix handling of virtual Fibre Channel timeouts (Michael Kelley) - scsi: core: Fix legacy /proc parsing buffer overflow (Tony Battersby) - netfilter: nf_tables: report use refcount overflow (Pablo Neira Ayuso) - nvme-rdma: fix potential unbalanced freeze & unfreeze (Ming Lei) - nvme-tcp: fix potential unbalanced freeze & unfreeze (Ming Lei) - btrfs: set cache_block_group_error if we find an error (Josef Bacik) - btrfs: reject invalid reloc tree root keys with stack dump (Qu Wenruo) - btrfs: exit gracefully if reloc roots don't match (Qu Wenruo) - btrfs: don't stop integrity writeback too early (Christoph Hellwig) - ibmvnic: Handle DMA unmapping of login buffs in release functions (Nick Child) - ibmvnic: Unmap DMA login rsp buffer on send login fail (Nick Child) - ibmvnic: Enforce stronger sanity checks on login response (Nick Child) - net/mlx5: Skip clock update work when device is in error state (Moshe Shemesh) - net/mlx5: Allow 0 for total host VFs (Daniel Jurgens) - dmaengine: mcf-edma: Fix a potential un-allocated memory access (Christophe JAILLET) - nexthop: Fix infinite nexthop bucket dump when using maximum nexthop ID (Ido Schimmel) - nexthop: Make nexthop bucket dump more efficient (Ido Schimmel) - nexthop: Fix infinite nexthop dump when using maximum nexthop ID (Ido Schimmel) - net: hns3: add wait until mac link down (Jie Wang) - net: hns3: refactor hclge_mac_link_status_wait for interface reuse (Jie Wang) - net: phy: at803x: remove set/get wol callbacks for AR8032 (Li Yang) - RDMA/umem: Set iova in ODP flow (Michael Guralnik) - wifi: cfg80211: fix sband iftype data lookup for AP_VLAN (Felix Fietkau) - drm/rockchip: Don't spam logs in atomic check (Daniel Stone) - IB/hfi1: Fix possible panic during hotplug remove (Douglas Miller) - iavf: fix potential races for FDIR filters (Piotr Gardocki) - drivers: net: prevent tun_build_skb() to exceed the packet size limit (Andrew Kanner) - dccp: fix data-race around dp->dccps_mss_cache (Eric Dumazet) - bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves (Ziyang Xuan) - xsk: fix refcount underflow in error path (Magnus Karlsson) - tunnels: fix kasan splat when generating ipv4 pmtu error (Florian Westphal) - net/packet: annotate data-races around tp->status (Eric Dumazet) - mISDN: Update parameter type of dsp_cmx_send() (Nathan Chancellor) - bpf, sockmap: Fix bug that strp_done cannot be called (Xu Kuohai) - bpf, sockmap: Fix map type error in sock_map_del_link (Xu Kuohai) - net: core: remove unnecessary frame_sz check in bpf_xdp_adjust_tail() (Andrew Kanner) - selftests: forwarding: tc_flower: Relax success criterion (Ido Schimmel) - selftests: forwarding: Switch off timeout (Ido Schimmel) - selftests: forwarding: Skip test when no interfaces are specified (Ido Schimmel) - selftests: forwarding: ethtool_extended_state: Skip when using veth pairs (Ido Schimmel) - selftests: forwarding: ethtool: Skip when using veth pairs (Ido Schimmel) - selftests: forwarding: Add a helper to skip test when using veth pairs (Ido Schimmel) - selftests/rseq: Fix build with undefined __weak (Mark Brown) - drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes (Karol Herbst) - x86: Move gds_ucode_mitigated() declaration to header (Arnd Bergmann) - x86/speculation: Add cpu_show_gds() prototype (Arnd Bergmann) - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Kirill A. Shutemov) - x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 (Cristian Ciocaltea) - x86/srso: Fix build breakage with the LLVM linker (Nick Desaulniers) - usb: typec: tcpm: Fix response to vsafe0V event (Badhri Jagan Sridharan) - usb: common: usb-conn-gpio: Prevent bailing out if initial role is none (Prashanth K) - usb: dwc3: Properly handle processing of pending events (Elson Roy Serrao) - usb-storage: alauda: Fix uninit-value in alauda_check_media() (Alan Stern) - misc: rtsx: judge ASPM Mode to set PETXCFG Reg (Ricky WU) - binder: fix memory leak in binder_init() (Qi Zheng) - iio: adc: ina2xx: avoid NULL pointer dereference on OF device match (Alvin Sipraga) - iio: cros_ec: Fix the allocation size for cros_ec_command (Yiyuan Guo) - io_uring: correct check for O_TMPFILE (Aleksa Sarai) - selftests/bpf: Fix sk_assign on s390x (Ilya Leoshkevich) - selftests/bpf: Workaround verification failure for fexit_bpf2bpf/func_replace_return_code (Yonghong Song) - selftests/bpf: make test_align selftest more robust (Andrii Nakryiko) - bpf: aggressively forget precise markings during state checkpointing (Andrii Nakryiko) - bpf: stop setting precise in current state (Andrii Nakryiko) - bpf: allow precision tracking for programs with subprogs (Andrii Nakryiko) - nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (Ryusuke Konishi) - radix tree test suite: fix incorrect allocation size for pthreads (Colin Ian King) - hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for pfe1100 (Tao Ren) - drm/amd/display: check attr flag before set cursor degamma on DCN3+ (Melissa Wen) - drm/shmem-helper: Reset vma->vm_ops before calling dma_buf_mmap() (Boris Brezillon) - drm/nouveau/gr: enable memory loads on helper invocation on all channels (Karol Herbst) - riscv,mmio: Fix readX()-to-delay() ordering (Andrea Parri) - dmaengine: pl330: Return DMA_PAUSED when transaction is paused (Ilpo Jarvinen) - ipv6: adjust ndisc_is_useropt() to also return true for PIO (Maciej Zenczykowski) - mmc: moxart: read scr register without changing byte order (Sergei Antonov) - wireguard: allowedips: expand maximum node depth (Jason A. Donenfeld) - ksmbd: fix wrong next length validation of ea buffer in smb2_set_ea() (Namjae Jeon) - ksmbd: validate command request size (Long Li) - LTS version v5.15.126 (Jack Vogel) - PM: sleep: wakeirq: fix wake irq arming (Johan Hovold) - PM / wakeirq: support enabling wake-up irq after runtime_suspend called (Chunfeng Yun) - soundwire: fix enumeration completion (Johan Hovold) - soundwire: bus: pm_runtime_request_resume on peripheral attachment (Pierre-Louis Bossart) - selftests/rseq: Play nice with binaries statically linked against glibc 2.35+ (Sean Christopherson) - selftests/rseq: check if libc rseq support is registered (Michael Jeanson) - drm/imx/ipuv3: Fix front porch adjustment upon hactive aligning (Alexander Stein) - powerpc/mm/altmap: Fix altmap boundary check (Aneesh Kumar K.V) - mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op() (Christophe JAILLET) - mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts (Johan Jonker) - mtd: rawnand: rockchip: fix oobfree offset and description (Johan Jonker) - mtd: rawnand: omap_elm: Fix incorrect type in assignment (Roger Quadros) - ext2: Drop fragment support (Jan Kara) - fs: Protect reconfiguration of sb read-write from racing writes (Jan Kara) - net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb (Alan Stern) - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (Sungwoo Kim) - fs/sysv: Null check to prevent null-ptr-deref bug (Prince Kumar Maurya) - fs/ntfs3: Use __GFP_NOWARN allocation at ntfs_load_attr_list() (Tetsuo Handa) - file: reinstate f_pos locking optimization for regular files (Linus Torvalds) - bpf, cpumap: Make sure kthread is running before map update returns (Hou Tao) - drm/ttm: check null pointer before accessing when swapping (Guchun Chen) - open: make RESOLVE_CACHED correctly test for O_TMPFILE (Aleksa Sarai) - bpf: Disable preemption in bpf_event_output (Jiri Olsa) - rbd: prevent busy loop when requesting exclusive lock (Ilya Dryomov) - wifi: mt76: mt7615: do not advertise 5 GHz on first phy of MT7615D (DBDC) (Paul Fertser) - net: tap_open(): set sk_uid from current_fsuid() (Laszlo Ersek) - net: tun_chr_open(): set sk_uid from current_fsuid() (Laszlo Ersek) - arm64: dts: stratix10: fix incorrect I2C property for SCL signal (Dinh Nguyen) - mtd: rawnand: meson: fix OOB available bytes for ECC (Arseniy Krasnov) - mtd: spinand: toshiba: Fix ecc_get_status (Olivier Maignial) - exfat: release s_lock before calling dir_emit() (Sungjong Seo) - exfat: use kvmalloc_array/kvfree instead of kmalloc_array/kfree (gaoming) - firmware: arm_scmi: Drop OF node reference in the transport channel setup (Krzysztof Kozlowski) - ceph: defer stopping mdsc delayed_work (Xiubo Li) - USB: zaurus: Add ID for A-300/B-500/C-700 (Ross Maynard) - libceph: fix potential hang in ceph_osdc_notify() (Ilya Dryomov) - scsi: storvsc: Limit max_sectors for virtual Fibre Channel devices (Michael Kelley) - scsi: zfcp: Defer fc_rport blocking until after ADISC response (Steffen Maier) - tcp_metrics: fix data-race in tcpm_suck_dst() vs fastopen (Eric Dumazet) - tcp_metrics: annotate data-races around tm->tcpm_net (Eric Dumazet) - tcp_metrics: annotate data-races around tm->tcpm_vals[] (Eric Dumazet) - tcp_metrics: annotate data-races around tm->tcpm_lock (Eric Dumazet) - tcp_metrics: annotate data-races around tm->tcpm_stamp (Eric Dumazet) - tcp_metrics: fix addr_same() helper (Eric Dumazet) - prestera: fix fallback to previous version on same major version (Jonas Gorski) - net/mlx5: fs_core: Skip the FTs in the same FS_TYPE_PRIO_CHAINS fs_prio (Jianbo Liu) - net/mlx5: fs_core: Make find_closest_ft more generic (Jianbo Liu) - vxlan: Fix nexthop hash size (Benjamin Poirier) - ip6mr: Fix skb_under_panic in ip6mr_cache_report() (Yue Haibing) - s390/qeth: Don't call dev_close/dev_open (DOWN/UP) (Alexandra Winter) - net: dcb: choose correct policy to parse DCB_ATTR_BCN (Lin Ma) - net: netsec: Ignore 'phy-mode' on SynQuacer in DT mode (Mark Brown) - net: korina: handle clk prepare error in korina_probe() (Yuanjun Gong) - net: ll_temac: fix error checking of irq_of_parse_and_map() (Dan Carpenter) - net: ll_temac: Switch to use dev_err_probe() helper (Yang Yingliang) - bpf: sockmap: Remove preempt_disable in sock_map_sk_acquire (Tomas Glozar) - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (valis) - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (valis) - net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (valis) - bpf, cpumap: Handle skb as well when clean up ptr_ring (Hou Tao) - net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX. (Kuniyuki Iwashima) - net: add missing data-race annotation for sk_ll_usec (Eric Dumazet) - net: add missing data-race annotations around sk->sk_peek_off (Eric Dumazet) - net: add missing READ_ONCE(sk->sk_rcvbuf) annotation (Eric Dumazet) - net: add missing READ_ONCE(sk->sk_sndbuf) annotation (Eric Dumazet) - net: add missing READ_ONCE(sk->sk_rcvlowat) annotation (Eric Dumazet) - net: annotate data-races around sk->sk_max_pacing_rate (Eric Dumazet) - qed: Fix scheduling in a tasklet while getting stats (Konstantin Khorenko) - mISDN: hfcpci: Fix potential deadlock on &hc->lock (Chengfeng Ye) - net: sched: cls_u32: Fix match key mis-addressing (Jamal Hadi Salim) - perf test uprobe_from_different_cu: Skip if there is no gcc (Georg Muller) - net: dsa: fix value check in bcm_sf2_sw_probe() (Yuanjun Gong) - rtnetlink: let rtnl_bridge_setlink checks IFLA_BRIDGE_MODE length (Lin Ma) - bpf: Add length check for SK_DIAG_BPF_STORAGE_REQ_MAP_FD parsing (Lin Ma) - net/mlx5e: fix return value check in mlx5e_ipsec_remove_trailer() (Yuanjun Gong) - net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx (Zhengchao Shao) - wifi: cfg80211: Fix return value in scan logic (Ilan Peer) - KVM: s390: fix sthyi error handling (Heiko Carstens) - word-at-a-time: use the same return type for has_zero regardless of endianness (ndesaulniers@google.com) - arm64: dts: imx8mn-var-som: add missing pull-up for onboard PHY reset pinmux (Hugo Villeneuve) - iommu/arm-smmu-v3: Document nesting-related errata (Robin Murphy) - iommu/arm-smmu-v3: Add explicit feature for nesting (Robin Murphy) - iommu/arm-smmu-v3: Document MMU-700 erratum 2812531 (Robin Murphy) - iommu/arm-smmu-v3: Work around MMU-600 erratum 1076982 (Robin Murphy) - net/mlx5: Free irqs only on shutdown callback (Shay Drory) - perf: Fix function pointer case (Peter Zijlstra) - io_uring: gate iowait schedule on having pending requests (Jens Axboe) - net: mana: Use the correct WQE count for ringing RQ doorbell (Long Li) [Orabug: 35555552] - net: mana: Batch ringing RX queue doorbell on receiving packets (Long Li) [Orabug: 35555552] - devlink: report devlink_port_type_warn source device (Petr Oros) [Orabug: 35727899] - scsi: mpi3mr: Update driver version to 8.5.0.0.0 (Ranjan Kumar) [Orabug: 35729632] - scsi: mpi3mr: Enhance handling of devices removed after controller reset (Ranjan Kumar) [Orabug: 35729632] - scsi: mpi3mr: WRITE SAME implementation (Ranjan Kumar) [Orabug: 35729632] - scsi: mpi3mr: Add support for more than 1MB I/O (Ranjan Kumar) [Orabug: 35729632] - scsi: mpi3mr: Update MPI Headers to version 3.00.28 (Ranjan Kumar) [Orabug: 35729632] - scsi: mpi3mr: Invoke soft reset upon TSU or event ack time out (Ranjan Kumar) [Orabug: 35729632] - scsi: mpi3mr: Propagate sense data for admin queue SCSI I/O (Sathya Prakash) [Orabug: 35729632] - scsi: mpi3mr: Fix the type used for pointers to bitmap (Christophe JAILLET) [Orabug: 35729632] - scsi: mpi3mr: Use -ENOMEM instead of -1 in mpi3mr_expander_add() (Harshit Mogalapalli) [Orabug: 35729632] - scsi: mpi3mr: Use IRQ save variants of spinlock to protect chain frame allocation (Ranjan Kumar) [Orabug: 35729632] - scsi: mpi3mr: Handle soft reset in progress fault code (0xF002) (Ranjan Kumar) [Orabug: 35729632] - scsi: mpi3mr: Update copyright year (Ranjan Kumar) [Orabug: 35729632] - scsi: mpi3mr: Fix W=1 compilation warnings (Ranjan Kumar) [Orabug: 35729632] - scsi: mpi3mr: Update MPI Headers to revision 27 (Ranjan Kumar) [Orabug: 35729632] - scsi: mpi3mr: Modify MUR timeout value to 120 seconds (Ranjan Kumar) [Orabug: 35729632] - scsi: mpi3mr: Fix admin queue memory leak upon soft reset (Ranjan Kumar) [Orabug: 35729632] - scsi: mpi3mr: Successive VD delete and add causes FW fault (Ranjan Kumar) [Orabug: 35729632] - scsi: mpi3mr: Fix expander node leak in mpi3mr_remove() (Tomas Henzl) [Orabug: 35729632] - scsi: mpi3mr: Fix memory leaks in mpi3mr_init_ioc() (Tomas Henzl) [Orabug: 35729632] - scsi: mpi3mr: Fix sas_hba.phy memory leak in mpi3mr_remove() (Tomas Henzl) [Orabug: 35729632] - scsi: mpi3mr: Fix mpi3mr_hba_port memory leak in mpi3mr_remove() (Tomas Henzl) [Orabug: 35729632] - scsi: mpi3mr: Fix config page DMA memory leak (Tomas Henzl) [Orabug: 35729632] - scsi: mpi3mr: Fix throttle_groups memory leak (Tomas Henzl) [Orabug: 35729632] - scsi: mpi3mr: Bad drive in topology results kernel crash (Ranjan Kumar) [Orabug: 35729632] - scsi: mpi3mr: NVMe command size greater than 8K fails (Ranjan Kumar) [Orabug: 35729632] - scsi: mpi3mr: Return proper values for failures in firmware init path (Ranjan Kumar) [Orabug: 35729632] - scsi: mpi3mr: Wait for diagnostic save during controller init (Ranjan Kumar) [Orabug: 35729632] - scsi: mpi3mr: Driver unload crashes host when enhanced logging is enabled (Ranjan Kumar) [Orabug: 35729632] - scsi: mpi3mr: ioctl timeout when disabling/enabling interrupt (Ranjan Kumar) [Orabug: 35729632] - scsi: mpi3mr: Remove unneeded version.h include (Jesper Juhl) [Orabug: 35729632] - scsi: mpi3mr: Fix missing mrioc->evtack_cmds initialization (Shin'ichiro Kawasaki) [Orabug: 35729632] - scsi: mpi3mr: Use number of bits to manage bitmap sizes (Shin'ichiro Kawasaki) [Orabug: 35729632] - scsi: mpi3mr: Remove unnecessary memcpy() to alltgt_info->dmi (Shin'ichiro Kawasaki) [Orabug: 35729632] - scsi: mpi3mr: Fix issues in mpi3mr_get_all_tgt_info() (Shin'ichiro Kawasaki) [Orabug: 35729632] - scsi: mpi3mr: Fix an issue found by KASAN (Tomas Henzl) [Orabug: 35729632] - scsi: mpi3mr: Remove usage of dma_get_required_mask() API (Sreekanth Reddy) [Orabug: 35729632] - scsi: mpi3mr: Suppress command reply debug prints (Shin'ichiro Kawasaki) [Orabug: 35729632] - scsi: mpi3mr: Select CONFIG_SCSI_SAS_ATTRS (Michal Kubecek) [Orabug: 35729632] - vhost-scsi: Fix alignment handling with windows (Mike Christie) [Orabug: 35769316] - selftests/bpf: fix static assert compilation issue for test_cls_*.c (Alan Maguire) [Orabug: 35773339] [5.15.0-106.125.1] - smp: Reduce NMI traffic from CSD waiters to CSD destination (Imran Khan) [Orabug: 35752500] - smp: Reduce logging due to dump_stack of CSD waiters (Imran Khan) [Orabug: 35752500] - block: Sysfs option to change ioticks granularity (Gulam Mohamed) [Orabug: 34977356] - uek: kabi: update x86_64 kABI files for new symbols (Saeed Mirzamohammadi) [Orabug: 35501675] - uek: kabi: update aarch64 kABI files for new symbols (Saeed Mirzamohammadi) [Orabug: 35553840] - rpmbuild: fixed missing _kernel_cc macros to allow alternate compilers (Mark Nicholson) [Orabug: 35729326] - scsi: megaraid_sas: Driver version update to 07.725.01.00-rc1 (Chandrakanth Patil) [Orabug: 35729651] - scsi: megaraid_sas: Add crash dump mode capability bit in MFI capabilities (Chandrakanth Patil) [Orabug: 35729651] - scsi: megaraid_sas: Add flexible array member for SGLs (Kees Cook) [Orabug: 35729651] - scsi: megaraid_sas: Fix some spelling mistakes in comment (Yu Zhe) [Orabug: 35729651] - scsi: megaraid_sas: Move megasas_dbg_lvl init to megasas_init() (Guixin Liu) [Orabug: 35729651] - scsi: megaraid_sas: Remove unnecessary memset() (Guixin Liu) [Orabug: 35729651] - scsi: megaraid_sas: Simplify megasas_update_device_list (Guixin Liu) [Orabug: 35729651] - scsi: megaraid_sas: Correct an error message (Guixin Liu) [Orabug: 35729651] - scsi: megaraid_sas: Correct value passed to scsi_device_lookup() (Guixin Liu) [Orabug: 35729651] - scsi: megaraid: Convert sysfs snprintf() to sysfs_emit() (Xuezhi Zhang) [Orabug: 35729651] - scsi: megaraid_sas: Use struct_size() in code related to struct MR_PD_CFG_SEQ_NUM_SYNC (Gustavo A. R. Silva) [Orabug: 35729651] - scsi: megaraid_sas: Use struct_size() in code related to struct MR_FW_RAID_MAP (Gustavo A. R. Silva) [Orabug: 35729651] - scsi: megaraid_sas: Replace one-element array with flexible-array member in MR_PD_CFG_SEQ_NUM_SYNC (Gustavo A. R. Silva) [Orabug: 35729651] - scsi: megaraid_sas: Replace one-element array with flexible-array member in MR_DRV_RAID_MAP (Gustavo A. R. Silva) [Orabug: 35729651] - scsi: megaraid_sas: Replace one-element array with flexible-array member in MR_FW_RAID_MAP_DYNAMIC (Gustavo A. R. Silva) [Orabug: 35729651] - scsi: megaraid_sas: Replace one-element array with flexible-array member in MR_FW_RAID_MAP (Gustavo A. R. Silva) [Orabug: 35729651] - scsi: megaraid: Remove redundant assignment to variable mfiStatus (Colin Ian King) [Orabug: 35729651] - scsi: megaraid_sas: Remove unnecessary kfree() (Guixin Liu) [Orabug: 35729651] - scsi: megaraid_sas: Remove redundant variable cmd_type (Colin Ian King) [Orabug: 35729651] - scsi: megaraid: Remove the static variable initialisation (Jason Wang) [Orabug: 35729651] - scsi: megaraid_sas: Clean up some inconsistent indenting (Jiapeng Chong) [Orabug: 35729651] - scsi: megaraid_sas: Remove redundant memset() statement (Harshit Mogalapalli) [Orabug: 35729651] - scsi: megaraid_sas: Remove unnecessary memset (Wan Jiabing) [Orabug: 35729651] - scsi: megasas: Clean up some inconsistent indenting (Yang Li) [Orabug: 35729651] - scsi: megasas: Stop using the SCSI pointer (Bart Van Assche) [Orabug: 35729651] - scsi: megaraid_sas: Use irq_set_affinity_and_hint() (Nitesh Narayan Lal) [Orabug: 35729651] - scsi: megaraid_sas: Driver version update to 07.719.03.00-rc1 (Sumit Saxena) [Orabug: 35729651] - scsi: megaraid_sas: Add helper functions for irq_context (Sumit Saxena) [Orabug: 35729651] - scsi: mpt3sas: Fix an issue when driver is being removed (Tomas Henzl) [Orabug: 35729658] - scsi: mpt3sas: Remove HBA BIOS version in the kernel log (Ranjan Kumar) [Orabug: 35729658] - scsi: mpt3sas: Drop redundant pci_enable_pcie_error_reporting() (Bjorn Helgaas) [Orabug: 35729658] - scsi: mpt3sas: Demote log level for trace buffer allocation to info (Paul Menzel) [Orabug: 35729658] - scsi: mpt3sas: Update driver version to 43.100.00.00 (Sreekanth Reddy) [Orabug: 35729658] - scsi: mpt3sas: Increase cmd_per_lun to 128 (Sreekanth Reddy) [Orabug: 35729658] - scsi: mpt3sas: Fix trace buffer registration failed (Sreekanth Reddy) [Orabug: 35729658] - scsi: mpt3sas: Disable MPI2_FUNCTION_FW_DOWNLOAD for ATTO devices (Bradley Grove) [Orabug: 35729658] - scsi: mpt3sas: Add support for ATTO ExpressSAS H12xx GT devices (Bradley Grove) [Orabug: 35729658] - scsi: mpt3sas: Remove flush_scheduled_work() call (Tetsuo Handa) [Orabug: 35729658] - scsi: mpt3sas: Fix whitespace and spelling mistake (Zhang Jiaming) [Orabug: 35729658] - scsi: mpt3sas: Fix typo in comment (Ren Yu) [Orabug: 35729658] - scsi: mpt3sas: Fix junk chars displayed while printing ChipName (Sreekanth Reddy) [Orabug: 35729658] - scsi: mpt3sas: Use cached ATA Information VPD page (Martin K. Petersen) [Orabug: 35729658] - scsi: mpt3sas: Fix adapter replyPostRegisterIndex declaration (Damien Le Moal) [Orabug: 35729658] - scsi: mpt3sas: Fix event callback log_code value handling (Damien Le Moal) [Orabug: 35729658] - scsi: mpt3sas: Fix _ctl_set_task_mid() TaskMID check (Damien Le Moal) [Orabug: 35729658] - scsi: mpt3sas: Fix mpt3sas_check_same_4gb_region() kdoc comment (Damien Le Moal) [Orabug: 35729658] - scsi: mpt3sas: Convert to flexible arrays (Kees Cook) [Orabug: 35729658] - scsi: mpt3sas: Update persistent trigger pages from sysfs interface (Suganath Prabu S) [Orabug: 35729658] - KVM: selftests: vmx_pmu_msrs_test: Drop tests mangling guest visible CPUIDs (Vitaly Kuznetsov) [Orabug: 35730650] - rds: Remove gratuitous include of time.h from rds.h (Mark Haywood) [Orabug: 35742760] - uek-rpm: Removing pre scriptlet to not allow firmware downgrade (Samasth Norway Ananda) [Orabug: 35756462] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-20588 CVE-2023-22024 CVE-2023-42753 cpe:/a:oracle:linux:8::UEKR7 cpe:/o:oracle:linux:9::baseos_latest cpe:/o:oracle:linux:9:2:baseos_patch cpe:/a:oracle:linux:8::developer_UEKR7 cpe:/a:oracle:linux:9::UEKR7 cpe:/a:oracle:linux:9::developer_UEKR7 Oracle Linux 8 [2.28-225.0.4.6] - CVE-2023-4527: Stack read overflow in getaddrinfo in no-aaa mode. - CVE-2203-4806: potential use-after-free in getaddrinfo. - CVE-2023-4813: potential use-after-free in gaih_inet (RHEL-2435). - CVE-2023-4813: work around RHEL-8 limitation in test (RHEL-2435). Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com> [2.28-225.0.4] - CVE-2023-4911: tunables: Terminate immediately if end of input is reached Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com> [2.28-225.0.3] - OraBug 35317410 Glibc tunable to disable huge pages on pthread_create stacks - Created tunable glibc.pthread.stack_hugetlb to control when hugepages can be used for stack allocation. - In case THP are enabled and glibc.pthread.stack_hugetlb is set to 0, glibc will madvise the kernel not to use allow hugepages for stack allocations. Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> [2.28-225.0.2] - OraBug: 35268809 Fixed initialization of VDSO for tcache_key_initialize Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> [2.28-225.0.1] - Merge of Oracle patches for ol8u8 beta Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> [2.28-225] - Enforce a specififc internal ordering for tunables (#2154914) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-4813 CVE-2023-4806 CVE-2023-4527 CVE-2023-4911 cpe:/a:oracle:linux:8::userspace_ksplice Oracle Linux 9 [2.34-60.0.3.7] - CVE-2023-4527: Stack read overflow in getaddrinfo in no-aaa mode (#2234716). - CVE-2203-4806: potential use-after-free in getaddrinfo. - CVE-2023-4813: potential use-after-free in gaih_inet. Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com> [2.34-60.0.3] - CVE-2023-4911: tunables: Terminate immediately if end of input is reached Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com> IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-4806 CVE-2023-4911 CVE-2023-4527 CVE-2023-4813 cpe:/a:oracle:linux:9::userspace_ksplice Oracle Linux 7 Oracle Linux 8 [5.4.17-2136.324.5.3] - Revert 'jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint' (Sherry Yang) [Orabug: 35896102] [5.4.17-2136.324.5.2] - fix breakage in do_rmdir() (Al Viro) [Orabug: 35885837] [5.4.17-2136.324.5.1] - x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky) [Orabug: 35857366] {CVE-2023-5090} [5.4.17-2136.324.5] - netfilter: nfnetlink_osf: avoid OOB read (Wander Lairson Costa) - dlm: fix plock lookup when using multiple lockspaces (Alexander Aring) - x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Dave Hansen) - Revert 'IB/isert: Fix incorrect release of isert connection' (Leon Romanovsky) - ALSA: ac97: Fix possible error value of *rac97 (Su Hui) - pinctrl: amd: Don't show Invalid config param errors (Mario Limonciello) - netfilter: xt_sctp: validate the flag_info count (Wander Lairson Costa) - netfilter: xt_u32: validate user space input (Wander Lairson Costa) - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Kyle Zeng) [Orabug: 35824287] {CVE-2023-42753} [5.4.17-2136.324.4] - kernfs: fix missing kernfs_iattr_rwsem locking (Ian Kent) [Orabug: 35796771] - x86/microcode: Stop reprobing mitigations after late microcode load (Boris Ostrovsky) [Orabug: 35818857] {CVE-2023-20569} - objtool/x86: Fix SRSO mess (Peter Zijlstra) [Orabug: 35818857] {CVE-2023-20569} - x86/srso: Correct the mitigation status when SMT is disabled (Borislav Petkov (AMD)) [Orabug: 35818857] {CVE-2023-20569} - objtool/x86: Fixup frame-pointer vs rethunk (Peter Zijlstra) [Orabug: 35818857] {CVE-2023-20569} - x86/srso: Disable the mitigation on unaffected configurations (Borislav Petkov (AMD)) [Orabug: 35818857] {CVE-2023-20569} - x86/retpoline: Don't clobber RFLAGS during srso_safe_ret() (Sean Christopherson) [Orabug: 35818857] {CVE-2023-20569} - x86/srso: Explain the untraining sequences a bit more (Borislav Petkov (AMD)) [Orabug: 35818857] {CVE-2023-20569} - x86/cpu: Cleanup the untrain mess (Peter Zijlstra) [Orabug: 35818857] {CVE-2023-20569} - x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (Peter Zijlstra) [Orabug: 35818857] {CVE-2023-20569} - x86/cpu: Rename original retbleed methods (Peter Zijlstra) [Orabug: 35818857] {CVE-2023-20569} - x86/cpu: Clean up SRSO return thunk mess (Peter Zijlstra) [Orabug: 35818857] {CVE-2023-20569} - x86/alternative: Make custom return thunk unconditional (Peter Zijlstra) [Orabug: 35818857] {CVE-2023-20569} - x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (Peter Zijlstra) [Orabug: 35818857] {CVE-2023-20569} - x86/cpu: Fix __x86_return_thunk symbol type (Peter Zijlstra) [Orabug: 35818857] {CVE-2023-20569} - x86/srso: Fix build breakage with the LLVM linker (Nick Desaulniers) [Orabug: 35818857] {CVE-2023-20569} - x86/srso: Tie SBPB bit setting to microcode patch detection (Borislav Petkov (AMD)) [Orabug: 35818857] {CVE-2023-20569} - x86/srso: Fix return thunks in generated code (Josh Poimboeuf) [Orabug: 35818857] {CVE-2023-20569} - x86/srso: Add IBPB on VMEXIT (Borislav Petkov (AMD)) [Orabug: 35818857] {CVE-2023-20569} - x86/srso: Add IBPB (Borislav Petkov (AMD)) [Orabug: 35818857] {CVE-2023-20569} - x86/srso: Add SRSO_NO support (Borislav Petkov (AMD)) [Orabug: 35818857] {CVE-2023-20569} - x86/srso: Add IBPB_BRTYPE support (Borislav Petkov (AMD)) [Orabug: 35818857] {CVE-2023-20569} - x86/srso: Add a Speculative RAS Overflow mitigation (Borislav Petkov (AMD)) [Orabug: 35818857] {CVE-2023-20569} - scsi: megaraid_sas: Fix deadlock on firmware crashdump (Junxiao Bi) [Orabug: 35819593] - rds: Fix lack of reentrancy for connection reset with dst addr zero (Hakon Bugge) [Orabug: 35819522] {CVE-2023-22024} [5.4.17-2136.324.3] - uek-rpm: aarch64: enable ACPI_AGDI (Mihai Carabas) [Orabug: 34833165] - arm64: sdei: abort running SDEI handlers during crash (D Scott Phillips) [Orabug: 34833165] - ACPI: AGDI: Fix missing prototype warning for acpi_agdi_init() (Ilkka Koskinen) [Orabug: 34833165] - ACPI: AGDI: Add driver for Arm Generic Diagnostic Dump and Reset device (Ilkka Koskinen) [Orabug: 34833165] - ACPI: tables: Add AGDI to the list of known table signatures (Ilkka Koskinen) [Orabug: 34833165] - ACPICA: iASL: Add suppport for AGDI table (Ilkka Koskinen) [Orabug: 34833165] - ACPI: APEI: explicit init of HEST and GHES in apci_init() (Shuai Xue) [Orabug: 34833165] - x86/CPU/AMD: Fix the DIV(0) initial fix attempt (Borislav Petkov (AMD)) [Orabug: 35776936] {CVE-2023-20588} - x86/CPU/AMD: Do not leak quotient data after a division by 0 (Borislav Petkov (AMD)) [Orabug: 35776936] {CVE-2023-20588} - uek-rpm: Pensando: enable PENSANDO_SOC_BSM_ENABLE in the config (Dave Kleikamp) [Orabug: 35787554] [5.4.17-2136.324.2] - LTS tag: v5.4.256 (Sherry Yang) - Revert 'MIPS: Alchemy: fix dbdma2' (Greg Kroah-Hartman) - powerpc/pmac/smp: Drop unnecessary volatile qualifier (YueHaibing) - powerpc/pmac/smp: Avoid unused-variable warnings (Ilie Halip) - LTS tag: v5.4.255 (Sherry Yang) - dma-buf/sw_sync: Avoid recursive lock during fence signal (Rob Clark) - pinctrl: renesas: rza2: Add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} (Biju Das) - clk: Fix undefined reference to clk_rate_exclusive_{get,put}' (Biju Das) - scsi: core: raid_class: Remove raid_component_add() (Zhu Wang) - scsi: snic: Fix double free in snic_tgt_create() (Zhu Wang) - irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable (Jiaxun Yang) - Documentation/sysctl: document page_lock_unfairness (Joel Savitz) - ALSA: pcm: Check for null pointer of pointer substream before dereferencing it (Colin Ian King) - interconnect: Do not skip aggregation for disabled paths (Georgi Djakov) - Revert 'ALSA: pcm: Use SG-buffer only when direct DMA is available' (Takashi Iwai) - ALSA: pcm: Fix build error on m68k and others (Takashi Iwai) - rtnetlink: Reject negative ifindexes in RTM_NEWLINK (Ido Schimmel) - x86/fpu: Set X86_FEATURE_OSXSAVE feature after enabling OSXSAVE in CR4 (Feng Tang) - drm/display/dp: Fix the DP DSC Receiver cap size (Ankit Nautiyal) - PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus (Igor Mammedov) - media: vcodec: Fix potential array out-of-bounds in encoder queue_setup (Wei Chen) - radix tree: remove unused variable (Arnd Bergmann) - lib/clz_ctz.c: Fix __clzdi2() and __ctzdi2() for 32-bit kernels (Helge Deller) - batman-adv: Hold rtnl lock during MTU update via netlink (Sven Eckelmann) - batman-adv: Fix batadv_v_ogm_aggr_send memory leak (Remi Pommarel) - batman-adv: Fix TT global entry leak when client roamed back (Remi Pommarel) - batman-adv: Do not get eth header before batadv_check_management_packet (Remi Pommarel) - batman-adv: Don't increase MTU when set by user (Sven Eckelmann) - batman-adv: Trigger events for auto adjusted MTU (Sven Eckelmann) - nfsd: Fix race to FREE_STATEID and cl_revoked (Benjamin Coddington) - clk: Fix slab-out-of-bounds error in devm_clk_release() (Andrey Skvortsov) - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) - ibmveth: Use dcbf rather than dcbfl (Michael Ellerman) - bonding: fix macvlan over alb bond support (Hangbin Liu) - net: remove bond_slave_has_mac_rcu() (Jakub Kicinski) - net/sched: fix a qdisc modification with ambiguous command request (Jamal Hadi Salim) - igb: Avoid starting unnecessary workqueues (Alessio Igor Bogani) - net: validate veth and vxcan peer ifindexes (Jakub Kicinski) - net: bcmgenet: Fix return value check for fixed_phy_register() (Ruan Jinjie) - net: bgmac: Fix return value check for fixed_phy_register() (Ruan Jinjie) - ipvlan: Fix a reference count leak warning in ipvlan_ns_exit() (Lu Wei) - dccp: annotate data-races in dccp_poll() (Eric Dumazet) - sock: annotate data-races around prot->memory_pressure (Eric Dumazet) - octeontx2-af: SDP: fix receive link config (Hariprasad Kelam) - tracing: Fix memleak due to race between current_tracer and trace (Zheng Yejian) - drm/amd/display: check TG is non-null before checking if enabled (Taimur Hassan) - drm/amd/display: do not wait for mpc idle if tg is disabled (Josip Pavic) - ASoC: fsl_sai: Disable bit clock with transmitter (Matus Gajdos) - ASoC: fsl_sai: Add new added registers and new bit definition (Shengjiu Wang) - ASoC: fsl_sai: Refine enable/disable TE/RE sequence in trigger() (Shengjiu Wang) - regmap: Account for register length in SMBus I/O limits (Mark Brown) - ALSA: pcm: Fix potential data race at PCM memory allocation helpers (Takashi Iwai) - ALSA: pcm: Use SG-buffer only when direct DMA is available (Takashi Iwai) - ALSA: pcm: Set per-card upper limit of PCM buffer allocations (Takashi Iwai) - dm integrity: reduce vmalloc space footprint on 32-bit architectures (Mikulas Patocka) - dm integrity: increase RECALC_SECTORS to improve recalculate speed (Mikulas Patocka) - fbdev: fix potential OOB read in fast_imageblit() (Zhang Shurong) - fbdev: Fix sys_imageblit() for arbitrary image widths (Thomas Zimmermann) - fbdev: Improve performance of sys_imageblit() (Thomas Zimmermann) - MIPS: cpu-features: Use boot_cpu_type for CPU type based features (Jiaxun Yang) - MIPS: cpu-features: Enable octeon_cache by cpu_type (Jiaxun Yang) - fs: dlm: fix mismatch of plock results from userspace (Alexander Aring) - fs: dlm: use dlm_plock_info for do_unlock_close (Alexander Aring) - fs: dlm: change plock interrupted message to debug again (Alexander Aring) - fs: dlm: add pid to debug log (Alexander Aring) - dlm: replace usage of found with dedicated list iterator variable (Jakob Koschel) - dlm: improve plock logging if interrupted (Alexander Aring) - PCI: acpiphp: Reassign resources on bridge if necessary (Igor Mammedov) - net: phy: broadcom: stub c45 read/write for 54810 (Justin Chen) - mmc: f-sdh30: fix order of function calls in sdhci_f_sdh30_remove (Yangtao Li) - net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure (Lin Ma) - net: fix the RTO timer retransmitting skb every 1ms if linear option is enabled (Jason Xing) - virtio-net: set queues after driver_ok (Jason Wang) - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Kuniyuki Iwashima) - netfilter: set default timeout to 3 secs for sctp shutdown send and recv state (Xin Long) - mmc: block: Fix in_flight[issue_type] value error (Yibin Ding) - mmc: wbsd: fix double mmc_free_host() in wbsd_init() (Yang Yingliang) - cifs: Release folio lock on fscache read hit. (Russell Harmon via samba-technical) - ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces. (dengxiang) - serial: 8250: Fix oops for port->pm on uart_change_pm() (Tony Lindgren) - ASoC: meson: axg-tdm-formatter: fix channel slot allocation (Jerome Brunet) - ASoC: rt5665: add missed regulator_bulk_disable (Zhang Shurong) - ARM: dts: imx: Set default tuning step for imx6sx usdhc (Xiaolei Wang) - ARM: dts: imx: Set default tuning step for imx7d usdhc (Xiaolei Wang) - ARM: dts: imx: Adjust dma-apbh node name (Stefan Wahren) - ARM: dts: imx7s: Drop dma-apb interrupt-names (Marek Vasut) - bus: ti-sysc: Flush posted write on enable before reset (Tony Lindgren) - bus: ti-sysc: Improve reset to work with modules with no sysconfig (Tony Lindgren) - net: do not allow gso_size to be set to GSO_BY_FRAGS (Eric Dumazet) - sock: Fix misuse of sk_under_memory_pressure() (Abel Wu) - net: dsa: mv88e6xxx: Wait for EEPROM done before HW reset (Alfred Lee) - i40e: fix misleading debug logs (Andrii Staikov) - team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves (Ziyang Xuan) - netfilter: nft_dynset: disallow object maps (Pablo Neira Ayuso) - ipvs: fix racy memcpy in proc_do_sync_threshold (Sishuai Gong) - selftests: mirror_gre_changes: Tighten up the TTL test match (Petr Machata) - xfrm: add NULL check in xfrm_update_ae_params (Lin Ma) - ip_vti: fix potential slab-use-after-free in decode_session6 (Zhengchao Shao) - ip6_vti: fix slab-use-after-free in decode_session6 (Zhengchao Shao) - xfrm: fix slab-use-after-free in decode_session6 (Zhengchao Shao) - xfrm: interface: rename xfrm_interface.c to xfrm_interface_core.c (Eyal Birger) - net: af_key: fix sadb_x_filter validation (Lin Ma) - net: xfrm: Fix xfrm_address_filter OOB read (Lin Ma) - btrfs: fix BUG_ON condition in btrfs_cancel_balance (xiaoshoukui) - tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32 platforms (Sherry Sun) - powerpc/rtas_flash: allow user copy to flash block cache objects (Nathan Lynch) - fbdev: mmp: fix value check in mmphw_probe() (Yuanjun Gong) - i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue (Chengfeng Ye) - virtio-mmio: don't break lifecycle of vm_dev (Wolfram Sang) - virtio-mmio: Use to_virtio_mmio_device() to simply code (Tang Bin) - virtio-mmio: convert to devm_platform_ioremap_resource (Yangtao Li) - nfsd: Remove incorrect check in nfsd4_validate_stateid (Trond Myklebust) - nfsd4: kill warnings on testing stateids with mismatched clientids (J. Bruce Fields) - net/ncsi: Fix gma flag setting after response (Vijay Khemka) - tracing/probes: Fix to update dynamic data counter if fetcharg uses it (Masami Hiramatsu (Google)) - tracing/probes: Have process_fetch_insn() take a void * instead of pt_regs (Steven Rostedt (VMware)) - leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev rename (Christian Marangi) - mmc: sunxi: fix deferred probing (Sergey Shtylyov) - mmc: bcm2835: fix deferred probing (Sergey Shtylyov) - USB: dwc3: qcom: fix NULL-deref on suspend (Johan Hovold) - usb: dwc3: qcom: Add helper functions to enable,disable wake irqs (Sandeep Maheswaram) - interconnect: Add helpers for enabling/disabling a path (Georgi Djakov) - interconnect: Move internal structs into a separate file (Georgi Djakov) - irqchip/mips-gic: Use raw spinlock for gic_lock (Jiaxun Yang) - irqchip/mips-gic: Get rid of the reliance on irq_cpu_online() (Marc Zyngier) - ALSA: hda: Fix unhandled register update during auto-suspend period (Takashi Iwai) - PM: runtime: Add pm_runtime_get_if_active() (Sakari Ailus) - PM-runtime: add tracepoints for usage_count changes (Michal Miroslaw) - iio: addac: stx104: Fix race condition when converting analog-to-digital (William Breathitt Gray) - iio: addac: stx104: Fix race condition for stx104_write_raw() (William Breathitt Gray) - iio: stx104: Move to addac subdirectory (William Breathitt Gray) - iio: adc: stx104: Implement and utilize register structures (William Breathitt Gray) - iio: adc: stx104: Utilize iomap interface (William Breathitt Gray) - iio: add addac subdirectory (Cosmin Tanislav) - IMA: allow/fix UML builds (Randy Dunlap) - powerpc/kasan: Disable KCOV in KASAN code (Benjamin Gray) - ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() (Tuo Li) - ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 & Q760 (dengxiang) - drm/amdgpu: Fix potential fence use-after-free v2 (shanzhulig) - Bluetooth: L2CAP: Fix use-after-free (Zhengping Jiang) - pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db() (Armin Wolf) - gfs2: Fix possible data races in gfs2_show_options() (Tuo Li) - usb: chipidea: imx: don't request QoS for imx8ulp (Xu Yang) - media: platform: mediatek: vpu: fix NULL ptr dereference (Hans Verkuil) - media: v4l2-mem2mem: add lock to protect parameter num_rdy (Yunfei Dong) - FS: JFS: Check for read-only mounted filesystem in txBegin (Immad Mir) - FS: JFS: Fix null-ptr-deref Read in txBegin (Immad Mir) - MIPS: dec: prom: Address -Warray-bounds warning (Gustavo A. R. Silva) - fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev (Yogesh) - udf: Fix uninitialized array access for some pathnames (Jan Kara) - ovl: check type and offset of struct vfsmount in ovl_entry (Christian Brauner) - HID: add quirk for 03f0:464a HP Elite Presenter Mouse (Marco Morandini) - quota: fix warning in dqgrab() (Ye Bin) - quota: Properly disable quotas when add_dquot_ref() fails (Jan Kara) - ALSA: emu10k1: roll up loops in DSP setup code for Audigy (Oswald Buddenhagen) - drm/radeon: Fix integer overflow in radeon_cs_parser_init (hackyzh002) - macsec: use DEV_STATS_INC() (Eric Dumazet) - macsec: Fix traffic counters/statistics (Clayton Yager) - selftests: forwarding: tc_flower: Relax success criterion (Ido Schimmel) - mmc: sdhci-f-sdh30: Replace with sdhci_pltfm (Kunihiko Hayashi) - mmc: sdhci_f_sdh30: convert to devm_platform_ioremap_resource (Yangtao Li) - LTS tag: v5.4.254 (Sherry Yang) - sch_netem: fix issues in netem_change() vs get_dist_table() (Eric Dumazet) - alpha: remove __init annotation from exported page_is_ram() (Masahiro Yamada) - scsi: core: Fix possible memory leak if device_add() fails (Zhu Wang) - scsi: snic: Fix possible memory leak if device_add() fails (Zhu Wang) - scsi: 53c700: Check that command slot is not NULL (Alexandra Diupina) - scsi: storvsc: Fix handling of virtual Fibre Channel timeouts (Michael Kelley) - scsi: core: Fix legacy /proc parsing buffer overflow (Tony Battersby) - netfilter: nf_tables: report use refcount overflow (Pablo Neira Ayuso) - nvme-rdma: fix potential unbalanced freeze & unfreeze (Ming Lei) - nvme-tcp: fix potential unbalanced freeze & unfreeze (Ming Lei) - btrfs: set cache_block_group_error if we find an error (Josef Bacik) - btrfs: don't stop integrity writeback too early (Christoph Hellwig) - ibmvnic: Handle DMA unmapping of login buffs in release functions (Nick Child) - net/mlx5: Allow 0 for total host VFs (Daniel Jurgens) - dmaengine: mcf-edma: Fix a potential un-allocated memory access (Christophe JAILLET) - wifi: cfg80211: fix sband iftype data lookup for AP_VLAN (Felix Fietkau) - IB/hfi1: Fix possible panic during hotplug remove (Douglas Miller) - drivers: net: prevent tun_build_skb() to exceed the packet size limit (Andrew Kanner) - dccp: fix data-race around dp->dccps_mss_cache (Eric Dumazet) - bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves (Ziyang Xuan) - net/packet: annotate data-races around tp->status (Eric Dumazet) - mISDN: Update parameter type of dsp_cmx_send() (Nathan Chancellor) - selftests/rseq: Fix build with undefined __weak (Mark Brown) - drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes (Karol Herbst) - x86: Move gds_ucode_mitigated() declaration to header (Arnd Bergmann) - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Kirill A. Shutemov) - x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 (Cristian Ciocaltea) - usb: common: usb-conn-gpio: Prevent bailing out if initial role is none (Prashanth K) - usb: dwc3: Properly handle processing of pending events (Elson Roy Serrao) - usb-storage: alauda: Fix uninit-value in alauda_check_media() (Alan Stern) - binder: fix memory leak in binder_init() (Qi Zheng) - iio: cros_ec: Fix the allocation size for cros_ec_command (Yiyuan Guo) - nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (Ryusuke Konishi) - radix tree test suite: fix incorrect allocation size for pthreads (Colin Ian King) - drm/nouveau/gr: enable memory loads on helper invocation on all channels (Karol Herbst) - dmaengine: pl330: Return DMA_PAUSED when transaction is paused (Ilpo Jarvinen) - ipv6: adjust ndisc_is_useropt() to also return true for PIO (Maciej Zenczykowski) - mmc: moxart: read scr register without changing byte order (Sergei Antonov) - LTS tag: v5.4.253 (Sherry Yang) - Revert 'driver core: Annotate dev_err_probe() with __must_check' (Greg Kroah-Hartman) - drivers: core: fix kernel-doc markup for dev_err_probe() (Mauro Carvalho Chehab) - driver code: print symbolic error code (Michal Miroslaw) - driver core: Annotate dev_err_probe() with __must_check (Andy Shevchenko) - ARM: dts: nxp/imx6sll: fix wrong property name in usbphy node (Xu Yang) - ARM: dts: imx6sll: fixup of operating points (Andreas Kemnade) - ARM: dts: imx: add usb alias (Peng Fan) - ARM: dts: imx: Align L2 cache-controller nodename with dtschema (Krzysztof Kozlowski) - ARM: dts: imx6sll: Make ssi node name same as other platforms (Shengjiu Wang) - arm64: dts: stratix10: fix incorrect I2C property for SCL signal (Dinh Nguyen) - ceph: defer stopping mdsc delayed_work (Xiubo Li) - ceph: use kill_anon_super helper (Jeff Layton) - ceph: show tasks waiting on caps in debugfs caps file (Jeff Layton) - PM: sleep: wakeirq: fix wake irq arming (Johan Hovold) - PM / wakeirq: support enabling wake-up irq after runtime_suspend called (Chunfeng Yun) - selftests/rseq: Play nice with binaries statically linked against glibc 2.35+ (Sean Christopherson) - selftests/rseq: check if libc rseq support is registered (Michael Jeanson) - powerpc/mm/altmap: Fix altmap boundary check (Aneesh Kumar K.V) - mtd: rawnand: omap_elm: Fix incorrect type in assignment (Roger Quadros) - test_firmware: return ENOMEM instead of ENOSPC on failed memory allocation (Mirsad Goran Todorovac) - test_firmware: prevent race conditions by a correct implementation of locking (Mirsad Goran Todorovac) - ext2: Drop fragment support (Jan Kara) - fs: Protect reconfiguration of sb read-write from racing writes (Jan Kara) - net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb (Alan Stern) - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (Sungwoo Kim) - fs/sysv: Null check to prevent null-ptr-deref bug (Prince Kumar Maurya) - net: tap_open(): set sk_uid from current_fsuid() (Laszlo Ersek) - net: tun_chr_open(): set sk_uid from current_fsuid() (Laszlo Ersek) - mtd: rawnand: meson: fix OOB available bytes for ECC (Arseniy Krasnov) - mtd: spinand: toshiba: Fix ecc_get_status (Olivier Maignial) - USB: zaurus: Add ID for A-300/B-500/C-700 (Ross Maynard) - libceph: fix potential hang in ceph_osdc_notify() (Ilya Dryomov) - scsi: zfcp: Defer fc_rport blocking until after ADISC response (Steffen Maier) - tcp_metrics: fix data-race in tcpm_suck_dst() vs fastopen (Eric Dumazet) - tcp_metrics: annotate data-races around tm->tcpm_net (Eric Dumazet) - tcp_metrics: annotate data-races around tm->tcpm_vals[] (Eric Dumazet) - tcp_metrics: annotate data-races around tm->tcpm_lock (Eric Dumazet) - tcp_metrics: annotate data-races around tm->tcpm_stamp (Eric Dumazet) - tcp_metrics: fix addr_same() helper (Eric Dumazet) - ip6mr: Fix skb_under_panic in ip6mr_cache_report() (Yue Haibing) - net: dcb: choose correct policy to parse DCB_ATTR_BCN (Lin Ma) - net: ll_temac: fix error checking of irq_of_parse_and_map() (Dan Carpenter) - net: ll_temac: Switch to use dev_err_probe() helper (Yang Yingliang) - driver core: add device probe log helper (Andrzej Hajda) - bpf: sockmap: Remove preempt_disable in sock_map_sk_acquire (Tomas Glozar) - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (valis) - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (valis) - net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (valis) - net: add missing data-race annotation for sk_ll_usec (Eric Dumazet) - net: add missing data-race annotations around sk->sk_peek_off (Eric Dumazet) - net: add missing READ_ONCE(sk->sk_rcvbuf) annotation (Eric Dumazet) - net: add missing READ_ONCE(sk->sk_sndbuf) annotation (Eric Dumazet) - net: add missing READ_ONCE(sk->sk_rcvlowat) annotation (Eric Dumazet) - net: annotate data-races around sk->sk_max_pacing_rate (Eric Dumazet) - mISDN: hfcpci: Fix potential deadlock on &hc->lock (Chengfeng Ye) - net: sched: cls_u32: Fix match key mis-addressing (Jamal Hadi Salim) - perf test uprobe_from_different_cu: Skip if there is no gcc (Georg Muller) - rtnetlink: let rtnl_bridge_setlink checks IFLA_BRIDGE_MODE length (Lin Ma) - net/mlx5e: fix return value check in mlx5e_ipsec_remove_trailer() (Yuanjun Gong) - net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx (Zhengchao Shao) - KVM: s390: fix sthyi error handling (Heiko Carstens) - word-at-a-time: use the same return type for has_zero regardless of endianness (ndesaulniers@google.com) - loop: Select I/O scheduler 'none' from inside add_disk() (Bart Van Assche) - perf: Fix function pointer case (Peter Zijlstra) - arm64: Fix bit-shifting UB in the MIDR_CPU_MODEL() macro (D Scott Phillips) - ASoC: cs42l51: fix driver to properly autoload with automatic module loading (Thomas Petazzoni) - net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Pedro Tammela) - btrfs: fix race between quota disable and quota assign ioctls (Filipe Manana) - btrfs: qgroup: return ENOTCONN instead of EINVAL when quotas are not enabled (Marcos Paulo de Souza) - btrfs: qgroup: remove one-time use variables for quota_root checks (Marcos Paulo de Souza) - cpufreq: intel_pstate: Drop ACPI _PSS states table patching (Rafael J. Wysocki) - ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily (Rafael J. Wysocki) - ACPI: processor: perflib: Use the 'no limit' frequency QoS (Rafael J. Wysocki) - dm cache policy smq: ensure IO doesn't prevent cleaner policy progress (Joe Thornber) - ASoC: wm8904: Fill the cache for WM8904_ADC_TEST_0 register (Mark Brown) - s390/dasd: fix hanging device after quiesce/resume (Stefan Haberland) - virtio-net: fix race between set queues and probe (Jason Wang) - btrfs: check if the transaction was aborted at btrfs_wait_for_commit() (Filipe Manana) - irq-bcm6345-l1: Do not assume a fixed block to cpu mapping (Jonas Gorski) - tpm_tis: Explicitly check for error code (Alexander Steffen) - btrfs: check for commit error at btrfs_attach_transaction_barrier() (Filipe Manana) - hwmon: (nct7802) Fix for temp6 (PECI1) processed even if PECI1 disabled (Gilles Buloz) - staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext() (Zhang Shurong) - Documentation: security-bugs.rst: clarify CVE handling (Greg Kroah-Hartman) - Documentation: security-bugs.rst: update preferences when dealing with the linux-distros group (Greg Kroah-Hartman) - Revert 'usb: xhci: tegra: Fix error check' (Dan Carpenter) - usb: xhci-mtk: set the dma max_seg_size (Ricardo Ribalda) - USB: quirks: add quirk for Focusrite Scarlett (Lukasz Bartosik) - usb: ohci-at91: Fix the unhandle interrupt when resume (Guiting Shen) - usb: dwc3: don't reset device side if dwc3 was configured as host-only (Jisheng Zhang) - usb: dwc3: pci: skip BYT GPIO lookup table for hardwired phy (Gratian Crisan) - Revert 'usb: dwc3: core: Enable AutoRetry feature in the controller' (Jakub Vanek) - can: gs_usb: gs_can_close(): add missing set of CAN state to CAN_STATE_STOPPED (Marc Kleine-Budde) - USB: serial: simple: sort driver entries (Johan Hovold) - USB: serial: simple: add Kaufmann RKS+CAN VCP (Oliver Neukum) - USB: serial: option: add Quectel EC200A module support (Mohsen Tahmasebi) - USB: serial: option: support Quectel EM060K_128 (Jerry Meng) - serial: sifive: Fix sifive_serial_console_setup() section (Samuel Holland) - serial: 8250_dw: Preserve original value of DLF register (Ruihong Luo) - tracing: Fix warning in trace_buffered_event_disable() (Zheng Yejian) - ring-buffer: Fix wrong stat of cpu_buffer->read (Zheng Yejian) - ata: pata_ns87415: mark ns87560_tf_read static (Arnd Bergmann) - dm raid: fix missing reconfig_mutex unlock in raid_ctr() error paths (Yu Kuai) - block: Fix a source code comment in include/uapi/linux/blkzoned.h (Bart Van Assche) - ASoC: fsl_spdif: Silence output on stop (Matus Gajdos) - drm/msm: Fix IS_ERR_OR_NULL() vs NULL check in a5xx_submit_in_rb() (Gaosheng Cui) - drm/msm/adreno: Fix snapshot BINDLESS_DATA size (Rob Clark) - drm/msm/dpu: drop enum dpu_core_perf_data_bus_id (Dmitry Baryshkov) - RDMA/mlx4: Make check for invalid flags stricter (Dan Carpenter) - benet: fix return value check in be_lancer_xmit_workarounds() (Yuanjun Gong) - net/sched: mqprio: Add length check for TCA_MQPRIO_{MAX/MIN}_RATE64 (Lin Ma) - net/sched: mqprio: add extack to mqprio_parse_nlattr() (Vladimir Oltean) - net/sched: mqprio: refactor nlattr parsing to a separate function (Vladimir Oltean) - platform/x86: msi-laptop: Fix rfkill out-of-sync on MSI Wind U100 (Maxim Mikityanskiy) - team: reset team's flags when down link is P2P device (Hangbin Liu) - bonding: reset bond's flags when down link is P2P device (Hangbin Liu) - tcp: Reduce chance of collisions in inet6_hashfn(). (Stewart Smith) - ipv6 addrconf: fix bug where deleting a mngtmpaddr can create a new temporary address (Maciej Zenczykowski) - ethernet: atheros: fix return value check in atl1e_tso_csum() (Yuanjun Gong) - phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe() (Harshit Mogalapalli) - vxlan: calculate correct header length for GPE (Jiri Benc) - i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir() (Wang Ming) - ext4: fix to check return value of freeze_bdev() in ext4_shutdown() (Chao Yu) - keys: Fix linking a duplicate key to a keyring's assoc_array (Petr Pavlu) - uapi: General notification queue definitions (David Howells) - scsi: qla2xxx: Array index may go out of bound (Nilesh Javali) - pwm: meson: fix handling of period/duty if greater than UINT_MAX (Heiner Kallweit) - pwm: meson: Simplify duplicated per-channel tracking (Uwe Kleine-Konig) - pwm: meson: Remove redundant assignment to variable fin_freq (Colin Ian King) - ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() (Zheng Yejian) - ftrace: Store the order of pages allocated in ftrace_page (Linus Torvalds) - ftrace: Check if pages were allocated before calling free_pages() (Steven Rostedt (VMware)) - ftrace: Add information on number of page groups allocated (Steven Rostedt (VMware)) - fs: dlm: interrupt posix locks only when process is killed (Alexander Aring) - dlm: rearrange async condition return (Alexander Aring) - dlm: cleanup plock_op vs plock_xop (Alexander Aring) - PCI/ASPM: Avoid link retraining race (Ilpo Jarvinen) - PCI/ASPM: Factor out pcie_wait_for_retrain() (Ilpo Jarvinen) - PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link() (Bjorn Helgaas) - ext4: Fix reusing stale buffer heads from last failed mounting (Zhihao Cheng) - ext4: rename journal_dev to s_journal_dev inside ext4_sb_info (Chunguang Xu) - btrfs: fix extent buffer leak after tree mod log failure at split_node() (Filipe Manana) - btrfs: fix race between quota disable and relocation (Filipe Manana) - btrfs: qgroup: catch reserved space leaks at unmount time (Qu Wenruo) - bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent (Zheng Wang) - bcache: remove 'int n' from parameter list of bch_bucket_alloc_set() (Coly Li) - gpio: tps68470: Make tps68470_gpio_output() always set the initial value (Hans de Goede) - jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint (Zhihao Cheng) - jbd2: recheck chechpointing non-dirty buffer (Zhang Yi) - jbd2: remove redundant buffer io error checks (Zhang Yi) - jbd2: fix kernel-doc markups (Mauro Carvalho Chehab) - jbd2: fix incorrect code style (Xianting Tian) - LTS tag: v5.4.252 (Sherry Yang) - x86: fix backwards merge of GDS/SRSO bit (Greg Kroah-Hartman) - xen/netback: Fix buffer overrun triggered by unusual packet (Ross Lagerwall) - x86/cpu, kvm: Add support for CPUID_80000021_EAX (Kim Phillips) - tools headers cpufeatures: Sync with the kernel sources (Arnaldo Carvalho de Melo) - x86/cpufeatures: Assign dedicated feature word for CPUID_0x8000001F[EAX] (Sean Christopherson) - x86/cpu: Add VM page flush MSR availablility as a CPUID feature (Tom Lendacky) - x86/cpufeatures: Add SEV-ES CPU feature (Tom Lendacky) - x86/mm: fix poking_init() for Xen PV guests (Juergen Gross) [5.4.17-2136.324.1] - io_uring: add support for registering ring file descriptors (Jens Axboe) [Orabug: 35485491] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rik van Riel) [Orabug: 35655117] - mm,thp,shm: limit gfp mask to no more than specified (Rik van Riel) [Orabug: 35655117] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rik van Riel) [Orabug: 35655117] - uek-rpm: Removing pre scriptlet to not allow firmware downgrade (Samasth Norway Ananda) [Orabug: 35741866] - rds: Remove gratuitous include of time.h from rds.h (Mark Haywood) [Orabug: 35742761] - RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device (Shay Drory) [Orabug: 35750824] - smp: Reduce NMI traffic from CSD waiters to CSD destination (Imran Khan) [Orabug: 35752501] - smp: Reduce logging due to dump_stack of CSD waiters (Imran Khan) [Orabug: 35752501] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-20588 CVE-2023-5090 CVE-2023-20569 CVE-2023-42753 CVE-2023-22024 cpe:/o:oracle:linux:8::baseos_latest cpe:/a:oracle:linux:8::UEKR6 cpe:/a:oracle:linux:7::UEKR6 cpe:/o:oracle:linux:8:8:baseos_patch Oracle Linux 7 [4.14.35-2047.530.5.1] - Revert 'rtnetlink: Reject negative ifindexes in RTM_NEWLINK' (Saeed Mirzamohammadi) [Orabug: 35896831] [4.14.35-2047.530.5] - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Kyle Zeng) [Orabug: 35824288] {CVE-2023-42753} - netfilter: xt_u32: validate user space input (Wander Lairson Costa) - netfilter: xt_sctp: validate the flag_info count (Wander Lairson Costa) [4.14.35-2047.530.4] - rds: Fix lack of reentrancy for connection reset with dst addr zero (Hakon Bugge) [Orabug: 35819110] {CVE-2023-22024} - kernfs: fix missing kernfs_iattr_rwsem locking (Ian Kent) [Orabug: 35796772] - uek-rpm: Removing pre scriptlet to not allow firmware downgrade (Samasth Norway Ananda) [Orabug: 35756463] - scsi: megaraid_sas: Fix deadlock on firmware crashdump (Junxiao Bi) [Orabug: 35702793] [4.14.35-2047.530.3] - Add the new PCI Device IDs to support new generation of AMD 19h processors. (Partha Sarathi Satapathy) [Orabug: 35773822] - hwmon: (k10temp) Add support for AMD Family 19h Models 10h-1Fh and A0h-AFh (Babu Moger) [Orabug: 35773822] [4.14.35-2047.530.2] - LTS version: v4.14.325 (Saeed Mirzamohammadi) - Revert 'ARM: ep93xx: fix missing-prototype warnings' (Greg Kroah-Hartman) - Revert 'MIPS: Alchemy: fix dbdma2' (Greg Kroah-Hartman) - LTS version: v4.14.324 (Saeed Mirzamohammadi) - dma-buf/sw_sync: Avoid recursive lock during fence signal (Rob Clark) - scsi: core: raid_class: Remove raid_component_add() (Zhu Wang) - scsi: snic: Fix double free in snic_tgt_create() (Zhu Wang) - rtnetlink: Reject negative ifindexes in RTM_NEWLINK (Ido Schimmel) - x86/fpu: Set X86_FEATURE_OSXSAVE feature after enabling OSXSAVE in CR4 (Feng Tang) - media: vcodec: Fix potential array out-of-bounds in encoder queue_setup (Wei Chen) - lib/clz_ctz.c: Fix __clzdi2() and __ctzdi2() for 32-bit kernels (Helge Deller) - batman-adv: Fix batadv_v_ogm_aggr_send memory leak (Remi Pommarel) - batman-adv: Fix TT global entry leak when client roamed back (Remi Pommarel) - batman-adv: Do not get eth header before batadv_check_management_packet (Remi Pommarel) - batman-adv: Trigger events for auto adjusted MTU (Sven Eckelmann) - ibmveth: Use dcbf rather than dcbfl (Michael Ellerman) - ipvs: fix racy memcpy in proc_do_sync_threshold (Sishuai Gong) - ipvs: Improve robustness to the ipvs sysctl (Junwei Hu) - igb: Avoid starting unnecessary workqueues (Alessio Igor Bogani) - sock: annotate data-races around prot->memory_pressure (Eric Dumazet) - tracing: Fix memleak due to race between current_tracer and trace (Zheng Yejian) - net: phy: broadcom: stub c45 read/write for 54810 (Justin Chen) - net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure (Lin Ma) - net: fix the RTO timer retransmitting skb every 1ms if linear option is enabled (Jason Xing) - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Kuniyuki Iwashima) - ASoC: rt5665: add missed regulator_bulk_disable (Zhang Shurong) - netfilter: set default timeout to 3 secs for sctp shutdown send and recv state (Xin Long) - test_firmware: prevent race conditions by a correct implementation of locking (Mirsad Goran Todorovac) - binder: fix memory leak in binder_init() (Qi Zheng) - serial: 8250: Fix oops for port->pm on uart_change_pm() (Tony Lindgren) - mmc: wbsd: fix double mmc_free_host() in wbsd_init() (Yang Yingliang) - cifs: Release folio lock on fscache read hit. (Russell Harmon via samba-technical) - ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces. (dengxiang) - net: do not allow gso_size to be set to GSO_BY_FRAGS (Eric Dumazet) - sock: Fix misuse of sk_under_memory_pressure() (Abel Wu) - i40e: fix misleading debug logs (Andrii Staikov) - team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves (Ziyang Xuan) - netfilter: nft_dynset: disallow object maps (Pablo Neira Ayuso) - xfrm: add NULL check in xfrm_update_ae_params (Lin Ma) - ip_vti: fix potential slab-use-after-free in decode_session6 (Zhengchao Shao) - ip6_vti: fix slab-use-after-free in decode_session6 (Zhengchao Shao) - net: af_key: fix sadb_x_filter validation (Lin Ma) - net: xfrm: Fix xfrm_address_filter OOB read (Lin Ma) - fbdev: mmp: fix value check in mmphw_probe() (Yuanjun Gong) - drm/amdgpu: Fix potential fence use-after-free v2 (shanzhulig) - Bluetooth: L2CAP: Fix use-after-free (Zhengping Jiang) - pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db() (Armin Wolf) - gfs2: Fix possible data races in gfs2_show_options() (Tuo Li) - media: platform: mediatek: vpu: fix NULL ptr dereference (Hans Verkuil) - media: v4l2-mem2mem: add lock to protect parameter num_rdy (Yunfei Dong) - FS: JFS: Check for read-only mounted filesystem in txBegin (Immad Mir) - FS: JFS: Fix null-ptr-deref Read in txBegin (Immad Mir) - MIPS: dec: prom: Address -Warray-bounds warning (Gustavo A. R. Silva) - fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev (Yogesh) - udf: Fix uninitialized array access for some pathnames (Jan Kara) - quota: fix warning in dqgrab() (Ye Bin) - quota: Properly disable quotas when add_dquot_ref() fails (Jan Kara) - ALSA: emu10k1: roll up loops in DSP setup code for Audigy (Oswald Buddenhagen) - drm/radeon: Fix integer overflow in radeon_cs_parser_init (hackyzh002) - lib/mpi: Eliminate unused umul_ppmm definitions for MIPS (Nathan Chancellor) - LTS version: v4.14.323 (Saeed Mirzamohammadi) - alpha: remove __init annotation from exported page_is_ram() (Masahiro Yamada) - scsi: core: Fix possible memory leak if device_add() fails (Zhu Wang) - scsi: snic: Fix possible memory leak if device_add() fails (Zhu Wang) - scsi: 53c700: Check that command slot is not NULL (Alexandra Diupina) - scsi: storvsc: Fix handling of virtual Fibre Channel timeouts (Michael Kelley) - scsi: core: Fix legacy /proc parsing buffer overflow (Tony Battersby) - netfilter: nf_tables: report use refcount overflow (Pablo Neira Ayuso) - btrfs: don't stop integrity writeback too early (Christoph Hellwig) - IB/hfi1: Fix possible panic during hotplug remove (Douglas Miller) - drivers: net: prevent tun_build_skb() to exceed the packet size limit (Andrew Kanner) - dccp: fix data-race around dp->dccps_mss_cache (Eric Dumazet) - bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves (Ziyang Xuan) - net/packet: annotate data-races around tp->status (Eric Dumazet) - drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes (Karol Herbst) - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Kirill A. Shutemov) - usb: dwc3: Properly handle processing of pending events (Elson Roy Serrao) - usb-storage: alauda: Fix uninit-value in alauda_check_media() (Alan Stern) - iio: cros_ec: Fix the allocation size for cros_ec_command (Yiyuan Guo) - test_firmware: return ENOMEM instead of ENOSPC on failed memory allocation (Mirsad Goran Todorovac) - nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (Ryusuke Konishi) - radix tree test suite: fix incorrect allocation size for pthreads (Colin Ian King) - dmaengine: pl330: Return DMA_PAUSED when transaction is paused (Ilpo Jarvinen) - ipv6: adjust ndisc_is_useropt() to also return true for PIO (Maciej Zenczykowski) - mmc: moxart: read scr register without changing byte order (Sergei Antonov) - sparc: fix up arch_cpu_finalize_init() build breakage. (Greg Kroah-Hartman) [4.14.35-2047.530.1] - rds: Remove gratuitous include of time.h from rds.h (Mark Haywood) [Orabug: 35742762] - smp: Reduce NMI traffic from CSD waiters to CSD destination (Imran Khan) [Orabug: 35236407] - smp: Reduce logging due to dump_stack of CSD waiters (Imran Khan) [Orabug: 35236407] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-42753 CVE-2023-22024 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7:9:patch cpe:/a:oracle:linux:7::UEKR5 cpe:/a:oracle:linux:7::optional_latest Oracle Linux 7 [5.4.17-2136.324.5.3.el7] - Revert 'jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint' (Sherry Yang) [Orabug: 35896102] [5.4.17-2136.324.5.2.el7] - fix breakage in do_rmdir() (Al Viro) [Orabug: 35885837] [5.4.17-2136.324.5.1.el7] - x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky) [Orabug: 35857366] {CVE-2023-5090} [5.4.17-2136.324.5.el7] - netfilter: nfnetlink_osf: avoid OOB read (Wander Lairson Costa) - dlm: fix plock lookup when using multiple lockspaces (Alexander Aring) - x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Dave Hansen) - Revert 'IB/isert: Fix incorrect release of isert connection' (Leon Romanovsky) - ALSA: ac97: Fix possible error value of *rac97 (Su Hui) - pinctrl: amd: Don't show Invalid config param errors (Mario Limonciello) - netfilter: xt_sctp: validate the flag_info count (Wander Lairson Costa) - netfilter: xt_u32: validate user space input (Wander Lairson Costa) - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Kyle Zeng) [Orabug: 35824287] {CVE-2023-42753} [5.4.17-2136.324.4.el7] - kernfs: fix missing kernfs_iattr_rwsem locking (Ian Kent) [Orabug: 35796771] - x86/microcode: Stop reprobing mitigations after late microcode load (Boris Ostrovsky) [Orabug: 35818857] {CVE-2023-20569} - objtool/x86: Fix SRSO mess (Peter Zijlstra) [Orabug: 35818857] {CVE-2023-20569} - x86/srso: Correct the mitigation status when SMT is disabled (Borislav Petkov (AMD)) [Orabug: 35818857] {CVE-2023-20569} - objtool/x86: Fixup frame-pointer vs rethunk (Peter Zijlstra) [Orabug: 35818857] {CVE-2023-20569} - x86/srso: Disable the mitigation on unaffected configurations (Borislav Petkov (AMD)) [Orabug: 35818857] {CVE-2023-20569} - x86/retpoline: Don't clobber RFLAGS during srso_safe_ret() (Sean Christopherson) [Orabug: 35818857] {CVE-2023-20569} - x86/srso: Explain the untraining sequences a bit more (Borislav Petkov (AMD)) [Orabug: 35818857] {CVE-2023-20569} - x86/cpu: Cleanup the untrain mess (Peter Zijlstra) [Orabug: 35818857] {CVE-2023-20569} - x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (Peter Zijlstra) [Orabug: 35818857] {CVE-2023-20569} - x86/cpu: Rename original retbleed methods (Peter Zijlstra) [Orabug: 35818857] {CVE-2023-20569} - x86/cpu: Clean up SRSO return thunk mess (Peter Zijlstra) [Orabug: 35818857] {CVE-2023-20569} - x86/alternative: Make custom return thunk unconditional (Peter Zijlstra) [Orabug: 35818857] {CVE-2023-20569} - x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (Peter Zijlstra) [Orabug: 35818857] {CVE-2023-20569} - x86/cpu: Fix __x86_return_thunk symbol type (Peter Zijlstra) [Orabug: 35818857] {CVE-2023-20569} - x86/srso: Fix build breakage with the LLVM linker (Nick Desaulniers) [Orabug: 35818857] {CVE-2023-20569} - x86/srso: Tie SBPB bit setting to microcode patch detection (Borislav Petkov (AMD)) [Orabug: 35818857] {CVE-2023-20569} - x86/srso: Fix return thunks in generated code (Josh Poimboeuf) [Orabug: 35818857] {CVE-2023-20569} - x86/srso: Add IBPB on VMEXIT (Borislav Petkov (AMD)) [Orabug: 35818857] {CVE-2023-20569} - x86/srso: Add SRSO_NO support (Borislav Petkov (AMD)) [Orabug: 35818857] {CVE-2023-20569} - x86/srso: Add IBPB_BRTYPE support (Borislav Petkov (AMD)) [Orabug: 35818857] {CVE-2023-20569} - x86/srso: Add a Speculative RAS Overflow mitigation (Borislav Petkov (AMD)) [Orabug: 35818857] {CVE-2023-20569} - scsi: megaraid_sas: Fix deadlock on firmware crashdump (Junxiao Bi) [Orabug: 35819593] - rds: Fix lack of reentrancy for connection reset with dst addr zero (Hakon Bugge) [Orabug: 35819522] {CVE-2023-22024} [5.4.17-2136.324.3.el7] - uek-rpm: aarch64: enable ACPI_AGDI (Mihai Carabas) [Orabug: 34833165] - arm64: sdei: abort running SDEI handlers during crash (D Scott Phillips) [Orabug: 34833165] - ACPI: AGDI: Fix missing prototype warning for acpi_agdi_init() (Ilkka Koskinen) [Orabug: 34833165] - ACPI: AGDI: Add driver for Arm Generic Diagnostic Dump and Reset device (Ilkka Koskinen) [Orabug: 34833165] - ACPI: tables: Add AGDI to the list of known table signatures (Ilkka Koskinen) [Orabug: 34833165] - ACPICA: iASL: Add suppport for AGDI table (Ilkka Koskinen) [Orabug: 34833165] - ACPI: APEI: explicit init of HEST and GHES in apci_init() (Shuai Xue) [Orabug: 34833165] - x86/CPU/AMD: Fix the DIV(0) initial fix attempt (Borislav Petkov (AMD)) [Orabug: 35776936] {CVE-2023-20588} - x86/CPU/AMD: Do not leak quotient data after a division by 0 (Borislav Petkov (AMD)) [Orabug: 35776936] {CVE-2023-20588} - uek-rpm: Pensando: enable PENSANDO_SOC_BSM_ENABLE in the config (Dave Kleikamp) [Orabug: 35787554] [5.4.17-2136.324.2.el7] - LTS tag: v5.4.256 (Sherry Yang) - Revert 'MIPS: Alchemy: fix dbdma2' (Greg Kroah-Hartman) - powerpc/pmac/smp: Drop unnecessary volatile qualifier (YueHaibing) - powerpc/pmac/smp: Avoid unused-variable warnings (Ilie Halip) - LTS tag: v5.4.255 (Sherry Yang) - dma-buf/sw_sync: Avoid recursive lock during fence signal (Rob Clark) - pinctrl: renesas: rza2: Add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} (Biju Das) - clk: Fix undefined reference to clk_rate_exclusive_{get,put}' (Biju Das) - scsi: core: raid_class: Remove raid_component_add() (Zhu Wang) - scsi: snic: Fix double free in snic_tgt_create() (Zhu Wang) - irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable (Jiaxun Yang) - Documentation/sysctl: document page_lock_unfairness (Joel Savitz) - ALSA: pcm: Check for null pointer of pointer substream before dereferencing it (Colin Ian King) - interconnect: Do not skip aggregation for disabled paths (Georgi Djakov) - Revert 'ALSA: pcm: Use SG-buffer only when direct DMA is available' (Takashi Iwai) - ALSA: pcm: Fix build error on m68k and others (Takashi Iwai) - rtnetlink: Reject negative ifindexes in RTM_NEWLINK (Ido Schimmel) - x86/fpu: Set X86_FEATURE_OSXSAVE feature after enabling OSXSAVE in CR4 (Feng Tang) - drm/display/dp: Fix the DP DSC Receiver cap size (Ankit Nautiyal) - PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus (Igor Mammedov) - media: vcodec: Fix potential array out-of-bounds in encoder queue_setup (Wei Chen) - radix tree: remove unused variable (Arnd Bergmann) - lib/clz_ctz.c: Fix __clzdi2() and __ctzdi2() for 32-bit kernels (Helge Deller) - batman-adv: Hold rtnl lock during MTU update via netlink (Sven Eckelmann) - batman-adv: Fix batadv_v_ogm_aggr_send memory leak (Remi Pommarel) - batman-adv: Fix TT global entry leak when client roamed back (Remi Pommarel) - batman-adv: Do not get eth header before batadv_check_management_packet (Remi Pommarel) - batman-adv: Don't increase MTU when set by user (Sven Eckelmann) - batman-adv: Trigger events for auto adjusted MTU (Sven Eckelmann) - nfsd: Fix race to FREE_STATEID and cl_revoked (Benjamin Coddington) - clk: Fix slab-out-of-bounds error in devm_clk_release() (Andrey Skvortsov) - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) - ibmveth: Use dcbf rather than dcbfl (Michael Ellerman) - bonding: fix macvlan over alb bond support (Hangbin Liu) - net: remove bond_slave_has_mac_rcu() (Jakub Kicinski) - net/sched: fix a qdisc modification with ambiguous command request (Jamal Hadi Salim) - igb: Avoid starting unnecessary workqueues (Alessio Igor Bogani) - net: validate veth and vxcan peer ifindexes (Jakub Kicinski) - net: bcmgenet: Fix return value check for fixed_phy_register() (Ruan Jinjie) - net: bgmac: Fix return value check for fixed_phy_register() (Ruan Jinjie) - ipvlan: Fix a reference count leak warning in ipvlan_ns_exit() (Lu Wei) - dccp: annotate data-races in dccp_poll() (Eric Dumazet) - sock: annotate data-races around prot->memory_pressure (Eric Dumazet) - octeontx2-af: SDP: fix receive link config (Hariprasad Kelam) - tracing: Fix memleak due to race between current_tracer and trace (Zheng Yejian) - drm/amd/display: check TG is non-null before checking if enabled (Taimur Hassan) - drm/amd/display: do not wait for mpc idle if tg is disabled (Josip Pavic) - ASoC: fsl_sai: Disable bit clock with transmitter (Matus Gajdos) - ASoC: fsl_sai: Add new added registers and new bit definition (Shengjiu Wang) - ASoC: fsl_sai: Refine enable/disable TE/RE sequence in trigger() (Shengjiu Wang) - regmap: Account for register length in SMBus I/O limits (Mark Brown) - ALSA: pcm: Fix potential data race at PCM memory allocation helpers (Takashi Iwai) - ALSA: pcm: Set per-card upper limit of PCM buffer allocations (Takashi Iwai) - dm integrity: reduce vmalloc space footprint on 32-bit architectures (Mikulas Patocka) - dm integrity: increase RECALC_SECTORS to improve recalculate speed (Mikulas Patocka) - fbdev: fix potential OOB read in fast_imageblit() (Zhang Shurong) - fbdev: Fix sys_imageblit() for arbitrary image widths (Thomas Zimmermann) - fbdev: Improve performance of sys_imageblit() (Thomas Zimmermann) - MIPS: cpu-features: Use boot_cpu_type for CPU type based features (Jiaxun Yang) - MIPS: cpu-features: Enable octeon_cache by cpu_type (Jiaxun Yang) - fs: dlm: fix mismatch of plock results from userspace (Alexander Aring) - fs: dlm: use dlm_plock_info for do_unlock_close (Alexander Aring) - fs: dlm: change plock interrupted message to debug again (Alexander Aring) - fs: dlm: add pid to debug log (Alexander Aring) - dlm: replace usage of found with dedicated list iterator variable (Jakob Koschel) - dlm: improve plock logging if interrupted (Alexander Aring) - PCI: acpiphp: Reassign resources on bridge if necessary (Igor Mammedov) - net: phy: broadcom: stub c45 read/write for 54810 (Justin Chen) - mmc: f-sdh30: fix order of function calls in sdhci_f_sdh30_remove (Yangtao Li) - net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure (Lin Ma) - net: fix the RTO timer retransmitting skb every 1ms if linear option is enabled (Jason Xing) - virtio-net: set queues after driver_ok (Jason Wang) - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Kuniyuki Iwashima) - netfilter: set default timeout to 3 secs for sctp shutdown send and recv state (Xin Long) - mmc: block: Fix in_flight[issue_type] value error (Yibin Ding) - mmc: wbsd: fix double mmc_free_host() in wbsd_init() (Yang Yingliang) - cifs: Release folio lock on fscache read hit. (Russell Harmon via samba-technical) - ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces. (dengxiang) - serial: 8250: Fix oops for port->pm on uart_change_pm() (Tony Lindgren) - ASoC: meson: axg-tdm-formatter: fix channel slot allocation (Jerome Brunet) - ASoC: rt5665: add missed regulator_bulk_disable (Zhang Shurong) - ARM: dts: imx: Set default tuning step for imx6sx usdhc (Xiaolei Wang) - ARM: dts: imx: Set default tuning step for imx7d usdhc (Xiaolei Wang) - ARM: dts: imx: Adjust dma-apbh node name (Stefan Wahren) - ARM: dts: imx7s: Drop dma-apb interrupt-names (Marek Vasut) - bus: ti-sysc: Flush posted write on enable before reset (Tony Lindgren) - bus: ti-sysc: Improve reset to work with modules with no sysconfig (Tony Lindgren) - net: do not allow gso_size to be set to GSO_BY_FRAGS (Eric Dumazet) - sock: Fix misuse of sk_under_memory_pressure() (Abel Wu) - net: dsa: mv88e6xxx: Wait for EEPROM done before HW reset (Alfred Lee) - i40e: fix misleading debug logs (Andrii Staikov) - team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves (Ziyang Xuan) - netfilter: nft_dynset: disallow object maps (Pablo Neira Ayuso) - ipvs: fix racy memcpy in proc_do_sync_threshold (Sishuai Gong) - selftests: mirror_gre_changes: Tighten up the TTL test match (Petr Machata) - xfrm: add NULL check in xfrm_update_ae_params (Lin Ma) {CVE-2023-3772} - ip_vti: fix potential slab-use-after-free in decode_session6 (Zhengchao Shao) - ip6_vti: fix slab-use-after-free in decode_session6 (Zhengchao Shao) - xfrm: fix slab-use-after-free in decode_session6 (Zhengchao Shao) - xfrm: interface: rename xfrm_interface.c to xfrm_interface_core.c (Eyal Birger) - net: af_key: fix sadb_x_filter validation (Lin Ma) - net: xfrm: Fix xfrm_address_filter OOB read (Lin Ma) - btrfs: fix BUG_ON condition in btrfs_cancel_balance (xiaoshoukui) - tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32 platforms (Sherry Sun) - powerpc/rtas_flash: allow user copy to flash block cache objects (Nathan Lynch) - fbdev: mmp: fix value check in mmphw_probe() (Yuanjun Gong) - i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue (Chengfeng Ye) - virtio-mmio: don't break lifecycle of vm_dev (Wolfram Sang) - virtio-mmio: Use to_virtio_mmio_device() to simply code (Tang Bin) - virtio-mmio: convert to devm_platform_ioremap_resource (Yangtao Li) - nfsd: Remove incorrect check in nfsd4_validate_stateid (Trond Myklebust) - nfsd4: kill warnings on testing stateids with mismatched clientids (J. Bruce Fields) - net/ncsi: Fix gma flag setting after response (Vijay Khemka) - tracing/probes: Fix to update dynamic data counter if fetcharg uses it (Masami Hiramatsu (Google)) - tracing/probes: Have process_fetch_insn() take a void * instead of pt_regs (Steven Rostedt (VMware)) - leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev rename (Christian Marangi) - mmc: sunxi: fix deferred probing (Sergey Shtylyov) - mmc: bcm2835: fix deferred probing (Sergey Shtylyov) - USB: dwc3: qcom: fix NULL-deref on suspend (Johan Hovold) - usb: dwc3: qcom: Add helper functions to enable,disable wake irqs (Sandeep Maheswaram) - interconnect: Add helpers for enabling/disabling a path (Georgi Djakov) - interconnect: Move internal structs into a separate file (Georgi Djakov) - irqchip/mips-gic: Use raw spinlock for gic_lock (Jiaxun Yang) - irqchip/mips-gic: Get rid of the reliance on irq_cpu_online() (Marc Zyngier) - ALSA: hda: Fix unhandled register update during auto-suspend period (Takashi Iwai) - PM: runtime: Add pm_runtime_get_if_active() (Sakari Ailus) - PM-runtime: add tracepoints for usage_count changes (Michal Miroslaw) - iio: addac: stx104: Fix race condition when converting analog-to-digital (William Breathitt Gray) - iio: addac: stx104: Fix race condition for stx104_write_raw() (William Breathitt Gray) - iio: stx104: Move to addac subdirectory (William Breathitt Gray) - iio: adc: stx104: Implement and utilize register structures (William Breathitt Gray) - iio: adc: stx104: Utilize iomap interface (William Breathitt Gray) - iio: add addac subdirectory (Cosmin Tanislav) - IMA: allow/fix UML builds (Randy Dunlap) - powerpc/kasan: Disable KCOV in KASAN code (Benjamin Gray) - ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() (Tuo Li) - ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 & Q760 (dengxiang) - drm/amdgpu: Fix potential fence use-after-free v2 (shanzhulig) - pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db() (Armin Wolf) - gfs2: Fix possible data races in gfs2_show_options() (Tuo Li) - usb: chipidea: imx: don't request QoS for imx8ulp (Xu Yang) - media: platform: mediatek: vpu: fix NULL ptr dereference (Hans Verkuil) - media: v4l2-mem2mem: add lock to protect parameter num_rdy (Yunfei Dong) - FS: JFS: Check for read-only mounted filesystem in txBegin (Immad Mir) - FS: JFS: Fix null-ptr-deref Read in txBegin (Immad Mir) - MIPS: dec: prom: Address -Warray-bounds warning (Gustavo A. R. Silva) - fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev (Yogesh) - udf: Fix uninitialized array access for some pathnames (Jan Kara) - ovl: check type and offset of struct vfsmount in ovl_entry (Christian Brauner) - HID: add quirk for 03f0:464a HP Elite Presenter Mouse (Marco Morandini) - quota: fix warning in dqgrab() (Ye Bin) - quota: Properly disable quotas when add_dquot_ref() fails (Jan Kara) - ALSA: emu10k1: roll up loops in DSP setup code for Audigy (Oswald Buddenhagen) - drm/radeon: Fix integer overflow in radeon_cs_parser_init (hackyzh002) - macsec: use DEV_STATS_INC() (Eric Dumazet) - macsec: Fix traffic counters/statistics (Clayton Yager) - selftests: forwarding: tc_flower: Relax success criterion (Ido Schimmel) - mmc: sdhci-f-sdh30: Replace with sdhci_pltfm (Kunihiko Hayashi) - mmc: sdhci_f_sdh30: convert to devm_platform_ioremap_resource (Yangtao Li) - LTS tag: v5.4.254 (Sherry Yang) - sch_netem: fix issues in netem_change() vs get_dist_table() (Eric Dumazet) - alpha: remove __init annotation from exported page_is_ram() (Masahiro Yamada) - scsi: core: Fix possible memory leak if device_add() fails (Zhu Wang) - scsi: snic: Fix possible memory leak if device_add() fails (Zhu Wang) - scsi: 53c700: Check that command slot is not NULL (Alexandra Diupina) - scsi: storvsc: Fix handling of virtual Fibre Channel timeouts (Michael Kelley) - scsi: core: Fix legacy /proc parsing buffer overflow (Tony Battersby) - netfilter: nf_tables: report use refcount overflow (Pablo Neira Ayuso) - nvme-rdma: fix potential unbalanced freeze & unfreeze (Ming Lei) - nvme-tcp: fix potential unbalanced freeze & unfreeze (Ming Lei) - btrfs: set cache_block_group_error if we find an error (Josef Bacik) - btrfs: don't stop integrity writeback too early (Christoph Hellwig) - ibmvnic: Handle DMA unmapping of login buffs in release functions (Nick Child) - net/mlx5: Allow 0 for total host VFs (Daniel Jurgens) - dmaengine: mcf-edma: Fix a potential un-allocated memory access (Christophe JAILLET) - wifi: cfg80211: fix sband iftype data lookup for AP_VLAN (Felix Fietkau) - IB/hfi1: Fix possible panic during hotplug remove (Douglas Miller) - drivers: net: prevent tun_build_skb() to exceed the packet size limit (Andrew Kanner) - dccp: fix data-race around dp->dccps_mss_cache (Eric Dumazet) - bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves (Ziyang Xuan) - net/packet: annotate data-races around tp->status (Eric Dumazet) - mISDN: Update parameter type of dsp_cmx_send() (Nathan Chancellor) - selftests/rseq: Fix build with undefined __weak (Mark Brown) - drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes (Karol Herbst) - x86: Move gds_ucode_mitigated() declaration to header (Arnd Bergmann) - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Kirill A. Shutemov) - x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 (Cristian Ciocaltea) - usb: common: usb-conn-gpio: Prevent bailing out if initial role is none (Prashanth K) - usb: dwc3: Properly handle processing of pending events (Elson Roy Serrao) - usb-storage: alauda: Fix uninit-value in alauda_check_media() (Alan Stern) - binder: fix memory leak in binder_init() (Qi Zheng) - iio: cros_ec: Fix the allocation size for cros_ec_command (Yiyuan Guo) - nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (Ryusuke Konishi) - radix tree test suite: fix incorrect allocation size for pthreads (Colin Ian King) - drm/nouveau/gr: enable memory loads on helper invocation on all channels (Karol Herbst) - dmaengine: pl330: Return DMA_PAUSED when transaction is paused (Ilpo Jarvinen) - ipv6: adjust ndisc_is_useropt() to also return true for PIO (Maciej Zenczykowski) - mmc: moxart: read scr register without changing byte order (Sergei Antonov) - LTS tag: v5.4.253 (Sherry Yang) - Revert 'driver core: Annotate dev_err_probe() with __must_check' (Greg Kroah-Hartman) - drivers: core: fix kernel-doc markup for dev_err_probe() (Mauro Carvalho Chehab) - driver code: print symbolic error code (Michal Miroslaw) - ARM: dts: nxp/imx6sll: fix wrong property name in usbphy node (Xu Yang) - ARM: dts: imx6sll: fixup of operating points (Andreas Kemnade) - ARM: dts: imx: add usb alias (Peng Fan) - ARM: dts: imx: Align L2 cache-controller nodename with dtschema (Krzysztof Kozlowski) - ARM: dts: imx6sll: Make ssi node name same as other platforms (Shengjiu Wang) - arm64: dts: stratix10: fix incorrect I2C property for SCL signal (Dinh Nguyen) - ceph: defer stopping mdsc delayed_work (Xiubo Li) - ceph: use kill_anon_super helper (Jeff Layton) - ceph: show tasks waiting on caps in debugfs caps file (Jeff Layton) - PM: sleep: wakeirq: fix wake irq arming (Johan Hovold) - PM / wakeirq: support enabling wake-up irq after runtime_suspend called (Chunfeng Yun) - selftests/rseq: Play nice with binaries statically linked against glibc 2.35+ (Sean Christopherson) - selftests/rseq: check if libc rseq support is registered (Michael Jeanson) - powerpc/mm/altmap: Fix altmap boundary check (Aneesh Kumar K.V) - mtd: rawnand: omap_elm: Fix incorrect type in assignment (Roger Quadros) - test_firmware: return ENOMEM instead of ENOSPC on failed memory allocation (Mirsad Goran Todorovac) - test_firmware: prevent race conditions by a correct implementation of locking (Mirsad Goran Todorovac) - ext2: Drop fragment support (Jan Kara) - fs: Protect reconfiguration of sb read-write from racing writes (Jan Kara) - net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb (Alan Stern) - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (Sungwoo Kim) - fs/sysv: Null check to prevent null-ptr-deref bug (Prince Kumar Maurya) - net: tap_open(): set sk_uid from current_fsuid() (Laszlo Ersek) {CVE-2023-1076} - net: tun_chr_open(): set sk_uid from current_fsuid() (Laszlo Ersek) {CVE-2023-1076} - mtd: rawnand: meson: fix OOB available bytes for ECC (Arseniy Krasnov) - mtd: spinand: toshiba: Fix ecc_get_status (Olivier Maignial) - USB: zaurus: Add ID for A-300/B-500/C-700 (Ross Maynard) - libceph: fix potential hang in ceph_osdc_notify() (Ilya Dryomov) - scsi: zfcp: Defer fc_rport blocking until after ADISC response (Steffen Maier) - tcp_metrics: fix data-race in tcpm_suck_dst() vs fastopen (Eric Dumazet) - tcp_metrics: annotate data-races around tm->tcpm_net (Eric Dumazet) - tcp_metrics: annotate data-races around tm->tcpm_vals[] (Eric Dumazet) - tcp_metrics: annotate data-races around tm->tcpm_lock (Eric Dumazet) - tcp_metrics: annotate data-races around tm->tcpm_stamp (Eric Dumazet) - tcp_metrics: fix addr_same() helper (Eric Dumazet) - ip6mr: Fix skb_under_panic in ip6mr_cache_report() (Yue Haibing) - net: dcb: choose correct policy to parse DCB_ATTR_BCN (Lin Ma) - net: ll_temac: fix error checking of irq_of_parse_and_map() (Dan Carpenter) - net: ll_temac: Switch to use dev_err_probe() helper (Yang Yingliang) - driver core: add device probe log helper (Andrzej Hajda) - bpf: sockmap: Remove preempt_disable in sock_map_sk_acquire (Tomas Glozar) - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (valis) - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (valis) - net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (valis) - net: add missing data-race annotation for sk_ll_usec (Eric Dumazet) - net: add missing data-race annotations around sk->sk_peek_off (Eric Dumazet) - net: add missing READ_ONCE(sk->sk_rcvbuf) annotation (Eric Dumazet) - net: add missing READ_ONCE(sk->sk_sndbuf) annotation (Eric Dumazet) - net: add missing READ_ONCE(sk->sk_rcvlowat) annotation (Eric Dumazet) - net: annotate data-races around sk->sk_max_pacing_rate (Eric Dumazet) - mISDN: hfcpci: Fix potential deadlock on &hc->lock (Chengfeng Ye) - net: sched: cls_u32: Fix match key mis-addressing (Jamal Hadi Salim) - perf test uprobe_from_different_cu: Skip if there is no gcc (Georg Muller) - rtnetlink: let rtnl_bridge_setlink checks IFLA_BRIDGE_MODE length (Lin Ma) - net/mlx5e: fix return value check in mlx5e_ipsec_remove_trailer() (Yuanjun Gong) - net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx (Zhengchao Shao) - KVM: s390: fix sthyi error handling (Heiko Carstens) - word-at-a-time: use the same return type for has_zero regardless of endianness (ndesaulniers@google.com) - loop: Select I/O scheduler 'none' from inside add_disk() (Bart Van Assche) - perf: Fix function pointer case (Peter Zijlstra) - arm64: Fix bit-shifting UB in the MIDR_CPU_MODEL() macro (D Scott Phillips) - ASoC: cs42l51: fix driver to properly autoload with automatic module loading (Thomas Petazzoni) - net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Pedro Tammela) {CVE-2023-31436} - btrfs: fix race between quota disable and quota assign ioctls (Filipe Manana) - btrfs: qgroup: return ENOTCONN instead of EINVAL when quotas are not enabled (Marcos Paulo de Souza) - btrfs: qgroup: remove one-time use variables for quota_root checks (Marcos Paulo de Souza) - cpufreq: intel_pstate: Drop ACPI _PSS states table patching (Rafael J. Wysocki) - ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily (Rafael J. Wysocki) - ACPI: processor: perflib: Use the 'no limit' frequency QoS (Rafael J. Wysocki) - dm cache policy smq: ensure IO doesn't prevent cleaner policy progress (Joe Thornber) - ASoC: wm8904: Fill the cache for WM8904_ADC_TEST_0 register (Mark Brown) - s390/dasd: fix hanging device after quiesce/resume (Stefan Haberland) - virtio-net: fix race between set queues and probe (Jason Wang) - btrfs: check if the transaction was aborted at btrfs_wait_for_commit() (Filipe Manana) - irq-bcm6345-l1: Do not assume a fixed block to cpu mapping (Jonas Gorski) - tpm_tis: Explicitly check for error code (Alexander Steffen) - btrfs: check for commit error at btrfs_attach_transaction_barrier() (Filipe Manana) - hwmon: (nct7802) Fix for temp6 (PECI1) processed even if PECI1 disabled (Gilles Buloz) - staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext() (Zhang Shurong) - Documentation: security-bugs.rst: clarify CVE handling (Greg Kroah-Hartman) - Documentation: security-bugs.rst: update preferences when dealing with the linux-distros group (Greg Kroah-Hartman) - Revert 'usb: xhci: tegra: Fix error check' (Dan Carpenter) - usb: xhci-mtk: set the dma max_seg_size (Ricardo Ribalda) - USB: quirks: add quirk for Focusrite Scarlett (Lukasz Bartosik) - usb: ohci-at91: Fix the unhandle interrupt when resume (Guiting Shen) - usb: dwc3: don't reset device side if dwc3 was configured as host-only (Jisheng Zhang) - usb: dwc3: pci: skip BYT GPIO lookup table for hardwired phy (Gratian Crisan) - Revert 'usb: dwc3: core: Enable AutoRetry feature in the controller' (Jakub Vanek) - can: gs_usb: gs_can_close(): add missing set of CAN state to CAN_STATE_STOPPED (Marc Kleine-Budde) - USB: serial: simple: sort driver entries (Johan Hovold) - USB: serial: simple: add Kaufmann RKS+CAN VCP (Oliver Neukum) - USB: serial: option: add Quectel EC200A module support (Mohsen Tahmasebi) - USB: serial: option: support Quectel EM060K_128 (Jerry Meng) - serial: sifive: Fix sifive_serial_console_setup() section (Samuel Holland) - serial: 8250_dw: Preserve original value of DLF register (Ruihong Luo) - tracing: Fix warning in trace_buffered_event_disable() (Zheng Yejian) - ring-buffer: Fix wrong stat of cpu_buffer->read (Zheng Yejian) - ata: pata_ns87415: mark ns87560_tf_read static (Arnd Bergmann) - dm raid: fix missing reconfig_mutex unlock in raid_ctr() error paths (Yu Kuai) - block: Fix a source code comment in include/uapi/linux/blkzoned.h (Bart Van Assche) - ASoC: fsl_spdif: Silence output on stop (Matus Gajdos) - drm/msm: Fix IS_ERR_OR_NULL() vs NULL check in a5xx_submit_in_rb() (Gaosheng Cui) - drm/msm/adreno: Fix snapshot BINDLESS_DATA size (Rob Clark) - drm/msm/dpu: drop enum dpu_core_perf_data_bus_id (Dmitry Baryshkov) - RDMA/mlx4: Make check for invalid flags stricter (Dan Carpenter) - benet: fix return value check in be_lancer_xmit_workarounds() (Yuanjun Gong) - net/sched: mqprio: Add length check for TCA_MQPRIO_{MAX/MIN}_RATE64 (Lin Ma) - net/sched: mqprio: add extack to mqprio_parse_nlattr() (Vladimir Oltean) - net/sched: mqprio: refactor nlattr parsing to a separate function (Vladimir Oltean) - platform/x86: msi-laptop: Fix rfkill out-of-sync on MSI Wind U100 (Maxim Mikityanskiy) - team: reset team's flags when down link is P2P device (Hangbin Liu) - bonding: reset bond's flags when down link is P2P device (Hangbin Liu) - tcp: Reduce chance of collisions in inet6_hashfn(). (Stewart Smith) - ipv6 addrconf: fix bug where deleting a mngtmpaddr can create a new temporary address (Maciej Zenczykowski) - ethernet: atheros: fix return value check in atl1e_tso_csum() (Yuanjun Gong) - phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe() (Harshit Mogalapalli) - vxlan: calculate correct header length for GPE (Jiri Benc) - i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir() (Wang Ming) - ext4: fix to check return value of freeze_bdev() in ext4_shutdown() (Chao Yu) - keys: Fix linking a duplicate key to a keyring's assoc_array (Petr Pavlu) - uapi: General notification queue definitions (David Howells) - scsi: qla2xxx: Array index may go out of bound (Nilesh Javali) - pwm: meson: fix handling of period/duty if greater than UINT_MAX (Heiner Kallweit) - pwm: meson: Simplify duplicated per-channel tracking (Uwe Kleine-Konig) - pwm: meson: Remove redundant assignment to variable fin_freq (Colin Ian King) - ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() (Zheng Yejian) - ftrace: Store the order of pages allocated in ftrace_page (Linus Torvalds) - ftrace: Check if pages were allocated before calling free_pages() (Steven Rostedt (VMware)) - ftrace: Add information on number of page groups allocated (Steven Rostedt (VMware)) - fs: dlm: interrupt posix locks only when process is killed (Alexander Aring) - dlm: rearrange async condition return (Alexander Aring) - dlm: cleanup plock_op vs plock_xop (Alexander Aring) - PCI/ASPM: Avoid link retraining race (Ilpo Jarvinen) - PCI/ASPM: Factor out pcie_wait_for_retrain() (Ilpo Jarvinen) - PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link() (Bjorn Helgaas) - ext4: Fix reusing stale buffer heads from last failed mounting (Zhihao Cheng) - ext4: rename journal_dev to s_journal_dev inside ext4_sb_info (Chunguang Xu) - btrfs: fix extent buffer leak after tree mod log failure at split_node() (Filipe Manana) - btrfs: fix race between quota disable and relocation (Filipe Manana) - btrfs: qgroup: catch reserved space leaks at unmount time (Qu Wenruo) - bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent (Zheng Wang) - bcache: remove 'int n' from parameter list of bch_bucket_alloc_set() (Coly Li) - gpio: tps68470: Make tps68470_gpio_output() always set the initial value (Hans de Goede) - jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint (Zhihao Cheng) - jbd2: recheck chechpointing non-dirty buffer (Zhang Yi) - jbd2: remove redundant buffer io error checks (Zhang Yi) - jbd2: fix kernel-doc markups (Mauro Carvalho Chehab) - jbd2: fix incorrect code style (Xianting Tian) - LTS tag: v5.4.252 (Sherry Yang) - x86: fix backwards merge of GDS/SRSO bit (Greg Kroah-Hartman) - xen/netback: Fix buffer overrun triggered by unusual packet (Ross Lagerwall) {CVE-2023-34319} - x86/cpu, kvm: Add support for CPUID_80000021_EAX (Kim Phillips) - x86/cpufeatures: Assign dedicated feature word for CPUID_0x8000001F[EAX] (Sean Christopherson) - x86/cpu: Add VM page flush MSR availablility as a CPUID feature (Tom Lendacky) - x86/cpufeatures: Add SEV-ES CPU feature (Tom Lendacky) - x86/mm: fix poking_init() for Xen PV guests (Juergen Gross) [5.4.17-2136.324.1.el7] - io_uring: add support for registering ring file descriptors (Jens Axboe) [Orabug: 35485491] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rik van Riel) [Orabug: 35655117] - mm,thp,shm: limit gfp mask to no more than specified (Rik van Riel) [Orabug: 35655117] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rik van Riel) [Orabug: 35655117] - uek-rpm: Removing pre scriptlet to not allow firmware downgrade (Samasth Norway Ananda) [Orabug: 35741866] - rds: Remove gratuitous include of time.h from rds.h (Mark Haywood) [Orabug: 35742761] - RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device (Shay Drory) [Orabug: 35750824] - smp: Reduce NMI traffic from CSD waiters to CSD destination (Imran Khan) [Orabug: 35752501] - smp: Reduce logging due to dump_stack of CSD waiters (Imran Khan) [Orabug: 35752501] [5.4.17-2136.323.8.el7] - vhost-scsi: Fix alignment handling with windows (Mike Christie) [Orabug: 35769318] - Revert 'vhost/scsi: support non zerocopy iovecs' (Rajan Shanmugavelu) [Orabug: 35769318] [5.4.17-2136.323.7.el7] - x86: change default to spec_store_bypass_disable=prctl spectre_v2_user=prctl (Andrea Arcangeli) [Orabug: 35725160] - KVM: SVM: Add support for Virtual SPEC_CTRL (Babu Moger) [Orabug: 35725160] - x86/cpufeatures: Add the Virtual SPEC_CTRL feature (Babu Moger) [Orabug: 35725160] - x86/mm: Initialize text poking earlier (Peter Zijlstra) [Orabug: 35744495] - mm: Move mm_cachep initialization to mm_init() (Peter Zijlstra) [Orabug: 35744495] - x86/mm: Use mm_alloc() in poking_init() (Peter Zijlstra) [Orabug: 35744495] - mips: add support for TIF_NOTIFY_SIGNAL (Jens Axboe) [Orabug: 35749111] [5.4.17-2136.323.6.el7] - ek-rpm: Update kernel's linux-firmware dependency. (Brian Maly) [Orabug: 35742717] - nbd: make sure request completion won't concurrent (Yu Kuai) [Orabug: 35339589] - nbd: don't handle response without a corresponding request message (Yu Kuai) [Orabug: 35339589] - nvme: handle effects after freeing the request (Alan Adamson) [Orabug: 35411534] - x86/pkeys: Revert a5eff7259790 ('x86/pkeys: Add PKRU value to init_fpstate') (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - Documentation/x86: Fix backwards on/off logic about YMM support (Dave Hansen) [Orabug: 35714800] {CVE-2022-40982} - x86/xen: Fix secondary processors' FPU initialization (Juergen Gross) [Orabug: 35714800] {CVE-2022-40982} - KVM: Add GDS_NO support to KVM (Daniel Sneddon) [Orabug: 35714800] {CVE-2022-40982} - x86/speculation: Add Kconfig option for GDS (Daniel Sneddon) [Orabug: 35714800] {CVE-2022-40982} - x86/speculation: Add force option to GDS mitigation (Daniel Sneddon) [Orabug: 35714800] {CVE-2022-40982} - x86/speculation: Add Gather Data Sampling mitigation (Daniel Sneddon) [Orabug: 35714800] {CVE-2022-40982} - x86/fpu: Move FPU initialization into arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - x86/fpu: Mark init functions __init (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - x86/fpu: Remove cpuinfo argument from init functions (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - init, x86: Move mem_encrypt_init() into arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - init: Invoke arch_cpu_finalize_init() earlier (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - init: Remove check_bugs() leftovers (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - um/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - sparc/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - sh/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - mips/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - m68k/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - ia64/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - ARM: cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - x86/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - init: Provide arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - scsi: lpfc: Fix null pointer dereference due to prematurely released ndlp (Ketan Mukadam) [Orabug: 35729915] [5.4.17-2136.323.5.el7] - io_uring/net: save msghdr->msg_control for retries (Jens Axboe) [Orabug: 35495339] - io_uring/net: clear msg_controllen on partial sendmsg retry (Jens Axboe) [Orabug: 35495339] - io_uring/net: disable partial retries for recvmsg with cmsg (Jens Axboe) [Orabug: 35495339] - io_uring: hold uring mutex around poll removal (Jens Axboe) [Orabug: 35495339] - io_uring: avoid null-ptr-deref in io_arm_poll_handler (Fedor Pchelkin) [Orabug: 35495339] - io_uring/poll: allow some retries for poll triggering spuriously (Jens Axboe) [Orabug: 35495339] - io_uring: remove MSG_NOSIGNAL from recvmsg (David Lamparter) [Orabug: 35495339] - io_uring/rsrc: disallow multi-source reg buffers (Pavel Begunkov) [Orabug: 35495339] - io_uring: add a conditional reschedule to the IOPOLL cancelation loop (Jens Axboe) [Orabug: 35495339] - io_uring: mark task TASK_RUNNING before handling resume/task work (Jens Axboe) [Orabug: 35495339] - io_uring: handle TIF_NOTIFY_RESUME when checking for task_work (Jens Axboe) [Orabug: 35495339] - io_uring: ensure that io_init_req() passes in the right issue_flags (Jens Axboe) [Orabug: 35495339] - io_uring: add missing lock in io_get_file_fixed (Bing-Jhong Billy Jheng) [Orabug: 35495339] - io_uring/rw: remove leftover debug statement (Jens Axboe) [Orabug: 35495339] - io_uring/rw: ensure kiocb_end_write() is always called (Jens Axboe) [Orabug: 35495339] - io_uring: fix double poll leak on repolling (Pavel Begunkov) [Orabug: 35495339] - io_uring: Clean up a false-positive warning from GCC 9.3.0 (Alviro Iskandar Setiawan) [Orabug: 35495339] - io_uring/net: fix fast_iov assignment in io_setup_async_msg() (Stefan Metzmacher) [Orabug: 35495339] - io_uring: io_kiocb_update_pos() should not touch file for non -1 offset (Jens Axboe) [Orabug: 35495339] - io_uring/rw: defer fsnotify calls to task context (Jens Axboe) [Orabug: 35495339] - io_uring: do not recalculate ppos unnecessarily (Dylan Yudaken) [Orabug: 35495339] - io_uring: update kiocb->ki_pos at execution time (Dylan Yudaken) [Orabug: 35495339] - io_uring: remove duplicated calls to io_kiocb_ppos (Dylan Yudaken) [Orabug: 35495339] - io_uring: ensure that cached task references are always put on exit (Jens Axboe) [Orabug: 35495339] - io_uring: fix CQ waiting timeout handling (Pavel Begunkov) [Orabug: 35495339] - io_uring: lock overflowing for IOPOLL (Pavel Begunkov) [Orabug: 35495339] - io_uring: check for valid register opcode earlier (Jens Axboe) [Orabug: 35495339] - io_uring: fix async accept on O_NONBLOCK sockets (Dylan Yudaken) [Orabug: 35495339] - io_uring: allow re-poll if we made progress (Jens Axboe) [Orabug: 35495339] - io_uring: support MSG_WAITALL for IORING_OP_SEND(MSG) (Jens Axboe) [Orabug: 35495339] - io_uring: add flag for disabling provided buffer recycling (Jens Axboe) [Orabug: 35495339] - io_uring: ensure recv and recvmsg handle MSG_WAITALL correctly (Jens Axboe) [Orabug: 35495339] - io_uring: improve send/recv error handling (Pavel Begunkov) [Orabug: 35495339] - io_uring: don't gate task_work run on TIF_NOTIFY_SIGNAL (Jens Axboe) [Orabug: 35495339] - io_uring/io-wq: only free worker if it was allocated for creation (Jens Axboe) [Orabug: 35495339] - io_uring/io-wq: free worker if task_work creation is canceled (Jens Axboe) [Orabug: 35495339] - io_uring: Fix unsigned 'res' comparison with zero in io_fixup_rw_res() (Harshit Mogalapalli) [Orabug: 35495339] - io_uring: pass in EPOLL_URING_WAKE for eventfd signaling and wakeups (Jens Axboe) [Orabug: 35495339] - eventpoll: add EPOLL_URING_WAKE poll wakeup flag (Jens Axboe) [Orabug: 35495339] - epoll: simplify ep_poll_safewake() for CONFIG_DEBUG_LOCK_ALLOC (Jason Baron) [Orabug: 35495339] - eventfd: provide a eventfd_signal_mask() helper (Jens Axboe) [Orabug: 35495339] - signal: kill JOBCTL_TASK_WORK (Jens Axboe) [Orabug: 35495339] - net: remove cmsg restriction from io_uring based send/recvmsg calls (Jens Axboe) [Orabug: 35495339] - io_uring: import 5.15-stable io_uring (Jens Axboe) [Orabug: 35495339] - fs: provide locked helper variant of close_fd_get_file() (Jens Axboe) [Orabug: 35495339] - file: Rename __close_fd_get_file close_fd_get_file (Eric W. Biederman) [Orabug: 35495339] - fs: push the getname from do_rmdir into the callers (Christoph Hellwig) [Orabug: 35495339] - task_work: unconditionally run task_work from get_signal() (Jens Axboe) [Orabug: 35495339] - Revert 'proc: don't allow async path resolution of /proc/self components' (Jens Axboe) [Orabug: 35495339] - tools headers UAPI: Sync openat2.h with the kernel sources (Arnaldo Carvalho de Melo) [Orabug: 35495339] - fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED (Jens Axboe) [Orabug: 35495339] - fix handling of nd->depth on LOOKUP_CACHED failures in try_to_unlazy* (Al Viro) [Orabug: 35495339] - fs: add support for LOOKUP_CACHED (Jens Axboe) [Orabug: 35495339] - x86/process: setup io_threads more like normal user space threads (Stefan Metzmacher) [Orabug: 35495339] - arch: setup PF_IO_WORKER threads like PF_KTHREAD (Jens Axboe) [Orabug: 35495339] - task_work: remove legacy TWA_SIGNAL path (Jens Axboe) [Orabug: 35495339] - Make sure nd->path.mnt and nd->path.dentry are always valid pointers (Al Viro) [Orabug: 35495339] - fs: make do_renameat2() take struct filename (Jens Axboe) [Orabug: 35495339] - kernel: allow fork with TIF_NOTIFY_SIGNAL pending (Jens Axboe) [Orabug: 35495339] - coredump: Limit what can interrupt coredumps (Eric W. Biederman) [Orabug: 35495339] - arm64: add support for TIF_NOTIFY_SIGNAL (Jens Axboe) [Orabug: 35495339] - arm: add support for TIF_NOTIFY_SIGNAL (Jens Axboe) [Orabug: 35495339] - task_work: Use TIF_NOTIFY_SIGNAL if available (Jens Axboe) [Orabug: 35495339] - entry: Add support for TIF_NOTIFY_SIGNAL (Jens Axboe) [Orabug: 35495339] - x86: Wire up TIF_NOTIFY_SIGNAL (Jens Axboe) [Orabug: 35495339] - signal: Add task_sigpending() helper (Jens Axboe) [Orabug: 35495339] - net: add accept helper not installing fd (Pavel Begunkov) [Orabug: 35495339] - net: provide __sys_shutdown_sock() that takes a socket (Jens Axboe) [Orabug: 35495339] - task_work: add helper for more targeted task_work canceling (Jens Axboe) [Orabug: 35495339] - kernel: don't call do_exit() for PF_IO_WORKER threads (Jens Axboe) [Orabug: 35495339] - kernel: stop masking signals in create_io_thread() (Jens Axboe) [Orabug: 35495339] - iov_iter: add helper to save iov_iter state (Jens Axboe) [Orabug: 35495339] - kernel: provide create_io_thread() helper (Jens Axboe) [Orabug: 35495339] - io_uring: add missing item types for splice request (Bing-Jhong Billy Jheng) [Orabug: 35495339] - io_uring: don't hold uring_lock when calling io_run_task_work* (Hao Xu) [Orabug: 35495339] - io_uring: kill goto error handling in io_sqpoll_wait_sq() (Jens Axboe) [Orabug: 35495339] - io_uring: correct pinned_vm accounting (Pavel Begunkov) [Orabug: 35495339] - io_uring: Use original task for req identity in io_identity_cow() (Lee Jones) [Orabug: 35495339] - io_uring: ensure that send/sendmsg and recv/recvmsg check sqe->ioprio (Jens Axboe) [Orabug: 35495339] - io_uring: use separate list entry for iopoll requests (Jens Axboe) [Orabug: 35495339] - io_uring: add missing item types for various requests (Jens Axboe) [Orabug: 35495339] - io_uring: fix using under-expanded iters (Pavel Begunkov) [Orabug: 35495339] - io_uring: don't re-import iovecs from callbacks (Pavel Begunkov) [Orabug: 35495339] - arm64: Remove TIF_NOHZ (Frederic Weisbecker) [Orabug: 35495339] - arm: Remove TIF_NOHZ (Frederic Weisbecker) [Orabug: 35495339] - x86: Remove TIF_NOHZ (Frederic Weisbecker) [Orabug: 35495339] - context-tracking: Introduce CONFIG_HAVE_TIF_NOHZ (Frederic Weisbecker) [Orabug: 35495339] - x86/entry: Remove _TIF_NOHZ from _TIF_WORK_SYSCALL_ENTRY (Thomas Gleixner) [Orabug: 35495339] - mm: allow a controlled amount of unfairness in the page lock (Linus Torvalds) [Orabug: 35565406] [5.4.17-2136.323.4.el7] - uek-rpm: Disable cls_tcindex in file tcindex-disable.conf (Sherry Yang) [Orabug: 35676248] - uek-rpm: Update kernel's linux-firmware dependency. (Somasundaram Krishnasamy) [Orabug: 35678692] - Revert 'sched/fair: sanitize vruntime of entity being placed' (Saeed Mirzamohammadi) [Orabug: 35683806] - Revert 'sched/fair: Sanitize vruntime of entity being migrated' (Saeed Mirzamohammadi) [Orabug: 35683806] [5.4.17-2136.323.3.el7] - LTS tag: v5.4.251 (Sherry Yang) - tracing/histograms: Return an error if we fail to add histogram to hist_vars list (Mohamed Khalfella) - tcp: annotate data-races around fastopenq.max_qlen (Eric Dumazet) - tcp: annotate data-races around tp->notsent_lowat (Eric Dumazet) - tcp: annotate data-races around rskq_defer_accept (Eric Dumazet) - tcp: annotate data-races around tp->linger2 (Eric Dumazet) - net: Replace the limit of TCP_LINGER2 with TCP_FIN_TIMEOUT_MAX (Cambda Zhu) - tcp: annotate data-races around tp->tcp_tx_delay (Eric Dumazet) - netfilter: nf_tables: can't schedule in nft_chain_validate (Florian Westphal) - netfilter: nf_tables: fix spurious set element insertion failure (Florian Westphal) - llc: Don't drop packet from non-root netns. (Kuniyuki Iwashima) - fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe (Zhang Shurong) - Revert 'tcp: avoid the lookup process failing to get sk in ehash table' (Kuniyuki Iwashima) - net:ipv6: check return value of pskb_trim() (Yuanjun Gong) - iavf: Fix use-after-free in free_netdev (Ding Hui) - net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()/cpsw_ale_set_field() (Tanmay Patil) - pinctrl: amd: Use amd_pinconf_set() for all config options (Mario Limonciello) - fbdev: imxfb: warn about invalid left/right margin (Martin Kaiser) - spi: bcm63xx: fix max prepend length (Jonas Gorski) - igb: Fix igb_down hung on surprise removal (Ying Hsu) - wifi: iwlwifi: mvm: avoid baid size integer overflow (Johannes Berg) - wifi: wext-core: Fix -Wstringop-overflow warning in ioctl_standard_iw_point() (Gustavo A. R. Silva) - devlink: report devlink_port_type_warn source device (Petr Oros) - bpf: Address KCSAN report on bpf_lru_list (Martin KaFai Lau) - sched/fair: Don't balance task to its current running CPU (Yicong Yang) - arm64: mm: fix VA-range sanity check (Mark Rutland) - posix-timers: Ensure timer ID search-loop limit is valid (Thomas Gleixner) - md/raid10: prevent soft lockup while flush writes (Yu Kuai) - md: fix data corruption for raid456 when reshape restart while grow up (Yu Kuai) - nbd: Add the maximum limit of allocated index in nbd_dev_add (Zhong Jinghua) - debugobjects: Recheck debug_objects_enabled before reporting (Tetsuo Handa) - ext4: correct inline offset when handling xattrs in inode body (Eric Whitney) - drm/client: Fix memory leak in drm_client_modeset_probe (Jocelyn Falempe) - drm/client: Fix memory leak in drm_client_target_cloned (Jocelyn Falempe) - can: bcm: Fix UAF in bcm_proc_show() (YueHaibing) - selftests: tc: set timeout to 15 minutes (Matthieu Baerts) - fuse: revalidate: don't invalidate if interrupted (Miklos Szeredi) - btrfs: fix warning when putting transaction with qgroups enabled after abort (Filipe Manana) - perf probe: Add test for regression introduced by switch to die_get_decl_file() (Georg Muller) - drm/atomic: Fix potential use-after-free in nonblocking commits (Daniel Vetter) - scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue (Manish Rangankar) - scsi: qla2xxx: Pointer may be dereferenced (Shreyas Deodhar) - scsi: qla2xxx: Correct the index of array (Bikash Hazarika) - scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() (Nilesh Javali) - scsi: qla2xxx: Fix potential NULL pointer dereference (Bikash Hazarika) - scsi: qla2xxx: Wait for io return on terminate rport (Quinn Tran) - tracing/probes: Fix not to count error code to total length (Masami Hiramatsu (Google)) - tracing: Fix null pointer dereference in tracing_err_log_open() (Mateusz Stachyra) - xtensa: ISS: fix call to split_if_spec (Max Filippov) - ring-buffer: Fix deadloop issue on reading trace_pipe (Zheng Yejian) - tracing/histograms: Add histograms to hist_vars if they have referenced variables (Mohamed Khalfella) - tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk (Christophe JAILLET) - tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error (Christophe JAILLET) - Revert '8250: add support for ASIX devices with a FIFO bug' (Jiaqing Zhao) - meson saradc: fix clock divider mask length (George Stark) - ceph: don't let check_caps skip sending responses for revoke msgs (Xiubo Li) - hwrng: imx-rngc - fix the timeout for init and self check (Martin Kaiser) - firmware: stratix10-svc: Fix a potential resource leak in svc_create_memory_pool() (Christophe JAILLET) - serial: atmel: don't enable IRQs prematurely (Dan Carpenter) - drm/rockchip: vop: Leave vblank enabled in self-refresh (Brian Norris) - drm/atomic: Allow vblank-enabled + self-refresh 'disable' (Brian Norris) - fs: dlm: return positive pid value for F_GETLK (Alexander Aring) - md/raid0: add discard support for the 'original' layout (Jason Baron) - misc: pci_endpoint_test: Re-init completion for every test (Damien Le Moal) - misc: pci_endpoint_test: Free IRQs before removing the device (Damien Le Moal) - PCI: rockchip: Set address alignment for endpoint mode (Damien Le Moal) - PCI: rockchip: Use u32 variable to access 32-bit registers (Rick Wertenbroek) - PCI: rockchip: Fix legacy IRQ generation for RK3399 PCIe endpoint core (Rick Wertenbroek) - PCI: rockchip: Add poll and timeout to wait for PHY PLLs to be locked (Rick Wertenbroek) - PCI: rockchip: Write PCI Device ID to correct register (Rick Wertenbroek) - PCI: rockchip: Assert PCI Configuration Enable bit after probe (Rick Wertenbroek) - PCI: qcom: Disable write access to read only registers for IP v2.3.3 (Manivannan Sadhasivam) - PCI: Add function 1 DMA alias quirk for Marvell 88SE9235 (Robin Murphy) - PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold (Ondrej Zary) - jfs: jfs_dmap: Validate db_l2nbperpage while mounting (Siddh Raman Pant) - ext4: only update i_reserved_data_blocks on successful block allocation (Baokun Li) - ext4: fix wrong unit use in ext4_mb_clear_bb (Kemeng Shi) - erofs: fix compact 4B support for 16k block size (Gao Xiang) - SUNRPC: Fix UAF in svc_tcp_listen_data_ready() (Ding Hui) - misc: fastrpc: Create fastrpc scalar with correct buffer count (Ekansh Gupta) - powerpc: Fail build if using recordmcount with binutils v2.37 (Naveen N Rao) - net: bcmgenet: Ensure MDIO unregistration has clocks enabled (Florian Fainelli) - mtd: rawnand: meson: fix unaligned DMA buffers handling (Arseniy Krasnov) - tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation (Jarkko Sakkinen) - pinctrl: amd: Only use special debounce behavior for GPIO 0 (Mario Limonciello) - pinctrl: amd: Detect internal GPIO0 debounce handling (Mario Limonciello) - pinctrl: amd: Fix mistake in handling clearing pins at startup (Mario Limonciello) - net/sched: make psched_mtu() RTNL-less safe (Pedro Tammela) - net/sched: flower: Ensure both minimum and maximum ports are specified (Ido Schimmel) - cls_flower: Add extack support for src and dst port range options (Guillaume Nault) - wifi: airo: avoid uninitialized warning in airo_get_rate() (Randy Dunlap) - erofs: avoid infinite loop in z_erofs_do_read_page() when reading beyond EOF (Chunhai Guo) - platform/x86: wmi: Break possible infinite loop when parsing GUID (Andy Shevchenko) - platform/x86: wmi: move variables (Barnabas Pocze) - platform/x86: wmi: use guid_t and guid_equal() (Barnabas Pocze) - platform/x86: wmi: remove unnecessary argument (Barnabas Pocze) - platform/x86: wmi: Fix indentation in some cases (Andy Shevchenko) - platform/x86: wmi: Replace UUID redefinitions by their originals (Andy Shevchenko) - ipv6/addrconf: fix a potential refcount underflow for idev (Ziyang Xuan) - NTB: ntb_tool: Add check for devm_kcalloc (Jiasheng Jiang) - NTB: ntb_transport: fix possible memory leak while device_register() fails (Yang Yingliang) - ntb: intel: Fix error handling in intel_ntb_pci_driver_init() (Yuan Can) - NTB: amd: Fix error handling in amd_ntb_pci_driver_init() (Yuan Can) - ntb: idt: Fix error handling in idt_pci_driver_init() (Yuan Can) - udp6: fix udp6_ehashfn() typo (Eric Dumazet) - icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev(). (Kuniyuki Iwashima) - ionic: remove WARN_ON to prevent panic_on_warn (Nitya Sunkad) - net/sched: cls_fw: Fix improper refcount update leads to use-after-free (M A Ramdhan) - net: mvneta: fix txq_map in case of txq_number==1 (Klaus Kudielka) - scsi: qla2xxx: Fix error code in qla2x00_start_sp() (Dan Carpenter) - igc: set TP bit in 'supported' and 'advertising' fields of ethtool_link_ksettings (Prasad Koya) - igc: Remove delay during TX ring configuration (Muhammad Husaini Zulkifli) - drm/panel: simple: Add connector_type for innolux_at043tn24 (Fabio Estevam) - drm/panel: Add and fill drm_panel type field (Laurent Pinchart) - drm/panel: Initialise panel dev and funcs through drm_panel_init() (Laurent Pinchart) - workqueue: clean up WORK_* constant types, clarify masking (Linus Torvalds) - net: lan743x: Don't sleep in atomic context (Moritz Fischer) - block/partition: fix signedness issue for Amiga partitions (Michael Schmitz) - tty: serial: fsl_lpuart: add earlycon for imx8ulp platform (Sherry Sun) - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Thadeu Lima de Souza Cascardo) - netfilter: conntrack: Avoid nf_ct_helper_hash uses after free (Florent Revest) - netfilter: nf_tables: fix scheduling-while-atomic splat (Florian Westphal) - netfilter: nf_tables: unbind non-anonymous set if rule construction fails (Pablo Neira Ayuso) - netfilter: nf_tables: reject unbound anonymous set before commit phase (Pablo Neira Ayuso) - netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain (Pablo Neira Ayuso) - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE (Pablo Neira Ayuso) - netfilter: nf_tables: add rescheduling points during loop detection walks (Florian Westphal) - netfilter: nf_tables: use net_generic infra for transaction data (Florian Westphal) - netfilter: add helper function to set up the nfnetlink header and use it (Pablo Neira Ayuso) - netfilter: nftables: add helper function to set the base sequence number (Pablo Neira Ayuso) - netfilter: nf_tables: fix nat hook table deletion (Florian Westphal) - block: add overflow checks for Amiga partition support (Michael Schmitz) - fanotify: disallow mount/sb marks on kernel internal pseudo fs (Amir Goldstein) - fs: no need to check source (Jan Kara) - ARM: orion5x: fix d2net gpio initialization (Arnd Bergmann) - btrfs: fix race when deleting quota root from the dirty cow roots list (Filipe Manana) - fs: Lock moved directories (Jan Kara) - fs: Establish locking order for unrelated directories (Jan Kara) - Revert 'f2fs: fix potential corruption when moving a directory' (Jan Kara) - ext4: Remove ext4 locking of moved directory (Jan Kara) - fs: avoid empty option when generating legacy mount string (Thomas Weissschuh) - jffs2: reduce stack usage in jffs2_build_xattr_subsystem() (Fabian Frederick) - integrity: Fix possible multiple allocation in integrity_inode_get() (Tianjia Zhang) - bcache: Remove unnecessary NULL point check in node allocations (Zheng Wang) - mmc: sdhci: fix DMA configure compatibility issue when 64bit DMA mode is used. (Chevron Li) - mmc: core: disable TRIM on Micron MTFC4GACAJCN-1M (Robert Marko) - mmc: core: disable TRIM on Kingston EMMC04G-M627 (Robert Marko) - NFSD: add encoding of op_recall flag for write delegation (Dai Ngo) - ALSA: jack: Fix mutex call in snd_jack_report() (Takashi Iwai) - i2c: xiic: Don't try to handle more interrupt events after error (Robert Hancock) - i2c: xiic: Defer xiic_wakeup() and __xiic_start_xfer() in xiic_process() (Marek Vasut) - sh: dma: Fix DMA channel offset calculation (Artur Rojek) - net: dsa: tag_sja1105: fix MAC DA patching from meta frames (Vladimir Oltean) - net/sched: act_pedit: Add size check for TCA_PEDIT_PARMS_EX (Lin Ma) - xsk: Honor SO_BINDTODEVICE on bind (Ilya Maximets) - xsk: Improve documentation for AF_XDP (Magnus Karlsson) - tcp: annotate data races in __tcp_oow_rate_limited() (Eric Dumazet) - net: bridge: keep ports without IFF_UNICAST_FLT in BR_PROMISC mode (Vladimir Oltean) - powerpc: allow PPC_EARLY_DEBUG_CPM only when SERIAL_CPM=y (Randy Dunlap) - f2fs: fix error path handling in truncate_dnode() (Chao Yu) - mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0 (Nishanth Menon) - spi: bcm-qspi: return error if neither hif_mspi nor mspi is available (Jonas Gorski) - Add MODULE_FIRMWARE() for FIRMWARE_TG357766. (Tobias Heider) - sctp: fix potential deadlock on &net->sctp.addr_wq_lock (Chengfeng Ye) - rtc: st-lpc: Release some resources in st_rtc_probe() in case of error (Christophe JAILLET) - pwm: sysfs: Do not apply state to already disabled PWMs (Marek Vasut) - pwm: imx-tpm: force 'real_period' to be zero in suspend (Fancy Fang) - mfd: stmpe: Only disable the regulators if they are enabled (Christophe JAILLET) - KVM: s390: vsie: fix the length of APCB bitmap (Pierre Morel) - mfd: stmfx: Fix error path in stmfx_chip_init (Amelie Delaunay) - serial: 8250_omap: Use force_suspend and resume for system suspend (Tony Lindgren) - mfd: intel-lpss: Add missing check for platform_get_resource (Jiasheng Jiang) - usb: dwc3: qcom: Release the correct resources in dwc3_qcom_remove() (Christophe JAILLET) - KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes (Nico Boehr) - mfd: rt5033: Drop rt5033-battery sub-device (Stephan Gerhold) - usb: hide unused usbfs_notify_suspend/resume functions (Arnd Bergmann) - usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe() (Li Yang) - extcon: Fix kernel doc of property capability fields to avoid warnings (Andy Shevchenko) - extcon: Fix kernel doc of property fields to avoid warnings (Andy Shevchenko) - usb: dwc3: qcom: Fix potential memory leak (Vladislav Efanov) - media: usb: siano: Fix warning due to null work_func_t function pointer (Duoming Zhou) - media: videodev2.h: Fix struct v4l2_input tuner index comment (Marek Vasut) - media: usb: Check az6007_read() return value (Daniil Dulov) - sh: j2: Use ioremap() to translate device tree address into kernel memory (John Paul Adrian Glaubitz) - w1: fix loop in w1_fini() (Dan Carpenter) - block: change all __u32 annotations to __be32 in affs_hardblocks.h (Michael Schmitz) - block: fix signed int overflow in Amiga partition support (Michael Schmitz) - usb: dwc3: gadget: Propagate core init errors to UDC during pullup (Krishna Kurapati) - USB: serial: option: add LARA-R6 01B PIDs (Davide Tronchin) - hwrng: st - keep clock enabled while hwrng is registered (Martin Kaiser) - hwrng: st - Fix W=1 unused variable warning (Herbert Xu) - NFSv4.1: freeze the session table upon receiving NFS4ERR_BADSESSION (Olga Kornievskaia) - ARC: define ASM_NL and __ALIGN(_STR) outside #ifdef __ASSEMBLY__ guard (Masahiro Yamada) - modpost: fix off by one in is_executable_section() (Dan Carpenter) - crypto: marvell/cesa - Fix type mismatch warning (Arnd Bergmann) - modpost: fix section mismatch message for R_ARM_{PC24,CALL,JUMP24} (Masahiro Yamada) - modpost: fix section mismatch message for R_ARM_ABS32 (Masahiro Yamada) - crypto: nx - fix build warnings when DEBUG_FS is not enabled (Randy Dunlap) - hwrng: virtio - Fix race on data_avail and actual data (Herbert Xu) - hwrng: virtio - always add a pending request (Laurent Vivier) - hwrng: virtio - don't waste entropy (Laurent Vivier) - hwrng: virtio - don't wait on cleanup (Laurent Vivier) - hwrng: virtio - add an internal buffer (Laurent Vivier) - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Aneesh Kumar K.V) - pinctrl: at91-pio4: check return value of devm_kasprintf() (Claudiu Beznea) - perf dwarf-aux: Fix off-by-one in die_get_varname() (Namhyung Kim) - pinctrl: cherryview: Return correct value if pin in push-pull mode (Andy Shevchenko) - PCI: Add pci_clear_master() stub for non-CONFIG_PCI (Sui Jingfeng) - PCI: ftpci100: Release the clock resources (Junyan Ye) - PCI: pciehp: Cancel bringup sequence if card is not present (Rongguang Wei) - scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() (Yuchen Yang) - PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free (Ding Hui) - scsi: qedf: Fix NULL dereference in error handling (Jinhong Zhu) - ASoC: imx-audmix: check return value of devm_kasprintf() (Claudiu Beznea) - clk: keystone: sci-clk: check return value of kasprintf() (Claudiu Beznea) - clk: cdce925: check return value of kasprintf() (Claudiu Beznea) - ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer (Su Hui) - clk: tegra: tegra124-emc: Fix potential memory leak (Yuan Can) - drm/radeon: fix possible division-by-zero errors (Nikita Zhandarovich) - drm/amdkfd: Fix potential deallocation of previously deallocated memory. (Daniil Dulov) - fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe() (Christophe JAILLET) - arm64: dts: renesas: ulcb-kf: Remove flow control for SCIF1 (Wolfram Sang) - IB/hfi1: Fix sdma.h tx->num_descs off-by-one errors (Patrick Kelsey) - soc/fsl/qe: fix usb.c build errors (Randy Dunlap) - ASoC: es8316: Do not set rate constraints for unsupported MCLKs (Cristian Ciocaltea) - ASoC: es8316: Increment max value for ALC Capture Target Volume control (Cristian Ciocaltea) - memory: brcmstb_dpfe: fix testing array offset after use (Krzysztof Kozlowski) - ARM: ep93xx: fix missing-prototype warnings (Arnd Bergmann) - drm/panel: simple: fix active size for Ampire AM-480272H3TMQW-T01H (Dario Binacchi) - arm64: dts: qcom: msm8916: correct camss unit address (Krzysztof Kozlowski) - ARM: dts: gta04: Move model property out of pinctrl node (Tony Lindgren) - RDMA/bnxt_re: Fix to remove an unnecessary log (Kalesh AP) - drm: sun4i_tcon: use devm_clk_get_enabled in sun4i_tcon_init_clocks (XuDong Liu) - Input: adxl34x - do not hardcode interrupt trigger type (Marek Vasut) - ARM: dts: BCM5301X: Drop 'clock-names' from the SPI node (Rafal Milecki) - Input: drv260x - sleep between polling GO bit (Luca Weiss) - radeon: avoid double free in ci_dpm_init() (Nikita Zhandarovich) - netlink: Add __sock_i_ino() for __netlink_diag_dump(). (Kuniyuki Iwashima) - ipvlan: Fix return value of ipvlan_queue_xmit() (Cambda Zhu) - netfilter: nf_conntrack_sip: fix the ct_sip_parse_numerical_param() return value. (Ilia.Gavrilov) - netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one (Florian Westphal) - lib/ts_bm: reset initial match offset for every block of text (Jeremy Sowden) - net: nfc: Fix use-after-free caused by nfc_llcp_find_local (Lin Ma) - nfc: llcp: simplify llcp_sock_connect() error paths (Krzysztof Kozlowski) - gtp: Fix use-after-free in __gtp_encap_destroy(). (Kuniyuki Iwashima) - selftests: rtnetlink: remove netdevsim device after ipsec offload test (Sabrina Dubroca) - netlink: do not hard code device address lenth in fdb dumps (Eric Dumazet) - netlink: fix potential deadlock in netlink_set_err() (Eric Dumazet) - wifi: ath9k: convert msecs to jiffies where needed (Dmitry Antipov) - wifi: cfg80211: rewrite merging of inherited elements (Benjamin Berg) - wifi: iwlwifi: pull from TXQs with softirqs disabled (Johannes Berg) - rtnetlink: extend RTEXT_FILTER_SKIP_STATS to IFLA_VF_INFO (Edwin Peer) - wifi: ath9k: Fix possible stall on ath9k_txq_list_has_key() (Remi Pommarel) - memstick r592: make memstick_debug_get_tpc_name() static (Arnd Bergmann) - kexec: fix a memory leak in crash_shrink_memory() (Zhen Lei) - watchdog/perf: more properly prevent false positives with turbo modes (Douglas Anderson) - watchdog/perf: define dummy watchdog_update_hrtimer_threshold() on correct config (Douglas Anderson) - wifi: rsi: Do not set MMC_PM_KEEP_POWER in shutdown (Marek Vasut) - wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes (Fedor Pchelkin) - wifi: ray_cs: Fix an error handling path in ray_probe() (Christophe JAILLET) - wifi: ray_cs: Drop useless status variable in parse_addr() (Andy Shevchenko) - wifi: ray_cs: Utilize strnlen() in parse_addr() (Andy Shevchenko) - wifi: wl3501_cs: Fix an error handling path in wl3501_probe() (Christophe JAILLET) - wl3501_cs: use eth_hw_addr_set() (Jakub Kicinski) - net: create netdev->dev_addr assignment helpers (Jakub Kicinski) - wl3501_cs: Fix misspelling and provide missing documentation (Lee Jones) - wl3501_cs: Remove unnecessary NULL check (Alex Dewar) - wl3501_cs: Fix a bunch of formatting issues related to function docs (Lee Jones) - wifi: atmel: Fix an error handling path in atmel_probe() (Christophe JAILLET) - wifi: orinoco: Fix an error handling path in orinoco_cs_probe() (Christophe JAILLET) - wifi: orinoco: Fix an error handling path in spectrum_cs_probe() (Christophe JAILLET) - regulator: core: Streamline debugfs operations (Geert Uytterhoeven) - regulator: core: Fix more error checking for debugfs_create_dir() (Geert Uytterhoeven) - nfc: llcp: fix possible use of uninitialized variable in nfc_llcp_send_connect() (Krzysztof Kozlowski) - nfc: constify several pointers to u8, char and sk_buff (Krzysztof Kozlowski) - wifi: mwifiex: Fix the size of a memory allocation in mwifiex_ret_802_11_scan() (Christophe JAILLET) - spi: spi-geni-qcom: Correct CS_TOGGLE bit in SPI_TRANS_CFG (Vijaya Krishna Nivarthi) - samples/bpf: Fix buffer overflow in tcp_basertt (Pengcheng Yang) - wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx (Fedor Pchelkin) - wifi: ath9k: fix AR9003 mac hardware hang check register offset calculation (Peter Seiderer) - ima: Fix build warnings (Roberto Sassu) - pstore/ram: Add check for kstrdup (Jiasheng Jiang) - evm: Complete description of evm_inode_setattr() (Roberto Sassu) - ARM: 9303/1: kprobes: avoid missing-declaration warnings (Arnd Bergmann) - powercap: RAPL: Fix CONFIG_IOSF_MBI dependency (Zhang Rui) - PM: domains: fix integer overflow issues in genpd_parse_state() (Nikita Zhandarovich) - clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe (Feng Mingxi) - clocksource/drivers/cadence-ttc: Use ttc driver as platform driver (Rajan Vaja) - tracing/timer: Add missing hrtimer modes to decode_hrtimer_mode(). (Sebastian Andrzej Siewior) - irqchip/jcore-aic: Fix missing allocation of IRQ descriptors (John Paul Adrian Glaubitz) - irqchip/jcore-aic: Kill use of irq_create_strict_mappings() (Marc Zyngier) - md/raid10: fix io loss while replacement replace rdev (Li Nan) - md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request (Li Nan) - md/raid10: fix wrong setting of max_corr_read_errors (Li Nan) - md/raid10: fix overflow of md/safe_mode_delay (Li Nan) - md/raid10: check slab-out-of-bounds in md_bitmap_get_counter (Li Nan) - x86/resctrl: Only show tasks' pid in current pid namespace (Shawn Wang) - x86/resctrl: Use is_closid_match() in more places (James Morse) - bgmac: fix *initial* chip reset to support BCM5358 (Rafal Milecki) - drm/amdgpu: Validate VM ioctl flags. (Bas Nieuwenhuizen) - scripts/tags.sh: Resolve gtags empty index generation (Ahmed S. Darwish) - drm/i915: Initialise outparam for error return from wait_for_register (Chris Wilson) - HID: wacom: Use ktime_t rather than int when dealing with timestamps (Jason Gerecke) - fbdev: imsttfb: Fix use after free bug in imsttfb_probe (Zheng Wang) - video: imsttfb: check for ioremap() failures (Greg Kroah-Hartman) - x86/smp: Use dedicated cache-line for mwait_play_dead() (Thomas Gleixner) - gfs2: Don't deref jdesc in evict (Bob Peterson) - LTS tag: v5.4.250 (Sherry Yang) [5.4.17-2136.323.2.el7] - x86/cpu/amd: Add a Zenbleed fix (Borislav Petkov (AMD)) [Orabug: 35641578] - x86/cpu/amd: Move the errata checking functionality up (Borislav Petkov (AMD)) [Orabug: 35641578] - ocfs2: always read both high and low parts of dinode link count (Alexey Asemov) [Orabug: 35643003] - ovl: Always reevaluate the file signature for IMA (Eric Snowberg) [Orabug: 35646439] - bpf: fix NULL pointer dereferences when vmlinux BTF is absent (Alan Maguire) [Orabug: 35623657] - SUNRPC: Ensure the transport backchannel association (Benjamin Coddington) [Orabug: 35643879] [5.4.17-2136.323.1.el7] - uek-rpm: Change the toolchain version in OL8 (Jack Vogel) [Orabug: 35378775] - net/rds: Allow MSG_NOSIGNAL in sendmsg (Gerd Rausch) [Orabug: 35640816] [5.4.17-2136.322.6.el7] - uek-rpm: Add netfilter modules to nano rpm (Samasth Norway Ananda) [Orabug: 35552175] - scsi: target: iscsi: Fix hang in the iSCSI login code (Maurizio Lombardi) [Orabug: 35484554] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [Orabug: 35484554] - scsi: target: iscsi: Fix login error when receiving (Hou Pu) [Orabug: 35484554] - uek-rpm: Prevent cls_tcindex module to be loaded on demand (Sherry Yang) [Orabug: 35616810] [5.4.17-2136.322.5.el7] - cpufreq: intel_pstate: Adjust balance_performance EPP for Sapphire Rapids (Srinivas Pandruvada) [Orabug: 35524050] - cpufreq: intel_pstate: Update EPP for AlderLake mobile (Srinivas Pandruvada) [Orabug: 35524050] - cpufreq: intel_pstate: Fix active mode offline/online EPP handling (Rafael J. Wysocki) [Orabug: 35524050] - cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable (Srinivas Pandruvada) [Orabug: 35524050] - cpufreq: intel_pstate: Fix unchecked MSR 0x773 access (Srinivas Pandruvada) [Orabug: 35524050] - cpufreq: intel_pstate: Clear HWP desired on suspend/shutdown and offline (Rafael J. Wysocki) [Orabug: 35524050] - cpufreq: intel_pstate: Process HWP Guaranteed change notification (Srinivas Pandruvada) [Orabug: 35524050] - cpufreq: intel_pstate: Override parameters if HWP forced by BIOS (Doug Smythies) [Orabug: 35524050] - cpufreq: intel_pstate: Use HWP if enabled by platform firmware (Rafael J. Wysocki) [Orabug: 35524050] - cpufreq: intel_pstate: Take CPUFREQ_GOV_STRICT_TARGET into account (Rafael J. Wysocki) [Orabug: 35524050] - cpufreq: Add strict_target to struct cpufreq_policy (Rafael J. Wysocki) [Orabug: 35524050] - cpufreq: Introduce CPUFREQ_GOV_STRICT_TARGET (Rafael J. Wysocki) [Orabug: 35524050] - cpufreq: Introduce governor flags (Rafael J. Wysocki) [Orabug: 35524050] - cpufreq: intel_pstate: Avoid missing HWP max updates in passive mode (Rafael J. Wysocki) [Orabug: 35524050] - cpufreq: Introduce CPUFREQ_NEED_UPDATE_LIMITS driver flag (Rafael J. Wysocki) [Orabug: 35524050] - cpufreq: intel_pstate: Add ->offline and ->online callbacks (Rafael J. Wysocki) [Orabug: 35524050] - cpufreq: intel_pstate: Tweak the EPP sysfs interface (Rafael J. Wysocki) [Orabug: 35524050] - cpufreq: intel_pstate: Update cached EPP in the active mode (Rafael J. Wysocki) [Orabug: 35524050] - cpufreq: intel_pstate: Implement passive mode with HWP enabled (Rafael J. Wysocki) [Orabug: 35524050] - cpufreq: intel_pstate: Rearrange the storing of new EPP values (Rafael J. Wysocki) [Orabug: 35524050] - cpufreq: intel_pstate: Avoid enabling HWP if EPP is not supported (Rafael J. Wysocki) [Orabug: 35524050] - cpufreq: intel_pstate: Clean up aperf_mperf_shift description (Rafael J. Wysocki) [Orabug: 35524050] - cpufreq: intel_pstate: Supply struct attribute description for get_aperf_mperf_shift() (Lee Jones) [Orabug: 35524050] - cpufreq: intel_pstate: Fix active mode setting from command line (Rafael J. Wysocki) [Orabug: 35524050] - cpufreq: intel_pstate: Fix static checker warning for epp variable (Srinivas Pandruvada) [Orabug: 35524050] - cpufreq: intel_pstate: Allow raw energy performance preference value (Srinivas Pandruvada) [Orabug: 35524050] - cpufreq: intel_pstate: Allow enable/disable energy efficiency (Srinivas Pandruvada) [Orabug: 35524050] - cpufreq: intel_pstate: Add one more OOB control bit (Srinivas Pandruvada) [Orabug: 35524050] - cpufreq: intel_pstate: Use passive mode by default without HWP (Rafael J. Wysocki) [Orabug: 35524050] [5.4.17-2136.322.4.el7] - tools/resolve_btfids: Use pkg-config to locate libelf (Shen Jiamin) [Orabug: 35110384] - tools resolve_btfids: Always force HOSTARCH (Jiri Olsa) [Orabug: 35110384] - bpf: Fix cross build for CONFIG_DEBUG_INFO_BTF option (Jiri Olsa) [Orabug: 35110384] - bpf: Add BPF_FUNC_jiffies64 (Martin KaFai Lau) [Orabug: 35110384] - selftests/bpf: Add Userspace tests for TCP_WINDOW_CLAMP (Prankur gupta) [Orabug: 35110384] - bpf: Support bitfield read access in btf_struct_access (Martin KaFai Lau) [Orabug: 35110384] - bpf: Enable bpf_skc_to_* sock casting helper to networking prog type (Martin KaFai Lau) [Orabug: 35110384] - bpf: Add bpf_skc_to_{tcp, tcp_timewait, tcp_request}_sock() helpers (Yonghong Song) [Orabug: 35110384] - bpf: Add bpf_skc_to_tcp6_sock() helper (Alan Maguire) [Orabug: 35110384] - bpf: Fix race in btf_resolve_helper_id() (Alexei Starovoitov) [Orabug: 35110384] - bpf: Add PTR_TO_BTF_ID_OR_NULL support (Alan Maguire) [Orabug: 35110384] - bpf: Compile resolve_btfids tool at kernel compilation start (Jiri Olsa) [Orabug: 35110384] - bpf: Resolve BTF IDs in vmlinux image (Jiri Olsa) [Orabug: 35110384] - bpf: Add resolve_btfids tool to resolve BTF IDs in ELF object (Jiri Olsa) [Orabug: 35110384] - bpf: Add BTF_ID_LIST/BTF_ID/BTF_ID_UNUSED macros (Jiri Olsa) [Orabug: 35110384] - bpf: Replace prog_raw_tp+btf_id with prog_tracing (Alexei Starovoitov) [Orabug: 35110384] - bpf: Fix bpf_attr.attach_btf_id check (Alexei Starovoitov) [Orabug: 35110384] - bpf: Prepare btf_ctx_access for non raw_tp use case (Martin KaFai Lau) [Orabug: 35110384] - bpf: Enforce 'return 0' in BTF-enabled raw_tp programs (Alexei Starovoitov) [Orabug: 35110384] - libbpf: Update BTF reloc support to latest Clang format (Andrii Nakryiko) [Orabug: 35110384] - bpf: Add array support to btf_struct_access (Martin KaFai Lau) [Orabug: 35110384] - bpf: Check types of arguments passed into helpers (Alexei Starovoitov) [Orabug: 35110384] - bpf: Add support for BTF pointers to x86 JIT (Alan Maguire) [Orabug: 35110384] - bpf: Add support for BTF pointers to interpreter (Alexei Starovoitov) [Orabug: 35110384] - bpf: Attach raw_tp program with BTF via type name (Alexei Starovoitov) [Orabug: 35110384] - bpf: Implement accurate raw_tp context access via BTF (Alexei Starovoitov) [Orabug: 35110384] - libbpf: Fix strncat bounds error in libbpf_prog_type_by_name (KP Singh) [Orabug: 35110384] - libbpf: Auto-detect btf_id of BTF-based raw_tracepoints (Alexei Starovoitov) [Orabug: 35110384] - bpf: Add attach_btf_id attribute to program load (Alexei Starovoitov) [Orabug: 35110384] - bpf: Process in-kernel BTF (Alexei Starovoitov) [Orabug: 35110384] - bpf: Add typecast to bpf helpers to help BTF generation (Alexei Starovoitov) [Orabug: 35110384] - bpf: Add typecast to raw_tracepoints to help BTF generation (Alexei Starovoitov) [Orabug: 35110384] - RDMA/restrack: Release MR restrack when delete (Mark Zhang) [Orabug: 35256660] [5.4.17-2136.322.3.el7] - xfs: don't drain buffer lru on freeze and read-only remount (Brian Foster) [Orabug: 35389985] - xfs: rename xfs_wait_buftarg() to xfs_buftarg_drain() (Brian Foster) [Orabug: 35389985] [5.4.17-2136.322.2.el7] - LTS tag: v5.4.249 (Sherry Yang) - xfs: verify buffer contents when we skip log replay (Darrick J. Wong) - mm: make wait_on_page_writeback() wait for multiple pending writebacks (Linus Torvalds) - mm: fix VM_BUG_ON(PageTail) and BUG_ON(PageWriteback) (Hugh Dickins) - i2c: imx-lpi2c: fix type char overflow issue when calculating the clock cycle (Clark Wang) - x86/apic: Fix kernel panic when booting with intremap=off and x2apic_phys (Dheeraj Kumar Srivastava) - drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl (Min Li) - drm/exynos: fix race condition UAF in exynos_g2d_exec_ioctl (Min Li) - drm/exynos: vidi: fix a wrong error return (Inki Dae) - ARM: dts: Fix erroneous ADS touchscreen polarities (Linus Walleij) - ASoC: nau8824: Add quirk to active-high jack-detect (Edson Juliano Drosdeck) - s390/cio: unregister device when the only path is gone (Vineeth Vijayan) - usb: gadget: udc: fix NULL dereference in remove() (Dan Carpenter) - nfcsim.c: Fix error checking for debugfs_create_dir (Osama Muhammad) - media: cec: core: don't set last_initiator if tx in progress (Hans Verkuil) - arm64: Add missing Set/Way CMO encodings (Marc Zyngier) - HID: wacom: Add error check to wacom_parse_and_register() (Denis Arefev) - scsi: target: iscsi: Prevent login threads from racing between each other (Maurizio Lombardi) - sch_netem: acquire qdisc lock in netem_change() (Eric Dumazet) - Revert 'net: phy: dp83867: perform soft reset and retain established link' (Francesco Dolcini) - netfilter: nfnetlink_osf: fix module autoload (Pablo Neira Ayuso) - netfilter: nf_tables: disallow element updates of bound anonymous sets (Pablo Neira Ayuso) - be2net: Extend xmit workaround to BE3 chip (Ross Lagerwall) - net: dsa: mt7530: fix trapping frames on non-MT7621 SoC MT7530 switch (Arinc UNAL) - ipvs: align inner_mac_header for encapsulation (Terin Stock) - mmc: usdhi60rol0: fix deferred probing (Sergey Shtylyov) - mmc: sh_mmcif: fix deferred probing (Sergey Shtylyov) - mmc: sdhci-acpi: fix deferred probing (Sergey Shtylyov) - mmc: omap_hsmmc: fix deferred probing (Sergey Shtylyov) - mmc: omap: fix deferred probing (Sergey Shtylyov) - mmc: mvsdio: fix deferred probing (Sergey Shtylyov) - mmc: mvsdio: convert to devm_platform_ioremap_resource (Yangtao Li) - mmc: mtk-sd: fix deferred probing (Sergey Shtylyov) - net: qca_spi: Avoid high load if QCA7000 is not available (Stefan Wahren) - xfrm: Linearize the skb after offloading if needed. (Sebastian Andrzej Siewior) - ieee802154: hwsim: Fix possible memory leaks (Chen Aotian) - x86/mm: Avoid using set_pgd() outside of real PGD pages (Lee Jones) - nilfs2: prevent general protection fault in nilfs_clear_dirty_page() (Ryusuke Konishi) - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) - ip_tunnels: allow VXLAN/GENEVE to inherit TOS/TTL from VLAN (Matthias May) - mmc: meson-gx: remove redundant mmc_request_done() call from irq context (Martin Hundeboll) - cgroup: Do not corrupt task iteration when rebinding subsystem (Xiu Jianfeng) - PCI: hv: Fix a race condition bug in hv_pci_query_relations() (Dexuan Cui) - Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs (Michael Kelley) - nilfs2: fix buffer corruption due to concurrent device reads (Ryusuke Konishi) - media: dvb-core: Fix use-after-free due to race at dvb_register_device() (Hyunwoo Kim) - media: dvbdev: fix error logic at dvb_register_device() (Mauro Carvalho Chehab) - media: dvbdev: Fix memleak in dvb_register_device (Dinghao Liu) - x86/purgatory: remove PGO flags (Ricardo Ribalda) - tracing: Add tracing_reset_all_online_cpus_unlocked() function (Steven Rostedt (Google)) - epoll: ep_autoremove_wake_function should use list_del_init_careful (Benjamin Segall) - list: add 'list_del_init_careful()' to go with 'list_empty_careful()' (Linus Torvalds) - mm: rewrite wait_on_page_bit_common() logic (Linus Torvalds) - nilfs2: reject devices with insufficient block count (Ryusuke Konishi) - LTS tag: v5.4.248 (Sherry Yang) - mmc: block: ensure error propagation for non-blk (Christian Loehle) - drm/nouveau/kms: Fix NULL pointer dereference in nouveau_connector_detect_depth (Alexander Kapshuk) - neighbour: delete neigh_lookup_nodev as not used (Leon Romanovsky) - net: Remove unused inline function dst_hold_and_use() (Gaosheng Cui) - neighbour: Remove unused inline function neigh_key_eq16() (Gaosheng Cui) - afs: Fix vlserver probe RTT handling (David Howells) - selftests/ptp: Fix timestamp printf format for PTP_SYS_OFFSET (Alex Maftei) - net: tipc: resize nlattr array to correct size (Lin Ma) - net: lapbether: only support ethernet devices (Eric Dumazet) - net/sched: cls_api: Fix lockup on flushing explicitly created chain (Vlad Buslov) - drm/nouveau: add nv_encoder pointer check for NULL (Natalia Petrova) - drm/nouveau/kms: Don't change EDID when it hasn't actually changed (Lyude Paul) - drm/nouveau/dp: check for NULL nv_connector->native_mode (Natalia Petrova) - igb: fix nvm.ops.read() error handling (Aleksandr Loktionov) - sctp: fix an error code in sctp_sf_eat_auth() (Dan Carpenter) - ipvlan: fix bound dev checking for IPv6 l3s mode (Hangbin Liu) - IB/isert: Fix incorrect release of isert connection (Saravanan Vajravel) - IB/isert: Fix possible list corruption in CMA handler (Saravanan Vajravel) - IB/isert: Fix dead lock in ib_isert (Saravanan Vajravel) - IB/uverbs: Fix to consider event queue closing also upon non-blocking mode (Yishai Hadas) - iavf: remove mask from iavf_irq_enable_queues() (Ahmed Zaki) - RDMA/rxe: Fix the use-before-initialization error of resp_pkts (Zhu Yanjun) - RDMA/rxe: Removed unused name from rxe_task struct (Bob Pearson) - RDMA/rxe: Remove the unused variable obj (Zhu Yanjun) - net/sched: cls_u32: Fix reference counter leak leading to overflow (Lee Jones) - ping6: Fix send to link-local addresses with VRF. (Guillaume Nault) - netfilter: nfnetlink: skip error delivery on batch in case of ENOMEM (Pablo Neira Ayuso) - spi: fsl-dspi: avoid SCK glitches with continuous transfers (Vladimir Oltean) - spi: spi-fsl-dspi: Remove unused chip->void_write_data (Vladimir Oltean) - usb: dwc3: gadget: Reset num TRBs before giving back the request (Elson Roy Serrao) - serial: lantiq: add missing interrupt ack (Bernhard Seibold) - USB: serial: option: add Quectel EM061KGL series (Jerry Meng) - Remove DECnet support from kernel (Stephen Hemminger) - ALSA: hda/realtek: Add a quirk for Compaq N14JP6 (Edson Juliano Drosdeck) - net: usb: qmi_wwan: add support for Compal RXM-G1 (Wes Huang) - RDMA/uverbs: Restrict usage of privileged QKEYs (Edward Srouji) - nouveau: fix client work fence deletion race (Dave Airlie) - powerpc/purgatory: remove PGO flags (Ricardo Ribalda) - kexec: support purgatories with .text.hot sections (Ricardo Ribalda) - nilfs2: fix possible out-of-bounds segment allocation in resize ioctl (Ryusuke Konishi) - nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key() (Ryusuke Konishi) - nios2: dts: Fix tse_mac 'max-frame-size' property (Janne Grunau) - ocfs2: check new file size on fallocate call (Luis Henriques) - ocfs2: fix use-after-free when unmounting read-only filesystem (Luis Henriques) - drm:amd:amdgpu: Fix missing buffer object unlock in failure path (Sukrut Bellary) - xen/blkfront: Only check REQ_FUA for writes (Ross Lagerwall) - mips: Move initrd_start check after initrd address sanitisation. (Liviu Dudau) - MIPS: Alchemy: fix dbdma2 (Manuel Lauss) - parisc: Flush gatt writes and adjust gatt mask in parisc_agp_mask_memory() (Helge Deller) - parisc: Improve cache flushing for PCXL in arch_sync_dma_for_cpu() (Helge Deller) - btrfs: handle memory allocation failure in btrfs_csum_one_bio (Johannes Thumshirn) - power: supply: Fix logic checking if system is running from battery (Mario Limonciello) - irqchip/meson-gpio: Mark OF related data as maybe unused (Krzysztof Kozlowski) - regulator: Fix error checking for debugfs_create_dir (Osama Muhammad) - platform/x86: asus-wmi: Ignore WMI events with codes 0x7B, 0xC0 (Alexandru Sorodoc) - power: supply: Ratelimit no data debug output (Marek Vasut) - ARM: dts: vexpress: add missing cache properties (Krzysztof Kozlowski) - power: supply: bq27xxx: Use mod_delayed_work() instead of cancel() + schedule() (Hans de Goede) - power: supply: sc27xx: Fix external_power_changed race (Hans de Goede) - power: supply: ab8500: Fix external_power_changed race (Hans de Goede) - s390/dasd: Use correct lock while counting channel queue length (Jan Hoppner) - dasd: refactor dasd_ioctl_information (Christoph Hellwig) - KEYS: asymmetric: Copy sig and digest in public_key_verify_signature() (Roberto Sassu) - test_firmware: fix a memory leak with reqs buffer (Mirsad Goran Todorovac) - LTS tag: v5.4.247 (Sherry Yang) - mtd: spinand: macronix: Add support for MX35LFxGE4AD (YouChing Lin) - btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() (Zixuan Fu) - btrfs: check return value of btrfs_commit_transaction in relocation (Josef Bacik) - rbd: get snapshot context after exclusive lock is ensured to be held (Ilya Dryomov) - drm/atomic: Don't pollute crtc_state->mode_blob with error pointers (Ville Syrjala) - ext4: only check dquot_initialize_needed() when debugging (Theodore Ts'o) - eeprom: at24: also select REGMAP (Randy Dunlap) - i2c: sprd: Delete i2c adapter in .remove's error path (Uwe Kleine-Konig) - bonding (gcc13): synchronize bond_{a,t}lb_xmit() types (Jiri Slaby (SUSE)) - usb: usbfs: Use consistent mmap functions (Ruihan Li) - usb: usbfs: Enforce page requirements for mmap (Ruihan Li) - pinctrl: meson-axg: add missing GPIOA_18 gpio group (Martin Hundeboll) - rbd: move RBD_OBJ_FLAG_COPYUP_ENABLED flag setting (Ilya Dryomov) - Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk (Luiz Augusto von Dentz) - ceph: fix use-after-free bug for inodes when flushing capsnaps (Xiubo Li) - can: j1939: avoid possible use-after-free when j1939_can_rx_register fails (Fedor Pchelkin) - can: j1939: change j1939_netdev_lock type to mutex (Fedor Pchelkin) - can: j1939: j1939_sk_send_loop_abort(): improved error queue handling in J1939 Socket (Oleksij Rempel) - drm/amdgpu: fix xclk freq on CHIP_STONEY (Chia-I Wu) - ALSA: hda/realtek: Add Lenovo P3 Tower platform (RenHai) - ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01 (Ai Chao) - Input: psmouse - fix OOB access in Elantech protocol (Dmitry Torokhov) - Input: xpad - delete a Razer DeathAdder mouse VID/PID entry (Ismael Ferreras Morezuelas) - batman-adv: Broken sync while rescheduling delayed work (Vladislav Efanov) - bnxt_en: Query default VLAN before VNIC setup on a VF (Somnath Kotur) - net: sched: fix possible refcount leak in tc_chain_tmplt_add() (Hangyu Hua) - net: sched: move rtm_tca_policy declaration to include file (Eric Dumazet) - rfs: annotate lockless accesses to RFS sock flow table (Eric Dumazet) - rfs: annotate lockless accesses to sk->sk_rxhash (Eric Dumazet) - netfilter: ipset: Add schedule point in call_ad(). (Kuniyuki Iwashima) - netfilter: conntrack: fix NULL pointer dereference in nf_confirm_cthelper (Tijs Van Buggenhout) - Bluetooth: L2CAP: Add missing checks for invalid DCID (Sungwoo Kim) - Bluetooth: Fix l2cap_disconnect_req deadlock (Ying Hsu) - net: dsa: lan9303: allow vid != 0 in port_fdb_{add|del} methods (Alexander Sverdlin) - neighbour: fix unaligned access to pneigh_entry (Qingfang DENG) - neighbour: Replace zero-length array with flexible-array member (Gustavo A. R. Silva) - spi: qup: Request DMA before enabling clocks (Stephan Gerhold) - i40e: fix build warnings in i40e_alloc.h (Greg Kroah-Hartman) - i40iw: fix build warning in i40iw_manage_apbvt() (Greg Kroah-Hartman) - block/blk-iocost (gcc13): keep large values in a new enum (Jiri Slaby (SUSE)) - blk-iocost: avoid 64-bit division in ioc_timer_fn (Arnd Bergmann) - LTS tag: v5.4.246 (Sherry Yang) - drm/edid: fix objtool warning in drm_cvt_modes() (Linus Torvalds) - wifi: rtlwifi: 8192de: correct checking of IQK reload (Ping-Ke Shih) - drm/edid: Fix uninitialized variable in drm_cvt_modes() (Lyude Paul) - RDMA/bnxt_re: Remove the qp from list only if the qp destroy succeeds (Selvin Xavier) - scsi: dpt_i2o: Do not process completions with invalid addresses (Ben Hutchings) - scsi: dpt_i2o: Remove broken pass-through ioctl (I2OUSERCMD) (Ben Hutchings) - regmap: Account for register length when chunking (Jim Wylder) - test_firmware: fix the memory leak of the allocated firmware buffer (Mirsad Goran Todorovac) - fbcon: Fix null-ptr-deref in soft_cursor (Helge Deller) - ext4: add lockdep annotations for i_data_sem for ea_inode's (Theodore Ts'o) - ext4: disallow ea_inodes with extended attributes (Theodore Ts'o) - ext4: set lockdep subclass for the ea_inode in ext4_xattr_inode_cache_find() (Theodore Ts'o) - ext4: add EA_INODE checking to ext4_iget() (Theodore Ts'o) - tracing/probe: trace_probe_primary_from_call(): checked list_first_entry (Pietro Borrello) - tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break instead of UARTCTRL_SBK (Sherry Sun) - mmc: vub300: fix invalid response handling (Deren Wu) - wifi: rtlwifi: remove always-true condition pointed out by GCC 12 (Jakub Kicinski) - lib/dynamic_debug.c: use address-of operator on section symbols (Nathan Chancellor) - treewide: Remove uninitialized_var() usage (Kees Cook) - kernel/extable.c: use address-of operator on section symbols (Nathan Chancellor) - eth: sun: cassini: remove dead code (Martin Liska) - gcc-12: disable '-Wdangling-pointer' warning for now (Linus Torvalds) - ACPI: thermal: drop an always true check (Adam Borowski) - x86/boot: Wrap literal addresses in absolute_pointer() (Kees Cook) - flow_dissector: work around stack frame size warning (Arnd Bergmann) - ata: libata-scsi: Use correct device no in ata_find_dev() (Damien Le Moal) - scsi: stex: Fix gcc 13 warnings (Bart Van Assche) - misc: fastrpc: reject new invocations during device removal (Richard Acayan) - misc: fastrpc: return -EPIPE to invocations on device removal (Richard Acayan) - usb: gadget: f_fs: Add unbind event before functionfs_unbind (Uttkarsh Aggarwal) - net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818 (Sebastian Krzyszkowiak) - iio: dac: build ad5758 driver when AD5758 is selected (Lukas Bulwahn) - iio: dac: mcp4725: Fix i2c_master_send() return value handling (Marek Vasut) - iio: light: vcnl4035: fixed chip ID check (Frank Li) - HID: wacom: avoid integer overflow in wacom_intuos_inout() (Nikita Zhandarovich) - HID: google: add jewel USB id (Sung-Chi Li) - iio: adc: mxs-lradc: fix the order of two cleanup operations (Jiakai Luo) - mailbox: mailbox-test: fix a locking issue in mbox_test_message_write() (Dan Carpenter) - atm: hide unused procfs functions (Arnd Bergmann) - ALSA: oss: avoid missing-prototype warnings (Arnd Bergmann) - netfilter: conntrack: define variables exp_nat_nla_policy and any_addr with CONFIG_NF_NAT (Tom Rix) - wifi: b43: fix incorrect __packed annotation (Arnd Bergmann) - scsi: core: Decrease scsi_device's iorequest_cnt if dispatch failed (Wenchao Hao) - arm64/mm: mark private VM_FAULT_X defines as vm_fault_t (Min-Hua Chen) - ARM: dts: stm32: add pin map for CAN controller on stm32f7 (Dario Binacchi) - wifi: rtl8xxxu: fix authentication timeout due to incorrect RCR value (Yun Lu) - media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 (Hyunwoo Kim) - media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() (Takashi Iwai) {CVE-2023-31084} - media: dvb-core: Fix use-after-free due on race condition at dvb_net (Hyunwoo Kim) - media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr from ID table (Krzysztof Kozlowski) - media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb() (Hyunwoo Kim) - media: dvb_ca_en50221: fix a size write bug (YongSu Yoo) - media: netup_unidvb: fix irq init by register it at the end of probe (Wei Chen) - media: dvb-usb: dw2102: fix uninit-value in su3000_read_mac_address (Wei Chen) - media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer() (Wei Chen) - media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer (Zhang Shurong) - media: dvb-usb-v2: ce6230: fix null-ptr-deref in ce6230_i2c_master_xfer() (Wei Chen) - media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer() (Wei Chen) - media: dvb-usb: az6027: fix three null-ptr-deref in az6027_i2c_xfer() (Wei Chen) - media: dvb_demux: fix a bug for the continuity counter (YongSu Yoo) - ASoC: ssm2602: Add workaround for playback distortions (Pawel Anikiel) - xfrm: Check if_id in inbound policy/secpath match (Benedict Wong) - ASoC: dwc: limit the number of overrun messages (Maxim Kochetkov) - nbd: Fix debugfs_create_dir error checking (Ivan Orlov) - fbdev: stifb: Fix info entry in sti_struct on error path (Helge Deller) - fbdev: modedb: Add 1920x1080 at 60 Hz video mode (Helge Deller) - media: rcar-vin: Select correct interrupt mode for V4L2_FIELD_ALTERNATE (Niklas Soderlund) - ARM: 9295/1: unwind:fix unwind abort for uleb128 case (Haibo Li) - mailbox: mailbox-test: Fix potential double-free in mbox_test_message_write() (Lee Jones) - watchdog: menz069_wdt: fix watchdog initialisation (Johannes Thumshirn) - mtd: rawnand: marvell: don't set the NAND frequency select (Chris Packham) - mtd: rawnand: marvell: ensure timing values are written (Chris Packham) - net: dsa: mv88e6xxx: Increase wait after reset deactivation (Andreas Svensson) - net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Hangyu Hua) - udp6: Fix race condition in udp6_sendmsg & connect (Vladislav Efanov) - net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report (Pedro Tammela) - ocfs2/dlm: move BITS_TO_BYTES() to bitops.h for wider use (Andy Shevchenko) - net: sched: fix NULL pointer dereference in mq_attach (Zhengchao Shao) - net/sched: Prohibit regrafting ingress or clsact Qdiscs (Peilin Ye) - net/sched: Reserve TC_H_INGRESS (TC_H_CLSACT) for ingress (clsact) Qdiscs (Peilin Ye) - net/sched: sch_clsact: Only create under TC_H_CLSACT (Peilin Ye) - net/sched: sch_ingress: Only create under TC_H_INGRESS (Peilin Ye) - tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if user_mss set (Cambda Zhu) - tcp: deny tcp_disconnect() when threads are waiting (Eric Dumazet) - af_packet: do not use READ_ONCE() in packet_bind() (Eric Dumazet) - mtd: rawnand: ingenic: fix empty stub helper definitions (Arnd Bergmann) - amd-xgbe: fix the false linkup in xgbe_phy_status (Raju Rangoju) - af_packet: Fix data-races of pkt_sk(sk)->num. (Kuniyuki Iwashima) - netrom: fix info-leak in nr_write_internal() (Eric Dumazet) - net/mlx5: fw_tracer, Fix event handling (Shay Drory) - dmaengine: pl330: rename _start to prevent build error (Randy Dunlap) - iommu/rockchip: Fix unwind goto issue (Chao Wang) - RDMA/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx (Kalesh AP) - RDMA/efa: Fix unsupported page sizes in device (Yonatan Nachum) [5.4.17-2136.322.1.el7] - EDAC/i10nm: Add driver decoder for Sapphire Rapids server (Youquan Song) [Orabug: 35524077] - EDAC/i10nm: Add driver decoder for Ice Lake and Tremont CPUs (Youquan Song) [Orabug: 35524077] - EDAC/i10nm: Retrieve and print retry_rd_err_log registers (Youquan Song) [Orabug: 35524077] - EDAC, skx: Retrieve and print retry_rd_err_log registers (Tony Luck) [Orabug: 35524077] - EDAC/i10nm: Release mdev/mbase when failing to detect HBM (Qiuxu Zhuo) [Orabug: 35524077] - EDAC/i10nm: Add support for high bandwidth memory (Qiuxu Zhuo) [Orabug: 35524077] - EDAC: Replace EDAC_DIMM_PTR() macro with edac_get_dimm() function (Robert Richter) [Orabug: 35524077] [5.4.17-2136.321.4.el7] - tick/common: Align tick period during sched_timer setup (Thomas Gleixner) [Orabug: 35520079] - net/rds: Fix endless rds_send_xmit() loop if cp_index > 0 (Gerd Rausch) [Orabug: 35510149] [5.4.17-2136.321.3.el7] - selinux: don't use make's grouped targets feature yet (Paul Moore) - lib: cpu_rmap: Fix potential use-after-free in irq_cpu_rmap_release() (Ben Hutchings) - Revert 'staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE' (Greg Kroah-Hartman) - iommu/amd: Fix compile error for unused function (Joerg Roedel) [Orabug: 35070061] - iommu/amd: Do not Invalidate IRT when IRTE caching is disabled (Suravee Suthikulpanit) [Orabug: 35070061] - iommu/amd: Introduce Disable IRTE Caching Support (Suravee Suthikulpanit) [Orabug: 35070061] - iommu/amd: Remove the unused struct amd_ir_data.ref (Suravee Suthikulpanit) [Orabug: 35070061] - iommu/amd: Switch amd_iommu_update_ga() to use modify_irte_ga() (Joao Martins) [Orabug: 35070061] - iommu/amd: Handle GALog overflows (Joao Martins) [Orabug: 35070061] - iommu/amd: Fix 'Guest Virtual APIC Table Root Pointer' configuration in IRTE (Kishon Vijay Abraham I) [Orabug: 35070061] - KVM: x86: ioapic: Fix level-triggered EOI and userspace I/OAPIC reconfigure race (Adamos Ttofari) [Orabug: 35070061] - xfs: fix AGFL allocation deadlock (Wengang Wang) [Orabug: 35159734] - crypto: api - Demote BUG_ON() in crypto_unregister_alg() to a WARN_ON() (Toke Hoiland-Jorgensen) [Orabug: 35152388] - crypto: qat - drop log level of msg in get_instance_node() (Giovanni Cabiddu) [Orabug: 35152388] - crypto: algapi - make unregistration functions return void (Eric Biggers) [Orabug: 35152388] - bnxt_en: Clear DEFRAG flag in firmware message when retry flashing. (Pavan Chebbi) [Orabug: 35365203] - bnxt_en: Enable batch mode when using HWRM_NVM_MODIFY to flash packages. (Michael Chan) [Orabug: 35365203] - bnxt_en: Retry installing FW package under NO_SPACE error condition. (Pavan Chebbi) [Orabug: 35365203] - bnxt_en: Restructure bnxt_flash_package_from_fw_obj() to execute in a loop. (Pavan Chebbi) [Orabug: 35365203] - bnxt_en: Rearrange the logic in bnxt_flash_package_from_fw_obj(). (Michael Chan) [Orabug: 35365203] - bnxt_en: Refactor bnxt_flash_nvram. (Pavan Chebbi) [Orabug: 35365203] [5.4.17-2136.321.2.el7] - LTS tag: v5.4.245 (Sherry Yang) - netfilter: ctnetlink: Support offloaded conntrack entry deletion (Paul Blakey) - ipv{4,6}/raw: fix output xfrm lookup wrt protocol (Nicolas Dichtel) - binder: fix UAF caused by faulty buffer cleanup (Carlos Llamas) - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (Ruihan Li) - cdc_ncm: Fix the build warning (Alexander Bersenev) - net/mlx5: Devcom, serialize devcom registration (Shay Drory) - net/mlx5: devcom only supports 2 ports (Mark Bloch) - fs: fix undefined behavior in bit shift for SB_NOUSER (Hao Ge) - power: supply: bq24190: Call power_supply_changed() after updating input current (Hans de Goede) - power: supply: core: Refactor power_supply_set_input_current_limit_from_supplier() (Hans de Goede) - power: supply: bq27xxx: After charger plug in/out wait 0.5s for things to stabilize (Hans de Goede) - net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize (Tudor Ambarus) - cdc_ncm: Implement the 32-bit version of NCM Transfer Block (Alexander Bersenev) - LTS tag: v5.4.244 (Sherry Yang) - 3c589_cs: Fix an error handling path in tc589_probe() (Christophe JAILLET) - net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device (Shay Drory) - net/mlx5: Fix error message when failing to allocate device memory (Roi Dayan) - forcedeth: Fix an error handling path in nv_probe() (Christophe JAILLET) - ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg (Cezary Rojewski) - x86/show_trace_log_lvl: Ensure stack pointer is aligned, again (Vernon Lovejoy) - xen/pvcalls-back: fix double frees with pvcalls_new_active_socket() (Dan Carpenter) - coresight: Fix signedness bug in tmc_etr_buf_insert_barrier_packet() (Dan Carpenter) - power: supply: sbs-charger: Fix INHIBITED bit for Status reg (Daisuke Nojiri) - power: supply: bq27xxx: Fix poll_interval handling and races on remove (Hans de Goede) - power: supply: bq27xxx: Fix I2C IRQ race on remove (Hans de Goede) - power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition (Hans de Goede) - power: supply: leds: Fix blink to LED on transition (Hans de Goede) - ipv6: Fix out-of-bounds access in ipv6_find_tlv() (Gavrilov Ilia) - bpf: Fix mask generation for 32-bit narrow loads of 64-bit fields (Will Deacon) - net: fix skb leak in __skb_tstamp_tx() (Pratyush Yadav) - media: radio-shark: Add endpoint checks (Alan Stern) - USB: sisusbvga: Add endpoint checks (Alan Stern) - USB: core: Add routines for endpoint checks in old drivers (Alan Stern) - udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated(). (Kuniyuki Iwashima) - net: fix stack overflow when LRO is disabled for virtual interfaces (Taehee Yoo) - fbdev: udlfb: Fix endpoint check (Alan Stern) - debugobjects: Don't wake up kswapd from fill_pool() (Tetsuo Handa) - x86/topology: Fix erroneous smp_num_siblings on Intel Hybrid platforms (Zhang Rui) - parisc: Fix flush_dcache_page() for usage from irq context (Helge Deller) - selftests/memfd: Fix unknown type name build failure (Hardik Garg) - x86/mm: Avoid incomplete Global INVLPG flushes (Dave Hansen) - btrfs: use nofs when cleaning up aborted transactions (Josef Bacik) - gpio: mockup: Fix mode of debugfs files (Zev Weiss) - parisc: Allow to reboot machine after system halt (Helge Deller) - parisc: Handle kgdb breakpoints only in kernel context (Helge Deller) - m68k: Move signal frame following exception on 68020/030 (Finn Thain) - ALSA: hda/realtek: Enable headset onLenovo M70/M90 (Bin Li) - ALSA: hda/ca0132: add quirk for EVGA X299 DARK (Adam Stylinski) - mt76: mt7615: Fix build with older compilers (Pablo Greco) - spi: fsl-cpm: Use 16 bit mode for large transfers with even size (Christophe Leroy) - spi: fsl-spi: Re-organise transfer bits_per_word adaptation (Christophe Leroy) - watchdog: sp5100_tco: Immediately trigger upon starting. (Gregory Oakes) - s390/qdio: fix do_sqbs() inline assembly constraint (Heiko Carstens) - s390/qdio: get rid of register asm (Heiko Carstens) - vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF (George Kennedy) - vc_screen: rewrite vcs_size to accept vc, not inode (Jiri Slaby) - usb: gadget: u_ether: Fix host MAC address case (Konrad Grafe) - usb: gadget: u_ether: Convert prints to device prints (Jon Hunter) - lib/string_helpers: Introduce string_upper() and string_lower() helpers (Vadim Pasternak) - HID: wacom: add three styli to wacom_intuos_get_tool_type (Ping Cheng) - HID: wacom: Add new Intuos Pro Small (PTH-460) device IDs (Ping Cheng) - HID: wacom: Force pen out of prox if no events have been received in a while (Jason Gerecke) - netfilter: nf_tables: hold mutex on netns pre_exit path (Pablo Neira Ayuso) - netfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on NFT_SET_OBJECT flag (Pablo Neira Ayuso) - netfilter: nf_tables: stricter validation of element data (Pablo Neira Ayuso) - netfilter: nf_tables: allow up to 64 bytes in the set element data area (Pablo Neira Ayuso) - netfilter: nf_tables: add nft_setelem_parse_key() (Pablo Neira Ayuso) - netfilter: nf_tables: validate registers coming from userspace. (Pablo Neira Ayuso) - netfilter: nftables: statify nft_parse_register() (Pablo Neira Ayuso) - netfilter: nftables: add nft_parse_register_store() and use it (Pablo Neira Ayuso) - netfilter: nftables: add nft_parse_register_load() and use it (Pablo Neira Ayuso) - nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode() (Ryusuke Konishi) - powerpc/64s/radix: Fix soft dirty tracking (Michael Ellerman) - tpm/tpm_tis: Disable interrupts for more Lenovo devices (Jerry Snitselaar) - ceph: force updating the msg pointer in non-split case (Xiubo Li) - serial: Add support for Advantech PCI-1611U card (Vitaliy Tomin) - statfs: enforce statfs[64] structure initialization (Ilya Leoshkevich) - KVM: x86: do not report a vCPU as preempted outside instruction boundaries (Paolo Bonzini) - can: kvaser_pciefd: Disable interrupts in probe error path (Jimmy Assarsson) - can: kvaser_pciefd: Do not send EFLUSH command on TFD interrupt (Jimmy Assarsson) - can: kvaser_pciefd: Clear listen-only bit if not explicitly requested (Jimmy Assarsson) - can: kvaser_pciefd: Empty SRB buffer in probe (Jimmy Assarsson) - can: kvaser_pciefd: Call request_irq() before enabling interrupts (Jimmy Assarsson) - can: kvaser_pciefd: Set CAN_STATE_STOPPED in kvaser_pciefd_stop() (Jimmy Assarsson) - can: j1939: recvmsg(): allow MSG_CMSG_COMPAT flag (Oliver Hartkopp) - ALSA: hda/realtek: Add quirk for 2nd ASUS GU603 (Luke D. Jones) - ALSA: hda/realtek: Add a quirk for HP EliteDesk 805 (Ai Chao) - ALSA: hda: Add NVIDIA codec IDs a3 through a7 to patch table (Nikhil Mahale) - ALSA: hda: Fix Oops by 9.1 surround channel names (Takashi Iwai) - usb: typec: altmodes/displayport: fix pin_assignment_show (Badhri Jagan Sridharan) - usb: dwc3: debugfs: Resume dwc3 before accessing registers (Udipto Goswami) - USB: UHCI: adjust zhaoxin UHCI controllers OverCurrent bit value (Weitao Wang) - usb-storage: fix deadlock when a scsi command timeouts more than once (Maxime Bizon) - USB: usbtmc: Fix direction for 0-length ioctl control messages (Alan Stern) - vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit() (Eric Dumazet) - igb: fix bit_shift to be in [1..8] range (Aleksandr Loktionov) - cassini: Fix a memory leak in the error handling path of cas_init_one() (Christophe JAILLET) - wifi: iwlwifi: mvm: don't trust firmware n_channels (Johannes Berg) - net: bcmgenet: Restore phy_stop() depending upon suspend/close (Florian Fainelli) - net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop() (Florian Fainelli) - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (Dong Chenchen) - drm/exynos: fix g2d_open/close helper function definitions (Arnd Bergmann) - media: netup_unidvb: fix use-after-free at del_timer() (Duoming Zhou) - net: hns3: fix reset delay time to avoid configuration timeout (Jie Wang) - net: hns3: fix sending pfc frames after reset issue (Jijie Shao) - erspan: get the proto with the md version for collect_md (Xin Long) - ip_gre, ip6_gre: Fix race condition on o_seqno in collect_md mode (Peilin Ye) - ip6_gre: Make o_seqno start from 0 in native mode (Peilin Ye) - ip6_gre: Fix skb_under_panic in __gre6_xmit() (Peilin Ye) - serial: arc_uart: fix of_iomap leak in arc_serial_probe (Ke Zhang) - vsock: avoid to close connected socket after the timeout (Zhuang Shengen) - ALSA: firewire-digi00x: prevent potential use after free (Dan Carpenter) - net: fec: Better handle pm_runtime_get() failing in .remove() (Uwe Kleine-Konig) - af_key: Reject optional tunnel/BEET mode templates in outbound policies (Tobias Brunner) - cpupower: Make TSC read per CPU for Mperf monitor (Wyes Karny) - ASoC: fsl_micfil: register platform component before registering cpu dai (Shengjiu Wang) - btrfs: fix space cache inconsistency after error loading it from disk (Filipe Manana) - btrfs: replace calls to btrfs_find_free_ino with btrfs_find_free_objectid (Nikolay Borisov) - mfd: dln2: Fix memory leak in dln2_probe() (Qiang Ning) - phy: st: miphy28lp: use _poll_timeout functions for waits (Alain Volmat) - Input: xpad - add constants for GIP interface numbers (Vicki Pfau) - iommu/arm-smmu-v3: Acknowledge pri/event queue overflow if any (Tomas Krcka) - clk: tegra20: fix gcc-7 constant overflow warning (Arnd Bergmann) - RDMA/core: Fix multiple -Warray-bounds warnings (Gustavo A. R. Silva) - recordmcount: Fix memory leaks in the uwrite function (Hao Zeng) - sched: Fix KCSAN noinstr violation (Josh Poimboeuf) - mcb-pci: Reallocate memory region to avoid memory overlapping (Rodriguez Barbarin, Jose Javier) - serial: 8250: Reinit port->pm on port specific driver unbind (Tony Lindgren) - usb: typec: tcpm: fix multiple times discover svids error (Frank Wang) - HID: wacom: generic: Set battery quirk only when we see battery data (Jason Gerecke) - spi: spi-imx: fix MX51_ECSPI_* macros when cs > 3 (Kevin Groeneveld) - HID: logitech-hidpp: Reconcile USB and Unifying serials (Bastien Nocera) - HID: logitech-hidpp: Don't use the USB serial for USB devices (Bastien Nocera) - staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE (Philipp Hortmann) - Bluetooth: L2CAP: fix 'bad unlock balance' in l2cap_disconnect_rsp (Min Li) - wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace (Hans de Goede) - wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf (Hyunwoo Kim) - wifi: iwlwifi: pcie: fix possible NULL pointer dereference (Daniel Gabay) - samples/bpf: Fix fout leak in hbm's run_bpf_prog (Hao Zeng) - f2fs: fix to drop all dirty pages during umount() if cp_error is set (Chao Yu) - ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa() (Ojaswin Mujoo) - ext4: set goal start correctly in ext4_mb_normalize_request (Kemeng Shi) - gfs2: Fix inode height consistency check (Andreas Gruenbacher) - scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition (Zheng Wang) - lib: cpu_rmap: Avoid use after free on rmap->obj array entries (Eli Cohen) - net: Catch invalid index in XPS mapping (Nick Child) - net: pasemi: Fix return type of pasemi_mac_start_tx() (Nathan Chancellor) - scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow (Justin Tee) - ext2: Check block size validity during mount (Jan Kara) - wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex (Hector Martin) - ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects (void0red) - ACPICA: Avoid undefined behavior: applying zero offset to null pointer (Tamir Duberstein) - drm/tegra: Avoid potential 32-bit integer overflow (Nur Hussein) - ACPI: EC: Fix oops when removing custom query handlers (Armin Wolf) - firmware: arm_sdei: Fix sleep from invalid context BUG (Sherry Yang) - memstick: r592: Fix UAF bug in r592_remove due to race condition (Zheng Wang) - regmap: cache: Return error in cache sync operations for REGCACHE_NONE (Alexander Stein) - drm/amd/display: Use DC_LOG_DC in the trasform pixel function (Rodrigo Siqueira) - fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode() (Tetsuo Handa) - af_unix: Fix data races around sk->sk_shutdown. (Kuniyuki Iwashima) - af_unix: Fix a data race of sk->sk_receive_queue->qlen. (Kuniyuki Iwashima) - net: datagram: fix data-races in datagram_poll() (Eric Dumazet) - ipvlan:Fix out-of-bounds caused by unclear skb->cb (t.feng) - net: add vlan_get_protocol_and_depth() helper (Eric Dumazet) - net: tap: check vlan with eth_type_vlan() method (Menglong Dong) - net: annotate sk->sk_err write from do_recvmmsg() (Eric Dumazet) - netlink: annotate accesses to nlk->cb_running (Eric Dumazet) - netfilter: conntrack: fix possible bug_on with enable_hooks=1 (Florian Westphal) - net: Fix load-tearing on sk->sk_stamp in sock_recv_cmsgs(). (Kuniyuki Iwashima) - linux/dim: Do nothing if no time delta between samples (Roy Novich) - ARM: 9296/1: HP Jornada 7XX: fix kernel-doc warnings (Randy Dunlap) - drm/mipi-dsi: Set the fwnode for mipi_dsi_device (Saravana Kannan) - driver core: add a helper to setup both the of_node and fwnode of a device (Ioana Ciornei) - LTS tag: v5.4.243 (Sherry Yang) - drm/amd/display: Fix hang when skipping modeset (Aurabindo Pillai) - mm/page_alloc: fix potential deadlock on zonelist_update_seq seqlock (Tetsuo Handa) - drm/exynos: move to use request_irq by IRQF_NO_AUTOEN flag (Tian Tao) - drm/msm/adreno: Fix null ptr access in adreno_gpu_cleanup() (Akhil P Oommen) - firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe() (Yang Yingliang) - drm/msm: Fix double pm_runtime_disable() call (Maximilian Luz) - PM: domains: Restore comment indentation for generic_pm_domain.child_links (Geert Uytterhoeven) - printk: declare printk_deferred_{enter,safe}() in include/linux/printk.h (Tetsuo Handa) - PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock (Lukas Wunner) - PCI: pciehp: Use down_read/write_nested(reset_lock) to fix lockdep errors (Hans de Goede) - drbd: correctly submit flush bio on barrier (Christoph Bohmwalder) - serial: 8250: Fix serial8250_tx_empty() race with DMA Tx (Ilpo Jarvinen) - tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH (Ilpo Jarvinen) - ext4: fix invalid free tracking in ext4_xattr_move_to_block() (Theodore Ts'o) - ext4: remove a BUG_ON in ext4_mb_release_group_pa() (Theodore Ts'o) - ext4: bail out of ext4_xattr_ibody_get() fails for any reason (Theodore Ts'o) - ext4: add bounds checking in get_max_inline_xattr_value_size() (Theodore Ts'o) - ext4: fix deadlock when converting an inline directory in nojournal mode (Theodore Ts'o) - ext4: improve error recovery code paths in __ext4_remount() (Theodore Ts'o) - ext4: fix data races when using cached status extents (Jan Kara) - ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum (Tudor Ambarus) - ext4: fix WARNING in mb_find_extent (Ye Bin) - HID: wacom: insert timestamp to packed Bluetooth (BT) events (Ping Cheng) - HID: wacom: Set a default resolution for older tablets (Ping Cheng) - drm/amdgpu: disable sdma ecc irq only when sdma RAS is enabled in suspend (Guchun Chen) - drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy gfx ras (Guchun Chen) - drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini() (Hamza Mahfooz) - drm/panel: otm8009a: Set backlight parent to panel device (James Cowgill) - f2fs: fix potential corruption when moving a directory (Jaegeuk Kim) - ARM: dts: s5pv210: correct MIPI CSIS clock name (Krzysztof Kozlowski) - ARM: dts: exynos: fix WM8960 clock name in Itop Elite (Krzysztof Kozlowski) - remoteproc: st: Call of_node_put() on iteration error (Mathieu Poirier) - remoteproc: stm32: Call of_node_put() on iteration error (Mathieu Poirier) - sh: nmi_debug: fix return value of __setup handler (Randy Dunlap) - sh: init: use OF_EARLY_FLATTREE for early init (Randy Dunlap) - sh: math-emu: fix macro redefined warning (Randy Dunlap) - inotify: Avoid reporting event with invalid wd (Jan Kara) - platform/x86: touchscreen_dmi: Add info for the Dexp Ursus KX210i (Andrey Avdeev) - cifs: fix pcchunk length type in smb2_copychunk_range (Pawel Witek) - btrfs: print-tree: parent bytenr must be aligned to sector size (Anastasia Belova) - btrfs: don't free qgroup space unless specified (Josef Bacik) - btrfs: fix btrfs_prev_leaf() to not return the same key twice (Filipe Manana) - perf symbols: Fix return incorrect build_id size in elf_read_build_id() (Yang Jihong) - perf map: Delete two variable initialisations before null pointer checks in sort__sym_from_cmp() (Markus Elfring) - perf vendor events power9: Remove UTF-8 characters from JSON files (Kajol Jain) - virtio_net: suppress cpu stall when free_unused_bufs (Wenliang Wang) - virtio_net: split free_unused_bufs() (Xuan Zhuo) - net: dsa: mt7530: fix corrupt frames using trgmii on 40 MHz XTAL MT7621 (Arinc UNAL) - ALSA: caiaq: input: Add error handling for unsupported input methods in snd_usb_caiaq_input_init (Ruliang Lin) - drm/amdgpu: add a missing lock for AMDGPU_SCHED (Chia-I Wu) - af_packet: Don't send zero-byte data in packet_sendmsg_spkt(). (Kuniyuki Iwashima) - ionic: remove noise from ethtool rxnfc error msg (Shannon Nelson) - rxrpc: Fix hard call timeout units (David Howells) - net/sched: act_mirred: Add carrier check (Victor Nogueira) - writeback: fix call of incorrect macro (Maxim Korotkov) - net: dsa: mv88e6xxx: add mv88e6321 rsvd2cpu (Angelo Dureghello) - sit: update dev->needed_headroom in ipip6_tunnel_bind_dev() (Cong Wang) - net/sched: cls_api: remove block_cb from driver_list before freeing (Vlad Buslov) - net/ncsi: clear Tx enable mode when handling a Config required AEN (Cosmo Chou) - relayfs: fix out-of-bounds access in relay_file_read (Zhang Zhengming) - kernel/relay.c: fix read_pos error when multiple readers (Pengcheng Yang) - crypto: safexcel - Cleanup ring IRQ workqueues on load failure (Jonathan McDowell) - crypto: inside-secure - irq balance (Sven Auhagen) - dm verity: fix error handling for check_at_most_once on FEC (Yeongjin Gil) - dm verity: skip redundant verity_handle_err() on I/O errors (Akilesh Kailash) - mailbox: zynqmp: Fix counts of child nodes (Tanmay Shah) - mailbox: zynq: Switch to flexible array to simplify code (Christophe JAILLET) - tick/nohz: Fix cpu_is_hotpluggable() by checking with nohz subsystem (Joel Fernandes (Google)) - nohz: Add TICK_DEP_BIT_RCU (Frederic Weisbecker) - debugobject: Ensure pool refill (again) (Thomas Gleixner) - perf intel-pt: Fix CYC timestamps after standalone CBR (Adrian Hunter) - perf auxtrace: Fix address filter entire kernel size (Adrian Hunter) - dm ioctl: fix nested locking in table_clear() to remove deadlock concern (Mike Snitzer) - dm flakey: fix a crash with invalid table line (Mikulas Patocka) - dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path (Mike Snitzer) - dm clone: call kmem_cache_destroy() in dm_clone_init() error path (Mike Snitzer) - s390/dasd: fix hanging blockdevice after request requeue (Stefan Haberland) - btrfs: scrub: reject unsupported scrub flags (Qu Wenruo) - scripts/gdb: fix lx-timerlist for Python3 (Peng Liu) - clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent (Quentin Schulz) - wifi: rtl8xxxu: RTL8192EU always needs full init (Bitterblue Smith) - mailbox: zynqmp: Fix typo in IPI documentation (Tanmay Shah) - mailbox: zynqmp: Fix IPI isr handling (Tanmay Shah) - md/raid10: fix null-ptr-deref in raid10_sync_request (Li Nan) - nilfs2: fix infinite loop in nilfs_mdt_get_block() (Ryusuke Konishi) - nilfs2: do not write dirty data after degenerating to read-only (Ryusuke Konishi) - parisc: Fix argument pointer in real64_call_asm() (Helge Deller) - afs: Fix updating of i_size with dv jump from server (Marc Dionne) - dmaengine: at_xdmac: do not enable all cyclic channels (Claudiu Beznea) - dmaengine: dw-edma: Fix to enable to issue dma request on DMA processing (Shunsuke Mie) - dmaengine: dw-edma: Fix to change for continuous transfer (Shunsuke Mie) - phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port (Gaosheng Cui) - pwm: mtk-disp: Disable shadow registers before setting backlight values (AngeloGioacchino Del Regno) - pwm: mtk-disp: Adjust the clocks to avoid them mismatch (Jitao Shi) - pwm: mtk-disp: Don't check the return code of pwmchip_remove() (Uwe Kleine-Konig) - dmaengine: mv_xor_v2: Fix an error code. (Christophe JAILLET) - leds: TI_LMU_COMMON: select REGMAP instead of depending on it (Randy Dunlap) - ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline (Ye Bin) - openrisc: Properly store r31 to pt_regs on unhandled exceptions (Stafford Horne) - clocksource/drivers/davinci: Fix memory leak in davinci_timer_register when init fails (Qinrun Dai) - clocksource: davinci: axe a pointless __GFP_NOFAIL (Christophe JAILLET) - clocksource/drivers/davinci: Avoid trailing '\n' hidden in pr_fmt() (Christophe JAILLET) - RDMA/mlx5: Use correct device num_ports when modify DC (Mark Zhang) - Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe (Miaoqian Lin) - input: raspberrypi-ts: Release firmware handle when not needed (Nicolas Saenz Julienne) - firmware: raspberrypi: Introduce devm_rpi_firmware_get() (Nicolas Saenz Julienne) - firmware: raspberrypi: Keep count of all consumers (Nicolas Saenz Julienne) - NFSv4.1: Always send a RECLAIM_COMPLETE after establishing lease (Trond Myklebust) - IB/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order (Patrick Kelsey) - RDMA/siw: Remove namespace check from siw_netdev_event() (Tetsuo Handa) - clk: add missing of_node_put() in 'assigned-clocks' property parsing (Clement Leger) - power: supply: generic-adc-battery: fix unit scaling (Sebastian Reichel) - rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current time (Martin Blumenstingl) - RDMA/mlx4: Prevent shift wrapping in set_user_sq_size() (Dan Carpenter) - rtc: omap: include header for omap_rtc_power_off_program prototype (Krzysztof Kozlowski) - RDMA/rdmavt: Delete unnecessary NULL check (Natalia Petrova) - RDMA/siw: Fix potential page_array out of range access (Daniil Dulov) - perf/core: Fix hardlockup failure caused by perf throttle (Yang Jihong) - powerpc/rtas: use memmove for potentially overlapping buffer copy (Nathan Lynch) - macintosh: via-pmu-led: requires ATA to be set (Randy Dunlap) - powerpc/sysdev/tsi108: fix resource printk format warnings (Randy Dunlap) - powerpc/wii: fix resource printk format warnings (Randy Dunlap) - powerpc/mpc512x: fix resource printk format warning (Randy Dunlap) - macintosh/windfarm_smu_sat: Add missing of_node_put() (Liang He) - spmi: Add a check for remove callback when removing a SPMI driver (Jishnu Prakash) - staging: rtl8192e: Fix W_DISABLE# does not work after stop/start (Philipp Hortmann) - serial: 8250: Add missing wakeup event reporting (Florian Fainelli) - tty: serial: fsl_lpuart: adjust buffer length to the intended size (Shenwei Wang) - firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe (Dan Carpenter) - usb: mtu3: fix kernel panic at qmu transfer done irq handler (Chunfeng Yun) - usb: chipidea: fix missing goto in ci_hdrc_probe (Yinhao Hu) - sh: sq: Fix incorrect element size for allocating bitmap buffer (John Paul Adrian Glaubitz) - uapi/linux/const.h: prefer ISO-friendly __typeof__ (Kevin Brodsky) - spi: cadence-quadspi: fix suspend-resume implementations (Dhruva Gole) - mtd: spi-nor: cadence-quadspi: Handle probe deferral while requesting DMA channel (Vignesh Raghavendra) - mtd: spi-nor: cadence-quadspi: Don't initialize rx_dma_complete on failure (Vignesh Raghavendra) - mtd: spi-nor: cadence-quadspi: Make driver independent of flash geometry (Vignesh Raghavendra) - scripts/gdb: bail early if there are no generic PD (Florian Fainelli) - PM: domains: Fix up terminology with parent/child (Kees Cook) - scripts/gdb: bail early if there are no clocks (Florian Fainelli) - ia64: salinfo: placate defined-but-not-used warning (Randy Dunlap) - ia64: mm/contig: fix section mismatch warning/error (Randy Dunlap) - of: Fix modalias string generation (Miquel Raynal) - vmci_host: fix a race condition in vmci_host_poll() causing GPF (Dae R. Jeong) - spi: fsl-spi: Fix CPM/QE mode Litte Endian (Christophe Leroy) - spi: qup: Don't skip cleanup in remove's error path (Uwe Kleine-Konig) - linux/vt_buffer.h: allow either builtin or modular for macros (Randy Dunlap) - ASoC: es8316: Handle optional IRQ assignment (Cristian Ciocaltea) - ASoC: es8316: Use IRQF_NO_AUTOEN when requesting the IRQ (Hans de Goede) - genirq: Add IRQF_NO_AUTOEN for request_irq/nmi() (Barry Song) - PCI: imx6: Install the fault handler only on compatible match (H. Nikolaus Schaller) - usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition (Zheng Wang) - iio: light: max44009: add missing OF device matching (Krzysztof Kozlowski) - fpga: bridge: fix kernel-doc parameter description (Marco Pagani) - usb: host: xhci-rcar: remove leftover quirk handling (Wolfram Sang) - pstore: Revert pmsg_lock back to a normal mutex (John Stultz) - tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp. (Kuniyuki Iwashima) - net: amd: Fix link leak when verifying config failed (Gencen Gan) - netlink: Use copy_to_user() for optval in netlink_getsockopt(). (Kuniyuki Iwashima) - ipv4: Fix potential uninit variable access bug in __ip_make_skb() (Ziyang Xuan) - netfilter: nf_tables: don't write table validation state without mutex (Florian Westphal) - bpf: Don't EFAULT for getsockopt with optval=NULL (Stanislav Fomichev) - ixgbe: Enable setting RSS table to default values (Joe Damato) - ixgbe: Allow flow hash to be set via ethtool (Joe Damato) - wifi: iwlwifi: mvm: check firmware response size (Johannes Berg) - wifi: iwlwifi: make the loop for card preparation effective (Emmanuel Grumbach) - md/raid10: fix memleak of md thread (Yu Kuai) - md: update the optimal I/O size on reshape (Christoph Hellwig) - md/raid10: fix memleak for 'conf->bio_split' (Yu Kuai) - md/raid10: fix leak of 'r10bio->remaining' for recovery (Yu Kuai) - bpf, sockmap: Revert buggy deadlock fix in the sockhash and sockmap (Daniel Borkmann) - nvme-fcloop: fix 'inconsistent {IN-HARDIRQ-W} -> {HARDIRQ-ON-W} usage' (Ming Lei) - nvme: fix async event trace event (Keith Busch) - nvme: handle the persistent internal error AER (Michael Kelley) - bpf, sockmap: fix deadlocks in the sockhash and sockmap (Xin Liu) - scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() (Shuchang Li) - crypto: drbg - Only fail when jent is unavailable in FIPS mode (Herbert Xu) - crypto: drbg - make drbg_prepare_hrng() handle jent instantiation errors (Nicolai Stange) - bpftool: Fix bug for long instructions in program CFG dumps (Quentin Monnet) - wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg() (Wei Chen) - wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg() (Wei Chen) - rtlwifi: Replace RT_TRACE with rtl_dbg (Larry Finger) - rtlwifi: Start changing RT_TRACE into rtl_dbg (Larry Finger) - f2fs: handle dqget error in f2fs_transfer_project_quota() (Yangtao Li) - scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS (Danila Chernetsov) - net/packet: convert po->auxdata to an atomic flag (Eric Dumazet) - net/packet: convert po->origdev to an atomic flag (Eric Dumazet) - net/packet: annotate accesses to po->xmit (Eric Dumazet) - vlan: partially enable SIOCSHWTSTAMP in container (Vadim Fedorenko) - scm: fix MSG_CTRUNC setting condition for SO_PASSSEC (Alexander Mikhalitsyn) - wifi: rtw88: mac: Return the original error from rtw_mac_power_switch() (Martin Blumenstingl) - wifi: rtw88: mac: Return the original error from rtw_pwr_seq_parser() (Martin Blumenstingl) - tools: bpftool: Remove invalid \' json escape (Luis Gerhorst) - wifi: ath6kl: reduce WARN to dev_dbg() in callback (Fedor Pchelkin) - wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list() (Dan Carpenter) - wifi: ath9k: hif_usb: fix memory leak of remain_skbs (Fedor Pchelkin) - wifi: ath6kl: minor fix for allocation size (Alexey V. Vissarionov) - tick/common: Align tick period with the HZ tick. (Sebastian Andrzej Siewior) - tick: Get rid of tick_period (Thomas Gleixner) - tick/sched: Optimize tick_do_update_jiffies64() further (Thomas Gleixner) - tick/sched: Reduce seqcount held scope in tick_do_update_jiffies64() (Yunfeng Ye) - tick/sched: Use tick_next_period for lockless quick check (Thomas Gleixner) - timekeeping: Split jiffies seqlock (Thomas Gleixner) - debugobject: Prevent init race with static objects (Thomas Gleixner) - arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step (Sumit Garg) - x86/ioapic: Don't return 0 from arch_dynirq_lower_bound() (Saurabh Sengar) - regulator: stm32-pwr: fix of_iomap leak (YAN SHI) - media: rc: gpio-ir-recv: Fix support for wake-up (Florian Fainelli) - media: rcar_fdp1: Fix refcount leak in probe and remove function (Miaoqian Lin) - media: rcar_fdp1: Fix the correct variable assignments (Tang Bin) - media: rcar_fdp1: Make use of the helper function devm_platform_ioremap_resource() (Cai Huoqing) - media: rcar_fdp1: fix pm_runtime_get_sync() usage count (Mauro Carvalho Chehab) - media: rcar_fdp1: simplify error check logic at fdp_open() (Mauro Carvalho Chehab) - media: saa7134: fix use after free bug in saa7134_finidev due to race condition (Zheng Wang) - media: dm1105: Fix use after free bug in dm1105_remove due to race condition (Zheng Wang) - x86/apic: Fix atomic update of offset in reserve_eilvt_offset() (Uros Bizjak) - regulator: core: Avoid lockdep reports when resolving supplies (Douglas Anderson) - regulator: core: Consistently set mutex_owner when using ww_mutex_lock_slow() (Douglas Anderson) - drm/lima/lima_drv: Add missing unwind goto in lima_pdev_probe() (Harshit Mogalapalli) - mmc: sdhci-of-esdhc: fix quirk to ignore command inhibit for data (Georgii Kruglov) - drm/msm/adreno: drop bogus pm_runtime_set_active() (Johan Hovold) - drm/msm/adreno: Defer enabling runpm until hw_init() (Rob Clark) - drm/msm: fix unbalanced pm_runtime_enable in adreno_gpu_{init, cleanup} (Jonathan Marek) - firmware: qcom_scm: Clear download bit during reboot (Mukesh Ojha) - media: av7110: prevent underflow in write_ts_to_decoder() (Dan Carpenter) - media: uapi: add MEDIA_BUS_FMT_METADATA_FIXED media bus format. (Dafna Hirschfeld) - media: bdisp: Add missing check for create_workqueue (Jiasheng Jiang) - ARM: dts: qcom: ipq8064: Fix the PCI I/O port range (Manivannan Sadhasivam) - ARM: dts: qcom: ipq8064: reduce pci IO size to 64K (Christian Marangi) - ARM: dts: qcom: ipq4019: Fix the PCI I/O port range (Manivannan Sadhasivam) - EDAC/skx: Fix overflows on the DRAM row address mapping arrays (Qiuxu Zhuo) - arm64: dts: renesas: r8a774c0: Remove bogus voltages from OPP table (Geert Uytterhoeven) - arm64: dts: renesas: r8a77990: Remove bogus voltages from OPP table (Geert Uytterhoeven) - drm/probe-helper: Cancel previous job before starting new one (Dom Cobley) - drm/vgem: add missing mutex_destroy (Maira Canal) - drm/rockchip: Drop unbalanced obj unref (Rob Clark) - erofs: fix potential overflow calculating xattr_isize (Jingbo Xu) - erofs: stop parsing non-compact HEAD index if clusterofs is invalid (Gao Xiang) - tpm, tpm_tis: Do not skip reset of original interrupt vector (Lino Sanfilippo) - selinux: ensure av_permissions.h is built when needed (Paul Moore) - selinux: fix Makefile dependencies of flask.h (Ondrej Mosnacek) - ubifs: Free memory for tmpfile name (Marten Lindahl) - ubi: Fix return value overwrite issue in try_write_vid_and_data() (Wang YanQing) - ubifs: Fix memleak when insert_old_idx() failed (Zhihao Cheng) - i2c: omap: Fix standard mode false ACK readings (Reid Tonking) - KVM: nVMX: Emulate NOPs in L2, and PAUSE if it's not intercepted (Sean Christopherson) - reiserfs: Add security prefix to xattr name in reiserfs_security_write() (Roberto Sassu) - ring-buffer: Sync IRQ works before buffer destruction (Johannes Berg) - pwm: meson: Fix g12a ao clk81 name (Heiner Kallweit) - pwm: meson: Fix axg ao mux parents (Heiner Kallweit) - kheaders: Use array declaration instead of char (Kees Cook) - ipmi: fix SSIF not responding under certain cond. (Zhang Yuchen) - MIPS: fw: Allow firmware to pass a empty env (Jiaxun Yang) - xhci: fix debugfs register accesses while suspended (Johan Hovold) - debugfs: regset32: Add Runtime PM support (Geert Uytterhoeven) - staging: iio: resolver: ads1210: fix config mode (Nuno Sa) - perf sched: Cast PTHREAD_STACK_MIN to int as it may turn into sysconf(__SC_THREAD_STACK_MIN_VALUE) (Arnaldo Carvalho de Melo) - USB: dwc3: fix runtime pm imbalance on unbind (Johan Hovold) ... IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-42753 CVE-2023-20588 CVE-2023-20569 CVE-2023-22024 CVE-2023-5090 cpe:/a:oracle:linux:7::UEKR6 Oracle Linux 8 [5.4.17-2136.324.5.3.el8] - Revert 'jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint' (Sherry Yang) [Orabug: 35896102] [5.4.17-2136.324.5.2.el8] - fix breakage in do_rmdir() (Al Viro) [Orabug: 35885837] [5.4.17-2136.324.5.1.el8] - x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky) [Orabug: 35857366] {CVE-2023-5090} [5.4.17-2136.324.5.el8] - netfilter: nfnetlink_osf: avoid OOB read (Wander Lairson Costa) - dlm: fix plock lookup when using multiple lockspaces (Alexander Aring) - x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Dave Hansen) - Revert 'IB/isert: Fix incorrect release of isert connection' (Leon Romanovsky) - ALSA: ac97: Fix possible error value of *rac97 (Su Hui) - pinctrl: amd: Don't show Invalid config param errors (Mario Limonciello) - netfilter: xt_sctp: validate the flag_info count (Wander Lairson Costa) - netfilter: xt_u32: validate user space input (Wander Lairson Costa) - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Kyle Zeng) [Orabug: 35824287] {CVE-2023-42753} [5.4.17-2136.324.4.el8] - kernfs: fix missing kernfs_iattr_rwsem locking (Ian Kent) [Orabug: 35796771] - x86/microcode: Stop reprobing mitigations after late microcode load (Boris Ostrovsky) [Orabug: 35818857] {CVE-2023-20569} - objtool/x86: Fix SRSO mess (Peter Zijlstra) [Orabug: 35818857] {CVE-2023-20569} - x86/srso: Correct the mitigation status when SMT is disabled (Borislav Petkov (AMD)) [Orabug: 35818857] {CVE-2023-20569} - objtool/x86: Fixup frame-pointer vs rethunk (Peter Zijlstra) [Orabug: 35818857] {CVE-2023-20569} - x86/srso: Disable the mitigation on unaffected configurations (Borislav Petkov (AMD)) [Orabug: 35818857] {CVE-2023-20569} - x86/retpoline: Don't clobber RFLAGS during srso_safe_ret() (Sean Christopherson) [Orabug: 35818857] {CVE-2023-20569} - x86/srso: Explain the untraining sequences a bit more (Borislav Petkov (AMD)) [Orabug: 35818857] {CVE-2023-20569} - x86/cpu: Cleanup the untrain mess (Peter Zijlstra) [Orabug: 35818857] {CVE-2023-20569} - x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (Peter Zijlstra) [Orabug: 35818857] {CVE-2023-20569} - x86/cpu: Rename original retbleed methods (Peter Zijlstra) [Orabug: 35818857] {CVE-2023-20569} - x86/cpu: Clean up SRSO return thunk mess (Peter Zijlstra) [Orabug: 35818857] {CVE-2023-20569} - x86/alternative: Make custom return thunk unconditional (Peter Zijlstra) [Orabug: 35818857] {CVE-2023-20569} - x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (Peter Zijlstra) [Orabug: 35818857] {CVE-2023-20569} - x86/cpu: Fix __x86_return_thunk symbol type (Peter Zijlstra) [Orabug: 35818857] {CVE-2023-20569} - x86/srso: Fix build breakage with the LLVM linker (Nick Desaulniers) [Orabug: 35818857] {CVE-2023-20569} - x86/srso: Tie SBPB bit setting to microcode patch detection (Borislav Petkov (AMD)) [Orabug: 35818857] {CVE-2023-20569} - x86/srso: Fix return thunks in generated code (Josh Poimboeuf) [Orabug: 35818857] {CVE-2023-20569} - x86/srso: Add IBPB on VMEXIT (Borislav Petkov (AMD)) [Orabug: 35818857] {CVE-2023-20569} - x86/srso: Add SRSO_NO support (Borislav Petkov (AMD)) [Orabug: 35818857] {CVE-2023-20569} - x86/srso: Add IBPB_BRTYPE support (Borislav Petkov (AMD)) [Orabug: 35818857] {CVE-2023-20569} - x86/srso: Add a Speculative RAS Overflow mitigation (Borislav Petkov (AMD)) [Orabug: 35818857] {CVE-2023-20569} - scsi: megaraid_sas: Fix deadlock on firmware crashdump (Junxiao Bi) [Orabug: 35819593] - rds: Fix lack of reentrancy for connection reset with dst addr zero (Hakon Bugge) [Orabug: 35819522] {CVE-2023-22024} [5.4.17-2136.324.3.el8] - uek-rpm: aarch64: enable ACPI_AGDI (Mihai Carabas) [Orabug: 34833165] - arm64: sdei: abort running SDEI handlers during crash (D Scott Phillips) [Orabug: 34833165] - ACPI: AGDI: Fix missing prototype warning for acpi_agdi_init() (Ilkka Koskinen) [Orabug: 34833165] - ACPI: AGDI: Add driver for Arm Generic Diagnostic Dump and Reset device (Ilkka Koskinen) [Orabug: 34833165] - ACPI: tables: Add AGDI to the list of known table signatures (Ilkka Koskinen) [Orabug: 34833165] - ACPICA: iASL: Add suppport for AGDI table (Ilkka Koskinen) [Orabug: 34833165] - ACPI: APEI: explicit init of HEST and GHES in apci_init() (Shuai Xue) [Orabug: 34833165] - x86/CPU/AMD: Fix the DIV(0) initial fix attempt (Borislav Petkov (AMD)) [Orabug: 35776936] {CVE-2023-20588} - x86/CPU/AMD: Do not leak quotient data after a division by 0 (Borislav Petkov (AMD)) [Orabug: 35776936] {CVE-2023-20588} - uek-rpm: Pensando: enable PENSANDO_SOC_BSM_ENABLE in the config (Dave Kleikamp) [Orabug: 35787554] [5.4.17-2136.324.2.el8] - LTS tag: v5.4.256 (Sherry Yang) - Revert 'MIPS: Alchemy: fix dbdma2' (Greg Kroah-Hartman) - powerpc/pmac/smp: Drop unnecessary volatile qualifier (YueHaibing) - powerpc/pmac/smp: Avoid unused-variable warnings (Ilie Halip) - LTS tag: v5.4.255 (Sherry Yang) - dma-buf/sw_sync: Avoid recursive lock during fence signal (Rob Clark) - pinctrl: renesas: rza2: Add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} (Biju Das) - clk: Fix undefined reference to clk_rate_exclusive_{get,put}' (Biju Das) - scsi: core: raid_class: Remove raid_component_add() (Zhu Wang) - scsi: snic: Fix double free in snic_tgt_create() (Zhu Wang) - irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable (Jiaxun Yang) - Documentation/sysctl: document page_lock_unfairness (Joel Savitz) - ALSA: pcm: Check for null pointer of pointer substream before dereferencing it (Colin Ian King) - interconnect: Do not skip aggregation for disabled paths (Georgi Djakov) - Revert 'ALSA: pcm: Use SG-buffer only when direct DMA is available' (Takashi Iwai) - ALSA: pcm: Fix build error on m68k and others (Takashi Iwai) - rtnetlink: Reject negative ifindexes in RTM_NEWLINK (Ido Schimmel) - x86/fpu: Set X86_FEATURE_OSXSAVE feature after enabling OSXSAVE in CR4 (Feng Tang) - drm/display/dp: Fix the DP DSC Receiver cap size (Ankit Nautiyal) - PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus (Igor Mammedov) - media: vcodec: Fix potential array out-of-bounds in encoder queue_setup (Wei Chen) - radix tree: remove unused variable (Arnd Bergmann) - lib/clz_ctz.c: Fix __clzdi2() and __ctzdi2() for 32-bit kernels (Helge Deller) - batman-adv: Hold rtnl lock during MTU update via netlink (Sven Eckelmann) - batman-adv: Fix batadv_v_ogm_aggr_send memory leak (Remi Pommarel) - batman-adv: Fix TT global entry leak when client roamed back (Remi Pommarel) - batman-adv: Do not get eth header before batadv_check_management_packet (Remi Pommarel) - batman-adv: Don't increase MTU when set by user (Sven Eckelmann) - batman-adv: Trigger events for auto adjusted MTU (Sven Eckelmann) - nfsd: Fix race to FREE_STATEID and cl_revoked (Benjamin Coddington) - clk: Fix slab-out-of-bounds error in devm_clk_release() (Andrey Skvortsov) - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) - ibmveth: Use dcbf rather than dcbfl (Michael Ellerman) - bonding: fix macvlan over alb bond support (Hangbin Liu) - net: remove bond_slave_has_mac_rcu() (Jakub Kicinski) - net/sched: fix a qdisc modification with ambiguous command request (Jamal Hadi Salim) - igb: Avoid starting unnecessary workqueues (Alessio Igor Bogani) - net: validate veth and vxcan peer ifindexes (Jakub Kicinski) - net: bcmgenet: Fix return value check for fixed_phy_register() (Ruan Jinjie) - net: bgmac: Fix return value check for fixed_phy_register() (Ruan Jinjie) - ipvlan: Fix a reference count leak warning in ipvlan_ns_exit() (Lu Wei) - dccp: annotate data-races in dccp_poll() (Eric Dumazet) - sock: annotate data-races around prot->memory_pressure (Eric Dumazet) - octeontx2-af: SDP: fix receive link config (Hariprasad Kelam) - tracing: Fix memleak due to race between current_tracer and trace (Zheng Yejian) - drm/amd/display: check TG is non-null before checking if enabled (Taimur Hassan) - drm/amd/display: do not wait for mpc idle if tg is disabled (Josip Pavic) - ASoC: fsl_sai: Disable bit clock with transmitter (Matus Gajdos) - ASoC: fsl_sai: Add new added registers and new bit definition (Shengjiu Wang) - ASoC: fsl_sai: Refine enable/disable TE/RE sequence in trigger() (Shengjiu Wang) - regmap: Account for register length in SMBus I/O limits (Mark Brown) - ALSA: pcm: Fix potential data race at PCM memory allocation helpers (Takashi Iwai) - ALSA: pcm: Set per-card upper limit of PCM buffer allocations (Takashi Iwai) - dm integrity: reduce vmalloc space footprint on 32-bit architectures (Mikulas Patocka) - dm integrity: increase RECALC_SECTORS to improve recalculate speed (Mikulas Patocka) - fbdev: fix potential OOB read in fast_imageblit() (Zhang Shurong) - fbdev: Fix sys_imageblit() for arbitrary image widths (Thomas Zimmermann) - fbdev: Improve performance of sys_imageblit() (Thomas Zimmermann) - MIPS: cpu-features: Use boot_cpu_type for CPU type based features (Jiaxun Yang) - MIPS: cpu-features: Enable octeon_cache by cpu_type (Jiaxun Yang) - fs: dlm: fix mismatch of plock results from userspace (Alexander Aring) - fs: dlm: use dlm_plock_info for do_unlock_close (Alexander Aring) - fs: dlm: change plock interrupted message to debug again (Alexander Aring) - fs: dlm: add pid to debug log (Alexander Aring) - dlm: replace usage of found with dedicated list iterator variable (Jakob Koschel) - dlm: improve plock logging if interrupted (Alexander Aring) - PCI: acpiphp: Reassign resources on bridge if necessary (Igor Mammedov) - net: phy: broadcom: stub c45 read/write for 54810 (Justin Chen) - mmc: f-sdh30: fix order of function calls in sdhci_f_sdh30_remove (Yangtao Li) - net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure (Lin Ma) - net: fix the RTO timer retransmitting skb every 1ms if linear option is enabled (Jason Xing) - virtio-net: set queues after driver_ok (Jason Wang) - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Kuniyuki Iwashima) - netfilter: set default timeout to 3 secs for sctp shutdown send and recv state (Xin Long) - mmc: block: Fix in_flight[issue_type] value error (Yibin Ding) - mmc: wbsd: fix double mmc_free_host() in wbsd_init() (Yang Yingliang) - cifs: Release folio lock on fscache read hit. (Russell Harmon via samba-technical) - ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces. (dengxiang) - serial: 8250: Fix oops for port->pm on uart_change_pm() (Tony Lindgren) - ASoC: meson: axg-tdm-formatter: fix channel slot allocation (Jerome Brunet) - ASoC: rt5665: add missed regulator_bulk_disable (Zhang Shurong) - ARM: dts: imx: Set default tuning step for imx6sx usdhc (Xiaolei Wang) - ARM: dts: imx: Set default tuning step for imx7d usdhc (Xiaolei Wang) - ARM: dts: imx: Adjust dma-apbh node name (Stefan Wahren) - ARM: dts: imx7s: Drop dma-apb interrupt-names (Marek Vasut) - bus: ti-sysc: Flush posted write on enable before reset (Tony Lindgren) - bus: ti-sysc: Improve reset to work with modules with no sysconfig (Tony Lindgren) - net: do not allow gso_size to be set to GSO_BY_FRAGS (Eric Dumazet) - sock: Fix misuse of sk_under_memory_pressure() (Abel Wu) - net: dsa: mv88e6xxx: Wait for EEPROM done before HW reset (Alfred Lee) - i40e: fix misleading debug logs (Andrii Staikov) - team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves (Ziyang Xuan) - netfilter: nft_dynset: disallow object maps (Pablo Neira Ayuso) - ipvs: fix racy memcpy in proc_do_sync_threshold (Sishuai Gong) - selftests: mirror_gre_changes: Tighten up the TTL test match (Petr Machata) - xfrm: add NULL check in xfrm_update_ae_params (Lin Ma) {CVE-2023-3772} - ip_vti: fix potential slab-use-after-free in decode_session6 (Zhengchao Shao) - ip6_vti: fix slab-use-after-free in decode_session6 (Zhengchao Shao) - xfrm: fix slab-use-after-free in decode_session6 (Zhengchao Shao) - xfrm: interface: rename xfrm_interface.c to xfrm_interface_core.c (Eyal Birger) - net: af_key: fix sadb_x_filter validation (Lin Ma) - net: xfrm: Fix xfrm_address_filter OOB read (Lin Ma) - btrfs: fix BUG_ON condition in btrfs_cancel_balance (xiaoshoukui) - tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32 platforms (Sherry Sun) - powerpc/rtas_flash: allow user copy to flash block cache objects (Nathan Lynch) - fbdev: mmp: fix value check in mmphw_probe() (Yuanjun Gong) - i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue (Chengfeng Ye) - virtio-mmio: don't break lifecycle of vm_dev (Wolfram Sang) - virtio-mmio: Use to_virtio_mmio_device() to simply code (Tang Bin) - virtio-mmio: convert to devm_platform_ioremap_resource (Yangtao Li) - nfsd: Remove incorrect check in nfsd4_validate_stateid (Trond Myklebust) - nfsd4: kill warnings on testing stateids with mismatched clientids (J. Bruce Fields) - net/ncsi: Fix gma flag setting after response (Vijay Khemka) - tracing/probes: Fix to update dynamic data counter if fetcharg uses it (Masami Hiramatsu (Google)) - tracing/probes: Have process_fetch_insn() take a void * instead of pt_regs (Steven Rostedt (VMware)) - leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev rename (Christian Marangi) - mmc: sunxi: fix deferred probing (Sergey Shtylyov) - mmc: bcm2835: fix deferred probing (Sergey Shtylyov) - USB: dwc3: qcom: fix NULL-deref on suspend (Johan Hovold) - usb: dwc3: qcom: Add helper functions to enable,disable wake irqs (Sandeep Maheswaram) - interconnect: Add helpers for enabling/disabling a path (Georgi Djakov) - interconnect: Move internal structs into a separate file (Georgi Djakov) - irqchip/mips-gic: Use raw spinlock for gic_lock (Jiaxun Yang) - irqchip/mips-gic: Get rid of the reliance on irq_cpu_online() (Marc Zyngier) - ALSA: hda: Fix unhandled register update during auto-suspend period (Takashi Iwai) - PM: runtime: Add pm_runtime_get_if_active() (Sakari Ailus) - PM-runtime: add tracepoints for usage_count changes (Michal Miroslaw) - iio: addac: stx104: Fix race condition when converting analog-to-digital (William Breathitt Gray) - iio: addac: stx104: Fix race condition for stx104_write_raw() (William Breathitt Gray) - iio: stx104: Move to addac subdirectory (William Breathitt Gray) - iio: adc: stx104: Implement and utilize register structures (William Breathitt Gray) - iio: adc: stx104: Utilize iomap interface (William Breathitt Gray) - iio: add addac subdirectory (Cosmin Tanislav) - IMA: allow/fix UML builds (Randy Dunlap) - powerpc/kasan: Disable KCOV in KASAN code (Benjamin Gray) - ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() (Tuo Li) - ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 & Q760 (dengxiang) - drm/amdgpu: Fix potential fence use-after-free v2 (shanzhulig) - pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db() (Armin Wolf) - gfs2: Fix possible data races in gfs2_show_options() (Tuo Li) - usb: chipidea: imx: don't request QoS for imx8ulp (Xu Yang) - media: platform: mediatek: vpu: fix NULL ptr dereference (Hans Verkuil) - media: v4l2-mem2mem: add lock to protect parameter num_rdy (Yunfei Dong) - FS: JFS: Check for read-only mounted filesystem in txBegin (Immad Mir) - FS: JFS: Fix null-ptr-deref Read in txBegin (Immad Mir) - MIPS: dec: prom: Address -Warray-bounds warning (Gustavo A. R. Silva) - fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev (Yogesh) - udf: Fix uninitialized array access for some pathnames (Jan Kara) - ovl: check type and offset of struct vfsmount in ovl_entry (Christian Brauner) - HID: add quirk for 03f0:464a HP Elite Presenter Mouse (Marco Morandini) - quota: fix warning in dqgrab() (Ye Bin) - quota: Properly disable quotas when add_dquot_ref() fails (Jan Kara) - ALSA: emu10k1: roll up loops in DSP setup code for Audigy (Oswald Buddenhagen) - drm/radeon: Fix integer overflow in radeon_cs_parser_init (hackyzh002) - macsec: use DEV_STATS_INC() (Eric Dumazet) - macsec: Fix traffic counters/statistics (Clayton Yager) - selftests: forwarding: tc_flower: Relax success criterion (Ido Schimmel) - mmc: sdhci-f-sdh30: Replace with sdhci_pltfm (Kunihiko Hayashi) - mmc: sdhci_f_sdh30: convert to devm_platform_ioremap_resource (Yangtao Li) - LTS tag: v5.4.254 (Sherry Yang) - sch_netem: fix issues in netem_change() vs get_dist_table() (Eric Dumazet) - alpha: remove __init annotation from exported page_is_ram() (Masahiro Yamada) - scsi: core: Fix possible memory leak if device_add() fails (Zhu Wang) - scsi: snic: Fix possible memory leak if device_add() fails (Zhu Wang) - scsi: 53c700: Check that command slot is not NULL (Alexandra Diupina) - scsi: storvsc: Fix handling of virtual Fibre Channel timeouts (Michael Kelley) - scsi: core: Fix legacy /proc parsing buffer overflow (Tony Battersby) - netfilter: nf_tables: report use refcount overflow (Pablo Neira Ayuso) - nvme-rdma: fix potential unbalanced freeze & unfreeze (Ming Lei) - nvme-tcp: fix potential unbalanced freeze & unfreeze (Ming Lei) - btrfs: set cache_block_group_error if we find an error (Josef Bacik) - btrfs: don't stop integrity writeback too early (Christoph Hellwig) - ibmvnic: Handle DMA unmapping of login buffs in release functions (Nick Child) - net/mlx5: Allow 0 for total host VFs (Daniel Jurgens) - dmaengine: mcf-edma: Fix a potential un-allocated memory access (Christophe JAILLET) - wifi: cfg80211: fix sband iftype data lookup for AP_VLAN (Felix Fietkau) - IB/hfi1: Fix possible panic during hotplug remove (Douglas Miller) - drivers: net: prevent tun_build_skb() to exceed the packet size limit (Andrew Kanner) - dccp: fix data-race around dp->dccps_mss_cache (Eric Dumazet) - bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves (Ziyang Xuan) - net/packet: annotate data-races around tp->status (Eric Dumazet) - mISDN: Update parameter type of dsp_cmx_send() (Nathan Chancellor) - selftests/rseq: Fix build with undefined __weak (Mark Brown) - drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes (Karol Herbst) - x86: Move gds_ucode_mitigated() declaration to header (Arnd Bergmann) - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Kirill A. Shutemov) - x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 (Cristian Ciocaltea) - usb: common: usb-conn-gpio: Prevent bailing out if initial role is none (Prashanth K) - usb: dwc3: Properly handle processing of pending events (Elson Roy Serrao) - usb-storage: alauda: Fix uninit-value in alauda_check_media() (Alan Stern) - binder: fix memory leak in binder_init() (Qi Zheng) - iio: cros_ec: Fix the allocation size for cros_ec_command (Yiyuan Guo) - nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (Ryusuke Konishi) - radix tree test suite: fix incorrect allocation size for pthreads (Colin Ian King) - drm/nouveau/gr: enable memory loads on helper invocation on all channels (Karol Herbst) - dmaengine: pl330: Return DMA_PAUSED when transaction is paused (Ilpo Jarvinen) - ipv6: adjust ndisc_is_useropt() to also return true for PIO (Maciej Zenczykowski) - mmc: moxart: read scr register without changing byte order (Sergei Antonov) - LTS tag: v5.4.253 (Sherry Yang) - Revert 'driver core: Annotate dev_err_probe() with __must_check' (Greg Kroah-Hartman) - drivers: core: fix kernel-doc markup for dev_err_probe() (Mauro Carvalho Chehab) - driver code: print symbolic error code (Michal Miroslaw) - ARM: dts: nxp/imx6sll: fix wrong property name in usbphy node (Xu Yang) - ARM: dts: imx6sll: fixup of operating points (Andreas Kemnade) - ARM: dts: imx: add usb alias (Peng Fan) - ARM: dts: imx: Align L2 cache-controller nodename with dtschema (Krzysztof Kozlowski) - ARM: dts: imx6sll: Make ssi node name same as other platforms (Shengjiu Wang) - arm64: dts: stratix10: fix incorrect I2C property for SCL signal (Dinh Nguyen) - ceph: defer stopping mdsc delayed_work (Xiubo Li) - ceph: use kill_anon_super helper (Jeff Layton) - ceph: show tasks waiting on caps in debugfs caps file (Jeff Layton) - PM: sleep: wakeirq: fix wake irq arming (Johan Hovold) - PM / wakeirq: support enabling wake-up irq after runtime_suspend called (Chunfeng Yun) - selftests/rseq: Play nice with binaries statically linked against glibc 2.35+ (Sean Christopherson) - selftests/rseq: check if libc rseq support is registered (Michael Jeanson) - powerpc/mm/altmap: Fix altmap boundary check (Aneesh Kumar K.V) - mtd: rawnand: omap_elm: Fix incorrect type in assignment (Roger Quadros) - test_firmware: return ENOMEM instead of ENOSPC on failed memory allocation (Mirsad Goran Todorovac) - test_firmware: prevent race conditions by a correct implementation of locking (Mirsad Goran Todorovac) - ext2: Drop fragment support (Jan Kara) - fs: Protect reconfiguration of sb read-write from racing writes (Jan Kara) - net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb (Alan Stern) - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (Sungwoo Kim) - fs/sysv: Null check to prevent null-ptr-deref bug (Prince Kumar Maurya) - net: tap_open(): set sk_uid from current_fsuid() (Laszlo Ersek) {CVE-2023-1076} - net: tun_chr_open(): set sk_uid from current_fsuid() (Laszlo Ersek) {CVE-2023-1076} - mtd: rawnand: meson: fix OOB available bytes for ECC (Arseniy Krasnov) - mtd: spinand: toshiba: Fix ecc_get_status (Olivier Maignial) - USB: zaurus: Add ID for A-300/B-500/C-700 (Ross Maynard) - libceph: fix potential hang in ceph_osdc_notify() (Ilya Dryomov) - scsi: zfcp: Defer fc_rport blocking until after ADISC response (Steffen Maier) - tcp_metrics: fix data-race in tcpm_suck_dst() vs fastopen (Eric Dumazet) - tcp_metrics: annotate data-races around tm->tcpm_net (Eric Dumazet) - tcp_metrics: annotate data-races around tm->tcpm_vals[] (Eric Dumazet) - tcp_metrics: annotate data-races around tm->tcpm_lock (Eric Dumazet) - tcp_metrics: annotate data-races around tm->tcpm_stamp (Eric Dumazet) - tcp_metrics: fix addr_same() helper (Eric Dumazet) - ip6mr: Fix skb_under_panic in ip6mr_cache_report() (Yue Haibing) - net: dcb: choose correct policy to parse DCB_ATTR_BCN (Lin Ma) - net: ll_temac: fix error checking of irq_of_parse_and_map() (Dan Carpenter) - net: ll_temac: Switch to use dev_err_probe() helper (Yang Yingliang) - driver core: add device probe log helper (Andrzej Hajda) - bpf: sockmap: Remove preempt_disable in sock_map_sk_acquire (Tomas Glozar) - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (valis) - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (valis) - net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (valis) - net: add missing data-race annotation for sk_ll_usec (Eric Dumazet) - net: add missing data-race annotations around sk->sk_peek_off (Eric Dumazet) - net: add missing READ_ONCE(sk->sk_rcvbuf) annotation (Eric Dumazet) - net: add missing READ_ONCE(sk->sk_sndbuf) annotation (Eric Dumazet) - net: add missing READ_ONCE(sk->sk_rcvlowat) annotation (Eric Dumazet) - net: annotate data-races around sk->sk_max_pacing_rate (Eric Dumazet) - mISDN: hfcpci: Fix potential deadlock on &hc->lock (Chengfeng Ye) - net: sched: cls_u32: Fix match key mis-addressing (Jamal Hadi Salim) - perf test uprobe_from_different_cu: Skip if there is no gcc (Georg Muller) - rtnetlink: let rtnl_bridge_setlink checks IFLA_BRIDGE_MODE length (Lin Ma) - net/mlx5e: fix return value check in mlx5e_ipsec_remove_trailer() (Yuanjun Gong) - net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx (Zhengchao Shao) - KVM: s390: fix sthyi error handling (Heiko Carstens) - word-at-a-time: use the same return type for has_zero regardless of endianness (ndesaulniers@google.com) - loop: Select I/O scheduler 'none' from inside add_disk() (Bart Van Assche) - perf: Fix function pointer case (Peter Zijlstra) - arm64: Fix bit-shifting UB in the MIDR_CPU_MODEL() macro (D Scott Phillips) - ASoC: cs42l51: fix driver to properly autoload with automatic module loading (Thomas Petazzoni) - net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Pedro Tammela) {CVE-2023-31436} - btrfs: fix race between quota disable and quota assign ioctls (Filipe Manana) - btrfs: qgroup: return ENOTCONN instead of EINVAL when quotas are not enabled (Marcos Paulo de Souza) - btrfs: qgroup: remove one-time use variables for quota_root checks (Marcos Paulo de Souza) - cpufreq: intel_pstate: Drop ACPI _PSS states table patching (Rafael J. Wysocki) - ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily (Rafael J. Wysocki) - ACPI: processor: perflib: Use the 'no limit' frequency QoS (Rafael J. Wysocki) - dm cache policy smq: ensure IO doesn't prevent cleaner policy progress (Joe Thornber) - ASoC: wm8904: Fill the cache for WM8904_ADC_TEST_0 register (Mark Brown) - s390/dasd: fix hanging device after quiesce/resume (Stefan Haberland) - virtio-net: fix race between set queues and probe (Jason Wang) - btrfs: check if the transaction was aborted at btrfs_wait_for_commit() (Filipe Manana) - irq-bcm6345-l1: Do not assume a fixed block to cpu mapping (Jonas Gorski) - tpm_tis: Explicitly check for error code (Alexander Steffen) - btrfs: check for commit error at btrfs_attach_transaction_barrier() (Filipe Manana) - hwmon: (nct7802) Fix for temp6 (PECI1) processed even if PECI1 disabled (Gilles Buloz) - staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext() (Zhang Shurong) - Documentation: security-bugs.rst: clarify CVE handling (Greg Kroah-Hartman) - Documentation: security-bugs.rst: update preferences when dealing with the linux-distros group (Greg Kroah-Hartman) - Revert 'usb: xhci: tegra: Fix error check' (Dan Carpenter) - usb: xhci-mtk: set the dma max_seg_size (Ricardo Ribalda) - USB: quirks: add quirk for Focusrite Scarlett (Lukasz Bartosik) - usb: ohci-at91: Fix the unhandle interrupt when resume (Guiting Shen) - usb: dwc3: don't reset device side if dwc3 was configured as host-only (Jisheng Zhang) - usb: dwc3: pci: skip BYT GPIO lookup table for hardwired phy (Gratian Crisan) - Revert 'usb: dwc3: core: Enable AutoRetry feature in the controller' (Jakub Vanek) - can: gs_usb: gs_can_close(): add missing set of CAN state to CAN_STATE_STOPPED (Marc Kleine-Budde) - USB: serial: simple: sort driver entries (Johan Hovold) - USB: serial: simple: add Kaufmann RKS+CAN VCP (Oliver Neukum) - USB: serial: option: add Quectel EC200A module support (Mohsen Tahmasebi) - USB: serial: option: support Quectel EM060K_128 (Jerry Meng) - serial: sifive: Fix sifive_serial_console_setup() section (Samuel Holland) - serial: 8250_dw: Preserve original value of DLF register (Ruihong Luo) - tracing: Fix warning in trace_buffered_event_disable() (Zheng Yejian) - ring-buffer: Fix wrong stat of cpu_buffer->read (Zheng Yejian) - ata: pata_ns87415: mark ns87560_tf_read static (Arnd Bergmann) - dm raid: fix missing reconfig_mutex unlock in raid_ctr() error paths (Yu Kuai) - block: Fix a source code comment in include/uapi/linux/blkzoned.h (Bart Van Assche) - ASoC: fsl_spdif: Silence output on stop (Matus Gajdos) - drm/msm: Fix IS_ERR_OR_NULL() vs NULL check in a5xx_submit_in_rb() (Gaosheng Cui) - drm/msm/adreno: Fix snapshot BINDLESS_DATA size (Rob Clark) - drm/msm/dpu: drop enum dpu_core_perf_data_bus_id (Dmitry Baryshkov) - RDMA/mlx4: Make check for invalid flags stricter (Dan Carpenter) - benet: fix return value check in be_lancer_xmit_workarounds() (Yuanjun Gong) - net/sched: mqprio: Add length check for TCA_MQPRIO_{MAX/MIN}_RATE64 (Lin Ma) - net/sched: mqprio: add extack to mqprio_parse_nlattr() (Vladimir Oltean) - net/sched: mqprio: refactor nlattr parsing to a separate function (Vladimir Oltean) - platform/x86: msi-laptop: Fix rfkill out-of-sync on MSI Wind U100 (Maxim Mikityanskiy) - team: reset team's flags when down link is P2P device (Hangbin Liu) - bonding: reset bond's flags when down link is P2P device (Hangbin Liu) - tcp: Reduce chance of collisions in inet6_hashfn(). (Stewart Smith) - ipv6 addrconf: fix bug where deleting a mngtmpaddr can create a new temporary address (Maciej Zenczykowski) - ethernet: atheros: fix return value check in atl1e_tso_csum() (Yuanjun Gong) - phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe() (Harshit Mogalapalli) - vxlan: calculate correct header length for GPE (Jiri Benc) - i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir() (Wang Ming) - ext4: fix to check return value of freeze_bdev() in ext4_shutdown() (Chao Yu) - keys: Fix linking a duplicate key to a keyring's assoc_array (Petr Pavlu) - uapi: General notification queue definitions (David Howells) - scsi: qla2xxx: Array index may go out of bound (Nilesh Javali) - pwm: meson: fix handling of period/duty if greater than UINT_MAX (Heiner Kallweit) - pwm: meson: Simplify duplicated per-channel tracking (Uwe Kleine-Konig) - pwm: meson: Remove redundant assignment to variable fin_freq (Colin Ian King) - ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() (Zheng Yejian) - ftrace: Store the order of pages allocated in ftrace_page (Linus Torvalds) - ftrace: Check if pages were allocated before calling free_pages() (Steven Rostedt (VMware)) - ftrace: Add information on number of page groups allocated (Steven Rostedt (VMware)) - fs: dlm: interrupt posix locks only when process is killed (Alexander Aring) - dlm: rearrange async condition return (Alexander Aring) - dlm: cleanup plock_op vs plock_xop (Alexander Aring) - PCI/ASPM: Avoid link retraining race (Ilpo Jarvinen) - PCI/ASPM: Factor out pcie_wait_for_retrain() (Ilpo Jarvinen) - PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link() (Bjorn Helgaas) - ext4: Fix reusing stale buffer heads from last failed mounting (Zhihao Cheng) - ext4: rename journal_dev to s_journal_dev inside ext4_sb_info (Chunguang Xu) - btrfs: fix extent buffer leak after tree mod log failure at split_node() (Filipe Manana) - btrfs: fix race between quota disable and relocation (Filipe Manana) - btrfs: qgroup: catch reserved space leaks at unmount time (Qu Wenruo) - bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent (Zheng Wang) - bcache: remove 'int n' from parameter list of bch_bucket_alloc_set() (Coly Li) - gpio: tps68470: Make tps68470_gpio_output() always set the initial value (Hans de Goede) - jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint (Zhihao Cheng) - jbd2: recheck chechpointing non-dirty buffer (Zhang Yi) - jbd2: remove redundant buffer io error checks (Zhang Yi) - jbd2: fix kernel-doc markups (Mauro Carvalho Chehab) - jbd2: fix incorrect code style (Xianting Tian) - LTS tag: v5.4.252 (Sherry Yang) - x86: fix backwards merge of GDS/SRSO bit (Greg Kroah-Hartman) - xen/netback: Fix buffer overrun triggered by unusual packet (Ross Lagerwall) {CVE-2023-34319} - x86/cpu, kvm: Add support for CPUID_80000021_EAX (Kim Phillips) - x86/cpufeatures: Assign dedicated feature word for CPUID_0x8000001F[EAX] (Sean Christopherson) - x86/cpu: Add VM page flush MSR availablility as a CPUID feature (Tom Lendacky) - x86/cpufeatures: Add SEV-ES CPU feature (Tom Lendacky) - x86/mm: fix poking_init() for Xen PV guests (Juergen Gross) [5.4.17-2136.324.1.el8] - io_uring: add support for registering ring file descriptors (Jens Axboe) [Orabug: 35485491] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rik van Riel) [Orabug: 35655117] - mm,thp,shm: limit gfp mask to no more than specified (Rik van Riel) [Orabug: 35655117] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rik van Riel) [Orabug: 35655117] - uek-rpm: Removing pre scriptlet to not allow firmware downgrade (Samasth Norway Ananda) [Orabug: 35741866] - rds: Remove gratuitous include of time.h from rds.h (Mark Haywood) [Orabug: 35742761] - RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device (Shay Drory) [Orabug: 35750824] - smp: Reduce NMI traffic from CSD waiters to CSD destination (Imran Khan) [Orabug: 35752501] - smp: Reduce logging due to dump_stack of CSD waiters (Imran Khan) [Orabug: 35752501] [5.4.17-2136.323.8.el8] - vhost-scsi: Fix alignment handling with windows (Mike Christie) [Orabug: 35769318] - Revert 'vhost/scsi: support non zerocopy iovecs' (Rajan Shanmugavelu) [Orabug: 35769318] [5.4.17-2136.323.7.el8] - x86: change default to spec_store_bypass_disable=prctl spectre_v2_user=prctl (Andrea Arcangeli) [Orabug: 35725160] - KVM: SVM: Add support for Virtual SPEC_CTRL (Babu Moger) [Orabug: 35725160] - x86/cpufeatures: Add the Virtual SPEC_CTRL feature (Babu Moger) [Orabug: 35725160] - x86/mm: Initialize text poking earlier (Peter Zijlstra) [Orabug: 35744495] - mm: Move mm_cachep initialization to mm_init() (Peter Zijlstra) [Orabug: 35744495] - x86/mm: Use mm_alloc() in poking_init() (Peter Zijlstra) [Orabug: 35744495] - mips: add support for TIF_NOTIFY_SIGNAL (Jens Axboe) [Orabug: 35749111] [5.4.17-2136.323.6.el8] - ek-rpm: Update kernel's linux-firmware dependency. (Brian Maly) [Orabug: 35742717] - nbd: make sure request completion won't concurrent (Yu Kuai) [Orabug: 35339589] - nbd: don't handle response without a corresponding request message (Yu Kuai) [Orabug: 35339589] - nvme: handle effects after freeing the request (Alan Adamson) [Orabug: 35411534] - x86/pkeys: Revert a5eff7259790 ('x86/pkeys: Add PKRU value to init_fpstate') (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - Documentation/x86: Fix backwards on/off logic about YMM support (Dave Hansen) [Orabug: 35714800] {CVE-2022-40982} - x86/xen: Fix secondary processors' FPU initialization (Juergen Gross) [Orabug: 35714800] {CVE-2022-40982} - KVM: Add GDS_NO support to KVM (Daniel Sneddon) [Orabug: 35714800] {CVE-2022-40982} - x86/speculation: Add Kconfig option for GDS (Daniel Sneddon) [Orabug: 35714800] {CVE-2022-40982} - x86/speculation: Add force option to GDS mitigation (Daniel Sneddon) [Orabug: 35714800] {CVE-2022-40982} - x86/speculation: Add Gather Data Sampling mitigation (Daniel Sneddon) [Orabug: 35714800] {CVE-2022-40982} - x86/fpu: Move FPU initialization into arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - x86/fpu: Mark init functions __init (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - x86/fpu: Remove cpuinfo argument from init functions (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - init, x86: Move mem_encrypt_init() into arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - init: Invoke arch_cpu_finalize_init() earlier (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - init: Remove check_bugs() leftovers (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - um/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - sparc/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - sh/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - mips/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - m68k/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - ia64/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - ARM: cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - x86/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - init: Provide arch_cpu_finalize_init() (Thomas Gleixner) [Orabug: 35714800] {CVE-2022-40982} - scsi: lpfc: Fix null pointer dereference due to prematurely released ndlp (Ketan Mukadam) [Orabug: 35729915] [5.4.17-2136.323.5.el8] - io_uring/net: save msghdr->msg_control for retries (Jens Axboe) [Orabug: 35495339] - io_uring/net: clear msg_controllen on partial sendmsg retry (Jens Axboe) [Orabug: 35495339] - io_uring/net: disable partial retries for recvmsg with cmsg (Jens Axboe) [Orabug: 35495339] - io_uring: hold uring mutex around poll removal (Jens Axboe) [Orabug: 35495339] - io_uring: avoid null-ptr-deref in io_arm_poll_handler (Fedor Pchelkin) [Orabug: 35495339] - io_uring/poll: allow some retries for poll triggering spuriously (Jens Axboe) [Orabug: 35495339] - io_uring: remove MSG_NOSIGNAL from recvmsg (David Lamparter) [Orabug: 35495339] - io_uring/rsrc: disallow multi-source reg buffers (Pavel Begunkov) [Orabug: 35495339] - io_uring: add a conditional reschedule to the IOPOLL cancelation loop (Jens Axboe) [Orabug: 35495339] - io_uring: mark task TASK_RUNNING before handling resume/task work (Jens Axboe) [Orabug: 35495339] - io_uring: handle TIF_NOTIFY_RESUME when checking for task_work (Jens Axboe) [Orabug: 35495339] - io_uring: ensure that io_init_req() passes in the right issue_flags (Jens Axboe) [Orabug: 35495339] - io_uring: add missing lock in io_get_file_fixed (Bing-Jhong Billy Jheng) [Orabug: 35495339] - io_uring/rw: remove leftover debug statement (Jens Axboe) [Orabug: 35495339] - io_uring/rw: ensure kiocb_end_write() is always called (Jens Axboe) [Orabug: 35495339] - io_uring: fix double poll leak on repolling (Pavel Begunkov) [Orabug: 35495339] - io_uring: Clean up a false-positive warning from GCC 9.3.0 (Alviro Iskandar Setiawan) [Orabug: 35495339] - io_uring/net: fix fast_iov assignment in io_setup_async_msg() (Stefan Metzmacher) [Orabug: 35495339] - io_uring: io_kiocb_update_pos() should not touch file for non -1 offset (Jens Axboe) [Orabug: 35495339] - io_uring/rw: defer fsnotify calls to task context (Jens Axboe) [Orabug: 35495339] - io_uring: do not recalculate ppos unnecessarily (Dylan Yudaken) [Orabug: 35495339] - io_uring: update kiocb->ki_pos at execution time (Dylan Yudaken) [Orabug: 35495339] - io_uring: remove duplicated calls to io_kiocb_ppos (Dylan Yudaken) [Orabug: 35495339] - io_uring: ensure that cached task references are always put on exit (Jens Axboe) [Orabug: 35495339] - io_uring: fix CQ waiting timeout handling (Pavel Begunkov) [Orabug: 35495339] - io_uring: lock overflowing for IOPOLL (Pavel Begunkov) [Orabug: 35495339] - io_uring: check for valid register opcode earlier (Jens Axboe) [Orabug: 35495339] - io_uring: fix async accept on O_NONBLOCK sockets (Dylan Yudaken) [Orabug: 35495339] - io_uring: allow re-poll if we made progress (Jens Axboe) [Orabug: 35495339] - io_uring: support MSG_WAITALL for IORING_OP_SEND(MSG) (Jens Axboe) [Orabug: 35495339] - io_uring: add flag for disabling provided buffer recycling (Jens Axboe) [Orabug: 35495339] - io_uring: ensure recv and recvmsg handle MSG_WAITALL correctly (Jens Axboe) [Orabug: 35495339] - io_uring: improve send/recv error handling (Pavel Begunkov) [Orabug: 35495339] - io_uring: don't gate task_work run on TIF_NOTIFY_SIGNAL (Jens Axboe) [Orabug: 35495339] - io_uring/io-wq: only free worker if it was allocated for creation (Jens Axboe) [Orabug: 35495339] - io_uring/io-wq: free worker if task_work creation is canceled (Jens Axboe) [Orabug: 35495339] - io_uring: Fix unsigned 'res' comparison with zero in io_fixup_rw_res() (Harshit Mogalapalli) [Orabug: 35495339] - io_uring: pass in EPOLL_URING_WAKE for eventfd signaling and wakeups (Jens Axboe) [Orabug: 35495339] - eventpoll: add EPOLL_URING_WAKE poll wakeup flag (Jens Axboe) [Orabug: 35495339] - epoll: simplify ep_poll_safewake() for CONFIG_DEBUG_LOCK_ALLOC (Jason Baron) [Orabug: 35495339] - eventfd: provide a eventfd_signal_mask() helper (Jens Axboe) [Orabug: 35495339] - signal: kill JOBCTL_TASK_WORK (Jens Axboe) [Orabug: 35495339] - net: remove cmsg restriction from io_uring based send/recvmsg calls (Jens Axboe) [Orabug: 35495339] - io_uring: import 5.15-stable io_uring (Jens Axboe) [Orabug: 35495339] - fs: provide locked helper variant of close_fd_get_file() (Jens Axboe) [Orabug: 35495339] - file: Rename __close_fd_get_file close_fd_get_file (Eric W. Biederman) [Orabug: 35495339] - fs: push the getname from do_rmdir into the callers (Christoph Hellwig) [Orabug: 35495339] - task_work: unconditionally run task_work from get_signal() (Jens Axboe) [Orabug: 35495339] - Revert 'proc: don't allow async path resolution of /proc/self components' (Jens Axboe) [Orabug: 35495339] - tools headers UAPI: Sync openat2.h with the kernel sources (Arnaldo Carvalho de Melo) [Orabug: 35495339] - fs: expose LOOKUP_CACHED through openat2() RESOLVE_CACHED (Jens Axboe) [Orabug: 35495339] - fix handling of nd->depth on LOOKUP_CACHED failures in try_to_unlazy* (Al Viro) [Orabug: 35495339] - fs: add support for LOOKUP_CACHED (Jens Axboe) [Orabug: 35495339] - x86/process: setup io_threads more like normal user space threads (Stefan Metzmacher) [Orabug: 35495339] - arch: setup PF_IO_WORKER threads like PF_KTHREAD (Jens Axboe) [Orabug: 35495339] - task_work: remove legacy TWA_SIGNAL path (Jens Axboe) [Orabug: 35495339] - Make sure nd->path.mnt and nd->path.dentry are always valid pointers (Al Viro) [Orabug: 35495339] - fs: make do_renameat2() take struct filename (Jens Axboe) [Orabug: 35495339] - kernel: allow fork with TIF_NOTIFY_SIGNAL pending (Jens Axboe) [Orabug: 35495339] - coredump: Limit what can interrupt coredumps (Eric W. Biederman) [Orabug: 35495339] - arm64: add support for TIF_NOTIFY_SIGNAL (Jens Axboe) [Orabug: 35495339] - arm: add support for TIF_NOTIFY_SIGNAL (Jens Axboe) [Orabug: 35495339] - task_work: Use TIF_NOTIFY_SIGNAL if available (Jens Axboe) [Orabug: 35495339] - entry: Add support for TIF_NOTIFY_SIGNAL (Jens Axboe) [Orabug: 35495339] - x86: Wire up TIF_NOTIFY_SIGNAL (Jens Axboe) [Orabug: 35495339] - signal: Add task_sigpending() helper (Jens Axboe) [Orabug: 35495339] - net: add accept helper not installing fd (Pavel Begunkov) [Orabug: 35495339] - net: provide __sys_shutdown_sock() that takes a socket (Jens Axboe) [Orabug: 35495339] - task_work: add helper for more targeted task_work canceling (Jens Axboe) [Orabug: 35495339] - kernel: don't call do_exit() for PF_IO_WORKER threads (Jens Axboe) [Orabug: 35495339] - kernel: stop masking signals in create_io_thread() (Jens Axboe) [Orabug: 35495339] - iov_iter: add helper to save iov_iter state (Jens Axboe) [Orabug: 35495339] - kernel: provide create_io_thread() helper (Jens Axboe) [Orabug: 35495339] - io_uring: add missing item types for splice request (Bing-Jhong Billy Jheng) [Orabug: 35495339] - io_uring: don't hold uring_lock when calling io_run_task_work* (Hao Xu) [Orabug: 35495339] - io_uring: kill goto error handling in io_sqpoll_wait_sq() (Jens Axboe) [Orabug: 35495339] - io_uring: correct pinned_vm accounting (Pavel Begunkov) [Orabug: 35495339] - io_uring: Use original task for req identity in io_identity_cow() (Lee Jones) [Orabug: 35495339] - io_uring: ensure that send/sendmsg and recv/recvmsg check sqe->ioprio (Jens Axboe) [Orabug: 35495339] - io_uring: use separate list entry for iopoll requests (Jens Axboe) [Orabug: 35495339] - io_uring: add missing item types for various requests (Jens Axboe) [Orabug: 35495339] - io_uring: fix using under-expanded iters (Pavel Begunkov) [Orabug: 35495339] - io_uring: don't re-import iovecs from callbacks (Pavel Begunkov) [Orabug: 35495339] - arm64: Remove TIF_NOHZ (Frederic Weisbecker) [Orabug: 35495339] - arm: Remove TIF_NOHZ (Frederic Weisbecker) [Orabug: 35495339] - x86: Remove TIF_NOHZ (Frederic Weisbecker) [Orabug: 35495339] - context-tracking: Introduce CONFIG_HAVE_TIF_NOHZ (Frederic Weisbecker) [Orabug: 35495339] - x86/entry: Remove _TIF_NOHZ from _TIF_WORK_SYSCALL_ENTRY (Thomas Gleixner) [Orabug: 35495339] - mm: allow a controlled amount of unfairness in the page lock (Linus Torvalds) [Orabug: 35565406] [5.4.17-2136.323.4.el8] - uek-rpm: Disable cls_tcindex in file tcindex-disable.conf (Sherry Yang) [Orabug: 35676248] - uek-rpm: Update kernel's linux-firmware dependency. (Somasundaram Krishnasamy) [Orabug: 35678692] - Revert 'sched/fair: sanitize vruntime of entity being placed' (Saeed Mirzamohammadi) [Orabug: 35683806] - Revert 'sched/fair: Sanitize vruntime of entity being migrated' (Saeed Mirzamohammadi) [Orabug: 35683806] [5.4.17-2136.323.3.el8] - LTS tag: v5.4.251 (Sherry Yang) - tracing/histograms: Return an error if we fail to add histogram to hist_vars list (Mohamed Khalfella) - tcp: annotate data-races around fastopenq.max_qlen (Eric Dumazet) - tcp: annotate data-races around tp->notsent_lowat (Eric Dumazet) - tcp: annotate data-races around rskq_defer_accept (Eric Dumazet) - tcp: annotate data-races around tp->linger2 (Eric Dumazet) - net: Replace the limit of TCP_LINGER2 with TCP_FIN_TIMEOUT_MAX (Cambda Zhu) - tcp: annotate data-races around tp->tcp_tx_delay (Eric Dumazet) - netfilter: nf_tables: can't schedule in nft_chain_validate (Florian Westphal) - netfilter: nf_tables: fix spurious set element insertion failure (Florian Westphal) - llc: Don't drop packet from non-root netns. (Kuniyuki Iwashima) - fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe (Zhang Shurong) - Revert 'tcp: avoid the lookup process failing to get sk in ehash table' (Kuniyuki Iwashima) - net:ipv6: check return value of pskb_trim() (Yuanjun Gong) - iavf: Fix use-after-free in free_netdev (Ding Hui) - net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()/cpsw_ale_set_field() (Tanmay Patil) - pinctrl: amd: Use amd_pinconf_set() for all config options (Mario Limonciello) - fbdev: imxfb: warn about invalid left/right margin (Martin Kaiser) - spi: bcm63xx: fix max prepend length (Jonas Gorski) - igb: Fix igb_down hung on surprise removal (Ying Hsu) - wifi: iwlwifi: mvm: avoid baid size integer overflow (Johannes Berg) - wifi: wext-core: Fix -Wstringop-overflow warning in ioctl_standard_iw_point() (Gustavo A. R. Silva) - devlink: report devlink_port_type_warn source device (Petr Oros) - bpf: Address KCSAN report on bpf_lru_list (Martin KaFai Lau) - sched/fair: Don't balance task to its current running CPU (Yicong Yang) - arm64: mm: fix VA-range sanity check (Mark Rutland) - posix-timers: Ensure timer ID search-loop limit is valid (Thomas Gleixner) - md/raid10: prevent soft lockup while flush writes (Yu Kuai) - md: fix data corruption for raid456 when reshape restart while grow up (Yu Kuai) - nbd: Add the maximum limit of allocated index in nbd_dev_add (Zhong Jinghua) - debugobjects: Recheck debug_objects_enabled before reporting (Tetsuo Handa) - ext4: correct inline offset when handling xattrs in inode body (Eric Whitney) - drm/client: Fix memory leak in drm_client_modeset_probe (Jocelyn Falempe) - drm/client: Fix memory leak in drm_client_target_cloned (Jocelyn Falempe) - can: bcm: Fix UAF in bcm_proc_show() (YueHaibing) - selftests: tc: set timeout to 15 minutes (Matthieu Baerts) - fuse: revalidate: don't invalidate if interrupted (Miklos Szeredi) - btrfs: fix warning when putting transaction with qgroups enabled after abort (Filipe Manana) - perf probe: Add test for regression introduced by switch to die_get_decl_file() (Georg Muller) - drm/atomic: Fix potential use-after-free in nonblocking commits (Daniel Vetter) - scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue (Manish Rangankar) - scsi: qla2xxx: Pointer may be dereferenced (Shreyas Deodhar) - scsi: qla2xxx: Correct the index of array (Bikash Hazarika) - scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() (Nilesh Javali) - scsi: qla2xxx: Fix potential NULL pointer dereference (Bikash Hazarika) - scsi: qla2xxx: Wait for io return on terminate rport (Quinn Tran) - tracing/probes: Fix not to count error code to total length (Masami Hiramatsu (Google)) - tracing: Fix null pointer dereference in tracing_err_log_open() (Mateusz Stachyra) - xtensa: ISS: fix call to split_if_spec (Max Filippov) - ring-buffer: Fix deadloop issue on reading trace_pipe (Zheng Yejian) - tracing/histograms: Add histograms to hist_vars if they have referenced variables (Mohamed Khalfella) - tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk (Christophe JAILLET) - tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error (Christophe JAILLET) - Revert '8250: add support for ASIX devices with a FIFO bug' (Jiaqing Zhao) - meson saradc: fix clock divider mask length (George Stark) - ceph: don't let check_caps skip sending responses for revoke msgs (Xiubo Li) - hwrng: imx-rngc - fix the timeout for init and self check (Martin Kaiser) - firmware: stratix10-svc: Fix a potential resource leak in svc_create_memory_pool() (Christophe JAILLET) - serial: atmel: don't enable IRQs prematurely (Dan Carpenter) - drm/rockchip: vop: Leave vblank enabled in self-refresh (Brian Norris) - drm/atomic: Allow vblank-enabled + self-refresh 'disable' (Brian Norris) - fs: dlm: return positive pid value for F_GETLK (Alexander Aring) - md/raid0: add discard support for the 'original' layout (Jason Baron) - misc: pci_endpoint_test: Re-init completion for every test (Damien Le Moal) - misc: pci_endpoint_test: Free IRQs before removing the device (Damien Le Moal) - PCI: rockchip: Set address alignment for endpoint mode (Damien Le Moal) - PCI: rockchip: Use u32 variable to access 32-bit registers (Rick Wertenbroek) - PCI: rockchip: Fix legacy IRQ generation for RK3399 PCIe endpoint core (Rick Wertenbroek) - PCI: rockchip: Add poll and timeout to wait for PHY PLLs to be locked (Rick Wertenbroek) - PCI: rockchip: Write PCI Device ID to correct register (Rick Wertenbroek) - PCI: rockchip: Assert PCI Configuration Enable bit after probe (Rick Wertenbroek) - PCI: qcom: Disable write access to read only registers for IP v2.3.3 (Manivannan Sadhasivam) - PCI: Add function 1 DMA alias quirk for Marvell 88SE9235 (Robin Murphy) - PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold (Ondrej Zary) - jfs: jfs_dmap: Validate db_l2nbperpage while mounting (Siddh Raman Pant) - ext4: only update i_reserved_data_blocks on successful block allocation (Baokun Li) - ext4: fix wrong unit use in ext4_mb_clear_bb (Kemeng Shi) - erofs: fix compact 4B support for 16k block size (Gao Xiang) - SUNRPC: Fix UAF in svc_tcp_listen_data_ready() (Ding Hui) - misc: fastrpc: Create fastrpc scalar with correct buffer count (Ekansh Gupta) - powerpc: Fail build if using recordmcount with binutils v2.37 (Naveen N Rao) - net: bcmgenet: Ensure MDIO unregistration has clocks enabled (Florian Fainelli) - mtd: rawnand: meson: fix unaligned DMA buffers handling (Arseniy Krasnov) - tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation (Jarkko Sakkinen) - pinctrl: amd: Only use special debounce behavior for GPIO 0 (Mario Limonciello) - pinctrl: amd: Detect internal GPIO0 debounce handling (Mario Limonciello) - pinctrl: amd: Fix mistake in handling clearing pins at startup (Mario Limonciello) - net/sched: make psched_mtu() RTNL-less safe (Pedro Tammela) - net/sched: flower: Ensure both minimum and maximum ports are specified (Ido Schimmel) - cls_flower: Add extack support for src and dst port range options (Guillaume Nault) - wifi: airo: avoid uninitialized warning in airo_get_rate() (Randy Dunlap) - erofs: avoid infinite loop in z_erofs_do_read_page() when reading beyond EOF (Chunhai Guo) - platform/x86: wmi: Break possible infinite loop when parsing GUID (Andy Shevchenko) - platform/x86: wmi: move variables (Barnabas Pocze) - platform/x86: wmi: use guid_t and guid_equal() (Barnabas Pocze) - platform/x86: wmi: remove unnecessary argument (Barnabas Pocze) - platform/x86: wmi: Fix indentation in some cases (Andy Shevchenko) - platform/x86: wmi: Replace UUID redefinitions by their originals (Andy Shevchenko) - ipv6/addrconf: fix a potential refcount underflow for idev (Ziyang Xuan) - NTB: ntb_tool: Add check for devm_kcalloc (Jiasheng Jiang) - NTB: ntb_transport: fix possible memory leak while device_register() fails (Yang Yingliang) - ntb: intel: Fix error handling in intel_ntb_pci_driver_init() (Yuan Can) - NTB: amd: Fix error handling in amd_ntb_pci_driver_init() (Yuan Can) - ntb: idt: Fix error handling in idt_pci_driver_init() (Yuan Can) - udp6: fix udp6_ehashfn() typo (Eric Dumazet) - icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev(). (Kuniyuki Iwashima) - ionic: remove WARN_ON to prevent panic_on_warn (Nitya Sunkad) - net/sched: cls_fw: Fix improper refcount update leads to use-after-free (M A Ramdhan) - net: mvneta: fix txq_map in case of txq_number==1 (Klaus Kudielka) - scsi: qla2xxx: Fix error code in qla2x00_start_sp() (Dan Carpenter) - igc: set TP bit in 'supported' and 'advertising' fields of ethtool_link_ksettings (Prasad Koya) - igc: Remove delay during TX ring configuration (Muhammad Husaini Zulkifli) - drm/panel: simple: Add connector_type for innolux_at043tn24 (Fabio Estevam) - drm/panel: Add and fill drm_panel type field (Laurent Pinchart) - drm/panel: Initialise panel dev and funcs through drm_panel_init() (Laurent Pinchart) - workqueue: clean up WORK_* constant types, clarify masking (Linus Torvalds) - net: lan743x: Don't sleep in atomic context (Moritz Fischer) - block/partition: fix signedness issue for Amiga partitions (Michael Schmitz) - tty: serial: fsl_lpuart: add earlycon for imx8ulp platform (Sherry Sun) - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Thadeu Lima de Souza Cascardo) - netfilter: conntrack: Avoid nf_ct_helper_hash uses after free (Florent Revest) - netfilter: nf_tables: fix scheduling-while-atomic splat (Florian Westphal) - netfilter: nf_tables: unbind non-anonymous set if rule construction fails (Pablo Neira Ayuso) - netfilter: nf_tables: reject unbound anonymous set before commit phase (Pablo Neira Ayuso) - netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain (Pablo Neira Ayuso) - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE (Pablo Neira Ayuso) - netfilter: nf_tables: add rescheduling points during loop detection walks (Florian Westphal) - netfilter: nf_tables: use net_generic infra for transaction data (Florian Westphal) - netfilter: add helper function to set up the nfnetlink header and use it (Pablo Neira Ayuso) - netfilter: nftables: add helper function to set the base sequence number (Pablo Neira Ayuso) - netfilter: nf_tables: fix nat hook table deletion (Florian Westphal) - block: add overflow checks for Amiga partition support (Michael Schmitz) - fanotify: disallow mount/sb marks on kernel internal pseudo fs (Amir Goldstein) - fs: no need to check source (Jan Kara) - ARM: orion5x: fix d2net gpio initialization (Arnd Bergmann) - btrfs: fix race when deleting quota root from the dirty cow roots list (Filipe Manana) - fs: Lock moved directories (Jan Kara) - fs: Establish locking order for unrelated directories (Jan Kara) - Revert 'f2fs: fix potential corruption when moving a directory' (Jan Kara) - ext4: Remove ext4 locking of moved directory (Jan Kara) - fs: avoid empty option when generating legacy mount string (Thomas Weissschuh) - jffs2: reduce stack usage in jffs2_build_xattr_subsystem() (Fabian Frederick) - integrity: Fix possible multiple allocation in integrity_inode_get() (Tianjia Zhang) - bcache: Remove unnecessary NULL point check in node allocations (Zheng Wang) - mmc: sdhci: fix DMA configure compatibility issue when 64bit DMA mode is used. (Chevron Li) - mmc: core: disable TRIM on Micron MTFC4GACAJCN-1M (Robert Marko) - mmc: core: disable TRIM on Kingston EMMC04G-M627 (Robert Marko) - NFSD: add encoding of op_recall flag for write delegation (Dai Ngo) - ALSA: jack: Fix mutex call in snd_jack_report() (Takashi Iwai) - i2c: xiic: Don't try to handle more interrupt events after error (Robert Hancock) - i2c: xiic: Defer xiic_wakeup() and __xiic_start_xfer() in xiic_process() (Marek Vasut) - sh: dma: Fix DMA channel offset calculation (Artur Rojek) - net: dsa: tag_sja1105: fix MAC DA patching from meta frames (Vladimir Oltean) - net/sched: act_pedit: Add size check for TCA_PEDIT_PARMS_EX (Lin Ma) - xsk: Honor SO_BINDTODEVICE on bind (Ilya Maximets) - xsk: Improve documentation for AF_XDP (Magnus Karlsson) - tcp: annotate data races in __tcp_oow_rate_limited() (Eric Dumazet) - net: bridge: keep ports without IFF_UNICAST_FLT in BR_PROMISC mode (Vladimir Oltean) - powerpc: allow PPC_EARLY_DEBUG_CPM only when SERIAL_CPM=y (Randy Dunlap) - f2fs: fix error path handling in truncate_dnode() (Chao Yu) - mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0 (Nishanth Menon) - spi: bcm-qspi: return error if neither hif_mspi nor mspi is available (Jonas Gorski) - Add MODULE_FIRMWARE() for FIRMWARE_TG357766. (Tobias Heider) - sctp: fix potential deadlock on &net->sctp.addr_wq_lock (Chengfeng Ye) - rtc: st-lpc: Release some resources in st_rtc_probe() in case of error (Christophe JAILLET) - pwm: sysfs: Do not apply state to already disabled PWMs (Marek Vasut) - pwm: imx-tpm: force 'real_period' to be zero in suspend (Fancy Fang) - mfd: stmpe: Only disable the regulators if they are enabled (Christophe JAILLET) - KVM: s390: vsie: fix the length of APCB bitmap (Pierre Morel) - mfd: stmfx: Fix error path in stmfx_chip_init (Amelie Delaunay) - serial: 8250_omap: Use force_suspend and resume for system suspend (Tony Lindgren) - mfd: intel-lpss: Add missing check for platform_get_resource (Jiasheng Jiang) - usb: dwc3: qcom: Release the correct resources in dwc3_qcom_remove() (Christophe JAILLET) - KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes (Nico Boehr) - mfd: rt5033: Drop rt5033-battery sub-device (Stephan Gerhold) - usb: hide unused usbfs_notify_suspend/resume functions (Arnd Bergmann) - usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe() (Li Yang) - extcon: Fix kernel doc of property capability fields to avoid warnings (Andy Shevchenko) - extcon: Fix kernel doc of property fields to avoid warnings (Andy Shevchenko) - usb: dwc3: qcom: Fix potential memory leak (Vladislav Efanov) - media: usb: siano: Fix warning due to null work_func_t function pointer (Duoming Zhou) - media: videodev2.h: Fix struct v4l2_input tuner index comment (Marek Vasut) - media: usb: Check az6007_read() return value (Daniil Dulov) - sh: j2: Use ioremap() to translate device tree address into kernel memory (John Paul Adrian Glaubitz) - w1: fix loop in w1_fini() (Dan Carpenter) - block: change all __u32 annotations to __be32 in affs_hardblocks.h (Michael Schmitz) - block: fix signed int overflow in Amiga partition support (Michael Schmitz) - usb: dwc3: gadget: Propagate core init errors to UDC during pullup (Krishna Kurapati) - USB: serial: option: add LARA-R6 01B PIDs (Davide Tronchin) - hwrng: st - keep clock enabled while hwrng is registered (Martin Kaiser) - hwrng: st - Fix W=1 unused variable warning (Herbert Xu) - NFSv4.1: freeze the session table upon receiving NFS4ERR_BADSESSION (Olga Kornievskaia) - ARC: define ASM_NL and __ALIGN(_STR) outside #ifdef __ASSEMBLY__ guard (Masahiro Yamada) - modpost: fix off by one in is_executable_section() (Dan Carpenter) - crypto: marvell/cesa - Fix type mismatch warning (Arnd Bergmann) - modpost: fix section mismatch message for R_ARM_{PC24,CALL,JUMP24} (Masahiro Yamada) - modpost: fix section mismatch message for R_ARM_ABS32 (Masahiro Yamada) - crypto: nx - fix build warnings when DEBUG_FS is not enabled (Randy Dunlap) - hwrng: virtio - Fix race on data_avail and actual data (Herbert Xu) - hwrng: virtio - always add a pending request (Laurent Vivier) - hwrng: virtio - don't waste entropy (Laurent Vivier) - hwrng: virtio - don't wait on cleanup (Laurent Vivier) - hwrng: virtio - add an internal buffer (Laurent Vivier) - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Aneesh Kumar K.V) - pinctrl: at91-pio4: check return value of devm_kasprintf() (Claudiu Beznea) - perf dwarf-aux: Fix off-by-one in die_get_varname() (Namhyung Kim) - pinctrl: cherryview: Return correct value if pin in push-pull mode (Andy Shevchenko) - PCI: Add pci_clear_master() stub for non-CONFIG_PCI (Sui Jingfeng) - PCI: ftpci100: Release the clock resources (Junyan Ye) - PCI: pciehp: Cancel bringup sequence if card is not present (Rongguang Wei) - scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() (Yuchen Yang) - PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free (Ding Hui) - scsi: qedf: Fix NULL dereference in error handling (Jinhong Zhu) - ASoC: imx-audmix: check return value of devm_kasprintf() (Claudiu Beznea) - clk: keystone: sci-clk: check return value of kasprintf() (Claudiu Beznea) - clk: cdce925: check return value of kasprintf() (Claudiu Beznea) - ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer (Su Hui) - clk: tegra: tegra124-emc: Fix potential memory leak (Yuan Can) - drm/radeon: fix possible division-by-zero errors (Nikita Zhandarovich) - drm/amdkfd: Fix potential deallocation of previously deallocated memory. (Daniil Dulov) - fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe() (Christophe JAILLET) - arm64: dts: renesas: ulcb-kf: Remove flow control for SCIF1 (Wolfram Sang) - IB/hfi1: Fix sdma.h tx->num_descs off-by-one errors (Patrick Kelsey) - soc/fsl/qe: fix usb.c build errors (Randy Dunlap) - ASoC: es8316: Do not set rate constraints for unsupported MCLKs (Cristian Ciocaltea) - ASoC: es8316: Increment max value for ALC Capture Target Volume control (Cristian Ciocaltea) - memory: brcmstb_dpfe: fix testing array offset after use (Krzysztof Kozlowski) - ARM: ep93xx: fix missing-prototype warnings (Arnd Bergmann) - drm/panel: simple: fix active size for Ampire AM-480272H3TMQW-T01H (Dario Binacchi) - arm64: dts: qcom: msm8916: correct camss unit address (Krzysztof Kozlowski) - ARM: dts: gta04: Move model property out of pinctrl node (Tony Lindgren) - RDMA/bnxt_re: Fix to remove an unnecessary log (Kalesh AP) - drm: sun4i_tcon: use devm_clk_get_enabled in sun4i_tcon_init_clocks (XuDong Liu) - Input: adxl34x - do not hardcode interrupt trigger type (Marek Vasut) - ARM: dts: BCM5301X: Drop 'clock-names' from the SPI node (Rafal Milecki) - Input: drv260x - sleep between polling GO bit (Luca Weiss) - radeon: avoid double free in ci_dpm_init() (Nikita Zhandarovich) - netlink: Add __sock_i_ino() for __netlink_diag_dump(). (Kuniyuki Iwashima) - ipvlan: Fix return value of ipvlan_queue_xmit() (Cambda Zhu) - netfilter: nf_conntrack_sip: fix the ct_sip_parse_numerical_param() return value. (Ilia.Gavrilov) - netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one (Florian Westphal) - lib/ts_bm: reset initial match offset for every block of text (Jeremy Sowden) - net: nfc: Fix use-after-free caused by nfc_llcp_find_local (Lin Ma) - nfc: llcp: simplify llcp_sock_connect() error paths (Krzysztof Kozlowski) - gtp: Fix use-after-free in __gtp_encap_destroy(). (Kuniyuki Iwashima) - selftests: rtnetlink: remove netdevsim device after ipsec offload test (Sabrina Dubroca) - netlink: do not hard code device address lenth in fdb dumps (Eric Dumazet) - netlink: fix potential deadlock in netlink_set_err() (Eric Dumazet) - wifi: ath9k: convert msecs to jiffies where needed (Dmitry Antipov) - wifi: cfg80211: rewrite merging of inherited elements (Benjamin Berg) - wifi: iwlwifi: pull from TXQs with softirqs disabled (Johannes Berg) - rtnetlink: extend RTEXT_FILTER_SKIP_STATS to IFLA_VF_INFO (Edwin Peer) - wifi: ath9k: Fix possible stall on ath9k_txq_list_has_key() (Remi Pommarel) - memstick r592: make memstick_debug_get_tpc_name() static (Arnd Bergmann) - kexec: fix a memory leak in crash_shrink_memory() (Zhen Lei) - watchdog/perf: more properly prevent false positives with turbo modes (Douglas Anderson) - watchdog/perf: define dummy watchdog_update_hrtimer_threshold() on correct config (Douglas Anderson) - wifi: rsi: Do not set MMC_PM_KEEP_POWER in shutdown (Marek Vasut) - wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes (Fedor Pchelkin) - wifi: ray_cs: Fix an error handling path in ray_probe() (Christophe JAILLET) - wifi: ray_cs: Drop useless status variable in parse_addr() (Andy Shevchenko) - wifi: ray_cs: Utilize strnlen() in parse_addr() (Andy Shevchenko) - wifi: wl3501_cs: Fix an error handling path in wl3501_probe() (Christophe JAILLET) - wl3501_cs: use eth_hw_addr_set() (Jakub Kicinski) - net: create netdev->dev_addr assignment helpers (Jakub Kicinski) - wl3501_cs: Fix misspelling and provide missing documentation (Lee Jones) - wl3501_cs: Remove unnecessary NULL check (Alex Dewar) - wl3501_cs: Fix a bunch of formatting issues related to function docs (Lee Jones) - wifi: atmel: Fix an error handling path in atmel_probe() (Christophe JAILLET) - wifi: orinoco: Fix an error handling path in orinoco_cs_probe() (Christophe JAILLET) - wifi: orinoco: Fix an error handling path in spectrum_cs_probe() (Christophe JAILLET) - regulator: core: Streamline debugfs operations (Geert Uytterhoeven) - regulator: core: Fix more error checking for debugfs_create_dir() (Geert Uytterhoeven) - nfc: llcp: fix possible use of uninitialized variable in nfc_llcp_send_connect() (Krzysztof Kozlowski) - nfc: constify several pointers to u8, char and sk_buff (Krzysztof Kozlowski) - wifi: mwifiex: Fix the size of a memory allocation in mwifiex_ret_802_11_scan() (Christophe JAILLET) - spi: spi-geni-qcom: Correct CS_TOGGLE bit in SPI_TRANS_CFG (Vijaya Krishna Nivarthi) - samples/bpf: Fix buffer overflow in tcp_basertt (Pengcheng Yang) - wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx (Fedor Pchelkin) - wifi: ath9k: fix AR9003 mac hardware hang check register offset calculation (Peter Seiderer) - ima: Fix build warnings (Roberto Sassu) - pstore/ram: Add check for kstrdup (Jiasheng Jiang) - evm: Complete description of evm_inode_setattr() (Roberto Sassu) - ARM: 9303/1: kprobes: avoid missing-declaration warnings (Arnd Bergmann) - powercap: RAPL: Fix CONFIG_IOSF_MBI dependency (Zhang Rui) - PM: domains: fix integer overflow issues in genpd_parse_state() (Nikita Zhandarovich) - clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe (Feng Mingxi) - clocksource/drivers/cadence-ttc: Use ttc driver as platform driver (Rajan Vaja) - tracing/timer: Add missing hrtimer modes to decode_hrtimer_mode(). (Sebastian Andrzej Siewior) - irqchip/jcore-aic: Fix missing allocation of IRQ descriptors (John Paul Adrian Glaubitz) - irqchip/jcore-aic: Kill use of irq_create_strict_mappings() (Marc Zyngier) - md/raid10: fix io loss while replacement replace rdev (Li Nan) - md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request (Li Nan) - md/raid10: fix wrong setting of max_corr_read_errors (Li Nan) - md/raid10: fix overflow of md/safe_mode_delay (Li Nan) - md/raid10: check slab-out-of-bounds in md_bitmap_get_counter (Li Nan) - x86/resctrl: Only show tasks' pid in current pid namespace (Shawn Wang) - x86/resctrl: Use is_closid_match() in more places (James Morse) - bgmac: fix *initial* chip reset to support BCM5358 (Rafal Milecki) - drm/amdgpu: Validate VM ioctl flags. (Bas Nieuwenhuizen) - scripts/tags.sh: Resolve gtags empty index generation (Ahmed S. Darwish) - drm/i915: Initialise outparam for error return from wait_for_register (Chris Wilson) - HID: wacom: Use ktime_t rather than int when dealing with timestamps (Jason Gerecke) - fbdev: imsttfb: Fix use after free bug in imsttfb_probe (Zheng Wang) - video: imsttfb: check for ioremap() failures (Greg Kroah-Hartman) - x86/smp: Use dedicated cache-line for mwait_play_dead() (Thomas Gleixner) - gfs2: Don't deref jdesc in evict (Bob Peterson) - LTS tag: v5.4.250 (Sherry Yang) [5.4.17-2136.323.2.el8] - x86/cpu/amd: Add a Zenbleed fix (Borislav Petkov (AMD)) [Orabug: 35641578] - x86/cpu/amd: Move the errata checking functionality up (Borislav Petkov (AMD)) [Orabug: 35641578] - ocfs2: always read both high and low parts of dinode link count (Alexey Asemov) [Orabug: 35643003] - ovl: Always reevaluate the file signature for IMA (Eric Snowberg) [Orabug: 35646439] - bpf: fix NULL pointer dereferences when vmlinux BTF is absent (Alan Maguire) [Orabug: 35623657] - SUNRPC: Ensure the transport backchannel association (Benjamin Coddington) [Orabug: 35643879] [5.4.17-2136.323.1.el8] - uek-rpm: Change the toolchain version in OL8 (Jack Vogel) [Orabug: 35378775] - net/rds: Allow MSG_NOSIGNAL in sendmsg (Gerd Rausch) [Orabug: 35640816] [5.4.17-2136.322.6.el8] - uek-rpm: Add netfilter modules to nano rpm (Samasth Norway Ananda) [Orabug: 35552175] - scsi: target: iscsi: Fix hang in the iSCSI login code (Maurizio Lombardi) [Orabug: 35484554] - scsi: target: iscsi: Fix a race condition between login_work and the login thread (Maurizio Lombardi) [Orabug: 35484554] - scsi: target: iscsi: Fix login error when receiving (Hou Pu) [Orabug: 35484554] - uek-rpm: Prevent cls_tcindex module to be loaded on demand (Sherry Yang) [Orabug: 35616810] [5.4.17-2136.322.5.el8] - cpufreq: intel_pstate: Adjust balance_performance EPP for Sapphire Rapids (Srinivas Pandruvada) [Orabug: 35524050] - cpufreq: intel_pstate: Update EPP for AlderLake mobile (Srinivas Pandruvada) [Orabug: 35524050] - cpufreq: intel_pstate: Fix active mode offline/online EPP handling (Rafael J. Wysocki) [Orabug: 35524050] - cpufreq: intel_pstate: Clear HWP Status during HWP Interrupt enable (Srinivas Pandruvada) [Orabug: 35524050] - cpufreq: intel_pstate: Fix unchecked MSR 0x773 access (Srinivas Pandruvada) [Orabug: 35524050] - cpufreq: intel_pstate: Clear HWP desired on suspend/shutdown and offline (Rafael J. Wysocki) [Orabug: 35524050] - cpufreq: intel_pstate: Process HWP Guaranteed change notification (Srinivas Pandruvada) [Orabug: 35524050] - cpufreq: intel_pstate: Override parameters if HWP forced by BIOS (Doug Smythies) [Orabug: 35524050] - cpufreq: intel_pstate: Use HWP if enabled by platform firmware (Rafael J. Wysocki) [Orabug: 35524050] - cpufreq: intel_pstate: Take CPUFREQ_GOV_STRICT_TARGET into account (Rafael J. Wysocki) [Orabug: 35524050] - cpufreq: Add strict_target to struct cpufreq_policy (Rafael J. Wysocki) [Orabug: 35524050] - cpufreq: Introduce CPUFREQ_GOV_STRICT_TARGET (Rafael J. Wysocki) [Orabug: 35524050] - cpufreq: Introduce governor flags (Rafael J. Wysocki) [Orabug: 35524050] - cpufreq: intel_pstate: Avoid missing HWP max updates in passive mode (Rafael J. Wysocki) [Orabug: 35524050] - cpufreq: Introduce CPUFREQ_NEED_UPDATE_LIMITS driver flag (Rafael J. Wysocki) [Orabug: 35524050] - cpufreq: intel_pstate: Add ->offline and ->online callbacks (Rafael J. Wysocki) [Orabug: 35524050] - cpufreq: intel_pstate: Tweak the EPP sysfs interface (Rafael J. Wysocki) [Orabug: 35524050] - cpufreq: intel_pstate: Update cached EPP in the active mode (Rafael J. Wysocki) [Orabug: 35524050] - cpufreq: intel_pstate: Implement passive mode with HWP enabled (Rafael J. Wysocki) [Orabug: 35524050] - cpufreq: intel_pstate: Rearrange the storing of new EPP values (Rafael J. Wysocki) [Orabug: 35524050] - cpufreq: intel_pstate: Avoid enabling HWP if EPP is not supported (Rafael J. Wysocki) [Orabug: 35524050] - cpufreq: intel_pstate: Clean up aperf_mperf_shift description (Rafael J. Wysocki) [Orabug: 35524050] - cpufreq: intel_pstate: Supply struct attribute description for get_aperf_mperf_shift() (Lee Jones) [Orabug: 35524050] - cpufreq: intel_pstate: Fix active mode setting from command line (Rafael J. Wysocki) [Orabug: 35524050] - cpufreq: intel_pstate: Fix static checker warning for epp variable (Srinivas Pandruvada) [Orabug: 35524050] - cpufreq: intel_pstate: Allow raw energy performance preference value (Srinivas Pandruvada) [Orabug: 35524050] - cpufreq: intel_pstate: Allow enable/disable energy efficiency (Srinivas Pandruvada) [Orabug: 35524050] - cpufreq: intel_pstate: Add one more OOB control bit (Srinivas Pandruvada) [Orabug: 35524050] - cpufreq: intel_pstate: Use passive mode by default without HWP (Rafael J. Wysocki) [Orabug: 35524050] [5.4.17-2136.322.4.el8] - tools/resolve_btfids: Use pkg-config to locate libelf (Shen Jiamin) [Orabug: 35110384] - tools resolve_btfids: Always force HOSTARCH (Jiri Olsa) [Orabug: 35110384] - bpf: Fix cross build for CONFIG_DEBUG_INFO_BTF option (Jiri Olsa) [Orabug: 35110384] - bpf: Add BPF_FUNC_jiffies64 (Martin KaFai Lau) [Orabug: 35110384] - selftests/bpf: Add Userspace tests for TCP_WINDOW_CLAMP (Prankur gupta) [Orabug: 35110384] - bpf: Support bitfield read access in btf_struct_access (Martin KaFai Lau) [Orabug: 35110384] - bpf: Enable bpf_skc_to_* sock casting helper to networking prog type (Martin KaFai Lau) [Orabug: 35110384] - bpf: Add bpf_skc_to_{tcp, tcp_timewait, tcp_request}_sock() helpers (Yonghong Song) [Orabug: 35110384] - bpf: Add bpf_skc_to_tcp6_sock() helper (Alan Maguire) [Orabug: 35110384] - bpf: Fix race in btf_resolve_helper_id() (Alexei Starovoitov) [Orabug: 35110384] - bpf: Add PTR_TO_BTF_ID_OR_NULL support (Alan Maguire) [Orabug: 35110384] - bpf: Compile resolve_btfids tool at kernel compilation start (Jiri Olsa) [Orabug: 35110384] - bpf: Resolve BTF IDs in vmlinux image (Jiri Olsa) [Orabug: 35110384] - bpf: Add resolve_btfids tool to resolve BTF IDs in ELF object (Jiri Olsa) [Orabug: 35110384] - bpf: Add BTF_ID_LIST/BTF_ID/BTF_ID_UNUSED macros (Jiri Olsa) [Orabug: 35110384] - bpf: Replace prog_raw_tp+btf_id with prog_tracing (Alexei Starovoitov) [Orabug: 35110384] - bpf: Fix bpf_attr.attach_btf_id check (Alexei Starovoitov) [Orabug: 35110384] - bpf: Prepare btf_ctx_access for non raw_tp use case (Martin KaFai Lau) [Orabug: 35110384] - bpf: Enforce 'return 0' in BTF-enabled raw_tp programs (Alexei Starovoitov) [Orabug: 35110384] - libbpf: Update BTF reloc support to latest Clang format (Andrii Nakryiko) [Orabug: 35110384] - bpf: Add array support to btf_struct_access (Martin KaFai Lau) [Orabug: 35110384] - bpf: Check types of arguments passed into helpers (Alexei Starovoitov) [Orabug: 35110384] - bpf: Add support for BTF pointers to x86 JIT (Alan Maguire) [Orabug: 35110384] - bpf: Add support for BTF pointers to interpreter (Alexei Starovoitov) [Orabug: 35110384] - bpf: Attach raw_tp program with BTF via type name (Alexei Starovoitov) [Orabug: 35110384] - bpf: Implement accurate raw_tp context access via BTF (Alexei Starovoitov) [Orabug: 35110384] - libbpf: Fix strncat bounds error in libbpf_prog_type_by_name (KP Singh) [Orabug: 35110384] - libbpf: Auto-detect btf_id of BTF-based raw_tracepoints (Alexei Starovoitov) [Orabug: 35110384] - bpf: Add attach_btf_id attribute to program load (Alexei Starovoitov) [Orabug: 35110384] - bpf: Process in-kernel BTF (Alexei Starovoitov) [Orabug: 35110384] - bpf: Add typecast to bpf helpers to help BTF generation (Alexei Starovoitov) [Orabug: 35110384] - bpf: Add typecast to raw_tracepoints to help BTF generation (Alexei Starovoitov) [Orabug: 35110384] - RDMA/restrack: Release MR restrack when delete (Mark Zhang) [Orabug: 35256660] [5.4.17-2136.322.3.el8] - xfs: don't drain buffer lru on freeze and read-only remount (Brian Foster) [Orabug: 35389985] - xfs: rename xfs_wait_buftarg() to xfs_buftarg_drain() (Brian Foster) [Orabug: 35389985] [5.4.17-2136.322.2.el8] - LTS tag: v5.4.249 (Sherry Yang) - xfs: verify buffer contents when we skip log replay (Darrick J. Wong) - mm: make wait_on_page_writeback() wait for multiple pending writebacks (Linus Torvalds) - mm: fix VM_BUG_ON(PageTail) and BUG_ON(PageWriteback) (Hugh Dickins) - i2c: imx-lpi2c: fix type char overflow issue when calculating the clock cycle (Clark Wang) - x86/apic: Fix kernel panic when booting with intremap=off and x2apic_phys (Dheeraj Kumar Srivastava) - drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl (Min Li) - drm/exynos: fix race condition UAF in exynos_g2d_exec_ioctl (Min Li) - drm/exynos: vidi: fix a wrong error return (Inki Dae) - ARM: dts: Fix erroneous ADS touchscreen polarities (Linus Walleij) - ASoC: nau8824: Add quirk to active-high jack-detect (Edson Juliano Drosdeck) - s390/cio: unregister device when the only path is gone (Vineeth Vijayan) - usb: gadget: udc: fix NULL dereference in remove() (Dan Carpenter) - nfcsim.c: Fix error checking for debugfs_create_dir (Osama Muhammad) - media: cec: core: don't set last_initiator if tx in progress (Hans Verkuil) - arm64: Add missing Set/Way CMO encodings (Marc Zyngier) - HID: wacom: Add error check to wacom_parse_and_register() (Denis Arefev) - scsi: target: iscsi: Prevent login threads from racing between each other (Maurizio Lombardi) - sch_netem: acquire qdisc lock in netem_change() (Eric Dumazet) - Revert 'net: phy: dp83867: perform soft reset and retain established link' (Francesco Dolcini) - netfilter: nfnetlink_osf: fix module autoload (Pablo Neira Ayuso) - netfilter: nf_tables: disallow element updates of bound anonymous sets (Pablo Neira Ayuso) - be2net: Extend xmit workaround to BE3 chip (Ross Lagerwall) - net: dsa: mt7530: fix trapping frames on non-MT7621 SoC MT7530 switch (Arinc UNAL) - ipvs: align inner_mac_header for encapsulation (Terin Stock) - mmc: usdhi60rol0: fix deferred probing (Sergey Shtylyov) - mmc: sh_mmcif: fix deferred probing (Sergey Shtylyov) - mmc: sdhci-acpi: fix deferred probing (Sergey Shtylyov) - mmc: omap_hsmmc: fix deferred probing (Sergey Shtylyov) - mmc: omap: fix deferred probing (Sergey Shtylyov) - mmc: mvsdio: fix deferred probing (Sergey Shtylyov) - mmc: mvsdio: convert to devm_platform_ioremap_resource (Yangtao Li) - mmc: mtk-sd: fix deferred probing (Sergey Shtylyov) - net: qca_spi: Avoid high load if QCA7000 is not available (Stefan Wahren) - xfrm: Linearize the skb after offloading if needed. (Sebastian Andrzej Siewior) - ieee802154: hwsim: Fix possible memory leaks (Chen Aotian) - x86/mm: Avoid using set_pgd() outside of real PGD pages (Lee Jones) - nilfs2: prevent general protection fault in nilfs_clear_dirty_page() (Ryusuke Konishi) - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) - ip_tunnels: allow VXLAN/GENEVE to inherit TOS/TTL from VLAN (Matthias May) - mmc: meson-gx: remove redundant mmc_request_done() call from irq context (Martin Hundeboll) - cgroup: Do not corrupt task iteration when rebinding subsystem (Xiu Jianfeng) - PCI: hv: Fix a race condition bug in hv_pci_query_relations() (Dexuan Cui) - Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs (Michael Kelley) - nilfs2: fix buffer corruption due to concurrent device reads (Ryusuke Konishi) - media: dvb-core: Fix use-after-free due to race at dvb_register_device() (Hyunwoo Kim) - media: dvbdev: fix error logic at dvb_register_device() (Mauro Carvalho Chehab) - media: dvbdev: Fix memleak in dvb_register_device (Dinghao Liu) - x86/purgatory: remove PGO flags (Ricardo Ribalda) - tracing: Add tracing_reset_all_online_cpus_unlocked() function (Steven Rostedt (Google)) - epoll: ep_autoremove_wake_function should use list_del_init_careful (Benjamin Segall) - list: add 'list_del_init_careful()' to go with 'list_empty_careful()' (Linus Torvalds) - mm: rewrite wait_on_page_bit_common() logic (Linus Torvalds) - nilfs2: reject devices with insufficient block count (Ryusuke Konishi) - LTS tag: v5.4.248 (Sherry Yang) - mmc: block: ensure error propagation for non-blk (Christian Loehle) - drm/nouveau/kms: Fix NULL pointer dereference in nouveau_connector_detect_depth (Alexander Kapshuk) - neighbour: delete neigh_lookup_nodev as not used (Leon Romanovsky) - net: Remove unused inline function dst_hold_and_use() (Gaosheng Cui) - neighbour: Remove unused inline function neigh_key_eq16() (Gaosheng Cui) - afs: Fix vlserver probe RTT handling (David Howells) - selftests/ptp: Fix timestamp printf format for PTP_SYS_OFFSET (Alex Maftei) - net: tipc: resize nlattr array to correct size (Lin Ma) - net: lapbether: only support ethernet devices (Eric Dumazet) - net/sched: cls_api: Fix lockup on flushing explicitly created chain (Vlad Buslov) - drm/nouveau: add nv_encoder pointer check for NULL (Natalia Petrova) - drm/nouveau/kms: Don't change EDID when it hasn't actually changed (Lyude Paul) - drm/nouveau/dp: check for NULL nv_connector->native_mode (Natalia Petrova) - igb: fix nvm.ops.read() error handling (Aleksandr Loktionov) - sctp: fix an error code in sctp_sf_eat_auth() (Dan Carpenter) - ipvlan: fix bound dev checking for IPv6 l3s mode (Hangbin Liu) - IB/isert: Fix incorrect release of isert connection (Saravanan Vajravel) - IB/isert: Fix possible list corruption in CMA handler (Saravanan Vajravel) - IB/isert: Fix dead lock in ib_isert (Saravanan Vajravel) - IB/uverbs: Fix to consider event queue closing also upon non-blocking mode (Yishai Hadas) - iavf: remove mask from iavf_irq_enable_queues() (Ahmed Zaki) - RDMA/rxe: Fix the use-before-initialization error of resp_pkts (Zhu Yanjun) - RDMA/rxe: Removed unused name from rxe_task struct (Bob Pearson) - RDMA/rxe: Remove the unused variable obj (Zhu Yanjun) - net/sched: cls_u32: Fix reference counter leak leading to overflow (Lee Jones) - ping6: Fix send to link-local addresses with VRF. (Guillaume Nault) - netfilter: nfnetlink: skip error delivery on batch in case of ENOMEM (Pablo Neira Ayuso) - spi: fsl-dspi: avoid SCK glitches with continuous transfers (Vladimir Oltean) - spi: spi-fsl-dspi: Remove unused chip->void_write_data (Vladimir Oltean) - usb: dwc3: gadget: Reset num TRBs before giving back the request (Elson Roy Serrao) - serial: lantiq: add missing interrupt ack (Bernhard Seibold) - USB: serial: option: add Quectel EM061KGL series (Jerry Meng) - Remove DECnet support from kernel (Stephen Hemminger) - ALSA: hda/realtek: Add a quirk for Compaq N14JP6 (Edson Juliano Drosdeck) - net: usb: qmi_wwan: add support for Compal RXM-G1 (Wes Huang) - RDMA/uverbs: Restrict usage of privileged QKEYs (Edward Srouji) - nouveau: fix client work fence deletion race (Dave Airlie) - powerpc/purgatory: remove PGO flags (Ricardo Ribalda) - kexec: support purgatories with .text.hot sections (Ricardo Ribalda) - nilfs2: fix possible out-of-bounds segment allocation in resize ioctl (Ryusuke Konishi) - nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key() (Ryusuke Konishi) - nios2: dts: Fix tse_mac 'max-frame-size' property (Janne Grunau) - ocfs2: check new file size on fallocate call (Luis Henriques) - ocfs2: fix use-after-free when unmounting read-only filesystem (Luis Henriques) - drm:amd:amdgpu: Fix missing buffer object unlock in failure path (Sukrut Bellary) - xen/blkfront: Only check REQ_FUA for writes (Ross Lagerwall) - mips: Move initrd_start check after initrd address sanitisation. (Liviu Dudau) - MIPS: Alchemy: fix dbdma2 (Manuel Lauss) - parisc: Flush gatt writes and adjust gatt mask in parisc_agp_mask_memory() (Helge Deller) - parisc: Improve cache flushing for PCXL in arch_sync_dma_for_cpu() (Helge Deller) - btrfs: handle memory allocation failure in btrfs_csum_one_bio (Johannes Thumshirn) - power: supply: Fix logic checking if system is running from battery (Mario Limonciello) - irqchip/meson-gpio: Mark OF related data as maybe unused (Krzysztof Kozlowski) - regulator: Fix error checking for debugfs_create_dir (Osama Muhammad) - platform/x86: asus-wmi: Ignore WMI events with codes 0x7B, 0xC0 (Alexandru Sorodoc) - power: supply: Ratelimit no data debug output (Marek Vasut) - ARM: dts: vexpress: add missing cache properties (Krzysztof Kozlowski) - power: supply: bq27xxx: Use mod_delayed_work() instead of cancel() + schedule() (Hans de Goede) - power: supply: sc27xx: Fix external_power_changed race (Hans de Goede) - power: supply: ab8500: Fix external_power_changed race (Hans de Goede) - s390/dasd: Use correct lock while counting channel queue length (Jan Hoppner) - dasd: refactor dasd_ioctl_information (Christoph Hellwig) - KEYS: asymmetric: Copy sig and digest in public_key_verify_signature() (Roberto Sassu) - test_firmware: fix a memory leak with reqs buffer (Mirsad Goran Todorovac) - LTS tag: v5.4.247 (Sherry Yang) - mtd: spinand: macronix: Add support for MX35LFxGE4AD (YouChing Lin) - btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() (Zixuan Fu) - btrfs: check return value of btrfs_commit_transaction in relocation (Josef Bacik) - rbd: get snapshot context after exclusive lock is ensured to be held (Ilya Dryomov) - drm/atomic: Don't pollute crtc_state->mode_blob with error pointers (Ville Syrjala) - ext4: only check dquot_initialize_needed() when debugging (Theodore Ts'o) - eeprom: at24: also select REGMAP (Randy Dunlap) - i2c: sprd: Delete i2c adapter in .remove's error path (Uwe Kleine-Konig) - bonding (gcc13): synchronize bond_{a,t}lb_xmit() types (Jiri Slaby (SUSE)) - usb: usbfs: Use consistent mmap functions (Ruihan Li) - usb: usbfs: Enforce page requirements for mmap (Ruihan Li) - pinctrl: meson-axg: add missing GPIOA_18 gpio group (Martin Hundeboll) - rbd: move RBD_OBJ_FLAG_COPYUP_ENABLED flag setting (Ilya Dryomov) - Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk (Luiz Augusto von Dentz) - ceph: fix use-after-free bug for inodes when flushing capsnaps (Xiubo Li) - can: j1939: avoid possible use-after-free when j1939_can_rx_register fails (Fedor Pchelkin) - can: j1939: change j1939_netdev_lock type to mutex (Fedor Pchelkin) - can: j1939: j1939_sk_send_loop_abort(): improved error queue handling in J1939 Socket (Oleksij Rempel) - drm/amdgpu: fix xclk freq on CHIP_STONEY (Chia-I Wu) - ALSA: hda/realtek: Add Lenovo P3 Tower platform (RenHai) - ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01 (Ai Chao) - Input: psmouse - fix OOB access in Elantech protocol (Dmitry Torokhov) - Input: xpad - delete a Razer DeathAdder mouse VID/PID entry (Ismael Ferreras Morezuelas) - batman-adv: Broken sync while rescheduling delayed work (Vladislav Efanov) - bnxt_en: Query default VLAN before VNIC setup on a VF (Somnath Kotur) - net: sched: fix possible refcount leak in tc_chain_tmplt_add() (Hangyu Hua) - net: sched: move rtm_tca_policy declaration to include file (Eric Dumazet) - rfs: annotate lockless accesses to RFS sock flow table (Eric Dumazet) - rfs: annotate lockless accesses to sk->sk_rxhash (Eric Dumazet) - netfilter: ipset: Add schedule point in call_ad(). (Kuniyuki Iwashima) - netfilter: conntrack: fix NULL pointer dereference in nf_confirm_cthelper (Tijs Van Buggenhout) - Bluetooth: L2CAP: Add missing checks for invalid DCID (Sungwoo Kim) - Bluetooth: Fix l2cap_disconnect_req deadlock (Ying Hsu) - net: dsa: lan9303: allow vid != 0 in port_fdb_{add|del} methods (Alexander Sverdlin) - neighbour: fix unaligned access to pneigh_entry (Qingfang DENG) - neighbour: Replace zero-length array with flexible-array member (Gustavo A. R. Silva) - spi: qup: Request DMA before enabling clocks (Stephan Gerhold) - i40e: fix build warnings in i40e_alloc.h (Greg Kroah-Hartman) - i40iw: fix build warning in i40iw_manage_apbvt() (Greg Kroah-Hartman) - block/blk-iocost (gcc13): keep large values in a new enum (Jiri Slaby (SUSE)) - blk-iocost: avoid 64-bit division in ioc_timer_fn (Arnd Bergmann) - LTS tag: v5.4.246 (Sherry Yang) - drm/edid: fix objtool warning in drm_cvt_modes() (Linus Torvalds) - wifi: rtlwifi: 8192de: correct checking of IQK reload (Ping-Ke Shih) - drm/edid: Fix uninitialized variable in drm_cvt_modes() (Lyude Paul) - RDMA/bnxt_re: Remove the qp from list only if the qp destroy succeeds (Selvin Xavier) - scsi: dpt_i2o: Do not process completions with invalid addresses (Ben Hutchings) - scsi: dpt_i2o: Remove broken pass-through ioctl (I2OUSERCMD) (Ben Hutchings) - regmap: Account for register length when chunking (Jim Wylder) - test_firmware: fix the memory leak of the allocated firmware buffer (Mirsad Goran Todorovac) - fbcon: Fix null-ptr-deref in soft_cursor (Helge Deller) - ext4: add lockdep annotations for i_data_sem for ea_inode's (Theodore Ts'o) - ext4: disallow ea_inodes with extended attributes (Theodore Ts'o) - ext4: set lockdep subclass for the ea_inode in ext4_xattr_inode_cache_find() (Theodore Ts'o) - ext4: add EA_INODE checking to ext4_iget() (Theodore Ts'o) - tracing/probe: trace_probe_primary_from_call(): checked list_first_entry (Pietro Borrello) - tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break instead of UARTCTRL_SBK (Sherry Sun) - mmc: vub300: fix invalid response handling (Deren Wu) - wifi: rtlwifi: remove always-true condition pointed out by GCC 12 (Jakub Kicinski) - lib/dynamic_debug.c: use address-of operator on section symbols (Nathan Chancellor) - treewide: Remove uninitialized_var() usage (Kees Cook) - kernel/extable.c: use address-of operator on section symbols (Nathan Chancellor) - eth: sun: cassini: remove dead code (Martin Liska) - gcc-12: disable '-Wdangling-pointer' warning for now (Linus Torvalds) - ACPI: thermal: drop an always true check (Adam Borowski) - x86/boot: Wrap literal addresses in absolute_pointer() (Kees Cook) - flow_dissector: work around stack frame size warning (Arnd Bergmann) - ata: libata-scsi: Use correct device no in ata_find_dev() (Damien Le Moal) - scsi: stex: Fix gcc 13 warnings (Bart Van Assche) - misc: fastrpc: reject new invocations during device removal (Richard Acayan) - misc: fastrpc: return -EPIPE to invocations on device removal (Richard Acayan) - usb: gadget: f_fs: Add unbind event before functionfs_unbind (Uttkarsh Aggarwal) - net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818 (Sebastian Krzyszkowiak) - iio: dac: build ad5758 driver when AD5758 is selected (Lukas Bulwahn) - iio: dac: mcp4725: Fix i2c_master_send() return value handling (Marek Vasut) - iio: light: vcnl4035: fixed chip ID check (Frank Li) - HID: wacom: avoid integer overflow in wacom_intuos_inout() (Nikita Zhandarovich) - HID: google: add jewel USB id (Sung-Chi Li) - iio: adc: mxs-lradc: fix the order of two cleanup operations (Jiakai Luo) - mailbox: mailbox-test: fix a locking issue in mbox_test_message_write() (Dan Carpenter) - atm: hide unused procfs functions (Arnd Bergmann) - ALSA: oss: avoid missing-prototype warnings (Arnd Bergmann) - netfilter: conntrack: define variables exp_nat_nla_policy and any_addr with CONFIG_NF_NAT (Tom Rix) - wifi: b43: fix incorrect __packed annotation (Arnd Bergmann) - scsi: core: Decrease scsi_device's iorequest_cnt if dispatch failed (Wenchao Hao) - arm64/mm: mark private VM_FAULT_X defines as vm_fault_t (Min-Hua Chen) - ARM: dts: stm32: add pin map for CAN controller on stm32f7 (Dario Binacchi) - wifi: rtl8xxxu: fix authentication timeout due to incorrect RCR value (Yun Lu) - media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 (Hyunwoo Kim) - media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() (Takashi Iwai) {CVE-2023-31084} - media: dvb-core: Fix use-after-free due on race condition at dvb_net (Hyunwoo Kim) - media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr from ID table (Krzysztof Kozlowski) - media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb() (Hyunwoo Kim) - media: dvb_ca_en50221: fix a size write bug (YongSu Yoo) - media: netup_unidvb: fix irq init by register it at the end of probe (Wei Chen) - media: dvb-usb: dw2102: fix uninit-value in su3000_read_mac_address (Wei Chen) - media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer() (Wei Chen) - media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer (Zhang Shurong) - media: dvb-usb-v2: ce6230: fix null-ptr-deref in ce6230_i2c_master_xfer() (Wei Chen) - media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer() (Wei Chen) - media: dvb-usb: az6027: fix three null-ptr-deref in az6027_i2c_xfer() (Wei Chen) - media: dvb_demux: fix a bug for the continuity counter (YongSu Yoo) - ASoC: ssm2602: Add workaround for playback distortions (Pawel Anikiel) - xfrm: Check if_id in inbound policy/secpath match (Benedict Wong) - ASoC: dwc: limit the number of overrun messages (Maxim Kochetkov) - nbd: Fix debugfs_create_dir error checking (Ivan Orlov) - fbdev: stifb: Fix info entry in sti_struct on error path (Helge Deller) - fbdev: modedb: Add 1920x1080 at 60 Hz video mode (Helge Deller) - media: rcar-vin: Select correct interrupt mode for V4L2_FIELD_ALTERNATE (Niklas Soderlund) - ARM: 9295/1: unwind:fix unwind abort for uleb128 case (Haibo Li) - mailbox: mailbox-test: Fix potential double-free in mbox_test_message_write() (Lee Jones) - watchdog: menz069_wdt: fix watchdog initialisation (Johannes Thumshirn) - mtd: rawnand: marvell: don't set the NAND frequency select (Chris Packham) - mtd: rawnand: marvell: ensure timing values are written (Chris Packham) - net: dsa: mv88e6xxx: Increase wait after reset deactivation (Andreas Svensson) - net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Hangyu Hua) - udp6: Fix race condition in udp6_sendmsg & connect (Vladislav Efanov) - net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report (Pedro Tammela) - ocfs2/dlm: move BITS_TO_BYTES() to bitops.h for wider use (Andy Shevchenko) - net: sched: fix NULL pointer dereference in mq_attach (Zhengchao Shao) - net/sched: Prohibit regrafting ingress or clsact Qdiscs (Peilin Ye) - net/sched: Reserve TC_H_INGRESS (TC_H_CLSACT) for ingress (clsact) Qdiscs (Peilin Ye) - net/sched: sch_clsact: Only create under TC_H_CLSACT (Peilin Ye) - net/sched: sch_ingress: Only create under TC_H_INGRESS (Peilin Ye) - tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if user_mss set (Cambda Zhu) - tcp: deny tcp_disconnect() when threads are waiting (Eric Dumazet) - af_packet: do not use READ_ONCE() in packet_bind() (Eric Dumazet) - mtd: rawnand: ingenic: fix empty stub helper definitions (Arnd Bergmann) - amd-xgbe: fix the false linkup in xgbe_phy_status (Raju Rangoju) - af_packet: Fix data-races of pkt_sk(sk)->num. (Kuniyuki Iwashima) - netrom: fix info-leak in nr_write_internal() (Eric Dumazet) - net/mlx5: fw_tracer, Fix event handling (Shay Drory) - dmaengine: pl330: rename _start to prevent build error (Randy Dunlap) - iommu/rockchip: Fix unwind goto issue (Chao Wang) - RDMA/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx (Kalesh AP) - RDMA/efa: Fix unsupported page sizes in device (Yonatan Nachum) [5.4.17-2136.322.1.el8] - EDAC/i10nm: Add driver decoder for Sapphire Rapids server (Youquan Song) [Orabug: 35524077] - EDAC/i10nm: Add driver decoder for Ice Lake and Tremont CPUs (Youquan Song) [Orabug: 35524077] - EDAC/i10nm: Retrieve and print retry_rd_err_log registers (Youquan Song) [Orabug: 35524077] - EDAC, skx: Retrieve and print retry_rd_err_log registers (Tony Luck) [Orabug: 35524077] - EDAC/i10nm: Release mdev/mbase when failing to detect HBM (Qiuxu Zhuo) [Orabug: 35524077] - EDAC/i10nm: Add support for high bandwidth memory (Qiuxu Zhuo) [Orabug: 35524077] - EDAC: Replace EDAC_DIMM_PTR() macro with edac_get_dimm() function (Robert Richter) [Orabug: 35524077] [5.4.17-2136.321.4.el8] - tick/common: Align tick period during sched_timer setup (Thomas Gleixner) [Orabug: 35520079] - net/rds: Fix endless rds_send_xmit() loop if cp_index > 0 (Gerd Rausch) [Orabug: 35510149] [5.4.17-2136.321.3.el8] - selinux: don't use make's grouped targets feature yet (Paul Moore) - lib: cpu_rmap: Fix potential use-after-free in irq_cpu_rmap_release() (Ben Hutchings) - Revert 'staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE' (Greg Kroah-Hartman) - iommu/amd: Fix compile error for unused function (Joerg Roedel) [Orabug: 35070061] - iommu/amd: Do not Invalidate IRT when IRTE caching is disabled (Suravee Suthikulpanit) [Orabug: 35070061] - iommu/amd: Introduce Disable IRTE Caching Support (Suravee Suthikulpanit) [Orabug: 35070061] - iommu/amd: Remove the unused struct amd_ir_data.ref (Suravee Suthikulpanit) [Orabug: 35070061] - iommu/amd: Switch amd_iommu_update_ga() to use modify_irte_ga() (Joao Martins) [Orabug: 35070061] - iommu/amd: Handle GALog overflows (Joao Martins) [Orabug: 35070061] - iommu/amd: Fix 'Guest Virtual APIC Table Root Pointer' configuration in IRTE (Kishon Vijay Abraham I) [Orabug: 35070061] - KVM: x86: ioapic: Fix level-triggered EOI and userspace I/OAPIC reconfigure race (Adamos Ttofari) [Orabug: 35070061] - xfs: fix AGFL allocation deadlock (Wengang Wang) [Orabug: 35159734] - crypto: api - Demote BUG_ON() in crypto_unregister_alg() to a WARN_ON() (Toke Hoiland-Jorgensen) [Orabug: 35152388] - crypto: qat - drop log level of msg in get_instance_node() (Giovanni Cabiddu) [Orabug: 35152388] - crypto: algapi - make unregistration functions return void (Eric Biggers) [Orabug: 35152388] - bnxt_en: Clear DEFRAG flag in firmware message when retry flashing. (Pavan Chebbi) [Orabug: 35365203] - bnxt_en: Enable batch mode when using HWRM_NVM_MODIFY to flash packages. (Michael Chan) [Orabug: 35365203] - bnxt_en: Retry installing FW package under NO_SPACE error condition. (Pavan Chebbi) [Orabug: 35365203] - bnxt_en: Restructure bnxt_flash_package_from_fw_obj() to execute in a loop. (Pavan Chebbi) [Orabug: 35365203] - bnxt_en: Rearrange the logic in bnxt_flash_package_from_fw_obj(). (Michael Chan) [Orabug: 35365203] - bnxt_en: Refactor bnxt_flash_nvram. (Pavan Chebbi) [Orabug: 35365203] [5.4.17-2136.321.2.el8] - LTS tag: v5.4.245 (Sherry Yang) - netfilter: ctnetlink: Support offloaded conntrack entry deletion (Paul Blakey) - ipv{4,6}/raw: fix output xfrm lookup wrt protocol (Nicolas Dichtel) - binder: fix UAF caused by faulty buffer cleanup (Carlos Llamas) - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (Ruihan Li) - cdc_ncm: Fix the build warning (Alexander Bersenev) - net/mlx5: Devcom, serialize devcom registration (Shay Drory) - net/mlx5: devcom only supports 2 ports (Mark Bloch) - fs: fix undefined behavior in bit shift for SB_NOUSER (Hao Ge) - power: supply: bq24190: Call power_supply_changed() after updating input current (Hans de Goede) - power: supply: core: Refactor power_supply_set_input_current_limit_from_supplier() (Hans de Goede) - power: supply: bq27xxx: After charger plug in/out wait 0.5s for things to stabilize (Hans de Goede) - net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize (Tudor Ambarus) - cdc_ncm: Implement the 32-bit version of NCM Transfer Block (Alexander Bersenev) - LTS tag: v5.4.244 (Sherry Yang) - 3c589_cs: Fix an error handling path in tc589_probe() (Christophe JAILLET) - net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device (Shay Drory) - net/mlx5: Fix error message when failing to allocate device memory (Roi Dayan) - forcedeth: Fix an error handling path in nv_probe() (Christophe JAILLET) - ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg (Cezary Rojewski) - x86/show_trace_log_lvl: Ensure stack pointer is aligned, again (Vernon Lovejoy) - xen/pvcalls-back: fix double frees with pvcalls_new_active_socket() (Dan Carpenter) - coresight: Fix signedness bug in tmc_etr_buf_insert_barrier_packet() (Dan Carpenter) - power: supply: sbs-charger: Fix INHIBITED bit for Status reg (Daisuke Nojiri) - power: supply: bq27xxx: Fix poll_interval handling and races on remove (Hans de Goede) - power: supply: bq27xxx: Fix I2C IRQ race on remove (Hans de Goede) - power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition (Hans de Goede) - power: supply: leds: Fix blink to LED on transition (Hans de Goede) - ipv6: Fix out-of-bounds access in ipv6_find_tlv() (Gavrilov Ilia) - bpf: Fix mask generation for 32-bit narrow loads of 64-bit fields (Will Deacon) - net: fix skb leak in __skb_tstamp_tx() (Pratyush Yadav) - media: radio-shark: Add endpoint checks (Alan Stern) - USB: sisusbvga: Add endpoint checks (Alan Stern) - USB: core: Add routines for endpoint checks in old drivers (Alan Stern) - udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated(). (Kuniyuki Iwashima) - net: fix stack overflow when LRO is disabled for virtual interfaces (Taehee Yoo) - fbdev: udlfb: Fix endpoint check (Alan Stern) - debugobjects: Don't wake up kswapd from fill_pool() (Tetsuo Handa) - x86/topology: Fix erroneous smp_num_siblings on Intel Hybrid platforms (Zhang Rui) - parisc: Fix flush_dcache_page() for usage from irq context (Helge Deller) - selftests/memfd: Fix unknown type name build failure (Hardik Garg) - x86/mm: Avoid incomplete Global INVLPG flushes (Dave Hansen) - btrfs: use nofs when cleaning up aborted transactions (Josef Bacik) - gpio: mockup: Fix mode of debugfs files (Zev Weiss) - parisc: Allow to reboot machine after system halt (Helge Deller) - parisc: Handle kgdb breakpoints only in kernel context (Helge Deller) - m68k: Move signal frame following exception on 68020/030 (Finn Thain) - ALSA: hda/realtek: Enable headset onLenovo M70/M90 (Bin Li) - ALSA: hda/ca0132: add quirk for EVGA X299 DARK (Adam Stylinski) - mt76: mt7615: Fix build with older compilers (Pablo Greco) - spi: fsl-cpm: Use 16 bit mode for large transfers with even size (Christophe Leroy) - spi: fsl-spi: Re-organise transfer bits_per_word adaptation (Christophe Leroy) - watchdog: sp5100_tco: Immediately trigger upon starting. (Gregory Oakes) - s390/qdio: fix do_sqbs() inline assembly constraint (Heiko Carstens) - s390/qdio: get rid of register asm (Heiko Carstens) - vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF (George Kennedy) - vc_screen: rewrite vcs_size to accept vc, not inode (Jiri Slaby) - usb: gadget: u_ether: Fix host MAC address case (Konrad Grafe) - usb: gadget: u_ether: Convert prints to device prints (Jon Hunter) - lib/string_helpers: Introduce string_upper() and string_lower() helpers (Vadim Pasternak) - HID: wacom: add three styli to wacom_intuos_get_tool_type (Ping Cheng) - HID: wacom: Add new Intuos Pro Small (PTH-460) device IDs (Ping Cheng) - HID: wacom: Force pen out of prox if no events have been received in a while (Jason Gerecke) - netfilter: nf_tables: hold mutex on netns pre_exit path (Pablo Neira Ayuso) - netfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on NFT_SET_OBJECT flag (Pablo Neira Ayuso) - netfilter: nf_tables: stricter validation of element data (Pablo Neira Ayuso) - netfilter: nf_tables: allow up to 64 bytes in the set element data area (Pablo Neira Ayuso) - netfilter: nf_tables: add nft_setelem_parse_key() (Pablo Neira Ayuso) - netfilter: nf_tables: validate registers coming from userspace. (Pablo Neira Ayuso) - netfilter: nftables: statify nft_parse_register() (Pablo Neira Ayuso) - netfilter: nftables: add nft_parse_register_store() and use it (Pablo Neira Ayuso) - netfilter: nftables: add nft_parse_register_load() and use it (Pablo Neira Ayuso) - nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode() (Ryusuke Konishi) - powerpc/64s/radix: Fix soft dirty tracking (Michael Ellerman) - tpm/tpm_tis: Disable interrupts for more Lenovo devices (Jerry Snitselaar) - ceph: force updating the msg pointer in non-split case (Xiubo Li) - serial: Add support for Advantech PCI-1611U card (Vitaliy Tomin) - statfs: enforce statfs[64] structure initialization (Ilya Leoshkevich) - KVM: x86: do not report a vCPU as preempted outside instruction boundaries (Paolo Bonzini) - can: kvaser_pciefd: Disable interrupts in probe error path (Jimmy Assarsson) - can: kvaser_pciefd: Do not send EFLUSH command on TFD interrupt (Jimmy Assarsson) - can: kvaser_pciefd: Clear listen-only bit if not explicitly requested (Jimmy Assarsson) - can: kvaser_pciefd: Empty SRB buffer in probe (Jimmy Assarsson) - can: kvaser_pciefd: Call request_irq() before enabling interrupts (Jimmy Assarsson) - can: kvaser_pciefd: Set CAN_STATE_STOPPED in kvaser_pciefd_stop() (Jimmy Assarsson) - can: j1939: recvmsg(): allow MSG_CMSG_COMPAT flag (Oliver Hartkopp) - ALSA: hda/realtek: Add quirk for 2nd ASUS GU603 (Luke D. Jones) - ALSA: hda/realtek: Add a quirk for HP EliteDesk 805 (Ai Chao) - ALSA: hda: Add NVIDIA codec IDs a3 through a7 to patch table (Nikhil Mahale) - ALSA: hda: Fix Oops by 9.1 surround channel names (Takashi Iwai) - usb: typec: altmodes/displayport: fix pin_assignment_show (Badhri Jagan Sridharan) - usb: dwc3: debugfs: Resume dwc3 before accessing registers (Udipto Goswami) - USB: UHCI: adjust zhaoxin UHCI controllers OverCurrent bit value (Weitao Wang) - usb-storage: fix deadlock when a scsi command timeouts more than once (Maxime Bizon) - USB: usbtmc: Fix direction for 0-length ioctl control messages (Alan Stern) - vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit() (Eric Dumazet) - igb: fix bit_shift to be in [1..8] range (Aleksandr Loktionov) - cassini: Fix a memory leak in the error handling path of cas_init_one() (Christophe JAILLET) - wifi: iwlwifi: mvm: don't trust firmware n_channels (Johannes Berg) - net: bcmgenet: Restore phy_stop() depending upon suspend/close (Florian Fainelli) - net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop() (Florian Fainelli) - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (Dong Chenchen) - drm/exynos: fix g2d_open/close helper function definitions (Arnd Bergmann) - media: netup_unidvb: fix use-after-free at del_timer() (Duoming Zhou) - net: hns3: fix reset delay time to avoid configuration timeout (Jie Wang) - net: hns3: fix sending pfc frames after reset issue (Jijie Shao) - erspan: get the proto with the md version for collect_md (Xin Long) - ip_gre, ip6_gre: Fix race condition on o_seqno in collect_md mode (Peilin Ye) - ip6_gre: Make o_seqno start from 0 in native mode (Peilin Ye) - ip6_gre: Fix skb_under_panic in __gre6_xmit() (Peilin Ye) - serial: arc_uart: fix of_iomap leak in arc_serial_probe (Ke Zhang) - vsock: avoid to close connected socket after the timeout (Zhuang Shengen) - ALSA: firewire-digi00x: prevent potential use after free (Dan Carpenter) - net: fec: Better handle pm_runtime_get() failing in .remove() (Uwe Kleine-Konig) - af_key: Reject optional tunnel/BEET mode templates in outbound policies (Tobias Brunner) - cpupower: Make TSC read per CPU for Mperf monitor (Wyes Karny) - ASoC: fsl_micfil: register platform component before registering cpu dai (Shengjiu Wang) - btrfs: fix space cache inconsistency after error loading it from disk (Filipe Manana) - btrfs: replace calls to btrfs_find_free_ino with btrfs_find_free_objectid (Nikolay Borisov) - mfd: dln2: Fix memory leak in dln2_probe() (Qiang Ning) - phy: st: miphy28lp: use _poll_timeout functions for waits (Alain Volmat) - Input: xpad - add constants for GIP interface numbers (Vicki Pfau) - iommu/arm-smmu-v3: Acknowledge pri/event queue overflow if any (Tomas Krcka) - clk: tegra20: fix gcc-7 constant overflow warning (Arnd Bergmann) - RDMA/core: Fix multiple -Warray-bounds warnings (Gustavo A. R. Silva) - recordmcount: Fix memory leaks in the uwrite function (Hao Zeng) - sched: Fix KCSAN noinstr violation (Josh Poimboeuf) - mcb-pci: Reallocate memory region to avoid memory overlapping (Rodriguez Barbarin, Jose Javier) - serial: 8250: Reinit port->pm on port specific driver unbind (Tony Lindgren) - usb: typec: tcpm: fix multiple times discover svids error (Frank Wang) - HID: wacom: generic: Set battery quirk only when we see battery data (Jason Gerecke) - spi: spi-imx: fix MX51_ECSPI_* macros when cs > 3 (Kevin Groeneveld) - HID: logitech-hidpp: Reconcile USB and Unifying serials (Bastien Nocera) - HID: logitech-hidpp: Don't use the USB serial for USB devices (Bastien Nocera) - staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE (Philipp Hortmann) - Bluetooth: L2CAP: fix 'bad unlock balance' in l2cap_disconnect_rsp (Min Li) - wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace (Hans de Goede) - wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf (Hyunwoo Kim) - wifi: iwlwifi: pcie: fix possible NULL pointer dereference (Daniel Gabay) - samples/bpf: Fix fout leak in hbm's run_bpf_prog (Hao Zeng) - f2fs: fix to drop all dirty pages during umount() if cp_error is set (Chao Yu) - ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa() (Ojaswin Mujoo) - ext4: set goal start correctly in ext4_mb_normalize_request (Kemeng Shi) - gfs2: Fix inode height consistency check (Andreas Gruenbacher) - scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition (Zheng Wang) - lib: cpu_rmap: Avoid use after free on rmap->obj array entries (Eli Cohen) - net: Catch invalid index in XPS mapping (Nick Child) - net: pasemi: Fix return type of pasemi_mac_start_tx() (Nathan Chancellor) - scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow (Justin Tee) - ext2: Check block size validity during mount (Jan Kara) - wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex (Hector Martin) - ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects (void0red) - ACPICA: Avoid undefined behavior: applying zero offset to null pointer (Tamir Duberstein) - drm/tegra: Avoid potential 32-bit integer overflow (Nur Hussein) - ACPI: EC: Fix oops when removing custom query handlers (Armin Wolf) - firmware: arm_sdei: Fix sleep from invalid context BUG (Sherry Yang) - memstick: r592: Fix UAF bug in r592_remove due to race condition (Zheng Wang) - regmap: cache: Return error in cache sync operations for REGCACHE_NONE (Alexander Stein) - drm/amd/display: Use DC_LOG_DC in the trasform pixel function (Rodrigo Siqueira) - fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode() (Tetsuo Handa) - af_unix: Fix data races around sk->sk_shutdown. (Kuniyuki Iwashima) - af_unix: Fix a data race of sk->sk_receive_queue->qlen. (Kuniyuki Iwashima) - net: datagram: fix data-races in datagram_poll() (Eric Dumazet) - ipvlan:Fix out-of-bounds caused by unclear skb->cb (t.feng) - net: add vlan_get_protocol_and_depth() helper (Eric Dumazet) - net: tap: check vlan with eth_type_vlan() method (Menglong Dong) - net: annotate sk->sk_err write from do_recvmmsg() (Eric Dumazet) - netlink: annotate accesses to nlk->cb_running (Eric Dumazet) - netfilter: conntrack: fix possible bug_on with enable_hooks=1 (Florian Westphal) - net: Fix load-tearing on sk->sk_stamp in sock_recv_cmsgs(). (Kuniyuki Iwashima) - linux/dim: Do nothing if no time delta between samples (Roy Novich) - ARM: 9296/1: HP Jornada 7XX: fix kernel-doc warnings (Randy Dunlap) - drm/mipi-dsi: Set the fwnode for mipi_dsi_device (Saravana Kannan) - driver core: add a helper to setup both the of_node and fwnode of a device (Ioana Ciornei) - LTS tag: v5.4.243 (Sherry Yang) - drm/amd/display: Fix hang when skipping modeset (Aurabindo Pillai) - mm/page_alloc: fix potential deadlock on zonelist_update_seq seqlock (Tetsuo Handa) - drm/exynos: move to use request_irq by IRQF_NO_AUTOEN flag (Tian Tao) - drm/msm/adreno: Fix null ptr access in adreno_gpu_cleanup() (Akhil P Oommen) - firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe() (Yang Yingliang) - drm/msm: Fix double pm_runtime_disable() call (Maximilian Luz) - PM: domains: Restore comment indentation for generic_pm_domain.child_links (Geert Uytterhoeven) - printk: declare printk_deferred_{enter,safe}() in include/linux/printk.h (Tetsuo Handa) - PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock (Lukas Wunner) - PCI: pciehp: Use down_read/write_nested(reset_lock) to fix lockdep errors (Hans de Goede) - drbd: correctly submit flush bio on barrier (Christoph Bohmwalder) - serial: 8250: Fix serial8250_tx_empty() race with DMA Tx (Ilpo Jarvinen) - tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH (Ilpo Jarvinen) - ext4: fix invalid free tracking in ext4_xattr_move_to_block() (Theodore Ts'o) - ext4: remove a BUG_ON in ext4_mb_release_group_pa() (Theodore Ts'o) - ext4: bail out of ext4_xattr_ibody_get() fails for any reason (Theodore Ts'o) - ext4: add bounds checking in get_max_inline_xattr_value_size() (Theodore Ts'o) - ext4: fix deadlock when converting an inline directory in nojournal mode (Theodore Ts'o) - ext4: improve error recovery code paths in __ext4_remount() (Theodore Ts'o) - ext4: fix data races when using cached status extents (Jan Kara) - ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum (Tudor Ambarus) - ext4: fix WARNING in mb_find_extent (Ye Bin) - HID: wacom: insert timestamp to packed Bluetooth (BT) events (Ping Cheng) - HID: wacom: Set a default resolution for older tablets (Ping Cheng) - drm/amdgpu: disable sdma ecc irq only when sdma RAS is enabled in suspend (Guchun Chen) - drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy gfx ras (Guchun Chen) - drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini() (Hamza Mahfooz) - drm/panel: otm8009a: Set backlight parent to panel device (James Cowgill) - f2fs: fix potential corruption when moving a directory (Jaegeuk Kim) - ARM: dts: s5pv210: correct MIPI CSIS clock name (Krzysztof Kozlowski) - ARM: dts: exynos: fix WM8960 clock name in Itop Elite (Krzysztof Kozlowski) - remoteproc: st: Call of_node_put() on iteration error (Mathieu Poirier) - remoteproc: stm32: Call of_node_put() on iteration error (Mathieu Poirier) - sh: nmi_debug: fix return value of __setup handler (Randy Dunlap) - sh: init: use OF_EARLY_FLATTREE for early init (Randy Dunlap) - sh: math-emu: fix macro redefined warning (Randy Dunlap) - inotify: Avoid reporting event with invalid wd (Jan Kara) - platform/x86: touchscreen_dmi: Add info for the Dexp Ursus KX210i (Andrey Avdeev) - cifs: fix pcchunk length type in smb2_copychunk_range (Pawel Witek) - btrfs: print-tree: parent bytenr must be aligned to sector size (Anastasia Belova) - btrfs: don't free qgroup space unless specified (Josef Bacik) - btrfs: fix btrfs_prev_leaf() to not return the same key twice (Filipe Manana) - perf symbols: Fix return incorrect build_id size in elf_read_build_id() (Yang Jihong) - perf map: Delete two variable initialisations before null pointer checks in sort__sym_from_cmp() (Markus Elfring) - perf vendor events power9: Remove UTF-8 characters from JSON files (Kajol Jain) - virtio_net: suppress cpu stall when free_unused_bufs (Wenliang Wang) - virtio_net: split free_unused_bufs() (Xuan Zhuo) - net: dsa: mt7530: fix corrupt frames using trgmii on 40 MHz XTAL MT7621 (Arinc UNAL) - ALSA: caiaq: input: Add error handling for unsupported input methods in snd_usb_caiaq_input_init (Ruliang Lin) - drm/amdgpu: add a missing lock for AMDGPU_SCHED (Chia-I Wu) - af_packet: Don't send zero-byte data in packet_sendmsg_spkt(). (Kuniyuki Iwashima) - ionic: remove noise from ethtool rxnfc error msg (Shannon Nelson) - rxrpc: Fix hard call timeout units (David Howells) - net/sched: act_mirred: Add carrier check (Victor Nogueira) - writeback: fix call of incorrect macro (Maxim Korotkov) - net: dsa: mv88e6xxx: add mv88e6321 rsvd2cpu (Angelo Dureghello) - sit: update dev->needed_headroom in ipip6_tunnel_bind_dev() (Cong Wang) - net/sched: cls_api: remove block_cb from driver_list before freeing (Vlad Buslov) - net/ncsi: clear Tx enable mode when handling a Config required AEN (Cosmo Chou) - relayfs: fix out-of-bounds access in relay_file_read (Zhang Zhengming) - kernel/relay.c: fix read_pos error when multiple readers (Pengcheng Yang) - crypto: safexcel - Cleanup ring IRQ workqueues on load failure (Jonathan McDowell) - crypto: inside-secure - irq balance (Sven Auhagen) - dm verity: fix error handling for check_at_most_once on FEC (Yeongjin Gil) - dm verity: skip redundant verity_handle_err() on I/O errors (Akilesh Kailash) - mailbox: zynqmp: Fix counts of child nodes (Tanmay Shah) - mailbox: zynq: Switch to flexible array to simplify code (Christophe JAILLET) - tick/nohz: Fix cpu_is_hotpluggable() by checking with nohz subsystem (Joel Fernandes (Google)) - nohz: Add TICK_DEP_BIT_RCU (Frederic Weisbecker) - debugobject: Ensure pool refill (again) (Thomas Gleixner) - perf intel-pt: Fix CYC timestamps after standalone CBR (Adrian Hunter) - perf auxtrace: Fix address filter entire kernel size (Adrian Hunter) - dm ioctl: fix nested locking in table_clear() to remove deadlock concern (Mike Snitzer) - dm flakey: fix a crash with invalid table line (Mikulas Patocka) - dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path (Mike Snitzer) - dm clone: call kmem_cache_destroy() in dm_clone_init() error path (Mike Snitzer) - s390/dasd: fix hanging blockdevice after request requeue (Stefan Haberland) - btrfs: scrub: reject unsupported scrub flags (Qu Wenruo) - scripts/gdb: fix lx-timerlist for Python3 (Peng Liu) - clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent (Quentin Schulz) - wifi: rtl8xxxu: RTL8192EU always needs full init (Bitterblue Smith) - mailbox: zynqmp: Fix typo in IPI documentation (Tanmay Shah) - mailbox: zynqmp: Fix IPI isr handling (Tanmay Shah) - md/raid10: fix null-ptr-deref in raid10_sync_request (Li Nan) - nilfs2: fix infinite loop in nilfs_mdt_get_block() (Ryusuke Konishi) - nilfs2: do not write dirty data after degenerating to read-only (Ryusuke Konishi) - parisc: Fix argument pointer in real64_call_asm() (Helge Deller) - afs: Fix updating of i_size with dv jump from server (Marc Dionne) - dmaengine: at_xdmac: do not enable all cyclic channels (Claudiu Beznea) - dmaengine: dw-edma: Fix to enable to issue dma request on DMA processing (Shunsuke Mie) - dmaengine: dw-edma: Fix to change for continuous transfer (Shunsuke Mie) - phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port (Gaosheng Cui) - pwm: mtk-disp: Disable shadow registers before setting backlight values (AngeloGioacchino Del Regno) - pwm: mtk-disp: Adjust the clocks to avoid them mismatch (Jitao Shi) - pwm: mtk-disp: Don't check the return code of pwmchip_remove() (Uwe Kleine-Konig) - dmaengine: mv_xor_v2: Fix an error code. (Christophe JAILLET) - leds: TI_LMU_COMMON: select REGMAP instead of depending on it (Randy Dunlap) - ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline (Ye Bin) - openrisc: Properly store r31 to pt_regs on unhandled exceptions (Stafford Horne) - clocksource/drivers/davinci: Fix memory leak in davinci_timer_register when init fails (Qinrun Dai) - clocksource: davinci: axe a pointless __GFP_NOFAIL (Christophe JAILLET) - clocksource/drivers/davinci: Avoid trailing '\n' hidden in pr_fmt() (Christophe JAILLET) - RDMA/mlx5: Use correct device num_ports when modify DC (Mark Zhang) - Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe (Miaoqian Lin) - input: raspberrypi-ts: Release firmware handle when not needed (Nicolas Saenz Julienne) - firmware: raspberrypi: Introduce devm_rpi_firmware_get() (Nicolas Saenz Julienne) - firmware: raspberrypi: Keep count of all consumers (Nicolas Saenz Julienne) - NFSv4.1: Always send a RECLAIM_COMPLETE after establishing lease (Trond Myklebust) - IB/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order (Patrick Kelsey) - RDMA/siw: Remove namespace check from siw_netdev_event() (Tetsuo Handa) - clk: add missing of_node_put() in 'assigned-clocks' property parsing (Clement Leger) - power: supply: generic-adc-battery: fix unit scaling (Sebastian Reichel) - rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current time (Martin Blumenstingl) - RDMA/mlx4: Prevent shift wrapping in set_user_sq_size() (Dan Carpenter) - rtc: omap: include header for omap_rtc_power_off_program prototype (Krzysztof Kozlowski) - RDMA/rdmavt: Delete unnecessary NULL check (Natalia Petrova) - RDMA/siw: Fix potential page_array out of range access (Daniil Dulov) - perf/core: Fix hardlockup failure caused by perf throttle (Yang Jihong) - powerpc/rtas: use memmove for potentially overlapping buffer copy (Nathan Lynch) - macintosh: via-pmu-led: requires ATA to be set (Randy Dunlap) - powerpc/sysdev/tsi108: fix resource printk format warnings (Randy Dunlap) - powerpc/wii: fix resource printk format warnings (Randy Dunlap) - powerpc/mpc512x: fix resource printk format warning (Randy Dunlap) - macintosh/windfarm_smu_sat: Add missing of_node_put() (Liang He) - spmi: Add a check for remove callback when removing a SPMI driver (Jishnu Prakash) - staging: rtl8192e: Fix W_DISABLE# does not work after stop/start (Philipp Hortmann) - serial: 8250: Add missing wakeup event reporting (Florian Fainelli) - tty: serial: fsl_lpuart: adjust buffer length to the intended size (Shenwei Wang) - firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe (Dan Carpenter) - usb: mtu3: fix kernel panic at qmu transfer done irq handler (Chunfeng Yun) - usb: chipidea: fix missing goto in ci_hdrc_probe (Yinhao Hu) - sh: sq: Fix incorrect element size for allocating bitmap buffer (John Paul Adrian Glaubitz) - uapi/linux/const.h: prefer ISO-friendly __typeof__ (Kevin Brodsky) - spi: cadence-quadspi: fix suspend-resume implementations (Dhruva Gole) - mtd: spi-nor: cadence-quadspi: Handle probe deferral while requesting DMA channel (Vignesh Raghavendra) - mtd: spi-nor: cadence-quadspi: Don't initialize rx_dma_complete on failure (Vignesh Raghavendra) - mtd: spi-nor: cadence-quadspi: Make driver independent of flash geometry (Vignesh Raghavendra) - scripts/gdb: bail early if there are no generic PD (Florian Fainelli) - PM: domains: Fix up terminology with parent/child (Kees Cook) - scripts/gdb: bail early if there are no clocks (Florian Fainelli) - ia64: salinfo: placate defined-but-not-used warning (Randy Dunlap) - ia64: mm/contig: fix section mismatch warning/error (Randy Dunlap) - of: Fix modalias string generation (Miquel Raynal) - vmci_host: fix a race condition in vmci_host_poll() causing GPF (Dae R. Jeong) - spi: fsl-spi: Fix CPM/QE mode Litte Endian (Christophe Leroy) - spi: qup: Don't skip cleanup in remove's error path (Uwe Kleine-Konig) - linux/vt_buffer.h: allow either builtin or modular for macros (Randy Dunlap) - ASoC: es8316: Handle optional IRQ assignment (Cristian Ciocaltea) - ASoC: es8316: Use IRQF_NO_AUTOEN when requesting the IRQ (Hans de Goede) - genirq: Add IRQF_NO_AUTOEN for request_irq/nmi() (Barry Song) - PCI: imx6: Install the fault handler only on compatible match (H. Nikolaus Schaller) - usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition (Zheng Wang) - iio: light: max44009: add missing OF device matching (Krzysztof Kozlowski) - fpga: bridge: fix kernel-doc parameter description (Marco Pagani) - usb: host: xhci-rcar: remove leftover quirk handling (Wolfram Sang) - pstore: Revert pmsg_lock back to a normal mutex (John Stultz) - tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp. (Kuniyuki Iwashima) - net: amd: Fix link leak when verifying config failed (Gencen Gan) - netlink: Use copy_to_user() for optval in netlink_getsockopt(). (Kuniyuki Iwashima) - ipv4: Fix potential uninit variable access bug in __ip_make_skb() (Ziyang Xuan) - netfilter: nf_tables: don't write table validation state without mutex (Florian Westphal) - bpf: Don't EFAULT for getsockopt with optval=NULL (Stanislav Fomichev) - ixgbe: Enable setting RSS table to default values (Joe Damato) - ixgbe: Allow flow hash to be set via ethtool (Joe Damato) - wifi: iwlwifi: mvm: check firmware response size (Johannes Berg) - wifi: iwlwifi: make the loop for card preparation effective (Emmanuel Grumbach) - md/raid10: fix memleak of md thread (Yu Kuai) - md: update the optimal I/O size on reshape (Christoph Hellwig) - md/raid10: fix memleak for 'conf->bio_split' (Yu Kuai) - md/raid10: fix leak of 'r10bio->remaining' for recovery (Yu Kuai) - bpf, sockmap: Revert buggy deadlock fix in the sockhash and sockmap (Daniel Borkmann) - nvme-fcloop: fix 'inconsistent {IN-HARDIRQ-W} -> {HARDIRQ-ON-W} usage' (Ming Lei) - nvme: fix async event trace event (Keith Busch) - nvme: handle the persistent internal error AER (Michael Kelley) - bpf, sockmap: fix deadlocks in the sockhash and sockmap (Xin Liu) - scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() (Shuchang Li) - crypto: drbg - Only fail when jent is unavailable in FIPS mode (Herbert Xu) - crypto: drbg - make drbg_prepare_hrng() handle jent instantiation errors (Nicolai Stange) - bpftool: Fix bug for long instructions in program CFG dumps (Quentin Monnet) - wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg() (Wei Chen) - wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg() (Wei Chen) - rtlwifi: Replace RT_TRACE with rtl_dbg (Larry Finger) - rtlwifi: Start changing RT_TRACE into rtl_dbg (Larry Finger) - f2fs: handle dqget error in f2fs_transfer_project_quota() (Yangtao Li) - scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS (Danila Chernetsov) - net/packet: convert po->auxdata to an atomic flag (Eric Dumazet) - net/packet: convert po->origdev to an atomic flag (Eric Dumazet) - net/packet: annotate accesses to po->xmit (Eric Dumazet) - vlan: partially enable SIOCSHWTSTAMP in container (Vadim Fedorenko) - scm: fix MSG_CTRUNC setting condition for SO_PASSSEC (Alexander Mikhalitsyn) - wifi: rtw88: mac: Return the original error from rtw_mac_power_switch() (Martin Blumenstingl) - wifi: rtw88: mac: Return the original error from rtw_pwr_seq_parser() (Martin Blumenstingl) - tools: bpftool: Remove invalid \' json escape (Luis Gerhorst) - wifi: ath6kl: reduce WARN to dev_dbg() in callback (Fedor Pchelkin) - wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list() (Dan Carpenter) - wifi: ath9k: hif_usb: fix memory leak of remain_skbs (Fedor Pchelkin) - wifi: ath6kl: minor fix for allocation size (Alexey V. Vissarionov) - tick/common: Align tick period with the HZ tick. (Sebastian Andrzej Siewior) - tick: Get rid of tick_period (Thomas Gleixner) - tick/sched: Optimize tick_do_update_jiffies64() further (Thomas Gleixner) - tick/sched: Reduce seqcount held scope in tick_do_update_jiffies64() (Yunfeng Ye) - tick/sched: Use tick_next_period for lockless quick check (Thomas Gleixner) - timekeeping: Split jiffies seqlock (Thomas Gleixner) - debugobject: Prevent init race with static objects (Thomas Gleixner) - arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step (Sumit Garg) - x86/ioapic: Don't return 0 from arch_dynirq_lower_bound() (Saurabh Sengar) - regulator: stm32-pwr: fix of_iomap leak (YAN SHI) - media: rc: gpio-ir-recv: Fix support for wake-up (Florian Fainelli) - media: rcar_fdp1: Fix refcount leak in probe and remove function (Miaoqian Lin) - media: rcar_fdp1: Fix the correct variable assignments (Tang Bin) - media: rcar_fdp1: Make use of the helper function devm_platform_ioremap_resource() (Cai Huoqing) - media: rcar_fdp1: fix pm_runtime_get_sync() usage count (Mauro Carvalho Chehab) - media: rcar_fdp1: simplify error check logic at fdp_open() (Mauro Carvalho Chehab) - media: saa7134: fix use after free bug in saa7134_finidev due to race condition (Zheng Wang) - media: dm1105: Fix use after free bug in dm1105_remove due to race condition (Zheng Wang) - x86/apic: Fix atomic update of offset in reserve_eilvt_offset() (Uros Bizjak) - regulator: core: Avoid lockdep reports when resolving supplies (Douglas Anderson) - regulator: core: Consistently set mutex_owner when using ww_mutex_lock_slow() (Douglas Anderson) - drm/lima/lima_drv: Add missing unwind goto in lima_pdev_probe() (Harshit Mogalapalli) - mmc: sdhci-of-esdhc: fix quirk to ignore command inhibit for data (Georgii Kruglov) - drm/msm/adreno: drop bogus pm_runtime_set_active() (Johan Hovold) - drm/msm/adreno: Defer enabling runpm until hw_init() (Rob Clark) - drm/msm: fix unbalanced pm_runtime_enable in adreno_gpu_{init, cleanup} (Jonathan Marek) - firmware: qcom_scm: Clear download bit during reboot (Mukesh Ojha) - media: av7110: prevent underflow in write_ts_to_decoder() (Dan Carpenter) - media: uapi: add MEDIA_BUS_FMT_METADATA_FIXED media bus format. (Dafna Hirschfeld) - media: bdisp: Add missing check for create_workqueue (Jiasheng Jiang) - ARM: dts: qcom: ipq8064: Fix the PCI I/O port range (Manivannan Sadhasivam) - ARM: dts: qcom: ipq8064: reduce pci IO size to 64K (Christian Marangi) - ARM: dts: qcom: ipq4019: Fix the PCI I/O port range (Manivannan Sadhasivam) - EDAC/skx: Fix overflows on the DRAM row address mapping arrays (Qiuxu Zhuo) - arm64: dts: renesas: r8a774c0: Remove bogus voltages from OPP table (Geert Uytterhoeven) - arm64: dts: renesas: r8a77990: Remove bogus voltages from OPP table (Geert Uytterhoeven) - drm/probe-helper: Cancel previous job before starting new one (Dom Cobley) - drm/vgem: add missing mutex_destroy (Maira Canal) - drm/rockchip: Drop unbalanced obj unref (Rob Clark) - erofs: fix potential overflow calculating xattr_isize (Jingbo Xu) - erofs: stop parsing non-compact HEAD index if clusterofs is invalid (Gao Xiang) - tpm, tpm_tis: Do not skip reset of original interrupt vector (Lino Sanfilippo) - selinux: ensure av_permissions.h is built when needed (Paul Moore) - selinux: fix Makefile dependencies of flask.h (Ondrej Mosnacek) - ubifs: Free memory for tmpfile name (Marten Lindahl) - ubi: Fix return value overwrite issue in try_write_vid_and_data() (Wang YanQing) - ubifs: Fix memleak when insert_old_idx() failed (Zhihao Cheng) - i2c: omap: Fix standard mode false ACK readings (Reid Tonking) - KVM: nVMX: Emulate NOPs in L2, and PAUSE if it's not intercepted (Sean Christopherson) - reiserfs: Add security prefix to xattr name in reiserfs_security_write() (Roberto Sassu) - ring-buffer: Sync IRQ works before buffer destruction (Johannes Berg) - pwm: meson: Fix g12a ao clk81 name (Heiner Kallweit) - pwm: meson: Fix axg ao mux parents (Heiner Kallweit) - kheaders: Use array declaration instead of char (Kees Cook) - ipmi: fix SSIF not responding under certain cond. (Zhang Yuchen) - MIPS: fw: Allow firmware to pass a empty env (Jiaxun Yang) - xhci: fix debugfs register accesses while suspended (Johan Hovold) - debugfs: regset32: Add Runtime PM support (Geert Uytterhoeven) - staging: iio: resolver: ads1210: fix config mode (Nuno Sa) - perf sched: Cast PTHREAD_STACK_MIN to int as it may turn into sysconf(__SC_THREAD_STACK_MIN_VALUE) (Arnaldo Carvalho de Melo) - USB: dwc3: fix runtime pm imbalance on unbind (Johan Hovold) ... IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-20569 CVE-2023-42753 CVE-2023-5090 CVE-2023-20588 CVE-2023-22024 cpe:/a:oracle:linux:8::UEKR6 Oracle Linux 7 [5.4.17-2136.323.8.2.el7] - netfilter: nfnetlink_osf: avoid OOB read (Wander Lairson Costa) [Orabug: 35824307] - netfilter: xt_sctp: validate the flag_info count (Wander Lairson Costa) [Orabug: 35824307] - netfilter: xt_u32: validate user space input (Wander Lairson Costa) [Orabug: 35824307] - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Kyle Zeng) [Orabug: 35824307] {CVE-2023-42753} IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-42753 cpe:/a:oracle:linux:7::UEKR6 Oracle Linux 8 [5.4.17-2136.323.8.2.el8] - netfilter: nfnetlink_osf: avoid OOB read (Wander Lairson Costa) [Orabug: 35824307] - netfilter: xt_sctp: validate the flag_info count (Wander Lairson Costa) [Orabug: 35824307] - netfilter: xt_u32: validate user space input (Wander Lairson Costa) [Orabug: 35824307] - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Kyle Zeng) [Orabug: 35824307] {CVE-2023-42753} IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-42753 cpe:/a:oracle:linux:8::UEKR6 Oracle Linux 8 hivex libguestfs libguestfs-winsupport libiscsi libnbd libtpms libvirt [7.10.0-3.el8] - virpci: Resolve leak in virPCIVirtualFunctionList cleanup (Tim Shearer) [Orabug: 35395469] {CVE-2023-2700} libvirt-dbus libvirt-python [7.10.0-3.el8] - Update version number to match libvirt 7.10.0-3 (Karl Heubaum) nbdkit netcf perl-Sys-Virt qemu-kvm [6.1.1-8.el8] - kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35822587] - KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35822587] - accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35822587] - dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35775461] - target/i386: properly reset TSC on reset (Paolo Bonzini) [Orabug: 35767315] seabios sgabios supermin swtpm virt-v2v IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-2700 cpe:/a:oracle:linux:8::kvm_appstream Oracle Linux 7 [2.76-17.0.1.3] - Prevent use after free in dhcp6_no_relay (CVE-2022-0934) [Orabug: 34775167] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-0934 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7::optional_latest cpe:/a:oracle:linux:7:9:patch Oracle Linux 7 [2.76-17.0.1.3] - Prevent use after free in dhcp6_no_relay (CVE-2022-0934) [Orabug: 34775167] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-0934 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7:9:patch cpe:/a:oracle:linux:7::optional_latest Oracle Linux 7 [2.02-0.87.0.26.el7_9.9] - Enable common subpackage for aarch64 - Do not sign aarch64 efi binaries [Orabug: 32670043] - Remove aarch64 deps on shim [Orabug: 32670043] - Restore versioned certificate provide for aarch64 package to satisfy shim [Orabug: 32670043] [2.02-0.87.0.24.el7_9.9] - Replace bugzilla.oracle.com reference [Orabug: 35477723] [2.02-0.87.0.23.el7_9.9] - Backport kernel EFI allocation pacthes [Orabug: 34301086] [2.02-0.87.0.21.el7_9.9] - Add CVE-2022-28736 to the list [JIRA: OLDIS-16371] [2.02-0.87.0.19.el7_9.9] - Fix: CVE-2021-3695, CVE-2021-3696, CVE-2021-3697, CVE-2022-28733, CVE-2022-28734, CVE-2022-28735 [JIRA: OLDIS-16371] - Various coverity fixes [JIRA: OLDIS-16371] - bump SBAT generation [JIRA: OLDIS-16371] [2.02-0.87.0.17.el7_9.9] - Cleanup XEN shell script (Alex Burmashev) [Orabug: 33851417] - Update SBAT data (Alex Burmashev) [Orabug: 33851417] - efinet: change SNP open call (Alex Burmashev) [Orabug: 32646964] - disable buggy 0183-efinet-retransmit-if-our-device-is-busy.patch [Orabug: 27982684] - Patch multiboot2 to the recent state [Orabug: 32950597] - Enable multiboot2 for UEFI ( non Secureboot ) mode [Orabug: 32950597] - Update signing certificate [Orabug: 32670043] - Update shim and certificates dependencies [Orabug: 32670043] - xfs: Don't attempt to iterate over empty directory [Orabug: 32584717] - add SBAT metadata for Oracle Linux grub2 - Use similar format for menu entry in grub environment block - config file. [Orabug: 32172943] - Fix degradation in multiboot2 code [Orabug: 32069510] - Update signing certificate for efi binaries - Update upstream references [Orabug: 30138841] - Restore symlink to grub environment file, that was removed during grub2-efi update if grub2 package is also installed on UEFI machines [Orabug: 27345750] - fix symlink removal scriptlet, to be executed only on removal [Orabug: 19231481] - Fix comparison in patch for [Orabug: 18504756] - Remove symlink to grub environment file during uninstall on EFI platforms [Orabug: 19231481] - replace dynamic EFI boot folder path generation with predefined 'redhat' (Alex Burmashev) - Put 'with' in menuentry instead of 'using' [Orabug: 18504756] - Use different titles for UEK and RHCK kernels [Orabug: 18504756] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2021-3696 CVE-2022-28735 CVE-2022-28734 CVE-2021-3695 CVE-2022-28733 CVE-2022-28736 CVE-2021-3697 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7:9:patch cpe:/a:oracle:linux:7::optional_latest Oracle Linux 6 Oracle Linux 7 [4.1.12-124.80.1] - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (Sungwoo Kim) [Orabug: 35814478] {CVE-2023-40283} - net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (valis) [Orabug: 35814297] {CVE-2023-4208} - RDMA/core: net: fix kernel NULL error (Zhu Yanjun) [Orabug: 35723252] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-40283 CVE-2023-4208 cpe:/a:oracle:linux:6:10:UEKR4_ELS cpe:/a:oracle:linux:7::UEKR4 Oracle Linux 7 [2.76-17.0.3.3] - Fixed heap-based buffer overflow in sort_rrset (CVE-2020-25681) [Orabug: 35904921] - Fixed buffer overflow in extract_name() (CVE-2020-25682) [Orabug: 35904921] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2020-25682 CVE-2020-25681 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7:9:patch cpe:/a:oracle:linux:7::optional_latest Oracle Linux 7 [2.76-17.0.3.3] - Fixed heap-based buffer overflow in sort_rrset (CVE-2020-25681) [Orabug: 35904921] - Fixed buffer overflow in extract_name() (CVE-2020-25682) [Orabug: 35904921] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2020-25681 CVE-2020-25682 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7::optional_latest cpe:/a:oracle:linux:7:9:patch Oracle Linux 8 Oracle Linux 7 [5.4.17-2136.325.5] - perf symbols: Symbol lookup with kcore can fail if multiple segments match stext (Krister Johansen) [Orabug: 35905508] - char: misc: Increase the maximum number of dynamic misc devices to 1048448 (D Scott Phillips) [Orabug: 35905508] - perf/arm-cmn: Fix invalid pointer when access dtc object sharing the same IRQ number (Tuan Phan) [Orabug: 35905508] - char: misc: increase DYNAMIC_MINORS value (Sangmoon Kim) [Orabug: 35905508] [5.4.17-2136.325.4] - net: nfc: llcp: Add lock when modifying device list (Jeremy Cline) - net: dsa: mv88e6xxx: Avoid EEPROM timeout when EEPROM is absent (Fabio Estevam) - ima: Finish deprecation of IMA_TRUSTED_KEYRING Kconfig (Oleksandr Tymoshenko) - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Pin-yen Lin) - Revert 'PCI: qcom: Disable write access to read only registers for IP v2.3.3' (Greg Kroah-Hartman) - rbd: take header_rwsem in rbd_dev_refresh() only when updating (Ilya Dryomov) - rbd: decouple parent info read-in from updating rbd_dev (Ilya Dryomov) - rbd: decouple header read-in from updating rbd_dev->header (Ilya Dryomov) - rbd: move rbd_dev_refresh() definition (Ilya Dryomov) - MIPS: Alchemy: only build mmc support helpers if au1xmmc is enabled (Christoph Hellwig) - netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP (Jozsef Kadlecsik) - dccp: fix dccp_v4_err()/dccp_v6_err() again (Eric Dumazet) - fix breakage in do_rmdir() (Al Viro) [Orabug: 35722671] - scsi: target: core: Fix deadlock due to recursive locking (Junxiao Bi) [Orabug: 35761341] - rds: Add proper refcnt when an RDS MR references an RDS Socket (Hakon Bugge) [Orabug: 35836949] - rds: Check for UAF in rds_destroy_mr (Hakon Bugge) [Orabug: 35836949] - i2c: designware: Fix corrupted memory seen in the ISR (Jan Bottorff) [Orabug: 35857601] - xfs: reserve less log space when recovering log intent items (Darrick J. Wong) [Orabug: 35871840] - octeontx_edac: Fix mcc_edac failure at boot (Thomas Tai) [Orabug: 35895526] - bpf: bpf_check() must fail when btf_linux is null (Dave Kleikamp) [Orabug: 35899889] [5.4.17-2136.325.3] - LTS tag: v5.4.257 (Sherry Yang) - drm/amdgpu: fix amdgpu_cs_p1_user_fence (Christian Konig) - mtd: rawnand: brcmnand: Fix ECC level field setting for v7.2 controller (William Zhang) - ext4: fix rec_len verify error (Shida Zhang) - i2c: aspeed: Reset the i2c controller when timeout occurs (Tommy Huang) - tracefs: Add missing lockdown check to tracefs_create_dir() (Steven Rostedt (Google)) - nfsd: fix change_info in NFSv4 RENAME replies (Jeff Layton) - tracing: Have option files inc the trace array ref count (Steven Rostedt (Google)) - tracing: Have current_trace inc the trace array ref count (Steven Rostedt (Google)) - btrfs: fix lockdep splat and potential deadlock after failure running delayed items (Filipe Manana) - attr: block mode changes of symlinks (Christian Brauner) - md/raid1: fix error: ISO C90 forbids mixed declarations (Nigel Croxon) - selftests: tracing: Fix to unmount tracefs for recovering environment (Masami Hiramatsu (Google)) - btrfs: compare the correct fsid/metadata_uuid in btrfs_validate_super (Anand Jain) - btrfs: add a helper to read the superblock metadata_uuid (Anand Jain) - btrfs: move btrfs_pinned_by_swapfile prototype into volumes.h (Josef Bacik) - perf tools: Add an option to build without libbfd (Ian Rogers) - perf jevents: Make build dependency on test JSONs (John Garry) - tools features: Add feature test to check if libbfd has buildid support (Arnaldo Carvalho de Melo) - kobject: Add sanity check for kset->kobj.ktype in kset_register() (Zhen Lei) - media: pci: ipu3-cio2: Initialise timing struct to avoid a compiler warning (Sakari Ailus) - serial: cpm_uart: Avoid suspicious locking (Christophe Leroy) - scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (Konstantin Shelekhin) - usb: gadget: fsl_qe_udc: validate endpoint index for ch9 udc (Ma Ke) - media: pci: cx23885: replace BUG with error return (Hans Verkuil) - media: tuners: qt1010: replace BUG_ON with a regular error (Hans Verkuil) - media: az6007: Fix null-ptr-deref in az6007_i2c_xfer() (Zhang Shurong) - media: anysee: fix null-ptr-deref in anysee_master_xfer (Zhang Shurong) - media: af9005: Fix null-ptr-deref in af9005_i2c_xfer (Zhang Shurong) - media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer() (Zhang Shurong) - media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer (Zhang Shurong) - powerpc/pseries: fix possible memory leak in ibmebus_bus_init() (ruanjinjie) - jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount (Liu Shixin via Jfs-discussion) - fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount() (Andrew Kanner) - ext2: fix datatype of block number in ext2_xattr_set2() (Georg Ottinger) - md: raid1: fix potential OOB in raid1_remove_disk() (Zhang Shurong) - bus: ti-sysc: Configure uart quirks for k3 SoC (Tony Lindgren) - drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable() (Tuo Li) - wifi: mac80211_hwsim: drop short frames (Johannes Berg) - alx: fix OOB-read compiler warning (GONG, Ruiqi) - mmc: sdhci-esdhc-imx: improve ESDHC_FLAG_ERR010450 (Giulio Benetti) - tpm_tis: Resend command to recover from data transfer errors (Alexander Steffen) - crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (Mark O'Donovan) - wifi: mwifiex: fix fortify warning (Dmitry Antipov) - wifi: ath9k: fix printk specifier (Dongliang Mu) - devlink: remove reload failed checks in params get/set callbacks (Jiri Pirko) - hw_breakpoint: fix single-stepping when using bpf_overflow_handler (Tomislav Novak) - perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09 (Yicong Yang) - ACPI: video: Add backlight=native DMI quirk for Lenovo Ideapad Z470 (Jiri Slaby (SUSE)) - kernel/fork: beware of __put_task_struct() calling context (Wander Lairson Costa) - ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer (Abhishek Mainkar) - locks: fix KASAN: use-after-free in trace_event_raw_event_filelock_lock (Will Shiu) - btrfs: output extra debug info if we failed to find an inline backref (Qu Wenruo) - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Fedor Pchelkin) - parisc: Drop loops_per_jiffy from per_cpu struct (Helge Deller) - drm/amd/display: Fix a bug when searching for insert_above_mpcc (Wesley Chalmers) - kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg(). (Kuniyuki Iwashima) - ixgbe: fix timestamp configuration code (Vadim Fedorenko) - net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict() (Liu Jian) - platform/mellanox: mlxbf-tmfifo: Drop jumbo frames (Liming Sun) - platform/mellanox: mlxbf-tmfifo: Drop the Rx packet if no more descriptors (Liming Sun) - kcm: Fix memory leak in error path of kcm_sendmsg() (Shigeru Yoshida) - r8152: check budget for r8152_poll() (Hayes Wang) - net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all() (Hangyu Hua) - net: ethernet: mvpp2_main: fix possible OOB write in mvpp2_ethtool_get_rxnfc() (Hangyu Hua) - net: ipv4: fix one memleak in __inet_del_ifa() (Liu Jian) - clk: imx8mm: Move 1443X/1416X PLL clock structure to common place (Anson Huang) - ARM: dts: BCM5301X: Extend RAM to full 256MB for Linksys EA6500 V2 (Aleksey Nasibulin) - usb: typec: bus: verify partner exists in typec_altmode_attention (RD Babiera) - usb: typec: tcpm: Refactor tcpm_handle_vdm_request (Hans de Goede) - usb: typec: tcpm: Refactor tcpm_handle_vdm_request payload handling (Hans de Goede) - perf tools: Handle old data in PERF_RECORD_ATTR (Namhyung Kim) - perf hists browser: Fix hierarchy mode header (Namhyung Kim) - mtd: rawnand: brcmnand: Fix potential false time out warning (William Zhang) - mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write (William Zhang) - mtd: rawnand: brcmnand: Fix crash during the panic_write (William Zhang) - btrfs: use the correct superblock to compare fsid in btrfs_validate_super (Anand Jain) - btrfs: don't start transaction when joining with TRANS_JOIN_NOSTART (Filipe Manana) - fuse: nlookup missing decrement in fuse_direntplus_link (ruanmeisi) - ata: pata_ftide010: Add missing MODULE_DESCRIPTION (Damien Le Moal) - ata: sata_gemini: Add missing MODULE_DESCRIPTION (Damien Le Moal) - sh: boards: Fix CEU buffer size passed to dma_declare_coherent_memory() (Petr Tesarik) - net: hns3: fix the port information display when sfp is absent (Yisen Zhuang) - ip_tunnels: use DEV_STATS_INC() (Eric Dumazet) - idr: fix param name in idr_alloc_cyclic() doc (Ariel Marcovitch) - s390/zcrypt: don't leak memory if dev_set_name() fails (Andy Shevchenko) - igb: Change IGB_MIN to allow set rx/tx value between 64 and 80 (Olga Zaborska) - igbvf: Change IGBVF_MIN to allow set rx/tx value between 64 and 80 (Olga Zaborska) - igc: Change IGC_MIN to allow set rx/tx value between 64 and 80 (Olga Zaborska) - kcm: Destroy mutex in kcm_exit_net() (Shigeru Yoshida) - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (valis) - af_unix: Fix data race around sk->sk_err. (Kuniyuki Iwashima) - af_unix: Fix data-races around sk->sk_shutdown. (Kuniyuki Iwashima) - af_unix: Fix data-race around unix_tot_inflight. (Kuniyuki Iwashima) - af_unix: Fix data-races around user->unix_inflight. (Kuniyuki Iwashima) - net: ipv6/addrconf: avoid integer underflow in ipv6_create_tempaddr (Alex Henrie) - veth: Fixing transmit return status for dropped packets (Liang Chen) - igb: disable virtualization features on 82580 (Corinna Vinschen) - net: read sk->sk_family once in sk_mc_loop() (Eric Dumazet) - ipv4: annotate data-races around fi->fib_dead (Eric Dumazet) - sctp: annotate data-races around sk->sk_wmem_queued (Eric Dumazet) - pwm: lpc32xx: Remove handling of PWM channels (Vladimir Zapolskiy) - watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load (Raag Jadav) - perf top: Don't pass an ERR_PTR() directly to perf_session__delete() (Arnaldo Carvalho de Melo) - x86/virt: Drop unnecessary check on extended CPUID level in cpu_has_svm() (Sean Christopherson) - perf annotate bpf: Don't enclose non-debug code with an assert() (Arnaldo Carvalho de Melo) - kconfig: fix possible buffer overflow (Konstantin Meskhidze) - NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info (Fedor Pchelkin) - soc: qcom: qmi_encdec: Restrict string length in decode (Chris Lew) - clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock (Dmitry Baryshkov) - parisc: led: Reduce CPU overhead for disk & lan LED computation (Helge Deller) - parisc: led: Fix LAN receive and transmit LEDs (Helge Deller) - lib/test_meminit: allocate pages up to order MAX_ORDER (Andrew Donnellan) - drm/ast: Fix DRAM init on AST2200 (Thomas Zimmermann) - fbdev/ep93xx-fb: Do not assign to struct fb_info.dev (Thomas Zimmermann) - scsi: qla2xxx: Remove unsupported ql2xenabledif option (Manish Rangankar) - scsi: qla2xxx: Turn off noisy message log (Quinn Tran) - scsi: qla2xxx: Fix erroneous link up failure (Quinn Tran) - scsi: qla2xxx: fix inconsistent TMF timeout (Quinn Tran) - net/ipv6: SKB symmetric hash should incorporate transport ports (Quan Tian) - drm: fix double free for gbo in drm_gem_vram_init and drm_gem_vram_create (Jia Yang) - udf: initialize newblock to 0 (Tom Rix) - usb: typec: tcpci: clear the fault status bit (Marco Felsch) - serial: sc16is7xx: fix broken port 0 uart init (Hugo Villeneuve) - sc16is7xx: Set iobase to device index (Daniel Mack) - cpufreq: brcmstb-avs-cpufreq: Fix -Warray-bounds bug (Gustavo A. R. Silva) - crypto: stm32 - fix loop iterating through scatterlist for DMA (Thomas Bourgoin) - s390/ipl: add missing secure/has_secure file to ipl type 'unknown' (Sven Schnelle) - pstore/ram: Check start of empty przs during init (Enlin Mu) - fsverity: skip PKCS#7 parser when keyring is empty (Eric Biggers) - net: handle ARPHRD_PPP in dev_is_mac_header_xmit() (Nicolas Dichtel) - X.509: if signature is unsupported skip validation (Thore Sommer) - dccp: Fix out of bounds access in DCCP error handler (Jann Horn) - parisc: Fix /proc/cpuinfo output for lscpu (Helge Deller) - procfs: block chmod on /proc/thread-self/comm (Aleksa Sarai) - Revert 'PCI: Mark NVIDIA T4 GPUs to avoid bus reset' (Bjorn Helgaas) - ntb: Fix calculation ntb_transport_tx_free_entry() (Dave Jiang) - ntb: Clean up tx tail index on link down (Dave Jiang) - ntb: Drop packets when qp link is down (Dave Jiang) - media: dvb: symbol fixup for dvb_attach() (Greg Kroah-Hartman) - xtensa: PMU: fix base address for the newer hardware (Max Filippov) - backlight/lv5207lp: Compare against struct fb_info.device (Thomas Zimmermann) - backlight/bd6107: Compare against struct fb_info.device (Thomas Zimmermann) - backlight/gpio_backlight: Compare against struct fb_info.device (Thomas Zimmermann) - ARM: OMAP2+: Fix -Warray-bounds warning in _pwrdm_state_switch() (Gustavo A. R. Silva) - ipmi_si: fix a memleak in try_smi_init() (Yi Yang) - ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl (Takashi Iwai) - PM / devfreq: Fix leak in devfreq_dev_release() (Boris Brezillon) - igb: set max size RX buffer when store bad packet is enabled (Radoslaw Tyl) - skbuff: skb_segment, Call zero copy functions before using skbuff frags (Mohamed Khalfella) - igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU (Eric Dumazet) - virtio_ring: fix avail_wrap_counter in virtqueue_add_packed (Yuan Yao) - cpufreq: Fix the race condition while updating the transition_task of policy (Liao Chang) - dmaengine: ste_dma40: Add missing IRQ check in d40_probe (ruanjinjie) - um: Fix hostaudio build errors (Randy Dunlap) - mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume() (Yi Yang) - rpmsg: glink: Add check for kstrdup (Jiasheng Jiang) - phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write (Jonas Karlman) - phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate (Zheng Yang) - phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328 (Jonas Karlman) - tracing: Fix race issue between cpu buffer write and swap (Zheng Yejian) - HID: multitouch: Correct devm device reference for hidinput input_dev name (Rahul Rameshbabu) - HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode() (Nikita Zhandarovich) - RDMA/siw: Correct wrong debug message (Guoqing Jiang) - RDMA/siw: Balance the reference of cep->kref in the error path (Guoqing Jiang) - amba: bus: fix refcount leak (Peng Fan) - serial: tegra: handle clk prepare error in tegra_uart_hw_init() (Yi Yang) - scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock (Chengfeng Ye) - scsi: core: Use 32-bit hostnum in scsi_host_lookup() (Tony Battersby) - media: ov2680: Fix regulators being left enabled on ov2680_power_on() errors (Hans de Goede) - media: ov2680: Fix vflip / hflip set functions (Hans de Goede) - media: ov2680: Fix ov2680_bayer_order() (Hans de Goede) - media: ov2680: Remove auto-gain and auto-exposure controls (Hans de Goede) - media: i2c: ov2680: Set V4L2_CTRL_FLAG_MODIFY_LAYOUT on flips (Dave Stevenson) - media: ov5640: Enable MIPI interface in ov5640_set_power_mipi() (Marek Vasut) - media: i2c: ov5640: Configure HVP lines in s_power callback (Lad Prabhakar) - USB: gadget: f_mass_storage: Fix unused variable warning (Alan Stern) - media: go7007: Remove redundant if statement (Colin Ian King) - iommu/vt-d: Fix to flush cache of PASID directory table (Yanfei Xu) - IB/uverbs: Fix an potential error pointer dereference (Xiang Yang) - driver core: test_async: fix an error code (Dan Carpenter) - dma-buf/sync_file: Fix docs syntax (Rob Clark) - coresight: tmc: Explicit type conversions to prevent integer overflow (Ruidong Tian) - scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko) - scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko) - scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko) - x86/APM: drop the duplicate APM_MINOR_DEV macro (Randy Dunlap) - serial: sprd: Fix DMA buffer leak issue (Chunyan Zhang) - serial: sprd: Assign sprd_port after initialized to avoid wrong access (Chunyan Zhang) - serial: sprd: remove redundant sprd_port cleanup (Chunyan Zhang) - serial: sprd: getting port index via serial aliases only (Chunyan Zhang) - scsi: qla4xxx: Add length check when parsing nlattrs (Lin Ma) - scsi: be2iscsi: Add length check when parsing nlattrs (Lin Ma) - scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param() (Lin Ma) - usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() (Xu Yang) - media: mediatek: vcodec: Return NULL if no vdec_fb is found (Irui Wang) - media: cx24120: Add retval check for cx24120_message_send() (Daniil Dulov) - media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer() (Christophe JAILLET) - media: dib7000p: Fix potential division by zero (Daniil Dulov) - drivers: usb: smsusb: fix error handling code in smsusb_init_device (Dongliang Mu) - media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link() (Christophe JAILLET) - media: v4l2-fwnode: simplify v4l2_fwnode_parse_link (Marco Felsch) - media: v4l2-fwnode: fix v4l2_fwnode_parse_link handling (Marco Felsch) - NFS: Guard against READDIR loop when entry names exceed MAXNAMELEN (Benjamin Coddington) - NFSD: da_addr_body field missing in some GETDEVICEINFO replies (Chuck Lever) - fs: lockd: avoid possible wrong NULL parameter (Su Hui) - jfs: validate max amount of blocks before allocation. (Alexei Filippov) - powerpc/iommu: Fix notifiers being shared by PCI and VIO buses (Russell Currey) - nfs/blocklayout: Use the passed in gfp flags (Dan Carpenter) - wifi: ath10k: Use RMW accessors for changing LNKCTL (Ilpo Jarvinen) - drm/radeon: Use RMW accessors for changing LNKCTL (Ilpo Jarvinen) - drm/radeon: Prefer pcie_capability_read_word() (Frederick Lawler) - drm/radeon: Replace numbers with PCI_EXP_LNKCTL2 definitions (Bjorn Helgaas) - drm/radeon: Correct Transmit Margin masks (Bjorn Helgaas) - drm/amdgpu: Use RMW accessors for changing LNKCTL (Ilpo Jarvinen) - drm/amdgpu: Prefer pcie_capability_read_word() (Frederick Lawler) - drm/amdgpu: Replace numbers with PCI_EXP_LNKCTL2 definitions (Bjorn Helgaas) - drm/amdgpu: Correct Transmit Margin masks (Bjorn Helgaas) - PCI: Add #defines for Enter Compliance, Transmit Margin (Bjorn Helgaas) - powerpc/fadump: reset dump area size if fadump memory reserve fails (Sourabh Jain) - clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op (Ahmad Fatoum) - PCI/ASPM: Use RMW accessors for changing LNKCTL (Ilpo Jarvinen) - PCI: pciehp: Use RMW accessors for changing LNKCTL (Ilpo Jarvinen) - PCI: Mark NVIDIA T4 GPUs to avoid bus reset (Wu Zongyong) - clk: sunxi-ng: Modify mismatched function name (Zhang Jianhua) - drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init() (Minjie Du) - ipmi:ssif: Fix a memory leak when scanning for an adapter (Corey Minyard) - ipmi:ssif: Add check for kstrdup (Jiasheng Jiang) - of: unittest: Fix overlay type in apply/revert check (Geert Uytterhoeven) - drm/mediatek: Fix potential memory leak if vmap() fail (Sui Jingfeng) - audit: fix possible soft lockup in __audit_inode_child() (Gaosheng Cui) - smackfs: Prevent underflow in smk_set_cipso() (Dan Carpenter) - drm/msm/mdp5: Don't leak some plane state (Daniel Vetter) - ima: Remove deprecated IMA_TRUSTED_KEYRING Kconfig (Nayna Jain) - drm/panel: simple: Add missing connector type and pixel format for AUO T215HVN01 (Marek Vasut) - drm/armada: Fix off-by-one error in armada_overlay_get_property() (Geert Uytterhoeven) - of: unittest: fix null pointer dereferencing in of_unittest_find_node_by_name() (Ruan Jinjie) - drm/tegra: dpaux: Fix incorrect return value of platform_get_irq (Yangtao Li) - drm/tegra: Remove superfluous error messages around platform_get_irq() (Tan Zhongjun) - md/md-bitmap: hold 'reconfig_mutex' in backlog_store() (Yu Kuai) - md/bitmap: don't set max_write_behind if there is no write mostly device (Guoqing Jiang) - drm/amdgpu: Update min() to min_t() in 'amdgpu_info_ioctl' (Srinivasan Shanmugam) - arm64: dts: qcom: sdm845: Add missing RPMh power domain to GCC (Manivannan Sadhasivam) - ARM: dts: BCM53573: Fix Ethernet info for Luxul devices (Rafal Milecki) - drm: adv7511: Fix low refresh rate register for ADV7533/5 (Bogdan Togorean) - ARM: dts: samsung: s5pv210-smdkv210: correct ethernet reg addresses (split) (Krzysztof Kozlowski) - ARM: dts: s5pv210: add dummy 5V regulator for backlight on SMDKv210 (Krzysztof Kozlowski) - ARM: dts: s5pv210: correct ethernet unit address in SMDKV210 (Krzysztof Kozlowski) - ARM: dts: s5pv210: use defines for IRQ flags in SMDKV210 (Krzysztof Kozlowski) - ARM: dts: s5pv210: add RTC 32 KHz clock in SMDKV210 (Krzysztof Kozlowski) - ARM: dts: samsung: s3c6410-mini6410: correct ethernet reg addresses (split) (Krzysztof Kozlowski) - ARM: dts: s3c64xx: align pinctrl with dtschema (Krzysztof Kozlowski) - ARM: dts: s3c6410: align node SROM bus node name with dtschema in Mini6410 (Krzysztof Kozlowski) - ARM: dts: s3c6410: move fixed clocks under root node in Mini6410 (Krzysztof Kozlowski) - drm/etnaviv: fix dumping of active MMU context (Lucas Stach) - ARM: dts: BCM53573: Use updated 'spi-gpio' binding properties (Rafal Milecki) - ARM: dts: BCM53573: Add cells sizes to PCIe node (Rafal Milecki) - ARM: dts: BCM53573: Drop nonexistent 'default-off' LED trigger (Rafal Milecki) - drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar() (Arnd Bergmann) - quota: fix dqput() to follow the guarantees dquot_srcu should provide (Baokun Li) - quota: add new helper dquot_active() (Baokun Li) - quota: rename dquot_active() to inode_quota_active() (Baokun Li) - quota: factor out dquot_write_dquot() (Baokun Li) - quota: avoid increasing DQST_LOOKUPS when iterating over dirty/inuse list (Chengguang Xu) - drm/bridge: tc358764: Fix debug print parameter order (Marek Vasut) - netrom: Deny concurrent connect(). (Kuniyuki Iwashima) - net/sched: sch_hfsc: Ensure inner classes have fsc curve (Budimir Markovic) - mlxsw: i2c: Limit single transaction buffer size (Vadim Pasternak) - mlxsw: i2c: Fix chunk size setting in output mailbox buffer (Vadim Pasternak) - net: arcnet: Do not call kfree_skb() under local_irq_disable() (Jinjie Ruan) - wifi: ath9k: use IS_ERR() with debugfs_create_dir() (Wang Ming) - wifi: mwifiex: avoid possible NULL skb pointer dereference (Dmitry Antipov) - wifi: ath9k: protect WMI command response buffer replacement with a lock (Fedor Pchelkin) - wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx (Fedor Pchelkin) - wifi: mwifiex: Fix missed return in oob checks failed path (Polaris Pi) - wifi: mwifiex: fix memory leak in mwifiex_histogram_read() (Dmitry Antipov) - fs: ocfs2: namei: check return value of ocfs2_add_entry() (Artem Chernyshev) - lwt: Check LWTUNNEL_XMIT_CONTINUE strictly (Yan Zhai) - lwt: Fix return values of BPF xmit ops (Yan Zhai) - hwrng: iproc-rng200 - Implement suspend and resume calls (Florian Fainelli) - hwrng: iproc-rng200 - use semicolons rather than commas to separate statements (Julia Lawall) - crypto: caam - fix unchecked return value error (Gaurav Jain) - Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() (Yuanjun Gong) - crypto: stm32 - Properly handle pm_runtime_get failing (Uwe Kleine-Konig) - wifi: mwifiex: fix error recovery in PCIE buffer descriptor management (Dmitry Antipov) - mwifiex: switch from 'pci_' to 'dma_' API (Christophe JAILLET) - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Polaris Pi) - can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM (Marc Kleine-Budde) - spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() (Zhang Shurong) - regmap: rbtree: Use alloc_flags for memory allocations (Dan Carpenter) - tcp: tcp_enter_quickack_mode() should be static (Eric Dumazet) - bpf: Clear the probe_addr for uprobe (Yafang Shao) - cpufreq: powernow-k8: Use related_cpus instead of cpus in driver.exit() (Liao Chang) - perf/imx_ddr: don't enable counter0 if none of 4 counters are used (Xu Yang) - x86/decompressor: Don't rely on upper 32 bits of GPRs being preserved (Ard Biesheuvel) - x86/boot: Annotate local functions (Jiri Slaby) - x86/asm: Make more symbols local (Jiri Slaby) - OPP: Fix passing 0 to PTR_ERR in _opp_attach_genpd() (Manivannan Sadhasivam) - tmpfs: verify {g,u}id mount options correctly (Christian Brauner) - fs: Fix error checking for d_hash_and_lookup() (Wang Ming) - new helper: lookup_positive_unlocked() (Al Viro) - eventfd: prevent underflow for eventfd semaphores (Wen Yang) - eventfd: Export eventfd_ctx_do_read() (David Woodhouse) - reiserfs: Check the return value from __getblk() (Matthew Wilcox) - Revert 'net: macsec: preserve ingress frame ordering' (Sabrina Dubroca) - Revert 'net: macsec: Severe performance regression in '...preserve ordering'' (Sherry Yang) - udf: Handle error when adding extent to a file (Jan Kara) - udf: Check consistency of Space Bitmap Descriptor (Vladislav Efanov) - powerpc/32s: Fix assembler warning about r0 (Christophe Leroy) - net: Avoid address overwrite in kernel_connect (Jordan Rife) - platform/mellanox: Fix mlxbf-tmfifo not handling all virtio CONSOLE notifications (Shih-Yi Chen) - ALSA: seq: oss: Fix racy open/close of MIDI devices (Takashi Iwai) - scsi: storvsc: Always set no_report_opcodes (Michael Kelley) - cifs: add a warning when the in-flight count goes negative (Shyam Prasad N) - sctp: handle invalid error codes without calling BUG() (Dan Carpenter) - bnx2x: fix page fault following EEH recovery (David Christensen) - netlabel: fix shift wrapping bug in netlbl_catmap_setlong() (Dmitry Mastykin) - scsi: qedi: Fix potential deadlock on &qedi_percpu->p_work_lock (Chengfeng Ye) - idmaengine: make FSL_EDMA and INTEL_IDMA64 depends on HAS_IOMEM (Baoquan He) - net: usb: qmi_wwan: add Quectel EM05GV2 (Martin Kohn) - clk: fixed-mmio: make COMMON_CLK_FIXED_MMIO depend on HAS_IOMEM (Baoquan He) - security: keys: perform capable check only on privileged operations (Christian Gottsche) - platform/x86: huawei-wmi: Silence ambient light sensor (Konstantin Shelekhin) - platform/x86: intel: hid: Always call BTNL ACPI method (Hans de Goede) - ASoC: atmel: Fix the 8K sample parameter in I2SC master (Guiting Shen) - ASoc: codecs: ES8316: Fix DMIC config (Edgar) - fs/nls: make load_nls() take a const parameter (Winston Wen) - s390/dasd: fix hanging device after request requeue (Stefan Haberland) - s390/dasd: use correct number of retries for ERP requests (Stefan Haberland) - m68k: Fix invalid .section syntax (Ben Hutchings) - vxlan: generalize vxlan_parse_gpe_hdr and remove unused args (Jiri Benc) - ethernet: atheros: fix return value check in atl1c_tso_csum() (Yuanjun Gong) - ASoC: da7219: Check for failure reading AAD IRQ events (Dmytro Maluka) - ASoC: da7219: Flush pending AAD IRQ when suspending (Dmytro Maluka) - 9p: virtio: make sure 'offs' is initialized in zc_request (Dominique Martinet) - nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse (Ryusuke Konishi) - nilfs2: fix general protection fault in nilfs_lookup_dirty_data_buffers() (Ryusuke Konishi) - fsi: master-ast-cf: Add MODULE_FIRMWARE macro (Juerg Haefliger) - firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe (Wang Ming) - serial: sc16is7xx: fix bug when first setting GPIO direction (Hugo Villeneuve) - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition (Zheng Wang) - staging: rtl8712: fix race condition (Nam Cao) - HID: wacom: remove the battery when the EKR is off (Aaron Armstrong Skomra) - USB: serial: option: add FOXCONN T99W368/T99W373 product (Slark Xiao) - USB: serial: option: add Quectel EM05G variant (0x030e) (Martin Kohn) - modules: only allow symbol_get of EXPORT_SYMBOL_GPL modules (Christoph Hellwig) - rtc: ds1685: use EXPORT_SYMBOL_GPL for ds1685_rtc_poweroff (Christoph Hellwig) - net: enetc: use EXPORT_SYMBOL_GPL for enetc_phc_index (Christoph Hellwig) - mmc: au1xmmc: force non-modular build and remove symbol_get usage (Christoph Hellwig) - ARM: pxa: remove use of symbol_get() (Arnd Bergmann) - erofs: ensure that the post-EOF tails are all zeroed (Gao Xiang) [5.4.17-2136.325.2] - Pensando: kpcimgr: Decouple kstate addr from shmem addr (Rob Gardner) [Orabug: 35842998] - bnxt_en: fix NULL dereference in bnxt_flash_package_from_file() (Samasth Norway Ananda) [Orabug: 35844212] - uek-rpm: aarch64: embedded: Fix a typo when enabling CONFIG_STACKTRACE (Thomas Tai) [Orabug: 35858089] - ocfs2: ocfs2 crash due to invalid h_next_leaf_blk value in extent block (Gautham Ananthakrishna) [Orabug: 35859331] [5.4.17-2136.325.1] - uek-rpm: aarch64: embedded: Enable CONFIG_STACKTRACE and CONFIG_FTRACE (Thomas Tai) [Orabug: 35818484] - io_uring: add a sysctl to disable io_uring system-wide (Matteo Rizzo) [Orabug: 35819375] - KVM: SVM: Set target pCPU during IRTE update if target vCPU is running (Sean Christopherson) [Orabug: 35827614] - KVM: SVM: Take and hold ir_list_lock when updating vCPU's Physical ID entry (Sean Christopherson) [Orabug: 35827614] - Pensando: kpcimgr: Zero out mod pointer unconditionally (Rob Gardner) [Orabug: 35842963] - pensando: kpcimgr: Flush i-cache before calling any pciesvc code (Rob Gardner) [Orabug: 35842972] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-1989 cpe:/a:oracle:linux:8::UEKR6 cpe:/a:oracle:linux:8::developer_UEKR6 cpe:/o:oracle:linux:8:8:baseos_patch cpe:/a:oracle:linux:7::developer_UEKR6 cpe:/o:oracle:linux:8::baseos_latest cpe:/a:oracle:linux:7::UEKR6 Oracle Linux 8 [4:20230808-2.0.2] - update 06-6a-06 to 0xd0003b9 {CVE-2023-23583} IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-23583 cpe:/o:oracle:linux:8::baseos_latest cpe:/o:oracle:linux:8:8:baseos_patch Oracle Linux 7 [2:2.1-73.19.0.3] - update 06-6a-06 to 0xd0003b9 {CVE-2023-23583} IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-23583 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7:9:patch cpe:/a:oracle:linux:7::optional_latest Oracle Linux 9 [4:20230808-2.0.2] - update 06-6a-06 to 0xd0003b9 {CVE-2023-23583} IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-23583 cpe:/o:oracle:linux:9:3:baseos_patch cpe:/o:oracle:linux:9::baseos_latest Oracle Linux 7 [5.4.17-2136.325.5.el7] - perf symbols: Symbol lookup with kcore can fail if multiple segments match stext (Krister Johansen) [Orabug: 35905508] - char: misc: Increase the maximum number of dynamic misc devices to 1048448 (D Scott Phillips) [Orabug: 35905508] - perf/arm-cmn: Fix invalid pointer when access dtc object sharing the same IRQ number (Tuan Phan) [Orabug: 35905508] - char: misc: increase DYNAMIC_MINORS value (Sangmoon Kim) [Orabug: 35905508] [5.4.17-2136.325.4.el7] - net: nfc: llcp: Add lock when modifying device list (Jeremy Cline) - net: dsa: mv88e6xxx: Avoid EEPROM timeout when EEPROM is absent (Fabio Estevam) - ima: Finish deprecation of IMA_TRUSTED_KEYRING Kconfig (Oleksandr Tymoshenko) - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Pin-yen Lin) - Revert 'PCI: qcom: Disable write access to read only registers for IP v2.3.3' (Greg Kroah-Hartman) - rbd: take header_rwsem in rbd_dev_refresh() only when updating (Ilya Dryomov) - rbd: decouple parent info read-in from updating rbd_dev (Ilya Dryomov) - rbd: decouple header read-in from updating rbd_dev->header (Ilya Dryomov) - rbd: move rbd_dev_refresh() definition (Ilya Dryomov) - MIPS: Alchemy: only build mmc support helpers if au1xmmc is enabled (Christoph Hellwig) - netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP (Jozsef Kadlecsik) - dccp: fix dccp_v4_err()/dccp_v6_err() again (Eric Dumazet) - fix breakage in do_rmdir() (Al Viro) [Orabug: 35722671] - scsi: target: core: Fix deadlock due to recursive locking (Junxiao Bi) [Orabug: 35761341] - rds: Add proper refcnt when an RDS MR references an RDS Socket (Hakon Bugge) [Orabug: 35836949] - rds: Check for UAF in rds_destroy_mr (Hakon Bugge) [Orabug: 35836949] - i2c: designware: Fix corrupted memory seen in the ISR (Jan Bottorff) [Orabug: 35857601] - xfs: reserve less log space when recovering log intent items (Darrick J. Wong) [Orabug: 35871840] - octeontx_edac: Fix mcc_edac failure at boot (Thomas Tai) [Orabug: 35895526] - bpf: bpf_check() must fail when btf_linux is null (Dave Kleikamp) [Orabug: 35899889] [5.4.17-2136.325.3.el7] - LTS tag: v5.4.257 (Sherry Yang) - drm/amdgpu: fix amdgpu_cs_p1_user_fence (Christian Konig) - mtd: rawnand: brcmnand: Fix ECC level field setting for v7.2 controller (William Zhang) - ext4: fix rec_len verify error (Shida Zhang) - i2c: aspeed: Reset the i2c controller when timeout occurs (Tommy Huang) - tracefs: Add missing lockdown check to tracefs_create_dir() (Steven Rostedt (Google)) - nfsd: fix change_info in NFSv4 RENAME replies (Jeff Layton) - tracing: Have option files inc the trace array ref count (Steven Rostedt (Google)) - tracing: Have current_trace inc the trace array ref count (Steven Rostedt (Google)) - btrfs: fix lockdep splat and potential deadlock after failure running delayed items (Filipe Manana) - attr: block mode changes of symlinks (Christian Brauner) - md/raid1: fix error: ISO C90 forbids mixed declarations (Nigel Croxon) - selftests: tracing: Fix to unmount tracefs for recovering environment (Masami Hiramatsu (Google)) - btrfs: compare the correct fsid/metadata_uuid in btrfs_validate_super (Anand Jain) - btrfs: add a helper to read the superblock metadata_uuid (Anand Jain) - btrfs: move btrfs_pinned_by_swapfile prototype into volumes.h (Josef Bacik) - perf tools: Add an option to build without libbfd (Ian Rogers) - perf jevents: Make build dependency on test JSONs (John Garry) - tools features: Add feature test to check if libbfd has buildid support (Arnaldo Carvalho de Melo) - kobject: Add sanity check for kset->kobj.ktype in kset_register() (Zhen Lei) - media: pci: ipu3-cio2: Initialise timing struct to avoid a compiler warning (Sakari Ailus) - serial: cpm_uart: Avoid suspicious locking (Christophe Leroy) - scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (Konstantin Shelekhin) - usb: gadget: fsl_qe_udc: validate endpoint index for ch9 udc (Ma Ke) - media: pci: cx23885: replace BUG with error return (Hans Verkuil) - media: tuners: qt1010: replace BUG_ON with a regular error (Hans Verkuil) - media: az6007: Fix null-ptr-deref in az6007_i2c_xfer() (Zhang Shurong) - media: anysee: fix null-ptr-deref in anysee_master_xfer (Zhang Shurong) - media: af9005: Fix null-ptr-deref in af9005_i2c_xfer (Zhang Shurong) - media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer() (Zhang Shurong) - media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer (Zhang Shurong) - powerpc/pseries: fix possible memory leak in ibmebus_bus_init() (ruanjinjie) - jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount (Liu Shixin via Jfs-discussion) - fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount() (Andrew Kanner) - ext2: fix datatype of block number in ext2_xattr_set2() (Georg Ottinger) - md: raid1: fix potential OOB in raid1_remove_disk() (Zhang Shurong) - bus: ti-sysc: Configure uart quirks for k3 SoC (Tony Lindgren) - drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable() (Tuo Li) - wifi: mac80211_hwsim: drop short frames (Johannes Berg) - alx: fix OOB-read compiler warning (GONG, Ruiqi) - mmc: sdhci-esdhc-imx: improve ESDHC_FLAG_ERR010450 (Giulio Benetti) - tpm_tis: Resend command to recover from data transfer errors (Alexander Steffen) - crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (Mark O'Donovan) - wifi: mwifiex: fix fortify warning (Dmitry Antipov) - wifi: ath9k: fix printk specifier (Dongliang Mu) - devlink: remove reload failed checks in params get/set callbacks (Jiri Pirko) - hw_breakpoint: fix single-stepping when using bpf_overflow_handler (Tomislav Novak) - perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09 (Yicong Yang) - ACPI: video: Add backlight=native DMI quirk for Lenovo Ideapad Z470 (Jiri Slaby (SUSE)) - kernel/fork: beware of __put_task_struct() calling context (Wander Lairson Costa) - ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer (Abhishek Mainkar) - locks: fix KASAN: use-after-free in trace_event_raw_event_filelock_lock (Will Shiu) - btrfs: output extra debug info if we failed to find an inline backref (Qu Wenruo) - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Fedor Pchelkin) - parisc: Drop loops_per_jiffy from per_cpu struct (Helge Deller) - drm/amd/display: Fix a bug when searching for insert_above_mpcc (Wesley Chalmers) - kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg(). (Kuniyuki Iwashima) - ixgbe: fix timestamp configuration code (Vadim Fedorenko) - net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict() (Liu Jian) - platform/mellanox: mlxbf-tmfifo: Drop jumbo frames (Liming Sun) - platform/mellanox: mlxbf-tmfifo: Drop the Rx packet if no more descriptors (Liming Sun) - kcm: Fix memory leak in error path of kcm_sendmsg() (Shigeru Yoshida) - r8152: check budget for r8152_poll() (Hayes Wang) - net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all() (Hangyu Hua) - net: ethernet: mvpp2_main: fix possible OOB write in mvpp2_ethtool_get_rxnfc() (Hangyu Hua) - net: ipv4: fix one memleak in __inet_del_ifa() (Liu Jian) - clk: imx8mm: Move 1443X/1416X PLL clock structure to common place (Anson Huang) - ARM: dts: BCM5301X: Extend RAM to full 256MB for Linksys EA6500 V2 (Aleksey Nasibulin) - usb: typec: bus: verify partner exists in typec_altmode_attention (RD Babiera) - usb: typec: tcpm: Refactor tcpm_handle_vdm_request (Hans de Goede) - usb: typec: tcpm: Refactor tcpm_handle_vdm_request payload handling (Hans de Goede) - perf tools: Handle old data in PERF_RECORD_ATTR (Namhyung Kim) - perf hists browser: Fix hierarchy mode header (Namhyung Kim) - mtd: rawnand: brcmnand: Fix potential false time out warning (William Zhang) - mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write (William Zhang) - mtd: rawnand: brcmnand: Fix crash during the panic_write (William Zhang) - btrfs: use the correct superblock to compare fsid in btrfs_validate_super (Anand Jain) - btrfs: don't start transaction when joining with TRANS_JOIN_NOSTART (Filipe Manana) - fuse: nlookup missing decrement in fuse_direntplus_link (ruanmeisi) - ata: pata_ftide010: Add missing MODULE_DESCRIPTION (Damien Le Moal) - ata: sata_gemini: Add missing MODULE_DESCRIPTION (Damien Le Moal) - sh: boards: Fix CEU buffer size passed to dma_declare_coherent_memory() (Petr Tesarik) - net: hns3: fix the port information display when sfp is absent (Yisen Zhuang) - ip_tunnels: use DEV_STATS_INC() (Eric Dumazet) - idr: fix param name in idr_alloc_cyclic() doc (Ariel Marcovitch) - s390/zcrypt: don't leak memory if dev_set_name() fails (Andy Shevchenko) - igb: Change IGB_MIN to allow set rx/tx value between 64 and 80 (Olga Zaborska) - igbvf: Change IGBVF_MIN to allow set rx/tx value between 64 and 80 (Olga Zaborska) - igc: Change IGC_MIN to allow set rx/tx value between 64 and 80 (Olga Zaborska) - kcm: Destroy mutex in kcm_exit_net() (Shigeru Yoshida) - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (valis) - af_unix: Fix data race around sk->sk_err. (Kuniyuki Iwashima) - af_unix: Fix data-races around sk->sk_shutdown. (Kuniyuki Iwashima) - af_unix: Fix data-race around unix_tot_inflight. (Kuniyuki Iwashima) - af_unix: Fix data-races around user->unix_inflight. (Kuniyuki Iwashima) - net: ipv6/addrconf: avoid integer underflow in ipv6_create_tempaddr (Alex Henrie) - veth: Fixing transmit return status for dropped packets (Liang Chen) - igb: disable virtualization features on 82580 (Corinna Vinschen) - net: read sk->sk_family once in sk_mc_loop() (Eric Dumazet) - ipv4: annotate data-races around fi->fib_dead (Eric Dumazet) - sctp: annotate data-races around sk->sk_wmem_queued (Eric Dumazet) - pwm: lpc32xx: Remove handling of PWM channels (Vladimir Zapolskiy) - watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load (Raag Jadav) - perf top: Don't pass an ERR_PTR() directly to perf_session__delete() (Arnaldo Carvalho de Melo) - x86/virt: Drop unnecessary check on extended CPUID level in cpu_has_svm() (Sean Christopherson) - perf annotate bpf: Don't enclose non-debug code with an assert() (Arnaldo Carvalho de Melo) - kconfig: fix possible buffer overflow (Konstantin Meskhidze) - NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info (Fedor Pchelkin) - soc: qcom: qmi_encdec: Restrict string length in decode (Chris Lew) - clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock (Dmitry Baryshkov) - parisc: led: Reduce CPU overhead for disk & lan LED computation (Helge Deller) - parisc: led: Fix LAN receive and transmit LEDs (Helge Deller) - lib/test_meminit: allocate pages up to order MAX_ORDER (Andrew Donnellan) - drm/ast: Fix DRAM init on AST2200 (Thomas Zimmermann) - fbdev/ep93xx-fb: Do not assign to struct fb_info.dev (Thomas Zimmermann) - scsi: qla2xxx: Remove unsupported ql2xenabledif option (Manish Rangankar) - scsi: qla2xxx: Turn off noisy message log (Quinn Tran) - scsi: qla2xxx: Fix erroneous link up failure (Quinn Tran) - scsi: qla2xxx: fix inconsistent TMF timeout (Quinn Tran) - net/ipv6: SKB symmetric hash should incorporate transport ports (Quan Tian) - drm: fix double free for gbo in drm_gem_vram_init and drm_gem_vram_create (Jia Yang) - udf: initialize newblock to 0 (Tom Rix) - usb: typec: tcpci: clear the fault status bit (Marco Felsch) - serial: sc16is7xx: fix broken port 0 uart init (Hugo Villeneuve) - sc16is7xx: Set iobase to device index (Daniel Mack) - cpufreq: brcmstb-avs-cpufreq: Fix -Warray-bounds bug (Gustavo A. R. Silva) - crypto: stm32 - fix loop iterating through scatterlist for DMA (Thomas Bourgoin) - s390/ipl: add missing secure/has_secure file to ipl type 'unknown' (Sven Schnelle) - pstore/ram: Check start of empty przs during init (Enlin Mu) - fsverity: skip PKCS#7 parser when keyring is empty (Eric Biggers) - net: handle ARPHRD_PPP in dev_is_mac_header_xmit() (Nicolas Dichtel) - X.509: if signature is unsupported skip validation (Thore Sommer) - dccp: Fix out of bounds access in DCCP error handler (Jann Horn) - parisc: Fix /proc/cpuinfo output for lscpu (Helge Deller) - procfs: block chmod on /proc/thread-self/comm (Aleksa Sarai) - Revert 'PCI: Mark NVIDIA T4 GPUs to avoid bus reset' (Bjorn Helgaas) - ntb: Fix calculation ntb_transport_tx_free_entry() (Dave Jiang) - ntb: Clean up tx tail index on link down (Dave Jiang) - ntb: Drop packets when qp link is down (Dave Jiang) - media: dvb: symbol fixup for dvb_attach() (Greg Kroah-Hartman) - xtensa: PMU: fix base address for the newer hardware (Max Filippov) - backlight/lv5207lp: Compare against struct fb_info.device (Thomas Zimmermann) - backlight/bd6107: Compare against struct fb_info.device (Thomas Zimmermann) - backlight/gpio_backlight: Compare against struct fb_info.device (Thomas Zimmermann) - ARM: OMAP2+: Fix -Warray-bounds warning in _pwrdm_state_switch() (Gustavo A. R. Silva) - ipmi_si: fix a memleak in try_smi_init() (Yi Yang) - ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl (Takashi Iwai) - PM / devfreq: Fix leak in devfreq_dev_release() (Boris Brezillon) - igb: set max size RX buffer when store bad packet is enabled (Radoslaw Tyl) - skbuff: skb_segment, Call zero copy functions before using skbuff frags (Mohamed Khalfella) - igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU (Eric Dumazet) - virtio_ring: fix avail_wrap_counter in virtqueue_add_packed (Yuan Yao) - cpufreq: Fix the race condition while updating the transition_task of policy (Liao Chang) - dmaengine: ste_dma40: Add missing IRQ check in d40_probe (ruanjinjie) - um: Fix hostaudio build errors (Randy Dunlap) - mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume() (Yi Yang) - rpmsg: glink: Add check for kstrdup (Jiasheng Jiang) - phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write (Jonas Karlman) - phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate (Zheng Yang) - phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328 (Jonas Karlman) - tracing: Fix race issue between cpu buffer write and swap (Zheng Yejian) - HID: multitouch: Correct devm device reference for hidinput input_dev name (Rahul Rameshbabu) - HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode() (Nikita Zhandarovich) - RDMA/siw: Correct wrong debug message (Guoqing Jiang) - RDMA/siw: Balance the reference of cep->kref in the error path (Guoqing Jiang) - amba: bus: fix refcount leak (Peng Fan) - serial: tegra: handle clk prepare error in tegra_uart_hw_init() (Yi Yang) - scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock (Chengfeng Ye) - scsi: core: Use 32-bit hostnum in scsi_host_lookup() (Tony Battersby) - media: ov2680: Fix regulators being left enabled on ov2680_power_on() errors (Hans de Goede) - media: ov2680: Fix vflip / hflip set functions (Hans de Goede) - media: ov2680: Fix ov2680_bayer_order() (Hans de Goede) - media: ov2680: Remove auto-gain and auto-exposure controls (Hans de Goede) - media: i2c: ov2680: Set V4L2_CTRL_FLAG_MODIFY_LAYOUT on flips (Dave Stevenson) - media: ov5640: Enable MIPI interface in ov5640_set_power_mipi() (Marek Vasut) - media: i2c: ov5640: Configure HVP lines in s_power callback (Lad Prabhakar) - USB: gadget: f_mass_storage: Fix unused variable warning (Alan Stern) - media: go7007: Remove redundant if statement (Colin Ian King) - iommu/vt-d: Fix to flush cache of PASID directory table (Yanfei Xu) - IB/uverbs: Fix an potential error pointer dereference (Xiang Yang) - driver core: test_async: fix an error code (Dan Carpenter) - dma-buf/sync_file: Fix docs syntax (Rob Clark) - coresight: tmc: Explicit type conversions to prevent integer overflow (Ruidong Tian) - scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko) - scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko) - scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko) - x86/APM: drop the duplicate APM_MINOR_DEV macro (Randy Dunlap) - serial: sprd: Fix DMA buffer leak issue (Chunyan Zhang) - serial: sprd: Assign sprd_port after initialized to avoid wrong access (Chunyan Zhang) - serial: sprd: remove redundant sprd_port cleanup (Chunyan Zhang) - serial: sprd: getting port index via serial aliases only (Chunyan Zhang) - scsi: qla4xxx: Add length check when parsing nlattrs (Lin Ma) - scsi: be2iscsi: Add length check when parsing nlattrs (Lin Ma) - scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param() (Lin Ma) - usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() (Xu Yang) - media: mediatek: vcodec: Return NULL if no vdec_fb is found (Irui Wang) - media: cx24120: Add retval check for cx24120_message_send() (Daniil Dulov) - media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer() (Christophe JAILLET) - media: dib7000p: Fix potential division by zero (Daniil Dulov) - drivers: usb: smsusb: fix error handling code in smsusb_init_device (Dongliang Mu) - media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link() (Christophe JAILLET) - media: v4l2-fwnode: simplify v4l2_fwnode_parse_link (Marco Felsch) - media: v4l2-fwnode: fix v4l2_fwnode_parse_link handling (Marco Felsch) - NFS: Guard against READDIR loop when entry names exceed MAXNAMELEN (Benjamin Coddington) - NFSD: da_addr_body field missing in some GETDEVICEINFO replies (Chuck Lever) - fs: lockd: avoid possible wrong NULL parameter (Su Hui) - jfs: validate max amount of blocks before allocation. (Alexei Filippov) - powerpc/iommu: Fix notifiers being shared by PCI and VIO buses (Russell Currey) - nfs/blocklayout: Use the passed in gfp flags (Dan Carpenter) - wifi: ath10k: Use RMW accessors for changing LNKCTL (Ilpo Jarvinen) - drm/radeon: Use RMW accessors for changing LNKCTL (Ilpo Jarvinen) - drm/radeon: Prefer pcie_capability_read_word() (Frederick Lawler) - drm/radeon: Replace numbers with PCI_EXP_LNKCTL2 definitions (Bjorn Helgaas) - drm/radeon: Correct Transmit Margin masks (Bjorn Helgaas) - drm/amdgpu: Use RMW accessors for changing LNKCTL (Ilpo Jarvinen) - drm/amdgpu: Prefer pcie_capability_read_word() (Frederick Lawler) - drm/amdgpu: Replace numbers with PCI_EXP_LNKCTL2 definitions (Bjorn Helgaas) - drm/amdgpu: Correct Transmit Margin masks (Bjorn Helgaas) - PCI: Add #defines for Enter Compliance, Transmit Margin (Bjorn Helgaas) - powerpc/fadump: reset dump area size if fadump memory reserve fails (Sourabh Jain) - clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op (Ahmad Fatoum) - PCI/ASPM: Use RMW accessors for changing LNKCTL (Ilpo Jarvinen) - PCI: pciehp: Use RMW accessors for changing LNKCTL (Ilpo Jarvinen) - clk: sunxi-ng: Modify mismatched function name (Zhang Jianhua) - drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init() (Minjie Du) - ipmi:ssif: Fix a memory leak when scanning for an adapter (Corey Minyard) - ipmi:ssif: Add check for kstrdup (Jiasheng Jiang) - of: unittest: Fix overlay type in apply/revert check (Geert Uytterhoeven) - drm/mediatek: Fix potential memory leak if vmap() fail (Sui Jingfeng) - audit: fix possible soft lockup in __audit_inode_child() (Gaosheng Cui) - smackfs: Prevent underflow in smk_set_cipso() (Dan Carpenter) - drm/msm/mdp5: Don't leak some plane state (Daniel Vetter) - ima: Remove deprecated IMA_TRUSTED_KEYRING Kconfig (Nayna Jain) - drm/panel: simple: Add missing connector type and pixel format for AUO T215HVN01 (Marek Vasut) - drm/armada: Fix off-by-one error in armada_overlay_get_property() (Geert Uytterhoeven) - of: unittest: fix null pointer dereferencing in of_unittest_find_node_by_name() (Ruan Jinjie) - drm/tegra: dpaux: Fix incorrect return value of platform_get_irq (Yangtao Li) - drm/tegra: Remove superfluous error messages around platform_get_irq() (Tan Zhongjun) - md/md-bitmap: hold 'reconfig_mutex' in backlog_store() (Yu Kuai) - md/bitmap: don't set max_write_behind if there is no write mostly device (Guoqing Jiang) - drm/amdgpu: Update min() to min_t() in 'amdgpu_info_ioctl' (Srinivasan Shanmugam) - arm64: dts: qcom: sdm845: Add missing RPMh power domain to GCC (Manivannan Sadhasivam) - ARM: dts: BCM53573: Fix Ethernet info for Luxul devices (Rafal Milecki) - drm: adv7511: Fix low refresh rate register for ADV7533/5 (Bogdan Togorean) - ARM: dts: samsung: s5pv210-smdkv210: correct ethernet reg addresses (split) (Krzysztof Kozlowski) - ARM: dts: s5pv210: add dummy 5V regulator for backlight on SMDKv210 (Krzysztof Kozlowski) - ARM: dts: s5pv210: correct ethernet unit address in SMDKV210 (Krzysztof Kozlowski) - ARM: dts: s5pv210: use defines for IRQ flags in SMDKV210 (Krzysztof Kozlowski) - ARM: dts: s5pv210: add RTC 32 KHz clock in SMDKV210 (Krzysztof Kozlowski) - ARM: dts: samsung: s3c6410-mini6410: correct ethernet reg addresses (split) (Krzysztof Kozlowski) - ARM: dts: s3c64xx: align pinctrl with dtschema (Krzysztof Kozlowski) - ARM: dts: s3c6410: align node SROM bus node name with dtschema in Mini6410 (Krzysztof Kozlowski) - ARM: dts: s3c6410: move fixed clocks under root node in Mini6410 (Krzysztof Kozlowski) - drm/etnaviv: fix dumping of active MMU context (Lucas Stach) - ARM: dts: BCM53573: Use updated 'spi-gpio' binding properties (Rafal Milecki) - ARM: dts: BCM53573: Add cells sizes to PCIe node (Rafal Milecki) - ARM: dts: BCM53573: Drop nonexistent 'default-off' LED trigger (Rafal Milecki) - drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar() (Arnd Bergmann) - quota: fix dqput() to follow the guarantees dquot_srcu should provide (Baokun Li) - quota: add new helper dquot_active() (Baokun Li) - quota: rename dquot_active() to inode_quota_active() (Baokun Li) - quota: factor out dquot_write_dquot() (Baokun Li) - quota: avoid increasing DQST_LOOKUPS when iterating over dirty/inuse list (Chengguang Xu) - drm/bridge: tc358764: Fix debug print parameter order (Marek Vasut) - netrom: Deny concurrent connect(). (Kuniyuki Iwashima) - net/sched: sch_hfsc: Ensure inner classes have fsc curve (Budimir Markovic) - mlxsw: i2c: Limit single transaction buffer size (Vadim Pasternak) - mlxsw: i2c: Fix chunk size setting in output mailbox buffer (Vadim Pasternak) - net: arcnet: Do not call kfree_skb() under local_irq_disable() (Jinjie Ruan) - wifi: ath9k: use IS_ERR() with debugfs_create_dir() (Wang Ming) - wifi: mwifiex: avoid possible NULL skb pointer dereference (Dmitry Antipov) - wifi: ath9k: protect WMI command response buffer replacement with a lock (Fedor Pchelkin) - wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx (Fedor Pchelkin) - wifi: mwifiex: Fix missed return in oob checks failed path (Polaris Pi) - wifi: mwifiex: fix memory leak in mwifiex_histogram_read() (Dmitry Antipov) - fs: ocfs2: namei: check return value of ocfs2_add_entry() (Artem Chernyshev) - lwt: Check LWTUNNEL_XMIT_CONTINUE strictly (Yan Zhai) - lwt: Fix return values of BPF xmit ops (Yan Zhai) - hwrng: iproc-rng200 - Implement suspend and resume calls (Florian Fainelli) - hwrng: iproc-rng200 - use semicolons rather than commas to separate statements (Julia Lawall) - crypto: caam - fix unchecked return value error (Gaurav Jain) - Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() (Yuanjun Gong) - crypto: stm32 - Properly handle pm_runtime_get failing (Uwe Kleine-Konig) - wifi: mwifiex: fix error recovery in PCIE buffer descriptor management (Dmitry Antipov) - mwifiex: switch from 'pci_' to 'dma_' API (Christophe JAILLET) - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Polaris Pi) - can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM (Marc Kleine-Budde) - spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() (Zhang Shurong) - regmap: rbtree: Use alloc_flags for memory allocations (Dan Carpenter) - tcp: tcp_enter_quickack_mode() should be static (Eric Dumazet) - bpf: Clear the probe_addr for uprobe (Yafang Shao) - cpufreq: powernow-k8: Use related_cpus instead of cpus in driver.exit() (Liao Chang) - perf/imx_ddr: don't enable counter0 if none of 4 counters are used (Xu Yang) - x86/decompressor: Don't rely on upper 32 bits of GPRs being preserved (Ard Biesheuvel) - x86/boot: Annotate local functions (Jiri Slaby) - x86/asm: Make more symbols local (Jiri Slaby) - OPP: Fix passing 0 to PTR_ERR in _opp_attach_genpd() (Manivannan Sadhasivam) - tmpfs: verify {g,u}id mount options correctly (Christian Brauner) - fs: Fix error checking for d_hash_and_lookup() (Wang Ming) - new helper: lookup_positive_unlocked() (Al Viro) - eventfd: prevent underflow for eventfd semaphores (Wen Yang) - eventfd: Export eventfd_ctx_do_read() (David Woodhouse) - reiserfs: Check the return value from __getblk() (Matthew Wilcox) - Revert 'net: macsec: preserve ingress frame ordering' (Sabrina Dubroca) - Revert 'net: macsec: Severe performance regression in '...preserve ordering'' (Sherry Yang) - udf: Handle error when adding extent to a file (Jan Kara) - udf: Check consistency of Space Bitmap Descriptor (Vladislav Efanov) - powerpc/32s: Fix assembler warning about r0 (Christophe Leroy) - net: Avoid address overwrite in kernel_connect (Jordan Rife) - platform/mellanox: Fix mlxbf-tmfifo not handling all virtio CONSOLE notifications (Shih-Yi Chen) - ALSA: seq: oss: Fix racy open/close of MIDI devices (Takashi Iwai) - scsi: storvsc: Always set no_report_opcodes (Michael Kelley) - cifs: add a warning when the in-flight count goes negative (Shyam Prasad N) - sctp: handle invalid error codes without calling BUG() (Dan Carpenter) - bnx2x: fix page fault following EEH recovery (David Christensen) - netlabel: fix shift wrapping bug in netlbl_catmap_setlong() (Dmitry Mastykin) - scsi: qedi: Fix potential deadlock on &qedi_percpu->p_work_lock (Chengfeng Ye) - idmaengine: make FSL_EDMA and INTEL_IDMA64 depends on HAS_IOMEM (Baoquan He) - net: usb: qmi_wwan: add Quectel EM05GV2 (Martin Kohn) - clk: fixed-mmio: make COMMON_CLK_FIXED_MMIO depend on HAS_IOMEM (Baoquan He) - security: keys: perform capable check only on privileged operations (Christian Gottsche) - platform/x86: huawei-wmi: Silence ambient light sensor (Konstantin Shelekhin) - platform/x86: intel: hid: Always call BTNL ACPI method (Hans de Goede) - ASoC: atmel: Fix the 8K sample parameter in I2SC master (Guiting Shen) - ASoc: codecs: ES8316: Fix DMIC config (Edgar) - fs/nls: make load_nls() take a const parameter (Winston Wen) - s390/dasd: fix hanging device after request requeue (Stefan Haberland) - s390/dasd: use correct number of retries for ERP requests (Stefan Haberland) - m68k: Fix invalid .section syntax (Ben Hutchings) - vxlan: generalize vxlan_parse_gpe_hdr and remove unused args (Jiri Benc) - ethernet: atheros: fix return value check in atl1c_tso_csum() (Yuanjun Gong) - ASoC: da7219: Check for failure reading AAD IRQ events (Dmytro Maluka) - ASoC: da7219: Flush pending AAD IRQ when suspending (Dmytro Maluka) - 9p: virtio: make sure 'offs' is initialized in zc_request (Dominique Martinet) - nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse (Ryusuke Konishi) - nilfs2: fix general protection fault in nilfs_lookup_dirty_data_buffers() (Ryusuke Konishi) - fsi: master-ast-cf: Add MODULE_FIRMWARE macro (Juerg Haefliger) - serial: sc16is7xx: fix bug when first setting GPIO direction (Hugo Villeneuve) - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition (Zheng Wang) {CVE-2023-1989} - staging: rtl8712: fix race condition (Nam Cao) - HID: wacom: remove the battery when the EKR is off (Aaron Armstrong Skomra) - USB: serial: option: add FOXCONN T99W368/T99W373 product (Slark Xiao) - USB: serial: option: add Quectel EM05G variant (0x030e) (Martin Kohn) - modules: only allow symbol_get of EXPORT_SYMBOL_GPL modules (Christoph Hellwig) - rtc: ds1685: use EXPORT_SYMBOL_GPL for ds1685_rtc_poweroff (Christoph Hellwig) - net: enetc: use EXPORT_SYMBOL_GPL for enetc_phc_index (Christoph Hellwig) - mmc: au1xmmc: force non-modular build and remove symbol_get usage (Christoph Hellwig) - ARM: pxa: remove use of symbol_get() (Arnd Bergmann) - erofs: ensure that the post-EOF tails are all zeroed (Gao Xiang) [5.4.17-2136.325.2.el7] - Pensando: kpcimgr: Decouple kstate addr from shmem addr (Rob Gardner) [Orabug: 35842998] - bnxt_en: fix NULL dereference in bnxt_flash_package_from_file() (Samasth Norway Ananda) [Orabug: 35844212] - uek-rpm: aarch64: embedded: Fix a typo when enabling CONFIG_STACKTRACE (Thomas Tai) [Orabug: 35858089] - ocfs2: ocfs2 crash due to invalid h_next_leaf_blk value in extent block (Gautham Ananthakrishna) [Orabug: 35859331] [5.4.17-2136.325.1.el7] - uek-rpm: aarch64: embedded: Enable CONFIG_STACKTRACE and CONFIG_FTRACE (Thomas Tai) [Orabug: 35818484] - io_uring: add a sysctl to disable io_uring system-wide (Matteo Rizzo) [Orabug: 35819375] - KVM: SVM: Set target pCPU during IRTE update if target vCPU is running (Sean Christopherson) [Orabug: 35827614] - KVM: SVM: Take and hold ir_list_lock when updating vCPU's Physical ID entry (Sean Christopherson) [Orabug: 35827614] - Pensando: kpcimgr: Zero out mod pointer unconditionally (Rob Gardner) [Orabug: 35842963] - pensando: kpcimgr: Flush i-cache before calling any pciesvc code (Rob Gardner) [Orabug: 35842972] [5.4.17-2136.324.5.el7] - netfilter: nfnetlink_osf: avoid OOB read (Wander Lairson Costa) - dlm: fix plock lookup when using multiple lockspaces (Alexander Aring) - x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Dave Hansen) - Revert 'IB/isert: Fix incorrect release of isert connection' (Leon Romanovsky) - ALSA: ac97: Fix possible error value of *rac97 (Su Hui) - pinctrl: amd: Don't show Invalid config param errors (Mario Limonciello) - netfilter: xt_sctp: validate the flag_info count (Wander Lairson Costa) - netfilter: xt_u32: validate user space input (Wander Lairson Costa) - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Kyle Zeng) [Orabug: 35824287] {CVE-2023-42753} [5.4.17-2136.324.4.el7] - kernfs: fix missing kernfs_iattr_rwsem locking (Ian Kent) [Orabug: 35796771] - x86/microcode: Stop reprobing mitigations after late microcode load (Boris Ostrovsky) [Orabug: 35818857] {CVE-2023-20569} - objtool/x86: Fix SRSO mess (Peter Zijlstra) [Orabug: 35818857] {CVE-2023-20569} - x86/srso: Correct the mitigation status when SMT is disabled (Borislav Petkov (AMD)) [Orabug: 35818857] {CVE-2023-20569} - objtool/x86: Fixup frame-pointer vs rethunk (Peter Zijlstra) [Orabug: 35818857] {CVE-2023-20569} - x86/srso: Disable the mitigation on unaffected configurations (Borislav Petkov (AMD)) [Orabug: 35818857] {CVE-2023-20569} - x86/retpoline: Don't clobber RFLAGS during srso_safe_ret() (Sean Christopherson) [Orabug: 35818857] {CVE-2023-20569} - x86/srso: Explain the untraining sequences a bit more (Borislav Petkov (AMD)) [Orabug: 35818857] {CVE-2023-20569} - x86/cpu: Cleanup the untrain mess (Peter Zijlstra) [Orabug: 35818857] {CVE-2023-20569} - x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (Peter Zijlstra) [Orabug: 35818857] {CVE-2023-20569} - x86/cpu: Rename original retbleed methods (Peter Zijlstra) [Orabug: 35818857] {CVE-2023-20569} - x86/cpu: Clean up SRSO return thunk mess (Peter Zijlstra) [Orabug: 35818857] {CVE-2023-20569} - x86/alternative: Make custom return thunk unconditional (Peter Zijlstra) [Orabug: 35818857] {CVE-2023-20569} - x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (Peter Zijlstra) [Orabug: 35818857] {CVE-2023-20569} - x86/cpu: Fix __x86_return_thunk symbol type (Peter Zijlstra) [Orabug: 35818857] {CVE-2023-20569} - x86/srso: Fix build breakage with the LLVM linker (Nick Desaulniers) [Orabug: 35818857] {CVE-2023-20569} - x86/srso: Tie SBPB bit setting to microcode patch detection (Borislav Petkov (AMD)) [Orabug: 35818857] {CVE-2023-20569} - x86/srso: Fix return thunks in generated code (Josh Poimboeuf) [Orabug: 35818857] {CVE-2023-20569} - x86/srso: Add IBPB on VMEXIT (Borislav Petkov (AMD)) [Orabug: 35818857] {CVE-2023-20569} - x86/srso: Add SRSO_NO support (Borislav Petkov (AMD)) [Orabug: 35818857] {CVE-2023-20569} - x86/srso: Add IBPB_BRTYPE support (Borislav Petkov (AMD)) [Orabug: 35818857] {CVE-2023-20569} - x86/srso: Add a Speculative RAS Overflow mitigation (Borislav Petkov (AMD)) [Orabug: 35818857] {CVE-2023-20569} - scsi: megaraid_sas: Fix deadlock on firmware crashdump (Junxiao Bi) [Orabug: 35819593] - rds: Fix lack of reentrancy for connection reset with dst addr zero (Hakon Bugge) [Orabug: 35819522] {CVE-2023-22024} [5.4.17-2136.324.3.el7] - uek-rpm: aarch64: enable ACPI_AGDI (Mihai Carabas) [Orabug: 34833165] - arm64: sdei: abort running SDEI handlers during crash (D Scott Phillips) [Orabug: 34833165] - ACPI: AGDI: Fix missing prototype warning for acpi_agdi_init() (Ilkka Koskinen) [Orabug: 34833165] - ACPI: AGDI: Add driver for Arm Generic Diagnostic Dump and Reset device (Ilkka Koskinen) [Orabug: 34833165] - ACPI: tables: Add AGDI to the list of known table signatures (Ilkka Koskinen) [Orabug: 34833165] - ACPICA: iASL: Add suppport for AGDI table (Ilkka Koskinen) [Orabug: 34833165] - ACPI: APEI: explicit init of HEST and GHES in apci_init() (Shuai Xue) [Orabug: 34833165] - x86/CPU/AMD: Fix the DIV(0) initial fix attempt (Borislav Petkov (AMD)) [Orabug: 35776936] {CVE-2023-20588} - x86/CPU/AMD: Do not leak quotient data after a division by 0 (Borislav Petkov (AMD)) [Orabug: 35776936] {CVE-2023-20588} - uek-rpm: Pensando: enable PENSANDO_SOC_BSM_ENABLE in the config (Dave Kleikamp) [Orabug: 35787554] [5.4.17-2136.324.2.el7] - LTS tag: v5.4.256 (Sherry Yang) - Revert 'MIPS: Alchemy: fix dbdma2' (Greg Kroah-Hartman) - powerpc/pmac/smp: Drop unnecessary volatile qualifier (YueHaibing) - powerpc/pmac/smp: Avoid unused-variable warnings (Ilie Halip) - LTS tag: v5.4.255 (Sherry Yang) - dma-buf/sw_sync: Avoid recursive lock during fence signal (Rob Clark) - pinctrl: renesas: rza2: Add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} (Biju Das) - clk: Fix undefined reference to clk_rate_exclusive_{get,put}' (Biju Das) - scsi: core: raid_class: Remove raid_component_add() (Zhu Wang) - scsi: snic: Fix double free in snic_tgt_create() (Zhu Wang) - irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable (Jiaxun Yang) - Documentation/sysctl: document page_lock_unfairness (Joel Savitz) - ALSA: pcm: Check for null pointer of pointer substream before dereferencing it (Colin Ian King) - interconnect: Do not skip aggregation for disabled paths (Georgi Djakov) - Revert 'ALSA: pcm: Use SG-buffer only when direct DMA is available' (Takashi Iwai) - ALSA: pcm: Fix build error on m68k and others (Takashi Iwai) - rtnetlink: Reject negative ifindexes in RTM_NEWLINK (Ido Schimmel) - x86/fpu: Set X86_FEATURE_OSXSAVE feature after enabling OSXSAVE in CR4 (Feng Tang) - drm/display/dp: Fix the DP DSC Receiver cap size (Ankit Nautiyal) - PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus (Igor Mammedov) - media: vcodec: Fix potential array out-of-bounds in encoder queue_setup (Wei Chen) - radix tree: remove unused variable (Arnd Bergmann) - lib/clz_ctz.c: Fix __clzdi2() and __ctzdi2() for 32-bit kernels (Helge Deller) - batman-adv: Hold rtnl lock during MTU update via netlink (Sven Eckelmann) - batman-adv: Fix batadv_v_ogm_aggr_send memory leak (Remi Pommarel) - batman-adv: Fix TT global entry leak when client roamed back (Remi Pommarel) - batman-adv: Do not get eth header before batadv_check_management_packet (Remi Pommarel) - batman-adv: Don't increase MTU when set by user (Sven Eckelmann) - batman-adv: Trigger events for auto adjusted MTU (Sven Eckelmann) - nfsd: Fix race to FREE_STATEID and cl_revoked (Benjamin Coddington) - clk: Fix slab-out-of-bounds error in devm_clk_release() (Andrey Skvortsov) - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) - ibmveth: Use dcbf rather than dcbfl (Michael Ellerman) - bonding: fix macvlan over alb bond support (Hangbin Liu) - net: remove bond_slave_has_mac_rcu() (Jakub Kicinski) - net/sched: fix a qdisc modification with ambiguous command request (Jamal Hadi Salim) - igb: Avoid starting unnecessary workqueues (Alessio Igor Bogani) - net: validate veth and vxcan peer ifindexes (Jakub Kicinski) - net: bcmgenet: Fix return value check for fixed_phy_register() (Ruan Jinjie) - net: bgmac: Fix return value check for fixed_phy_register() (Ruan Jinjie) - ipvlan: Fix a reference count leak warning in ipvlan_ns_exit() (Lu Wei) - dccp: annotate data-races in dccp_poll() (Eric Dumazet) - sock: annotate data-races around prot->memory_pressure (Eric Dumazet) - octeontx2-af: SDP: fix receive link config (Hariprasad Kelam) - tracing: Fix memleak due to race between current_tracer and trace (Zheng Yejian) - drm/amd/display: check TG is non-null before checking if enabled (Taimur Hassan) - drm/amd/display: do not wait for mpc idle if tg is disabled (Josip Pavic) - ASoC: fsl_sai: Disable bit clock with transmitter (Matus Gajdos) - ASoC: fsl_sai: Add new added registers and new bit definition (Shengjiu Wang) - ASoC: fsl_sai: Refine enable/disable TE/RE sequence in trigger() (Shengjiu Wang) - regmap: Account for register length in SMBus I/O limits (Mark Brown) - ALSA: pcm: Fix potential data race at PCM memory allocation helpers (Takashi Iwai) - ALSA: pcm: Set per-card upper limit of PCM buffer allocations (Takashi Iwai) - dm integrity: reduce vmalloc space footprint on 32-bit architectures (Mikulas Patocka) - dm integrity: increase RECALC_SECTORS to improve recalculate speed (Mikulas Patocka) - fbdev: fix potential OOB read in fast_imageblit() (Zhang Shurong) - fbdev: Fix sys_imageblit() for arbitrary image widths (Thomas Zimmermann) - fbdev: Improve performance of sys_imageblit() (Thomas Zimmermann) - MIPS: cpu-features: Use boot_cpu_type for CPU type based features (Jiaxun Yang) - MIPS: cpu-features: Enable octeon_cache by cpu_type (Jiaxun Yang) - fs: dlm: fix mismatch of plock results from userspace (Alexander Aring) - fs: dlm: use dlm_plock_info for do_unlock_close (Alexander Aring) - fs: dlm: change plock interrupted message to debug again (Alexander Aring) - fs: dlm: add pid to debug log (Alexander Aring) - dlm: replace usage of found with dedicated list iterator variable (Jakob Koschel) - dlm: improve plock logging if interrupted (Alexander Aring) - PCI: acpiphp: Reassign resources on bridge if necessary (Igor Mammedov) - net: phy: broadcom: stub c45 read/write for 54810 (Justin Chen) - mmc: f-sdh30: fix order of function calls in sdhci_f_sdh30_remove (Yangtao Li) - net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure (Lin Ma) - net: fix the RTO timer retransmitting skb every 1ms if linear option is enabled (Jason Xing) - virtio-net: set queues after driver_ok (Jason Wang) - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Kuniyuki Iwashima) - netfilter: set default timeout to 3 secs for sctp shutdown send and recv state (Xin Long) - mmc: block: Fix in_flight[issue_type] value error (Yibin Ding) - mmc: wbsd: fix double mmc_free_host() in wbsd_init() (Yang Yingliang) - cifs: Release folio lock on fscache read hit. (Russell Harmon via samba-technical) - ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces. (dengxiang) - serial: 8250: Fix oops for port->pm on uart_change_pm() (Tony Lindgren) - ASoC: meson: axg-tdm-formatter: fix channel slot allocation (Jerome Brunet) - ASoC: rt5665: add missed regulator_bulk_disable (Zhang Shurong) - ARM: dts: imx: Set default tuning step for imx6sx usdhc (Xiaolei Wang) - ARM: dts: imx: Set default tuning step for imx7d usdhc (Xiaolei Wang) - ARM: dts: imx: Adjust dma-apbh node name (Stefan Wahren) - ARM: dts: imx7s: Drop dma-apb interrupt-names (Marek Vasut) - bus: ti-sysc: Flush posted write on enable before reset (Tony Lindgren) - bus: ti-sysc: Improve reset to work with modules with no sysconfig (Tony Lindgren) - net: do not allow gso_size to be set to GSO_BY_FRAGS (Eric Dumazet) - sock: Fix misuse of sk_under_memory_pressure() (Abel Wu) - net: dsa: mv88e6xxx: Wait for EEPROM done before HW reset (Alfred Lee) - i40e: fix misleading debug logs (Andrii Staikov) - team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves (Ziyang Xuan) - netfilter: nft_dynset: disallow object maps (Pablo Neira Ayuso) - ipvs: fix racy memcpy in proc_do_sync_threshold (Sishuai Gong) - selftests: mirror_gre_changes: Tighten up the TTL test match (Petr Machata) - xfrm: add NULL check in xfrm_update_ae_params (Lin Ma) {CVE-2023-3772} - ip_vti: fix potential slab-use-after-free in decode_session6 (Zhengchao Shao) - ip6_vti: fix slab-use-after-free in decode_session6 (Zhengchao Shao) - xfrm: fix slab-use-after-free in decode_session6 (Zhengchao Shao) - xfrm: interface: rename xfrm_interface.c to xfrm_interface_core.c (Eyal Birger) - net: af_key: fix sadb_x_filter validation (Lin Ma) - net: xfrm: Fix xfrm_address_filter OOB read (Lin Ma) - btrfs: fix BUG_ON condition in btrfs_cancel_balance (xiaoshoukui) - tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32 platforms (Sherry Sun) - powerpc/rtas_flash: allow user copy to flash block cache objects (Nathan Lynch) - fbdev: mmp: fix value check in mmphw_probe() (Yuanjun Gong) - i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue (Chengfeng Ye) - virtio-mmio: don't break lifecycle of vm_dev (Wolfram Sang) - virtio-mmio: Use to_virtio_mmio_device() to simply code (Tang Bin) - virtio-mmio: convert to devm_platform_ioremap_resource (Yangtao Li) - nfsd: Remove incorrect check in nfsd4_validate_stateid (Trond Myklebust) - nfsd4: kill warnings on testing stateids with mismatched clientids (J. Bruce Fields) - net/ncsi: Fix gma flag setting after response (Vijay Khemka) - tracing/probes: Fix to update dynamic data counter if fetcharg uses it (Masami Hiramatsu (Google)) - tracing/probes: Have process_fetch_insn() take a void * instead of pt_regs (Steven Rostedt (VMware)) - leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev rename (Christian Marangi) - mmc: sunxi: fix deferred probing (Sergey Shtylyov) - mmc: bcm2835: fix deferred probing (Sergey Shtylyov) - USB: dwc3: qcom: fix NULL-deref on suspend (Johan Hovold) - usb: dwc3: qcom: Add helper functions to enable,disable wake irqs (Sandeep Maheswaram) - interconnect: Add helpers for enabling/disabling a path (Georgi Djakov) - interconnect: Move internal structs into a separate file (Georgi Djakov) - irqchip/mips-gic: Use raw spinlock for gic_lock (Jiaxun Yang) - irqchip/mips-gic: Get rid of the reliance on irq_cpu_online() (Marc Zyngier) - ALSA: hda: Fix unhandled register update during auto-suspend period (Takashi Iwai) - PM: runtime: Add pm_runtime_get_if_active() (Sakari Ailus) - PM-runtime: add tracepoints for usage_count changes (Michal Miroslaw) - iio: addac: stx104: Fix race condition when converting analog-to-digital (William Breathitt Gray) - iio: addac: stx104: Fix race condition for stx104_write_raw() (William Breathitt Gray) - iio: stx104: Move to addac subdirectory (William Breathitt Gray) - iio: adc: stx104: Implement and utilize register structures (William Breathitt Gray) - iio: adc: stx104: Utilize iomap interface (William Breathitt Gray) - iio: add addac subdirectory (Cosmin Tanislav) - IMA: allow/fix UML builds (Randy Dunlap) - powerpc/kasan: Disable KCOV in KASAN code (Benjamin Gray) - ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() (Tuo Li) - ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 & Q760 (dengxiang) - drm/amdgpu: Fix potential fence use-after-free v2 (shanzhulig) - pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db() (Armin Wolf) - gfs2: Fix possible data races in gfs2_show_options() (Tuo Li) - usb: chipidea: imx: don't request QoS for imx8ulp (Xu Yang) - media: platform: mediatek: vpu: fix NULL ptr dereference (Hans Verkuil) - media: v4l2-mem2mem: add lock to protect parameter num_rdy (Yunfei Dong) - FS: JFS: Check for read-only mounted filesystem in txBegin (Immad Mir) - FS: JFS: Fix null-ptr-deref Read in txBegin (Immad Mir) - MIPS: dec: prom: Address -Warray-bounds warning (Gustavo A. R. Silva) - fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev (Yogesh) - udf: Fix uninitialized array access for some pathnames (Jan Kara) - ovl: check type and offset of struct vfsmount in ovl_entry (Christian Brauner) - HID: add quirk for 03f0:464a HP Elite Presenter Mouse (Marco Morandini) - quota: fix warning in dqgrab() (Ye Bin) - quota: Properly disable quotas when add_dquot_ref() fails (Jan Kara) - ALSA: emu10k1: roll up loops in DSP setup code for Audigy (Oswald Buddenhagen) - drm/radeon: Fix integer overflow in radeon_cs_parser_init (hackyzh002) - macsec: use DEV_STATS_INC() (Eric Dumazet) - macsec: Fix traffic counters/statistics (Clayton Yager) - selftests: forwarding: tc_flower: Relax success criterion (Ido Schimmel) - mmc: sdhci-f-sdh30: Replace with sdhci_pltfm (Kunihiko Hayashi) - mmc: sdhci_f_sdh30: convert to devm_platform_ioremap_resource (Yangtao Li) - LTS tag: v5.4.254 (Sherry Yang) - sch_netem: fix issues in netem_change() vs get_dist_table() (Eric Dumazet) - alpha: remove __init annotation from exported page_is_ram() (Masahiro Yamada) - scsi: core: Fix possible memory leak if device_add() fails (Zhu Wang) - scsi: snic: Fix possible memory leak if device_add() fails (Zhu Wang) - scsi: 53c700: Check that command slot is not NULL (Alexandra Diupina) - scsi: storvsc: Fix handling of virtual Fibre Channel timeouts (Michael Kelley) - scsi: core: Fix legacy /proc parsing buffer overflow (Tony Battersby) - netfilter: nf_tables: report use refcount overflow (Pablo Neira Ayuso) - nvme-rdma: fix potential unbalanced freeze & unfreeze (Ming Lei) - nvme-tcp: fix potential unbalanced freeze & unfreeze (Ming Lei) - btrfs: set cache_block_group_error if we find an error (Josef Bacik) - btrfs: don't stop integrity writeback too early (Christoph Hellwig) - ibmvnic: Handle DMA unmapping of login buffs in release functions (Nick Child) - net/mlx5: Allow 0 for total host VFs (Daniel Jurgens) - dmaengine: mcf-edma: Fix a potential un-allocated memory access (Christophe JAILLET) - wifi: cfg80211: fix sband iftype data lookup for AP_VLAN (Felix Fietkau) - IB/hfi1: Fix possible panic during hotplug remove (Douglas Miller) - drivers: net: prevent tun_build_skb() to exceed the packet size limit (Andrew Kanner) - dccp: fix data-race around dp->dccps_mss_cache (Eric Dumazet) - bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves (Ziyang Xuan) - net/packet: annotate data-races around tp->status (Eric Dumazet) - mISDN: Update parameter type of dsp_cmx_send() (Nathan Chancellor) - selftests/rseq: Fix build with undefined __weak (Mark Brown) - drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes (Karol Herbst) - x86: Move gds_ucode_mitigated() declaration to header (Arnd Bergmann) - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Kirill A. Shutemov) - x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 (Cristian Ciocaltea) - usb: common: usb-conn-gpio: Prevent bailing out if initial role is none (Prashanth K) - usb: dwc3: Properly handle processing of pending events (Elson Roy Serrao) - usb-storage: alauda: Fix uninit-value in alauda_check_media() (Alan Stern) - binder: fix memory leak in binder_init() (Qi Zheng) - iio: cros_ec: Fix the allocation size for cros_ec_command (Yiyuan Guo) - nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (Ryusuke Konishi) - radix tree test suite: fix incorrect allocation size for pthreads (Colin Ian King) - drm/nouveau/gr: enable memory loads on helper invocation on all channels (Karol Herbst) - dmaengine: pl330: Return DMA_PAUSED when transaction is paused (Ilpo Jarvinen) - ipv6: adjust ndisc_is_useropt() to also return true for PIO (Maciej Zenczykowski) - mmc: moxart: read scr register without changing byte order (Sergei Antonov) - LTS tag: v5.4.253 (Sherry Yang) - Revert 'driver core: Annotate dev_err_probe() with __must_check' (Greg Kroah-Hartman) - drivers: core: fix kernel-doc markup for dev_err_probe() (Mauro Carvalho Chehab) - driver code: print symbolic error code (Michal Miroslaw) - ARM: dts: nxp/imx6sll: fix wrong property name in usbphy node (Xu Yang) - ARM: dts: imx6sll: fixup of operating points (Andreas Kemnade) - ARM: dts: imx: add usb alias (Peng Fan) - ARM: dts: imx: Align L2 cache-controller nodename with dtschema (Krzysztof Kozlowski) - ARM: dts: imx6sll: Make ssi node name same as other platforms (Shengjiu Wang) - arm64: dts: stratix10: fix incorrect I2C property for SCL signal (Dinh Nguyen) - ceph: defer stopping mdsc delayed_work (Xiubo Li) - ceph: use kill_anon_super helper (Jeff Layton) - ceph: show tasks waiting on caps in debugfs caps file (Jeff Layton) - PM: sleep: wakeirq: fix wake irq arming (Johan Hovold) - PM / wakeirq: support enabling wake-up irq after runtime_suspend called (Chunfeng Yun) - selftests/rseq: Play nice with binaries statically linked against glibc 2.35+ (Sean Christopherson) - selftests/rseq: check if libc rseq support is registered (Michael Jeanson) - powerpc/mm/altmap: Fix altmap boundary check (Aneesh Kumar K.V) - mtd: rawnand: omap_elm: Fix incorrect type in assignment (Roger Quadros) - test_firmware: return ENOMEM instead of ENOSPC on failed memory allocation (Mirsad Goran Todorovac) - test_firmware: prevent race conditions by a correct implementation of locking (Mirsad Goran Todorovac) - ext2: Drop fragment support (Jan Kara) - fs: Protect reconfiguration of sb read-write from racing writes (Jan Kara) - net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb (Alan Stern) - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (Sungwoo Kim) - fs/sysv: Null check to prevent null-ptr-deref bug (Prince Kumar Maurya) - net: tap_open(): set sk_uid from current_fsuid() (Laszlo Ersek) {CVE-2023-1076} - net: tun_chr_open(): set sk_uid from current_fsuid() (Laszlo Ersek) {CVE-2023-1076} - mtd: rawnand: meson: fix OOB available bytes for ECC (Arseniy Krasnov) - mtd: spinand: toshiba: Fix ecc_get_status (Olivier Maignial) - USB: zaurus: Add ID for A-300/B-500/C-700 (Ross Maynard) - libceph: fix potential hang in ceph_osdc_notify() (Ilya Dryomov) - scsi: zfcp: Defer fc_rport blocking until after ADISC response (Steffen Maier) - tcp_metrics: fix data-race in tcpm_suck_dst() vs fastopen (Eric Dumazet) - tcp_metrics: annotate data-races around tm->tcpm_net (Eric Dumazet) - tcp_metrics: annotate data-races around tm->tcpm_vals[] (Eric Dumazet) - tcp_metrics: annotate data-races around tm->tcpm_lock (Eric Dumazet) - tcp_metrics: annotate data-races around tm->tcpm_stamp (Eric Dumazet) - tcp_metrics: fix addr_same() helper (Eric Dumazet) - ip6mr: Fix skb_under_panic in ip6mr_cache_report() (Yue Haibing) - net: dcb: choose correct policy to parse DCB_ATTR_BCN (Lin Ma) - net: ll_temac: fix error checking of irq_of_parse_and_map() (Dan Carpenter) - net: ll_temac: Switch to use dev_err_probe() helper (Yang Yingliang) - driver core: add device probe log helper (Andrzej Hajda) - bpf: sockmap: Remove preempt_disable in sock_map_sk_acquire (Tomas Glozar) - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (valis) - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (valis) - net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (valis) - net: add missing data-race annotation for sk_ll_usec (Eric Dumazet) - net: add missing data-race annotations around sk->sk_peek_off (Eric Dumazet) - net: add missing READ_ONCE(sk->sk_rcvbuf) annotation (Eric Dumazet) - net: add missing READ_ONCE(sk->sk_sndbuf) annotation (Eric Dumazet) - net: add missing READ_ONCE(sk->sk_rcvlowat) annotation (Eric Dumazet) - net: annotate data-races around sk->sk_max_pacing_rate (Eric Dumazet) - mISDN: hfcpci: Fix potential deadlock on &hc->lock (Chengfeng Ye) - net: sched: cls_u32: Fix match key mis-addressing (Jamal Hadi Salim) - perf test uprobe_from_different_cu: Skip if there is no gcc (Georg Muller) - rtnetlink: let rtnl_bridge_setlink checks IFLA_BRIDGE_MODE length (Lin Ma) - net/mlx5e: fix return value check in mlx5e_ipsec_remove_trailer() (Yuanjun Gong) - net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx (Zhengchao Shao) - KVM: s390: fix sthyi error handling (Heiko Carstens) - word-at-a-time: use the same return type for has_zero regardless of endianness (ndesaulniers@google.com) - loop: Select I/O scheduler 'none' from inside add_disk() (Bart Van Assche) - perf: Fix function pointer case (Peter Zijlstra) - arm64: Fix bit-shifting UB in the MIDR_CPU_MODEL() macro (D Scott Phillips) - ASoC: cs42l51: fix driver to properly autoload with automatic module loading (Thomas Petazzoni) - net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Pedro Tammela) {CVE-2023-31436} - btrfs: fix race between quota disable and quota assign ioctls (Filipe Manana) - btrfs: qgroup: return ENOTCONN instead of EINVAL when quotas are not enabled (Marcos Paulo de Souza) - btrfs: qgroup: remove one-time use variables for quota_root checks (Marcos Paulo de Souza) - cpufreq: intel_pstate: Drop ACPI _PSS states table patching (Rafael J. Wysocki) - ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily (Rafael J. Wysocki) - ACPI: processor: perflib: Use the 'no limit' frequency QoS (Rafael J. Wysocki) - dm cache policy smq: ensure IO doesn't prevent cleaner policy progress (Joe Thornber) - ASoC: wm8904: Fill the cache for WM8904_ADC_TEST_0 register (Mark Brown) - s390/dasd: fix hanging device after quiesce/resume (Stefan Haberland) - virtio-net: fix race between set queues and probe (Jason Wang) - btrfs: check if the transaction was aborted at btrfs_wait_for_commit() (Filipe Manana) - irq-bcm6345-l1: Do not assume a fixed block to cpu mapping (Jonas Gorski) - tpm_tis: Explicitly check for error code (Alexander Steffen) - btrfs: check for commit error at btrfs_attach_transaction_barrier() (Filipe Manana) - hwmon: (nct7802) Fix for temp6 (PECI1) processed even if PECI1 disabled (Gilles Buloz) - staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext() (Zhang Shurong) - Documentation: security-bugs.rst: clarify CVE handling (Greg Kroah-Hartman) - Documentation: security-bugs.rst: update preferences when dealing with the linux-distros group (Greg Kroah-Hartman) - Revert 'usb: xhci: tegra: Fix error check' (Dan Carpenter) - usb: xhci-mtk: set the dma max_seg_size (Ricardo Ribalda) - USB: quirks: add quirk for Focusrite Scarlett (Lukasz Bartosik) - usb: ohci-at91: Fix the unhandle interrupt when resume (Guiting Shen) - usb: dwc3: don't reset device side if dwc3 was configured as host-only (Jisheng Zhang) - usb: dwc3: pci: skip BYT GPIO lookup table for hardwired phy (Gratian Crisan) - Revert 'usb: dwc3: core: Enable AutoRetry feature in the controller' (Jakub Vanek) - can: gs_usb: gs_can_close(): add missing set of CAN state to CAN_STATE_STOPPED (Marc Kleine-Budde) - USB: serial: simple: sort driver entries (Johan Hovold) - USB: serial: simple: add Kaufmann RKS+CAN VCP (Oliver Neukum) - USB: serial: option: add Quectel EC200A module support (Mohsen Tahmasebi) - USB: serial: option: support Quectel EM060K_128 (Jerry Meng) - serial: sifive: Fix sifive_serial_console_setup() section (Samuel Holland) - serial: 8250_dw: Preserve original value of DLF register (Ruihong Luo) - tracing: Fix warning in trace_buffered_event_disable() (Zheng Yejian) - ring-buffer: Fix wrong stat of cpu_buffer->read (Zheng Yejian) - ata: pata_ns87415: mark ns87560_tf_read static (Arnd Bergmann) - dm raid: fix missing reconfig_mutex unlock in raid_ctr() error paths (Yu Kuai) - block: Fix a source code comment in include/uapi/linux/blkzoned.h (Bart Van Assche) - ASoC: fsl_spdif: Silence output on stop (Matus Gajdos) - drm/msm: Fix IS_ERR_OR_NULL() vs NULL check in a5xx_submit_in_rb() (Gaosheng Cui) - drm/msm/adreno: Fix snapshot BINDLESS_DATA size (Rob Clark) - drm/msm/dpu: drop enum dpu_core_perf_data_bus_id (Dmitry Baryshkov) - RDMA/mlx4: Make check for invalid flags stricter (Dan Carpenter) - benet: fix return value check in be_lancer_xmit_workarounds() (Yuanjun Gong) - net/sched: mqprio: Add length check for TCA_MQPRIO_{MAX/MIN}_RATE64 (Lin Ma) - net/sched: mqprio: add extack to mqprio_parse_nlattr() (Vladimir Oltean) - net/sched: mqprio: refactor nlattr parsing to a separate function (Vladimir Oltean) - platform/x86: msi-laptop: Fix rfkill out-of-sync on MSI Wind U100 (Maxim Mikityanskiy) - team: reset team's flags when down link is P2P device (Hangbin Liu) - bonding: reset bond's flags when down link is P2P device (Hangbin Liu) - tcp: Reduce chance of collisions in inet6_hashfn(). (Stewart Smith) - ipv6 addrconf: fix bug where deleting a mngtmpaddr can create a new temporary address (Maciej Zenczykowski) - ethernet: atheros: fix return value check in atl1e_tso_csum() (Yuanjun Gong) - phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe() (Harshit Mogalapalli) - vxlan: calculate correct header length for GPE (Jiri Benc) - i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir() (Wang Ming) - ext4: fix to check return value of freeze_bdev() in ext4_shutdown() (Chao Yu) - keys: Fix linking a duplicate key to a keyring's assoc_array (Petr Pavlu) - uapi: General notification queue definitions (David Howells) - scsi: qla2xxx: Array index may go out of bound (Nilesh Javali) - pwm: meson: fix handling of period/duty if greater than UINT_MAX (Heiner Kallweit) - pwm: meson: Simplify duplicated per-channel tracking (Uwe Kleine-Konig) - pwm: meson: Remove redundant assignment to variable fin_freq (Colin Ian King) - ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() (Zheng Yejian) - ftrace: Store the order of pages allocated in ftrace_page (Linus Torvalds) - ftrace: Check if pages were allocated before calling free_pages() (Steven Rostedt (VMware)) - ftrace: Add information on number of page groups allocated (Steven Rostedt (VMware)) - fs: dlm: interrupt posix locks only when process is killed (Alexander Aring) - dlm: rearrange async condition return (Alexander Aring) - dlm: cleanup plock_op vs plock_xop (Alexander Aring) - PCI/ASPM: Avoid link retraining race (Ilpo Jarvinen) - PCI/ASPM: Factor out pcie_wait_for_retrain() (Ilpo Jarvinen) - PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link() (Bjorn Helgaas) - ext4: Fix reusing stale buffer heads from last failed mounting (Zhihao Cheng) - ext4: rename journal_dev to s_journal_dev inside ext4_sb_info (Chunguang Xu) - btrfs: fix extent buffer leak after tree mod log failure at split_node() (Filipe Manana) - btrfs: fix race between quota disable and relocation (Filipe Manana) - btrfs: qgroup: catch reserved space leaks at unmount time (Qu Wenruo) - bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent (Zheng Wang) - bcache: remove 'int n' from parameter list of bch_bucket_alloc_set() (Coly Li) - gpio: tps68470: Make tps68470_gpio_output() always set the initial value (Hans de Goede) - jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint (Zhihao Cheng) - jbd2: recheck chechpointing non-dirty buffer (Zhang Yi) - jbd2: remove redundant buffer io error checks (Zhang Yi) - jbd2: fix kernel-doc markups (Mauro Carvalho Chehab) - jbd2: fix incorrect code style (Xianting Tian) - LTS tag: v5.4.252 (Sherry Yang) - x86: fix backwards merge of GDS/SRSO bit (Greg Kroah-Hartman) - xen/netback: Fix buffer overrun triggered by unusual packet (Ross Lagerwall) {CVE-2023-34319} - x86/cpu, kvm: Add support for CPUID_80000021_EAX (Kim Phillips) - x86/cpufeatures: Assign dedicated feature word for CPUID_0x8000001F[EAX] (Sean Christopherson) - x86/cpu: Add VM page flush MSR availablility as a CPUID feature (Tom Lendacky) - x86/cpufeatures: Add SEV-ES CPU feature (Tom Lendacky) - x86/mm: fix poking_init() for Xen PV guests (Juergen Gross) [5.4.17-2136.324.1.el7] - io_uring: add support for registering ring file descriptors (Jens Axboe) [Orabug: 35485491] - mm,shmem,thp: limit shmem THP allocations to requested zones (Rik van Riel) [Orabug: 35655117] - mm,thp,shm: limit gfp mask to no more than specified (Rik van Riel) [Orabug: 35655117] - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rik van Riel) [Orabug: 35655117] - uek-rpm: Removing pre scriptlet to not allow firmware downgrade (Samasth Norway Ananda) [Orabug: 35741866] - rds: Remove gratuitous include of time.h from rds.h (Mark Haywood) [Orabug: 35742761] - RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device (Shay Drory) [Orabug: 35750824] - smp: Reduce NMI traffic from CSD waiters to CSD destination (Imran Khan) [Orabug: 35752501] - smp: Reduce logging due to dump_stack of CSD waiters (Imran Khan) [Orabug: 35752501] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-1989 cpe:/a:oracle:linux:7::UEKR6 Oracle Linux 8 [5.4.17-2136.325.5.el8] - perf symbols: Symbol lookup with kcore can fail if multiple segments match stext (Krister Johansen) [Orabug: 35905508] - char: misc: Increase the maximum number of dynamic misc devices to 1048448 (D Scott Phillips) [Orabug: 35905508] - perf/arm-cmn: Fix invalid pointer when access dtc object sharing the same IRQ number (Tuan Phan) [Orabug: 35905508] - char: misc: increase DYNAMIC_MINORS value (Sangmoon Kim) [Orabug: 35905508] [5.4.17-2136.325.4.el8] - net: nfc: llcp: Add lock when modifying device list (Jeremy Cline) - net: dsa: mv88e6xxx: Avoid EEPROM timeout when EEPROM is absent (Fabio Estevam) - ima: Finish deprecation of IMA_TRUSTED_KEYRING Kconfig (Oleksandr Tymoshenko) - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Pin-yen Lin) - Revert 'PCI: qcom: Disable write access to read only registers for IP v2.3.3' (Greg Kroah-Hartman) - rbd: take header_rwsem in rbd_dev_refresh() only when updating (Ilya Dryomov) - rbd: decouple parent info read-in from updating rbd_dev (Ilya Dryomov) - rbd: decouple header read-in from updating rbd_dev->header (Ilya Dryomov) - rbd: move rbd_dev_refresh() definition (Ilya Dryomov) - MIPS: Alchemy: only build mmc support helpers if au1xmmc is enabled (Christoph Hellwig) - netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP (Jozsef Kadlecsik) - dccp: fix dccp_v4_err()/dccp_v6_err() again (Eric Dumazet) - fix breakage in do_rmdir() (Al Viro) [Orabug: 35722671] - scsi: target: core: Fix deadlock due to recursive locking (Junxiao Bi) [Orabug: 35761341] - rds: Add proper refcnt when an RDS MR references an RDS Socket (Hakon Bugge) [Orabug: 35836949] - rds: Check for UAF in rds_destroy_mr (Hakon Bugge) [Orabug: 35836949] - i2c: designware: Fix corrupted memory seen in the ISR (Jan Bottorff) [Orabug: 35857601] - xfs: reserve less log space when recovering log intent items (Darrick J. Wong) [Orabug: 35871840] - octeontx_edac: Fix mcc_edac failure at boot (Thomas Tai) [Orabug: 35895526] - bpf: bpf_check() must fail when btf_linux is null (Dave Kleikamp) [Orabug: 35899889] [5.4.17-2136.325.3.el8] - LTS tag: v5.4.257 (Sherry Yang) - drm/amdgpu: fix amdgpu_cs_p1_user_fence (Christian Konig) - mtd: rawnand: brcmnand: Fix ECC level field setting for v7.2 controller (William Zhang) - ext4: fix rec_len verify error (Shida Zhang) - i2c: aspeed: Reset the i2c controller when timeout occurs (Tommy Huang) - tracefs: Add missing lockdown check to tracefs_create_dir() (Steven Rostedt (Google)) - nfsd: fix change_info in NFSv4 RENAME replies (Jeff Layton) - tracing: Have option files inc the trace array ref count (Steven Rostedt (Google)) - tracing: Have current_trace inc the trace array ref count (Steven Rostedt (Google)) - btrfs: fix lockdep splat and potential deadlock after failure running delayed items (Filipe Manana) - attr: block mode changes of symlinks (Christian Brauner) - md/raid1: fix error: ISO C90 forbids mixed declarations (Nigel Croxon) - selftests: tracing: Fix to unmount tracefs for recovering environment (Masami Hiramatsu (Google)) - btrfs: compare the correct fsid/metadata_uuid in btrfs_validate_super (Anand Jain) - btrfs: add a helper to read the superblock metadata_uuid (Anand Jain) - btrfs: move btrfs_pinned_by_swapfile prototype into volumes.h (Josef Bacik) - perf tools: Add an option to build without libbfd (Ian Rogers) - perf jevents: Make build dependency on test JSONs (John Garry) - tools features: Add feature test to check if libbfd has buildid support (Arnaldo Carvalho de Melo) - kobject: Add sanity check for kset->kobj.ktype in kset_register() (Zhen Lei) - media: pci: ipu3-cio2: Initialise timing struct to avoid a compiler warning (Sakari Ailus) - serial: cpm_uart: Avoid suspicious locking (Christophe Leroy) - scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (Konstantin Shelekhin) - usb: gadget: fsl_qe_udc: validate endpoint index for ch9 udc (Ma Ke) - media: pci: cx23885: replace BUG with error return (Hans Verkuil) - media: tuners: qt1010: replace BUG_ON with a regular error (Hans Verkuil) - media: az6007: Fix null-ptr-deref in az6007_i2c_xfer() (Zhang Shurong) - media: anysee: fix null-ptr-deref in anysee_master_xfer (Zhang Shurong) - media: af9005: Fix null-ptr-deref in af9005_i2c_xfer (Zhang Shurong) - media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer() (Zhang Shurong) - media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer (Zhang Shurong) - powerpc/pseries: fix possible memory leak in ibmebus_bus_init() (ruanjinjie) - jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount (Liu Shixin via Jfs-discussion) - fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount() (Andrew Kanner) - ext2: fix datatype of block number in ext2_xattr_set2() (Georg Ottinger) - md: raid1: fix potential OOB in raid1_remove_disk() (Zhang Shurong) - bus: ti-sysc: Configure uart quirks for k3 SoC (Tony Lindgren) - drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable() (Tuo Li) - wifi: mac80211_hwsim: drop short frames (Johannes Berg) - alx: fix OOB-read compiler warning (GONG, Ruiqi) - mmc: sdhci-esdhc-imx: improve ESDHC_FLAG_ERR010450 (Giulio Benetti) - tpm_tis: Resend command to recover from data transfer errors (Alexander Steffen) - crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (Mark O'Donovan) - wifi: mwifiex: fix fortify warning (Dmitry Antipov) - wifi: ath9k: fix printk specifier (Dongliang Mu) - devlink: remove reload failed checks in params get/set callbacks (Jiri Pirko) - hw_breakpoint: fix single-stepping when using bpf_overflow_handler (Tomislav Novak) - perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09 (Yicong Yang) - ACPI: video: Add backlight=native DMI quirk for Lenovo Ideapad Z470 (Jiri Slaby (SUSE)) - kernel/fork: beware of __put_task_struct() calling context (Wander Lairson Costa) - ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer (Abhishek Mainkar) - locks: fix KASAN: use-after-free in trace_event_raw_event_filelock_lock (Will Shiu) - btrfs: output extra debug info if we failed to find an inline backref (Qu Wenruo) - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Fedor Pchelkin) - parisc: Drop loops_per_jiffy from per_cpu struct (Helge Deller) - drm/amd/display: Fix a bug when searching for insert_above_mpcc (Wesley Chalmers) - kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg(). (Kuniyuki Iwashima) - ixgbe: fix timestamp configuration code (Vadim Fedorenko) - net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict() (Liu Jian) - platform/mellanox: mlxbf-tmfifo: Drop jumbo frames (Liming Sun) - platform/mellanox: mlxbf-tmfifo: Drop the Rx packet if no more descriptors (Liming Sun) - kcm: Fix memory leak in error path of kcm_sendmsg() (Shigeru Yoshida) - r8152: check budget for r8152_poll() (Hayes Wang) - net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all() (Hangyu Hua) - net: ethernet: mvpp2_main: fix possible OOB write in mvpp2_ethtool_get_rxnfc() (Hangyu Hua) - net: ipv4: fix one memleak in __inet_del_ifa() (Liu Jian) - clk: imx8mm: Move 1443X/1416X PLL clock structure to common place (Anson Huang) - ARM: dts: BCM5301X: Extend RAM to full 256MB for Linksys EA6500 V2 (Aleksey Nasibulin) - usb: typec: bus: verify partner exists in typec_altmode_attention (RD Babiera) - usb: typec: tcpm: Refactor tcpm_handle_vdm_request (Hans de Goede) - usb: typec: tcpm: Refactor tcpm_handle_vdm_request payload handling (Hans de Goede) - perf tools: Handle old data in PERF_RECORD_ATTR (Namhyung Kim) - perf hists browser: Fix hierarchy mode header (Namhyung Kim) - mtd: rawnand: brcmnand: Fix potential false time out warning (William Zhang) - mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write (William Zhang) - mtd: rawnand: brcmnand: Fix crash during the panic_write (William Zhang) - btrfs: use the correct superblock to compare fsid in btrfs_validate_super (Anand Jain) - btrfs: don't start transaction when joining with TRANS_JOIN_NOSTART (Filipe Manana) - fuse: nlookup missing decrement in fuse_direntplus_link (ruanmeisi) - ata: pata_ftide010: Add missing MODULE_DESCRIPTION (Damien Le Moal) - ata: sata_gemini: Add missing MODULE_DESCRIPTION (Damien Le Moal) - sh: boards: Fix CEU buffer size passed to dma_declare_coherent_memory() (Petr Tesarik) - net: hns3: fix the port information display when sfp is absent (Yisen Zhuang) - ip_tunnels: use DEV_STATS_INC() (Eric Dumazet) - idr: fix param name in idr_alloc_cyclic() doc (Ariel Marcovitch) - s390/zcrypt: don't leak memory if dev_set_name() fails (Andy Shevchenko) - igb: Change IGB_MIN to allow set rx/tx value between 64 and 80 (Olga Zaborska) - igbvf: Change IGBVF_MIN to allow set rx/tx value between 64 and 80 (Olga Zaborska) - igc: Change IGC_MIN to allow set rx/tx value between 64 and 80 (Olga Zaborska) - kcm: Destroy mutex in kcm_exit_net() (Shigeru Yoshida) - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (valis) - af_unix: Fix data race around sk->sk_err. (Kuniyuki Iwashima) - af_unix: Fix data-races around sk->sk_shutdown. (Kuniyuki Iwashima) - af_unix: Fix data-race around unix_tot_inflight. (Kuniyuki Iwashima) - af_unix: Fix data-races around user->unix_inflight. (Kuniyuki Iwashima) - net: ipv6/addrconf: avoid integer underflow in ipv6_create_tempaddr (Alex Henrie) - veth: Fixing transmit return status for dropped packets (Liang Chen) - igb: disable virtualization features on 82580 (Corinna Vinschen) - net: read sk->sk_family once in sk_mc_loop() (Eric Dumazet) - ipv4: annotate data-races around fi->fib_dead (Eric Dumazet) - sctp: annotate data-races around sk->sk_wmem_queued (Eric Dumazet) - pwm: lpc32xx: Remove handling of PWM channels (Vladimir Zapolskiy) - watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load (Raag Jadav) - perf top: Don't pass an ERR_PTR() directly to perf_session__delete() (Arnaldo Carvalho de Melo) - x86/virt: Drop unnecessary check on extended CPUID level in cpu_has_svm() (Sean Christopherson) - perf annotate bpf: Don't enclose non-debug code with an assert() (Arnaldo Carvalho de Melo) - kconfig: fix possible buffer overflow (Konstantin Meskhidze) - NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info (Fedor Pchelkin) - soc: qcom: qmi_encdec: Restrict string length in decode (Chris Lew) - clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock (Dmitry Baryshkov) - parisc: led: Reduce CPU overhead for disk & lan LED computation (Helge Deller) - parisc: led: Fix LAN receive and transmit LEDs (Helge Deller) - lib/test_meminit: allocate pages up to order MAX_ORDER (Andrew Donnellan) - drm/ast: Fix DRAM init on AST2200 (Thomas Zimmermann) - fbdev/ep93xx-fb: Do not assign to struct fb_info.dev (Thomas Zimmermann) - scsi: qla2xxx: Remove unsupported ql2xenabledif option (Manish Rangankar) - scsi: qla2xxx: Turn off noisy message log (Quinn Tran) - scsi: qla2xxx: Fix erroneous link up failure (Quinn Tran) - scsi: qla2xxx: fix inconsistent TMF timeout (Quinn Tran) - net/ipv6: SKB symmetric hash should incorporate transport ports (Quan Tian) - drm: fix double free for gbo in drm_gem_vram_init and drm_gem_vram_create (Jia Yang) - udf: initialize newblock to 0 (Tom Rix) - usb: typec: tcpci: clear the fault status bit (Marco Felsch) - serial: sc16is7xx: fix broken port 0 uart init (Hugo Villeneuve) - sc16is7xx: Set iobase to device index (Daniel Mack) - cpufreq: brcmstb-avs-cpufreq: Fix -Warray-bounds bug (Gustavo A. R. Silva) - crypto: stm32 - fix loop iterating through scatterlist for DMA (Thomas Bourgoin) - s390/ipl: add missing secure/has_secure file to ipl type 'unknown' (Sven Schnelle) - pstore/ram: Check start of empty przs during init (Enlin Mu) - fsverity: skip PKCS#7 parser when keyring is empty (Eric Biggers) - net: handle ARPHRD_PPP in dev_is_mac_header_xmit() (Nicolas Dichtel) - X.509: if signature is unsupported skip validation (Thore Sommer) - dccp: Fix out of bounds access in DCCP error handler (Jann Horn) - parisc: Fix /proc/cpuinfo output for lscpu (Helge Deller) - procfs: block chmod on /proc/thread-self/comm (Aleksa Sarai) - Revert 'PCI: Mark NVIDIA T4 GPUs to avoid bus reset' (Bjorn Helgaas) - ntb: Fix calculation ntb_transport_tx_free_entry() (Dave Jiang) - ntb: Clean up tx tail index on link down (Dave Jiang) - ntb: Drop packets when qp link is down (Dave Jiang) - media: dvb: symbol fixup for dvb_attach() (Greg Kroah-Hartman) - xtensa: PMU: fix base address for the newer hardware (Max Filippov) - backlight/lv5207lp: Compare against struct fb_info.device (Thomas Zimmermann) - backlight/bd6107: Compare against struct fb_info.device (Thomas Zimmermann) - backlight/gpio_backlight: Compare against struct fb_info.device (Thomas Zimmermann) - ARM: OMAP2+: Fix -Warray-bounds warning in _pwrdm_state_switch() (Gustavo A. R. Silva) - ipmi_si: fix a memleak in try_smi_init() (Yi Yang) - ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl (Takashi Iwai) - PM / devfreq: Fix leak in devfreq_dev_release() (Boris Brezillon) - igb: set max size RX buffer when store bad packet is enabled (Radoslaw Tyl) - skbuff: skb_segment, Call zero copy functions before using skbuff frags (Mohamed Khalfella) - igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU (Eric Dumazet) - virtio_ring: fix avail_wrap_counter in virtqueue_add_packed (Yuan Yao) - cpufreq: Fix the race condition while updating the transition_task of policy (Liao Chang) - dmaengine: ste_dma40: Add missing IRQ check in d40_probe (ruanjinjie) - um: Fix hostaudio build errors (Randy Dunlap) - mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume() (Yi Yang) - rpmsg: glink: Add check for kstrdup (Jiasheng Jiang) - phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write (Jonas Karlman) - phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate (Zheng Yang) - phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328 (Jonas Karlman) - tracing: Fix race issue between cpu buffer write and swap (Zheng Yejian) - HID: multitouch: Correct devm device reference for hidinput input_dev name (Rahul Rameshbabu) - HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode() (Nikita Zhandarovich) - RDMA/siw: Correct wrong debug message (Guoqing Jiang) - RDMA/siw: Balance the reference of cep->kref in the error path (Guoqing Jiang) - amba: bus: fix refcount leak (Peng Fan) - serial: tegra: handle clk prepare error in tegra_uart_hw_init() (Yi Yang) - scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock (Chengfeng Ye) - scsi: core: Use 32-bit hostnum in scsi_host_lookup() (Tony Battersby) - media: ov2680: Fix regulators being left enabled on ov2680_power_on() errors (Hans de Goede) - media: ov2680: Fix vflip / hflip set functions (Hans de Goede) - media: ov2680: Fix ov2680_bayer_order() (Hans de Goede) - media: ov2680: Remove auto-gain and auto-exposure controls (Hans de Goede) - media: i2c: ov2680: Set V4L2_CTRL_FLAG_MODIFY_LAYOUT on flips (Dave Stevenson) - media: ov5640: Enable MIPI interface in ov5640_set_power_mipi() (Marek Vasut) - media: i2c: ov5640: Configure HVP lines in s_power callback (Lad Prabhakar) - USB: gadget: f_mass_storage: Fix unused variable warning (Alan Stern) - media: go7007: Remove redundant if statement (Colin Ian King) - iommu/vt-d: Fix to flush cache of PASID directory table (Yanfei Xu) - IB/uverbs: Fix an potential error pointer dereference (Xiang Yang) - driver core: test_async: fix an error code (Dan Carpenter) - dma-buf/sync_file: Fix docs syntax (Rob Clark) - coresight: tmc: Explicit type conversions to prevent integer overflow (Ruidong Tian) - scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko) - scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko) - scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko) - x86/APM: drop the duplicate APM_MINOR_DEV macro (Randy Dunlap) - serial: sprd: Fix DMA buffer leak issue (Chunyan Zhang) - serial: sprd: Assign sprd_port after initialized to avoid wrong access (Chunyan Zhang) - serial: sprd: remove redundant sprd_port cleanup (Chunyan Zhang) - serial: sprd: getting port index via serial aliases only (Chunyan Zhang) - scsi: qla4xxx: Add length check when parsing nlattrs (Lin Ma) - scsi: be2iscsi: Add length check when parsing nlattrs (Lin Ma) - scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param() (Lin Ma) - usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() (Xu Yang) - media: mediatek: vcodec: Return NULL if no vdec_fb is found (Irui Wang) - media: cx24120: Add retval check for cx24120_message_send() (Daniil Dulov) - media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer() (Christophe JAILLET) - media: dib7000p: Fix potential division by zero (Daniil Dulov) - drivers: usb: smsusb: fix error handling code in smsusb_init_device (Dongliang Mu) - media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link() (Christophe JAILLET) - media: v4l2-fwnode: simplify v4l2_fwnode_parse_link (Marco Felsch) - media: v4l2-fwnode: fix v4l2_fwnode_parse_link handling (Marco Felsch) - NFS: Guard against READDIR loop when entry names exceed MAXNAMELEN (Benjamin Coddington) - NFSD: da_addr_body field missing in some GETDEVICEINFO replies (Chuck Lever) - fs: lockd: avoid possible wrong NULL parameter (Su Hui) - jfs: validate max amount of blocks before allocation. (Alexei Filippov) - powerpc/iommu: Fix notifiers being shared by PCI and VIO buses (Russell Currey) - nfs/blocklayout: Use the passed in gfp flags (Dan Carpenter) - wifi: ath10k: Use RMW accessors for changing LNKCTL (Ilpo Jarvinen) - drm/radeon: Use RMW accessors for changing LNKCTL (Ilpo Jarvinen) - drm/radeon: Prefer pcie_capability_read_word() (Frederick Lawler) - drm/radeon: Replace numbers with PCI_EXP_LNKCTL2 definitions (Bjorn Helgaas) - drm/radeon: Correct Transmit Margin masks (Bjorn Helgaas) - drm/amdgpu: Use RMW accessors for changing LNKCTL (Ilpo Jarvinen) - drm/amdgpu: Prefer pcie_capability_read_word() (Frederick Lawler) - drm/amdgpu: Replace numbers with PCI_EXP_LNKCTL2 definitions (Bjorn Helgaas) - drm/amdgpu: Correct Transmit Margin masks (Bjorn Helgaas) - PCI: Add #defines for Enter Compliance, Transmit Margin (Bjorn Helgaas) - powerpc/fadump: reset dump area size if fadump memory reserve fails (Sourabh Jain) - clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op (Ahmad Fatoum) - PCI/ASPM: Use RMW accessors for changing LNKCTL (Ilpo Jarvinen) - PCI: pciehp: Use RMW accessors for changing LNKCTL (Ilpo Jarvinen) - clk: sunxi-ng: Modify mismatched function name (Zhang Jianhua) - drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init() (Minjie Du) - ipmi:ssif: Fix a memory leak when scanning for an adapter (Corey Minyard) - ipmi:ssif: Add check for kstrdup (Jiasheng Jiang) - of: unittest: Fix overlay type in apply/revert check (Geert Uytterhoeven) - drm/mediatek: Fix potential memory leak if vmap() fail (Sui Jingfeng) - audit: fix possible soft lockup in __audit_inode_child() (Gaosheng Cui) - smackfs: Prevent underflow in smk_set_cipso() (Dan Carpenter) - drm/msm/mdp5: Don't leak some plane state (Daniel Vetter) - ima: Remove deprecated IMA_TRUSTED_KEYRING Kconfig (Nayna Jain) - drm/panel: simple: Add missing connector type and pixel format for AUO T215HVN01 (Marek Vasut) - drm/armada: Fix off-by-one error in armada_overlay_get_property() (Geert Uytterhoeven) - of: unittest: fix null pointer dereferencing in of_unittest_find_node_by_name() (Ruan Jinjie) - drm/tegra: dpaux: Fix incorrect return value of platform_get_irq (Yangtao Li) - drm/tegra: Remove superfluous error messages around platform_get_irq() (Tan Zhongjun) - md/md-bitmap: hold 'reconfig_mutex' in backlog_store() (Yu Kuai) - md/bitmap: don't set max_write_behind if there is no write mostly device (Guoqing Jiang) - drm/amdgpu: Update min() to min_t() in 'amdgpu_info_ioctl' (Srinivasan Shanmugam) - arm64: dts: qcom: sdm845: Add missing RPMh power domain to GCC (Manivannan Sadhasivam) - ARM: dts: BCM53573: Fix Ethernet info for Luxul devices (Rafal Milecki) - drm: adv7511: Fix low refresh rate register for ADV7533/5 (Bogdan Togorean) - ARM: dts: samsung: s5pv210-smdkv210: correct ethernet reg addresses (split) (Krzysztof Kozlowski) - ARM: dts: s5pv210: add dummy 5V regulator for backlight on SMDKv210 (Krzysztof Kozlowski) - ARM: dts: s5pv210: correct ethernet unit address in SMDKV210 (Krzysztof Kozlowski) - ARM: dts: s5pv210: use defines for IRQ flags in SMDKV210 (Krzysztof Kozlowski) - ARM: dts: s5pv210: add RTC 32 KHz clock in SMDKV210 (Krzysztof Kozlowski) - ARM: dts: samsung: s3c6410-mini6410: correct ethernet reg addresses (split) (Krzysztof Kozlowski) - ARM: dts: s3c64xx: align pinctrl with dtschema (Krzysztof Kozlowski) - ARM: dts: s3c6410: align node SROM bus node name with dtschema in Mini6410 (Krzysztof Kozlowski) - ARM: dts: s3c6410: move fixed clocks under root node in Mini6410 (Krzysztof Kozlowski) - drm/etnaviv: fix dumping of active MMU context (Lucas Stach) - ARM: dts: BCM53573: Use updated 'spi-gpio' binding properties (Rafal Milecki) - ARM: dts: BCM53573: Add cells sizes to PCIe node (Rafal Milecki) - ARM: dts: BCM53573: Drop nonexistent 'default-off' LED trigger (Rafal Milecki) - drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar() (Arnd Bergmann) - quota: fix dqput() to follow the guarantees dquot_srcu should provide (Baokun Li) - quota: add new helper dquot_active() (Baokun Li) - quota: rename dquot_active() to inode_quota_active() (Baokun Li) - quota: factor out dquot_write_dquot() (Baokun Li) - quota: avoid increasing DQST_LOOKUPS when iterating over dirty/inuse list (Chengguang Xu) - drm/bridge: tc358764: Fix debug print parameter order (Marek Vasut) - netrom: Deny concurrent connect(). (Kuniyuki Iwashima) - net/sched: sch_hfsc: Ensure inner classes have fsc curve (Budimir Markovic) - mlxsw: i2c: Limit single transaction buffer size (Vadim Pasternak) - mlxsw: i2c: Fix chunk size setting in output mailbox buffer (Vadim Pasternak) - net: arcnet: Do not call kfree_skb() under local_irq_disable() (Jinjie Ruan) - wifi: ath9k: use IS_ERR() with debugfs_create_dir() (Wang Ming) - wifi: mwifiex: avoid possible NULL skb pointer dereference (Dmitry Antipov) - wifi: ath9k: protect WMI command response buffer replacement with a lock (Fedor Pchelkin) - wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx (Fedor Pchelkin) - wifi: mwifiex: Fix missed return in oob checks failed path (Polaris Pi) - wifi: mwifiex: fix memory leak in mwifiex_histogram_read() (Dmitry Antipov) - fs: ocfs2: namei: check return value of ocfs2_add_entry() (Artem Chernyshev) - lwt: Check LWTUNNEL_XMIT_CONTINUE strictly (Yan Zhai) - lwt: Fix return values of BPF xmit ops (Yan Zhai) - hwrng: iproc-rng200 - Implement suspend and resume calls (Florian Fainelli) - hwrng: iproc-rng200 - use semicolons rather than commas to separate statements (Julia Lawall) - crypto: caam - fix unchecked return value error (Gaurav Jain) - Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() (Yuanjun Gong) - crypto: stm32 - Properly handle pm_runtime_get failing (Uwe Kleine-Konig) - wifi: mwifiex: fix error recovery in PCIE buffer descriptor management (Dmitry Antipov) - mwifiex: switch from 'pci_' to 'dma_' API (Christophe JAILLET) - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Polaris Pi) - can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM (Marc Kleine-Budde) - spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() (Zhang Shurong) - regmap: rbtree: Use alloc_flags for memory allocations (Dan Carpenter) - tcp: tcp_enter_quickack_mode() should be static (Eric Dumazet) - bpf: Clear the probe_addr for uprobe (Yafang Shao) - cpufreq: powernow-k8: Use related_cpus instead of cpus in driver.exit() (Liao Chang) - perf/imx_ddr: don't enable counter0 if none of 4 counters are used (Xu Yang) - x86/decompressor: Don't rely on upper 32 bits of GPRs being preserved (Ard Biesheuvel) - x86/boot: Annotate local functions (Jiri Slaby) - x86/asm: Make more symbols local (Jiri Slaby) - OPP: Fix passing 0 to PTR_ERR in _opp_attach_genpd() (Manivannan Sadhasivam) - tmpfs: verify {g,u}id mount options correctly (Christian Brauner) - fs: Fix error checking for d_hash_and_lookup() (Wang Ming) - new helper: lookup_positive_unlocked() (Al Viro) - eventfd: prevent underflow for eventfd semaphores (Wen Yang) - eventfd: Export eventfd_ctx_do_read() (David Woodhouse) - reiserfs: Check the return value from __getblk() (Matthew Wilcox) - Revert 'net: macsec: preserve ingress frame ordering' (Sabrina Dubroca) - Revert 'net: macsec: Severe performance regression in '...preserve ordering'' (Sherry Yang) - udf: Handle error when adding extent to a file (Jan Kara) - udf: Check consistency of Space Bitmap Descriptor (Vladislav Efanov) - powerpc/32s: Fix assembler warning about r0 (Christophe Leroy) - net: Avoid address overwrite in kernel_connect (Jordan Rife) - platform/mellanox: Fix mlxbf-tmfifo not handling all virtio CONSOLE notifications (Shih-Yi Chen) - ALSA: seq: oss: Fix racy open/close of MIDI devices (Takashi Iwai) - scsi: storvsc: Always set no_report_opcodes (Michael Kelley) - cifs: add a warning when the in-flight count goes negative (Shyam Prasad N) - sctp: handle invalid error codes without calling BUG() (Dan Carpenter) - bnx2x: fix page fault following EEH recovery (David Christensen) - netlabel: fix shift wrapping bug in netlbl_catmap_setlong() (Dmitry Mastykin) - scsi: qedi: Fix potential deadlock on &qedi_percpu->p_work_lock (Chengfeng Ye) - idmaengine: make FSL_EDMA and INTEL_IDMA64 depends on HAS_IOMEM (Baoquan He) - net: usb: qmi_wwan: add Quectel EM05GV2 (Martin Kohn) - clk: fixed-mmio: make COMMON_CLK_FIXED_MMIO depend on HAS_IOMEM (Baoquan He) - security: keys: perform capable check only on privileged operations (Christian Gottsche) - platform/x86: huawei-wmi: Silence ambient light sensor (Konstantin Shelekhin) - platform/x86: intel: hid: Always call BTNL ACPI method (Hans de Goede) - ASoC: atmel: Fix the 8K sample parameter in I2SC master (Guiting Shen) - ASoc: codecs: ES8316: Fix DMIC config (Edgar) - fs/nls: make load_nls() take a const parameter (Winston Wen) - s390/dasd: fix hanging device after request requeue (Stefan Haberland) - s390/dasd: use correct number of retries for ERP requests (Stefan Haberland) - m68k: Fix invalid .section syntax (Ben Hutchings) - vxlan: generalize vxlan_parse_gpe_hdr and remove unused args (Jiri Benc) - ethernet: atheros: fix return value check in atl1c_tso_csum() (Yuanjun Gong) - ASoC: da7219: Check for failure reading AAD IRQ events (Dmytro Maluka) - ASoC: da7219: Flush pending AAD IRQ when suspending (Dmytro Maluka) - 9p: virtio: make sure 'offs' is initialized in zc_request (Dominique Martinet) - nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse (Ryusuke Konishi) - nilfs2: fix general protection fault in nilfs_lookup_dirty_data_buffers() (Ryusuke Konishi) - fsi: master-ast-cf: Add MODULE_FIRMWARE macro (Juerg Haefliger) - serial: sc16is7xx: fix bug when first setting GPIO direction (Hugo Villeneuve) - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition (Zheng Wang) {CVE-2023-1989} - staging: rtl8712: fix race condition (Nam Cao) - HID: wacom: remove the battery when the EKR is off (Aaron Armstrong Skomra) - USB: serial: option: add FOXCONN T99W368/T99W373 product (Slark Xiao) - USB: serial: option: add Quectel EM05G variant (0x030e) (Martin Kohn) - modules: only allow symbol_get of EXPORT_SYMBOL_GPL modules (Christoph Hellwig) - rtc: ds1685: use EXPORT_SYMBOL_GPL for ds1685_rtc_poweroff (Christoph Hellwig) - net: enetc: use EXPORT_SYMBOL_GPL for enetc_phc_index (Christoph Hellwig) - mmc: au1xmmc: force non-modular build and remove symbol_get usage (Christoph Hellwig) - ARM: pxa: remove use of symbol_get() (Arnd Bergmann) - erofs: ensure that the post-EOF tails are all zeroed (Gao Xiang) [5.4.17-2136.325.2.el8] - Pensando: kpcimgr: Decouple kstate addr from shmem addr (Rob Gardner) [Orabug: 35842998] - bnxt_en: fix NULL dereference in bnxt_flash_package_from_file() (Samasth Norway Ananda) [Orabug: 35844212] - uek-rpm: aarch64: embedded: Fix a typo when enabling CONFIG_STACKTRACE (Thomas Tai) [Orabug: 35858089] - ocfs2: ocfs2 crash due to invalid h_next_leaf_blk value in extent block (Gautham Ananthakrishna) [Orabug: 35859331] [5.4.17-2136.325.1.el8] - uek-rpm: aarch64: embedded: Enable CONFIG_STACKTRACE and CONFIG_FTRACE (Thomas Tai) [Orabug: 35818484] - io_uring: add a sysctl to disable io_uring system-wide (Matteo Rizzo) [Orabug: 35819375] - KVM: SVM: Set target pCPU during IRTE update if target vCPU is running (Sean Christopherson) [Orabug: 35827614] - KVM: SVM: Take and hold ir_list_lock when updating vCPU's Physical ID entry (Sean Christopherson) [Orabug: 35827614] - Pensando: kpcimgr: Zero out mod pointer unconditionally (Rob Gardner) [Orabug: 35842963] - pensando: kpcimgr: Flush i-cache before calling any pciesvc code (Rob Gardner) [Orabug: 35842972] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-1989 cpe:/a:oracle:linux:8::UEKR6 Oracle Linux 6 Oracle Linux 7 [4.1.12-124.81.2] - rebuild bumping release [4.1.12-124.81.1] - netfilter: xt_sctp: validate the flag_info count (Wander Lairson Costa) [Orabug: 35923500] {CVE-2023-39193} - USB: ene_usb6250: Allocate enough memory for full object (Kees Cook) [Orabug: 35924058] {CVE-2023-45862} - netfilter: xt_u32: validate user space input (Wander Lairson Costa) [Orabug: 35923470] {CVE-2023-39192} - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (valis) [Orabug: 35707466] {CVE-2023-4207} IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-39192 CVE-2023-45862 CVE-2023-4207 CVE-2023-39193 cpe:/a:oracle:linux:6:10:UEKR4_ELS cpe:/a:oracle:linux:7::UEKR4 Oracle Linux 9 [20230821] - Create new 20230821 release for OL9 which includes the following fixed CVEs: CVE-2019-14560 - Update to OpenSSL 1.1.1v which includes the following fixed CVEs: CVE-2023-3817 CVE-2023-3446 CVE-2023-2650 CVE-2023-0465 CVE-2023-0466 CVE-2023-0464 CVE-2023-0286 CVE-2023-0215 CVE-2022-4450 CVE-2022-4304 CVE-2022-2097 CVE-2022-2068 CVE-2022-1292 CVE-2022-0778 CVE-2021-4160 CVE-2021-3712 CVE-2021-3711 CVE-2021-3450 CVE-2021-3449 CVE-2021-23841 CVE-2021-23840 CVE-2020-1971 CVE-2020-1967 CVE-2019-1551 CVE-2019-1563 CVE-2019-1549 CVE-2019-1547 CVE-2019-1552 CVE-2019-1543 CVE-2018-0734 CVE-2018-0735 [20230613] - Create new 20230613.cvm release for OL9 [20230227] - Create new 20230227.cvm release for OL9 which includes the following fixed CVEs: CVE-2021-38578 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-0215 CVE-2022-4304 CVE-2022-4450 CVE-2023-0286 cpe:/a:oracle:linux:9::kvm_utils Oracle Linux 8 [20230821] - Create new 20230821 release for OL8 which includes the following fixed CVEs: CVE-2019-14560 - Update to OpenSSL 1.1.1v which includes the following fixed CVEs: CVE-2023-3817 CVE-2023-3446 CVE-2023-2650 CVE-2023-0465 CVE-2023-0466 CVE-2023-0464 CVE-2023-0286 CVE-2023-0215 CVE-2022-4450 CVE-2022-4304 CVE-2022-2097 CVE-2022-2068 CVE-2022-1292 CVE-2022-0778 CVE-2021-4160 CVE-2021-3712 CVE-2021-3711 CVE-2021-3450 CVE-2021-3449 CVE-2021-23841 CVE-2021-23840 CVE-2020-1971 CVE-2020-1967 CVE-2019-1551 CVE-2019-1563 CVE-2019-1549 CVE-2019-1547 CVE-2019-1552 CVE-2019-1543 CVE-2018-0734 CVE-2018-0735 [20230613] - Create new 20230613.cvm release for OL8 [20230227] - Create new 20230227.cvm release for OL8 which includes the following fixed CVEs: CVE-2021-38578 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-4450 CVE-2023-0286 CVE-2022-4304 CVE-2023-0215 cpe:/a:oracle:linux:8::kvm_appstream Oracle Linux 7 [20230821] - Create new 20230821 release for OL8 which includes the following fixed CVEs: CVE-2019-14560 - Update to OpenSSL 1.1.1v which includes the following fixed CVEs: CVE-2023-3817 CVE-2023-3446 CVE-2023-2650 CVE-2023-0465 CVE-2023-0466 CVE-2023-0464 CVE-2023-0286 CVE-2023-0215 CVE-2022-4450 CVE-2022-4304 CVE-2022-2097 CVE-2022-2068 CVE-2022-1292 CVE-2022-0778 CVE-2021-4160 CVE-2021-3712 CVE-2021-3711 CVE-2021-3450 CVE-2021-3449 CVE-2021-23841 CVE-2021-23840 CVE-2020-1971 CVE-2020-1967 CVE-2019-1551 CVE-2019-1563 CVE-2019-1549 CVE-2019-1547 CVE-2019-1552 CVE-2019-1543 CVE-2018-0734 CVE-2018-0735 [20230613] - Create new 20230613.cvm release for OL8 [20230227] - Create new 20230227.cvm release for OL8 which includes the following fixed CVEs: CVE-2021-38578 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-4450 CVE-2023-0215 CVE-2023-0286 CVE-2022-4304 cpe:/a:oracle:linux:7::kvm_utils Oracle Linux 7 [20230821] - Create new 20230821 release for OL7 which includes the following fixed CVEs: CVE-2019-14560 - Update to OpenSSL 1.1.1v which includes the following fixed CVEs: CVE-2023-3817 CVE-2023-3446 CVE-2023-2650 CVE-2023-0465 CVE-2023-0466 CVE-2023-0464 CVE-2023-0286 CVE-2023-0215 CVE-2022-4450 CVE-2022-4304 CVE-2022-2097 CVE-2022-2068 CVE-2022-1292 CVE-2022-0778 CVE-2021-4160 CVE-2021-3712 CVE-2021-3711 CVE-2021-3450 CVE-2021-3449 CVE-2021-23841 CVE-2021-23840 CVE-2020-1971 CVE-2020-1967 CVE-2019-1551 CVE-2019-1563 CVE-2019-1549 CVE-2019-1547 CVE-2019-1552 CVE-2019-1543 CVE-2018-0734 CVE-2018-0735 [20230613] - Create new 20230613.cvm release for OL7 [20230227] - Create new 20230227.cvm release for OL7 which includes the following fixed CVEs: CVE-2021-38578 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-4304 CVE-2022-4450 CVE-2023-0215 CVE-2023-0286 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7:9:patch cpe:/a:oracle:linux:7::kvm_utils cpe:/a:oracle:linux:7::optional_latest Oracle Linux 8 conmon [2.1.3-7] - Resolve CVE-2023-39325 [2.1.3-6] - Add ol8_baseos_latest, and ol9_baseos_latest, to Jenkinsfile [2.1.3-5] - Add systemd-devel as build requirement [2.1.3-4] - Add support ARM build [2.1.3.3] - Add OL9 support [2.1.3.2] - Update inline with Linux team building conmon for all but OL7. cri-o [1.25.2-3] - Resolve CVE-2023-39325 cri-tools [1.25.0-2] - Resolve CVE-2023-39325 etcd [3.5.9-2] - Bump up version [3.5.9-1] - Added Oracle specific build files flannel-cni-plugin [1.0.1-3] - Resolve CVE-2023-44487 and CVE-2023-39325 helm [3.11.1-2] - address CVE-2023-44487 and CVE-2023-39325 istio kata [1.12.1-14] - Updated to address CVE-2023-44487 and CVE-2023-39325 [1.12.1-13] - Rebuild kata to fix timestamp issue [1.12.1-12] - Add support for ARM build [1.12.1-11] - Add OL9 support [1.12.1-10] - Updated kata-runtime version to work with more versions of kvm_utils kata-agent [1.12.1-9] - Updated to address CVE-2023-44487 and CVE-2023-39325 [1.12.1-8] - Remove build_date global variable in kata-image specfile [1.12.1-7] - Add support for ARM build [1.12.1-6] - Add OL9 support kata-image [1.12.1-9] - Updated to address CVE-2023-44487 and CVE-2023-39325 [1.12.1-8] - Remove build_date global variable in specfile [1.12.1-7] - Add support for ARM build [1.12.1-6] - Restore OL7 and bump release [1.12.1-5] - Add support for Oracle Linux 9 [1.12.1-4] - build for kata-agent-1.12.1-4 kata-ksm-throttler [1.12.1-9] - Updated to address CVE-2023-44487 and CVE-2023-39325 [1.12.1-8] - Bump release inline with other kata packages for fixing timestamp issue [1.12.1-7] - Add support for ARM build [1.12.1-6] - Bump releaase inline with others for reversion of removal of OL7. [1.12.1-5] - Add support for Oracle Linux 9 kata-proxy [1.12.1-9] - Updated to address CVE-2023-44487 and CVE-2023-39325 [1.12.1-8] - Bump release inline with other kata packages for fixing timestamp issue [1.12.1-7] - Add support for ARM build [1.12.1-6] - Revert OL7 removal [1.12.1-5] - Add support for Oracle Linux 9 kata-runtime [1.12.1-9] - Updated to address CVE-2023-44487 and CVE-2023-39325 [1.12.1-8] - Bump release inline with other kata packages for fixing timestamp issue [1.12.1-7] - Add support for ARM build [1.12.1-6] - Add OL9 support [1.12.1-5] - Updated qemu-kvm machine options to work with more versions of kvm_utils kata-shim [1.12.1-9] - Updated to address CVE-2023-44487 and CVE-2023-39325 [1.12.1-8] - Bump release inline with other kata packages for fixing timestamp issue [1.12.1-7] - Add support for ARM build [1.12.1-6] - Bump releaase inline with others for reversion of removal of OL7. [1.12.1-5] - Add support for Oracle Linux 9 kubernetes kubernetes-cni [1.0.1-3] - Resolve CVE-2023-44487 and CVE-2023-39325 kubernetes-cni-plugins [1.0.1-4] - Resolve CVE-2023-44487 and CVE-2023-39325 olcne [1.6.5-9] - Mark container-registry as updatable [1.6.5-9] - update metallb 0.12.1 to address CVE-2023-44487 and CVE-2023-39325 [1.6.5-8] - Update externalip-webhook 1.0.0-3 to address CVE-2023-44487, CVE-2023-39325 [1.6.5-7] - Update multus-cni 3.9.3 to address CVE-2023-44487 and CVE-2023-39325 [1.6.5-6] - Update rook-1.10.9 to address CVE-2023-44487, CVE-2023-39325 [1.6.5-5] - Update Istio, Grafana, Prometheus, and Kubernetes-dashboard to address CVE's - CVE-2023-44487 - CVE-2023-39325 [1.6.5-4] - Update kubernetes and components to address golang CVE-2023-44487, CVE-2023-39325 [1.6.5-3] - update configmap-registry to 1.28.0 to address CVE-2023-44487 and CVE-2023-39325 [1.6.5-2] - Update kubevirt 0.58.0 to address CVE-2023-44487 and CVE-2023-39325 [1.6.5-1] - Update calico image versions to address golang CVE-2023-44487, CVE-2023-39325 yq [4.34.1-3] - address CVE-2023-44487 and CVE-2023-3932A [4.34.1-2] - Add support for ARM build IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-39325 CVE-2023-44487 cpe:/a:oracle:linux:8::olcne16 Oracle Linux 7 conmon [2.1.3-7] - Resolve CVE-2023-39325 [2.1.3-6] - Add ol8_baseos_latest, and ol9_baseos_latest, to Jenkinsfile [2.1.3-5] - Add systemd-devel as build requirement [2.1.3-4] - Add support ARM build [2.1.3.3] - Add OL9 support [2.1.3.2] - Update inline with Linux team building conmon for all but OL7. cri-o [1.25.2-3] - Resolve CVE-2023-39325 cri-tools [1.25.0-2] - Resolve CVE-2023-39325 flannel-cni-plugin [1.0.1-3] - Resolve CVE-2023-44487 and CVE-2023-39325 helm [3.11.1-2] - address CVE-2023-44487 and CVE-2023-39325 istio kata [1.12.1-14] - Updated to address CVE-2023-44487 and CVE-2023-39325 [1.12.1-13] - Rebuild kata to fix timestamp issue [1.12.1-12] - Add support for ARM build [1.12.1-11] - Add OL9 support [1.12.1-10] - Updated kata-runtime version to work with more versions of kvm_utils kata-agent [1.12.1-9] - Updated to address CVE-2023-44487 and CVE-2023-39325 [1.12.1-8] - Remove build_date global variable in kata-image specfile [1.12.1-7] - Add support for ARM build [1.12.1-6] - Add OL9 support kata-image [1.12.1-9] - Updated to address CVE-2023-44487 and CVE-2023-39325 [1.12.1-8] - Remove build_date global variable in specfile [1.12.1-7] - Add support for ARM build [1.12.1-6] - Restore OL7 and bump release [1.12.1-5] - Add support for Oracle Linux 9 [1.12.1-4] - build for kata-agent-1.12.1-4 kata-ksm-throttler [1.12.1-9] - Updated to address CVE-2023-44487 and CVE-2023-39325 [1.12.1-8] - Bump release inline with other kata packages for fixing timestamp issue [1.12.1-7] - Add support for ARM build [1.12.1-6] - Bump releaase inline with others for reversion of removal of OL7. [1.12.1-5] - Add support for Oracle Linux 9 kata-proxy [1.12.1-9] - Updated to address CVE-2023-44487 and CVE-2023-39325 [1.12.1-8] - Bump release inline with other kata packages for fixing timestamp issue [1.12.1-7] - Add support for ARM build [1.12.1-6] - Revert OL7 removal [1.12.1-5] - Add support for Oracle Linux 9 kata-runtime [1.12.1-9] - Updated to address CVE-2023-44487 and CVE-2023-39325 [1.12.1-8] - Bump release inline with other kata packages for fixing timestamp issue [1.12.1-7] - Add support for ARM build [1.12.1-6] - Add OL9 support [1.12.1-5] - Updated qemu-kvm machine options to work with more versions of kvm_utils kata-shim [1.12.1-9] - Updated to address CVE-2023-44487 and CVE-2023-39325 [1.12.1-8] - Bump release inline with other kata packages for fixing timestamp issue [1.12.1-7] - Add support for ARM build [1.12.1-6] - Bump releaase inline with others for reversion of removal of OL7. [1.12.1-5] - Add support for Oracle Linux 9 kubernetes kubernetes-cni [1.0.1-3] - Resolve CVE-2023-44487 and CVE-2023-39325 kubernetes-cni-plugins [1.0.1-4] - Resolve CVE-2023-44487 and CVE-2023-39325 olcne [1.6.5-9] - Mark container-registry as updatable [1.6.5-9] - update metallb 0.12.1 to address CVE-2023-44487 and CVE-2023-39325 [1.6.5-8] - Update externalip-webhook 1.0.0-3 to address CVE-2023-44487, CVE-2023-39325 [1.6.5-7] - Update multus-cni 3.9.3 to address CVE-2023-44487 and CVE-2023-39325 [1.6.5-6] - Update rook-1.10.9 to address CVE-2023-44487, CVE-2023-39325 [1.6.5-5] - Update Istio, Grafana, Prometheus, and Kubernetes-dashboard to address CVE's - CVE-2023-44487 - CVE-2023-39325 [1.6.5-4] - Update kubernetes and components to address golang CVE-2023-44487, CVE-2023-39325 [1.6.5-3] - update configmap-registry to 1.28.0 to address CVE-2023-44487 and CVE-2023-39325 [1.6.5-2] - Update kubevirt 0.58.0 to address CVE-2023-44487 and CVE-2023-39325 [1.6.5-1] - Update calico image versions to address golang CVE-2023-44487, CVE-2023-39325 yq [4.34.1-3] - address CVE-2023-44487 and CVE-2023-3932A [4.34.1-2] - Add support for ARM build IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-44487 CVE-2023-39325 cpe:/a:oracle:linux:7::olcne16 Oracle Linux 7 [4.14.35-2047.532.3] - Revert 'mmc: core: Capture correct oemid-bits for eMMC cards' (Dominique Martinet) - media: dvb-usb-v2: af9035: fix missing unlock (Hans Verkuil) - perf/core: Fix potential NULL deref (Peter Zijlstra) [4.14.35-2047.532.2] - x86: change default to spec_store_bypass_disable=prctl spectre_v2_user=prctl (Andrea Arcangeli) [Orabug: 35905888] - LTS version: 4.14.328 (Saeed Mirzamohammadi) - Bluetooth: hci_event: Fix using memcmp when comparing keys (Luiz Augusto von Dentz) - Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name (Kees Cook) - Bluetooth: hci_sock: fix slab oob read in create_monitor_event (Edward AD) - gpio: vf610: set value before the direction to avoid a glitch (Haibo Chen) - s390/pci: fix iommu bitmap allocation (Niklas Schnelle) - perf: Disallow mis-matched inherited group reads (Saeed Mirzamohammadi) - USB: serial: option: add Fibocom to DELL custom modem FM101R-GL (Puliang Lu) - USB: serial: option: add entry for Sierra EM9191 with new firmware (Benoit Monin) - USB: serial: option: add Telit LE910C4-WWX 0x1035 composition (Fabio Porcedda) - ACPI: irq: Fix incorrect return value in acpi_register_gsi() (Sunil V L) - Revert 'pinctrl: avoid unsafe code pattern in find_pinctrl()' (Andy Shevchenko) - mmc: core: Capture correct oemid-bits for eMMC cards (Avri Altman) - sky2: Make sure there is at least one frag_addr available (Kees Cook) - wifi: cfg80211: avoid leaking stack data into trace (Benjamin Berg) - wifi: mac80211: allow transmitting EAPOL frames with tainted key (Wen Gong) - Bluetooth: hci_core: Fix build warnings (Luiz Augusto von Dentz) - Bluetooth: Avoid redundant authentication (Ying Hsu) - HID: holtek: fix slab-out-of-bounds Write in holtek_kbd_input_event (Ma Ke) - tracing: relax trace_event_eval_update() execution with cond_resched() (Clement Leger) - ata: libata-eh: Fix compilation warning in ata_eh_link_report() (Damien Le Moal) - gpio: timberdale: Fix potential deadlock on &tgpio->lock (Chengfeng Ye) - overlayfs: set ctime when setting mtime and atime (Jeff Layton) - i2c: mux: Avoid potential false error message in i2c_mux_add_adapter (Heiner Kallweit) - btrfs: initialize start_slot in btrfs_log_prealloc_extents (Josef Bacik) - ARM: dts: ti: omap: Fix noisy serial with overrun-throttle-ms for mapphone (Tony Lindgren) - i40e: prevent crash on probe if hw registers have invalid values (Michal Schmidt) - net: usb: smsc95xx: Fix an error code in smsc95xx_reset() (Dan Carpenter) - net: rfkill: gpio: prevent value glitch during probe (Josua Mayer) - net: ipv6: fix return value check in esp_remove_trailer (Ma Ke) - net: ipv4: fix return value check in esp_remove_trailer (Ma Ke) - xfrm: fix a data-race in xfrm_gen_index() (Saeed Mirzamohammadi) - netfilter: nft_payload: fix wrong mac header matching (Florian Westphal) - KVM: x86: Mask LVTPC when handling a PMI (Jim Mattson) - regmap: fix NULL deref on lookup (Johan Hovold) - nfc: nci: fix possible NULL pointer dereference in send_acknowledge() (Krzysztof Kozlowski) - Bluetooth: avoid memcmp() out of bounds warning (Arnd Bergmann) - Bluetooth: hci_event: Fix coding style (Luiz Augusto von Dentz) - Bluetooth: vhci: Fix race when opening vhci device (Arkadiusz Bokowy) - Bluetooth: Fix a refcnt underflow problem for hci_conn (Ziyang Xuan) - Bluetooth: Reject connection with the device which has same BD_ADDR (Lee, Chun-Yi) - Bluetooth: hci_event: Ignore NULL link key (Lee, Chun-Yi) - usb: hub: Guard against accesses to uninitialized BOS descriptors (Ricardo Canuelo) - x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs (Borislav Petkov (AMD)) - usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call (Krishna Kurapati) - usb: gadget: udc-xilinx: replace memcpy with memcpy_toio (Piyush Mehta) - pinctrl: avoid unsafe code pattern in find_pinctrl() (Dmitry Torokhov) - cgroup: Remove duplicates in cgroup v1 tasks file (Michal Koutny) - Input: xpad - add PXN V900 support (Matthias Berndt) - Input: powermate - fix use-after-free in powermate_config_complete (Javier Carrasco) - ceph: fix incorrect revoked caps assert in ceph_fill_file_size() (Xiubo Li) - mcb: remove is_added flag from mcb_device struct (Jorge Sanjuan Garcia) - iio: pressure: ms5611: ms5611_prom_is_valid false negative bug (Alexander Zangerl) - iio: pressure: bmp280: Fix NULL pointer exception (Phil Elwell) - usb: musb: Modify the 'HWVers' register address (Xingxing Luo) - usb: musb: Get the musb_qh poniter after musb_giveback (Xingxing Luo) - net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read (Javier Carrasco) - usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer (Wesley Cheng) - workqueue: Override implicit ordered attribute in workqueue_apply_unbound_cpumask() (Waiman Long) - nfc: nci: assert requested protocol is valid (Jeremy Cline) - ixgbe: fix crash with empty VF macvlan list (Dan Carpenter) - drm/vmwgfx: fix typo of sizeof argument (Konstantin Meskhidze) - ieee802154: ca8210: Fix a potential UAF in ca8210_probe (Dinghao Liu) - drm: etvnaviv: fix bad backport leading to warning (Martin Fuzzey) - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (Hans de Goede) - RDMA/cxgb4: Check skb value for failure to allocate (Artem Chernyshev) - LTS version: 4.14.327 (Saeed Mirzamohammadi) - parisc: Restore __ldcw_align for PA-RISC 2.0 processors (John David Anglin) - RDMA/mlx5: Fix NULL string error (Shay Drory) - RDMA/cma: Fix truncation compilation warning in make_cma_ports (Leon Romanovsky) - gpio: aspeed: fix the GPIO number passed to pinctrl_gpio_set_config() (Bartosz Golaszewski) - IB/mlx4: Fix the size of a buffer in add_port_entries() (Christophe JAILLET) - cpupower: add Makefile dependencies for install targets (Ivan Babrou) - sctp: update hb timer immediately after users change hb_interval (Xin Long) - sctp: update transport state when processing a dupcook packet (Xin Long) - tcp: fix delayed ACKs for MSS boundary condition (Neal Cardwell) - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Shigeru Yoshida) - ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data() (David Howells) - modpost: add missing else to the 'of' check (Mauricio Faria de Oliveira) - scsi: target: core: Fix deadlock due to recursive locking (Junxiao Bi) - regmap: rbtree: Fix wrong register marked as in-cache when creating new node (Richard Fitzgerald) - drivers/net: process the result of hdlc_open() and add call of hdlc_close() in uhdlc_close() (Alexandra Diupina) - ubi: Refuse attaching if mtd's erasesize is 0 (Zhihao Cheng) - wifi: mwifiex: Fix tlv_buf_left calculation (Gustavo A. R. Silva) - scsi: zfcp: Fix a double put in zfcp_port_enqueue() (Dinghao Liu) - media: dvb: symbol fixup for dvb_attach() - again (Greg Kroah-Hartman) - ata: libata: disallow dev-initiated LPM transitions to unsupported states (Niklas Cassel) - net/sched: sch_hfsc: Ensure inner classes have fsc curve (Budimir Markovic) [Orabug: 35810543] {CVE-2023-4623} - ext4: fix rec_len verify error (Shida Zhang) - vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF (George Kennedy) - fs: binfmt_elf_efpic: fix personality for ELF-FDPIC (Greg Ungerer) - ata: libata-sata: increase PMP SRST timeout to 10s (Matthias Schiffer) - ata: libata-core: Fix port and device removal (Damien Le Moal) - ata: libata-core: Fix ata_port_request_pm() locking (Damien Le Moal) - btrfs: properly report 0 avail for very full file systems (Josef Bacik) - i2c: i801: unregister tco_pdev in i801_probe() error path (Heiner Kallweit) - ata: libata-scsi: ignore reserved bits for REPORT SUPPORTED OPERATION CODES (Niklas Cassel) - nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() (Pan Bian) - serial: 8250_port: Check IRQ data before use (Andy Shevchenko) - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Mika Westerberg) - watchdog: iTCO_wdt: No need to stop the timer in probe (Mika Westerberg) - ata: libahci: clear pending interrupt status (Szuying Chen) - ata: ahci: Drop pointless VPRINTK() calls and convert the remaining ones (Hannes Reinecke) - fbdev/sh7760fb: Depend on FB=y (Thomas Zimmermann) - ata: libata-eh: do not clear ATA_PFLAG_EH_PENDING in ata_eh_reset() (Niklas Cassel) - ring-buffer: Avoid softlockup in ring_buffer_resize() (Zheng Yejian) - selftests/ftrace: Correctly enable event in instance-event.tc (Zheng Yejian) - parisc: irq: Make irq_stack_union static to avoid sparse warning (Helge Deller) - parisc: iosapic.c: Fix sparse warnings (Helge Deller) - parisc: sba: Fix compile warning wrt list of SBA devices (Helge Deller) - xtensa: boot/lib: fix function prototypes (Max Filippov) - xtensa: boot: don't add include-dirs (Randy Dunlap) - clk: tegra: fix error return case for recalc_rate (Timo Alho) - i2c: mux: demux-pinctrl: check the return value of devm_kstrdup() (Xiaoke Wang) - gpio: tb10x: Fix an error handling path in tb10x_gpio_probe() (Christophe JAILLET) - team: fix null-ptr-deref when team device type is changed (Ziyang Xuan) - powerpc/perf/hv-24x7: Update domain value check (Kajol Jain) - ipv4: fix null-deref in ipv4_link_failure (Kyle Zeng) - NFS/pNFS: Report EINVAL errors from connect() to the server (Trond Myklebust) [4.14.35-2047.532.1] - rds/ib: Preserve dest qp num in the connect request (Arumugam Kolappan) [Orabug: 35649849] - rds: Provision to allow all trace points at module load time (Arumugam Kolappan) [Orabug: 35355776] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-4623 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7::optional_latest cpe:/a:oracle:linux:7::developer_UEKR5 cpe:/a:oracle:linux:7::UEKR5 cpe:/a:oracle:linux:7:9:patch Oracle Linux 9 Oracle Linux 8 [5.15.0-201.135.6] - Revert ncsi: Propagate carrier gain/loss events to the NCSI controller (Johnathan Mantey) - netfilter: nf_tables: split async and sync catchall in two functions (Pablo Neira Ayuso) - netfilter: nf_tables: remove catchall element in GC sync path (Pablo Neira Ayuso) - scsi: mpt3sas: Fix loop logic (Ranjan Kumar) - Revert 'md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d' (Junxiao Bi) [Orabug: 36050011] - md: bypass block throttle for superblock update (Junxiao Bi) [Orabug: 36050011] - tracing: Have trace_event_file have ref counters (Steven Rostedt (Google)) [Orabug: 36059972] - Revert 'PCI: acpiphp: Reassign resources on bridge if necessary' (Dongli Zhang) [Orabug: 36039006] - Revert 'PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus' (Dongli Zhang) [Orabug: 36039006] - audit: Apply special optimizations (Hakon Bugge) [Orabug: 36038149] - audit: Vary struct audit_entry alignment (Hakon Bugge) [Orabug: 36038149] - Revert 'Revert 'printk: Consolidate console deferred printing'' (Hakon Bugge) [Orabug: 36038149] [5.15.0-201.135.5] - media: dvb-usb-v2: af9035: fix missing unlock (Hans Verkuil) - i2c: aspeed: Fix i2c bus hang in slave read (Jian Zhang) - i40e: Fix I40E_FLAG_VF_VLAN_PRUNING value (Ivan Vecera) - firmware/imx-dsp: Fix use_after_free in imx_dsp_setup_channels() (Hao Ge) - virtio-mmio: fix memory leak of vm_dev (Maximilian Heyne) - NFSv4.1: fixup use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Olga Kornievskaia) - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Pedro Tammela) - Revert 'kernel/sched: Modify initial boot task idle setup' (Greg Kroah-Hartman) - usb: cdns3: Modify the return value of cdns_set_active () to void when CONFIG_PM_SLEEP is disabled (Xiaolei Wang) - quota: Fix slow quotaoff (Jan Kara) - lib/test_meminit: fix off-by-one error in test_pages() (Greg Kroah-Hartman) - nvmet-tcp: Fix a possible UAF in queue intialization setup (Sagi Grimberg) [Orabug: 36028025] {CVE-2023-5178} [5.15.0-201.135.4] - uek-rpm: Enable PDS_CORE and PDS_VFIO drivers (Joao Martins) [Orabug: 35424097] - pds_core: use correct index to mask irq (Shannon Nelson) [Orabug: 35424097] - amd/pds_core: core: No need for Null pointer check before kfree (Bragatheswaran Manickavel) [Orabug: 35424097] - pds_core: add an error code check in pdsc_dl_info_get (Su Hui) [Orabug: 35424097] - pds_core: devlink health: use retained error fmsg API (Przemek Kitszel) [Orabug: 35424097] - pds_core: add attempts to fix broken PCI (Shannon Nelson) [Orabug: 35424097] - pds_core: implement pci reset handlers (Shannon Nelson) [Orabug: 35424097] - pds_core: keep viftypes table across reset (Shannon Nelson) [Orabug: 35424097] - pds_core: check health in devcmd wait (Shannon Nelson) [Orabug: 35424097] - vfio/pds: Use proper PF device access helper (Shixiong Ou) [Orabug: 35424097] - vfio/pds: Add missing PCI_IOV depends (Shixiong Ou) [Orabug: 35424097] - pds_core: pass opcode to devcmd_wait (Shannon Nelson) [Orabug: 35424097] - pds_core: check for work queue before use (Shannon Nelson) [Orabug: 35424097] - pds_core: no reset command for VF (Shannon Nelson) [Orabug: 35424097] - pds_core: no health reporter in VF (Shannon Nelson) [Orabug: 35424097] - pds_core: protect devlink callbacks from fw_down state (Shannon Nelson) [Orabug: 35424097] - vfio/pds: Send type for SUSPEND_STATUS command (Brett Creeley) [Orabug: 35424097] - Revert 'pds_core: Fix some kernel-doc comments' (Jakub Kicinski) [Orabug: 35424097] - pds_core: Fix some kernel-doc comments (Yang Li) [Orabug: 35424097] - pds_core: remove redundant pci_clear_master() (Yu Liao) [Orabug: 35424097] - vfio/pds: fix return value in pds_vfio_get_lm_file() (Yang Yingliang) [Orabug: 35424097] - pds_core: Fix function header descriptions (Brett Creeley) [Orabug: 35424097] - vfio/pds: Add Kconfig and documentation (Brett Creeley) [Orabug: 35424097] - vfio/pds: Add support for firmware recovery (Brett Creeley) [Orabug: 35424097] - vfio/pds: Add support for dirty page tracking (Brett Creeley) [Orabug: 35424097] - vfio/pds: Add VFIO live migration support (Brett Creeley) [Orabug: 35424097] - vfio/pds: register with the pds_core PF (Brett Creeley) [Orabug: 35424097] - pds_core: Require callers of register/unregister to pass PF drvdata (Brett Creeley) [Orabug: 35424097] - vfio/pds: Initial support for pds VFIO driver (Brett Creeley) [Orabug: 35424097] - vfio: Commonize combine_ranges for use in other VFIO drivers (Brett Creeley) [Orabug: 35424097] - pds_core: Fix documentation for pds_client_register (Brett Creeley) [Orabug: 35424097] - pds_core: Fix FW recovery detection (Brett Creeley) [Orabug: 35424097] - pds_core: fix mutex double unlock in error path (Shannon Nelson) [Orabug: 35424097] - pds_core: add AUXILIARY_BUS and NET_DEVLINK to Kconfig (Shannon Nelson) [Orabug: 35424097] - pds_core: remove CONFIG_DEBUG_FS from makefile (Shannon Nelson) [Orabug: 35424097] - pds_core: Kconfig and pds_core.rst (Shannon Nelson) [Orabug: 35424097] - pds_core: publish events to the clients (Shannon Nelson) [Orabug: 35424097] - pds_core: add the aux client API (Shannon Nelson) [Orabug: 35424097] - pds_core: devlink params for enabling VIF support (Shannon Nelson) [Orabug: 35424097] - pds_core: add auxiliary_bus devices (Shannon Nelson) [Orabug: 35424097] - pds_core: add initial VF device handling (Shannon Nelson) [Orabug: 35424097] - pds_core: set up the VIF definitions and defaults (Shannon Nelson) [Orabug: 35424097] - pds_core: add FW update feature to devlink (Shannon Nelson) [Orabug: 35424097] - pds_core: Add adminq processing and commands (Shannon Nelson) [Orabug: 35424097] - pds_core: set up device and adminq (Shannon Nelson) [Orabug: 35424097] - pds_core: add devlink health facilities (Shannon Nelson) [Orabug: 35424097] - pds_core: health timer and workqueue (Shannon Nelson) [Orabug: 35424097] - pds_core: add devcmd device interfaces (Shannon Nelson) [Orabug: 35424097] - pds_core: initial framework for pds_core PF driver (Shannon Nelson) [Orabug: 35424097] - vfio/mlx5: Use the new device life cycle helpers (Yi Liu) [Orabug: 35424097] - vfio/pci: Use the new device life cycle helpers (Yi Liu) [Orabug: 35424097] - vfio: Add helpers for unifying vfio_device life cycle (Kevin Tian) [Orabug: 35424097] - net/rds: Always cancel heartbeat worker thread during conn destroy (Sharath Srinivasan) [Orabug: 35739389] - x86: KVM: SVM: always update the x2avic msr interception (Maxim Levitsky) [Orabug: 35857365] {CVE-2023-5090} - net/rds: Use proper peer port number even when not connected (Greg Jumper) [Orabug: 35896266] - hugetlb: disable HVO in Xen (Jane Chu) [Orabug: 35904478] - hugetlb: check for hugetlb folio before vmemmap_restore (Mike Kravetz) [Orabug: 35904478] - hugetlb: batch TLB flushes when restoring vmemmap (Mike Kravetz) [Orabug: 35904478] - hugetlb: batch TLB flushes when freeing vmemmap (Joao Martins) [Orabug: 35904478] - hugetlb: batch PMD split for bulk vmemmap dedup (Joao Martins) [Orabug: 35904478] - hugetlb: batch freeing of vmemmap pages (Mike Kravetz) [Orabug: 35904478] - hugetlb: perform vmemmap restoration on a list of pages (Mike Kravetz) [Orabug: 35904478] - hugetlb: perform vmemmap optimization on a list of pages (Mike Kravetz) [Orabug: 35904478] - hugetlb: restructure pool allocations (Mike Kravetz) [Orabug: 35904478] - hugetlb: optimize update_and_free_pages_bulk to avoid lock cycles (Mike Kravetz) [Orabug: 35904478] - mm: hugetlb: skip initialization of gigantic tail struct pages if freed by HVO (Usama Arif) [Orabug: 35904478] - memblock: introduce MEMBLOCK_RSRV_NOINIT flag (Usama Arif) [Orabug: 35904478] - mm: pass nid to reserve_bootmem_region() (Yajun Deng) [Orabug: 35904478] - mm/page_alloc: invert logic for early page initialisation checks (Mike Rapoport (IBM)) [Orabug: 35904478] - memblock: add missing argument definition (Usama Arif) [Orabug: 35904478] - memblock: pass memblock_type to memblock_setclr_flag (Usama Arif) [Orabug: 35904478] - mm: hugetlb_vmemmap: use nid of the head page to reallocate it (Usama Arif) [Orabug: 35904478] - mm: hugetlb_vmemmap: allow alloc vmemmap pages fallback to other nodes (Yuan Can) [Orabug: 35904478] - mm: hugetlb_vmemmap: fix hugetlb page number decrease failed on movable nodes (Yuan Can) [Orabug: 35904478] - hugetlb: set hugetlb page flag before optimizing vmemmap (Mike Kravetz) [Orabug: 35904478] - hugetlb: do not clear hugetlb dtor until allocating vmemmap (Mike Kravetz) [Orabug: 35904478] - mm/vmemmap optimization: split hugetlb and devdax vmemmap optimization (Aneesh Kumar K.V) [Orabug: 35904478] - mm/vmemmap: improve vmemmap_can_optimize and allow architectures to override (Aneesh Kumar K.V) [Orabug: 35904478] - mm: hugetlb_vmemmap: fix a race between vmemmap pmd split (Muchun Song) [Orabug: 35904478] - mm: hugetlb_vmemmap: provide stronger vmemmap allocation guarantees (Pasha Tatashin) [Orabug: 35904478] - mm/hugetlb_vmemmap: rename ARCH_WANT_HUGETLB_PAGE_OPTIMIZE_VMEMMAP (Aneesh Kumar K.V) [Orabug: 35904478] - mm/vmemmap/devdax: fix kernel crash when probing devdax devices (Aneesh Kumar K.V) [Orabug: 35904478] - mm/hugetlb_vmemmap: fix hugetlb_vmemmap_sysctls.maxlen (Jane Chu) [Orabug: 35904478] - mm: move most of core MM initialization to mm/mm_init.c (Mike Rapoport (IBM)) [Orabug: 35904478] - memblock: Disable mirror feature if kernelcore is not specified (Ma Wupeng) [Orabug: 35904478] - mm: hugetlb_vmemmap: simplify hugetlb_vmemmap_init() a bit (Muchun Song) [Orabug: 35904478] - mm/hugetlb_vmemmap: remap head page to newly allocated page (Joao Martins) [Orabug: 35904478] - mm: hugetlb_vmemmap: remove redundant list_del() (Muchun Song) [Orabug: 35904478] - mm: hugetlb_vmemmap: include missing linux/moduleparam.h (Vasily Gorbik) [Orabug: 35904478] - hugetlb: freeze allocated pages before creating hugetlb pages (Mike Kravetz) [Orabug: 35904478] - mm: hugetlb_vmemmap: simplify reset_struct_pages() (Muchun Song) [Orabug: 35904478] - mm/hugetlb: make detecting shared pte more reliable (Miaohe Lin) [Orabug: 35904478] - mm/hugetlb: fix sysfs group leak in hugetlb_unregister_node() (Miaohe Lin) [Orabug: 35904478] - mm: hugetlb_vmemmap: add missing smp_wmb() before set_pte_at() (Miaohe Lin) [Orabug: 35904478] - mm/hugetlb: fix missing call to restore_reserve_on_error() (Miaohe Lin) [Orabug: 35904478] - mm/hugetlb: fix WARN_ON(!kobj) in sysfs_create_group() (Miaohe Lin) [Orabug: 35904478] - mm/hugetlb: fix incorrect update of max_huge_pages (Miaohe Lin) [Orabug: 35904478] - mm: hugetlb_vmemmap: use PTRS_PER_PTE instead of PMD_SIZE / PAGE_SIZE (Muchun Song) [Orabug: 35904478] - mm: hugetlb_vmemmap: move code comments to vmemmap_dedup.rst (Muchun Song) [Orabug: 35904478] - mm: hugetlb_vmemmap: improve hugetlb_vmemmap code readability (Muchun Song) [Orabug: 35904478] - mm: hugetlb_vmemmap: replace early_param() with core_param() (Muchun Song) [Orabug: 35904478] - mm: hugetlb_vmemmap: move vmemmap code related to HugeTLB to hugetlb_vmemmap.c (Muchun Song) [Orabug: 35904478] - mm: hugetlb_vmemmap: introduce the name HVO (Muchun Song) [Orabug: 35904478] - mm: hugetlb_vmemmap: optimize vmemmap_optimize_mode handling (Muchun Song) [Orabug: 35904478] - mm: hugetlb_vmemmap: delete hugetlb_optimize_vmemmap_enabled() (Muchun Song) [Orabug: 35904478] - mm: memory_hotplug: make hugetlb_optimize_vmemmap compatible with memmap_on_memory (Muchun Song) [Orabug: 35904478] - mm: memory_hotplug: enumerate all supported section flags (Muchun Song) [Orabug: 35904478] - mm: hugetlb_vmemmap: fix CONFIG_HUGETLB_PAGE_FREE_VMEMMAP_DEFAULT_ON (Muchun Song) [Orabug: 35904478] - mm: hugetlb_vmemmap: add hugetlb_optimize_vmemmap sysctl (Muchun Song) [Orabug: 35904478] - mm: hugetlb_vmemmap: use kstrtobool for hugetlb_vmemmap param parsing (Muchun Song) [Orabug: 35904478] - mm: memory_hotplug: override memmap_on_memory when hugetlb_free_vmemmap=on (Muchun Song) [Orabug: 35904478] - mm: hugetlb_vmemmap: disable hugetlb_optimize_vmemmap when struct page crosses page boundaries (Muchun Song) [Orabug: 35904478] - mm/hugetlb_vmemmap: move comment block to Documentation/vm (Joao Martins) [Orabug: 35904478] - uek-rpm/ol8[9]: config switch update to keep default vmemmap optimization behavior (Jane Chu) [Orabug: 35904478] - mm: hugetlb_vmemmap: cleanup CONFIG_HUGETLB_PAGE_FREE_VMEMMAP* (Muchun Song) [Orabug: 35904478] - mm: hugetlb_vmemmap: cleanup hugetlb_free_vmemmap_enabled* (Muchun Song) [Orabug: 35904478] - mm: hugetlb_vmemmap: cleanup hugetlb_vmemmap related functions (Muchun Song) [Orabug: 35904478] - arm64: mm: hugetlb: enable HUGETLB_PAGE_FREE_VMEMMAP for arm64 (Muchun Song) [Orabug: 35904478] - mm: hugetlb_vmemmap: introduce ARCH_WANT_HUGETLB_PAGE_FREE_VMEMMAP (Muchun Song) [Orabug: 35904478] - Consider inflight IO in io accounting for high latency devices (Gulam Mohamed) [Orabug: 35922334] - EDAC/amd64: Add support for AMD family 1Ah models 00h-1Fh and 40h-4Fh (Avadhut Naik) [Orabug: 35925125] - hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models (Avadhut Naik) [Orabug: 35925125] - x86/amd_nb: Add PCI IDs for AMD Family 1Ah-based models (Avadhut Naik) [Orabug: 35925125] - EDAC/amd64: Add get_err_info() to pvt->ops (Muralidhara M K) [Orabug: 35925125] - EDAC/amd64: Split dump_misc_regs() into dct/umc functions (Muralidhara M K) [Orabug: 35925125] - EDAC/amd64: Split init_csrows() into dct/umc functions (Muralidhara M K) [Orabug: 35925125] - EDAC/amd64: Split determine_edac_cap() into dct/umc functions (Muralidhara M K) [Orabug: 35925125] - EDAC/amd64: Rename f17h_determine_edac_ctl_cap() (Yazen Ghannam) [Orabug: 35925125] - EDAC/amd64: Split setup_mci_misc_attrs() into dct/umc functions (Muralidhara M K) [Orabug: 35925125] - EDAC/amd64: Split ecc_enabled() into dct/umc functions (Muralidhara M K) [Orabug: 35925125] - EDAC/amd64: Split read_mc_regs() into dct/umc functions (Muralidhara M K) [Orabug: 35925125] - EDAC/amd64: Split determine_memory_type() into dct/umc functions (Muralidhara M K) [Orabug: 35925125] - EDAC/amd64: Split read_base_mask() into dct/umc functions (Muralidhara M K) [Orabug: 35925125] - EDAC/amd64: Split prep_chip_selects() into dct/umc functions (Muralidhara M K) [Orabug: 35925125] - EDAC/amd64: Rework hw_info_{get,put} (Yazen Ghannam) [Orabug: 35925125] - EDAC/amd64: Merge struct amd64_family_type into struct amd64_pvt (Muralidhara M K) [Orabug: 35925125] - EDAC/amd64: Do not discover ECC symbol size for Family 17h and later (Yazen Ghannam) [Orabug: 35925125] - EDAC/amd64: Drop dbam_to_cs() for Family 17h and later (Yazen Ghannam) [Orabug: 35925125] - EDAC/amd64: Split get_csrow_nr_pages() into dct/umc functions (Yazen Ghannam) [Orabug: 35925125] - EDAC/amd64: Rename debug_display_dimm_sizes() (Yazen Ghannam) [Orabug: 35925125] - EDAC/amd64: Shut up an -Werror,-Wsometimes-uninitialized clang false positive (Yazen Ghannam) [Orabug: 35925125] - EDAC/amd64: Remove early_channel_count() (Yazen Ghannam) [Orabug: 35925125] - EDAC/amd64: Remove PCI Function 0 (Yazen Ghannam) [Orabug: 35925125] - EDAC/amd64: Remove PCI Function 6 (Yazen Ghannam) [Orabug: 35925125] - EDAC/amd64: Remove scrub rate control for Family 17h and later (Yazen Ghannam) [Orabug: 35925125] - EDAC/amd64: Don't set up EDAC PCI control on Family 17h+ (Yazen Ghannam) [Orabug: 35925125] - x86/amd_nb: Unexport amd_cache_northbridges() (Muralidhara M K) [Orabug: 35925125] - EDAC/amd64: Add new register offset support and related changes (Yazen Ghannam) [Orabug: 35925125] - EDAC/amd64: Set memory type per DIMM (Yazen Ghannam) [Orabug: 35925125] - EDAC/amd64: Add support for family 19h, models 50h-5fh (Marc Bevand) [Orabug: 35925125] - EDAC/amd64: Add context struct (Yazen Ghannam) [Orabug: 35925125] - EDAC/amd64: Allow for DF Indirect Broadcast reads (Yazen Ghannam) [Orabug: 35925125] - x86/amd_nb, EDAC/amd64: Move DF Indirect Read to AMD64 EDAC (Yazen Ghannam) [Orabug: 35925125] - x86/microcode/AMD: Rip out static buffers (Borislav Petkov (AMD)) [Orabug: 35925125] - x86/microcode/amd: Remove unneeded pointer arithmetic (Nathan Fontenot) [Orabug: 35925125] - x86/microcode/AMD: Get rid of __find_equiv_id() (Borislav Petkov (AMD)) [Orabug: 35925125] - x86/microcode/AMD: Rename a couple of functions (Borislav Petkov) [Orabug: 35925125] - crypto: ccp - Add support for PCI device 0x156E (John Allen) [Orabug: 35925125] - crypto: ccp - Add support for PCI device 0x17E0 (Mario Limonciello) [Orabug: 35925125] - sbsa_gwdt: Calculate timeout with 64-bit math (Darren Hart) [Orabug: 35968810] - uek-rpm: Enable CONFIG_USBIP_VHCI_HCD and CONFIG_USBIP_HOST in UEK7 (Harshit Mogalapalli) [Orabug: 35994192] - vfio/type1: Parameterize pgsize bitmap (Joao Martins) [Orabug: 36002436] - vfio/type1: Parallel dirty scans with padata (Joao Martins) [Orabug: 36002436] - iommu/iova_bitmap: Add remote mm_struct for iova_bitmap (Joao Martins) [Orabug: 36002436] - vfio/type1: Advertise IOMMU dirty tracking support (Joao Martins) [Orabug: 36002436] - vfio/type1: Avoid perpectual dirty when iommu supports (Joao Martins) [Orabug: 36002436] - vfio/type1: Report dirty info from IOMMU (Joao Martins) [Orabug: 36002436] - vfio/type1: Add hardware dirty tracking start/stop support (Joao Martins) [Orabug: 36002436] - vfio/type1: Move start/stop dirty tracking to helpers (Joao Martins) [Orabug: 36002436] - iommu/amd: Improve dirty read io-pgtable walker (Joao Martins) [Orabug: 36002436] - iommu/amd: Access/Dirty bit support in IOPTEs (Joao Martins) [Orabug: 36002436] - iommu: Add iommu_domain ops for dirty tracking (Joao Martins) [Orabug: 36002436] - vfio: Move iova_bitmap into iommufd (Joao Martins) [Orabug: 36002436] [5.15.0-201.135.3] - Revert 'printk: Consolidate console deferred printing' (Sherry Yang) [Orabug: 35955850] [5.15.0-201.135.2] - LTS Version: v5.15.135 (Jack Vogel) - xen/events: replace evtchn_rwlock with RCU (Juergen Gross) - parisc: Restore __ldcw_align for PA-RISC 2.0 processors (John David Anglin) - ksmbd: fix uaf in smb20_oplock_break_ack (luosili) - RDMA/mlx5: Fix NULL string error (Shay Drory) - RDMA/siw: Fix connection failure handling (Bernard Metzler) - RDMA/uverbs: Fix typo of sizeof argument (Konstantin Meskhidze) - RDMA/cma: Fix truncation compilation warning in make_cma_ports (Leon Romanovsky) - RDMA/cma: Initialize ib_sa_multicast structure to 0 when join (Mark Zhang) - gpio: pxa: disable pinctrl calls for MMP_GPIO (Duje Mihanovic) - gpio: aspeed: fix the GPIO number passed to pinctrl_gpio_set_config() (Bartosz Golaszewski) - IB/mlx4: Fix the size of a buffer in add_port_entries() (Christophe JAILLET) - of: dynamic: Fix potential memory leak in of_changeset_action() (Dan Carpenter) - RDMA/core: Require admin capabilities to set system parameters (Leon Romanovsky) - dm zoned: free dmz->ddev array in dmz_put_zoned_devices (Fedor Pchelkin) - HID: intel-ish-hid: ipc: Disable and reenable ACPI GPE bit (Srinivas Pandruvada) - HID: sony: remove duplicate NULL check before calling usb_free_urb() (Jiri Kosina) - sctp: update hb timer immediately after users change hb_interval (Xin Long) - sctp: update transport state when processing a dupcook packet (Xin Long) - tcp: fix delayed ACKs for MSS boundary condition (Neal Cardwell) - tcp: fix quick-ack counting to count actual ACKs of new data (Neal Cardwell) - tipc: fix a potential deadlock on &tx->lock (Chengfeng Ye) - net: stmmac: dwmac-stm32: fix resume on STM32 MCU (Ben Wolsieffer) - ipv4: Set offload_failed flag in fibmatch results (Benjamin Poirier) - netfilter: nf_tables: nft_set_rbtree: fix spurious insertion failure (Florian Westphal) - netfilter: handle the connecting collision properly in nf_conntrack_proto_sctp (Xin Long) - ibmveth: Remove condition to recompute TCP header checksum. (David Wilder) - net: ethernet: ti: am65-cpsw: Fix error code in am65_cpsw_nuss_init_tx_chns() (Dan Carpenter) - net: nfc: llcp: Add lock when modifying device list (Jeremy Cline) - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Shigeru Yoshida) - net: dsa: mv88e6xxx: Avoid EEPROM timeout when EEPROM is absent (Fabio Estevam) - ptp: ocp: Fix error handling in ptp_ocp_device_init (Dinghao Liu) - ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data() (David Howells) - net: fix possible store tearing in neigh_periodic_work() (Eric Dumazet) - modpost: add missing else to the 'of' check (Mauricio Faria de Oliveira) - bpf, sockmap: Reject sk_msg egress redirects to non-TCP sockets (Jakub Sitnicki) - NFSv4: Fix a nfs4_state_manager() race (Trond Myklebust) - ima: rework CONFIG_IMA dependency block (Arnd Bergmann) - ima: Finish deprecation of IMA_TRUSTED_KEYRING Kconfig (Oleksandr Tymoshenko) - regmap: rbtree: Fix wrong register marked as in-cache when creating new node (Richard Fitzgerald) - wifi: mt76: mt76x02: fix MT76x0 external LNA gain handling (Felix Fietkau) - drivers/net: process the result of hdlc_open() and add call of hdlc_close() in uhdlc_close() (Alexandra Diupina) - bpf: Fix tr dereferencing (Leon Hwang) - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Pin-yen Lin) - wifi: iwlwifi: mvm: Fix a memory corruption issue (Christophe JAILLET) - iwlwifi: avoid void pointer arithmetic (Johannes Berg) - wifi: iwlwifi: dbg_ini: fix structure packing (Arnd Bergmann) - ubi: Refuse attaching if mtd's erasesize is 0 (Zhihao Cheng) - HID: sony: Fix a potential memory leak in sony_probe() (Christophe JAILLET) - arm64: Add Cortex-A520 CPU part definition (Rob Herring) - drm/amd: Fix detection of _PR3 on the PCIe root port (Mario Limonciello) - net: prevent rewrite of msg_name in sock_sendmsg() (Jordan Rife) - net: replace calls to sock->ops->connect() with kernel_connect() (Jordan Rife) - wifi: mwifiex: Fix tlv_buf_left calculation (Gustavo A. R. Silva) - qed/red_ll2: Fix undefined behavior bug in struct qed_ll2_info (Gustavo A. R. Silva) - vringh: don't use vringh_kiov_advance() in vringh_iov_xfer() (Stefano Garzarella) - scsi: zfcp: Fix a double put in zfcp_port_enqueue() (Dinghao Liu) - Revert 'clk: imx: pll14xx: dynamically configure PLL for 393216000/361267200Hz' (Greg Kroah-Hartman) - block: fix use-after-free of q->q_usage_counter (Ming Lei) - rbd: take header_rwsem in rbd_dev_refresh() only when updating (Ilya Dryomov) - rbd: decouple parent info read-in from updating rbd_dev (Ilya Dryomov) - rbd: decouple header read-in from updating rbd_dev->header (Ilya Dryomov) - rbd: move rbd_dev_refresh() definition (Ilya Dryomov) - iommu/arm-smmu-v3: Avoid constructing invalid range commands (Robin Murphy) - iommu/arm-smmu-v3: Set TTL invalidation hint better (Robin Murphy) - arm64: Avoid repeated AA64MMFR1_EL1 register read on pagefault path (Gabriel Krisman Bertazi) - ring-buffer: Fix bytes info in per_cpu buffer stats (Zheng Yejian) - ring-buffer: remove obsolete comment for free_buffer_page() (Vlastimil Babka) - NFSv4: Fix a state manager thread deadlock regression (Trond Myklebust) - NFS: rename nfs_client_kset to nfs_kset (Benjamin Coddington) - NFS: Cleanup unused rpc_clnt variable (Benjamin Coddington) - ASoC: tegra: Fix redundant PLLA and PLLA_OUT0 updates (Sameer Pujar) - ASoC: soc-utils: Export snd_soc_dai_is_dummy() symbol (Sameer Pujar) - spi: zynqmp-gqspi: fix clock imbalance on probe failure (Johan Hovold) - spi: zynqmp-gqspi: Convert to platform remove callback returning void (Uwe Kleine-Konig) - LTS Version: v5.15.134 (Jack Vogel) - netfilter: nf_tables: fix kdoc warnings after gc rework (Florian Westphal) - drm/meson: fix memory leak on ->hpd_notify callback (Jani Nikula) - fs: binfmt_elf_efpic: fix personality for ELF-FDPIC (Greg Ungerer) - ata: libata-sata: increase PMP SRST timeout to 10s (Matthias Schiffer) - ata: libata-core: Do not register PM operations for SAS ports (Damien Le Moal) - ata: libata-core: Fix port and device removal (Damien Le Moal) - ata: libata-core: Fix ata_port_request_pm() locking (Damien Le Moal) - net: thunderbolt: Fix TCPv6 GSO checksum calculation (Mika Westerberg) - bpf: Fix BTF_ID symbol generation collision in tools/ (Nick Desaulniers) - bpf: Fix BTF_ID symbol generation collision (Jiri Olsa) - btrfs: properly report 0 avail for very full file systems (Josef Bacik) - proc: nommu: /proc/<pid>/maps: release mmap read lock (Ben Wolsieffer) - Revert 'SUNRPC dont update timeout value on connection reset' (Trond Myklebust) - io_uring/fs: remove sqe->rw_flags checking from LINKAT (Jens Axboe) - sched/rt: Fix live lock between select_fallback_rq() and RT push (Joel Fernandes (Google)) - kernel/sched: Modify initial boot task idle setup (Liam R. Howlett) - i2c: i801: unregister tco_pdev in i801_probe() error path (Heiner Kallweit) - ata: libata-scsi: ignore reserved bits for REPORT SUPPORTED OPERATION CODES (Niklas Cassel) - ALSA: hda: Disable power save for solving pop issue on Lenovo ThinkCentre M70q (Kailang Yang) - netfilter: nf_tables: disallow rule removal from chain binding (Pablo Neira Ayuso) [Orabug: 35865117] {CVE-2023-5197} - nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() (Pan Bian) - serial: 8250_port: Check IRQ data before use (Andy Shevchenko) - Revert 'tty: n_gsm: fix UAF in gsm_cleanup_mux' (Daniel Starke) - misc: rtsx: Fix some platforms can not boot and move the l1ss judgment to probe (Ricky WU) - x86/srso: Add SRSO mitigation for Hygon processors (Pu Wen) - iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range (Nicolin Chen) - Smack:- Use overlay inode label in smack_inode_copy_up() (Vishal Goel) - smack: Retrieve transmuting information in smack_inode_getsecurity() (Roberto Sassu) - smack: Record transmuting in smk_transmuted (Roberto Sassu) - nvme-pci: always return an ERR_PTR from nvme_pci_alloc_dev (Irvin Cote) - i40e: fix potential NULL pointer dereferencing of pf->vf i40e_sync_vsi_filters() (Andrii Staikov) - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Mika Westerberg) - watchdog: iTCO_wdt: No need to stop the timer in probe (Mika Westerberg) - nvme-pci: do not set the NUMA node of device if it has none (Pratyush Yadav) - nvme-pci: factor out a nvme_pci_alloc_dev helper (Christoph Hellwig) - nvme-pci: factor the iod mempool creation into a helper (Christoph Hellwig) - cgroup: Fix suspicious rcu_dereference_check() usage warning (Chengming Zhou) - sched/cpuacct: Optimize away RCU read lock (Chengming Zhou) - perf build: Define YYNOMEM as YYNOABORT for bison < 3.81 (Arnaldo Carvalho de Melo) - fbdev/sh7760fb: Depend on FB=y (Thomas Zimmermann) - ncsi: Propagate carrier gain/loss events to the NCSI controller (Johnathan Mantey) - powerpc/watchpoints: Annotate atomic context in more places (Benjamin Gray) - powerpc/watchpoint: Disable pagefaults when getting user instruction (Benjamin Gray) - powerpc/watchpoints: Disable preemption in thread_change_pc() (Benjamin Gray) - media: vb2: frame_vector.c: replace WARN_ONCE with a comment (Hans Verkuil) - ASoC: imx-rpmsg: Set ignore_pmdown_time for dai_link (Chancel Liu) - bpf: Clarify error expectations from bpf_clone_redirect (Stanislav Fomichev) - ASoC: fsl: imx-pcm-rpmsg: Add SNDRV_PCM_INFO_BATCH flag (Shengjiu Wang) - spi: stm32: add a delay before SPI disable (Valentin Caron) - spi: nxp-fspi: reset the FLSHxCR1 registers (Han Xu) - ata: libata-eh: do not clear ATA_PFLAG_EH_PENDING in ata_eh_reset() (Niklas Cassel) - smb3: correct places where ENOTSUPP is used instead of preferred EOPNOTSUPP (Steve French) - scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command (Michal Grzedzicki) - scsi: pm80xx: Use phy-specific SAS address when sending PHY_START command (Michal Grzedzicki) - drm/amdgpu: Handle null atom context in VBIOS info ioctl (David Francis) - drm/amd/display: Don't check registers, if using AUX BL control (Swapnil Patel) - platform/mellanox: mlxbf-bootctl: add NET dependency into Kconfig (David Thompson) - ring-buffer: Do not attempt to read past 'commit' (Steven Rostedt (Google)) - selftests: fix dependency checker script (Ricardo B. Marliere) - btrfs: improve error message after failure to add delayed dir index item (Filipe Manana) - ring-buffer: Avoid softlockup in ring_buffer_resize() (Zheng Yejian) - selftests/ftrace: Correctly enable event in instance-event.tc (Zheng Yejian) - scsi: ufs: core: Move __ufshcd_send_uic_cmd() outside host_lock (Kiwoong Kim) - scsi: qedf: Add synchronization between I/O completions and abort (Javed Hasan) - parisc: irq: Make irq_stack_union static to avoid sparse warning (Helge Deller) - parisc: drivers: Fix sparse warning (Helge Deller) - parisc: iosapic.c: Fix sparse warnings (Helge Deller) - parisc: sba: Fix compile warning wrt list of SBA devices (Helge Deller) - spi: sun6i: fix race between DMA RX transfer completion and RX FIFO drain (Tobias Schramm) - spi: sun6i: reduce DMA RX transfer width to single byte (Tobias Schramm) - dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock (Sergey Senozhatsky) - i2c: npcm7xx: Fix callback completion ordering (William A. Kennington III) - gpio: pmic-eic-sprd: Add can_sleep flag for PMIC EIC chip (Wenhua Lin) - soc: imx8m: Enable OCOTP clock for imx8mm before reading registers (Nathan Rossi) - xtensa: boot/lib: fix function prototypes (Max Filippov) - xtensa: boot: don't add include-dirs (Randy Dunlap) - xtensa: iss/network: make functions static (Randy Dunlap) - xtensa: add default definition for XCHAL_HAVE_DIV32 (Max Filippov) - firmware: imx-dsp: Fix an error handling path in imx_dsp_setup_channels() (Christophe JAILLET) - power: supply: ucs1002: fix error code in ucs1002_get_property() (Dan Carpenter) - bus: ti-sysc: Fix SYSC_QUIRK_SWSUP_SIDLE_ACT handling for uart wake-up (Tony Lindgren) - ARM: dts: ti: omap: motorola-mapphone: Fix abe_clkctrl warning on boot (Tony Lindgren) - ARM: dts: ti: omap: Fix bandgap thermal cells addressing for omap3/4 (Tony Lindgren) - ARM: dts: omap: correct indentation (Krzysztof Kozlowski) - treewide: Replace GPLv2 boilerplate/reference with SPDX - gpl-2.0_56.RULE (part 1) (Thomas Gleixner) - clk: tegra: fix error return case for recalc_rate (Timo Alho) - bus: ti-sysc: Fix missing AM35xx SoC matching (Adam Ford) - bus: ti-sysc: Use fsleep() instead of usleep_range() in sysc_reset() (Julien Panis) - drm/bridge: ti-sn65dsi83: Do not generate HFP/HBP/HSA and EOT packet (Marek Vasut) - MIPS: Alchemy: only build mmc support helpers if au1xmmc is enabled (Christoph Hellwig) - btrfs: reset destination buffer when read_extent_buffer() gets invalid range (Qu Wenruo) - ata: ahci: Add Elkhart Lake AHCI controller (Werner Fischer) - ata: ahci: Rename board_ahci_mobile (Mario Limonciello) - ata: ahci: Add support for AMD A85 FCH (Hudson D4) (Paul Menzel) - ata: libata: Rename link flag ATA_LFLAG_NO_DB_DELAY (Paul Menzel) - netfilter: nft_exthdr: Fix non-linear header modification (Xiao Liang) - netfilter: exthdr: add support for tcp option removal (Florian Westphal) - Input: i8042 - add quirk for TUXEDO Gemini 17 Gen1/Clevo PD70PN (Werner Sembach) - Input: i8042 - rename i8042-x86ia64io.h to i8042-acpipnpio.h (Huacai Chen) - xfs: fix xfs_inodegc_stop racing with mod_delayed_work (Darrick J. Wong) - xfs: disable reaping in fscounters scrub (Darrick J. Wong) - xfs: check that per-cpu inodegc workers actually run on that cpu (Darrick J. Wong) - xfs: explicitly specify cpu when forcing inodegc delayed work to run immediately (Darrick J. Wong) - xfs: introduce xfs_inodegc_push() (Dave Chinner) - xfs: bound maximum wait time for inodegc work (Dave Chinner) - i2c: mux: gpio: Add missing fwnode_handle_put() (Liang He) - i2c: mux: gpio: Replace custom acpi_get_local_address() (Andy Shevchenko) - i2c: mux: demux-pinctrl: check the return value of devm_kstrdup() (Xiaoke Wang) - gpio: tb10x: Fix an error handling path in tb10x_gpio_probe() (Christophe JAILLET) - Fix up backport of 136191703038 ('interconnect: Teach lockdep about icc_bw_lock order') (Sasha Levin) - igc: Expose tx-usecs coalesce setting to user (Muhammad Husaini Zulkifli) - bnxt_en: Flush XDP for bnxt_poll_nitroa0()'s NAPI (Sebastian Andrzej Siewior) - net: ena: Flush XDP packets on error. (Sebastian Andrzej Siewior) - locking/seqlock: Do the lockdep annotation before locking in do_write_seqcount_begin_nested() (Sebastian Andrzej Siewior) - netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP (Jozsef Kadlecsik) [Orabug: 35865151] {CVE-2023-42756} - netfilter: nf_tables: disable toggling dormant table state more than once (Florian Westphal) - team: fix null-ptr-deref when team device type is changed (Ziyang Xuan) - net: bridge: use DEV_STATS_INC() (Eric Dumazet) - net: hns3: add 5ms delay before clear firmware reset irq source (Jie Wang) - net: hns3: fix fail to delete tc flower rules during reset issue (Jijie Shao) - net: hns3: only enable unicast promisc when mac table full (Jian Shen) - net: hns3: fix GRE checksum offload issue (Jie Wang) - x86/srso: Fix SBPB enablement for spec_rstack_overflow=off (Josh Poimboeuf) - x86/srso: Fix srso_show_state() side effect (Josh Poimboeuf) - platform/x86: intel_scu_ipc: Fail IPC send if still busy (Stephen Boyd) - platform/x86: intel_scu_ipc: Don't override scu in intel_scu_ipc_dev_simple_command() (Stephen Boyd) - platform/x86: intel_scu_ipc: Check status upon timeout in ipc_wait_for_interrupt() (Stephen Boyd) - platform/x86: intel_scu_ipc: Check status after timeout in busy_loop() (Stephen Boyd) - dccp: fix dccp_v4_err()/dccp_v6_err() again (Eric Dumazet) - powerpc/perf/hv-24x7: Update domain value check (Kajol Jain) - ipv4: fix null-deref in ipv4_link_failure (Kyle Zeng) - igc: Fix infinite initialization loop with early XDP redirect (Vinicius Costa Gomes) - ionic: fix 16bit math issue when PAGE_SIZE >= 64KB (David Christensen) - i40e: Fix VF VLAN offloading when port VLAN is configured (Ivan Vecera) - i40e: Add VF VLAN pruning (Mateusz Palczewski) - iavf: do not process adminq tasks when __IAVF_IN_REMOVE_TASK is set (Radoslaw Tyl) - ASoC: imx-audmix: Fix return error with devm_clk_get() (Shengjiu Wang) - net/core: Fix ETH_P_1588 flow dissector (Sasha Neftin) - selftests: tls: swap the TX and RX sockets in some tests (Sabrina Dubroca) - bpf: Avoid deadlock when using queue and stack maps from NMI (Toke Hoiland-Jorgensen) - netfilter: nf_tables: disallow element removal on anonymous sets (Pablo Neira Ayuso) - ASoC: meson: spdifin: start hw on dai probe (Jerome Brunet) - netfilter: nf_tables: fix memleak when more than 255 elements expired (Florian Westphal) - netfilter: nft_set_hash: try later when GC hits EAGAIN on iteration (Pablo Neira Ayuso) - netfilter: nft_set_pipapo: stop GC iteration if GC transaction allocation fails (Pablo Neira Ayuso) - netfilter: nft_set_pipapo: call nft_trans_gc_queue_sync() in catchall GC (Pablo Neira Ayuso) - netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention (Pablo Neira Ayuso) - netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction (Pablo Neira Ayuso) [Orabug: 35814389] {CVE-2023-4244} - netfilter: nf_tables: defer gc run if previous batch is still pending (Florian Westphal) - netfilter: nf_tables: use correct lock to protect gc_list (Pablo Neira Ayuso) - netfilter: nf_tables: GC transaction race with abort path (Pablo Neira Ayuso) - netfilter: nf_tables: GC transaction race with netns dismantle (Pablo Neira Ayuso) - netfilter: nf_tables: fix GC transaction races with netns and netlink event exit path (Pablo Neira Ayuso) - netfilter: nf_tables: don't fail inserts if duplicate has expired (Florian Westphal) - netfilter: nf_tables: remove busy mark and gc batch API (Pablo Neira Ayuso) - netfilter: nft_set_hash: mark set element as dead when deleting from packet path (Pablo Neira Ayuso) - netfilter: nf_tables: adapt set backend to use GC transaction API (Pablo Neira Ayuso) [Orabug: 35814389] {CVE-2023-4244} - netfilter: nf_tables: GC transaction API to avoid race with control plane (Pablo Neira Ayuso) - netfilter: nf_tables: don't skip expired elements during walk (Florian Westphal) - tracing: Have event inject files inc the trace array ref count (Steven Rostedt (Google)) - ext4: do not let fstrim block system suspend (Jan Kara) - ext4: move setting of trimmed bit into ext4_try_to_trim_range() (Jan Kara) - ext4: replace the traditional ternary conditional operator with with max()/min() (Kemeng Shi) - ext4: change s_last_trim_minblks type to unsigned long (Lukas Czerner) - ext4: scope ret locally in ext4_try_to_trim_range() (Lukas Bulwahn) - ata: libahci: clear pending interrupt status (Szuying Chen) - ata: ahci: Drop pointless VPRINTK() calls and convert the remaining ones (Hannes Reinecke) - tracing: Increase trace array ref count on enable and filter files (Steven Rostedt (Google)) - tracing: Make trace_marker{,_raw} stream-like (John Keeping) - NFSv4.1: fix pnfs MDS=DS session trunking (Olga Kornievskaia) - NFSv4.1: use EXCHGID4_FLAG_USE_PNFS_DS for DS server (Olga Kornievskaia) - SUNRPC: Mark the cred for revalidation if the server rejects it (Trond Myklebust) - NFS/pNFS: Report EINVAL errors from connect() to the server (Trond Myklebust) - NFS: More fixes for nfs_direct_write_reschedule_io() (Trond Myklebust) - NFS: Use the correct commit info in nfs_join_page_group() (Trond Myklebust) - LTS version: v5.15.133 (Jack Vogel) - interconnect: Teach lockdep about icc_bw_lock order (Rob Clark) - drm/amd/display: enable cursor degamma for DCN3+ DRM legacy gamma (Melissa Wen) - drm/amdgpu: fix amdgpu_cs_p1_user_fence (Christian Konig) - drm/amd/display: fix the white screen issue when >= 64GB DRAM (Yifan Zhang) - ext4: fix rec_len verify error (Shida Zhang) - scsi: pm8001: Setup IRQs on resume (Damien Le Moal) - ata: libata: disallow dev-initiated LPM transitions to unsupported states (Niklas Cassel) - i2c: aspeed: Reset the i2c controller when timeout occurs (Tommy Huang) - tracefs: Add missing lockdown check to tracefs_create_dir() (Steven Rostedt (Google)) - nfsd: fix change_info in NFSv4 RENAME replies (Jeff Layton) - tracing: Have option files inc the trace array ref count (Steven Rostedt (Google)) - tracing: Have current_trace inc the trace array ref count (Steven Rostedt (Google)) - tracing: Have tracing_max_latency inc the trace array ref count (Steven Rostedt (Google)) - btrfs: release path before inode lookup during the ino lookup ioctl (Filipe Manana) - btrfs: fix lockdep splat and potential deadlock after failure running delayed items (Filipe Manana) - ovl: fix incorrect fdput() on aio completion (Amir Goldstein) - ovl: fix failed copyup of fileattr on a symlink (Amir Goldstein) - attr: block mode changes of symlinks (Christian Brauner) - md/raid1: fix error: ISO C90 forbids mixed declarations (Nigel Croxon) - samples/hw_breakpoint: fix building without module unloading (Arnd Bergmann) - x86/purgatory: Remove LTO flags (Song Liu) - x86/boot/compressed: Reserve more memory for page tables (Kirill A. Shutemov) - scsi: lpfc: Fix the NULL vs IS_ERR() bug for debugfs_create_file() (Jinjie Ruan) - selftests: tracing: Fix to unmount tracefs for recovering environment (Masami Hiramatsu (Google)) - scsi: qla2xxx: Fix NULL vs IS_ERR() bug for debugfs_create_dir() (Jinjie Ruan) - drm: gm12u320: Fix the timeout usage for usb_bulk_msg() (Jinjie Ruan) - btrfs: compare the correct fsid/metadata_uuid in btrfs_validate_super (Anand Jain) - btrfs: add a helper to read the superblock metadata_uuid (Anand Jain) - btrfs: move btrfs_pinned_by_swapfile prototype into volumes.h (Josef Bacik) - perf test shell stat_bpf_counters: Fix test on Intel (Namhyung Kim) - perf test: Remove bash construct from stat_bpf_counters.sh test (James Clark) - MIPS: Use 'grep -E' instead of 'egrep' (Tiezhu Yang) - mtd: rawnand: brcmnand: Fix ECC level field setting for v7.2 controller (William Zhang) - mtd: rawnand: brcmnand: Allow SoC to provide I/O operations (Florian Fainelli) - jbd2: correct the end of the journal recovery scan range (Zhang Yi) - jbd2: rename jbd_debug() to jbd2_debug() (Jan Kara) - jbd2: kill t_handle_lock transaction spinlock (Ritesh Harjani) - jbd2: fix use-after-free of transaction_t race (Ritesh Harjani) - jbd2: refactor wait logic for transaction updates into a common function (Ritesh Harjani) - printk: Consolidate console deferred printing (John Ogness) - interconnect: Fix locking for runpm vs reclaim (Rob Clark) - kobject: Add sanity check for kset->kobj.ktype in kset_register() (Zhen Lei) - media: pci: ipu3-cio2: Initialise timing struct to avoid a compiler warning (Sakari Ailus) - usb: ehci: add workaround for chipidea PORTSC.PEC bug (Xu Yang) - serial: cpm_uart: Avoid suspicious locking (Christophe Leroy) - scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() (Konstantin Shelekhin) - tools: iio: iio_generic_buffer: Fix some integer type and calculation (Chenyuan Mi) - usb: gadget: fsl_qe_udc: validate endpoint index for ch9 udc (Ma Ke) - usb: cdns3: Put the cdns set active part outside the spin lock (Xiaolei Wang) - media: pci: cx23885: replace BUG with error return (Hans Verkuil) - media: tuners: qt1010: replace BUG_ON with a regular error (Hans Verkuil) - media: dvb-usb-v2: gl861: Fix null-ptr-deref in gl861_i2c_master_xfer (Zhang Shurong) - media: az6007: Fix null-ptr-deref in az6007_i2c_xfer() (Zhang Shurong) - media: anysee: fix null-ptr-deref in anysee_master_xfer (Zhang Shurong) - media: af9005: Fix null-ptr-deref in af9005_i2c_xfer (Zhang Shurong) - media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer() (Zhang Shurong) - media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer (Zhang Shurong) - PCI: fu740: Set the number of MSI vectors (Yong-Xuan Wang) - powerpc/pseries: fix possible memory leak in ibmebus_bus_init() (ruanjinjie) - ARM: 9317/1: kexec: Make smp stop calls asynchronous (Marten Lindahl) - jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount (Liu Shixin via Jfs-discussion) - fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount() (Andrew Kanner) - ext2: fix datatype of block number in ext2_xattr_set2() (Georg Ottinger) - md: raid1: fix potential OOB in raid1_remove_disk() (Zhang Shurong) - bus: ti-sysc: Configure uart quirks for k3 SoC (Tony Lindgren) - drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable() (Tuo Li) - drm/amd/display: Blocking invalid 420 modes on HDMI TMDS for DCN31 (Leo Chen) - ALSA: hda: intel-dsp-cfg: add LunarLake support (Pierre-Louis Bossart) - samples/hw_breakpoint: Fix kernel BUG 'invalid opcode: 0000' (Rong Tao) - arm64: dts: qcom: sm8250-edo: correct ramoops pmsg-size (Krzysztof Kozlowski) - arm64: dts: qcom: sm8150-kumano: correct ramoops pmsg-size (Krzysztof Kozlowski) - arm64: dts: qcom: sm6125-pdx201: correct ramoops pmsg-size (Krzysztof Kozlowski) - drm/bridge: tc358762: Instruct DSI host to generate HSE packets (Marek Vasut) - wifi: mac80211_hwsim: drop short frames (Johannes Berg) - netfilter: ebtables: fix fortify warnings in size_entry_mwt() (GONG, Ruiqi) - wifi: mac80211: check S1G action frame size (Johannes Berg) - alx: fix OOB-read compiler warning (GONG, Ruiqi) - mmc: sdhci-esdhc-imx: improve ESDHC_FLAG_ERR010450 (Giulio Benetti) - tpm_tis: Resend command to recover from data transfer errors (Alexander Steffen) - crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() (Mark O'Donovan) - wifi: wil6210: fix fortify warnings (Dmitry Antipov) - wifi: mwifiex: fix fortify warning (Dmitry Antipov) - wifi: ath9k: fix printk specifier (Dongliang Mu) - wifi: ath9k: fix fortify warnings (Dmitry Antipov) - crypto: lrw,xts - Replace strlcpy with strscpy (Azeem Shaikh) - devlink: remove reload failed checks in params get/set callbacks (Jiri Pirko) - ACPI: x86: s2idle: Catch multiple ACPI_TYPE_PACKAGE objects (Mario Limonciello) - hw_breakpoint: fix single-stepping when using bpf_overflow_handler (Tomislav Novak) - perf/imx_ddr: speed up overflow frequency of cycle (Xu Yang) - perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09 (Yicong Yang) - ACPI: video: Add backlight=native DMI quirk for Lenovo Ideapad Z470 (Jiri Slaby (SUSE)) - scftorture: Forgive memory-allocation failure if KASAN (Paul E. McKenney) - rcuscale: Move rcu_scale_writer() schedule_timeout_uninterruptible() to _idle() (Zqiang) - kernel/fork: beware of __put_task_struct() calling context (Wander Lairson Costa) - ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer (Abhishek Mainkar) - locks: fix KASAN: use-after-free in trace_event_raw_event_filelock_lock (Will Shiu) - btrfs: output extra debug info if we failed to find an inline backref (Qu Wenruo) - autofs: fix memory leak of waitqueues in autofs_catatonic_mode (Fedor Pchelkin) - LTS version: v5.15.132 (Jack Vogel) - pcd: fix error codes in pcd_init_unit() (Dan Carpenter) - drm/amd/display: Fix a bug when searching for insert_above_mpcc (Wesley Chalmers) - MIPS: Only fiddle with CHECKFLAGS if need-compiler' (Maciej W. Rozycki) - kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg(). (Kuniyuki Iwashima) - ixgbe: fix timestamp configuration code (Vadim Fedorenko) - ipv6: fix ip6_sock_set_addr_preferences() typo (Eric Dumazet) - net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict() (Liu Jian) - platform/mellanox: mlxbf-pmc: Fix reading of unprogrammed events (Shravan Kumar Ramani) - platform/mellanox: mlxbf-pmc: Fix potential buffer overflows (Shravan Kumar Ramani) - platform/mellanox: mlxbf-tmfifo: Drop jumbo frames (Liming Sun) - platform/mellanox: mlxbf-tmfifo: Drop the Rx packet if no more descriptors (Liming Sun) - kcm: Fix memory leak in error path of kcm_sendmsg() (Shigeru Yoshida) - r8152: check budget for r8152_poll() (Hayes Wang) - net: dsa: sja1105: hide all multicast addresses from 'bridge fdb show' (Vladimir Oltean) - hsr: Fix uninit-value access in fill_frame_info() (Ziyang Xuan) - net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all() (Hangyu Hua) - net: ethernet: mvpp2_main: fix possible OOB write in mvpp2_ethtool_get_rxnfc() (Hangyu Hua) - net/smc: use smc_lgr_list.lock to protect smc_lgr_list.list iterate in smcr_port_add (Guangguan Wang) - kselftest/runner.sh: Propagate SIGTERM to runner child (Bjorn Topel) - net: ipv4: fix one memleak in __inet_del_ifa() (Liu Jian) - ARM: dts: BCM5301X: Extend RAM to full 256MB for Linksys EA6500 V2 (Aleksey Nasibulin) - ARM: dts: samsung: exynos4210-i9100: Fix LCD screen's physical size (Paul Cercueil) - block: don't add or resize partition on the disk with GENHD_FL_NO_PART (Li Lingfeng) - block: rename GENHD_FL_NO_PART_SCAN to GENHD_FL_NO_PART (Christoph Hellwig) - block: move GENHD_FL_BLOCK_EVENTS_ON_EXCL_WRITE to disk->event_flags (Christoph Hellwig) - block: move GENHD_FL_NATIVE_CAPACITY to disk->state (Christoph Hellwig) - pcd: cleanup initialization (Christoph Hellwig) - pcd: move the identify buffer into pcd_identify (Christoph Hellwig) - perf hists browser: Fix the number of entries for 'e' key (Namhyung Kim) - perf tools: Handle old data in PERF_RECORD_ATTR (Namhyung Kim) - perf hists browser: Fix hierarchy mode header (Namhyung Kim) - MIPS: Fix CONFIG_CPU_DADDI_WORKAROUNDS modules_install' regression (Maciej W. Rozycki) - drm/amd/display: prevent potential division by zero errors (Hamza Mahfooz) - mtd: rawnand: brcmnand: Fix potential false time out warning (William Zhang) - mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write (William Zhang) - mtd: rawnand: brcmnand: Fix crash during the panic_write (William Zhang) - btrfs: use the correct superblock to compare fsid in btrfs_validate_super (Anand Jain) - btrfs: don't start transaction when joining with TRANS_JOIN_NOSTART (Filipe Manana) - btrfs: free qgroup rsv on io failure (Boris Burkov) - fuse: nlookup missing decrement in fuse_direntplus_link (ruanmeisi) - ata: pata_ftide010: Add missing MODULE_DESCRIPTION (Damien Le Moal) - ata: sata_gemini: Add missing MODULE_DESCRIPTION (Damien Le Moal) - ata: pata_falcon: fix IO base selection for Q40 (Michael Schmitz) - lib: test_scanf: Add explicit type cast to result initialization in test_number_prefix() (Nathan Chancellor) - ext4: add correct group descriptors and reserved GDT blocks to system zone (Wang Jianjian) - dmaengine: sh: rz-dmac: Fix destination and source data size setting (Hien Huynh) - ARC: atomics: Add compiler barrier to atomic operations... (Pavel Kozlov) - sh: boards: Fix CEU buffer size passed to dma_declare_coherent_memory() (Petr Tesarik) - net: hns3: remove GSO partial feature bit (Jie Wang) - net: hns3: fix the port information display when sfp is absent (Yisen Zhuang) - net: hns3: fix invalid mutex between tc qdisc and dcb ets command issue (Jijie Shao) - net: hns3: fix debugfs concurrency issue between kfree buffer and read (Hao Chen) - net: hns3: fix byte order conversion issue in hclge_dbg_fd_tcam_read() (Hao Chen) - net: dsa: sja1105: complete tc-cbs offload support on SJA1110 (Vladimir Oltean) - net: dsa: sja1105: fix -ENOSPC when replacing the same tc-cbs too many times (Vladimir Oltean) - net: dsa: sja1105: fix bandwidth discrepancy between tc-cbs software and offload (Vladimir Oltean) - ip_tunnels: use DEV_STATS_INC() (Eric Dumazet) - idr: fix param name in idr_alloc_cyclic() doc (Ariel Marcovitch) - s390/zcrypt: don't leak memory if dev_set_name() fails (Andy Shevchenko) - igb: Change IGB_MIN to allow set rx/tx value between 64 and 80 (Olga Zaborska) - igbvf: Change IGBVF_MIN to allow set rx/tx value between 64 and 80 (Olga Zaborska) - igc: Change IGC_MIN to allow set rx/tx value between 64 and 80 (Olga Zaborska) - octeontx2-af: Fix truncation of smq in CN10K NIX AQ enqueue mbox handler (Geetha sowjanya) - kcm: Destroy mutex in kcm_exit_net() (Shigeru Yoshida) - net: sched: sch_qfq: Fix UAF in qfq_dequeue() (valis) [Orabug: 35814453] {CVE-2023-4921} - af_unix: Fix data race around sk->sk_err. (Kuniyuki Iwashima) - af_unix: Fix data-races around sk->sk_shutdown. (Kuniyuki Iwashima) - af_unix: Fix data-race around unix_tot_inflight. (Kuniyuki Iwashima) - af_unix: Fix data-races around user->unix_inflight. (Kuniyuki Iwashima) - net: phy: micrel: Correct bit assignments for phy_device flags (Oleksij Rempel) - net: ipv6/addrconf: avoid integer underflow in ipv6_create_tempaddr (Alex Henrie) - veth: Fixing transmit return status for dropped packets (Liang Chen) - igb: disable virtualization features on 82580 (Corinna Vinschen) - ipv4: ignore dst hint for multipath routes (Sriram Yagnaraman) - drm/i915/gvt: Drop unused helper intel_vgpu_reset_gtt() (Sean Christopherson) - xsk: Fix xsk_diag use-after-free error during socket cleanup (Magnus Karlsson) - net: fib: avoid warn splat in flow dissector (Florian Westphal) - net: read sk->sk_family once in sk_mc_loop() (Eric Dumazet) - ipv4: annotate data-races around fi->fib_dead (Eric Dumazet) - sctp: annotate data-races around sk->sk_wmem_queued (Eric Dumazet) - net/sched: fq_pie: avoid stalls in fq_pie_timer() (Eric Dumazet) - pwm: lpc32xx: Remove handling of PWM channels (Vladimir Zapolskiy) - watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load (Raag Jadav) - perf top: Don't pass an ERR_PTR() directly to perf_session__delete() (Arnaldo Carvalho de Melo) - perf vendor events: Drop some of the JSON/events for power10 platform (Kajol Jain) - perf vendor events: Update the JSON/events descriptions for power10 platform (Kajol Jain) - x86/virt: Drop unnecessary check on extended CPUID level in cpu_has_svm() (Sean Christopherson) - perf annotate bpf: Don't enclose non-debug code with an assert() (Arnaldo Carvalho de Melo) - Input: tca6416-keypad - fix interrupt enable disbalance (Dmitry Torokhov) - Input: tca6416-keypad - always expect proper IRQ number in i2c client (Dmitry Torokhov) - backlight: gpio_backlight: Drop output GPIO direction check for initial power state (Ying Liu) - pwm: atmel-tcb: Fix resource freeing in error path and remove (Uwe Kleine-Konig) - pwm: atmel-tcb: Harmonize resource allocation order (Uwe Kleine-Konig) - pwm: atmel-tcb: Convert to platform remove callback returning void (Uwe Kleine-Konig) - perf trace: Really free the evsel->priv area (Arnaldo Carvalho de Melo) - perf trace: Use zfree() to reduce chances of use after free (Arnaldo Carvalho de Melo) - kconfig: fix possible buffer overflow (Konstantin Meskhidze) - gfs2: low-memory forced flush fixes (Andreas Gruenbacher) - gfs2: Switch to wait_event in gfs2_logd (Andreas Gruenbacher) - kbuild: do not run depmod for 'make modules_sign' (Masahiro Yamada) - bus: mhi: host: Skip MHI reset if device is in RDDM (Qiang Yu) - NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info (Fedor Pchelkin) - NFS: Fix a potential data corruption (Trond Myklebust) - clk: qcom: mss-sc7180: fix missing resume during probe (Johan Hovold) - clk: qcom: q6sstop-qcs404: fix missing resume during probe (Johan Hovold) - soc: qcom: qmi_encdec: Restrict string length in decode (Chris Lew) - clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock (Dmitry Baryshkov) - clk: imx: pll14xx: dynamically configure PLL for 393216000/361267200Hz (Ahmad Fatoum) - dt-bindings: clock: xlnx,versal-clk: drop select:false (Krzysztof Kozlowski) - pinctrl: cherryview: fix address_space_handler() argument (Raag Jadav) - parisc: led: Reduce CPU overhead for disk & lan LED computation (Helge Deller) - parisc: led: Fix LAN receive and transmit LEDs (Helge Deller) - lib/test_meminit: allocate pages up to order MAX_ORDER (Andrew Donnellan) - clk: qcom: turingcc-qcs404: fix missing resume during probe (Johan Hovold) - drm/ast: Fix DRAM init on AST2200 (Thomas Zimmermann) - clk: qcom: camcc-sc7180: fix async resume during probe (Johan Hovold) - fbdev/ep93xx-fb: Do not assign to struct fb_info.dev (Thomas Zimmermann) - io_uring: break iopolling on signal (Pavel Begunkov) - io_uring: break out of iowq iopoll on teardown (Pavel Begunkov) - io_uring: always lock in io_apoll_task_func (Pavel Begunkov) - net/ipv6: SKB symmetric hash should incorporate transport ports (Quan Tian) - udf: initialize newblock to 0 (Tom Rix) - md/md-bitmap: remove unnecessary local variable in backlog_store() (Yu Kuai) - tracing: Zero the pipe cpumask on alloc to avoid spurious -EBUSY (Brian Foster) - perf/x86/uncore: Correct the number of CHAs on EMR (Kan Liang) - x86/sgx: Break up long non-preemptible delays in sgx_vepc_release() (Jack Wang) - USB: core: Fix oversight in SuperSpeed initialization (Alan Stern) - USB: core: Fix race by not overwriting udev->descriptor in hub_port_init() (Alan Stern) - USB: core: Change usb_get_device_descriptor() API (Alan Stern) - USB: core: Unite old scheme and new scheme descriptor reads (Alan Stern) - usb: typec: bus: verify partner exists in typec_altmode_attention (RD Babiera) - usb: typec: tcpm: set initial svdm version based on pd revision (RD Babiera) - cpufreq: brcmstb-avs-cpufreq: Fix -Warray-bounds bug (Gustavo A. R. Silva) - crypto: stm32 - fix loop iterating through scatterlist for DMA (Thomas Bourgoin) - s390/ipl: add missing secure/has_secure file to ipl type 'unknown' (Sven Schnelle) - pstore/ram: Check start of empty przs during init (Enlin Mu) - mmc: renesas_sdhi: register irqs before registering controller (Wolfram Sang) - fsverity: skip PKCS#7 parser when keyring is empty (Eric Biggers) - net: handle ARPHRD_PPP in dev_is_mac_header_xmit() (Nicolas Dichtel) - X.509: if signature is unsupported skip validation (Thore Sommer) - dccp: Fix out of bounds access in DCCP error handler (Jann Horn) - parisc: Fix /proc/cpuinfo output for lscpu (Helge Deller) - procfs: block chmod on /proc/thread-self/comm (Aleksa Sarai) - Revert 'PCI: Mark NVIDIA T4 GPUs to avoid bus reset' (Bjorn Helgaas) - ntb: Fix calculation ntb_transport_tx_free_entry() (Dave Jiang) - ntb: Clean up tx tail index on link down (Dave Jiang) - ntb: Drop packets when qp link is down (Dave Jiang) - scsi: mpt3sas: Perform additional retries if doorbell read returns 0 (Ranjan Kumar) - media: venus: hfi_venus: Write to VIDC_CTRL_INIT after unmasking interrupts (Konrad Dybcio) - arm64: csum: Fix OoB access in IP checksum code for negative lengths (Will Deacon) - i3c: master: svc: fix probe failure when no i3c device exist (Frank Li) - xtensa: PMU: fix base address for the newer hardware (Max Filippov) - backlight/lv5207lp: Compare against struct fb_info.device (Thomas Zimmermann) - backlight/bd6107: Compare against struct fb_info.device (Thomas Zimmermann) - backlight/gpio_backlight: Compare against struct fb_info.device (Thomas Zimmermann) - ARM: OMAP2+: Fix -Warray-bounds warning in _pwrdm_state_switch() (Gustavo A. R. Silva) - ipmi_si: fix a memleak in try_smi_init() (Yi Yang) - media: i2c: ccs: Check rules is non-NULL (Sakari Ailus) - mm/vmalloc: add a safer version of find_vm_area() for debug (Joel Fernandes (Google)) - scsi: core: Fix the scsi_set_resid() documentation (Bart Van Assche) - printk: ringbuffer: Fix truncating buffer size min_t cast (Kees Cook) - rcu: dump vmalloc memory info safely (Zqiang) - ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl (Takashi Iwai) - PM / devfreq: Fix leak in devfreq_dev_release() (Boris Brezillon) - igb: set max size RX buffer when store bad packet is enabled (Radoslaw Tyl) [Orabug: 35924095] {CVE-2023-45871} - skbuff: skb_segment, Call zero copy functions before using skbuff frags (Mohamed Khalfella) - igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU (Eric Dumazet) [Orabug: 35923998] {CVE-2023-42752} - virtio_ring: fix avail_wrap_counter in virtqueue_add_packed (Yuan Yao) - cpufreq: Fix the race condition while updating the transition_task of policy (Liao Chang) - dmaengine: ste_dma40: Add missing IRQ check in d40_probe (ruanjinjie) - um: Fix hostaudio build errors (Randy Dunlap) - mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume() (Yi Yang) - mtd: spi-nor: Check bus width while setting QE bit (Hsin-Yi Wang) - leds: trigger: tty: Do not use LED_ON/OFF constants, use led_blink_set_oneshot instead (Marek Behun) - leds: multicolor: Use rounded division when calculating color components (Marek Behun) - leds: pwm: Fix error code in led_pwm_create_fwnode() (Dan Carpenter) - rpmsg: glink: Add check for kstrdup (Jiasheng Jiang) - phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write (Jonas Karlman) - phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate (Zheng Yang) - phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328 (Jonas Karlman) - mtd: rawnand: brcmnand: Fix mtd oobsize (William Zhang) - tracing: Fix race issue between cpu buffer write and swap (Zheng Yejian) - tracing: Remove extra space at the end of hwlat_detector/mode (Mikhail Kobuk) - HID: multitouch: Correct devm device reference for hidinput input_dev name (Rahul Rameshbabu) - HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode() (Nikita Zhandarovich) - Revert 'IB/isert: Fix incorrect release of isert connection' (Leon Romanovsky) - amba: bus: fix refcount leak (Peng Fan) - serial: tegra: handle clk prepare error in tegra_uart_hw_init() (Yi Yang) - scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock (Chengfeng Ye) - scsi: core: Use 32-bit hostnum in scsi_host_lookup() (Tony Battersby) - cgroup:namespace: Remove unused cgroup_namespaces_init() (Lu Jialin) - media: i2c: rdacm21: Fix uninitialized value (Jacopo Mondi) - media: ov2680: Fix regulators being left enabled on ov2680_power_on() errors (Hans de Goede) - media: ov2680: Fix ov2680_set_fmt() which == V4L2_SUBDEV_FORMAT_TRY not working (Hans de Goede) - media: ov2680: Add ov2680_fill_format() helper function (Hans de Goede) - media: ov2680: Don't take the lock for try_fmt calls (Hans de Goede) - media: ov2680: Remove VIDEO_V4L2_SUBDEV_API ifdef-s (Hans de Goede) - media: ov2680: Fix vflip / hflip set functions (Hans de Goede) - media: ov2680: Fix ov2680_bayer_order() (Hans de Goede) - media: ov2680: Remove auto-gain and auto-exposure controls (Hans de Goede) - media: i2c: ov2680: Set V4L2_CTRL_FLAG_MODIFY_LAYOUT on flips (Dave Stevenson) - media: ov5640: Enable MIPI interface in ov5640_set_power_mipi() (Marek Vasut) - USB: gadget: f_mass_storage: Fix unused variable warning (Alan Stern) - media: venus: hfi_venus: Only consider sys_idle_indicator on V1 (Konrad Dybcio) - media: go7007: Remove redundant if statement (Colin Ian King) - platform/x86: dell-sysman: Fix reference leak (Armin Wolf) - iommu/vt-d: Fix to flush cache of PASID directory table (Yanfei Xu) - iommu/qcom: Disable and reset context bank before programming (AngeloGioacchino Del Regno) - fsi: aspeed: Reset master errors after CFAM reset (Eddie James) - IB/uverbs: Fix an potential error pointer dereference (Xiang Yang) - RDMA/hns: Fix CQ and QP cache affinity (Chengchang Tang) - RDMA/hns: Fix incorrect post-send with direct wqe of wr-list (Junxian Huang) - RDMA/hns: Fix port active speed (Chengchang Tang) - iommu/sprd: Add missing force_aperture (Jason Gunthorpe) - driver core: test_async: fix an error code (Dan Carpenter) - dma-buf/sync_file: Fix docs syntax (Rob Clark) - coresight: tmc: Explicit type conversions to prevent integer overflow (Ruidong Tian) - RDMA/irdma: Replace one-element array with flexible-array member (Gustavo A. R. Silva) - scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly (Oleksandr Natalenko) - scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly (Oleksandr Natalenko) - scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly (Oleksandr Natalenko) - x86/APM: drop the duplicate APM_MINOR_DEV macro (Randy Dunlap) - serial: sprd: Fix DMA buffer leak issue (Chunyan Zhang) - serial: sprd: Assign sprd_port after initialized to avoid wrong access (Chunyan Zhang) - scsi: qla4xxx: Add length check when parsing nlattrs (Lin Ma) - scsi: be2iscsi: Add length check when parsing nlattrs (Lin Ma) - scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param() (Lin Ma) - scsi: iscsi: Add length check for nlattr payload (Lin Ma) - scsi: iscsi: Rename iscsi_set_param() to iscsi_if_set_param() (Wenchao Hao) - scsi: RDMA/srp: Fix residual handling (Bart Van Assche) - usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() (Xu Yang) - media: mediatek: vcodec: Return NULL if no vdec_fb is found (Irui Wang) - media: rkvdec: increase max supported height for H.264 (Benjamin Gaignard) - scsi: hisi_sas: Fix normally completed I/O analysed as failed (Xingui Yang) - scsi: hisi_sas: Fix warnings detected by sparse (Xingui Yang) - scsi: hisi_sas: Modify v3 HW SATA completion error processing (Xingui Yang) - scsi: hisi_sas: Modify v3 HW SSP underflow error processing (Xingui Yang) - media: cx24120: Add retval check for cx24120_message_send() (Daniil Dulov) - media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer() (Christophe JAILLET) - media: dib7000p: Fix potential division by zero (Daniil Dulov) - drivers: usb: smsusb: fix error handling code in smsusb_init_device (Dongliang Mu) - iommu: rockchip: Fix directory table address encoding (Jonas Karlman) - iommu/amd/iommu_v2: Fix pasid_state refcount dec hit 0 warning on pasid unbind (Daniel Marcovitch) - media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link() (Christophe JAILLET) - media: i2c: tvp5150: check return value of devm_kasprintf() (Claudiu Beznea) - media: ad5820: Drop unsupported ad5823 from i2c_ and of_device_id tables (Hans de Goede) - RDMA/qedr: Remove a duplicate assignment in irdma_query_ah() (Minjie Du) - pNFS: Fix assignment of xprtdata.cred (Anna Schumaker) - NFSv4.2: fix handling of COPY ERR_OFFLOAD_NO_REQ (Olga Kornievskaia) - NFS: Guard against READDIR loop when entry names exceed MAXNAMELEN (Benjamin Coddington) - NFSD: da_addr_body field missing in some GETDEVICEINFO replies (Chuck Lever) - fs: lockd: avoid possible wrong NULL parameter (Su Hui) - jfs: validate max amount of blocks before allocation. (Alexei Filippov) - ext4: fix unttached inode after power cut with orphan file feature enabled (Zhihao Cheng) - powerpc/iommu: Fix notifiers being shared by PCI and VIO buses (Russell Currey) - nfs/blocklayout: Use the passed in gfp flags (Dan Carpenter) - powerpc/pseries: Rework lppaca_shared_proc() to avoid DEBUG_PREEMPT (Russell Currey) - powerpc: Don't include lppaca.h in paca.h (Michael Ellerman) - PCI: layerscape: Add workaround for lost link capabilities during reset (Xiaowei Bao) - PCI: layerscape: Add the endpoint linkup notifier support (Frank Li) - PCI: dwc: Add start_link/stop_link inlines (Serge Semin) - wifi: ath10k: Use RMW accessors for changing LNKCTL (Ilpo Jarvinen) - wifi: ath11k: Use RMW accessors for changing LNKCTL (Ilpo Jarvinen) - net/mlx5: Use RMW accessors for changing LNKCTL (Ilpo Jarvinen) - drm/radeon: Use RMW accessors for changing LNKCTL (Ilpo Jarvinen) - drm/amdgpu: Use RMW accessors for changing LNKCTL (Ilpo Jarvinen) - powerpc/perf: Convert fsl_emb notifier to state machine callbacks (Christophe Leroy) - powerpc/fadump: reset dump area size if fadump memory reserve fails (Sourabh Jain) - vfio/type1: fix cap_migration information leak (Stefan Hajnoczi) - powerpc/radix: Move some functions into #ifdef CONFIG_KVM_BOOK3S_HV_POSSIBLE (Christophe Leroy) - clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op (Ahmad Fatoum) - clk: imx8mp: fix sai4 clock (Marco Felsch) - PCI/ASPM: Use RMW accessors for changing LNKCTL (Ilpo Jarvinen) - PCI: pciehp: Use RMW accessors for changing LNKCTL (Ilpo Jarvinen) - pinctrl: mcp23s08: check return value of devm_kasprintf() (Claudiu Beznea) - PCI: Mark NVIDIA T4 GPUs to avoid bus reset (Wu Zongyong) - PCI: microchip: Correct the DED and SEC interrupt bit offsets (Daire McNamara) - clk: qcom: gcc-sm6350: Fix gcc_sdcc2_apps_clk_src (Luca Weiss) - clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src (Patrick Whewell) - ext4: avoid potential data overflow in next_linear_group (Kemeng Shi) - ext4: correct grp validation in ext4_mb_good_group (Kemeng Shi) - EDAC/igen6: Fix the issue of no error events (Qiuxu Zhuo) - clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src (David Wronek) - clk: sunxi-ng: Modify mismatched function name (Zhang Jianhua) - drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init() (Minjie Du) - ipmi:ssif: Fix a memory leak when scanning for an adapter (Corey Minyard) - ipmi:ssif: Add check for kstrdup (Jiasheng Jiang) - of: unittest: Fix overlay type in apply/revert check (Geert Uytterhoeven) - of: overlay: Call of_changeset_init() early (Geert Uytterhoeven) - md: raid0: account for split bio in iostat accounting (David Jeffery) - bus: ti-sysc: Fix cast to enum warning (Tony Lindgren) - arm64: dts: qcom: apq8016-sbc: Fix ov5640 regulator supply names (Bryan O'Donoghue) - drm/mediatek: Fix potential memory leak if vmap() fail (Sui Jingfeng) - drm/mediatek: Remove freeing not dynamic allocated memory (Jason-JH.Lin) - bus: ti-sysc: Fix build warning for 64-bit build (Tony Lindgren) - io_uring: fix drain stalls by invalid SQE (Pavel Begunkov) - audit: fix possible soft lockup in __audit_inode_child() (Gaosheng Cui) - drm/msm/a2xx: Call adreno_gpu_init() earlier (Fabio Estevam) - drm/amd/pm: fix variable dereferenced issue in amdgpu_device_attr_create() (Yang Wang) - smackfs: Prevent underflow in smk_set_cipso() (Dan Carpenter) - firmware: meson_sm: fix to avoid potential NULL pointer dereference (Zhang Shurong) - drm/msm/mdp5: Don't leak some plane state (Daniel Vetter) - drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask (Jiasheng Jiang) - ima: Remove deprecated IMA_TRUSTED_KEYRING Kconfig (Nayna Jain) - drm/panel: simple: Add missing connector type and pixel format for AUO T215HVN01 (Marek Vasut) - drm/armada: Fix off-by-one error in armada_overlay_get_property() (Geert Uytterhoeven) - arm64: dts: qcom: sm8150: Fix the I2C7 interrupt (Zeyan Li) - of: unittest: fix null pointer dereferencing in of_unittest_find_node_by_name() (Ruan Jinjie) - drm/tegra: dpaux: Fix incorrect return value of platform_get_irq (Yangtao Li) - drm/msm: Update dev core dump to not print backwards (Ryan McCann) - md/md-bitmap: hold 'reconfig_mutex' in backlog_store() (Yu Kuai) - md/bitmap: don't set max_write_behind if there is no write mostly device (Guoqing Jiang) - md/raid10: use dereference_rdev_and_rrdev() to get devices (Li Nan) - md/raid10: factor out dereference_rdev_and_rrdev() (Li Nan) - drm/amdgpu: Update min() to min_t() in 'amdgpu_info_ioctl' (Srinivasan Shanmugam) - arm64: dts: qcom: sdm845: Fix the min frequency of 'ice_core_clk' (Manivannan Sadhasivam) - arm64: dts: qcom: sdm845: Add missing RPMh power domain to GCC (Manivannan Sadhasivam) - ARM: dts: BCM53573: Fix Ethernet info for Luxul devices (Rafal Milecki) - drm: adv7511: Fix low refresh rate register for ADV7533/5 (Bogdan Togorean) - ARM: dts: samsung: s5pv210-smdkv210: correct ethernet reg addresses (split) (Krzysztof Kozlowski) - ARM: dts: s5pv210: add dummy 5V regulator for backlight on SMDKv210 (Krzysztof Kozlowski) - ARM: dts: samsung: s3c6410-mini6410: correct ethernet reg addresses (split) (Krzysztof Kozlowski) - ARM: dts: s3c64xx: align pinctrl with dtschema (Krzysztof Kozlowski) - x86/mm: Fix PAT bit missing from page protection modify mask (Janusz Krzysztofik) - drm/etnaviv: fix dumping of active MMU context (Lucas Stach) - arm64: dts: qcom: pmi8994: Add missing OVP interrupt (Konrad Dybcio) - arm64: dts: qcom: Move WLED num-strings from pmi8994 to sony-xperia-tone (Marijn Suijten) - arm64: dts: qcom: pmi8994: Remove hardcoded linear WLED enabled-strings (Marijn Suijten) - arm64: dts: qcom: pm660l: Add missing short interrupt (Konrad Dybcio) - arm64: dts: qcom: correct SPMI WLED register range encoding (Krzysztof Kozlowski) - arm64: dts: qcom: pmi8998: Add node for WLED (AngeloGioacchino Del Regno) - arm64: dts: qcom: sm8250-sony-xperia: correct GPIO keys wakeup again (Krzysztof Kozlowski) - ARM: dts: BCM53573: Use updated 'spi-gpio' binding properties (Rafal Milecki) - ARM: dts: BCM53573: Add cells sizes to PCIe node (Rafal Milecki) - drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar() (Arnd Bergmann) - arm64: dts: qcom: sm8250: Mark PCIe hosts as DMA coherent (Konrad Dybcio) - arm64: dts: qcom: pmk8350: fix ADC-TM compatible string (Dmitry Baryshkov) - arm64: dts: qcom: sm8350: Use proper CPU compatibles (Konrad Dybcio) - arm64: dts: qcom: sm8350: Add missing LMH interrupts to cpufreq (Konrad Dybcio) - arm64: dts: qcom: msm8996: Add missing interrupt to the USB2 controller (Konrad Dybcio) - arm64: dts: qcom: sm8250-edo: Rectify gpio-keys (Konrad Dybcio) - arm64: dts: qcom: sm8250-edo: Add GPIO line names for PMIC GPIOs (Konrad Dybcio) - arm64: dts: qcom: sm8250-edo: Add gpio line names for TLMM (Konrad Dybcio) - arm64: dts: qcom: sm8250: correct dynamic power coefficients (Vincent Guittot) - soc: qcom: ocmem: Fix NUM_PORTS & NUM_MACROS macros (Luca Weiss) - soc: qcom: ocmem: Add OCMEM hardware version print (Luca Weiss) - ASoC: stac9766: fix build errors with REGMAP_AC97 (Randy Dunlap) - quota: fix dqput() to follow the guarantees dquot_srcu should provide (Baokun Li) - quota: add new helper dquot_active() (Baokun Li) - quota: rename dquot_active() to inode_quota_active() (Baokun Li) - quota: factor out dquot_write_dquot() (Baokun Li) - drm/bridge: tc358764: Fix debug print parameter order (Marek Vasut) - netrom: Deny concurrent connect(). (Kuniyuki Iwashima) - net/sched: sch_hfsc: Ensure inner classes have fsc curve (Budimir Markovic) [Orabug: 35810514] {CVE-2023-4623} - hwmon: (tmp513) Fix the channel number in tmp51x_is_visible() (Biju Das) - mlxsw: i2c: Limit single transaction buffer size (Vadim Pasternak) - mlxsw: i2c: Fix chunk size setting in output mailbox buffer (Vadim Pasternak) - net: arcnet: Do not call kfree_skb() under local_irq_disable() (Jinjie Ruan) - wifi: ath9k: use IS_ERR() with debugfs_create_dir() (Wang Ming) - Bluetooth: btusb: Do not call kfree_skb() under spin_lock_irqsave() (Jinjie Ruan) - wifi: mwifiex: avoid possible NULL skb pointer dereference (Dmitry Antipov) - wifi: nl80211/cfg80211: add forgotten nla_policy for BSS color attribute (Lin Ma) - wifi: ath9k: protect WMI command response buffer replacement with a lock (Fedor Pchelkin) - wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx (Fedor Pchelkin) - samples/bpf: fix broken map lookup probe (Daniel T. Lee) - wifi: mwifiex: Fix missed return in oob checks failed path (Polaris Pi) - wifi: mwifiex: fix memory leak in mwifiex_histogram_read() (Dmitry Antipov) - fs: ocfs2: namei: check return value of ocfs2_add_entry() (Artem Chernyshev) - lwt: Check LWTUNNEL_XMIT_CONTINUE strictly (Yan Zhai) - lwt: Fix return values of BPF xmit ops (Yan Zhai) - hwrng: iproc-rng200 - Implement suspend and resume calls (Florian Fainelli) - crypto: caam - fix unchecked return value error (Gaurav Jain) - ice: ice_aq_check_events: fix off-by-one check when filling buffer (Przemek Kitszel) - net-memcg: Fix scope of sockmem pressure indicators (Abel Wu) - selftests/bpf: Clean up fmod_ret in bench_rename test script (Yipeng Zou) - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Menglong Dong) - Bluetooth: Fix potential use-after-free when clear keys (Min Li) - Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() (Yuanjun Gong) - crypto: stm32 - Properly handle pm_runtime_get failing (Uwe Kleine-Konig) - wifi: mwifiex: fix error recovery in PCIE buffer descriptor management (Dmitry Antipov) - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Polaris Pi) - wifi: mt76: mt7915: fix power-limits while chan_switch (Ryder Lee) - can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM (Marc Kleine-Budde) - spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() (Zhang Shurong) - wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH (Lin Ma) - ipv6: Add reasons for skb drops to __udp6_lib_rcv (David Ahern) - bpf: reject unhashed sockets in bpf_sk_assign (Lorenz Bauer) - udp: re-score reuseport groups when connected sockets are present (Lorenz Bauer) - regmap: rbtree: Use alloc_flags for memory allocations (Dan Carpenter) - hwrng: pic32 - use devm_clk_get_enabled (Martin Kaiser) - hwrng: nomadik - keep clock enabled while hwrng is registered (Martin Kaiser) - tcp: tcp_enter_quickack_mode() should be static (Eric Dumazet) - bpf: Clear the probe_addr for uprobe (Yafang Shao) - bpftool: Use a local bpf_perf_event_value to fix accessing its fields (Alexander Lobakin) - cpufreq: powernow-k8: Use related_cpus instead of cpus in driver.exit() (Liao Chang) - x86/efistub: Fix PCI ROM preservation in mixed mode (Mikel Rychliski) - ACPI: x86: s2idle: Fix a logic error parsing AMD constraints table (Mario Limonciello) - ACPI: x86: s2idle: Post-increment variables when getting constraints (Mario Limonciello) - s390/paes: fix PKEY_TYPE_EP11_AES handling for secure keyblobs (Holger Dengler) - s390/pkey: fix/harmonize internal keyblob headers (Holger Dengler) - selftests/futex: Order calls to futex_lock_pi (Nysal Jan K.A) - perf/imx_ddr: don't enable counter0 if none of 4 counters are used (Xu Yang) - x86/decompressor: Don't rely on upper 32 bits of GPRs being preserved (Ard Biesheuvel) - selftests/resctrl: Close perf value read fd on errors (Ilpo Jarvinen) - selftests/resctrl: Unmount resctrl FS if child fails to run benchmark (Ilpo Jarvinen) - selftests/resctrl: Don't leak buffer in fill_cache() (Ilpo Jarvinen) - selftests/resctrl: Add resctrl.h into build deps (Ilpo Jarvinen) - selftests/resctrl: Make resctrl_tests run using kselftest framework (Shaopeng Tan) - OPP: Fix passing 0 to PTR_ERR in _opp_attach_genpd() (Manivannan Sadhasivam) - refscale: Fix uninitalized use of wait_queue_head_t (Waiman Long) - ARM: ptrace: Restore syscall skipping for tracers (Kees Cook) - ARM: ptrace: Restore syscall restart tracing (Kees Cook) - selftests/harness: Actually report SKIP for signal tests (Kees Cook) - tmpfs: verify {g,u}id mount options correctly (Christian Brauner) - fs: Fix error checking for d_hash_and_lookup() (Wang Ming) - eventfd: prevent underflow for eventfd semaphores (Wen Yang) - reiserfs: Check the return value from __getblk() (Matthew Wilcox) - Revert 'net: macsec: preserve ingress frame ordering' (Sabrina Dubroca) - udf: Handle error when adding extent to a file (Jan Kara) - udf: Check consistency of Space Bitmap Descriptor (Vladislav Efanov) - of: kexec: Mark ima_{free,stable}_kexec_buffer() as __init (Nathan Chancellor) - net: Avoid address overwrite in kernel_connect (Jordan Rife) - arm64: lib: Import latest version of Arm Optimized Routines' strncmp (Joey Gouly) - crypto: rsa-pkcs1pad - Use helper to set reqsize (Herbert Xu) - tracing: Introduce pipe_cpumask to avoid race on trace_pipes (Zheng Yejian) - ALSA: seq: oss: Fix racy open/close of MIDI devices (Takashi Iwai) - scsi: lpfc: Fix incorrect big endian type assignment in bsg loopback path (Justin Tee) - scsi: storvsc: Always set no_report_opcodes (Michael Kelley) - sctp: handle invalid error codes without calling BUG() (Dan Carpenter) - bnx2x: fix page fault following EEH recovery (David Christensen) - netlabel: fix shift wrapping bug in netlbl_catmap_setlong() (Dmitry Mastykin) - drm/amdgpu: Match against exact bootloader status (Lijo Lazar) - net: hns3: restore user pause configure when disable autoneg (Jian Shen) - scsi: qedi: Fix potential deadlock on &qedi_percpu->p_work_lock (Chengfeng Ye) - scsi: lpfc: Remove reftag check in DIF paths (Justin Tee) - idmaengine: make FSL_EDMA and INTEL_IDMA64 depends on HAS_IOMEM (Baoquan He) - wifi: brcmfmac: Fix field-spanning write in brcmf_scan_params_v2_to_v1() (Hans de Goede) - net: usb: qmi_wwan: add Quectel EM05GV2 (Martin Kohn) - vmbus_testing: fix wrong python syntax for integer value comparison (Ani Sinha) - clk: fixed-mmio: make COMMON_CLK_FIXED_MMIO depend on HAS_IOMEM (Baoquan He) - kprobes: Prohibit probing on CFI preamble symbol (Masami Hiramatsu (Google)) - security: keys: perform capable check only on privileged operations (Christian Gottsche) - ata: pata_arasan_cf: Use dev_err_probe() instead dev_err() in data_xfer() (Minjie Du) - drm/amd/display: Exit idle optimizations before attempt to access PHY (Leo Chen) - platform/x86: huawei-wmi: Silence ambient light sensor (Konstantin Shelekhin) - platform/x86/intel/hid: Add HP Dragonfly G2 to VGBS DMI quirks (Maxim Mikityanskiy) - platform/x86: intel: hid: Always call BTNL ACPI method (Hans de Goede) - ASoC: atmel: Fix the 8K sample parameter in I2SC master (Guiting Shen) - ASoC: rt711-sdca: fix for JD event handling in ClockStop Mode0 (Shuming Fan) - ASoC: rt711: fix for JD event handling in ClockStop Mode0 (Shuming Fan) - ASoc: codecs: ES8316: Fix DMIC config (Edgar) - ASoC: rt5682-sdw: fix for JD event handling in ClockStop Mode0 (Shuming Fan) - fs/nls: make load_nls() take a const parameter (Winston Wen) - s390/dasd: fix hanging device after request requeue (Stefan Haberland) - s390/dasd: use correct number of retries for ERP requests (Stefan Haberland) - m68k: Fix invalid .section syntax (Ben Hutchings) - vxlan: generalize vxlan_parse_gpe_hdr and remove unused args (Jiri Benc) - ethernet: atheros: fix return value check in atl1c_tso_csum() (Yuanjun Gong) - ASoC: da7219: Check for failure reading AAD IRQ events (Dmytro Maluka) - ASoC: da7219: Flush pending AAD IRQ when suspending (Dmytro Maluka) - ksmbd: no response from compound read (Namjae Jeon) - ksmbd: fix out of bounds in smb3_decrypt_req() (Namjae Jeon) - 9p: virtio: make sure 'offs' is initialized in zc_request (Dominique Martinet) - media: pci: cx23885: fix error handling for cx23885 ATSC boards (Nikolay Burykin) - media: pulse8-cec: handle possible ping error (Dmitry Antipov) - phy: qcom-snps-femto-v2: use qcom_snps_hsphy_suspend/resume error code (Adrien Thierry) - ARM: dts: imx: Set default tuning step for imx7d usdhc (Xiaolei Wang) - ARM: dts: imx: Adjust dma-apbh node name (Stefan Wahren) - ARM: dts: imx7s: Drop dma-apb interrupt-names (Marek Vasut) - ARM: dts: imx: update sdma node name format (Joy Zou) - rds: Put back pages on the CPU that allocated them (Hakon Bugge) [Orabug: 35768363] - mm: fix munmap() of reserved va ranges (Anthony Yznaga) [Orabug: 35843808] - mm: fix mmap() of reserved va ranges (Anthony Yznaga) [Orabug: 35843808] - mm: reinstall placeholder mappings before downgrading mmap lock (Anthony Yznaga) [Orabug: 35843808] - mm: fix hang after mapping over a mapped reserved va range (Anthony Yznaga) [Orabug: 35843808] - mm: fix update of total_vm for reserved va placeholders (Anthony Yznaga) [Orabug: 35843808] - mm: enable merging of reserved va placeholders (Anthony Yznaga) [Orabug: 35843808] - genetlink: initialize resv_start_op using existing enum values on uek7-u2 (Qing Huang) [Orabug: 35857093] - rds: Provision to allow all trace points at module load time (Arumugam Kolappan) [Orabug: 35916077] - rds/ib: Preserve dest qp num in the connect request (Arumugam Kolappan) [Orabug: 35926164] - Crash: add lock to serialize crash hotplug handling (Baoquan He) [Orabug: 35778906] - x86/crash: optimize CPU changes (Eric DeVolder) [Orabug: 35778906] - crash: change crash_prepare_elf64_headers() to for_each_possible_cpu() (Eric DeVolder) [Orabug: 35778906] - crash: hotplug support for kexec_load() (Eric DeVolder) [Orabug: 35778906] - x86/crash: add x86 crash hotplug support (Eric DeVolder) [Orabug: 35778906] - crash: memory and CPU hotplug sysfs attributes (Eric DeVolder) [Orabug: 35778906] - kexec: exclude elfcorehdr from the segment digest (Eric DeVolder) [Orabug: 35778906] - crash: add generic infrastructure for crash hotplug support (Eric DeVolder) [Orabug: 35778906] - crash: move a few code bits to setup support of crash hotplug (Eric DeVolder) [Orabug: 35778906] - remove ARCH_DEFAULT_KEXEC from Kconfig.kexec (Eric DeVolder) [Orabug: 35778906] - kexec: rename ARCH_HAS_KEXEC_PURGATORY (Eric DeVolder) [Orabug: 35778906] - sh/kexec: refactor for kernel/Kconfig.kexec (Eric DeVolder) [Orabug: 35778906] - s390/kexec: refactor for kernel/Kconfig.kexec (Eric DeVolder) [Orabug: 35778906] - riscv/kexec: refactor for kernel/Kconfig.kexec (Eric DeVolder) [Orabug: 35778906] - powerpc/kexec: refactor for kernel/Kconfig.kexec (Eric DeVolder) [Orabug: 35778906] - parisc/kexec: refactor for kernel/Kconfig.kexec (Eric DeVolder) [Orabug: 35778906] - mips/kexec: refactor for kernel/Kconfig.kexec (Eric DeVolder) [Orabug: 35778906] - m68k/kexec: refactor for kernel/Kconfig.kexec (Eric DeVolder) [Orabug: 35778906] - arm64/kexec: refactor for kernel/Kconfig.kexec (Eric DeVolder) [Orabug: 35778906] - ia64/kexec: refactor for kernel/Kconfig.kexec (Eric DeVolder) [Orabug: 35778906] - arm/kexec: refactor for kernel/Kconfig.kexec (Eric DeVolder) [Orabug: 35778906] - x86/kexec: refactor for kernel/Kconfig.kexec (Eric DeVolder) [Orabug: 35778906] - kexec: consolidate kexec and crash options into kernel/Kconfig.kexec (Eric DeVolder) [Orabug: 35778906] [5.15.0-201.131.1] - net/rds: report pending-messages count in RDS_INQ response (Devesh Sharma) [Orabug: 35596047] - uek-rpm: Disable kernel support for CONFIG_FIREWIRE in OL9 (Yifei Liu) [Orabug: 35493648] {CVE-2023-3159} - rds: Add proper refcnt when an RDS MR references an RDS Socket (Hakon Bugge) [Orabug: 35817900] - rds: Check for UAF in rds_destroy_mr (Hakon Bugge) [Orabug: 35817900] - uek-rpm: Enable Microsoft recommended Hyper-V flags for ARM (Harshvardhan Jha) [Orabug: 35823292] - xfs: reserve less log space when recovering log intent items (Darrick J. Wong) [Orabug: 35871839] - scsi: target: core: Fix deadlock due to recursive locking (Junxiao Bi) [Orabug: 35886688] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-42752 CVE-2023-3159 CVE-2023-4244 CVE-2023-42756 CVE-2023-4623 CVE-2023-4921 CVE-2023-5090 CVE-2023-45871 CVE-2023-5178 CVE-2023-5197 cpe:/a:oracle:linux:8::UEKR7 cpe:/o:oracle:linux:9::baseos_latest cpe:/a:oracle:linux:8::developer_UEKR7 cpe:/o:oracle:linux:9:3:baseos_patch cpe:/a:oracle:linux:9::UEKR7 cpe:/a:oracle:linux:9::developer_UEKR7 Oracle Linux 8 Oracle Linux 7 [5.4.17-2136.326.6] - Revert 'md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d' (Junxiao Bi) [Orabug: 35914789] - md: bypass block throttle for superblock update (Junxiao Bi) [Orabug: 35914789] [5.4.17-2136.326.5] - Revert 'tracing: Increase trace array ref count on enable and filter files' (Sherry Yang) [Orabug: 36059945] - xen/blkback: Force flush and secure discard support flags (Boris Ostrovsky) [Orabug: 36050498] - Revert 'PCI: acpiphp: Reassign resources on bridge if necessary' (Dongli Zhang) [Orabug: 36049644] - Revert 'PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus' (Dongli Zhang) [Orabug: 36049644] [5.4.17-2136.326.4] - Revert 'mmc: core: Capture correct oemid-bits for eMMC cards' (Dominique Martinet) - media: dvb-usb-v2: af9035: fix missing unlock (Hans Verkuil) - perf/core: Fix potential NULL deref (Peter Zijlstra) - i2c: aspeed: Fix i2c bus hang in slave read (Jian Zhang) - virtio-mmio: fix memory leak of vm_dev (Maximilian Heyne) - net/rds: Use proper peer port number even when not connected (Greg Jumper) [Orabug: 35065319] - Use inflight IO in io acct of high latency devices (Gulam Mohamed) [Orabug: 35475691] - nvmet-tcp: Fix a possible UAF in queue intialization setup (Sagi Grimberg) [Orabug: 36028026] {CVE-2023-5178} [5.4.17-2136.326.3] - LTS tag: v5.4.259 (Sherry Yang) - xfrm6: fix inet6_dev refcount underflow problem (Zhang Changzhong) - Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name (Kees Cook) - Bluetooth: hci_sock: fix slab oob read in create_monitor_event (Edward AD) - phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins (Tony Lindgren) - phy: mapphone-mdm6600: Fix runtime PM for remove (Tony Lindgren) - phy: mapphone-mdm6600: Fix runtime disable on probe (Tony Lindgren) - ASoC: pxa: fix a memory leak in probe() (Dan Carpenter) - gpio: vf610: set value before the direction to avoid a glitch (Haibo Chen) - s390/pci: fix iommu bitmap allocation (Niklas Schnelle) - perf: Disallow mis-matched inherited group reads (Peter Zijlstra) - USB: serial: option: add Fibocom to DELL custom modem FM101R-GL (Puliang Lu) - USB: serial: option: add entry for Sierra EM9191 with new firmware (Benoit Monin) - USB: serial: option: add Telit LE910C4-WWX 0x1035 composition (Fabio Porcedda) - ACPI: irq: Fix incorrect return value in acpi_register_gsi() (Sunil V L) - Revert 'pinctrl: avoid unsafe code pattern in find_pinctrl()' (Andy Shevchenko) - mmc: core: Capture correct oemid-bits for eMMC cards (Avri Altman) - mmc: core: sdio: hold retuning if sdio in 1-bit mode (Haibo Chen) - mtd: physmap-core: Restore map_rom fallback (Geert Uytterhoeven) - mtd: spinand: micron: correct bitmask for ecc status (Martin Kurbanov) - mtd: rawnand: qcom: Unmap the right resource upon probe failure (Bibek Kumar Patro) - Bluetooth: hci_event: Fix using memcmp when comparing keys (Luiz Augusto von Dentz) - HID: multitouch: Add required quirk for Synaptics 0xcd7e device (Rahul Rameshbabu) - btrfs: fix some -Wmaybe-uninitialized warnings in ioctl.c (Josef Bacik) - drm: panel-orientation-quirks: Add quirk for One Mix 2S (Kai Uwe Broulik) - sky2: Make sure there is at least one frag_addr available (Kees Cook) - regulator/core: Revert 'fix kobject release warning and memory leak in regulator_register()' (Michal Miroslaw) - wifi: cfg80211: avoid leaking stack data into trace (Benjamin Berg) - wifi: mac80211: allow transmitting EAPOL frames with tainted key (Wen Gong) - Bluetooth: hci_core: Fix build warnings (Luiz Augusto von Dentz) - Bluetooth: Avoid redundant authentication (Ying Hsu) - HID: holtek: fix slab-out-of-bounds Write in holtek_kbd_input_event (Ma Ke) - tracing: relax trace_event_eval_update() execution with cond_resched() (Clement Leger) - ata: libata-eh: Fix compilation warning in ata_eh_link_report() (Damien Le Moal) - gpio: timberdale: Fix potential deadlock on &tgpio->lock (Chengfeng Ye) - overlayfs: set ctime when setting mtime and atime (Jeff Layton) - i2c: mux: Avoid potential false error message in i2c_mux_add_adapter (Heiner Kallweit) - btrfs: initialize start_slot in btrfs_log_prealloc_extents (Josef Bacik) - btrfs: return -EUCLEAN for delayed tree ref with a ref count not equals to 1 (Filipe Manana) - ARM: dts: ti: omap: Fix noisy serial with overrun-throttle-ms for mapphone (Tony Lindgren) - ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA (Hans de Goede) - ACPI: resource: Skip IRQ override on ASUS ExpertBook B1502CBA (Paul Menzel) - ACPI: resource: Skip IRQ override on Asus Expertbook B2402CBA (Tamim Khan) - ACPI: resource: Add Asus ExpertBook B2502 to Asus quirks (Hans de Goede) - ACPI: resource: Skip IRQ override on Asus Vivobook S5602ZA (Tamim Khan) - ACPI: resource: Add ASUS model S5402ZA to quirks (Kellen Renshaw) - ACPI: resource: Skip IRQ override on Asus Vivobook K3402ZA/K3502ZA (Tamim Khan) - ACPI: resources: Add DMI-based legacy IRQ override quirk (Hui Wang) - ACPI: Drop acpi_dev_irqresource_disabled() (John Garry) - resource: Add irqresource_disabled() (John Garry) - net: pktgen: Fix interface flags printing (Gavrilov Ilia) - netfilter: nft_set_rbtree: .deactivate fails if element has expired (Pablo Neira Ayuso) - neighbor: tracing: Move pin6 inside CONFIG_IPV6=y section (Geert Uytterhoeven) - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Pedro Tammela) - i40e: prevent crash on probe if hw registers have invalid values (Michal Schmidt) - net: usb: smsc95xx: Fix an error code in smsc95xx_reset() (Dan Carpenter) - ipv4: fib: annotate races around nh->nh_saddr_genid and nh->nh_saddr (Eric Dumazet) - tun: prevent negative ifindex (Eric Dumazet) - tcp: tsq: relax tcp_small_queue_check() when rtx queue contains a single skb (Eric Dumazet) - tcp: fix excessive TLP and RACK timeouts from HZ rounding (Neal Cardwell) - net: rfkill: gpio: prevent value glitch during probe (Josua Mayer) - net: ipv6: fix return value check in esp_remove_trailer (Ma Ke) - net: ipv4: fix return value check in esp_remove_trailer (Ma Ke) - xfrm: interface: use DEV_STATS_INC() (Eric Dumazet) - xfrm: fix a data-race in xfrm_gen_index() (Eric Dumazet) - qed: fix LL2 RX buffer allocation (Manish Chopra) - netfilter: nft_payload: fix wrong mac header matching (Florian Westphal) - KVM: x86: Mask LVTPC when handling a PMI (Jim Mattson) - regmap: fix NULL deref on lookup (Johan Hovold) - nfc: nci: fix possible NULL pointer dereference in send_acknowledge() (Krzysztof Kozlowski) - ice: fix over-shifted variable (Jesse Brandeburg) - Bluetooth: avoid memcmp() out of bounds warning (Arnd Bergmann) - Bluetooth: hci_event: Fix coding style (Luiz Augusto von Dentz) - Bluetooth: vhci: Fix race when opening vhci device (Arkadiusz Bokowy) - Bluetooth: Fix a refcnt underflow problem for hci_conn (Ziyang Xuan) - Bluetooth: Reject connection with the device which has same BD_ADDR (Lee, Chun-Yi) - Bluetooth: hci_event: Ignore NULL link key (Lee, Chun-Yi) - usb: hub: Guard against accesses to uninitialized BOS descriptors (Ricardo Canuelo) - Documentation: sysctl: align cells in second content column (Bagas Sanjaya) - dev_forward_skb: do not scrub skb mark within the same name space (Nicolas Dichtel) - ravb: Fix use-after-free issue in ravb_tx_timeout_work() (Yoshihiro Shimoda) - powerpc/64e: Fix wrong test in __ptep_test_and_clear_young() (Christophe Leroy) - powerpc/8xx: Fix pte_access_permitted() for PAGE_NONE (Christophe Leroy) - dmaengine: mediatek: Fix deadlock caused by synchronize_irq() (Duoming Zhou) - x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs (Borislav Petkov (AMD)) - usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call (Krishna Kurapati) - usb: gadget: udc-xilinx: replace memcpy with memcpy_toio (Piyush Mehta) - pinctrl: avoid unsafe code pattern in find_pinctrl() (Dmitry Torokhov) - cgroup: Remove duplicates in cgroup v1 tasks file (Michal Koutny) - Input: xpad - add PXN V900 support (Matthias Berndt) - Input: psmouse - fix fast_reconnect function for PS/2 mode (Jeffery Miller) - Input: powermate - fix use-after-free in powermate_config_complete (Javier Carrasco) - ceph: fix incorrect revoked caps assert in ceph_fill_file_size() (Xiubo Li) - libceph: use kernel_connect() (Jordan Rife) - mcb: remove is_added flag from mcb_device struct (Jorge Sanjuan Garcia) - iio: pressure: ms5611: ms5611_prom_is_valid false negative bug (Alexander Zangerl) - iio: pressure: dps310: Adjust Timeout Settings (Lakshmi Yadlapati) - iio: pressure: bmp280: Fix NULL pointer exception (Phil Elwell) - usb: musb: Modify the 'HWVers' register address (Xingxing Luo) - usb: musb: Get the musb_qh poniter after musb_giveback (Xingxing Luo) - usb: dwc3: Soft reset phy on probe for host (Thinh Nguyen) - net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read (Javier Carrasco) - usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer (Wesley Cheng) - dmaengine: stm32-mdma: abort resume if no ongoing transfer (Amelie Delaunay) - workqueue: Override implicit ordered attribute in workqueue_apply_unbound_cpumask() (Waiman Long) - nfc: nci: assert requested protocol is valid (Jeremy Cline) - net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (Eric Dumazet) - ixgbe: fix crash with empty VF macvlan list (Dan Carpenter) - drm/vmwgfx: fix typo of sizeof argument (Konstantin Meskhidze) - xen-netback: use default TX queue size for vifs (Roger Pau Monne) - mlxsw: fix mlxsw_sp2_nve_vxlan_learning_set() return type (Dan Carpenter) - ieee802154: ca8210: Fix a potential UAF in ca8210_probe (Dinghao Liu) - ravb: Fix up dma_free_coherent() call in ravb_remove() (Yoshihiro Shimoda) - drm/msm/dsi: skip the wait for video mode done if not applicable (Abhinav Kumar) - drm: etvnaviv: fix bad backport leading to warning (Martin Fuzzey) - quota: Fix slow quotaoff (Jan Kara) - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (Hans de Goede) - pwm: hibvt: Explicitly set .polarity in .get_state() (Uwe Kleine-Konig) - lib/test_meminit: fix off-by-one error in test_pages() (Greg Kroah-Hartman) - RDMA/cxgb4: Check skb value for failure to allocate (Artem Chernyshev) - LTS tag: v5.4.258 (Sherry Yang) - xen/events: replace evtchn_rwlock with RCU (Juergen Gross) - ima: rework CONFIG_IMA dependency block (Arnd Bergmann) - NFS: Fix a race in __nfs_list_for_each_server() (Trond Myklebust) - parisc: Restore __ldcw_align for PA-RISC 2.0 processors (John David Anglin) - RDMA/mlx5: Fix NULL string error (Shay Drory) - RDMA/siw: Fix connection failure handling (Bernard Metzler) - RDMA/uverbs: Fix typo of sizeof argument (Konstantin Meskhidze) - RDMA/cma: Fix truncation compilation warning in make_cma_ports (Leon Romanovsky) - gpio: pxa: disable pinctrl calls for MMP_GPIO (Duje Mihanovic) - gpio: aspeed: fix the GPIO number passed to pinctrl_gpio_set_config() (Bartosz Golaszewski) - IB/mlx4: Fix the size of a buffer in add_port_entries() (Christophe JAILLET) - RDMA/core: Require admin capabilities to set system parameters (Leon Romanovsky) - cpupower: add Makefile dependencies for install targets (Ivan Babrou) - sctp: update hb timer immediately after users change hb_interval (Xin Long) - sctp: update transport state when processing a dupcook packet (Xin Long) - tcp: fix delayed ACKs for MSS boundary condition (Neal Cardwell) - tcp: fix quick-ack counting to count actual ACKs of new data (Neal Cardwell) - net: stmmac: dwmac-stm32: fix resume on STM32 MCU (Ben Wolsieffer) - netfilter: handle the connecting collision properly in nf_conntrack_proto_sctp (Xin Long) - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Shigeru Yoshida) - ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data() (David Howells) - net: fix possible store tearing in neigh_periodic_work() (Eric Dumazet) - modpost: add missing else to the 'of' check (Mauricio Faria de Oliveira) - NFSv4: Fix a nfs4_state_manager() race (Trond Myklebust) - NFS: Add a helper nfs_client_for_each_server() (Trond Myklebust) - NFS4: Trace state recovery operation (Chuck Lever) - regmap: rbtree: Fix wrong register marked as in-cache when creating new node (Richard Fitzgerald) - wifi: mt76: mt76x02: fix MT76x0 external LNA gain handling (Felix Fietkau) - drivers/net: process the result of hdlc_open() and add call of hdlc_close() in uhdlc_close() (Alexandra Diupina) - wifi: iwlwifi: dbg_ini: fix structure packing (Arnd Bergmann) - ubi: Refuse attaching if mtd's erasesize is 0 (Zhihao Cheng) - net: prevent rewrite of msg_name in sock_sendmsg() (Jordan Rife) - wifi: mwifiex: Fix tlv_buf_left calculation (Gustavo A. R. Silva) - qed/red_ll2: Fix undefined behavior bug in struct qed_ll2_info (Gustavo A. R. Silva) - scsi: zfcp: Fix a double put in zfcp_port_enqueue() (Dinghao Liu) - fs: binfmt_elf_efpic: fix personality for ELF-FDPIC (Greg Ungerer) - ata: libata-sata: increase PMP SRST timeout to 10s (Matthias Schiffer) - ata: libata-core: Do not register PM operations for SAS ports (Damien Le Moal) - ata: libata-core: Fix port and device removal (Damien Le Moal) - ata: libata-core: Fix ata_port_request_pm() locking (Damien Le Moal) - net: thunderbolt: Fix TCPv6 GSO checksum calculation (Mika Westerberg) - btrfs: properly report 0 avail for very full file systems (Josef Bacik) - i2c: i801: unregister tco_pdev in i801_probe() error path (Heiner Kallweit) - ata: libata-scsi: ignore reserved bits for REPORT SUPPORTED OPERATION CODES (Niklas Cassel) - ALSA: hda: Disable power save for solving pop issue on Lenovo ThinkCentre M70q (Kailang Yang) - nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() (Pan Bian) - serial: 8250_port: Check IRQ data before use (Andy Shevchenko) - Smack:- Use overlay inode label in smack_inode_copy_up() (Vishal Goel) - smack: Retrieve transmuting information in smack_inode_getsecurity() (Roberto Sassu) - smack: Record transmuting in smk_transmuted (Roberto Sassu) - i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) - i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) - i40e: improve locking of mac_filter_hash (Stefan Assmann) - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Mika Westerberg) - watchdog: iTCO_wdt: No need to stop the timer in probe (Mika Westerberg) - nvme-pci: do not set the NUMA node of device if it has none (Pratyush Yadav) - fbdev/sh7760fb: Depend on FB=y (Thomas Zimmermann) - ncsi: Propagate carrier gain/loss events to the NCSI controller (Johnathan Mantey) - powerpc/watchpoints: Annotate atomic context in more places (Benjamin Gray) - bpf: Clarify error expectations from bpf_clone_redirect (Stanislav Fomichev) - spi: nxp-fspi: reset the FLSHxCR1 registers (Han Xu) - ata: libata-eh: do not clear ATA_PFLAG_EH_PENDING in ata_eh_reset() (Niklas Cassel) - ring-buffer: Avoid softlockup in ring_buffer_resize() (Zheng Yejian) - selftests/ftrace: Correctly enable event in instance-event.tc (Zheng Yejian) - parisc: irq: Make irq_stack_union static to avoid sparse warning (Helge Deller) - parisc: drivers: Fix sparse warning (Helge Deller) - parisc: iosapic.c: Fix sparse warnings (Helge Deller) - parisc: sba: Fix compile warning wrt list of SBA devices (Helge Deller) - gpio: pmic-eic-sprd: Add can_sleep flag for PMIC EIC chip (Wenhua Lin) - xtensa: boot/lib: fix function prototypes (Max Filippov) - xtensa: boot: don't add include-dirs (Randy Dunlap) - xtensa: iss/network: make functions static (Randy Dunlap) - xtensa: add default definition for XCHAL_HAVE_DIV32 (Max Filippov) - bus: ti-sysc: Fix SYSC_QUIRK_SWSUP_SIDLE_ACT handling for uart wake-up (Tony Lindgren) - ARM: dts: ti: omap: motorola-mapphone: Fix abe_clkctrl warning on boot (Tony Lindgren) - clk: tegra: fix error return case for recalc_rate (Timo Alho) - ata: libata: disallow dev-initiated LPM transitions to unsupported states (Niklas Cassel) - drm/amd/display: prevent potential division by zero errors (Hamza Mahfooz) - drm/amd/display: Fix LFC multiplier changing erratically (Anthony Koo) - drm/amd/display: Reinstate LFC optimization (Amanda Liu) - scsi: qla2xxx: Fix deletion race condition (Quinn Tran) - Input: i8042 - add quirk for TUXEDO Gemini 17 Gen1/Clevo PD70PN (Werner Sembach) - i2c: mux: demux-pinctrl: check the return value of devm_kstrdup() (Xiaoke Wang) - gpio: tb10x: Fix an error handling path in tb10x_gpio_probe() (Christophe JAILLET) - team: fix null-ptr-deref when team device type is changed (Ziyang Xuan) - net: bridge: use DEV_STATS_INC() (Eric Dumazet) - net: hns3: add 5ms delay before clear firmware reset irq source (Jie Wang) - powerpc/perf/hv-24x7: Update domain value check (Kajol Jain) - ipv4: fix null-deref in ipv4_link_failure (Kyle Zeng) - i40e: Fix VF VLAN offloading when port VLAN is configured (Ivan Vecera) - i40e: Fix warning message and call stack during rmmod i40e driver (Karen Sornek) - ASoC: imx-audmix: Fix return error with devm_clk_get() (Shengjiu Wang) - selftests: tls: swap the TX and RX sockets in some tests (Sabrina Dubroca) - selftests/tls: Add {} to avoid static checker warning (Kees Cook) - bpf: Avoid deadlock when using queue and stack maps from NMI (Toke Hoiland-Jorgensen) - netfilter: nf_tables: disallow element removal on anonymous sets (Pablo Neira Ayuso) - ASoC: meson: spdifin: start hw on dai probe (Jerome Brunet) - ext4: do not let fstrim block system suspend (Jan Kara) - ext4: move setting of trimmed bit into ext4_try_to_trim_range() (Jan Kara) - ext4: replace the traditional ternary conditional operator with with max()/min() (Kemeng Shi) - ext4: mark group as trimmed only if it was fully scanned (Dmitry Monakhov) - ext4: change s_last_trim_minblks type to unsigned long (Lukas Czerner) - ext4: scope ret locally in ext4_try_to_trim_range() (Lukas Bulwahn) - ext4: add new helper interface ext4_try_to_trim_range() (Wang Jianchao) - ext4: remove the 'group' parameter of ext4_trim_extent (Wang Jianchao) - ata: libahci: clear pending interrupt status (Szuying Chen) - tracing: Increase trace array ref count on enable and filter files (Steven Rostedt (Google)) - SUNRPC: Mark the cred for revalidation if the server rejects it (Trond Myklebust) - NFS/pNFS: Report EINVAL errors from connect() to the server (Trond Myklebust) [5.4.17-2136.326.2] - mm/memcg: optimize memory.numa_stat like memory.stat (Shakeel Butt) [Orabug: 35879962] [5.4.17-2136.326.1] - mm: fix munmap() of reserved va ranges (Anthony Yznaga) [Orabug: 35843809] - mm: fix mmap() of reserved va ranges (Anthony Yznaga) [Orabug: 35843809] - mm: reinstall placeholder mappings before downgrading mmap lock (Anthony Yznaga) [Orabug: 35843809] - mm: mapping over a reserved va range may unmap twice (Anthony Yznaga) [Orabug: 35843809] - mm: fix update of total_vm for reserved va placeholders (Anthony Yznaga) [Orabug: 35843809] - mm: enable merging of reserved va placeholders (Anthony Yznaga) [Orabug: 35843809] - rds: Provision to allow all trace points at module load time (Arumugam Kolappan) [Orabug: 35916078] - rds/ib: Preserve dest qp num in the connect request (Arumugam Kolappan) [Orabug: 35926165] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-5178 cpe:/a:oracle:linux:8::UEKR6 cpe:/a:oracle:linux:8::developer_UEKR6 cpe:/a:oracle:linux:7::developer_UEKR6 cpe:/o:oracle:linux:8:9:baseos_patch cpe:/o:oracle:linux:8::baseos_latest cpe:/a:oracle:linux:7::UEKR6 Oracle Linux 9 - [5.14.0-362.13.0.1_3.OL9] - cifs: Fix UAF in cifs_demultiplex_thread() (Zhang Xiaoxu) (Steve French) {CVE-2023-1192} - fs/smb/client: Reset password pointer to NULL (Quang Le) (Steve French) {CVE-2023-5345} - igb: set max size RX buffer when store bad packet is enabled (Tony Nguyen) (David S. Miller) {CVE-2023-45871} - [5.14.0-362.8.1_3.OL9] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5 - Remove nmap references from kernel (Mridula Shastry) [Orabug: 34313944] - Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535] - Disable unified kernel image package build - Add Oracle Linux IMA certificates - 5.14.0 - Debranding patches copied from Rocky Linux (Louis Abel and Sherif Nagy from RESF) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-1192 CVE-2023-5345 CVE-2023-45871 cpe:/a:oracle:linux:9::appstream cpe:/o:oracle:linux:9:3:baseos_patch cpe:/a:oracle:linux:9::codeready_builder cpe:/o:oracle:linux:9::baseos_latest Oracle Linux 7 [5.4.17-2136.326.6.el7] - Revert 'md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d' (Junxiao Bi) [Orabug: 35914789] - md: bypass block throttle for superblock update (Junxiao Bi) [Orabug: 35914789] [5.4.17-2136.326.5.el7] - Revert 'tracing: Increase trace array ref count on enable and filter files' (Sherry Yang) [Orabug: 36059945] - xen/blkback: Force flush and secure discard support flags (Boris Ostrovsky) [Orabug: 36050498] - Revert 'PCI: acpiphp: Reassign resources on bridge if necessary' (Dongli Zhang) [Orabug: 36049644] - Revert 'PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus' (Dongli Zhang) [Orabug: 36049644] [5.4.17-2136.326.4.el7] - Revert 'mmc: core: Capture correct oemid-bits for eMMC cards' (Dominique Martinet) - media: dvb-usb-v2: af9035: fix missing unlock (Hans Verkuil) - perf/core: Fix potential NULL deref (Peter Zijlstra) - i2c: aspeed: Fix i2c bus hang in slave read (Jian Zhang) - virtio-mmio: fix memory leak of vm_dev (Maximilian Heyne) - net/rds: Use proper peer port number even when not connected (Greg Jumper) [Orabug: 35065319] - Use inflight IO in io acct of high latency devices (Gulam Mohamed) [Orabug: 35475691] - nvmet-tcp: Fix a possible UAF in queue intialization setup (Sagi Grimberg) [Orabug: 36028026] {CVE-2023-5178} [5.4.17-2136.326.3.el7] - LTS tag: v5.4.259 (Sherry Yang) - xfrm6: fix inet6_dev refcount underflow problem (Zhang Changzhong) - Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name (Kees Cook) - Bluetooth: hci_sock: fix slab oob read in create_monitor_event (Edward AD) - phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins (Tony Lindgren) - phy: mapphone-mdm6600: Fix runtime PM for remove (Tony Lindgren) - phy: mapphone-mdm6600: Fix runtime disable on probe (Tony Lindgren) - ASoC: pxa: fix a memory leak in probe() (Dan Carpenter) - gpio: vf610: set value before the direction to avoid a glitch (Haibo Chen) - s390/pci: fix iommu bitmap allocation (Niklas Schnelle) - perf: Disallow mis-matched inherited group reads (Peter Zijlstra) - USB: serial: option: add Fibocom to DELL custom modem FM101R-GL (Puliang Lu) - USB: serial: option: add entry for Sierra EM9191 with new firmware (Benoit Monin) - USB: serial: option: add Telit LE910C4-WWX 0x1035 composition (Fabio Porcedda) - ACPI: irq: Fix incorrect return value in acpi_register_gsi() (Sunil V L) - Revert 'pinctrl: avoid unsafe code pattern in find_pinctrl()' (Andy Shevchenko) - mmc: core: Capture correct oemid-bits for eMMC cards (Avri Altman) - mmc: core: sdio: hold retuning if sdio in 1-bit mode (Haibo Chen) - mtd: physmap-core: Restore map_rom fallback (Geert Uytterhoeven) - mtd: spinand: micron: correct bitmask for ecc status (Martin Kurbanov) - mtd: rawnand: qcom: Unmap the right resource upon probe failure (Bibek Kumar Patro) - Bluetooth: hci_event: Fix using memcmp when comparing keys (Luiz Augusto von Dentz) - HID: multitouch: Add required quirk for Synaptics 0xcd7e device (Rahul Rameshbabu) - btrfs: fix some -Wmaybe-uninitialized warnings in ioctl.c (Josef Bacik) - drm: panel-orientation-quirks: Add quirk for One Mix 2S (Kai Uwe Broulik) - sky2: Make sure there is at least one frag_addr available (Kees Cook) - regulator/core: Revert 'fix kobject release warning and memory leak in regulator_register()' (Michal Miroslaw) - wifi: cfg80211: avoid leaking stack data into trace (Benjamin Berg) - wifi: mac80211: allow transmitting EAPOL frames with tainted key (Wen Gong) - Bluetooth: hci_core: Fix build warnings (Luiz Augusto von Dentz) - Bluetooth: Avoid redundant authentication (Ying Hsu) - HID: holtek: fix slab-out-of-bounds Write in holtek_kbd_input_event (Ma Ke) - tracing: relax trace_event_eval_update() execution with cond_resched() (Clement Leger) - ata: libata-eh: Fix compilation warning in ata_eh_link_report() (Damien Le Moal) - gpio: timberdale: Fix potential deadlock on &tgpio->lock (Chengfeng Ye) - overlayfs: set ctime when setting mtime and atime (Jeff Layton) - i2c: mux: Avoid potential false error message in i2c_mux_add_adapter (Heiner Kallweit) - btrfs: initialize start_slot in btrfs_log_prealloc_extents (Josef Bacik) - btrfs: return -EUCLEAN for delayed tree ref with a ref count not equals to 1 (Filipe Manana) - ARM: dts: ti: omap: Fix noisy serial with overrun-throttle-ms for mapphone (Tony Lindgren) - ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA (Hans de Goede) - ACPI: resource: Skip IRQ override on ASUS ExpertBook B1502CBA (Paul Menzel) - ACPI: resource: Skip IRQ override on Asus Expertbook B2402CBA (Tamim Khan) - ACPI: resource: Add Asus ExpertBook B2502 to Asus quirks (Hans de Goede) - ACPI: resource: Skip IRQ override on Asus Vivobook S5602ZA (Tamim Khan) - ACPI: resource: Add ASUS model S5402ZA to quirks (Kellen Renshaw) - ACPI: resource: Skip IRQ override on Asus Vivobook K3402ZA/K3502ZA (Tamim Khan) - ACPI: resources: Add DMI-based legacy IRQ override quirk (Hui Wang) - ACPI: Drop acpi_dev_irqresource_disabled() (John Garry) - resource: Add irqresource_disabled() (John Garry) - net: pktgen: Fix interface flags printing (Gavrilov Ilia) - netfilter: nft_set_rbtree: .deactivate fails if element has expired (Pablo Neira Ayuso) - neighbor: tracing: Move pin6 inside CONFIG_IPV6=y section (Geert Uytterhoeven) - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Pedro Tammela) - i40e: prevent crash on probe if hw registers have invalid values (Michal Schmidt) - net: usb: smsc95xx: Fix an error code in smsc95xx_reset() (Dan Carpenter) - ipv4: fib: annotate races around nh->nh_saddr_genid and nh->nh_saddr (Eric Dumazet) - tun: prevent negative ifindex (Eric Dumazet) - tcp: tsq: relax tcp_small_queue_check() when rtx queue contains a single skb (Eric Dumazet) - tcp: fix excessive TLP and RACK timeouts from HZ rounding (Neal Cardwell) - net: rfkill: gpio: prevent value glitch during probe (Josua Mayer) - net: ipv6: fix return value check in esp_remove_trailer (Ma Ke) - net: ipv4: fix return value check in esp_remove_trailer (Ma Ke) - xfrm: interface: use DEV_STATS_INC() (Eric Dumazet) - xfrm: fix a data-race in xfrm_gen_index() (Eric Dumazet) - qed: fix LL2 RX buffer allocation (Manish Chopra) - netfilter: nft_payload: fix wrong mac header matching (Florian Westphal) - KVM: x86: Mask LVTPC when handling a PMI (Jim Mattson) - regmap: fix NULL deref on lookup (Johan Hovold) - nfc: nci: fix possible NULL pointer dereference in send_acknowledge() (Krzysztof Kozlowski) - ice: fix over-shifted variable (Jesse Brandeburg) - Bluetooth: avoid memcmp() out of bounds warning (Arnd Bergmann) - Bluetooth: hci_event: Fix coding style (Luiz Augusto von Dentz) - Bluetooth: vhci: Fix race when opening vhci device (Arkadiusz Bokowy) - Bluetooth: Fix a refcnt underflow problem for hci_conn (Ziyang Xuan) - Bluetooth: Reject connection with the device which has same BD_ADDR (Lee, Chun-Yi) {CVE-2020-26555} - Bluetooth: hci_event: Ignore NULL link key (Lee, Chun-Yi) {CVE-2020-26555} - usb: hub: Guard against accesses to uninitialized BOS descriptors (Ricardo Canuelo) - Documentation: sysctl: align cells in second content column (Bagas Sanjaya) - dev_forward_skb: do not scrub skb mark within the same name space (Nicolas Dichtel) - ravb: Fix use-after-free issue in ravb_tx_timeout_work() (Yoshihiro Shimoda) - powerpc/64e: Fix wrong test in __ptep_test_and_clear_young() (Christophe Leroy) - powerpc/8xx: Fix pte_access_permitted() for PAGE_NONE (Christophe Leroy) - dmaengine: mediatek: Fix deadlock caused by synchronize_irq() (Duoming Zhou) - x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs (Borislav Petkov (AMD)) - usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call (Krishna Kurapati) - usb: gadget: udc-xilinx: replace memcpy with memcpy_toio (Piyush Mehta) - cgroup: Remove duplicates in cgroup v1 tasks file (Michal Koutny) - Input: xpad - add PXN V900 support (Matthias Berndt) - Input: psmouse - fix fast_reconnect function for PS/2 mode (Jeffery Miller) - Input: powermate - fix use-after-free in powermate_config_complete (Javier Carrasco) - ceph: fix incorrect revoked caps assert in ceph_fill_file_size() (Xiubo Li) - libceph: use kernel_connect() (Jordan Rife) - mcb: remove is_added flag from mcb_device struct (Jorge Sanjuan Garcia) - iio: pressure: ms5611: ms5611_prom_is_valid false negative bug (Alexander Zangerl) - iio: pressure: dps310: Adjust Timeout Settings (Lakshmi Yadlapati) - iio: pressure: bmp280: Fix NULL pointer exception (Phil Elwell) - usb: musb: Modify the 'HWVers' register address (Xingxing Luo) - usb: musb: Get the musb_qh poniter after musb_giveback (Xingxing Luo) - usb: dwc3: Soft reset phy on probe for host (Thinh Nguyen) - net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read (Javier Carrasco) - usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer (Wesley Cheng) - dmaengine: stm32-mdma: abort resume if no ongoing transfer (Amelie Delaunay) - workqueue: Override implicit ordered attribute in workqueue_apply_unbound_cpumask() (Waiman Long) - nfc: nci: assert requested protocol is valid (Jeremy Cline) - net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (Eric Dumazet) - ixgbe: fix crash with empty VF macvlan list (Dan Carpenter) - drm/vmwgfx: fix typo of sizeof argument (Konstantin Meskhidze) - xen-netback: use default TX queue size for vifs (Roger Pau Monne) - mlxsw: fix mlxsw_sp2_nve_vxlan_learning_set() return type (Dan Carpenter) - ieee802154: ca8210: Fix a potential UAF in ca8210_probe (Dinghao Liu) - ravb: Fix up dma_free_coherent() call in ravb_remove() (Yoshihiro Shimoda) - drm/msm/dsi: skip the wait for video mode done if not applicable (Abhinav Kumar) - drm: etvnaviv: fix bad backport leading to warning (Martin Fuzzey) - quota: Fix slow quotaoff (Jan Kara) - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (Hans de Goede) - pwm: hibvt: Explicitly set .polarity in .get_state() (Uwe Kleine-Konig) - lib/test_meminit: fix off-by-one error in test_pages() (Greg Kroah-Hartman) - RDMA/cxgb4: Check skb value for failure to allocate (Artem Chernyshev) - LTS tag: v5.4.258 (Sherry Yang) - xen/events: replace evtchn_rwlock with RCU (Juergen Gross) {CVE-2023-34324} - ima: rework CONFIG_IMA dependency block (Arnd Bergmann) - NFS: Fix a race in __nfs_list_for_each_server() (Trond Myklebust) - parisc: Restore __ldcw_align for PA-RISC 2.0 processors (John David Anglin) - RDMA/mlx5: Fix NULL string error (Shay Drory) - RDMA/siw: Fix connection failure handling (Bernard Metzler) - RDMA/uverbs: Fix typo of sizeof argument (Konstantin Meskhidze) - RDMA/cma: Fix truncation compilation warning in make_cma_ports (Leon Romanovsky) - gpio: pxa: disable pinctrl calls for MMP_GPIO (Duje Mihanovic) - gpio: aspeed: fix the GPIO number passed to pinctrl_gpio_set_config() (Bartosz Golaszewski) - IB/mlx4: Fix the size of a buffer in add_port_entries() (Christophe JAILLET) - RDMA/core: Require admin capabilities to set system parameters (Leon Romanovsky) - cpupower: add Makefile dependencies for install targets (Ivan Babrou) - sctp: update hb timer immediately after users change hb_interval (Xin Long) - sctp: update transport state when processing a dupcook packet (Xin Long) - tcp: fix delayed ACKs for MSS boundary condition (Neal Cardwell) - tcp: fix quick-ack counting to count actual ACKs of new data (Neal Cardwell) - net: stmmac: dwmac-stm32: fix resume on STM32 MCU (Ben Wolsieffer) - netfilter: handle the connecting collision properly in nf_conntrack_proto_sctp (Xin Long) - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Shigeru Yoshida) - ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data() (David Howells) - net: fix possible store tearing in neigh_periodic_work() (Eric Dumazet) - modpost: add missing else to the 'of' check (Mauricio Faria de Oliveira) - NFSv4: Fix a nfs4_state_manager() race (Trond Myklebust) - NFS: Add a helper nfs_client_for_each_server() (Trond Myklebust) - NFS4: Trace state recovery operation (Chuck Lever) - regmap: rbtree: Fix wrong register marked as in-cache when creating new node (Richard Fitzgerald) - wifi: mt76: mt76x02: fix MT76x0 external LNA gain handling (Felix Fietkau) - drivers/net: process the result of hdlc_open() and add call of hdlc_close() in uhdlc_close() (Alexandra Diupina) - wifi: iwlwifi: dbg_ini: fix structure packing (Arnd Bergmann) - ubi: Refuse attaching if mtd's erasesize is 0 (Zhihao Cheng) - net: prevent rewrite of msg_name in sock_sendmsg() (Jordan Rife) - wifi: mwifiex: Fix tlv_buf_left calculation (Gustavo A. R. Silva) - qed/red_ll2: Fix undefined behavior bug in struct qed_ll2_info (Gustavo A. R. Silva) - scsi: zfcp: Fix a double put in zfcp_port_enqueue() (Dinghao Liu) - fs: binfmt_elf_efpic: fix personality for ELF-FDPIC (Greg Ungerer) - ata: libata-sata: increase PMP SRST timeout to 10s (Matthias Schiffer) - ata: libata-core: Do not register PM operations for SAS ports (Damien Le Moal) - ata: libata-core: Fix port and device removal (Damien Le Moal) - ata: libata-core: Fix ata_port_request_pm() locking (Damien Le Moal) - net: thunderbolt: Fix TCPv6 GSO checksum calculation (Mika Westerberg) - btrfs: properly report 0 avail for very full file systems (Josef Bacik) - i2c: i801: unregister tco_pdev in i801_probe() error path (Heiner Kallweit) - ata: libata-scsi: ignore reserved bits for REPORT SUPPORTED OPERATION CODES (Niklas Cassel) - ALSA: hda: Disable power save for solving pop issue on Lenovo ThinkCentre M70q (Kailang Yang) - nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() (Pan Bian) - serial: 8250_port: Check IRQ data before use (Andy Shevchenko) - Smack:- Use overlay inode label in smack_inode_copy_up() (Vishal Goel) - smack: Retrieve transmuting information in smack_inode_getsecurity() (Roberto Sassu) - smack: Record transmuting in smk_transmuted (Roberto Sassu) - i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) - i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) - i40e: improve locking of mac_filter_hash (Stefan Assmann) - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Mika Westerberg) - watchdog: iTCO_wdt: No need to stop the timer in probe (Mika Westerberg) - nvme-pci: do not set the NUMA node of device if it has none (Pratyush Yadav) - fbdev/sh7760fb: Depend on FB=y (Thomas Zimmermann) - ncsi: Propagate carrier gain/loss events to the NCSI controller (Johnathan Mantey) - powerpc/watchpoints: Annotate atomic context in more places (Benjamin Gray) - bpf: Clarify error expectations from bpf_clone_redirect (Stanislav Fomichev) - spi: nxp-fspi: reset the FLSHxCR1 registers (Han Xu) - ata: libata-eh: do not clear ATA_PFLAG_EH_PENDING in ata_eh_reset() (Niklas Cassel) - ring-buffer: Avoid softlockup in ring_buffer_resize() (Zheng Yejian) - selftests/ftrace: Correctly enable event in instance-event.tc (Zheng Yejian) - parisc: irq: Make irq_stack_union static to avoid sparse warning (Helge Deller) - parisc: drivers: Fix sparse warning (Helge Deller) - parisc: iosapic.c: Fix sparse warnings (Helge Deller) - parisc: sba: Fix compile warning wrt list of SBA devices (Helge Deller) - gpio: pmic-eic-sprd: Add can_sleep flag for PMIC EIC chip (Wenhua Lin) - xtensa: boot/lib: fix function prototypes (Max Filippov) - xtensa: boot: don't add include-dirs (Randy Dunlap) - xtensa: iss/network: make functions static (Randy Dunlap) - xtensa: add default definition for XCHAL_HAVE_DIV32 (Max Filippov) - bus: ti-sysc: Fix SYSC_QUIRK_SWSUP_SIDLE_ACT handling for uart wake-up (Tony Lindgren) - ARM: dts: ti: omap: motorola-mapphone: Fix abe_clkctrl warning on boot (Tony Lindgren) - clk: tegra: fix error return case for recalc_rate (Timo Alho) - ata: libata: disallow dev-initiated LPM transitions to unsupported states (Niklas Cassel) - drm/amd/display: prevent potential division by zero errors (Hamza Mahfooz) - drm/amd/display: Fix LFC multiplier changing erratically (Anthony Koo) - drm/amd/display: Reinstate LFC optimization (Amanda Liu) - scsi: qla2xxx: Fix deletion race condition (Quinn Tran) - Input: i8042 - add quirk for TUXEDO Gemini 17 Gen1/Clevo PD70PN (Werner Sembach) - i2c: mux: demux-pinctrl: check the return value of devm_kstrdup() (Xiaoke Wang) - gpio: tb10x: Fix an error handling path in tb10x_gpio_probe() (Christophe JAILLET) - team: fix null-ptr-deref when team device type is changed (Ziyang Xuan) - net: bridge: use DEV_STATS_INC() (Eric Dumazet) - net: hns3: add 5ms delay before clear firmware reset irq source (Jie Wang) - powerpc/perf/hv-24x7: Update domain value check (Kajol Jain) - ipv4: fix null-deref in ipv4_link_failure (Kyle Zeng) - i40e: Fix VF VLAN offloading when port VLAN is configured (Ivan Vecera) - i40e: Fix warning message and call stack during rmmod i40e driver (Karen Sornek) - ASoC: imx-audmix: Fix return error with devm_clk_get() (Shengjiu Wang) - selftests: tls: swap the TX and RX sockets in some tests (Sabrina Dubroca) - selftests/tls: Add {} to avoid static checker warning (Kees Cook) - bpf: Avoid deadlock when using queue and stack maps from NMI (Toke Hoiland-Jorgensen) - netfilter: nf_tables: disallow element removal on anonymous sets (Pablo Neira Ayuso) - ASoC: meson: spdifin: start hw on dai probe (Jerome Brunet) - ext4: do not let fstrim block system suspend (Jan Kara) - ext4: move setting of trimmed bit into ext4_try_to_trim_range() (Jan Kara) - ext4: replace the traditional ternary conditional operator with with max()/min() (Kemeng Shi) - ext4: mark group as trimmed only if it was fully scanned (Dmitry Monakhov) - ext4: change s_last_trim_minblks type to unsigned long (Lukas Czerner) - ext4: scope ret locally in ext4_try_to_trim_range() (Lukas Bulwahn) - ext4: add new helper interface ext4_try_to_trim_range() (Wang Jianchao) - ext4: remove the 'group' parameter of ext4_trim_extent (Wang Jianchao) - ata: libahci: clear pending interrupt status (Szuying Chen) - tracing: Increase trace array ref count on enable and filter files (Steven Rostedt (Google)) - SUNRPC: Mark the cred for revalidation if the server rejects it (Trond Myklebust) - NFS/pNFS: Report EINVAL errors from connect() to the server (Trond Myklebust) [5.4.17-2136.326.2.el7] - mm/memcg: optimize memory.numa_stat like memory.stat (Shakeel Butt) [Orabug: 35879962] [5.4.17-2136.326.1.el7] - mm: fix munmap() of reserved va ranges (Anthony Yznaga) [Orabug: 35843809] - mm: fix mmap() of reserved va ranges (Anthony Yznaga) [Orabug: 35843809] - mm: reinstall placeholder mappings before downgrading mmap lock (Anthony Yznaga) [Orabug: 35843809] - mm: mapping over a reserved va range may unmap twice (Anthony Yznaga) [Orabug: 35843809] - mm: fix update of total_vm for reserved va placeholders (Anthony Yznaga) [Orabug: 35843809] - mm: enable merging of reserved va placeholders (Anthony Yznaga) [Orabug: 35843809] - rds: Provision to allow all trace points at module load time (Arumugam Kolappan) [Orabug: 35916078] - rds/ib: Preserve dest qp num in the connect request (Arumugam Kolappan) [Orabug: 35926165] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-5178 cpe:/a:oracle:linux:7::UEKR6 Oracle Linux 8 [5.4.17-2136.326.6.el8] - Revert 'md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d' (Junxiao Bi) [Orabug: 35914789] - md: bypass block throttle for superblock update (Junxiao Bi) [Orabug: 35914789] [5.4.17-2136.326.5.el8] - Revert 'tracing: Increase trace array ref count on enable and filter files' (Sherry Yang) [Orabug: 36059945] - xen/blkback: Force flush and secure discard support flags (Boris Ostrovsky) [Orabug: 36050498] - Revert 'PCI: acpiphp: Reassign resources on bridge if necessary' (Dongli Zhang) [Orabug: 36049644] - Revert 'PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus' (Dongli Zhang) [Orabug: 36049644] [5.4.17-2136.326.4.el8] - Revert 'mmc: core: Capture correct oemid-bits for eMMC cards' (Dominique Martinet) - media: dvb-usb-v2: af9035: fix missing unlock (Hans Verkuil) - perf/core: Fix potential NULL deref (Peter Zijlstra) - i2c: aspeed: Fix i2c bus hang in slave read (Jian Zhang) - virtio-mmio: fix memory leak of vm_dev (Maximilian Heyne) - net/rds: Use proper peer port number even when not connected (Greg Jumper) [Orabug: 35065319] - Use inflight IO in io acct of high latency devices (Gulam Mohamed) [Orabug: 35475691] - nvmet-tcp: Fix a possible UAF in queue intialization setup (Sagi Grimberg) [Orabug: 36028026] {CVE-2023-5178} [5.4.17-2136.326.3.el8] - LTS tag: v5.4.259 (Sherry Yang) - xfrm6: fix inet6_dev refcount underflow problem (Zhang Changzhong) - Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name (Kees Cook) - Bluetooth: hci_sock: fix slab oob read in create_monitor_event (Edward AD) - phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins (Tony Lindgren) - phy: mapphone-mdm6600: Fix runtime PM for remove (Tony Lindgren) - phy: mapphone-mdm6600: Fix runtime disable on probe (Tony Lindgren) - ASoC: pxa: fix a memory leak in probe() (Dan Carpenter) - gpio: vf610: set value before the direction to avoid a glitch (Haibo Chen) - s390/pci: fix iommu bitmap allocation (Niklas Schnelle) - perf: Disallow mis-matched inherited group reads (Peter Zijlstra) - USB: serial: option: add Fibocom to DELL custom modem FM101R-GL (Puliang Lu) - USB: serial: option: add entry for Sierra EM9191 with new firmware (Benoit Monin) - USB: serial: option: add Telit LE910C4-WWX 0x1035 composition (Fabio Porcedda) - ACPI: irq: Fix incorrect return value in acpi_register_gsi() (Sunil V L) - Revert 'pinctrl: avoid unsafe code pattern in find_pinctrl()' (Andy Shevchenko) - mmc: core: Capture correct oemid-bits for eMMC cards (Avri Altman) - mmc: core: sdio: hold retuning if sdio in 1-bit mode (Haibo Chen) - mtd: physmap-core: Restore map_rom fallback (Geert Uytterhoeven) - mtd: spinand: micron: correct bitmask for ecc status (Martin Kurbanov) - mtd: rawnand: qcom: Unmap the right resource upon probe failure (Bibek Kumar Patro) - Bluetooth: hci_event: Fix using memcmp when comparing keys (Luiz Augusto von Dentz) - HID: multitouch: Add required quirk for Synaptics 0xcd7e device (Rahul Rameshbabu) - btrfs: fix some -Wmaybe-uninitialized warnings in ioctl.c (Josef Bacik) - drm: panel-orientation-quirks: Add quirk for One Mix 2S (Kai Uwe Broulik) - sky2: Make sure there is at least one frag_addr available (Kees Cook) - regulator/core: Revert 'fix kobject release warning and memory leak in regulator_register()' (Michal Miroslaw) - wifi: cfg80211: avoid leaking stack data into trace (Benjamin Berg) - wifi: mac80211: allow transmitting EAPOL frames with tainted key (Wen Gong) - Bluetooth: hci_core: Fix build warnings (Luiz Augusto von Dentz) - Bluetooth: Avoid redundant authentication (Ying Hsu) - HID: holtek: fix slab-out-of-bounds Write in holtek_kbd_input_event (Ma Ke) - tracing: relax trace_event_eval_update() execution with cond_resched() (Clement Leger) - ata: libata-eh: Fix compilation warning in ata_eh_link_report() (Damien Le Moal) - gpio: timberdale: Fix potential deadlock on &tgpio->lock (Chengfeng Ye) - overlayfs: set ctime when setting mtime and atime (Jeff Layton) - i2c: mux: Avoid potential false error message in i2c_mux_add_adapter (Heiner Kallweit) - btrfs: initialize start_slot in btrfs_log_prealloc_extents (Josef Bacik) - btrfs: return -EUCLEAN for delayed tree ref with a ref count not equals to 1 (Filipe Manana) - ARM: dts: ti: omap: Fix noisy serial with overrun-throttle-ms for mapphone (Tony Lindgren) - ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA (Hans de Goede) - ACPI: resource: Skip IRQ override on ASUS ExpertBook B1502CBA (Paul Menzel) - ACPI: resource: Skip IRQ override on Asus Expertbook B2402CBA (Tamim Khan) - ACPI: resource: Add Asus ExpertBook B2502 to Asus quirks (Hans de Goede) - ACPI: resource: Skip IRQ override on Asus Vivobook S5602ZA (Tamim Khan) - ACPI: resource: Add ASUS model S5402ZA to quirks (Kellen Renshaw) - ACPI: resource: Skip IRQ override on Asus Vivobook K3402ZA/K3502ZA (Tamim Khan) - ACPI: resources: Add DMI-based legacy IRQ override quirk (Hui Wang) - ACPI: Drop acpi_dev_irqresource_disabled() (John Garry) - resource: Add irqresource_disabled() (John Garry) - net: pktgen: Fix interface flags printing (Gavrilov Ilia) - netfilter: nft_set_rbtree: .deactivate fails if element has expired (Pablo Neira Ayuso) - neighbor: tracing: Move pin6 inside CONFIG_IPV6=y section (Geert Uytterhoeven) - net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve (Pedro Tammela) - i40e: prevent crash on probe if hw registers have invalid values (Michal Schmidt) - net: usb: smsc95xx: Fix an error code in smsc95xx_reset() (Dan Carpenter) - ipv4: fib: annotate races around nh->nh_saddr_genid and nh->nh_saddr (Eric Dumazet) - tun: prevent negative ifindex (Eric Dumazet) - tcp: tsq: relax tcp_small_queue_check() when rtx queue contains a single skb (Eric Dumazet) - tcp: fix excessive TLP and RACK timeouts from HZ rounding (Neal Cardwell) - net: rfkill: gpio: prevent value glitch during probe (Josua Mayer) - net: ipv6: fix return value check in esp_remove_trailer (Ma Ke) - net: ipv4: fix return value check in esp_remove_trailer (Ma Ke) - xfrm: interface: use DEV_STATS_INC() (Eric Dumazet) - xfrm: fix a data-race in xfrm_gen_index() (Eric Dumazet) - qed: fix LL2 RX buffer allocation (Manish Chopra) - netfilter: nft_payload: fix wrong mac header matching (Florian Westphal) - KVM: x86: Mask LVTPC when handling a PMI (Jim Mattson) - regmap: fix NULL deref on lookup (Johan Hovold) - nfc: nci: fix possible NULL pointer dereference in send_acknowledge() (Krzysztof Kozlowski) - ice: fix over-shifted variable (Jesse Brandeburg) - Bluetooth: avoid memcmp() out of bounds warning (Arnd Bergmann) - Bluetooth: hci_event: Fix coding style (Luiz Augusto von Dentz) - Bluetooth: vhci: Fix race when opening vhci device (Arkadiusz Bokowy) - Bluetooth: Fix a refcnt underflow problem for hci_conn (Ziyang Xuan) - Bluetooth: Reject connection with the device which has same BD_ADDR (Lee, Chun-Yi) {CVE-2020-26555} - Bluetooth: hci_event: Ignore NULL link key (Lee, Chun-Yi) {CVE-2020-26555} - usb: hub: Guard against accesses to uninitialized BOS descriptors (Ricardo Canuelo) - Documentation: sysctl: align cells in second content column (Bagas Sanjaya) - dev_forward_skb: do not scrub skb mark within the same name space (Nicolas Dichtel) - ravb: Fix use-after-free issue in ravb_tx_timeout_work() (Yoshihiro Shimoda) - powerpc/64e: Fix wrong test in __ptep_test_and_clear_young() (Christophe Leroy) - powerpc/8xx: Fix pte_access_permitted() for PAGE_NONE (Christophe Leroy) - dmaengine: mediatek: Fix deadlock caused by synchronize_irq() (Duoming Zhou) - x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs (Borislav Petkov (AMD)) - usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call (Krishna Kurapati) - usb: gadget: udc-xilinx: replace memcpy with memcpy_toio (Piyush Mehta) - cgroup: Remove duplicates in cgroup v1 tasks file (Michal Koutny) - Input: xpad - add PXN V900 support (Matthias Berndt) - Input: psmouse - fix fast_reconnect function for PS/2 mode (Jeffery Miller) - Input: powermate - fix use-after-free in powermate_config_complete (Javier Carrasco) - ceph: fix incorrect revoked caps assert in ceph_fill_file_size() (Xiubo Li) - libceph: use kernel_connect() (Jordan Rife) - mcb: remove is_added flag from mcb_device struct (Jorge Sanjuan Garcia) - iio: pressure: ms5611: ms5611_prom_is_valid false negative bug (Alexander Zangerl) - iio: pressure: dps310: Adjust Timeout Settings (Lakshmi Yadlapati) - iio: pressure: bmp280: Fix NULL pointer exception (Phil Elwell) - usb: musb: Modify the 'HWVers' register address (Xingxing Luo) - usb: musb: Get the musb_qh poniter after musb_giveback (Xingxing Luo) - usb: dwc3: Soft reset phy on probe for host (Thinh Nguyen) - net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read (Javier Carrasco) - usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer (Wesley Cheng) - dmaengine: stm32-mdma: abort resume if no ongoing transfer (Amelie Delaunay) - workqueue: Override implicit ordered attribute in workqueue_apply_unbound_cpumask() (Waiman Long) - nfc: nci: assert requested protocol is valid (Jeremy Cline) - net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() (Eric Dumazet) - ixgbe: fix crash with empty VF macvlan list (Dan Carpenter) - drm/vmwgfx: fix typo of sizeof argument (Konstantin Meskhidze) - xen-netback: use default TX queue size for vifs (Roger Pau Monne) - mlxsw: fix mlxsw_sp2_nve_vxlan_learning_set() return type (Dan Carpenter) - ieee802154: ca8210: Fix a potential UAF in ca8210_probe (Dinghao Liu) - ravb: Fix up dma_free_coherent() call in ravb_remove() (Yoshihiro Shimoda) - drm/msm/dsi: skip the wait for video mode done if not applicable (Abhinav Kumar) - drm: etvnaviv: fix bad backport leading to warning (Martin Fuzzey) - quota: Fix slow quotaoff (Jan Kara) - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (Hans de Goede) - pwm: hibvt: Explicitly set .polarity in .get_state() (Uwe Kleine-Konig) - lib/test_meminit: fix off-by-one error in test_pages() (Greg Kroah-Hartman) - RDMA/cxgb4: Check skb value for failure to allocate (Artem Chernyshev) - LTS tag: v5.4.258 (Sherry Yang) - xen/events: replace evtchn_rwlock with RCU (Juergen Gross) {CVE-2023-34324} - ima: rework CONFIG_IMA dependency block (Arnd Bergmann) - NFS: Fix a race in __nfs_list_for_each_server() (Trond Myklebust) - parisc: Restore __ldcw_align for PA-RISC 2.0 processors (John David Anglin) - RDMA/mlx5: Fix NULL string error (Shay Drory) - RDMA/siw: Fix connection failure handling (Bernard Metzler) - RDMA/uverbs: Fix typo of sizeof argument (Konstantin Meskhidze) - RDMA/cma: Fix truncation compilation warning in make_cma_ports (Leon Romanovsky) - gpio: pxa: disable pinctrl calls for MMP_GPIO (Duje Mihanovic) - gpio: aspeed: fix the GPIO number passed to pinctrl_gpio_set_config() (Bartosz Golaszewski) - IB/mlx4: Fix the size of a buffer in add_port_entries() (Christophe JAILLET) - RDMA/core: Require admin capabilities to set system parameters (Leon Romanovsky) - cpupower: add Makefile dependencies for install targets (Ivan Babrou) - sctp: update hb timer immediately after users change hb_interval (Xin Long) - sctp: update transport state when processing a dupcook packet (Xin Long) - tcp: fix delayed ACKs for MSS boundary condition (Neal Cardwell) - tcp: fix quick-ack counting to count actual ACKs of new data (Neal Cardwell) - net: stmmac: dwmac-stm32: fix resume on STM32 MCU (Ben Wolsieffer) - netfilter: handle the connecting collision properly in nf_conntrack_proto_sctp (Xin Long) - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Shigeru Yoshida) - ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data() (David Howells) - net: fix possible store tearing in neigh_periodic_work() (Eric Dumazet) - modpost: add missing else to the 'of' check (Mauricio Faria de Oliveira) - NFSv4: Fix a nfs4_state_manager() race (Trond Myklebust) - NFS: Add a helper nfs_client_for_each_server() (Trond Myklebust) - NFS4: Trace state recovery operation (Chuck Lever) - regmap: rbtree: Fix wrong register marked as in-cache when creating new node (Richard Fitzgerald) - wifi: mt76: mt76x02: fix MT76x0 external LNA gain handling (Felix Fietkau) - drivers/net: process the result of hdlc_open() and add call of hdlc_close() in uhdlc_close() (Alexandra Diupina) - wifi: iwlwifi: dbg_ini: fix structure packing (Arnd Bergmann) - ubi: Refuse attaching if mtd's erasesize is 0 (Zhihao Cheng) - net: prevent rewrite of msg_name in sock_sendmsg() (Jordan Rife) - wifi: mwifiex: Fix tlv_buf_left calculation (Gustavo A. R. Silva) - qed/red_ll2: Fix undefined behavior bug in struct qed_ll2_info (Gustavo A. R. Silva) - scsi: zfcp: Fix a double put in zfcp_port_enqueue() (Dinghao Liu) - fs: binfmt_elf_efpic: fix personality for ELF-FDPIC (Greg Ungerer) - ata: libata-sata: increase PMP SRST timeout to 10s (Matthias Schiffer) - ata: libata-core: Do not register PM operations for SAS ports (Damien Le Moal) - ata: libata-core: Fix port and device removal (Damien Le Moal) - ata: libata-core: Fix ata_port_request_pm() locking (Damien Le Moal) - net: thunderbolt: Fix TCPv6 GSO checksum calculation (Mika Westerberg) - btrfs: properly report 0 avail for very full file systems (Josef Bacik) - i2c: i801: unregister tco_pdev in i801_probe() error path (Heiner Kallweit) - ata: libata-scsi: ignore reserved bits for REPORT SUPPORTED OPERATION CODES (Niklas Cassel) - ALSA: hda: Disable power save for solving pop issue on Lenovo ThinkCentre M70q (Kailang Yang) - nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() (Pan Bian) - serial: 8250_port: Check IRQ data before use (Andy Shevchenko) - Smack:- Use overlay inode label in smack_inode_copy_up() (Vishal Goel) - smack: Retrieve transmuting information in smack_inode_getsecurity() (Roberto Sassu) - smack: Record transmuting in smk_transmuted (Roberto Sassu) - i40e: fix return of uninitialized aq_ret in i40e_set_vsi_promisc (Stefan Assmann) - i40e: always propagate error value in i40e_set_vsi_promisc() (Stefan Assmann) - i40e: improve locking of mac_filter_hash (Stefan Assmann) - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Mika Westerberg) - watchdog: iTCO_wdt: No need to stop the timer in probe (Mika Westerberg) - nvme-pci: do not set the NUMA node of device if it has none (Pratyush Yadav) - fbdev/sh7760fb: Depend on FB=y (Thomas Zimmermann) - ncsi: Propagate carrier gain/loss events to the NCSI controller (Johnathan Mantey) - powerpc/watchpoints: Annotate atomic context in more places (Benjamin Gray) - bpf: Clarify error expectations from bpf_clone_redirect (Stanislav Fomichev) - spi: nxp-fspi: reset the FLSHxCR1 registers (Han Xu) - ata: libata-eh: do not clear ATA_PFLAG_EH_PENDING in ata_eh_reset() (Niklas Cassel) - ring-buffer: Avoid softlockup in ring_buffer_resize() (Zheng Yejian) - selftests/ftrace: Correctly enable event in instance-event.tc (Zheng Yejian) - parisc: irq: Make irq_stack_union static to avoid sparse warning (Helge Deller) - parisc: drivers: Fix sparse warning (Helge Deller) - parisc: iosapic.c: Fix sparse warnings (Helge Deller) - parisc: sba: Fix compile warning wrt list of SBA devices (Helge Deller) - gpio: pmic-eic-sprd: Add can_sleep flag for PMIC EIC chip (Wenhua Lin) - xtensa: boot/lib: fix function prototypes (Max Filippov) - xtensa: boot: don't add include-dirs (Randy Dunlap) - xtensa: iss/network: make functions static (Randy Dunlap) - xtensa: add default definition for XCHAL_HAVE_DIV32 (Max Filippov) - bus: ti-sysc: Fix SYSC_QUIRK_SWSUP_SIDLE_ACT handling for uart wake-up (Tony Lindgren) - ARM: dts: ti: omap: motorola-mapphone: Fix abe_clkctrl warning on boot (Tony Lindgren) - clk: tegra: fix error return case for recalc_rate (Timo Alho) - ata: libata: disallow dev-initiated LPM transitions to unsupported states (Niklas Cassel) - drm/amd/display: prevent potential division by zero errors (Hamza Mahfooz) - drm/amd/display: Fix LFC multiplier changing erratically (Anthony Koo) - drm/amd/display: Reinstate LFC optimization (Amanda Liu) - scsi: qla2xxx: Fix deletion race condition (Quinn Tran) - Input: i8042 - add quirk for TUXEDO Gemini 17 Gen1/Clevo PD70PN (Werner Sembach) - i2c: mux: demux-pinctrl: check the return value of devm_kstrdup() (Xiaoke Wang) - gpio: tb10x: Fix an error handling path in tb10x_gpio_probe() (Christophe JAILLET) - team: fix null-ptr-deref when team device type is changed (Ziyang Xuan) - net: bridge: use DEV_STATS_INC() (Eric Dumazet) - net: hns3: add 5ms delay before clear firmware reset irq source (Jie Wang) - powerpc/perf/hv-24x7: Update domain value check (Kajol Jain) - ipv4: fix null-deref in ipv4_link_failure (Kyle Zeng) - i40e: Fix VF VLAN offloading when port VLAN is configured (Ivan Vecera) - i40e: Fix warning message and call stack during rmmod i40e driver (Karen Sornek) - ASoC: imx-audmix: Fix return error with devm_clk_get() (Shengjiu Wang) - selftests: tls: swap the TX and RX sockets in some tests (Sabrina Dubroca) - selftests/tls: Add {} to avoid static checker warning (Kees Cook) - bpf: Avoid deadlock when using queue and stack maps from NMI (Toke Hoiland-Jorgensen) - netfilter: nf_tables: disallow element removal on anonymous sets (Pablo Neira Ayuso) - ASoC: meson: spdifin: start hw on dai probe (Jerome Brunet) - ext4: do not let fstrim block system suspend (Jan Kara) - ext4: move setting of trimmed bit into ext4_try_to_trim_range() (Jan Kara) - ext4: replace the traditional ternary conditional operator with with max()/min() (Kemeng Shi) - ext4: mark group as trimmed only if it was fully scanned (Dmitry Monakhov) - ext4: change s_last_trim_minblks type to unsigned long (Lukas Czerner) - ext4: scope ret locally in ext4_try_to_trim_range() (Lukas Bulwahn) - ext4: add new helper interface ext4_try_to_trim_range() (Wang Jianchao) - ext4: remove the 'group' parameter of ext4_trim_extent (Wang Jianchao) - ata: libahci: clear pending interrupt status (Szuying Chen) - tracing: Increase trace array ref count on enable and filter files (Steven Rostedt (Google)) - SUNRPC: Mark the cred for revalidation if the server rejects it (Trond Myklebust) - NFS/pNFS: Report EINVAL errors from connect() to the server (Trond Myklebust) - mm/memcg: optimize memory.numa_stat like memory.stat (Shakeel Butt) [Orabug: 35879962] [5.4.17-2136.326.1.el8] - mm: fix munmap() of reserved va ranges (Anthony Yznaga) [Orabug: 35843809] - mm: fix mmap() of reserved va ranges (Anthony Yznaga) [Orabug: 35843809] - mm: reinstall placeholder mappings before downgrading mmap lock (Anthony Yznaga) [Orabug: 35843809] - mm: mapping over a reserved va range may unmap twice (Anthony Yznaga) [Orabug: 35843809] - mm: fix update of total_vm for reserved va placeholders (Anthony Yznaga) [Orabug: 35843809] - mm: enable merging of reserved va placeholders (Anthony Yznaga) [Orabug: 35843809] - rds: Provision to allow all trace points at module load time (Arumugam Kolappan) [Orabug: 35916078] - rds/ib: Preserve dest qp num in the connect request (Arumugam Kolappan) [Orabug: 35926165] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-5178 cpe:/a:oracle:linux:8::UEKR6 Oracle Linux 9 conmon [2.1.3-7] - Resolve CVE-2023-39325 [2.1.3-6] - Add ol8_baseos_latest, and ol9_baseos_latest, to Jenkinsfile [2.1.3-5] - Add systemd-devel as build requirement [2.1.3-4] - Add support ARM build cri-o [1.26.3-3] - Resolve CVE-2023-39325 [1.26.3-2] - Add support for ARM build cri-tools [1.26.1-3] - Resolve CVE-2023-39325 [1.26.1-2] - Add ARM build support etcd [3.5.9-2] - Bump up version [3.5.9-1] - Added Oracle specific build files flannel-cni-plugin [1.1.2-3] - Resolve CVE-2023-44487 and CVE-2023-39325 [1.1.2-2] - Add ARM build support helm [3.12.0-3] - address CVE-2023-44487 and CVE-2023-39325 [-] - Add support for ARM build istio [1.17.8-1] - Added Oracle specific files for 1.17.8-1 kata [1.12.1-14] - Updated to address CVE-2023-44487 and CVE-2023-39325 [1.12.1-13] - Rebuild kata to fix timestamp issue [1.12.1-12] - Add support for ARM build kata-agent [1.12.1-9] - Updated to address CVE-2023-44487 and CVE-2023-39325 [1.12.1-8] - Remove build_date global variable in kata-image specfile [1.12.1-7] - Add support for ARM build kata-image [1.12.1-9] - Updated to address CVE-2023-44487 and CVE-2023-39325 [1.12.1-8] - Remove build_date global variable in specfile [1.12.1-7] - Add support for ARM build kata-ksm-throttler [1.12.1-9] - Updated to address CVE-2023-44487 and CVE-2023-39325 [1.12.1-8] - Bump release inline with other kata packages for fixing timestamp issue [1.12.1-7] - Add support for ARM build kata-proxy [1.12.1-9] - Updated to address CVE-2023-44487 and CVE-2023-39325 [1.12.1-8] - Bump release inline with other kata packages for fixing timestamp issue [1.12.1-7] - Add support for ARM build kata-runtime [1.12.1-9] - Updated to address CVE-2023-44487 and CVE-2023-39325 [1.12.1-8] - Bump release inline with other kata packages for fixing timestamp issue [1.12.1-7] - Add support for ARM build kata-shim [1.12.1-9] - Updated to address CVE-2023-44487 and CVE-2023-39325 [1.12.1-8] - Bump release inline with other kata packages for fixing timestamp issue [1.12.1-7] - Add support for ARM build kubernetes [1.26.10-2] - Allow dashes DNS image [1.26.10-1] - Added Oracle specific build files for Kubernetes kubernetes-cni [1.1.2-3] - Resolve CVE-2023-44487 and CVE-2023-39325 [1.1.2-2] - Add support for ARM build kubernetes-cni-plugins [1.2.0-4] - Fix go.mod [1.2.0-3] - Resolve CVE-2023-44487 and CVE-2023-39325 [1.2.0-2] - Add support for ARM build [1.2.0-1] - Added Oracle specific build files for Kubernetes CNI Plugins kubevirt [0.58.0-4] - Updated to address CVE-2023-44487 and CVE-2023-39325 olcne [1.7.5-17] - Fix update issue from 1.6.x -> 1.7.5 [1.7.5-16] - Pass imagetag to the metallb tool that converts configmap to crs [1.7.5-15] - Fix metallb upgrade failure when proxy is needed [1.7.5-14] - Update conmon to 2.1.3-7 in scripts [1.7.5-13] - Update module-operator to address CVE-2023-44487, CVE-2023-39325 [1.7.5-12] - Update multus-cni 3.9.3 to address CVE-2023-44487 and CVE-2023-39325 [1.7.5-11] - Update multus-cni 4.0.1 to address CVE-2023-44487 and CVE-2023-39325 [1.7.5-10] - Update metallb 0.13.9 to address CVE-2023-44487 and CVE-2023-39325 [1.7.5-9] - Update externalip-webhook 1.0.0 to address CVE-2023-44487 and CVE-2023-39325 [1.7.5-8] - Update calico-3.25.0 and 3.25.1 to address CVE-2023-44487, CVE-2023-39325 [1.7.5-7] - Update rook-1.10.9 and 1.11.6 to address golang CVE-2023-44487, CVE-2023-39325 [1.7.5-6] - update configmap-registry to 1.28.0 and update olm 0.23.1 to address CVE-2023-44487 and CVE-2023-39325 [1.7.5-5] - Update Istio, Grafana, Prometheus, and Kubernetes-dashboard to address CVE's - CVE-2023-44487 - CVE-2023-39325 [1.7.5-4] - update helm 3.12.0 to Address CVE-2023-44487 and CVE-2023-39325 [1.7.5-3] - Update kubernetes and components to address golang CVE-2023-44487, CVE-2023-39325 [1.7.5-2] - Add olm 0.23.1 charts [1.7.5-1] - Update kubevirt 0.58.0 to address CVE-2023-44487 and CVE-2023-39325 yq [4.34.1-3] - address CVE-2023-44487 and CVE-2023-3932A [4.34.1-2] - Add support for ARM build IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-39325 CVE-2023-44487 cpe:/a:oracle:linux:9::olcne17 Oracle Linux 8 conmon [2.1.3-7] - Resolve CVE-2023-39325 [2.1.3-6] - Add ol8_baseos_latest, and ol9_baseos_latest, to Jenkinsfile [2.1.3-5] - Add systemd-devel as build requirement [2.1.3-4] - Add support ARM build cri-o [1.26.3-3] - Resolve CVE-2023-39325 [1.26.3-2] - Add support for ARM build cri-tools [1.26.1-3] - Resolve CVE-2023-39325 [1.26.1-2] - Add ARM build support etcd [3.5.9-2] - Bump up version [3.5.9-1] - Added Oracle specific build files flannel-cni-plugin [1.1.2-3] - Resolve CVE-2023-44487 and CVE-2023-39325 [1.1.2-2] - Add ARM build support helm [3.12.0-3] - address CVE-2023-44487 and CVE-2023-39325 [-] - Add support for ARM build istio [1.17.8-1] - Added Oracle specific files for 1.17.8-1 kata [1.12.1-14] - Updated to address CVE-2023-44487 and CVE-2023-39325 [1.12.1-13] - Rebuild kata to fix timestamp issue [1.12.1-12] - Add support for ARM build kata-agent [1.12.1-9] - Updated to address CVE-2023-44487 and CVE-2023-39325 [1.12.1-8] - Remove build_date global variable in kata-image specfile [1.12.1-7] - Add support for ARM build kata-image [1.12.1-9] - Updated to address CVE-2023-44487 and CVE-2023-39325 [1.12.1-8] - Remove build_date global variable in specfile [1.12.1-7] - Add support for ARM build kata-ksm-throttler [1.12.1-9] - Updated to address CVE-2023-44487 and CVE-2023-39325 [1.12.1-8] - Bump release inline with other kata packages for fixing timestamp issue [1.12.1-7] - Add support for ARM build kata-proxy [1.12.1-9] - Updated to address CVE-2023-44487 and CVE-2023-39325 [1.12.1-8] - Bump release inline with other kata packages for fixing timestamp issue [1.12.1-7] - Add support for ARM build kata-runtime [1.12.1-9] - Updated to address CVE-2023-44487 and CVE-2023-39325 [1.12.1-8] - Bump release inline with other kata packages for fixing timestamp issue [1.12.1-7] - Add support for ARM build kata-shim [1.12.1-9] - Updated to address CVE-2023-44487 and CVE-2023-39325 [1.12.1-8] - Bump release inline with other kata packages for fixing timestamp issue [1.12.1-7] - Add support for ARM build kubernetes [1.26.10-2] - Allow dashes DNS image [1.26.10-1] - Added Oracle specific build files for Kubernetes kubernetes-cni [1.1.2-3] - Resolve CVE-2023-44487 and CVE-2023-39325 [1.1.2-2] - Add support for ARM build kubernetes-cni-plugins [1.2.0-4] - Fix go.mod [1.2.0-3] - Resolve CVE-2023-44487 and CVE-2023-39325 [1.2.0-2] - Add support for ARM build kubevirt [0.58.0-4] - Updated to address CVE-2023-44487 and CVE-2023-39325 olcne [1.7.5-17] - Fix update issue from 1.6.x -> 1.7.5 [1.7.5-16] - Pass imagetag to the metallb tool that converts configmap to crs [1.7.5-15] - Fix metallb upgrade failure when proxy is needed [1.7.5-14] - Update conmon to 2.1.3-7 in scripts [1.7.5-13] - Update module-operator to address CVE-2023-44487, CVE-2023-39325 [1.7.5-12] - Update multus-cni 3.9.3 to address CVE-2023-44487 and CVE-2023-39325 [1.7.5-11] - Update multus-cni 4.0.1 to address CVE-2023-44487 and CVE-2023-39325 [1.7.5-10] - Update metallb 0.13.9 to address CVE-2023-44487 and CVE-2023-39325 [1.7.5-9] - Update externalip-webhook 1.0.0 to address CVE-2023-44487 and CVE-2023-39325 [1.7.5-8] - Update calico-3.25.0 and 3.25.1 to address CVE-2023-44487, CVE-2023-39325 [1.7.5-7] - Update rook-1.10.9 and 1.11.6 to address golang CVE-2023-44487, CVE-2023-39325 [1.7.5-6] - update configmap-registry to 1.28.0 and update olm 0.23.1 to address CVE-2023-44487 and CVE-2023-39325 [1.7.5-5] - Update Istio, Grafana, Prometheus, and Kubernetes-dashboard to address CVE's - CVE-2023-44487 - CVE-2023-39325 [1.7.5-4] - update helm 3.12.0 to Address CVE-2023-44487 and CVE-2023-39325 [1.7.5-3] - Update kubernetes and components to address golang CVE-2023-44487, CVE-2023-39325 [1.7.5-2] - Add olm 0.23.1 charts [1.7.5-1] - Update kubevirt 0.58.0 to address CVE-2023-44487 and CVE-2023-39325 yq [4.34.1-3] - address CVE-2023-44487 and CVE-2023-3932A [4.34.1-2] - Add support for ARM build IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-44487 CVE-2023-39325 cpe:/a:oracle:linux:8::olcne16 cpe:/a:oracle:linux:8::olcne17 Oracle Linux 7 [3.79.0-5] - fix CVE-2023-0767 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-0767 Oracle Linux 7 [102.9.0-3.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.9.0-3] - Update to 102.9.0 build2 [102.9.0-2] - removed disable-openh264-download [102.9.0-1] - Update to 102.9.0 build1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-25752 CVE-2023-28164 CVE-2023-25751 CVE-2023-28162 CVE-2023-28176 Oracle Linux 7 [1:1.0.2k-26] - Fixes CVE-2023-0286 X.400 address type confusion in X.509 GeneralName - Resolves: rhbz#2176790 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-0286 Oracle Linux 8 [102.9.0-3.0.1] - Updated homepages to use https [Orabug: 34648274] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.9.0-3] - Update to 102.9.0 build2 [102.9.0-2] - removed disable-openh264-download [102.9.0-1] - Update to 102.9.0 build1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-25751 CVE-2023-25752 CVE-2023-28162 CVE-2023-28176 CVE-2023-28164 Oracle Linux 9 [102.9.0-3.0.1] - Updated homepages to use https [Orabug: 34648274] [102.9.0-3] - Update to 102.9.0 build2 [102.9.0-2] - removed disable-openh264-download [102.9.0-1] - Update to 102.9.0 build1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-28164 CVE-2023-25751 CVE-2023-25752 CVE-2023-28176 CVE-2023-28162 Oracle Linux 9 [3.79.0-17] - fix consistency return errors. We shouldn't lock the FIPS token if the application asked for invalid DH parameters on on keygen. [3.79.0-16] - Add check for RSA PSS Salt required by FIPS - Update fips_algorithms.sh according to the review. [3.79.0-15] - Fix CVE-2023-0767 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-0767 Oracle Linux 7 [102.9.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [102.9.0-1] - Update to 102.9.0 build1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-25751 CVE-2023-28176 CVE-2023-25752 CVE-2023-28164 CVE-2023-28162 Oracle Linux 8 [102.9.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.9.0-1] - Update to 102.9.0 build1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-28162 CVE-2023-25751 CVE-2023-28176 CVE-2023-25752 CVE-2023-28164 Oracle Linux 8 [1:1.1.1k-9] - Fixed Timing Oracle in RSA Decryption Resolves: CVE-2022-4304 - Fixed Double free after calling PEM_read_bio_ex Resolves: CVE-2022-4450 - Fixed Use-after-free following BIO_new_NDEF Resolves: CVE-2023-0215 - Fixed X.400 address type confusion in X.509 GeneralName Resolves: CVE-2023-0286 [1:1.1.1k-8] - Fix no-ec build Resolves: rhbz#2071020 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-4304 CVE-2022-4450 CVE-2023-0215 CVE-2023-0286 Oracle Linux 9 [102.9.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.9.0-1] - Update to 102.9.0 build1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-25751 CVE-2023-28162 CVE-2023-25752 CVE-2023-28164 CVE-2023-28176 Oracle Linux 9 - [5.14.0-162.22.2_1.OL9] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5 - Remove nmap references from kernel (Mridula Shastry) [Orabug: 34313944] - Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535] [5.14.0-162.22.2_1] - tun: avoid double free in tun_free_netdev (Jon Maloy) [2156373] {CVE-2022-4744} [5.14.0-162.22.1_1] - ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (Jaroslav Kysela) [2163390 2125540] {CVE-2023-0266} [5.14.0-162.21.1_1] - s390/boot: add secure boot trailer (Tobias Huschle) [2151528 2141966] - s390/kexec: fix ipl report address for kdump (Tobias Huschle) [2166903 2161327] - s390/qeth: cache link_info for ethtool (Tobias Huschle) [2166304 2110436] - scsi: zfcp: Fix missing auto port scan and thus missing target ports (Tobias Huschle) [2127880 2121088] [5.14.0-162.20.1_1] - cgroup/cpuset: remove unreachable code (Waiman Long) [2161105 1946801] - kselftest/cgroup: Add cpuset v2 partition root state test (Waiman Long) [2161105 1946801] - cgroup/cpuset: Update description of cpuset.cpus.partition in cgroup-v2.rst (Waiman Long) [2161105 1946801] - cgroup/cpuset: Make partition invalid if cpumask change violates exclusivity rule (Waiman Long) [2161105 1946801] - cgroup/cpuset: Relocate a code block in validate_change() (Waiman Long) [2161105 1946801] - cgroup/cpuset: Show invalid partition reason string (Waiman Long) [2161105 1946801] - cgroup/cpuset: Add a new isolated cpus.partition type (Waiman Long) [2161105 1946801] - cgroup/cpuset: Relax constraints to partition & cpus changes (Waiman Long) [2161105 1946801] - cgroup/cpuset: Allow no-task partition to have empty cpuset.cpus.effective (Waiman Long) [2161105 1946801] - cgroup/cpuset: Miscellaneous cleanups & add helper functions (Waiman Long) [2161105 1946801] - cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset (Waiman Long) [2161105 1946801] - cpuset: convert 'allowed' in __cpuset_node_allowed() to be boolean (Waiman Long) [2161105 1946801] - cgroup/cpuset: Remove cpus_allowed/mems_allowed setup in cpuset_init_smp() (Waiman Long) [2161105 1946801] - cgroup: cleanup comments (Waiman Long) [2161105 1946801] - act_mirred: use the backlog for nested calls to mirred ingress (Davide Caratti) [2164655 2150278] {CVE-2022-4269} - net/sched: act_mirred: better wording on protection against excessive stack growth (Davide Caratti) [2164655 2150278] {CVE-2022-4269} - scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (Emanuele Giuseppe Esposito) [2170227 2150660] [5.14.0-162.19.1_1] - sched/core: Use kfree_rcu() in do_set_cpus_allowed() (Waiman Long) [2160614 2143847] - sched/core: Fix use-after-free bug in dup_user_cpus_ptr() (Waiman Long) [2160614 2143847] - sched: Always clear user_cpus_ptr in do_set_cpus_allowed() (Waiman Long) [2143766 2107354] - sched: Enforce user requested affinity (Waiman Long) [2143766 2107354] - sched: Always preserve the user requested cpumask (Waiman Long) [2143766 2107354] - sched: Introduce affinity_context (Waiman Long) [2143766 2107354] - sched: Add __releases annotations to affine_move_task() (Waiman Long) [2143766 2107354] - x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (Dean Nelson) [2168382 2122851] - x86/fpu: Exclude dynamic states from init_fpstate (Dean Nelson) [2168382 2122851] - x86/fpu: Fix the init_fpstate size check with the actual size (Dean Nelson) [2168382 2122851] - x86/fpu: Configure init_fpstate attributes orderly (Dean Nelson) [2168382 2122851] - x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (Dean Nelson) [2168382 2122851] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-4269 CVE-2022-4744 CVE-2023-0266 Oracle Linux 8 [1.12.0-9.3] - xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege Escalation Vulnerability Resolves: bz#2180304 [1.12.0-9.2] - Add sanity check when cleaning up keymap changes Resolves: bz#2169962 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-1393 Oracle Linux 8 [4.18.0-425.19.2_7.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3 - Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652] [4.18.0-425.19.2_7.gf5e8] - ovl: fail on invalid uid/gid mapping at copy up (Miklos Szeredi) [2165341 2165342] {CVE-2023-0386} [4.18.0-425.19.1_7] - s390/dasd: fix no record found for raw_track_access (Tobias Huschle) [2167776 2161270] - locking/rwsem: Disable preemption in all down_read*() and up_read() code paths (Waiman Long) [2170939 2162139] - locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath (Waiman Long) [2170939 2162139] - locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter (Waiman Long) [2170939 2162139] - locking/rwsem: Always try to wake waiters in out_nolock path (Waiman Long) [2170939 2162139] - locking/rwsem: No need to check for handoff bit if wait queue empty (Waiman Long) [2170939 2162139] - locking/rwsem: Make handoff bit handling more consistent (Waiman Long) [2170939 2162139] - locking/rwsem: Disable preemption while trying for rwsem lock (Waiman Long) [2170939 2162139] - locking/rwsem: Conditionally wake waiters in reader/writer slowpaths (Waiman Long) [2170939 2162139] (Waiman Long) [2170939 2162139] - locking/rwsem: Optimize down_read_trylock() under highly contended case (Waiman Long) [2170939 2162139] - locking/rwsem: Fix comments about reader optimistic lock stealing conditions (Waiman Long) [2170939 2162139] - locking/rwsem: Disable preemption for spinning region (Waiman Long) [2170939 2162139] - locking: Remove rcu_read_{,un}lock() for preempt_{dis,en}able() (Waiman Long) [2170939 2162139] - watchdog: fix UAF in reboot notifier handling in watchdog core code (Wander Lairson Costa) [2139770 2131308] - netfilter: nf_conntrack_irc: Tighten matching on DCC message (Wander Lairson Costa) [2139770 2131308] - ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (Jaroslav Kysela) [2163400 2163401] {CVE-2023-0266} - net/mlx5e: Fix enabling sriov while tc nic rules are offloaded (Amir Tzin) [2167647 2112925] - net/mlx5: E-Switch, pair only capable devices (Amir Tzin) [2167647 2112925] - net/mlx5: Fix mlx5_get_next_dev() peer device matching (Amir Tzin) [2167647 2112925] - net/mlx5: Lag, filter non compatible devices (Amir Tzin) [2167647 2112925] [4.18.0-425.18.1_7] - futex: Resend potentially swallowed owner death notification (Rafael Aquini) [2170054 2161526] [4.18.0-425.17.1_7] - net: mana: Add rmb after checking owner bits (Mohammed Gamal) [2173103 2139462] - net: mana: Add support of XDP_REDIRECT action (Mohammed Gamal) [2173103 2139462] - net: mana: Add the Linux MANA PF driver (Mohammed Gamal) [2173103 2139462] - ice: fix lost multicast packets in promisc mode (Ken Cox) [2172550 2138215] [4.18.0-425.16.1_7] - ipv6: fix panic when fib_lookup_arg->result is fib6_info (Jiri Benc) [2167602 2140599] - ceph: blocklist the kclient when receiving corrupted snap trace (Xiubo Li) [2168896 2162414] - ceph: move mount state enum to super.h (Xiubo Li) [2168896 2162414] - s390/kexec: fix ipl report address for kdump (Tobias Huschle) [2166296 2161328] - mm, compaction: fix fast_isolate_around() to stay within boundaries (Daniel Vacek) [2170576 2149309] - scsi: storvsc: Fix swiotlb bounce buffer leak in confidential VM (Emanuele Giuseppe Esposito) [2170228 2150659] - netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2165587 2158726] [4.18.0-425.15.1_7] - net/mlx5e: Fix use-after-free when reverting termination table (Amir Tzin) [2167640 2112927] - net/mlx5: Do not query pci info while pci disabled (Amir Tzin) [2167645 2129249] - x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (Dean Nelson) [2168384 2122850] - x86/fpu: Exclude dynamic states from init_fpstate (Dean Nelson) [2168384 2122850] - x86/fpu: Fix the init_fpstate size check with the actual size (Dean Nelson) [2168384 2122850] - x86/fpu: Configure init_fpstate attributes orderly (Dean Nelson) [2168384 2122850] - x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (Dean Nelson) [2168384 2122850] - net/mlx5: E-Switch, properly handle ingress tagged packets on VST (Amir Tzin) [2166665 2096109] - cpuhotplug: Fix KABI breakage (Prarit Bhargava) [2162763 2156529] [4.18.0-425.14.1_7] - ACPI: processor idle: Practically limit 'Dummy wait' workaround to old Intel systems (Wei Huang) [2142170 2130653] - KVM: x86: nSVM: implement nested LBR virtualization (Emanuele Giuseppe Esposito) [2166362 2155149] - KVM: x86: nSVM: correctly virtualize LBR msrs when L2 is running (Emanuele Giuseppe Esposito) [2166362 2155149] - kvm: x86: SVM: use vmcb* instead of svm->vmcb where it makes sense (Emanuele Giuseppe Esposito) [2166362 2155149] - KVM: x86: nSVM: implement nested VMLOAD/VMSAVE (Emanuele Giuseppe Esposito) [2166362 2155149] - IB/iser: Fix login with authentication (Kamal Heib) [2161750 2120676] - act_mirred: use the backlog for nested calls to mirred ingress (Davide Caratti) [2164648 2131339] {CVE-2022-4269} - net/sched: act_mirred: better wording on protection against excessive stack growth (Davide Caratti) [2164648 2131339] {CVE-2022-4269} - redhat/configs: Set CONFIG_X86_AMD_PSTATE to 'm' (Prarit Bhargava) [2151275 2145246] - KVM: x86: smm: preserve interrupt shadow in SMRAM (Maxim Levitsky) [2166368 2097144] - KVM: x86: SVM: don't save SVM state to SMRAM when VM is not long mode capable (Maxim Levitsky) [2166368 2097144] - KVM: x86: SVM: use smram structs (Maxim Levitsky) [2166368 2097144] - KVM: svm: drop explicit return value of kvm_vcpu_map (Maxim Levitsky) [2166368 2097144] - KVM: x86: smm: use smram struct for 64 bit smram load/restore (Maxim Levitsky) [2166368 2097144] - KVM: x86: smm: use smram struct for 32 bit smram load/restore (Maxim Levitsky) [2166368 2097144] - KVM: x86: smm: use smram structs in the common code (Maxim Levitsky) [2166368 2097144] - KVM: x86: smm: add structs for KVM's smram layout (Maxim Levitsky) [2166368 2097144] - KVM: x86: smm: check for failures on smm entry (Maxim Levitsky) [2166368 2097144] - KVM: x86: do not go through ctxt->ops when emulating rsm (Maxim Levitsky) [2166368 2097144] - KVM: x86: move SMM exit to a new file (Maxim Levitsky) [2166368 2097144] - KVM: x86: move SMM entry to a new file (Maxim Levitsky) [2166368 2097144] - KVM: x86: start moving SMM-related functions to new files (Maxim Levitsky) [2166368 2097144] - bug: introduce ASSERT_STRUCT_OFFSET (Maxim Levitsky) [2166368 2097144] - KVM: x86: Rename and expose helper to detect if INIT/SIPI are allowed (Maxim Levitsky) [2166368 2097144] - KVM: x86: smm: number of GPRs in the SMRAM image depends on the image format (Maxim Levitsky) [2166368 2097144] - KVM: x86: emulator: update the emulation mode after CR0 write (Maxim Levitsky) [2166368 2097144] - KVM: x86: emulator: update the emulation mode after rsm (Maxim Levitsky) [2166368 2097144] - KVM: x86: emulator: introduce emulator_recalc_and_set_mode (Maxim Levitsky) [2166368 2097144] - KVM: x86: emulator: em_sysexit should update ctxt->mode (Maxim Levitsky) [2166368 2097144] - KVM: x86: Bug the VM if the emulator accesses a non-existent GPR (Maxim Levitsky) [2166368 2097144] - \KVM: x86: Reduce the number of emulator GPRs to '8' for 32-bit KVM (Maxim Levitsky) [2166368 2097144] - KVM: x86: Use 16-bit fields to track dirty/valid emulator GPRs (Maxim Levitsky) [2166368 2097144] - KVM: x86: Omit VCPU_REGS_RIP from emulator's _regs array (Maxim Levitsky) [2166368 2097144] - \KVM: x86: Harden _regs accesses to guard against buggy input (Maxim Levitsky) [2166368 2097144] - KVM: x86: Grab regs_dirty in local 'unsigned long' (Maxim Levitsky) [2166368 2097144] - proc: proc_skip_spaces() shouldn't think it is working on C strings (Wander Lairson Costa) [2152571 2152572] {CVE-2022-4378} - proc: avoid integer type confusion in get_proc_long (Wander Lairson Costa) [2152571 2152572] {CVE-2022-4378} IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-0386 CVE-2023-0266 CVE-2022-4269 CVE-2022-4378 Oracle Linux 8 [3.6.16-6] - Fix x86_64 CPU feature detection when AVX is not available (#2131152) - Fix timing side-channel in TLS RSA key exchange (#2162598) MODERATE Copyright 2023 Oracle, Inc. CVE-2023-0361 Oracle Linux 8 [0.112-27.0.1] - Update Oracle Linux test certificates [Orabug: 31928433] - Apply pesigcheck-Mark-the-imported-certificate-as-trusted.patch [Orabug: 31928433] - update Oracle Linux certificates (Alexey Petrenko) - remove obsoletes of pesign-rh-test-certs [Orabug 29222572] [0.112-27] - Deprecate pesign-authorize and drop ACL - Resolves: CVE-2022-3560 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-3560 Oracle Linux 8 postgresql [13.10-1] - Resolves: #2173598 - Update to 13.10 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-2625 CVE-2022-41862 Oracle Linux 8 nodejs [1:16.19.1-1] - Rebase to 16.19.1 Resolves: rhbz#2153713 Resolves: CVE-2023-23918 CVE-2023-23919 CVE-2023-23936 CVE-2023-24807 CVE-2023-23920 Resolves: CVE-2022-25881 CVE-2022-4904 nodejs-nodemon [2.0.20-3] - Patch bundled glob-parent Resolves: CVE-2021-35065 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-23919 CVE-2023-24807 CVE-2023-23936 CVE-2021-35065 CVE-2023-23918 CVE-2022-4904 CVE-2022-25881 CVE-2023-23920 Oracle Linux 8 nodejs [1:18.14.2-2] - Provide simduft [1:18.14.2-1] - Rebase to 18.14.2 - Resolves: #2178087 - Resolves: CVE-2022-25881, CVE-2022-4904, CVE-2023-23936, CVE-2023-24807 - Resolves: CVE-2023-23918, CVE-2023-23919, CVE-2023-23920 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-23920 CVE-2023-23936 CVE-2023-24807 CVE-2022-25881 CVE-2021-35065 CVE-2023-23918 Oracle Linux 9 [1.12.0-5.2] - xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege Escalation Vulnerability Resolves: bz#2180308 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-1393 Oracle Linux 7 [2.4.6-98.0.3] - mod_proxy: ap_proxy_http_request() to clear hop-by-hop first and fixup last [CVE-2022-31813][Orabug: 34381850] - mod_session: save one apr_strtok() [Orabug: 33338149][CVE-2021-26690] [2.4.6-98.0.1] - replace index.html with Oracle's index page oracle_index.html [2.4.6-97.7] - Resolves: #2177742 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-25690 Oracle Linux 7 tigervnc [1.8.0-25] - CVE fix for: CVE-2023-1393 Resolves: bz#2180291 xorg-x11-server [1.20.4-23] - CVE fix for: CVE-2023-1393 (#2180290) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-1393 Oracle Linux 7 [7:4.15-3.0.3.1] - Add libtool-ltdl to squid Requires: [Orabug: 34992040] [ - 7:4.15-3.0.1.1] - Obsolete squid-sysvinit [Jira: OLDIS-20090] [7:4.15-3.1] - Resolves: #2100782 - CVE-2021-46784 squid:4/squid: DoS when processing gopher server responses [7:4.15-3] - Resolves: #1941506 - CVE-2021-28116 squid:4/squid: out-of-bounds read in WCCP protocol data may lead to information disclosure [7:4.15-2] - Resolves: #2006121 - SQUID shortens FTP Link wrong that contains a semi-colon and as a result is not able to download zip file.CODE 404 TO CLIENT) [7:4.15-1] - new version 4.15 - Resolves: #1964384 - squid:4 rebase to 4.15 [7:4.11-5] - Resolves: #1944261 - CVE-2020-25097 squid:4/squid: improper input validation may allow a trusted client to perform HTTP Request Smuggling [7:4.11-4] - Resolves: #1890606 - Fix for CVE 2019-13345 breaks authentication in cachemgr.cgi IMPORTANT Copyright 2023 Oracle, Inc. CVE-2021-46784 Oracle Linux 9 httpd [2.4.53-7.0.1.5] - Replace index.html with Oracle's index page oracle_index.html. [2.4.53-7.5] - Resolves: #2177751 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy [2.4.53-7.1] - Resolves: #2165975 - prevent sscg creating /dhparams.pem - Resolves: #2165970 - CVE-2006-20001 httpd: mod_dav: out-of-bounds read/write of zero byte - Resolves: #2165973 - CVE-2022-37436 httpd: mod_proxy: HTTP response splitting - Resolves: #2165974 - CVE-2022-36760 httpd: mod_proxy_ajp: Possible request smuggling [2.4.53-7] - Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request smuggling - Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in ap_strcmp_match() - Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped by hop-by-hop mechanism - Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite() - Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody - Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability - Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure with websockets [2.4.53-6] - Related: #2065677 - httpd minimisation for ubi-micro [2.4.53-5] - Resolves: #2098056 - mod_ldap: High CPU usage at apr_ldap_rebind_remove() [2.4.53-4] - Resolves: #2095838 - mod_mime_magic: invalid type 0 in mconvert() [2.4.53-3] - Resolves: #2065677 - httpd minimisation for ubi-micro - minimize httpd dependencies (new httpd-core package) - mod_systemd and mod_brotli are now packaged in the main httpd package [2.4.53-1] - new version 2.4.53 - Resolves: #2079939 - httpd rebase to 2.4.53 - Resolves: #2075406 - httpd.conf uses icon bomb.gif for all files/dirs ending with core [2.4.51-8] - Resolves: #2073459 - Cannot override LD_LIBARY_PATH in Apache HTTPD using SetEnv or PassEnv [2.4.51-7] - Resolves: #2065251 - CVE-2022-22720 httpd: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier - Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF in forward proxy configurations [2.4.51-5] - Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow when parsing multipart content [2.4.51-4] - Use NAME from os-release(5) for vendor string Resolves: #2029071 - httpd on CentOS identifies as RHEL [2.4.51-3] - add fixes for static analyzer issues (#1938740) [2.4.51-2] - Resolves: #2005416 - httpd default configuration changes [2.4.51-1] - new version 2.4.51 (#2011090) [2.4.49-1] - new version 2.4.49 (#2005339) [2.4.48-18] - Resolves: #2004143 - RFE: mod_ssl: allow sending multiple CA names which differ only in case [2.4.48-17] - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 [2.4.48-16] - Resolves: #1956386 - Apache trademark update - new logo [2.4.48-14] - Rebuild to pick up new build flags from redhat-rpm-config (#1984652) [2.4.48-13] - mod_ssl: OpenSSL 3 compatibility update (#1986822) [2.4.48-12] - mod_ssl: add SSLKEYLOGFILE support (#1982656) [2.4.48-11] - mod_cgid: fix doubled script timeout (#1977234) [2.4.48-10] - fix release in ServerTokens Full-Release (#1932442) [2.4.48-9] - use OOMPolicy=continue in httpd.service, httpd@.service (#1947475) [2.4.48-8] - Resolves: #1950021 - [RFE] Update httpd directive SSLProxyMachineCertificateFile to be able to handle certs without matching private key [2.4.48-7] - Resolves: #1950011 - unorderly connection close when client attempts renegotiation [2.4.48-6] - Resolves: #1932442 - 'ServerTokens Full-Release' support [2.4.48-5] - mod_ssl: fix loading encrypted privkeys with OpenSSL 3.0 (#1976080) [2.4.48-4] - add OpenSSL v3 compatibility fixes (#1975201) [2.4.48-3] - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 [2.4.48-2] - Resolves: #1947099 - centralizing default index.html for httpd [2.4.48-1] - new version 2.4.48 - Resolves: #1952817 - rebase to 2.4.48 [2.4.46-15] - Resolves: #1949606 - RFE: httpd, add IP_FREEBIND support for Listen [2.4.46-14] - Resolves: #1949969 - httpd : mod_proxy should allow to specify Proxy-Authorization in ProxyRemote directive [2.4.46-13] - Resolves: #1952546 - mod_proxy_wstunnel.html is a malformed XML [2.4.46-12] - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 [2.4.46-11] - Resolves: #1947496 - [RFE] ProxyWebsocketIdleTimeout from httpd mod_proxy_wstunnel mod_http2 [1.15.19-3.5] - Resolves: #2177751 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy [1.15.19-3] - Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF in forward proxy configurations IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-25690 Oracle Linux 8 httpd [2.4.37-51.5.0.1] - Set vstring per ORACLE_SUPPORT_PRODUCT [Orabug: 29892262] - Replace index.html with Oracle's index page oracle_index.html [2.4.37-51.5] - Resolves: #2177747 - CVE-2023-25690 httpd:2.4/httpd: HTTP request splitting with mod_rewrite and mod_proxy [2.4.37-51.1] - Resolves: #2165967 - prevent sscg creating /dhparams.pem - Resolves: #2165976 - CVE-2006-20001 httpd: mod_dav: out-of-bounds read/write of zero byte - Resolves: #2165977 - CVE-2022-37436 httpd: mod_proxy: HTTP response splitting - Resolves: #2165978 - CVE-2022-36760 httpd: mod_proxy_ajp: Possible request smuggling mod_http2 [1.15.7-5.4] - Resolves: #2177747 - CVE-2023-25690 httpd:2.4/httpd: HTTP request splitting with mod_rewrite and mod_proxy IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-25690 Oracle Linux 9 [13.10-1] - Update to 13.10 - Resolves: #2114734 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-2625 CVE-2022-41862 Oracle Linux 9 [2.4.17-3.2] - Reject empty http header field names (CVE-2023-25725, #2174174) [2.4.17-3.1] - Refuse interim responses with end-stream flag set (CVE-2023-0056, #2174172) MODERATE Copyright 2023 Oracle, Inc. CVE-2023-25725 CVE-2023-0056 Oracle Linux 9 [7.76.1-19.el9_1.2] - fix HTTP multi-header compression denial of service (CVE-2023-23916) MODERATE Copyright 2023 Oracle, Inc. CVE-2023-23916 Oracle Linux 9 - [5.14.0-162.23.1_1.OL9] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5 - Remove nmap references from kernel (Mridula Shastry) [Orabug: 34313944] - Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535] [5.14.0-162.23.1_1] - ovl: fail on invalid uid/gid mapping at copy up (Miklos Szeredi) [2165344 2165345] {CVE-2023-0386} - intel_idle: make SPR C1 and C1E be independent (David Arcari) [2168361 2125352] - intel_idle: Add a new flag to initialize the AMX state (David Arcari) [2168361 2117766] - x86/fpu: Add a helper to prepare AMX state for low-power CPU idle (David Arcari) [2168361 2117766] - x86/insn: Add AMX instructions to the x86 instruction decoder (Michael Petlan) [2168361 2140492] - futex: Resend potentially swallowed owner death notification (Rafael Aquini) [2168836 2161817] - tun: avoid double free in tun_free_netdev (Jon Maloy) [2156373 2156374] {CVE-2022-4744} IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-0386 Oracle Linux 8 nodejs [1:14.21.3-1] - Rebase to 14.21.3 Resolves: rhbz#2153712 Resolves: CVE-2022-25881 CVE-2023-23918 CVE-2023-23920 CVE-2022-38900 Resolves: CVE-2022-4904 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-3517 CVE-2022-4904 CVE-2021-35065 CVE-2023-23920 CVE-2022-25881 CVE-2022-38900 CVE-2023-23918 Oracle Linux 9 [102.10.0-1.0.1] - Updated homepages to use https [Orabug: 34648274] [102.10.0-1] - Update to 102.10.0 build1 [102.9.0-4] - Update to 102.9.0 build2 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-1945 CVE-2023-29539 CVE-2023-29541 CVE-2023-29533 CVE-2023-29550 CVE-2023-29536 CVE-2023-29535 CVE-2023-29548 Oracle Linux 8 [102.10.0-1.0.1] - Updated homepages to use https [Orabug: 34648274] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.10.0-1] - Update to 102.10.0 build1 [102.9.0-4] - Update to 102.9.0 build2 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-1945 CVE-2023-29539 CVE-2023-29548 CVE-2023-29541 CVE-2023-29533 CVE-2023-29535 CVE-2023-29536 CVE-2023-29550 Oracle Linux 7 [102.10.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.10.0-1] - Update to 102.10.0 build1 [102.9.0-4] - Update to 102.9.0 build2 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-29548 CVE-2023-29539 CVE-2023-29550 CVE-2023-29535 CVE-2023-29536 CVE-2023-29533 CVE-2023-29541 CVE-2023-1945 Oracle Linux 8 [102.10.0-2.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.10.0-2] - Update to 102.10.0 build2 [102.10.0-1] - Update to 102.10.0 build1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-28427 CVE-2023-0547 CVE-2023-1945 CVE-2023-29479 CVE-2023-29533 CVE-2023-29535 CVE-2023-29536 CVE-2023-29539 CVE-2023-29548 CVE-2023-29550 CVE-2023-29541 Oracle Linux 7 [102.10.0-2.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [102.10.0-2] - Update to 102.10.0 build2 [102.10.0-1] - Update to 102.10.0 build1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-29479 CVE-2023-29536 CVE-2023-29548 CVE-2023-0547 CVE-2023-1945 CVE-2023-28427 CVE-2023-29541 CVE-2023-29533 CVE-2023-29535 CVE-2023-29539 CVE-2023-29550 Oracle Linux 9 [102.10.0-2.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.10.0-2] - Update to 102.10.0 build2 [102.10.0-1] - Update to 102.10.0 build1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-1945 CVE-2023-28427 CVE-2023-29541 CVE-2023-29550 CVE-2023-29533 CVE-2023-29539 CVE-2023-29535 CVE-2023-29479 CVE-2023-0547 CVE-2023-29548 CVE-2023-29536 Oracle Linux 6 [2.6.32-754.35.1.0.10.el6.OL6] - proc: proc_skip_spaces() shouldn't think it is working on C strings (Linus Torvalds) {CVE-2022-4378} [Orabug: 35304147] - proc: avoid integer type confusion in get_proc_long (Linus Torvalds) {CVE-2022-4378} [Orabug: 35304147] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-4378 cpe:/a:oracle:linux:6:10:ELS Oracle Linux 7 [1:11.0.19.0.7-1.0.1] - link atomic for ix86 build [1:11.0.19.0.7-1] - Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 [1:11.0.18.0.10-2] - Add missing release note for JDK-8295687 - Resolves: rhbz#2160111 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-21954 CVE-2023-21930 CVE-2023-21937 CVE-2023-21938 CVE-2023-21939 CVE-2023-21967 CVE-2023-21968 Oracle Linux 9 [17.0.7.0.7-1.0.1] - Replace upstream references [Orabug: 34340155] [1:17.0.7.0.7-1] - Update to jdk-17.0.7.0+7 - Update release notes to 17.0.7.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Update FIPS support against 17.0.7+6 and bring in latest changes: - * RH2134669: Add missing attributes when registering services in FIPS mode. - * test/jdk/sun/security/pkcs11/fips/VerifyMissingAttributes.java: fixed jtreg main class - * RH1940064: Enable XML Signature provider in FIPS mode - * RH2173781: Avoid calling C_GetInfo() too early, before cryptoki is initialized - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2186804 - Resolves: rhbz#2186811 - Resolves: rhbz#2186807 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-21967 CVE-2023-21930 CVE-2023-21954 CVE-2023-21937 CVE-2023-21938 CVE-2023-21939 CVE-2023-21968 Oracle Linux 9 [11.0.19.0.7-1.0.1] - Replace upstream references [Orabug: 34340155] [1:11.0.19.0.7-1] - Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase FIPS support against 11.0.19+6 - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 [1:11.0.18.0.10-3] - Add missing release note for JDK-8295687 - Resolves: rhbz#2160111 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-21938 CVE-2023-21939 CVE-2023-21930 CVE-2023-21954 CVE-2023-21968 CVE-2023-21937 CVE-2023-21967 Oracle Linux 8 delve [1.9.1-1.0.1] - Bump version of delve from 1.8.3 to 1.9.1 [1.8.3-1.0.1] - Bump version of delve from 1.7.2 to 1.8.3 [1.7.2-1.0.1] - Bump version of delve from 1.6.0 to 1.7.2, enable aarch64 [1.6.0-1.0.1] - Bump upstream version of delve from 1.5.0 to 1.6.0 [1.5.0-2.0.1] - Cherry pick 05508ea98055bcb5418d2dc83893af4eb044d151: + Disable DWARF compression which has issues (Alex Burmashev) + By David Sloboda <david.x.sloboda@oracle.com> [1.5.0-2] - Add golang-1.15.4 related patch - Resolves: rhbz#1901189 [1.5.0-1] - Rebase to 1.5.0 - Related: rhbz#1870531 [1.4.1-1] - Rebase to 1.4.1 - Resolves: rhbz#1821281 - Related: rhbz#1820596 [1.4.0-2] - Change i686 to a better macro - Related: rhbz#1820596 [1.4.0-1] - Rebase to 1.4.0 - Remove Patch1781 - Related: rhbz#1820596 [1.3.2-3] - Resolves: rhbz#1758612 - Resolves: rhbz#1780554 - Add patch: 1781-pkg-terminal-Fix-exit-status.patch [1.3.2-2] - Added tests - Related: rhbz#1758612 [1.3.2-1] - First package for RHEL - Related: rhbz#1758612 golang [1.19.4-2.0.1] - Rebase to 1.19.4 openssl-fips - Removed patches: Patch215: go1.5-zoneinfo_testing_only.patch (upstream commit 946587811423) Patch226: disable_static_external_tests.patch (included in new patches) Patch51852: disable-crypto-x509-test.patch (no longer needed) - Added patches: Patch0001: disable_static_tests_part1.patch (part of old patch 226) Patch0002: disable_static_tests_part2.patch (part of old patch 226) Patch0003: fix-test-1024-leaf-certs.patch (fixes change in openssl-fips patches) Patch0004: fix-memory-leak-evp-sign-verify.patch (fixes openssl-fips patches) - Remove disabling of ED25519 test, it is done in the openssl-fips patches - Remove use of extra source for binary file patching - Remove AUTHORS and CONTRIBUTORS from doc section, they were removed upstream, in golang issue 53961 - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> [1.19.4-2] - Fix memory leaks in EVP_{sign,verify}_raw - Resolves: rhbz#2132767 [1.19.4-1] - Rebase to Go 1.19.4 - Fix ppc64le linker issue - Remove defunct patches - Remove downstream generated FIPS mode patches - Add golang-fips/go as the source for FIPS mode patches - Resolves: rhbz#2144542 [1.18.8-1.0.1] - Rebase to 1.18.8 by adding upstream patches to the 1.18.0 openssl-fips - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> [1.19.2-4] - Enable big endian support in FIPS mode - Resolves: rhbz#1969844 [1.19.2-3] - Restore old HashSign/HashVerify API - Resolves: rhbz#2132730 [1.19.2-2] - Add support for 4096 bit keys in x509 - Resolves: rhbz#2132694 [1.19.2-1] - Rebase to Go 1.19.2 - Resolves: rhbz#2132730 [1.19.1-2] - Rebase to Go 1.19.1 - Resolves: rhbz#2131026 [1.18.3-1.0.1] - Rebase to 1.18.3 by adding upstream patches to the 1.18.0 openssl-fips - Modify Patch51852 to remove portions already upstream - Use base_version to distinguish the version of the tarball from the final version - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> [1.18.1-2.0.1] - Rebase to 1.18.0 openssl-fips - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> [1.17.10-1.0.1] - Add patches between Go 1.17.7 and Go 1.17.10 - Rename base_versn to base_version - Remove unneeded patches from previous version - Remove Patch2028662 because that patch is also upstream now - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> [1.18.0-2] - Enable SHA1 in some contexts - Related: rhbz#2075162 [1.18.0-1] - Update Go to 1.18.0 - Resolves: rhbz#2075162 [1.17.7-1] - Rebase to Go 1.17.7 - Remove fips memory leak patch (fixed in tree) - Resolves: rhbz#2015930 [1.17.5-1.0.1] - Rebase to 1.17.2 fips. Update to 1.17.5. - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> [1.17.5-1] - Rebase to Go 1.17.5 - Remove vdso_s390x_gettime patch - Resolves: rhbz#2031112 - Related: rhbz#2028570 [1.17.4-1] - Rebase Go to 1.17.4 - Add remove_waitgroup_misuse_tests patch - Related: rhbz#2014088 - Resolves: rhbz#2028570 - Resolves: rhbz#2022828 - Resolves: rhbz#2024686 - Resolves: rhbz#2028662 [1.17.2-2] - Resolves: rhbz#2014704 [1.17.2-1] - Rebase to Go 1.17.2 - Related: rhbz#2014088 - Remove golang-1.15-warnCN.patch - Remove reject-leading-zeros.patch - Remove favicon.ico and robots.txt references - Exclude TestEd25519Vectors test [1.16.9-1.0.1] - Rebase to 1.16.7 fips, and add patches to bring up to 1.16.9 [1.16.7-1] - Rebase to Go 1.16.7 - Resolves: rhbz#1994079 - Add reject leading zeros patch - Resolves: rhbz#1993314 [1.16.6-2] - Fix TestBoringServerCurves failure when run by itself - Resolves: rhbz#1976168 [1.16.6-1] - Rebase to go-1.16.6-1-openssl-fips - Resolves: rhbz#1982281 - Addresses CVE-2021-34558 [1.16.5-1] - Rebase to 1.16.5 - Removes rhbz#1955032 patch, it's already included in this release - Removes rhbz#1956891 patch, it's already included in this release - Related: rhbz#1979677 - Related: rhbz#1968738 - Related: rhbz#1972420 [1.16.4-3] - Fix zero-size allocation memory leak. - Related: rhbz#1951877 [1.16.4-2] - Resolves: rhbz#1951877 [1.16.4-1] - Rebase to go-1.16.4-1-openssl-fips [1.16.1-3] - Resolves: rhbz#1956891 [1.16.1-2] - Resolves: rhbz#1955032 [1.16.1-1] - Rebase to go-1.16.1-2-openssl-fips - Resolves: rhbz#1938071 - Adds a workaround for rhbz#1939923 - Removes Patch224, it's on upstream -> rhbz#1888673 - Removes Patch225, it's on upstream -> https://go-review.googlesource.com/c/text/+/238238 - Removes old patches for cleaning purposes [1.15.10-1] - Use patches to update version 1.15.7 to 1.15.10 [1.15.7-1] - Rebase to 1.15.7 - Resolves: rhbz#1870531 - Resolves: rhbz#1919261 [1.15.5-1] - Rebase to 1.15.5 - Resolves: rhbz#1898652 - Resolves: rhbz#1898660 - Resolves: rhbz#1898649 [1.15.3-2] - fix typo in patch file name - Related: rhbz#1881539 [1.15.3-1] - Rebase to 1.15.3 - fix x/text infinite loop - Resolves: rhbz#1881539 [1.15.2-2] - Resolves: rhbz#1850045 [1.15.2-1] - Rebase to 1.15.2 - fix rhbz#1872622 in commit af9a1b1f6567a1c5273a134d395bfe7bb840b7f8 - Resolves: rhbz#1872622 - add net/http graceful shutdown patch - Resolves: rhbz#1888673 - add x509warnCN patch - Resolves: rhbz#1889437 [1.15.0-1] - Rebase to 1.15.0 - Related: rhbz#1870531 [1.14.7-2] - Improve test suite - Resolves: rhbz#1854693 [1.14.7-1] - Rebase to 1.14.7 [1.14.6-1] - Rebase to 1.14.6 - Resolves: rhbz#1820596 [1.14.4-2] - Include patch to fix missing deferreturn on linux/ppc64le - Resolves: rhbz#1854836 [1.14.4-1] - Rebase to 1.14.4 [1.14.2-2] - Remove i686 references - Related: rhbz#1752991 [1.14.2-1] - Rebase to 1.14.2 - Related: rhbz#1820596 [1.13.4-2] - Remove patches - Related: rhbz#1747150 [1.13.4-1] - Rebase to 1.13.4 - Related: rhbz#1747150 [1.12.8-4] - Reduce number of threads when testing on i686 [1.12.8-3] - Relax FIPS requirements to unblock OpenShift testing [1.12.8-2] - Rebase to 1.12.8 - Resolves: rhbz#1745706 - Resolves: rhbz#1745712 [1.12.6-3] - Add README for more documentation - Resolves: rhbz#1734788 [1.12.6-3] - Revert some TLS FIPS changes for now - Resolves: rhbz#1734788 [1.12.6-2] - Updates to be less strict on key size in FIPS mode - Resolves: rhbz#1734788 [1.12.6-1] - Rebase to 1.12.6 - Resolves: rhbz#1677819 [1.12.5-2] - Remove macros present in go-compiler - Resolves: rhbz#1700109 [1.12.5-1] - Rebase to 1.12.5 - Resolves: rhbz#1677819 [1.12.1-2] - Lock OpenSSL to specific built version and include more initialization. - Resolves: rhbz#1709603 [1.12.1-1] - Rebase to 1.12.1 - Include FIPS compliance updates - Resolves: rhbz#1709603 [1.11.5-2] - Include patch to fix CVE-2019-9741 - Resolves: rhbz#1690443 [1.11.5-2] - Switch to pagure fork for Go FIPS [1.11.5-1] - Rebase to Go 1.11.5 - Resolves: rhbz#1671277 - Fixes CVE-2019-6486 [1.11.4-1] - Rebase to Go 1.11.4 - Fixes CVE-2018-16873, CVE-2018-16874, CVE-2018-16875 [1.11.2-1] - Rebase to Go 1.11.2 [1.10.3-18] - Remove SCL from macros [1.10.3-17] - Prefer go-toolset over go-toolset-1.10 - Resolves: rhbz#1630786 [1.10.3-16] - Fix implicit syscall declaration warning [1.10.3-15] - Remove usage of redhat hardening flag file, just pass a select few manually - Resolves: rhbz#1642798 [1.10.3-14] - Do not build toolchain in PIE mode - Resolves: rhbz#1642798 [1.10.3-13] - Fix setting of internal FIPS enabled flag - Resolves: rhbz#1643653 [1.10.3-12] - Pass external linker flags to fix annocheck errors - Resolves: rhbz#1624421 [1.10.3-11] - Fix UnreachableExceptTests false panic - Resolves: rhbz#1634748 [1.10.3-10] - Remove SCL, fix bug in boringcrypto with ecdsa - Related: rhbz#1635066 - Resolves: rhbz#1636221 [1.10.3-9] - Add runtime FIPS detection patches - Resolves: rhbz#1633351 [1.10.3-8] - Add gobuild and gotest macros from go-compilers - Resolves: rhbz#1631846 [1.10.3-7] - Bootstrap package using old build of same package - Resolves: rhbz#1630786 [1.10.3-6] - Update stack allocation of OpenSSL type patch - Resolves: rhbz#1615032 [1.10.3-5] - Build on i686 - Related: bug#1614611 [1.10.3-4] - Add patch fixing stack allocation of opaque OpenSSL type bug. - Resolves: rhbz#1613538 [1.10.3-3] - Add patch with tag to opt out of OpenSSL during build [1.10.3-2] - Add runtime requirement for openssl-devel and misc updates [1.10.3-1] - Bump to 1.10.3 [1.10.2-3] - Prepare for module build [1.10.2-2] - Include FIPS patches [1.10.2-1] - Bump to Go 1.10.2 [1.10-1] - Bump to Go 1.10 [1.8.5-1] - Fix CVE-2017-15041 and CVE-2017-15042 - Resolves: BZ#1499160, BZ#1498073, BZ#1512063 [1.8.3-4] - Explicitly require /usr/bin/gcc - Resolves: #1487345 [1.8.3-3] - apply asn1 patch - add ppc64le trampolines patch [1.8.3-2] - regular GTS build [1.8.3-1] - initial GTS build [1.8-0.rc3.2.1] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [1.8-0.rc3.2] - make possible to override default traceback level at build time - add sub-package race containing std lib built with -race enabled - Related: BZ#1411242 [1.8-0.rc3.1] - rebase to go1.8rc3 - Resolves: BZ#1411242 [1.7.4-2] - Resolves: BZ#1404679 - expose IfInfomsg.X__ifi_pad on s390x [1.7.4-1] - Bump to 1.7.4 - Resolves: BZ#1400732 [1.7.3-2] - re-enable the NIST P-224 curve [1.7.3-1] - Resolves: BZ#1387067 - golang-1.7.3 is available - added fix for tests failing with latest tzdata [1.7.1-2] - fix link failure due to relocation overflows on PPC64X [1.7.1-1] - rebase to 1.7.1 - Resolves: BZ#1374103 [1.7-1] - update to released version - related: BZ#1342090, BZ#1357394 [1.7-0.3.rc5] - Obsolete golang-vet and golang-cover from golang-googlecode-tools package vet/cover binaries are provided by golang-bin rpm (thanks to jchaloup) - clean up exclusive arch after s390x boostrap - resolves: #1268206 [1.7-0.2.rc5] - rebase to go1.7rc5 - Resolves: BZ#1342090 [1.7-0.1.rc2] - https://fedoraproject.org/wiki/Changes/golang1.7 [1.7-0.0.rc2] - rebase to 1.7rc2 - added s390x build - improved shared lib packaging - Resolves: bz1357602 - CVE-2016-5386 - Resolves: bz1342090, bz1342090 [1.6.2-1] - rebase to 1.6.2 - Resolves: bz1329206 - golang-1.6.2.src is available [1.6.1-1] - rebase to 1.6.1 - Resolves: bz1324344 - CVE-2016-3959 - Resolves: bz1324951 - prelink is gone, /etc/prelink.conf.d/* is no longer used - Resolves: bz1326366 - wrong epoll_event struct for ppc64le/ppc64 [1.6-1] - Resolves: bz1304701 - rebase to go1.6 release - Resolves: bz1304591 - fix possible stack miss-alignment in callCgoMmap [1.6-0.3.rc1] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [1.6-0.2.rc1] - disabled cgo and external linking on ppc64 [1.6-0.1.rc1] - Resolves bz1292640, rebase to pre-release 1.6 - bootstrap for PowerPC - fix rpmlint errors/warning [1.5.3-1] - rebase to 1.5.3 - resolves bz1293451, CVE-2015-8618 - apply timezone patch, avoid using bundled data - print out rpm build system info [1.5.2-2] - bz1290543 Accept x509 certs with negative serial [1.5.2-1] - bz1288263 rebase to 1.5.2 - spec file clean up - added build options - scrubbed 'Project Gutenberg License' [1.5.1-1] - bz1271709 include patch from upstream fix [1.5.1-0] - update to go1.5.1 [1.5-8] - bz1258166 remove srpm macros, for go-srpm-macros [1.5-7] - bz1258166 remove srpm macros, for go-srpm-macros [1.5-6] - starting a shared object subpackage. This will be x86_64 only until upstream supports more arches shared objects. [1.5-5] - bz991759 gdb path fix [1.5-4] - disable shared object until linux/386 is ironned out - including the test/ directory for tests [1.5-3] - bz1256910 only allow the golang zoneinfo.zip to be used in tests - bz1166611 add golang.org/x directory - bz1256525 include stdlib shared object. This will let other libraries and binaries build with go build -buildmode=shared -linkshared ... or similar. [1.5-2] - Enable aarch64 - Minor cleanups [1.5-1] - updating to go1.5 [1.5-0.11.rc1] - fixing the sources reference [1.5-0.10.rc1] - updating to go1.5rc1 - checks are back in place [1.5-0.9.beta3] - pull in upstream archive/tar fix [1.5-0.8.beta3] - updating to go1.5beta3 [1.5-0.7.beta2] - add the patch .. [1.5-0.6.beta2] - increase ELFRESERVE (bz1248071) [1.5-0.5.beta2] - correct package version and release tags as per naming guidelines [1.4.99-4.1.5beta2] - adding test output, for visibility [1.4.99-3.1.5beta2] - updating to go1.5beta2 [1.4.99-2.1.5beta1] - add checksum to sources and fixed one patch [1.4.99-1.1.5beta1] - updating to go1.5beta1 [1.4.2-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [1.4.2-2] - obsoleting deprecated packages [1.4.2-1] - updating to go1.4.2 [1.4.1-1] - updating to go1.4.1 [1.4-2] - doc organizing [1.4-1] - update to go1.4 release [1.3.99-3.1.4rc2] - update to go1.4rc2 [1.3.99-2.1.4rc1] - update to go1.4rc1 [1.3.99-1.1.4beta1] - update to go1.4beta1 [1.3.3-3] - macros will need to be in their own rpm [1.3.3-2] - split out rpm macros (bz1156129) - progress on gccgo accomodation [1.3.3-1] - update to go1.3.3 (bz1146882) [1.3.2-1] - update to go1.3.2 (bz1147324) [1.3.1-3] - patching the tzinfo failure [1.3.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild [1.3.1-1] - update to go1.3.1 [1.3-11] - merged a line wrong [1.3-10] - more work to get cgo.a timestamps to line up, due to build-env - explicitly list all the files and directories for the source and packages trees - touch all the built archives to be the same [1.3-9] - make golang-src 'noarch' again, since that was not a fix, and takes up more space [1.3-8] - update timestamps of source files during %install bz1099206 [1.3-7] - update timestamps of source during %install bz1099206 [1.3-6] - make the source subpackage arch'ed, instead of noarch [1.3-5] - fix the writing of pax headers [1.3-4] - fix the loading of gdb safe-path. bz981356 [1.3-3] - go install std requires gcc, to build cgo. bz1105901, bz1101508 [1.3-2] - archive/tar memory allocation improvements [1.3-1] - update to go1.3 [1.3rc2-1] - update to go1.3rc2 [1.3rc1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild [1.3rc1-1] - update to go1.3rc1 - new arch file shuffling [1.3beta2-1] - update to go1.3beta2 - no longer provides go-mode for xemacs (emacs only) [1.2.2-7] - bz1099206 ghost files are not what is needed [1.2.2-6] - bz1099206 more fixing. The packages %post need golang-bin present first [1.2.2-5] - bz1099206 more fixing. Let go fix its own timestamps and freshness [1.2.2-4] - fix the existence and alternatives of go and gofmt [1.2.2-3] - bz1099206 fix timestamp issue caused by koji builders [1.2.2-2] - more arch file shuffling [1.2.2-1] - update to go1.2.2 [1.2.1-8] - RHEL6 rpm macros can't %exlude missing files [1.2.1-7] - missed two arch-dependent src files [1.2.1-6] - put generated arch-dependent src in their respective RPMs [1.2.1-5] - skip test that is causing a SIGABRT on fc21 bz1086900 [1.2.1-4] - fixing file and directory ownership bz1010713 [1.2.1-3] - including more to macros (%go_arches) - set a standard goroot as /usr/lib/golang, regardless of arch - include sub-packages for compiler toolchains, for all golang supported architectures [1.2.1-2] - provide a system rpm macros. Starting with gopath [1.2.1-1] - Update to latest upstream [1.2-7] - Remove _BSD_SOURCE and _SVID_SOURCE, they are deprecated in recent versions of glibc and aren't needed [1.2-6] - pull in upstream archive/tar implementation that supports xattr for docker 0.8.1 [1.2-5] - provide 'go', so users can yum install 'go' [1.2-4] - skip a flaky test that is sporadically failing on the build server [1.2-3] - remove golang-godoc dependency. cyclic dependency on compiling godoc [1.2-2] - removing P224 ECC curve [1.2-1] - Update to upstream 1.2 release - remove the pax tar patches [1.1.2-8] - fix the rpmspec conditional for rhel and fedora [1.1.2-7] - patch tests for testing on rawhide - let the same spec work for rhel and fedora [1.1.2-6] - don't symlink /usr/bin out to ../lib..., move the file - seperate out godoc, to accomodate the go.tools godoc [1.1.2-5] - Pull upstream patches for BZ#1010271 - Add glibc requirement that got dropped because of meta dep fix [1.1.2-4] - fix the libc meta dependency (thanks to vbatts [at] redhat.com for the fix) [1.1.2-3] - Revert incorrect merged changelog [1.1.2-2] - This was reverted, just a placeholder changelog entry for bad merge [1.1.2-1] - Update to latest upstream [1.1.1-7] - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild [1.1.1-6] - Perl 5.18 rebuild [1.1.1-5] - Blacklist testdata files from prelink - Again try to fix #973842 [1.1.1-4] - Move src to libdir for now (#973842) (upstream issue https://code.google.com/p/go/issues/detail?id=5830) - Eliminate noarch data package to work around RPM bug (#975909) - Try to add runtime-gdb.py to the gdb safe-path (#981356) [1.1.1-3] - Use lua for pretrans (http://fedoraproject.org/wiki/Packaging:Guidelines#The_.25pretrans_scriptlet) [1.1.1-2] - Hopefully really fix #973842 - Fix update from pre-1.1.1 (#974840) [1.1.1-1] - Update to 1.1.1 - Fix basically useless package (#973842) [1.1-3] - set ExclusiveArch [1.1-2] - Fix noarch package discrepancies [1.1-1] - Initial Fedora release. - Update to 1.1 [1.1-0.3.rc3] - Update to rc3 [1.1-0.2.beta2] - Update to beta2 [1.1-0.1.beta1] - Initial packaging. go-toolset [1.19.4-1] - Update to golang 1.19.4 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-2879 CVE-2022-41720 CVE-2022-41716 CVE-2022-32190 CVE-2022-2880 CVE-2022-41717 CVE-2022-27664 CVE-2022-41715 Oracle Linux 8 [1:11.0.19.0.7-1] - Update to jdk-11.0.19.0+7 - Update release notes to 11.0.19.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Rebase FIPS support against 11.0.19+6 - Rebase RH1750419 alt-java patch against 11.0.19+6 - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 [1:11.0.18.0.10-3] - Add missing release note for JDK-8295687 - Resolves: rhbz#2160111 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-21938 CVE-2023-21939 CVE-2023-21930 CVE-2023-21968 CVE-2023-21967 CVE-2023-21937 CVE-2023-21954 Oracle Linux 8 [1:17.0.7.0.7-1] - Update to jdk-17.0.7.0+7 - Update release notes to 17.0.7.0+7 - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Update FIPS support against 17.0.7+6 and bring in latest changes: - * RH2134669: Add missing attributes when registering services in FIPS mode. - * test/jdk/sun/security/pkcs11/fips/VerifyMissingAttributes.java: fixed jtreg main class - * RH1940064: Enable XML Signature provider in FIPS mode - * RH2173781: Avoid calling C_GetInfo() too early, before cryptoki is initialized - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2186835 - Resolves: rhbz#2186827 - Resolves: rhbz#2186831 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-21954 CVE-2023-21930 CVE-2023-21938 CVE-2023-21939 CVE-2023-21937 CVE-2023-21967 CVE-2023-21968 Oracle Linux 7 [1:1.8.0.372.b07-1] - Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 - Resolves: rhbz#2159458 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-21938 CVE-2023-21937 CVE-2023-21954 CVE-2023-21939 CVE-2023-21968 CVE-2023-21930 CVE-2023-21967 Oracle Linux 8 [1:1.8.0.372.b07-1] - Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Drop JDK-8275535/RH2053256 patch which is now upstream - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-21939 CVE-2023-21968 CVE-2023-21954 CVE-2023-21930 CVE-2023-21938 CVE-2023-21967 CVE-2023-21937 Oracle Linux 9 [1.8.0.372.b07-1.0.1] - Replace upstream references [Orabug: 34340145] [1:1.8.0.372.b07-1] - Update to shenandoah-jdk8u372-b07 (GA) - Update release notes for shenandoah-8u372-b07. - Require tzdata 2023c due to inclusion of JDK-8305113 in 8u372-b07 - Reintroduce jconsole-plugin.patch from RHEL 9 - Update generate_tarball.sh to add support for passing a boot JDK to the configure run - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs - Drop JDK-8275535/RH2053256 patch which is now upstream - Include JDK-8271199 backport early ahead of 8u382 (RH2175317) - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. ** - Resolves: rhbz#2185182 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-21954 CVE-2023-21967 CVE-2023-21968 CVE-2023-21939 CVE-2023-21937 CVE-2023-21930 CVE-2023-21938 Oracle Linux 9 [2.36.7-1.3] - Add patch for CVE-2023-28205 Resolves: #2185744 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-28205 Oracle Linux 8 [2.36.7-1.3] - Add patch for CVE-2023-28205 Resolves: #2185740 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-28205 Oracle Linux 8 [1:26.1-7.1] - Fix ob-latex.el command injection vulnerability (#2180585) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-28617 Oracle Linux 7 [3.10.0-1160.90.1.0.1.OL7] - debug: lock down kgdb [Orabug: 34270798] {CVE-2022-21499} [3.10.0-1160.90.1.OL7] - Update Oracle Linux certificates (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and shim-x64 <= 15-2.0.9 - Update oracle(kernel-sig-key) value to match new certificate (Ilya Okomin) [3.10.0-1160.90.1] - NFSv4.1: Fix open stateid recovery (Benjamin Coddington) [2156890] - NFS: Don't open code clearing of delegation state (Benjamin Coddington) [2156890] [3.10.0-1160.89.1] - usb: mon: make mmapped memory read only (Desnes Nunes) [2161212] {CVE-2022-43750} MODERATE Copyright 2023 Oracle, Inc. CVE-2022-43750 Oracle Linux 9 [1:27.2-6.1] - Fix ob-latex.el command injection vulnerability (#2180589) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-28617 Oracle Linux 8 [1.0.0-8] - Added fix for mzbz#1819244 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-1999 Oracle Linux 7 [0.3.0-11] - Added fix for mzbz#1819244 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-1999 Oracle Linux 9 [1.2.0-6] - Fix tools subpackage dependency [1.2.0-4] - Added fix for mzbz#1819244 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-1999 Oracle Linux 9 [4.6-3.0.1] - Add libreswan-oracle.patch to detect Oracle Linux distro [4.6-3.1] - Resolves: rhbz#2187170 fix handling of IKEv1 aggressive mode packets IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-30570 Oracle Linux 8 [4.5-1.0.1] - Add libreswan-oracle.patch to detect Oracle Linux distro [4.5-1.1] - Resolves: rhbz#2187178 fix handling of IKEv1 aggressive mode packets IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-30570 Oracle Linux 9 [4.16.4-103.0.1] - Fix memleak in _nss_winbind_initgroups_dyn [Orabug: 34994509] [4.16.4-103] - related: rhbz#2154372 - Add additional patches for CVE-2022-38023 [4.16.4-102] - Fix CVE-2022-38023 - resolves: rhbz#2154372 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-38023 Oracle Linux 9 [4.10.0-43] - fence_vmware_soap: set login_timeout lower than default pcmk_monitor_timeout (20s) to remove tmp dirs Resolves: rhbz#2122944 [4.10.0-42] - fencing/fence_wti: add --plug-separator to be able to avoid characters that are in node name(s) Resolves: rhbz#2152107 [4.10.0-41] - fence_scsi: skip key generation during validate-all action Resolves: rhbz#2160480 [4.10.0-40] - fence_virtd: add info about multiple uuid/ip entries to manpage Resolves: rhbz#2149655 [4.10.0-39] - fence_virtd: warn if config or key file(s) are not mode 600 Resolves: rhbz#2144531 [4.10.0-37] - Upgrade bundled python-oauthlib Resolves: rhbz#2128564 [4.10.0-36] - fence_virtd: add link to uri examples and uri w/socket path example for when VMS are run as non-root user to manpage Resolves: rhbz#2138823 [4.10.0-35] - fence_ibm_powervs: improve defaults Resolves: rhbz#2136191 [4.10.0-34] - fence_lpar: only output additional output info on DEBUG level Resolves: rhbz#2134015 [4.10.0-33] - fence_virt: add note that reboot-action doesnt power on nodes that are powered off Resolves: rhbz#2132008 [4.10.0-32] - add azure-identity and dependencies Resolves: rhbz#2121546 [4.10.0-31] - fence_ibm_vpc: add token cache support Resolves: rhbz#2111998 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-36087 Oracle Linux 9 [7.2.0-14] - Rebuild for 9.2 release - Resolves: bz#2173590 (bugs in emulation of BMI instructions (for libguestfs without KVM)) - Resolves: bz#2156876 ([virtual network][rhel7.9_guest] qemu-kvm: vhost vring error in virtqueue 1: Invalid argument (22)) [7.2.0-13] - kvm-target-i386-fix-operand-size-of-unary-SSE-operations.patch [bz#2173590] - kvm-tests-tcg-i386-Introduce-and-use-reg_t-consistently.patch [bz#2173590] - kvm-target-i386-Fix-BEXTR-instruction.patch [bz#2173590] - kvm-target-i386-Fix-C-flag-for-BLSI-BLSMSK-BLSR.patch [bz#2173590] - kvm-target-i386-fix-ADOX-followed-by-ADCX.patch [bz#2173590] - kvm-target-i386-Fix-32-bit-AD-CO-X-insns-in-64-bit-mode.patch [bz#2173590] - kvm-target-i386-Fix-BZHI-instruction.patch [bz#2173590] - kvm-intel-iommu-fail-DEVIOTLB_UNMAP-without-dt-mode.patch [bz#2156876] - Resolves: bz#2173590 (bugs in emulation of BMI instructions (for libguestfs without KVM)) - Resolves: bz#2156876 ([virtual network][rhel7.9_guest] qemu-kvm: vhost vring error in virtqueue 1: Invalid argument (22)) [7.2.0-12] - kvm-scsi-protect-req-aiocb-with-AioContext-lock.patch [bz#2155748] - kvm-dma-helpers-prevent-dma_blk_cb-vs-dma_aio_cancel-rac.patch [bz#2155748] - kvm-virtio-scsi-reset-SCSI-devices-from-main-loop-thread.patch [bz#2155748] - kvm-qatomic-add-smp_mb__before-after_rmw.patch [bz#2175660] - kvm-qemu-thread-posix-cleanup-fix-document-QemuEvent.patch [bz#2175660] - kvm-qemu-thread-win32-cleanup-fix-document-QemuEvent.patch [bz#2175660] - kvm-edu-add-smp_mb__after_rmw.patch [bz#2175660] - kvm-aio-wait-switch-to-smp_mb__after_rmw.patch [bz#2175660] - kvm-qemu-coroutine-lock-add-smp_mb__after_rmw.patch [bz#2175660] - kvm-physmem-add-missing-memory-barrier.patch [bz#2175660] - kvm-async-update-documentation-of-the-memory-barriers.patch [bz#2175660] - kvm-async-clarify-usage-of-barriers-in-the-polling-case.patch [bz#2175660] - Resolves: bz#2155748 (qemu crash on void blk_drain(BlockBackend *): Assertion qemu_in_main_thread() failed) - Resolves: bz#2175660 (Guest hangs when starting or rebooting) [7.2.0-11] - kvm-hw-smbios-fix-field-corruption-in-type-4-table.patch [bz#2169904] - Resolves: bz#2169904 ([SVVP] job 'Check SMBIOS Table Specific Requirements' failed on win2022) [7.2.0-10] - kvm-block-temporarily-hold-the-new-AioContext-of-bs_top-.patch [bz#2168209] - Resolves: bz#2168209 (Qemu coredump after do snapshot of mirrored top image and its converted base image(iothread enabled)) [7.2.0-9] - kvm-tests-qtest-netdev-test-stream-and-dgram-backends.patch [bz#2169232] - kvm-net-stream-add-a-new-option-to-automatically-reconne.patch [bz#2169232] - kvm-linux-headers-Update-to-v6.1.patch [bz#2158704] - kvm-util-userfaultfd-Add-uffd_open.patch [bz#2158704] - kvm-util-userfaultfd-Support-dev-userfaultfd.patch [bz#2158704] - kvm-io-Add-support-for-MSG_PEEK-for-socket-channel.patch [bz#2169732] - kvm-migration-check-magic-value-for-deciding-the-mapping.patch [bz#2169732] - kvm-target-s390x-arch_dump-Fix-memory-corruption-in-s390.patch [bz#2168172] - Resolves: bz#2169232 (RFE: reconnect option for stream socket back-end) - Resolves: bz#2158704 (RFE: Prefer /dev/userfaultfd over userfaultfd(2) syscall) - Resolves: bz#2169732 (Multifd migration fails under a weak network/socket ordering race) - Resolves: bz#2168172 ([s390x] qemu-kvm coredumps when SE crashes) [7.2.0-8] - kvm-qcow2-Fix-theoretical-corruption-in-store_bitmap-err.patch [bz#2150180] - kvm-qemu-img-commit-Report-errors-while-closing-the-imag.patch [bz#2150180] - kvm-qemu-img-bitmap-Report-errors-while-closing-the-imag.patch [bz#2150180] - kvm-qemu-iotests-Test-qemu-img-bitmap-commit-exit-code-o.patch [bz#2150180] - kvm-accel-tcg-Test-CPUJumpCache-in-tb_jmp_cache_clear_pa.patch [bz#2165280] - kvm-block-Improve-empty-format-specific-info-dump.patch [bz#1860292] - kvm-block-file-Add-file-specific-image-info.patch [bz#1860292] - kvm-block-vmdk-Change-extent-info-type.patch [bz#1860292] - kvm-block-Split-BlockNodeInfo-off-of-ImageInfo.patch [bz#1860292] - kvm-qemu-img-Use-BlockNodeInfo.patch [bz#1860292] - kvm-block-qapi-Let-bdrv_query_image_info-recurse.patch [bz#1860292] - kvm-block-qapi-Introduce-BlockGraphInfo.patch [bz#1860292] - kvm-block-qapi-Add-indentation-to-bdrv_node_info_dump.patch [bz#1860292] - kvm-iotests-Filter-child-node-information.patch [bz#1860292] - kvm-iotests-106-214-308-Read-only-one-size-line.patch [bz#1860292] - kvm-qemu-img-Let-info-print-block-graph.patch [bz#1860292] - kvm-qemu-img-Change-info-key-names-for-protocol-nodes.patch [bz#1860292] - kvm-Revert-vhost-user-Monitor-slave-channel-in-vhost_use.patch [bz#2155173] - kvm-Revert-vhost-user-Introduce-nested-event-loop-in-vho.patch [bz#2155173] - kvm-virtio-rng-pci-fix-transitional-migration-compat-for.patch [bz#2162569] - Resolves: bz#2150180 (qemu-img finishes successfully while having errors in commit or bitmaps operations) - Resolves: bz#2165280 ([kvm-unit-tests] debug-wp-migration fails) - Resolves: bz#1860292 (RFE: add extent_size_hint information to qemu-img info) - Resolves: bz#2155173 ([vhost-user] unable to start vhost net: 71: falling back on userspace) - Resolves: bz#2162569 ([transitional device][virtio-rng-pci-transitional]Stable Guest ABI failed between RHEL 8.6 to RHEL 9.2) [7.2.0-7] - kvm-vdpa-use-v-shadow_vqs_enabled-in-vhost_vdpa_svqs_sta.patch [bz#2104412] - kvm-vhost-set-SVQ-device-call-handler-at-SVQ-start.patch [bz#2104412] - kvm-vhost-allocate-SVQ-device-file-descriptors-at-device.patch [bz#2104412] - kvm-vhost-move-iova_tree-set-to-vhost_svq_start.patch [bz#2104412] - kvm-vdpa-add-vhost_vdpa_net_valid_svq_features.patch [bz#2104412] - kvm-vdpa-request-iova_range-only-once.patch [bz#2104412] - kvm-vdpa-move-SVQ-vring-features-check-to-net.patch [bz#2104412] - kvm-vdpa-allocate-SVQ-array-unconditionally.patch [bz#2104412] - kvm-vdpa-add-asid-parameter-to-vhost_vdpa_dma_map-unmap.patch [bz#2104412] - kvm-vdpa-store-x-svq-parameter-in-VhostVDPAState.patch [bz#2104412] - kvm-vdpa-add-shadow_data-to-vhost_vdpa.patch [bz#2104412] - kvm-vdpa-always-start-CVQ-in-SVQ-mode-if-possible.patch [bz#2104412] - kvm-vdpa-fix-VHOST_BACKEND_F_IOTLB_ASID-flag-check.patch [bz#2104412] - kvm-spec-Disable-VDUSE.patch [bz#2128222] - Resolves: bz#2104412 (vDPA ASID support in Qemu) - Resolves: bz#2128222 (VDUSE block export should be disabled in builds for now) [7.2.0-6] - kvm-virtio_net-Modify-virtio_net_get_config-to-early-ret.patch [bz#2141088] - kvm-virtio_net-copy-VIRTIO_NET_S_ANNOUNCE-if-device-mode.patch [bz#2141088] - kvm-vdpa-handle-VIRTIO_NET_CTRL_ANNOUNCE-in-vhost_vdpa_n.patch [bz#2141088] - kvm-vdpa-do-not-handle-VIRTIO_NET_F_GUEST_ANNOUNCE-in-vh.patch [bz#2141088] - kvm-s390x-pv-Implement-a-CGS-check-helper.patch [bz#2122523] - kvm-s390x-pci-coalesce-unmap-operations.patch [bz#2163701] - kvm-s390x-pci-shrink-DMA-aperture-to-be-bound-by-vfio-DM.patch [bz#2163701] - kvm-s390x-pci-reset-ISM-passthrough-devices-on-shutdown-.patch [bz#2163701] - kvm-qga-linux-add-usb-support-to-guest-get-fsinfo.patch [bz#2149191] - Resolves: bz#2141088 (vDPA SVQ guest announce support) - Resolves: bz#2122523 (Secure guest can't boot with maximal number of vcpus (248)) - Resolves: bz#2163701 ([s390x] VM fails to start with ISM passed through) - Resolves: bz#2149191 ([RFE][guest-agent] - USB bus type support) [7.2.0-5] - kvm-virtio-introduce-macro-VIRTIO_CONFIG_IRQ_IDX.patch [bz#1905805] - kvm-virtio-pci-decouple-notifier-from-interrupt-process.patch [bz#1905805] - kvm-virtio-pci-decouple-the-single-vector-from-the-inter.patch [bz#1905805] - kvm-vhost-introduce-new-VhostOps-vhost_set_config_call.patch [bz#1905805] - kvm-vhost-vdpa-add-support-for-config-interrupt.patch [bz#1905805] - kvm-virtio-add-support-for-configure-interrupt.patch [bz#1905805] - kvm-vhost-add-support-for-configure-interrupt.patch [bz#1905805] - kvm-virtio-net-add-support-for-configure-interrupt.patch [bz#1905805] - kvm-virtio-mmio-add-support-for-configure-interrupt.patch [bz#1905805] - kvm-virtio-pci-add-support-for-configure-interrupt.patch [bz#1905805] - kvm-s390x-s390-virtio-ccw-Activate-zPCI-features-on-s390.patch [bz#2159408] - kvm-vhost-fix-vq-dirty-bitmap-syncing-when-vIOMMU-is-ena.patch [bz#2124856] - kvm-block-drop-bdrv_remove_filter_or_cow_child.patch [bz#2155112] - kvm-qed-Don-t-yield-in-bdrv_qed_co_drain_begin.patch [bz#2155112] - kvm-test-bdrv-drain-Don-t-yield-in-.bdrv_co_drained_begi.patch [bz#2155112] - kvm-block-Revert-.bdrv_drained_begin-end-to-non-coroutin.patch [bz#2155112] - kvm-block-Remove-drained_end_counter.patch [bz#2155112] - kvm-block-Inline-bdrv_drain_invoke.patch [bz#2155112] - kvm-block-Fix-locking-for-bdrv_reopen_queue_child.patch [bz#2155112] - kvm-block-Drain-individual-nodes-during-reopen.patch [bz#2155112] - kvm-block-Don-t-use-subtree-drains-in-bdrv_drop_intermed.patch [bz#2155112] - kvm-stream-Replace-subtree-drain-with-a-single-node-drai.patch [bz#2155112] - kvm-block-Remove-subtree-drains.patch [bz#2155112] - kvm-block-Call-drain-callbacks-only-once.patch [bz#2155112] - kvm-block-Remove-ignore_bds_parents-parameter-from-drain.patch [bz#2155112] - kvm-block-Drop-out-of-coroutine-in-bdrv_do_drained_begin.patch [bz#2155112] - kvm-block-Don-t-poll-in-bdrv_replace_child_noperm.patch [bz#2155112] - kvm-block-Remove-poll-parameter-from-bdrv_parent_drained.patch [bz#2155112] - kvm-accel-introduce-accelerator-blocker-API.patch [bz#1979276] - kvm-KVM-keep-track-of-running-ioctls.patch [bz#1979276] - kvm-kvm-Atomic-memslot-updates.patch [bz#1979276] - Resolves: bz#1905805 (support config interrupt in vhost-vdpa qemu) - Resolves: bz#2159408 ([s390x] VMs with ISM passthrough don't autostart after leapp upgrade from RHEL 8) - Resolves: bz#2124856 (VM with virtio interface and iommu=on will crash when try to migrate) - Resolves: bz#2155112 (Qemu coredump after do snapshot of mirrored top image and its converted base image(iothread enabled)) - Resolves: bz#1979276 (SVM: non atomic memslot updates cause boot failure with seabios and cpu-pm=on) [7.2.0-4] - kvm-virtio-rng-pci-fix-migration-compat-for-vectors.patch [bz#2155749] - kvm-Update-QGA-service-for-new-command-line.patch [bz#2156515] - Resolves: bz#2155749 ([regression][stable guest abi][qemu-kvm7.2]Migration failed due to virtio-rng device between RHEL8.8 and RHEL9.2/MSI-X) - Resolves: bz#2156515 ([guest-agent] Replace '-blacklist' to '-block-rpcs' in qemu-ga config file) [7.2.0-3] - kvm-hw-arm-virt-Introduce-virt_set_high_memmap-helper.patch [bz#2113840] - kvm-hw-arm-virt-Rename-variable-size-to-region_size-in-v.patch [bz#2113840] - kvm-hw-arm-virt-Introduce-variable-region_base-in-virt_s.patch [bz#2113840] - kvm-hw-arm-virt-Introduce-virt_get_high_memmap_enabled-h.patch [bz#2113840] - kvm-hw-arm-virt-Improve-high-memory-region-address-assig.patch [bz#2113840] - kvm-hw-arm-virt-Add-compact-highmem-property.patch [bz#2113840] - kvm-hw-arm-virt-Add-properties-to-disable-high-memory-re.patch [bz#2113840] - kvm-hw-arm-virt-Enable-compat-high-memory-region-address.patch [bz#2113840] - Resolves: bz#2113840 ([RHEL9.2] Memory mapping optimization for virt machine) [7.2.0-2] - Fix updating from 7.1.0 - kvm-redhat-fix-virt-rhel9.2.0-compat-props.patch[bz#2154640] - Resolves: bz#2154640 ([aarch64] qemu fails to load 'efi-virtio.rom' romfile when creating virtio-net-pci) [7.2.0-1] - Rebase to QEMU 7.2.0 [bz#2135806] - Resolves: bz#2135806 (Rebase to QEMU 7.2 for RHEL 9.2.0) [7.1.0-7] - kvm-hw-acpi-erst.c-Fix-memory-handling-issues.patch [bz#2149108] - Resolves: bz#2149108 (CVE-2022-4172 qemu-kvm: QEMU: ACPI ERST: memory corruption issues in read_erst_record and write_erst_record [rhel-9]) [7.1.0-6] - kvm-block-move-bdrv_qiov_is_aligned-to-file-posix.patch [bz#2143170] - kvm-block-use-the-request-length-for-iov-alignment.patch [bz#2143170] - Resolves: bz#2143170 (The installation can not start when install files (iso) locate on a 4k disk) [7.1.0-5] - kvm-rtl8139-Remove-unused-variable.patch [bz#2141218] - kvm-qemu-img-remove-unused-variable.patch [bz#2141218] - kvm-host-libusb-Remove-unused-variable.patch [bz#2141218] - Resolves: bz#2141218 (qemu-kvm build fails with clang 15.0.1 due to false unused variable error) [7.1.0-4] - kvm-Revert-intel_iommu-Fix-irqchip-X2APIC-configuration-.patch [bz#2126095] - Resolves: bz#2126095 ([rhel9.2][intel_iommu]Booting guest with '-device intel-iommu,intremap=on,device-iotlb=on,caching-mode=on' causes kernel call trace) [7.1.0-3] - kvm-target-i386-kvm-fix-kvmclock_current_nsec-Assertion-.patch [bz#2108531] - Resolves: bz#2108531 (Windows guest reboot after migration with wsl2 installed inside) [7.1.0-2] - kvm-vdpa-Skip-the-maps-not-in-the-iova-tree.patch [RHELX-57] - kvm-vdpa-do-not-save-failed-dma-maps-in-SVQ-iova-tree.patch [RHELX-57] - kvm-util-accept-iova_tree_remove_parameter-by-value.patch [RHELX-57] - kvm-vdpa-Remove-SVQ-vring-from-iova_tree-at-shutdown.patch [RHELX-57] - kvm-vdpa-Make-SVQ-vring-unmapping-return-void.patch [RHELX-57] - kvm-vhost-Always-store-new-kick-fd-on-vhost_svq_set_svq_.patch [RHELX-57] - kvm-vdpa-Use-ring-hwaddr-at-vhost_vdpa_svq_unmap_ring.patch [RHELX-57] - kvm-vhost-stop-transfer-elem-ownership-in-vhost_handle_g.patch [RHELX-57] - kvm-vhost-use-SVQ-element-ndescs-instead-of-opaque-data-.patch [RHELX-57] - kvm-vhost-Delete-useless-read-memory-barrier.patch [RHELX-57] - kvm-vhost-Do-not-depend-on-NULL-VirtQueueElement-on-vhos.patch [RHELX-57] - kvm-vhost_net-Add-NetClientInfo-start-callback.patch [RHELX-57] - kvm-vhost_net-Add-NetClientInfo-stop-callback.patch [RHELX-57] - kvm-vdpa-add-net_vhost_vdpa_cvq_info-NetClientInfo.patch [RHELX-57] - kvm-vdpa-Move-command-buffers-map-to-start-of-net-device.patch [RHELX-57] - kvm-vdpa-extract-vhost_vdpa_net_cvq_add-from-vhost_vdpa_.patch [RHELX-57] - kvm-vhost_net-add-NetClientState-load-callback.patch [RHELX-57] - kvm-vdpa-Add-virtio-net-mac-address-via-CVQ-at-start.patch [RHELX-57] - kvm-vdpa-Delete-CVQ-migration-blocker.patch [RHELX-57] - kvm-vdpa-Make-VhostVDPAState-cvq_cmd_in_buffer-control-a.patch [RHELX-57] - kvm-vdpa-extract-vhost_vdpa_net_load_mac-from-vhost_vdpa.patch [RHELX-57] - kvm-vdpa-Add-vhost_vdpa_net_load_mq.patch [RHELX-57] - kvm-vdpa-validate-MQ-CVQ-commands.patch [RHELX-57] - kvm-virtio-net-Update-virtio-net-curr_queue_pairs-in-vdp.patch [RHELX-57] - kvm-vdpa-Allow-MQ-feature-in-SVQ.patch [RHELX-57] - kvm-i386-reset-KVM-nested-state-upon-CPU-reset.patch [bz#2125281] - kvm-i386-do-kvm_put_msr_feature_control-first-thing-when.patch [bz#2125281] - kvm-Revert-Re-enable-capstone-internal-build.patch [bz#2127825] - kvm-spec-Use-capstone-package.patch [bz#2127825] - Resolves: RHELX-57 (vDPA SVQ Multiqueue support ) - Resolves: bz#2125281 ([RHEL9.1] Guests in VMX root operation fail to reboot with QEMU's 'system_reset' command [rhel-9.2.0]) - Resolves: bz#2127825 (Use capstone for qemu-kvm build) [7.1.0-1] - Rebase to QEMU 7.1.0 [bz#2111769] - Resolves: bz#2111769 (Rebase to QEMU 7.1.0) [7.0.0-11] - kvm-QIOChannelSocket-Fix-zero-copy-flush-returning-code-.patch [bz#2107466] - kvm-Add-dirty-sync-missed-zero-copy-migration-stat.patch [bz#2107466] - kvm-migration-multifd-Report-to-user-when-zerocopy-not-w.patch [bz#2107466] - kvm-migration-Avoid-false-positive-on-non-supported-scen.patch [bz#2107466] - kvm-migration-add-remaining-params-has_-true-in-migratio.patch [bz#2107466] - kvm-QIOChannelSocket-Add-support-for-MSG_ZEROCOPY-IPV6.patch [bz#2107466] - kvm-pc-bios-s390-ccw-Fix-booting-with-logical-block-size.patch [bz#2112303] - kvm-vdpa-Fix-bad-index-calculus-at-vhost_vdpa_get_vring_.patch [bz#2116876] - kvm-vdpa-Fix-index-calculus-at-vhost_vdpa_svqs_start.patch [bz#2116876] - kvm-vdpa-Fix-memory-listener-deletions-of-iova-tree.patch [bz#2116876] - kvm-vdpa-Fix-file-descriptor-leak-on-get-features-error.patch [bz#2116876] - Resolves: bz#2107466 (zerocopy capability can be enabled when set migrate capabilities with multifd and compress/xbzrle together) - Resolves: bz#2112303 (virtio-blk: Can't boot fresh installation from used 512 cluster_size image under certain conditions) - Resolves: bz#2116876 (Fixes for vDPA control virtqueue support in Qemu) [7.0.0-10] - kvm-vhost-Track-descriptor-chain-in-private-at-SVQ.patch [bz#1939363] - kvm-vhost-Fix-device-s-used-descriptor-dequeue.patch [bz#1939363] - kvm-hw-virtio-Replace-g_memdup-by-g_memdup2.patch [bz#1939363] - kvm-vhost-Fix-element-in-vhost_svq_add-failure.patch [bz#1939363] - kvm-meson-create-have_vhost_-variables.patch [bz#1939363] - kvm-meson-use-have_vhost_-variables-to-pick-sources.patch [bz#1939363] - kvm-vhost-move-descriptor-translation-to-vhost_svq_vring.patch [bz#1939363] - kvm-virtio-net-Expose-MAC_TABLE_ENTRIES.patch [bz#1939363] - kvm-virtio-net-Expose-ctrl-virtqueue-logic.patch [bz#1939363] - kvm-vdpa-Avoid-compiler-to-squash-reads-to-used-idx.patch [bz#1939363] - kvm-vhost-Reorder-vhost_svq_kick.patch [bz#1939363] - kvm-vhost-Move-vhost_svq_kick-call-to-vhost_svq_add.patch [bz#1939363] - kvm-vhost-Check-for-queue-full-at-vhost_svq_add.patch [bz#1939363] - kvm-vhost-Decouple-vhost_svq_add-from-VirtQueueElement.patch [bz#1939363] - kvm-vhost-Add-SVQDescState.patch [bz#1939363] - kvm-vhost-Track-number-of-descs-in-SVQDescState.patch [bz#1939363] - kvm-vhost-add-vhost_svq_push_elem.patch [bz#1939363] - kvm-vhost-Expose-vhost_svq_add.patch [bz#1939363] - kvm-vhost-add-vhost_svq_poll.patch [bz#1939363] - kvm-vhost-Add-svq-avail_handler-callback.patch [bz#1939363] - kvm-vdpa-Export-vhost_vdpa_dma_map-and-unmap-calls.patch [bz#1939363] - kvm-vhost-net-vdpa-add-stubs-for-when-no-virtio-net-devi.patch [bz#1939363] - kvm-vdpa-manual-forward-CVQ-buffers.patch [bz#1939363] - kvm-vdpa-Buffer-CVQ-support-on-shadow-virtqueue.patch [bz#1939363] - kvm-vdpa-Extract-get-features-part-from-vhost_vdpa_get_m.patch [bz#1939363] - kvm-vdpa-Add-device-migration-blocker.patch [bz#1939363] - kvm-vdpa-Add-x-svq-to-NetdevVhostVDPAOptions.patch [bz#1939363] - kvm-redhat-Update-linux-headers-linux-kvm.h-to-v5.18-rc6.patch [bz#2111994] - kvm-target-s390x-kvm-Honor-storage-keys-during-emulation.patch [bz#2111994] - kvm-kvm-don-t-use-perror-without-useful-errno.patch [bz#2095608] - kvm-multifd-Copy-pages-before-compressing-them-with-zlib.patch [bz#2099934] - kvm-Revert-migration-Simplify-unqueue_page.patch [bz#2099934] - Resolves: bz#1939363 (vDPA control virtqueue support in Qemu) - Resolves: bz#2111994 (RHEL9: skey test in kvm_unit_test got failed) - Resolves: bz#2095608 (Please correct the error message when try to start qemu with '-M kernel-irqchip=split') - Resolves: bz#2099934 (Guest reboot on destination host after postcopy migration completed) [7.0.0-9] - kvm-virtio-iommu-Add-bypass-mode-support-to-assigned-dev.patch [bz#2100106] - kvm-virtio-iommu-Use-recursive-lock-to-avoid-deadlock.patch [bz#2100106] - kvm-virtio-iommu-Add-an-assert-check-in-translate-routin.patch [bz#2100106] - kvm-virtio-iommu-Fix-the-partial-copy-of-probe-request.patch [bz#2100106] - kvm-virtio-iommu-Fix-migration-regression.patch [bz#2100106] - kvm-pc-bios-s390-ccw-virtio-Introduce-a-macro-for-the-DA.patch [bz#2098077] - kvm-pc-bios-s390-ccw-bootmap-Improve-the-guessing-logic-.patch [bz#2098077] - kvm-pc-bios-s390-ccw-virtio-blkdev-Simplify-fix-virtio_i.patch [bz#2098077] - kvm-pc-bios-s390-ccw-virtio-blkdev-Remove-virtio_assume_.patch [bz#2098077] - kvm-pc-bios-s390-ccw-virtio-Set-missing-status-bits-whil.patch [bz#2098077] - kvm-pc-bios-s390-ccw-virtio-Read-device-config-after-fea.patch [bz#2098077] - kvm-pc-bios-s390-ccw-virtio-Beautify-the-code-for-readin.patch [bz#2098077] - kvm-pc-bios-s390-ccw-Split-virtio-scsi-code-from-virtio_.patch [bz#2098077] - kvm-pc-bios-s390-ccw-virtio-blkdev-Request-the-right-fea.patch [bz#2098077] - kvm-pc-bios-s390-ccw-netboot.mak-Ignore-Clang-s-warnings.patch [bz#2098077] - kvm-hw-block-fdc-Prevent-end-of-track-overrun-CVE-2021-3.patch [bz#1951522] - kvm-tests-qtest-fdc-test-Add-a-regression-test-for-CVE-2.patch [bz#1951522] - Resolves: bz#2100106 (Fix virtio-iommu/vfio bypass) - Resolves: bz#2098077 (virtio-blk: Can't boot fresh installation from used virtio-blk dasd disk under certain conditions) - Resolves: bz#1951522 (CVE-2021-3507 qemu-kvm: QEMU: fdc: heap buffer overflow in DMA read data transfers [rhel-9.0]) [7.0.0-8] - kvm-tests-avocado-update-aarch64_virt-test-to-exercise-c.patch [bz#2060839] - kvm-RHEL-only-tests-avocado-Switch-aarch64-tests-from-a5.patch [bz#2060839] - kvm-RHEL-only-AArch64-Drop-unsupported-CPU-types.patch [bz#2060839] - kvm-target-i386-deprecate-CPUs-older-than-x86_64-v2-ABI.patch [bz#2060839] - kvm-target-s390x-deprecate-CPUs-older-than-z14.patch [bz#2060839] - kvm-target-arm-deprecate-named-CPU-models.patch [bz#2060839] - kvm-meson.build-Fix-docker-test-build-alpine-when-includ.patch [bz#1968509] - kvm-QIOChannel-Add-flags-on-io_writev-and-introduce-io_f.patch [bz#1968509] - kvm-QIOChannelSocket-Implement-io_writev-zero-copy-flag-.patch [bz#1968509] - kvm-migration-Add-zero-copy-send-parameter-for-QMP-HMP-f.patch [bz#1968509] - kvm-migration-Add-migrate_use_tls-helper.patch [bz#1968509] - kvm-multifd-multifd_send_sync_main-now-returns-negative-.patch [bz#1968509] - kvm-multifd-Send-header-packet-without-flags-if-zero-cop.patch [bz#1968509] - kvm-multifd-Implement-zero-copy-write-in-multifd-migrati.patch [bz#1968509] - kvm-QIOChannelSocket-Introduce-assert-and-reduce-ifdefs-.patch [bz#1968509] - kvm-QIOChannelSocket-Fix-zero-copy-send-so-socket-flush-.patch [bz#1968509] - kvm-migration-Change-zero_copy_send-from-migration-param.patch [bz#1968509] - kvm-migration-Allow-migrate-recover-to-run-multiple-time.patch [bz#2096143] - Resolves: bz#2060839 (Consider deprecating CPU models like 'kvm64' / 'qemu64' on RHEL 9) - Resolves: bz#1968509 (Use MSG_ZEROCOPY on QEMU Live Migration) - Resolves: bz#2096143 (The migration port is not released if use it again for recovering postcopy migration) [7.0.0-7] - kvm-coroutine-ucontext-use-QEMU_DEFINE_STATIC_CO_TLS.patch [bz#1952483] - kvm-coroutine-use-QEMU_DEFINE_STATIC_CO_TLS.patch [bz#1952483] - kvm-coroutine-win32-use-QEMU_DEFINE_STATIC_CO_TLS.patch [bz#1952483] - kvm-Enable-virtio-iommu-pci-on-x86_64.patch [bz#2094252] - kvm-linux-aio-fix-unbalanced-plugged-counter-in-laio_io_.patch [bz#2092788] - kvm-linux-aio-explain-why-max-batch-is-checked-in-laio_i.patch [bz#2092788] - Resolves: bz#1952483 (RFE: QEMU's coroutines fail with CFLAGS=-flto on non-x86_64 architectures) - Resolves: bz#2094252 (Compile the virtio-iommu device on x86_64) - Resolves: bz#2092788 (Stalled IO Operations in VM) [7.0.0-6] - kvm-Introduce-event-loop-base-abstract-class.patch [bz#2031024] - kvm-util-main-loop-Introduce-the-main-loop-into-QOM.patch [bz#2031024] - kvm-util-event-loop-base-Introduce-options-to-set-the-th.patch [bz#2031024] - kvm-qcow2-Improve-refcount-structure-rebuilding.patch [bz#2072379] - kvm-iotests-108-Test-new-refcount-rebuild-algorithm.patch [bz#2072379] - kvm-qcow2-Add-errp-to-rebuild_refcount_structure.patch [bz#2072379] - kvm-iotests-108-Fix-when-missing-user_allow_other.patch [bz#2072379] - kvm-virtio-net-setup-vhost_dev-and-notifiers-for-cvq-onl.patch [bz#2070804] - kvm-virtio-net-align-ctrl_vq-index-for-non-mq-guest-for-.patch [bz#2070804] - kvm-vhost-vdpa-fix-improper-cleanup-in-net_init_vhost_vd.patch [bz#2070804] - kvm-vhost-net-fix-improper-cleanup-in-vhost_net_start.patch [bz#2070804] - kvm-vhost-vdpa-backend-feature-should-set-only-once.patch [bz#2070804] - kvm-vhost-vdpa-change-name-and-polarity-for-vhost_vdpa_o.patch [bz#2070804] - kvm-virtio-net-don-t-handle-mq-request-in-userspace-hand.patch [bz#2070804] - kvm-Revert-globally-limit-the-maximum-number-of-CPUs.patch [bz#2094270] - kvm-vfio-common-remove-spurious-warning-on-vfio_listener.patch [bz#2086262] - Resolves: bz#2031024 (Add support for fixing thread pool size [QEMU]) - Resolves: bz#2072379 (Fail to rebuild the reference count tables of qcow2 image on host block devices (e.g. LVs)) - Resolves: bz#2070804 (PXE boot crash qemu when using multiqueue vDPA) - Resolves: bz#2094270 (Do not set the hard vCPU limit to the soft vCPU limit in downstream qemu-kvm anymore) - Resolves: bz#2086262 ([Win11][tpm]vfio_listener_region_del received unaligned region) [7.0.0-5] - kvm-qemu-nbd-Pass-max-connections-to-blockdev-layer.patch [bz#1708300] - kvm-nbd-server-Allow-MULTI_CONN-for-shared-writable-expo.patch [bz#1708300] - Resolves: bz#1708300 (RFE: qemu-nbd vs NBD_FLAG_CAN_MULTI_CONN) [7.0.0-4] - kvm-qapi-machine.json-Add-cluster-id.patch [bz#2041823] - kvm-qtest-numa-test-Specify-CPU-topology-in-aarch64_numa.patch [bz#2041823] - kvm-hw-arm-virt-Consider-SMP-configuration-in-CPU-topolo.patch [bz#2041823] - kvm-qtest-numa-test-Correct-CPU-and-NUMA-association-in-.patch [bz#2041823] - kvm-hw-arm-virt-Fix-CPU-s-default-NUMA-node-ID.patch [bz#2041823] - kvm-hw-acpi-aml-build-Use-existing-CPU-topology-to-build.patch [bz#2041823] - kvm-coroutine-Rename-qemu_coroutine_inc-dec_pool_size.patch [bz#2079938] - kvm-coroutine-Revert-to-constant-batch-size.patch [bz#2079938] - kvm-virtio-scsi-fix-ctrl-and-event-handler-functions-in-.patch [bz#2079347] - kvm-virtio-scsi-don-t-waste-CPU-polling-the-event-virtqu.patch [bz#2079347] - kvm-virtio-scsi-clean-up-virtio_scsi_handle_event_vq.patch [bz#2079347] - kvm-virtio-scsi-clean-up-virtio_scsi_handle_ctrl_vq.patch [bz#2079347] - kvm-virtio-scsi-clean-up-virtio_scsi_handle_cmd_vq.patch [bz#2079347] - kvm-virtio-scsi-move-request-related-items-from-.h-to-.c.patch [bz#2079347] - kvm-Revert-virtio-scsi-Reject-scsi-cd-if-data-plane-enab.patch [bz#1995710] - kvm-migration-Fix-operator-type.patch [bz#2064530] - Resolves: bz#2041823 ([aarch64][numa] When there are at least 6 Numa nodes serial log shows 'arch topology borken') - Resolves: bz#2079938 (qemu coredump when boot with multi disks (qemu) failed to set up stack guard page: Cannot allocate memory) - Resolves: bz#2079347 (Guest boot blocked when scsi disks using same iothread and 100% CPU consumption) - Resolves: bz#1995710 (RFE: Allow virtio-scsi CD-ROM media change with IOThreads) - Resolves: bz#2064530 (Rebuild qemu-kvm with clang-14) [7.0.0-3] - kvm-hw-arm-virt-Remove-the-dtb-kaslr-seed-machine-option.patch [bz#2046029] - kvm-hw-arm-virt-Fix-missing-initialization-in-instance-c.patch [bz#2046029] - kvm-Enable-virtio-iommu-pci-on-aarch64.patch [bz#1477099] - kvm-sysemu-tpm-Add-a-stub-function-for-TPM_IS_CRB.patch [bz#2037612] - kvm-vfio-common-remove-spurious-tpm-crb-cmd-misalignment.patch [bz#2037612] - Resolves: bz#2046029 ([WRB] New machine type property - dtb-kaslr-seed) - Resolves: bz#1477099 (virtio-iommu (including ACPI, VHOST/VFIO integration, migration support)) - Resolves: bz#2037612 ([Win11][tpm][QL41112 PF] vfio_listener_region_add received unaligned region) [7.0.0-2] - kvm-configs-devices-aarch64-softmmu-Enable-CONFIG_VIRTIO.patch [bz#2044162] - kvm-target-ppc-cpu-models-Fix-ppc_cpu_aliases-list-for-R.patch [bz#2081022] - Resolves: bz#2044162 ([RHEL9.1] Enable virtio-mem as tech-preview on ARM64 QEMU) - Resolves: bz#2081022 (Build regression on ppc64le with c9s qemu-kvm 7.0.0-1 changes) [7.0.0-1] - Rebase to QEMU 7.0.0 [bz#2064757] - Do not build ssh block driver anymore [bz#2064500] - Removed hpet and parallel port support [bz#2065042] - Compatibility support [bz#2064782 bz#2064771] - Resolves: bz#2064757 (Rebase to QEMU 7.0.0) - Resolves: bz#2064500 (Install qemu-kvm-6.2.0-11.el9_0.1 failed as conflict with qemu-kvm-block-ssh-6.2.0-11.el9_0.1) - Resolves: bz#2065042 (Remove upstream-only devices from the qemu-kvm binary) - Resolves: bz#2064782 (Update machine type compatibility for QEMU 7.0.0 update [s390x]) - Resolves: bz#2064771 (Update machine type compatibility for QEMU 7.0.0 update [x86_64]) [6.2.0-13] - kvm-RHEL-disable-seqpacket-for-vhost-vsock-device-in-rhe.patch [bz#2065589] - Resolves: bz#2065589 (RHEL 9.0 guest with vsock device migration failed from RHEL 9.0 > RHEL 8.6 [rhel-9.1.0]) [6.2.0-12] - kvm-RHEL-mark-old-machine-types-as-deprecated.patch [bz#2062813] - kvm-hw-virtio-vdpa-Fix-leak-of-host-notifier-memory-regi.patch [bz#2062828] - kvm-spec-Fix-obsolete-for-spice-subpackages.patch [bz#2062819 bz#2062817] - kvm-spec-Obsolete-old-usb-redir-subpackage.patch [bz#2062819] - kvm-spec-Obsolete-ssh-driver.patch [bz#2062817] - Resolves: bz#2062828 ([virtual network][rhel9][vDPA] qemu crash after hot unplug vdpa device [rhel-9.1.0]) - Resolves: bz#2062819 (Broken upgrade path due to qemu-kvm-hw-usbredir rename [rhel-9.1.0]) - Resolves: bz#2062817 (Missing qemu-kvm-block-ssh obsolete breaks upgrade path [rhel-9.1.0]) - Resolves: bz#2062813 (Mark all RHEL-8 and earlier machine types as deprecated [rhel-9.1.0]) [6.2.0-11] - kvm-spec-Remove-qemu-virtiofsd.patch [bz#2055284] - Resolves: bz#2055284 (Remove the qemu-virtiofsd subpackage) [6.2.0-10] - kvm-Revert-ui-clipboard-Don-t-use-g_autoptr-just-to-free.patch [bz#2042820] - kvm-ui-avoid-compiler-warnings-from-unused-clipboard-inf.patch [bz#2042820] - kvm-ui-clipboard-fix-use-after-free-regression.patch [bz#2042820] - kvm-ui-vnc.c-Fixed-a-deadlock-bug.patch [bz#2042820] - kvm-memory-Fix-incorrect-calls-of-log_global_start-stop.patch [bz#2044818] - kvm-memory-Fix-qemu-crash-on-starting-dirty-log-twice-wi.patch [bz#2044818] - Resolves: bz#2042820 (qemu crash when try to copy and paste contents from client to VM) - Resolves: bz#2044818 (Qemu Core Dumped when migrate -> migrate_cancel -> migrate again during guest is paused) [6.2.0-9] - kvm-block-Lock-AioContext-for-drain_end-in-blockdev-reop.patch [bz#2046659] - kvm-iotests-Test-blockdev-reopen-with-iothreads-and-thro.patch [bz#2046659] - kvm-block-nbd-Delete-reconnect-delay-timer-when-done.patch [bz#2033626] - kvm-block-nbd-Assert-there-are-no-timers-when-closed.patch [bz#2033626] - kvm-iotests.py-Add-QemuStorageDaemon-class.patch [bz#2033626] - kvm-iotests-281-Test-lingering-timers.patch [bz#2033626] - kvm-block-nbd-Move-s-ioc-on-AioContext-change.patch [bz#2033626] - kvm-iotests-281-Let-NBD-connection-yield-in-iothread.patch [bz#2033626] - Resolves: bz#2046659 (qemu crash after execute blockdev-reopen with iothread) - Resolves: bz#2033626 (Qemu core dump when start guest with nbd node or do block jobs to nbd node) [6.2.0-8] - kvm-numa-Enable-numa-for-SGX-EPC-sections.patch [bz#2033708] - kvm-numa-Support-SGX-numa-in-the-monitor-and-Libvirt-int.patch [bz#2033708] - kvm-doc-Add-the-SGX-numa-description.patch [bz#2033708] - kvm-Enable-SGX-RH-Only.patch [bz#2033708] - kvm-qapi-Cleanup-SGX-related-comments-and-restore-sectio.patch [bz#2033708] - kvm-block-io-Update-BSC-only-if-want_zero-is-true.patch [bz#2041461] - kvm-iotests-block-status-cache-New-test.patch [bz#2041461] - kvm-iotests-Test-qemu-img-convert-of-zeroed-data-cluster.patch [bz#1882917] - kvm-qemu-img-make-is_allocated_sectors-more-efficient.patch [bz#1882917] - kvm-block-backend-prevent-dangling-BDS-pointers-across-a.patch [bz#2040123] - kvm-iotests-stream-error-on-reset-New-test.patch [bz#2040123] - kvm-hw-arm-smmuv3-Fix-device-reset.patch [bz#2042481] - Resolves: bz#2033708 ([Intel 9.0 Feat] qemu-kvm: SGX 1.5 (SGX1 + Flexible Launch Control) support) - Resolves: bz#2041461 (Inconsistent block status reply in qemu-nbd) - Resolves: bz#1882917 (the target image size is incorrect when converting a badly fragmented file) - Resolves: bz#2040123 (Qemu core dumped when do block-stream to a snapshot node on non-enough space storage) - Resolves: bz#2042481 ([aarch64] Launch guest with 'default-bus-bypass-iommu=off,iommu=smmuv3' and 'iommu_platform=on', guest hangs after system_reset) [6.2.0-7] - kvm-qemu-storage-daemon-Add-vhost-user-blk-help.patch [bz#1962088] - kvm-qemu-storage-daemon-Fix-typo-in-vhost-user-blk-help.patch [bz#1962088] - kvm-virtiofsd-Drop-membership-of-all-supplementary-group.patch [bz#2046201] - kvm-block-rbd-fix-handling-of-holes-in-.bdrv_co_block_st.patch [bz#2034791] - kvm-block-rbd-workaround-for-ceph-issue-53784.patch [bz#2034791] - Resolves: bz#1962088 ([QSD] wrong help message for the fuse) - Resolves: bz#2046201 (CVE-2022-0358 qemu-kvm: QEMU: virtiofsd: potential privilege escalation via CVE-2018-13405 [rhel-9.0]) - Resolves: bz#2034791 (Booting from Local Snapshot Core Dumped Whose Backing File Is Based on RBD) [6.2.0-6] - Moving feature support out of qemu-kvm-core to separate packages (can cause loss of functionality when using only qemu-kvm-core - qemu-kvm keeps same feature set). - kvm-spec-Rename-qemu-kvm-hw-usbredir-to-qemu-kvm-device-.patch [bz#2022847] - kvm-spec-Split-qemu-kvm-ui-opengl.patch [bz#2022847] - kvm-spec-Introduce-packages-for-virtio-gpu-modules.patch [bz#2022847] - kvm-spec-Introduce-device-display-virtio-vga-packages.patch [bz#2022847] - kvm-spec-Move-usb-host-module-to-separate-package.patch [bz#2022847] - kvm-spec-Move-qtest-accel-module-to-tests-package.patch [bz#2022847] - kvm-spec-Extend-qemu-kvm-core-description.patch [bz#2022847] - Resolves: bz#2022847 (qemu-kvm: Align package split with Fedora) [6.2.0-5] - kvm-x86-Add-q35-RHEL-8.6.0-machine-type.patch [bz#1945666] - kvm-x86-Add-q35-RHEL-9.0.0-machine-type.patch [bz#1945666] - kvm-softmmu-fix-device-deletion-events-with-device-JSON-.patch [bz#2036669] - Resolves: bz#1945666 (9.0: x86 machine types) - Resolves: bz#2036669 (DEVICE_DELETED event is not delivered for device frontend if -device is configured via JSON) [6.2.0-4] - kvm-block-nvme-fix-infinite-loop-in-nvme_free_req_queue_.patch [bz#2024544] - kvm-rhel-machine-types-x86-set-prefer_sockets.patch [bz#2028623] - Resolves: bz#2024544 (Fio workers hangs when running fio with 32 jobs iodepth 32 and QEMU's userspace NVMe driver) - Resolves: bz#2028623 ([9.0] machine types: 6.2: Fix prefer_sockets) [6.2.0-3] - kvm-hw-arm-virt-Register-iommu-as-a-class-property.patch [bz#2031044] - kvm-hw-arm-virt-Register-its-as-a-class-property.patch [bz#2031044] - kvm-hw-arm-virt-Rename-default_bus_bypass_iommu.patch [bz#2031044] - kvm-hw-arm-virt-Expose-the-RAS-option.patch [bz#2031044] - kvm-hw-arm-virt-Add-9.0-machine-type-and-remove-8.5-one.patch [bz#2031044] - kvm-hw-arm-virt-Check-no_tcg_its-and-minor-style-changes.patch [bz#2031044] - Resolves: bz#2031044 (Add rhel-9.0.0 machine types for RHEL 9.0 [aarch64]) [6.2.0-2] - kvm-redhat-Add-rhel8.6.0-and-rhel9.0.0-machine-types-for.patch [bz#2008060] - kvm-redhat-Enable-virtio-mem-as-tech-preview-on-x86-64.patch [bz#2014484] - Resolves: bz#2008060 (Fix CPU Model for new IBM Z Hardware - qemu part) - Resolves: bz#2014484 ([RHEL9] Enable virtio-mem as tech-preview on x86-64 - QEMU) [6.2.0-1] - Rebase to QEMU 6.2.0 [bz#2027697] - Resolves: bz#2027697 (Rebase to QEMU 6.2.0) [6.1.0-8] - kvm-Move-ksmtuned-files-to-separate-package.patch [bz#1971678] - Resolves: bz#1971678 (Split out ksmtuned package from qemu-kvm) [6.1.0-7] - kvm-migration-Make-migration-blocker-work-for-snapshots-.patch [bz#1996609] - kvm-migration-Add-migrate_add_blocker_internal.patch [bz#1996609] - kvm-dump-guest-memory-Block-live-migration.patch [bz#1996609] - kvm-spec-Build-the-VDI-block-driver.patch [bz#2013331] - kvm-spec-Explicitly-include-compress-filter.patch [bz#1980035] - Resolves: bz#1996609 (Qemu hit core dump when dump guest memory during live migration) - Resolves: bz#2013331 (RFE: qemu-img cannot convert from vdi format) - Resolves: bz#1980035 (RFE: Enable compress filter so we can create new, compressed qcow2 files via qemu-nbd) [6.1.0-6] - kvm-hw-arm-virt-Add-hw_compat_rhel_8_5-to-8.5-machine-ty.patch [bz#1998942] - Resolves: bz#1998942 (Add machine type compatibility update for 6.1 rebase [aarch64]) [6.1.0-5] - kvm-virtio-balloon-Fix-page-poison-subsection-name.patch [bz#1984401] - kvm-spec-Remove-block-curl-and-block-ssh-dependency.patch [bz#2010985] - Resolves: bz#1984401 (fails to revert snapshot of a VM [balloon/page-poison]) - Resolves: bz#2010985 (Remove dependency on qemu-kvm-block-curl and qemu-kvm-block-ssh [rhel-9.0.0]) [6.1.0-4] - kvm-redhat-Define-hw_compat_rhel_8_5.patch [bz#1998943] - kvm-redhat-Add-s390x-machine-type-compatibility-update-f.patch [bz#1998943] - Resolves: bz#1998943 (Add machine type compatibility update for 6.1 rebase [s390x]) [6.1.0-3] - kvm-disable-sga-device.patch [bz#2000845] - kvm-tools-virtiofsd-Add-fstatfs64-syscall-to-the-seccomp.patch [bz#2005026] - Resolves: bz#2000845 (RFE: Remove SGA, deprecate cirrus, and set defaults for QEMU machine-types in RHEL9) - Resolves: bz#2005026 ([s390][virtio-fs] Umount virtiofs shared folder failure from guest side [rhel-9.0.0]) [6.1.0-2] - kvm-hw-arm-virt-Remove-9.0-machine-type.patch [bz#2002937] - kvm-remove-sgabios-dependency.patch [bz#2000845] - kvm-enable-pulseaudio.patch [bz#1997725] - kvm-spec-disable-use-of-gcrypt-for-crypto-backends-in-fa.patch [bz#1990068] - Resolves: bz#2002937 ([qemu][aarch64] Remove 9.0 machine types in arm virt for 9-Beta) - Resolves: bz#2000845 (RFE: Remove SGA, deprecate cirrus, and set defaults for QEMU machine-types in RHEL9) - Resolves: bz#1997725 (RFE: enable pulseaudio backend on QEMU) - Resolves: bz#1990068 (Disable use of gcrypt for crypto backends in favour of gnutls) [6.1.0-1] - Rebase to QEMU 6.1.0 [bz#1997408] - Resolves: #bz#1997408 (Rebase to QEMU 6.1.0) [6.0.0-13] - kvm-qcow2-Deprecation-warning-when-opening-v2-images-rw.patch [bz#1951814] - kvm-disable-ac97-audio.patch [bz#1995819] - kvm-redhat-Disable-LTO-on-non-x86-architectures.patch [bz#1950192] - kvm-redhat-Enable-the-test-block-iothread-test-again.patch [bz#1950192] - Resolves: bz#1951814 (RFE: Warning when using qcow2-v2 (compat=0.10)) - Resolves: bz#1995819 (RFE: Remove ac97 audio support from QEMU) - Resolves: bz#1950192 (RHEL9: when ioeventfd=off and 8.4guest, (qemu) qemu-kvm: ../util/qemu-coroutine-lock.c:57: qemu_co_queue_wait_impl: Assertion qemu_in_coroutine()' failed.) [6.0.0-12.el9] - kvm-migration-Move-yank-outside-qemu_start_incoming_migr.patch [bz#1974683] - kvm-migration-Allow-reset-of-postcopy_recover_triggered-.patch [bz#1974683] - kvm-Remove-RHEL-7.0.0-machine-type.patch [bz#1968519] - kvm-Remove-RHEL-7.1.0-machine-type.patch [bz#1968519] - kvm-Remove-RHEL-7.2.0-machine-type.patch [bz#1968519] - kvm-Remove-RHEL-7.3.0-machine-types.patch [bz#1968519] - kvm-Remove-RHEL-7.4.0-machine-types.patch [bz#1968519] - kvm-Remove-RHEL-7.5.0-machine-types.patch [bz#1968519] - kvm-acpi-pc-revert-back-to-v5.2-PCI-slot-enumeration.patch [bz#1957194] - kvm-migration-failover-reset-partially_hotplugged.patch [bz#1957194] - kvm-hmp-Fix-loadvm-to-resume-the-VM-on-success-instead-o.patch [bz#1957194] - kvm-migration-Move-bitmap_mutex-out-of-migration_bitmap_.patch [bz#1957194] - kvm-i386-cpu-Expose-AVX_VNNI-instruction-to-guest.patch [bz#1957194] - kvm-ratelimit-protect-with-a-mutex.patch [bz#1957194] - kvm-Update-Linux-headers-to-5.13-rc4.patch [bz#1957194] - kvm-i386-Add-ratelimit-for-bus-locks-acquired-in-guest.patch [bz#1957194] - kvm-iothread-generalize-iothread_set_param-iothread_get_.patch [bz#1957194] - kvm-iothread-add-aio-max-batch-parameter.patch [bz#1957194] - kvm-linux-aio-limit-the-batch-size-using-aio-max-batch-p.patch [bz#1957194] - kvm-block-nvme-Fix-VFIO_MAP_DMA-failed-No-space-left-on-.patch [bz#1957194] - kvm-migration-move-wait-unplug-loop-to-its-own-function.patch [bz#1957194] - kvm-migration-failover-continue-to-wait-card-unplug-on-e.patch [bz#1957194] - kvm-aarch64-Add-USB-storage-devices.patch [bz#1957194] - kvm-iotests-Improve-and-rename-test-291-to-qemu-img-bitm.patch [bz#1957194] - kvm-qemu-img-Fail-fast-on-convert-bitmaps-with-inconsist.patch [bz#1957194] - kvm-qemu-img-Add-skip-broken-bitmaps-for-convert-bitmaps.patch [bz#1957194] - kvm-audio-Never-send-migration-section.patch [bz#1957194] - kvm-pc-bios-s390-ccw-bootmap-Silence-compiler-warning-fr.patch [bz#1939509 bz#1940132] - kvm-pc-bios-s390-ccw-Use-reset_psw-pointer-instead-of-ha.patch [bz#1939509 bz#1940132] - kvm-pc-bios-s390-ccw-netboot-Use-Wl-prefix-to-pass-param.patch [bz#1939509 bz#1940132] - kvm-pc-bios-s390-ccw-Silence-warning-from-Clang-by-marki.patch [bz#1939509 bz#1940132] - kvm-pc-bios-s390-ccw-Fix-the-cc-option-macro-in-the-Make.patch [bz#1939509 bz#1940132] - kvm-pc-bios-s390-ccw-Silence-GCC-11-stringop-overflow-wa.patch [bz#1939509 bz#1940132] - kvm-pc-bios-s390-ccw-Allow-building-with-Clang-too.patch [bz#1939509 bz#1940132] - kvm-pc-bios-s390-ccw-Fix-inline-assembly-for-older-versi.patch [bz#1939509 bz#1940132] - kvm-configure-Fix-endianess-test-with-LTO.patch [bz#1939509 bz#1940132] - kvm-spec-Switch-toolchain-to-Clang-LLVM.patch [bz#1939509 bz#1940132] - kvm-spec-Use-safe-stack-for-x86_64.patch [bz#1939509 bz#1940132] - kvm-spec-Reenable-write-support-for-VMDK-etc.-in-tools.patch [bz#1989841] - Resolves: bz#1974683 (Fail to set migrate incoming for 2nd time after the first time failed) - Resolves: bz#1968519 (Remove all the old 7.0-7.5 machine types) - Resolves: bz#1957194 (Synchronize RHEL-AV 8.5.0 changes to RHEL 9.0.0 Beta) - Resolves: bz#1939509 (QEMU: enable SafeStack) - Resolves: bz#1940132 (QEMU: switch build toolchain to Clang/LLVM) - Resolves: bz#1989841 (RFE: qemu-img cannot convert images into vmdk and vpc formats) [17:6.0.0-11.1] - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 [6.0.0-11] - kvm-arm-virt-Register-iommu-as-a-class-property.patch [bz#1838608] - kvm-arm-virt-Register-its-as-a-class-property.patch [bz#1838608] - kvm-arm-virt-Enable-ARM-RAS-support.patch [bz#1838608] - kvm-block-Fix-in_flight-leak-in-request-padding-error-pa.patch [bz#1972079] - kvm-spec-Remove-buildldflags.patch [bz#1973029] - kvm-spec-Use-make_build-macro.patch [bz#1973029] - kvm-spec-Drop-make-install-sharedir-and-datadir-usage.patch [bz#1973029] - kvm-spec-use-make_install-macro.patch [bz#1973029] - kvm-spec-parallelize-make-check.patch [bz#1973029] - kvm-spec-Drop-explicit-build-id.patch [bz#1973029] - kvm-spec-use-build_ldflags.patch [bz#1973029] - kvm-Move-virtiofsd-to-separate-package.patch [bz#1979728] - kvm-Utilize-firmware-configure-option.patch [bz#1980139] - Resolves: bz#1838608 (aarch64: Enable ARMv8 RAS virtualization support) - Resolves: bz#1972079 (Windows Installation blocked on 4k disk when using blk+raw+iothread) - Resolves: bz#1973029 (Spec file cleanups) - Resolves: bz#1979728 (Split out virtiofsd subpackage) - Resolves: bz#1980139 (Use configure --firmwarepath more) [6.0.0-10] - kvm-s390x-css-Introduce-an-ESW-struct.patch [bz#1957194] - kvm-s390x-css-Split-out-the-IRB-sense-data.patch [bz#1957194] - kvm-s390x-css-Refactor-IRB-construction.patch [bz#1957194] - kvm-s390x-css-Add-passthrough-IRB.patch [bz#1957194] - kvm-vhost-user-blk-Fail-gracefully-on-too-large-queue-si.patch [bz#1957194] - kvm-vhost-user-blk-Make-sure-to-set-Error-on-realize-fai.patch [bz#1957194] - kvm-vhost-user-blk-Don-t-reconnect-during-initialisation.patch [bz#1957194] - kvm-vhost-user-blk-Improve-error-reporting-in-realize.patch [bz#1957194] - kvm-vhost-user-blk-Get-more-feature-flags-from-vhost-dev.patch [bz#1957194] - kvm-virtio-Fail-if-iommu_platform-is-requested-but-unsup.patch [bz#1957194] - kvm-vhost-user-blk-Check-that-num-queues-is-supported-by.patch [bz#1957194] - kvm-vhost-user-Fix-backends-without-multiqueue-support.patch [bz#1957194] - kvm-file-posix-fix-max_iov-for-dev-sg-devices.patch [bz#1957194] - kvm-scsi-generic-pass-max_segments-via-max_iov-field-in-.patch [bz#1957194] - kvm-osdep-provide-ROUND_DOWN-macro.patch [bz#1957194] - kvm-block-backend-align-max_transfer-to-request-alignmen.patch [bz#1957194] - kvm-block-add-max_hw_transfer-to-BlockLimits.patch [bz#1957194] - kvm-file-posix-try-BLKSECTGET-on-block-devices-too-do-no.patch [bz#1957194] - kvm-block-Add-option-to-use-driver-whitelist-even-in-too.patch [bz#1957782] - kvm-spec-Restrict-block-drivers-in-tools.patch [bz#1957782] - kvm-Move-tools-to-separate-package.patch [bz#1972285] - kvm-Split-qemu-pr-helper-to-separate-package.patch [bz#1972300] - kvm-spec-RPM_BUILD_ROOT-buildroot.patch [bz#1973029] - kvm-spec-More-use-of-name-instead-of-qemu-kvm.patch [bz#1973029] - kvm-spec-Use-qemu-pr-helper.service-from-qemu.git.patch [bz#1973029] - kvm-spec-Use-_sourcedir-for-referencing-sources.patch [bz#1973029] - kvm-spec-Add-tools_only.patch [bz#1973029] - kvm-spec-build-Add-run_configure-helper.patch [bz#1973029] - kvm-spec-build-Disable-more-bits-with-disable_everything.patch [bz#1973029] - kvm-spec-build-Add-macros-for-some-configure-parameters.patch [bz#1973029] - kvm-spec-files-Move-qemu-guest-agent-and-qemu-img-earlie.patch [bz#1973029] - kvm-spec-install-Remove-redundant-bits.patch [bz#1973029] - kvm-spec-install-Add-modprobe_kvm_conf-macro.patch [bz#1973029] - kvm-spec-install-Remove-qemu-guest-agent-etc-qemu-kvm-us.patch [bz#1973029] - kvm-spec-install-clean-up-qemu-ga-section.patch [bz#1973029] - kvm-spec-install-Use-a-single-tools_only-section.patch [bz#1973029] - kvm-spec-Make-tools_only-not-cross-spec-sections.patch [bz#1973029] - kvm-spec-install-Limit-time-spent-in-qemu_kvm_build.patch [bz#1973029] - kvm-spec-misc-syntactic-merges-with-Fedora.patch [bz#1973029] - kvm-spec-Use-Fedora-s-pattern-for-specifying-rc-version.patch [bz#1973029] - kvm-spec-files-don-t-use-fine-grained-docs-file-list.patch [bz#1973029] - kvm-spec-files-Add-licenses-to-qemu-common-too.patch [bz#1973029] - kvm-spec-install-Drop-python3-shebang-fixup.patch [bz#1973029] - Resolves: bz#1957194 (Synchronize RHEL-AV 8.5.0 changes to RHEL 9.0.0 Beta) - Resolves: bz#1957782 (VMDK support should be read-only) - Resolves: bz#1972285 (Split out a qemu-kvm-tools subpackage) - Resolves: bz#1972300 (Split out a qemu-pr-helper subpackage) - Resolves: bz#1973029 (Spec file cleanups) [6.0.0-9] - kvm-s390x-cpumodel-add-3931-and-3932.patch [bz#1932191] - kvm-spapr-Fix-EEH-capability-issue-on-KVM-guest-for-PCI-.patch [bz#1957194] - kvm-ppc-pef.c-initialize-cgs-ready-in-kvmppc_svm_init.patch [bz#1957194] - kvm-redhat-Move-qemu-kvm-docs-dependency-to-qemu-kvm.patch [bz#1957194] - kvm-redhat-introducting-qemu-kvm-hw-usbredir.patch [bz#1957194] - kvm-redhat-use-the-standard-vhost-user-JSON-path.patch [bz#1957194] - Resolves: bz#1932191 ([IBM 9.0 FEAT] CPU Model for new IBM Z Hardware - qemu part (kvm)) - Resolves: bz#1957194 (Synchronize RHEL-AV 8.5.0 changes to RHEL 9.0.0 Beta) [6.0.0-8] - kvm-Disable-TPM-passthrough.patch [bz#1978911] - kvm-redhat-Replace-the-kvm-setup.service-with-a-etc-modu.patch [bz#1978837] - Resolves: bz#1978911 (Remove TPM Passthrough option from RHEL 9) - Resolves: bz#1978837 (Remove/replace kvm-setup.service) [6.0.0-7] - kvm-aarch64-rh-devices-add-CONFIG_PXB.patch [bz#1967502] - kvm-virtio-gpu-handle-partial-maps-properly.patch [bz#1974795] - kvm-x86-Add-x86-rhel8.5-machine-types.patch [bz#1957194] - kvm-redhat-x86-Enable-kvm-asyncpf-int-by-default.patch [bz#1957194] - kvm-block-backend-add-drained_poll.patch [bz#1957194] - kvm-nbd-server-Use-drained-block-ops-to-quiesce-the-serv.patch [bz#1957194] - kvm-disable-CONFIG_USB_STORAGE_BOT.patch [bz#1957194] - kvm-doc-Fix-some-mistakes-in-the-SEV-documentation.patch [bz#1957194] - kvm-docs-Add-SEV-ES-documentation-to-amd-memory-encrypti.patch [bz#1957194] - kvm-docs-interop-firmware.json-Add-SEV-ES-support.patch [bz#1957194] - kvm-qga-drop-StandardError-syslog.patch [bz#1947977] - kvm-Remove-iscsi-support.patch [bz#1967133] - Resolves: bz#1967502 ([aarch64] [qemu] Compile the PCIe expander bridge) - Resolves: bz#1974795 ([RHEL9-beta] [aarch64] Launch guest with virtio-gpu-pci and virtual smmu causes 'virtio_gpu_dequeue_ctrl_func' ERROR) - Resolves: bz#1957194 (Synchronize RHEL-AV 8.5.0 changes to RHEL 9.0.0 Beta) - Resolves: bz#1947977 (remove StandardError=syslog from qemu-guest-agent.service) - Resolves: bz#1967133 (QEMU: disable libiscsi in RHEL-9) [6.0.0-6] - kvm-yank-Unregister-function-when-using-TLS-migration.patch [bz#1972462] - kvm-pc-bios-s390-ccw-don-t-try-to-read-the-next-block-if.patch [bz#1957194] - kvm-redhat-Install-the-s390-netboot.img-that-we-ve-built.patch [bz#1957194] - kvm-sockets-update-SOCKET_ADDRESS_TYPE_FD-listen-2-backl.patch [bz#1957194] - kvm-target-i386-sev-add-support-to-query-the-attestation.patch [bz#1957194] - kvm-spapr-Don-t-hijack-current_machine-boot_order.patch [bz#1957194] - kvm-target-i386-Add-CPU-model-versions-supporting-xsaves.patch [bz#1957194] - kvm-spapr-Remove-stale-comment-about-power-saving-LPCR-b.patch [bz#1957194] - kvm-spapr-Set-LPCR-to-current-AIL-mode-when-starting-a-n.patch [bz#1957194] - Specfile cleanup [bz#1973029] - Resolves: bz#1972462 (QEMU core dump when doing TLS migration via TCP) - Resolves: bz#1957194 (Synchronize RHEL-AV 8.5.0 changes to RHEL 9.0.0 Beta) - Resolves: bz#1973029 (Spec file cleanups) [6.0.0-5] - kvm-arm-virt-Register-highmem-and-gic-version-as-class-p.patch [bz#1952449] - kvm-hw-arm-virt-Add-8.5-and-9.0-machine-types-and-remove.patch [bz#1952449] - kvm-aarch64-rh-devices-add-CONFIG_PVPANIC_PCI.patch [bz#1747467] - kvm-spec-Do-not-build-qemu-kvm-block-gluster.patch [bz#1964795] - kvm-spec-Do-not-link-pcnet-and-ne2k_pci-roms.patch [bz#1965961] - kvm-redhat-s390x-add-rhel-8.5.0-compat-machine.patch [bz#1957194] - kvm-redhat-add-missing-entries-in-hw_compat_rhel_8_4.patch [bz#1957194] - kvm-redhat-Define-pseries-rhel8.5.0-machine-type.patch [bz#1957194] - kvm-virtio-net-failover-add-missing-remove_migration_sta.patch [bz#1957194] - kvm-hw-arm-virt-Disable-PL011-clock-migration-through-hw.patch [bz#1957194] - kvm-virtio-blk-Fix-rollback-path-in-virtio_blk_data_plan.patch [bz#1957194] - kvm-virtio-blk-Configure-all-host-notifiers-in-a-single-.patch [bz#1957194] - kvm-virtio-scsi-Set-host-notifiers-and-callbacks-separat.patch [bz#1957194] - kvm-virtio-scsi-Configure-all-host-notifiers-in-a-single.patch [bz#1957194] - kvm-hw-arm-smmuv3-Another-range-invalidation-fix.patch [bz#1957194] - Resolves: bz#1952449 ([aarch64] define RHEL9 machine types) - Resolves: bz#1747467 ([aarch64] [qemu] PVPANIC support) - Resolves: bz#1964795 (Remove qemu-kvm-block-gluster package) - Resolves: bz#1965961 (Remove links to not build roms) - Resolves: bz#1957194 (Synchronize RHEL-AV 8.5.0 changes to RHEL 9.0.0 Beta) [6.0.0-4] - kvm-s390x-redhat-disable-experimental-3270-device.patch - Resolves: bz#1962479 (Disable the 'x-terminal3270' device in qemu-kvm on s390x) [6.0.0-3] - kvm-hw-s390x-Remove-the-RHEL7-only-machine-type.patch [bz#1944730] - Resolves: bz#1944730 (Remove RHEL7 machine type (s390-ccw-virtio-rhel7.5.0)) [6.0.0-2] - kvm-Remove-message-with-running-VM-count.patch [bz#1914461] - kvm-Remove-SPICE-and-QXL-from-x86_64-rh-devices.mak.patch [bz#1906168] - kvm-spec-file-build-qemu-kvm-without-SPICE-and-QXL.patch [bz#1906168] - kvm-spec-file-Obsolete-qemu-kvm-ui-spice.patch [bz#1906168] - Resolves: bz#1914461 (Remove KVM guest count and limit info message) - Resolves: bz#1906168 ([RHEL-9] qemu-kvm spec-file: Do not BuildRequire spice) [6.0.0-1] - Rebase to QEMU 6.0 - Resolves: bz#1872569 [5.2.0-16] - kvm-Limit-build-on-Power-to-qemu-img-and-qemu-ga-only.patch [bz#1944056] - Resolves: bz#1944056 (Do not build qemu-kvm for Power) [15:5.2.0-15] - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 [5.2.0-14.el8] - kvm-vhost-user-blk-fix-blkcfg-num_queues-endianness.patch [bz#1937004] - kvm-block-export-fix-blk_size-double-byteswap.patch [bz#1937004] - kvm-block-export-use-VIRTIO_BLK_SECTOR_BITS.patch [bz#1937004] - kvm-block-export-fix-vhost-user-blk-export-sector-number.patch [bz#1937004] - kvm-block-export-port-virtio-blk-discard-write-zeroes-in.patch [bz#1937004] - kvm-block-export-port-virtio-blk-read-write-range-check.patch [bz#1937004] - kvm-spec-ui-spice-sub-package.patch [bz#1936373] - kvm-spec-ui-opengl-sub-package.patch [bz#1936373] - Resolves: bz#1937004 (vhost-user-blk server endianness and input validation fixes) - Resolves: bz#1936373 (move spice & opengl modules to rpm subpackages) MODERATE Copyright 2023 Oracle, Inc. CVE-2022-3165 CVE-2022-4172 Oracle Linux 9 [20221207gitfff6d81270b5-9] - edk2-remove-amd-sev-feature-flag-from-secure-boot-builds-.patch [bz#2169247] - Resolves: bz#2169247 ([edk2] Install a sev guest with enrolled secure boot failed) [20221207gitfff6d81270b5-8] - edk2-OvmfPkg-disable-dynamic-mmio-window-rhel-only.patch [bz#2174605] - Resolves: bz#2174605 ([EDK2] disable dynamic mmio window) [20221207gitfff6d81270b5-7] - edk2-Revert-MdeModulePkg-TerminalDxe-add-other-text-resol.patch [bz#2162307] - Resolves: bz#2162307 (Broken GRUB output on a serial console) [20221207gitfff6d81270b5-6] - edk2-update-build-script-rhel-only.patch [bz#2168046] - edk2-update-build-config-rhel-only.patch [bz#2168046] - edk2-add-release-date-to-builds-rh-only.patch [bz#2168046] - edk2-openssl-update.patch [bz#2164534 bz#2164550 bz#2164565 bz#2164583] - edk2-rh-openssl-add-crypto-bn-rsa_sup_mul.c-to-file-list.patch [bz#2164534 bz#2164550 bz#2164565 bz#2164583] - Resolves: bz#2168046 ([SVVP] job 'Check SMBIOS Table Specific Requirements' failed on win2022) - Resolves: bz#2164534 (CVE-2023-0286 edk2: openssl: X.400 address type confusion in X.509 GeneralName [rhel-9]) - Resolves: bz#2164550 (CVE-2022-4304 edk2: openssl: timing attack in RSA Decryption implementation [rhel-9]) - Resolves: bz#2164565 (CVE-2023-0215 edk2: openssl: use-after-free following BIO_new_NDEF [rhel-9]) - Resolves: bz#2164583 (CVE-2022-4450 edk2: openssl: double free after calling PEM_read_bio_ex [rhel-9]) [20221207gitfff6d81270b5-5] - edk2-Revert-ArmVirtPkg-ArmVirtQemu-enable-initial-ID-map-.patch [bz#2157656] - Resolves: bz#2157656 ([edk2] [aarch64] Unable to initialize EFI firmware when using edk2-aarch64-20221207gitfff6d81270b5-1.el9 in some hardwares) [20221207gitfff6d81270b5-4] - edk2-ArmVirt-don-t-use-unaligned-CopyMem-on-NOR-flash.patch [bz#2158173] - Resolves: bz#2158173 ([aarch64][numa] Failed to create 2 numa nodes in some hardwares) [20221207gitfff6d81270b5-3] - edk2-OvmfPkg-VirtNorFlashDxe-map-flash-memory-as-uncachea.patch [bz#2158173] - edk2-MdePkg-Remove-Itanium-leftover-data-structure-RH-onl.patch [bz#1983086] - Resolves: bz#2158173 ([aarch64][numa] Failed to create 2 numa nodes in some hardwares) - Resolves: bz#1983086 (Assertion failure when creating 1024 VCPU VM: [...]UefiCpuPkg/CpuMpPei/CpuBist.c(186): !EFI_ERROR (Status)) [20221207gitfff6d81270b5-2] - edk2-use-rpm-build-flags-rh-only.patch [RHEL-177] - Resolves: RHEL-177 (Enable GNU_RELRO security protection) [20221207gitfff6d81270b5-1] - Rebase to edk2-stable202211 tag Resolves: RHEL-119 (rebase edk2 to edk2-stable202211) - Resolves: RHEL-75 (edk2 builds should show the build version) - Resolves: bz#2132951 (edk2: Sort traditional virtualization builds before Confidential Computing builds) [20220826gitba0e0e4c6a-2] - edk2-MdeModulePkg-PiSmmCore-SmmEntryPoint-underflow-CVE-2.patch [bz#1989857] - Resolves: bz#1989857 (CVE-2021-38578 edk2: integer underflow in SmmEntryPoint function leads to potential SMM privilege escalation [rhel-9.0]) [ 0220826gitba0e0e4c6a-1] - Rebase to edk2-stable202208 tag [RHELX-59] Resolves: RHELX-59 (rebase edk2 to 2022-08 stable tag) [20220526git16779ede2d36-4] - edk2-OvmfPkg-QemuVideoDxe-fix-bochs-mode-init.patch [RHELX-58] - Resolves: RHELX-58 (Guest console turns black with uefi rhel guests and stdvga) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2021-38578 CVE-2022-4450 CVE-2023-0286 CVE-2022-4304 CVE-2023-0215 Oracle Linux 9 [3.0.21-37] - Fix defect found by covscan Resolves: #2151705 [3.0.21-36] - Fix multiple CVEs Resolves: #2151705 Resolves: #2151703 Resolves: #2151707 [3.0.21-35] - Rebuild to add subpackages to CRB report Resolves: #2126380 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-41860 CVE-2022-41859 CVE-2022-41861 Oracle Linux 9 [9.0.9-2] - resolve CVE-2022-39229 grafana: Using email as a username can prevent other users from signing in - resolve CVE-2022-2880 CVE-2022-41715 grafana: various flaws [9.0.9-1] - update to 9.0.9 tagged upstream community sources, see CHANGELOG - resolve CVE-2022-35957 grafana: Escalation from admin to server admin when auth proxy is used (rhbz#2125530) [9.0.8-2] - bump NVR [9.0.8-1] - update to 9.0.8 tagged upstream community sources, see CHANGELOG - do not list /usr/share/grafana/conf twice - drop makefile in favor of create_bundles.sh script - sync provides/obsoletes with CentOS versions - drop husky patch MODERATE Copyright 2023 Oracle, Inc. CVE-2022-41715 CVE-2022-39229 CVE-2022-2880 CVE-2022-35957 CVE-2022-27664 Oracle Linux 9 [5.1.1-1] - update to 5.1.1 tagged upstream community sources, see CHANGELOG - resolve CVE-2022-27664 golang: net/http: handle server errors after sending GOAWAY [5.0.0-4] - update to 5.0.0 tagged upstream community sources, see CHANGELOG - install plugin in /usr/share and create symlink from /var using systemd-tmpfiles to work on rpm-ostree based distributions - revert the breaking change (change of internal plugin IDs) of upstream v5.0.0, i.e. there are no breaking changes when performing this upgrade - enable Go modules in build process - make vendor and webpack tarballs reproducible - drop makefile in favor of create_bundles.sh script MODERATE Copyright 2023 Oracle, Inc. CVE-2022-27664 Oracle Linux 9 [9.2-1] - Rebase to ntfs-3g 2022.5.17 - Fixes: CVE-2021-46790, CVE-2022-30783, CVE-2022-30784, CVE-2022-30785, CVE-2022-30786, CVE-2022-30787, CVE-2022-30788, CVE-2022-30789 resolves: rhbz#2127235 rhbz#2127242 (also 2127264 2127250 2127257) MODERATE Copyright 2023 Oracle, Inc. CVE-2021-46790 CVE-2022-30788 CVE-2022-30789 CVE-2022-30786 CVE-2022-30784 Oracle Linux 9 [8.3.1-5] - Resolves: #2147522 - It is not possible to run FRR as a non-root user [8.3.1-4] - Resolves: #2144500 - AVC error when reloading FRR with provided reload script [8.3.1-3] - Related: #2129743 - Adding missing rules for vtysh and other daemons [8.3.1-2] - Resolves: #2128738 - out-of-bounds read in the BGP daemon may lead to information disclosure or denial of service [8.3.1-1] - Resolves: #2129731 - Rebase FRR to the latest version - Resolves: #2129743 - Add targeted SELinux policy for FRR - Resolves: #2127494 - BGP incorrectly withdraws routes on graceful restart capable routers MODERATE Copyright 2023 Oracle, Inc. CVE-2022-37032 Oracle Linux 9 cockpit-composer [45-1.0.1] - Make per page documentation links point to Oracle Linux [Orabug: 32013095], [Orabug:34398922] [45-1] - New upstream release [44-1] - New upstream release [43-1] - New upstream release [42-1] - New upstream release osbuild [81-1] - New upstream release [80-1] - New upstream release [79-1] - New upstream release [78-1] - New upstream release [77-1] - New upstream release [76-1] - New upstream release [75-1] - New upstream release [74-1] - New upstream release [73-1] - New upstream release [72-1] - New upstream release [71-1] - New upstream release [70-1] - New upstream release [69-1] - New upstream release osbuild-composer [76-2] - distro/rhel: add payload repos to os package set (rhbz#2177699) - Manifest: always set kernel options in grub2 stage (rhbz#2162299) [76-1] - New upstream release [75-1] - New upstream release [74-1] - New upstream release [73-1] - New upstream release [72-1] - New upstream release [71-1] - New upstream release [70-1] - New upstream release [69-1] - New upstream release [68-1] - New upstream release [67-2] - Fix functional tests to make them pass in RHEL-9.2 gating [67-1] - New upstream release [62-1] - New upstream release [60-1] - New upstream release [59-1] - New upstream release [58-1] - New upstream release [57-1] - New upstream release [55-1] - New upstream release [54-1] - New upstream release [53-1] - New upstream release [51-1] - New upstream release [46-1] - New upstream release [45-1] - New upstream release [44-1] - New upstream release [43-1] - New upstream release [42-1] - New upstream release [41-1] - New upstream release [40-1] - New upstream release [39-1] - New upstream release [38-1] - New upstream release * Tue Nov 02 2021 lavocatt - 37-1 - New upstream release [36-1] - New upstream release [33-1] - New upstream release [32-1] - New upstream release [31-1] - New upstream release [30-2] - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 [30-1] - New upstream release [29-3] - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 [29-2] - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 weldr-client [35.9-1] - Copy rhel-92.json test repository from osbuild-composer - Update osbuild-composer test repositories from osbuild-composer - New release: 35.9 (bcl) Resolves: rhbz#2164560 - tests: Replace os.MkdirTemp with t.TempDir (bcl) - blueprint save: Allow overriding bad blueprint names (bcl) - tests: Clean up checking err in tests (bcl) - composer-cli: Implement blueprints diff (bcl) - saveBlueprint: Return the filename to the caller (bcl) - composer-cli: Add tests for using --commit with old servers (bcl) - weldr: Return error about the blueprints change route (bcl) - weldr: Save the http status code as part of APIResponse (bcl) - Add --commit support to blueprints save (bcl) - Add --commit to blueprints show (bcl) - gitleaks: Exclude the test password used in tests (bcl) - ci: add tags to AWS instances (tlavocat) - Update github.com/BurntSushi/toml to 1.2.1 - Update github.com/stretchr/testify to 1.8.1 - Update bump github.com/spf13/cobra to 1.6.1 - New release: 35.8 (bcl) - completion: Remove providers from bash completion script (bcl) - completion: Filter out new headers from compose list (bcl) - docs: Remove unneeded Long descriptions (bcl) - docs: Use a custom help template (bcl) - docs: Add more command documentation (bcl) - cmdline: Add package glob support to modules list command (bcl) - workflow: Add govulncheck on go v1.18 (bcl) - tests: Update to use golangci-lint 1.49.0 (bcl) - New release: 35.7 (bcl) - spec: Move %gometa macro above %gourl (bcl) - weldr: When starting a compose pass size as bytes, not MiB (bcl) - tests: Use correct size value in bytes for test (bcl) - workflow: Add Go 1.18 to text matrix (bcl) - Replace deprecated ioutil functions (bcl) - New release: 35.6 (bcl) - tests: Update tests for osbuild-composer changes (bcl) - CMD: Compose status format (eloy.coto) - CMD: Compose list format (eloy.coto) - tests: Update tests to check for JSON list output (bcl) - composer-cli: Change JSON output to be a list of objects (bcl) - weldr: Simplify the old ComposeLog, etc. functions (bcl) - composer-cli: Add --filename to blueprints freeze save command (bcl) - composer-cli: Add --filename to blueprints save command (bcl) - composer-cli: Add --filename to compose logs command (bcl) - composer-cli: Add --filename to compose image command (bcl) - composer-cli: Add --filename to compose metadata command (bcl) - composer-cli: Add --filename to compose results command (bcl) - weldr: Add saving to a new filename to GetFilePath function (bcl) - github: Fix issue with codecov and forced pushes in PRs (bcl) - Use golangci-lint 1.45.2 in workflow (bcl) - Run workflow tests for go 1.16.x and 1.17.x (bcl) - Move go.mod to go 1.16 (bcl) - workflows/trigger-gitlab: run Gitlab CI in new image-builder project (jrusz) - Update GitHub actions/setup-go to 3 - Update GitHub actions/checkout to 3 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-41715 CVE-2022-27664 CVE-2022-41717 CVE-2022-2879 CVE-2022-2880 Oracle Linux 9 [2.42.6-3] - Backport fixes for CVE-2021-46829 and CVE-2021-44648 - Resolves: rhbz#2115213 - Resolves: rhbz#2044346 MODERATE Copyright 2023 Oracle, Inc. CVE-2021-46829 CVE-2021-44648 Oracle Linux 9 [2:2.1.7-1] - update to https://github.com/containers/conmon/releases/tag/v2.1.7 - Resolves: #2173697 [2:2.1.6-1] - update to https://github.com/containers/conmon/releases/tag/v2.1.6 - Related: #2124478 [2:2.1.5-1] - update to https://github.com/containers/conmon/releases/tag/v2.1.5 - Related: #2124478 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-41717 Oracle Linux 9 [12.5.4-5.0.1] - add mpstat -H option to also display physically hotplugged vCPUs [Orabug: 34683087] [12.5.4-5] - Fix --dec argument validation (rhbz#2080650) [12.5.4-4] - arithmetic overflow in allocate_structures() on 32 bit systems (CVE-2022-39377) MODERATE Copyright 2023 Oracle, Inc. CVE-2022-39377 Oracle Linux 9 [1.20.11-17] - Fix xvfb-run script with --listen-tcp Resolves: rhbz#2172116 [1.20.11-16] - CVE-2023-0494 (#2166973) [1.20.11-15] - Follow-up fix for CVE-2022-46340 (#2151776) [1.20.11-14] - CVE fix for: CVE-2022-4283 (#2151801), CVE-2022-46340 (#2151776), CVE-2022-46341 (#2151781), CVE-2022-46342 (#2151788), CVE-2022-46343 (#2151791), CVE-2022-46344 (#2151798) [1.20.11-13] - Drop dependency on xorg-x11-font-utils, it was only there for one pkgconfig query for a variable that never changes value (#2148292) [1.20.11-12] - Fix CVE-2022-3550, CVE-2022-3551 Resolves: rhbz#2140768, rhbz#2140773 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-46343 CVE-2023-0494 CVE-2022-46340 CVE-2022-3550 CVE-2022-3551 CVE-2022-46341 CVE-2022-46342 CVE-2022-46344 CVE-2022-4283 Oracle Linux 9 [21.1.3-7] - Fix CVE-2023-0494 (#2166974) [21.1.3-6] - Follow-up fix for CVE-2022-46340 (#2151778) [21.1.3-5] - CVE fix for: CVE-2022-4283 (#2151803), CVE-2022-46340 (#2151778), CVE-2022-46341 (#2151783), CVE-2022-46342 (#2151786), CVE-2022-46343 (#2151793), CVE-2022-46344 (#2151796) [ 21.1.3-4] - Fix CVE-2022-3550, CVE-2022-3551 Resolves: rhbz#2140769, rhbz#2140771 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-0494 CVE-2022-46342 CVE-2022-46341 CVE-2022-3550 CVE-2022-46344 CVE-2022-4283 CVE-2022-46343 CVE-2022-46340 CVE-2022-3551 Oracle Linux 9 [1.29.1-1.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178] [1:1.29.1-1] - update to the latest content of https://github.com/containers/buildah/tree/release-1.29 (https://github.com/containers/buildah/commit/7fa17a8) - Related: #2124478 [1:1.29.0-3] - update to the latest content of https://github.com/containers/buildah/tree/release-1.29 (https://github.com/containers/buildah/commit/c822cc6) - Related: #2124478 [1:1.29.0-2] - update to the latest content of https://github.com/containers/buildah/tree/release-1.29 (https://github.com/containers/buildah/commit/94b723c) - Related: #2124478 [1:1.29.0-1] - update to the latest content of https://github.com/containers/buildah/tree/release-1.29.0 (https://github.com/containers/buildah/commit/94b723c) - Related: #2124478 [1:1.29.0-0.4] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/078a7ff) - Related: #2124478 [1:1.29.0-0.3] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/4b72f05) - Related: #2124478 [1:1.29.0-0.2] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/c541c35) - Related: #2124478 [1:1.29.0-0.1] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/8ca903b) - Related: #2124478 [1:1.28.2-3] - update to the latest content of https://github.com/containers/buildah/tree/release-1.28 (https://github.com/containers/buildah/commit/cfefbb6) - fixes segmentation fault on s390x - Resolves: #2150429 [1:1.28.2-2] - update to the latest content of https://github.com/containers/buildah/tree/release-1.28 (https://github.com/containers/buildah/commit/7e4d9dd) - Resolves: #2151247 [1:1.28.2-1] - update to https://github.com/containers/buildah/releases/tag/v1.28.2 - Related: #2124478 [1:1.28.0-2] - pull in crun by default - Resolves: #2142494 [1:1.28.0-1] - update to https://github.com/containers/buildah/releases/tag/v1.28.0 - Related: #2124478 [1:1.27.0-2] - fix CVE-2022-2990 - Related: #2061316 [1:1.27.0-1] - update to https://github.com/containers/buildah/releases/tag/v1.27.0 - Related: #2061316 [1:1.26.4-2] - add buildah-tutorial to test subpackage - Related: #2061316 [1:1.26.4-1] - update to https://github.com/containers/buildah/releases/tag/v1.26.4 - Related: #2061316 [1:1.26.3-1] - update to https://github.com/containers/buildah/releases/tag/v1.26.3 - Related: #2061316 [1:1.26.2-1] - update to https://github.com/containers/buildah/releases/tag/v1.26.2 - Related: #2061316 [1:1.26.1-4] - Re-enable LTO and debuginfo - Related: #2061316 [1:1.26.1-3] - BuildRequires: /usr/bin/go-md2man - Related: #2061316 [1:1.26.1-2] - Add missing container networking dependencies (thanks to Neal Gompa) - Related: #2061316 [1:1.26.1-1] - update to https://github.com/containers/buildah/releases/tag/v1.26.1 - Related: #2061316 [1:1.25.1-1] - update to https://github.com/containers/buildah/releases/tag/v1.25.1 - Related: #2061316 [1:1.25.0-1] - update to https://github.com/containers/buildah/releases/tag/v1.25.0 - Related: #2061316 [1:1.24.2-2] - Add patch to fix bash symtax for gating tests - Upstream PR: https://github.com/containers/buildah/pull/3792 - Related: #2000051 [1:1.24.2-1] - update to https://github.com/containers/buildah/releases/tag/v1.24.2 - Related: #2000051 [1:1.24.1-1] - update to https://github.com/containers/buildah/releases/tag/v1.24.1 - Related: #2000051 [1:1.24.0-1] - update to https://github.com/containers/buildah/releases/tag/v1.24.0 - Related: #2000051 [1:1.24.0-0.52] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/718f2b4) - Related: #2000051 [1:1.24.0-0.51] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/2189882) - Related: #2000051 [1:1.24.0-0.50] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/4b3aaee) - Related: #2000051 [1:1.24.0-0.49] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/da00c99) - Related: #2000051 [1:1.24.0-0.48] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/7bcca21) - Related: #2000051 [1:1.24.0-0.47] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/60880a7) - Related: #2000051 [1:1.24.0-0.46] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/031e72c) - Related: #2000051 [1:1.24.0-0.45] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/b3798a1) - Related: #2000051 [1:1.24.0-0.44] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/4b22fc5) - Related: #2000051 [1:1.24.0-0.43] - add required test files - Related: #2000051 [1:1.24.0-0.42] - basically, bring in from RHEL8 container-tools module, remove podman & skopeo, and bang at it until it works. (Ed Santiago) - Related: #2000051 [1:1.24.0-0.41] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/9591a8d) - Related: #2000051 [1:1.24.0-0.40] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/0bd4dd1) - Related: #2000051 [1:1.24.0-0.39] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/c5ef5c0) - Related: #2000051 [1:1.24.0-0.38] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/c7e45ed) - Related: #2000051 [1:1.24.0-0.37] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/1f1b960) - Related: #2000051 [1:1.24.0-0.36] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/de86fab) - Related: #2000051 [1:1.24.0-0.35] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/6d01253) - Related: #2000051 [1:1.24.0-0.34] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/2711b85) - Related: #2000051 [1:1.24.0-0.33] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/dc7625a) - Related: #2000051 [1:1.24.0-0.32] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/8b79d8b) - Related: #2000051 [1:1.24.0-0.31] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/b768318) - Related: #2000051 [1:1.24.0-0.30] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/78a1d08) - Related: #2000051 [1:1.24.0-0.29] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/68cd602) - Related: #2000051 [1:1.24.0-0.28] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/50ebc90) - Related: #2000051 [1:1.24.0-0.27] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/e3283ab) - Related: #2000051 [1:1.24.0-0.26] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/96e1871) - Related: #2000051 [1:1.24.0-0.25] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/ecd7474) - Related: #2000051 [1:1.24.0-0.24] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/a381063) - Related: #2000051 [1:1.24.0-0.23] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/f36d1f2) - Related: #2000051 [1:1.24.0-0.22] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/639320e) - Related: #2000051 [1:1.24.0-0.21] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/762cf6f) - Related: #2000051 [1:1.24.0-0.20] - respect Epoch in subpackage dependencies - Related: #2000051 [1:1.24.0-0.19] - bump Epoch to preserve upgrade path - Related: #2000051 [1.24.0-0.18] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/982717a) - Related: #2000051 [1.24.0-0.17] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/e47f4a1) - Related: #2000051 [1.24.0-0.16] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/211972a) - Related: #2000051 [1.24.0-0.15] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/c044ad6) - Related: #2000051 [1.24.0-0.14] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/7807a0e) - Related: #2000051 [1.24.0-0.13] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/0cd9445) - Related: #2000051 [1.24.0-0.12] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/954c481) - Related: #2000051 [1.24.0-0.11] - include all man pages - Related: #2000051 [1.24.0-0.10] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/d2ef199) - Related: #2000051 [1.24.0-0.9] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/455f2f1) - Related: #2000051 [1.24.0-0.8] - add gating.yaml - Related: #2000051 [1.24.0-0.7] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/5b0de7b) - Related: #2000051 [1.24.0-0.6] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/9a49348) - Related: #2000051 [1.24.0-0.5] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/a72aad4) - Related: #2000051 [1.24.0-0.4] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/b8757e9) - Related: #2000051 [1.24.0-0.3] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/4c287d1) - Related: #2000051 [1.24.0-0.2] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/753716a) - Related: #2000051 [1.24.0-0.1] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/69b3e56) - Related: #2000051 [1.23.0-0.3] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/8657d7e) - Related: #2000051 [1.23.0-0.2] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/0346b38) - Related: #2000051 [1.23.0-0.1] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/a5aba5c) - Related: #2000051 [1.22.3-1] - update to the latest content of https://github.com/containers/buildah/tree/release-1.22 (https://github.com/containers/buildah/commit/4d20222) - Related: #2000051 [1.22.0-3] - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 [1.22.0-2] - update to the latest content of https://github.com/containers/buildah/tree/release-1.22 (https://github.com/containers/buildah/commit/71b8003) - Related: #1970747 [1.22.0-1] - update to 1.22.0 release and switch to the release-1.22 maint branch - Related: #1970747 [1.22.0-0.4] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/56ff12f) - Related: #1970747 [1.22.0-0.3] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/f517d85) - Related: #1970747 [1.22.0-0.2] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/42dbc97) - Related: #1970747 [1.22.0-0.1] - switch to main branch - Related: #1970747 [1.21.4-2] - add buildah-copy helper - Related: #1970747 [1.21.4-1] - update to the latest content of https://github.com/containers/buildah/tree/release-1.21 (https://github.com/containers/buildah/commit/9c83683) - Related: #1970747 [1.21.3-2] - update to the latest content of https://github.com/containers/buildah/tree/release-1.21 (https://github.com/containers/buildah/commit/30a10f3) - Related: #1970747 [1.21.3-1] - update to the latest content of https://github.com/containers/buildah/tree/release-1.21 (https://github.com/containers/buildah/commit/7f9540d) - Related: #1970747 [1.21.1-1] - update to buildah 1.21.1 from the release-1.21 upstream branch - Related: #1970747 [1.22.0-0.17] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/ecfcde2) - Related: #1970747 [1.22.0-0.16] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/3ed5d8e) - Related: #1970747 [1.22.0-0.15] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/c7d828f) - Related: #1970747 [1.22.0-0.14] - 'buildah version' produces correct output - Related: #1970747 [1.22.0-0.13] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/6bc611d) - Related: #1970747 [1.22.0-0.12] - update to the latest content of https://github.com/containers/buildah/tree/main (https://github.com/containers/buildah/commit/3a0b52f) - Related: #1970747 [1.22.0-0.11] - switch master -> main - Related: #1970747 [1.22.0-0.10] - update to the latest content of https://github.com/containers/buildah/tree/master (https://github.com/containers/buildah/commit/6d5d1ae) - Related: #1970747 [1.22.0-0.9] - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 [1.22.0-0.8] - update to the latest content of https://github.com/containers/buildah/tree/master (https://github.com/containers/buildah/commit/802a904) - Related: #1970747 [1.22.0-0.7] - update to the latest content of https://github.com/containers/buildah/tree/master (https://github.com/containers/buildah/commit/5181b9c) - Related: #1970747 [1.22.0-0.6] - update to the latest content of https://github.com/containers/buildah/tree/master (https://github.com/containers/buildah/commit/814868e) - Related: #1970747 [1.22.0-0.5] - update to the latest content of https://github.com/containers/buildah/tree/master (https://github.com/containers/buildah/commit/30c07b7) - Related: #1970747 [1.22.0-0.4] - update to the latest content of https://github.com/containers/buildah/tree/master (https://github.com/containers/buildah/commit/d99221f) - Related: #1970747 [1.22.0-0.3] - update to the latest content of https://github.com/containers/buildah/tree/master (https://github.com/containers/buildah/commit/8d08247) - Related: #1970747 [1.22.0-0.2] - update buildah - Related: #1970747 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-41717 CVE-2022-30629 Oracle Linux 9 [2.38.5-1] - Update to 2.38.5 Related: #2127467 [2.38.4-1] - Update to 2.38.4 Related: #2127467 [2.38.3-1] - Update to 2.38.3 Related: #2127467 [2.38.2-1] - Update to 2.38.2 Related: #2127467 [2.38.1-2] - Fix use with aarch64 64 KiB page size Related: #2127467 [2.38.1-1] - Update to 2.38.1 Resolves: #2127467 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-32923 CVE-2022-42799 CVE-2023-23517 CVE-2022-32888 CVE-2022-42824 CVE-2022-42852 CVE-2022-46699 CVE-2022-46692 CVE-2023-25360 CVE-2023-23518 CVE-2022-42867 CVE-2022-46691 CVE-2022-42823 CVE-2022-42863 CVE-2022-46698 CVE-2022-46700 CVE-2023-25362 CVE-2023-25358 CVE-2023-25361 CVE-2022-32886 CVE-2022-42826 CVE-2023-25363 Oracle Linux 9 [1.12.0-13] - xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege Escalation Vulnerability Resolves: bz#2180309 [1.12.0-12] - SELinux: allow vncsession create .vnc directory Resolves: bz#2164703 [1.12.0-11] - Add sanity check when cleaning up keymap changes Resolves: bz#2169965 [1.12.0-10] - xorg-x11-server: DeepCopyPointerClasses use-after-free leads to privilege elevation Resolves: bz#2167061 [1.12.0-9] - Rebuild for xorg-x11-server CVE-2022-46340 follow up fix [1.12.0-8] - Rebuild for xorg-x11-server CVEs Resolves: CVE-2022-4283 (bz#2154234) Resolves: CVE-2022-46340 (bz#2154221) Resolves: CVE-2022-46341 (bz#2154224) Resolves: CVE-2022-46342 (bz#2154226) Resolves: CVE-2022-46343 (bz#2154228) Resolves: CVE-2022-46344 (bz#2154230) [1.12.0-7] - x0vncserver: add new keysym in case we don't find matching keycode + actually apply the patch Resolves: bz#2119017 [1.12.0-6] - x0vncserver: add new keysym in case we don't find matching keycode Resolves: bz#2119017 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-46340 CVE-2022-4283 CVE-2022-46341 CVE-2022-46343 CVE-2022-46344 CVE-2022-46342 Oracle Linux 9 [1.1.4-6] - Fix CVE-2022-40023 (#2133606) MODERATE Copyright 2023 Oracle, Inc. CVE-2022-40023 Oracle Linux 9 [21.01.0-14] - Check for overflow when computing number of symbols - in JBIG2 text region - Resolves: #2126364 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-38784 Oracle Linux 9 [1.18.4-6] - Fixes for CVE-2022-1920, CVE-2022-1921, CVE-2022-1922, CVE-2022-1923, CVE-2022-1924, CVE-2022-1925, CVE-2022-2122 Resolves: rhbz#2131034, rhbz#2131039, rhbz#2131045, rhbz#2131049, rhbz#2131054, rhbz#2131060, rhbz#2131064 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-1921 CVE-2022-1920 CVE-2022-1925 CVE-2022-1924 CVE-2022-1922 CVE-2022-2122 CVE-2022-1923 Oracle Linux 9 [32:9.16.23-11] - Correct backport issue in statistics rendering fix (#2126912) [32:9.16.23-10] - Handle subtle difference between upstream and rhel (CVE-2022-3094) [32:9.16.23-9] - Prevent flooding with UPDATE requests (CVE-2022-3094) - Handle RRSIG queries when server-stale is active (CVE-2022-3736) - Fix crash when soft-quota is reached and serve-stale is active (CVE-2022-3924) [32:9.16.23-8] - Correct regression preventing bind-dyndb-ldap build (#2162795) [32:9.16.23-7] - Prevent freeing zone during statistics rendering (#2101712) [32:9.16.23-6] - Bound the amount of work performed for delegations (CVE-2022-2795) - Add /usr/lib64/named to bind-chroot (#2129466) MODERATE Copyright 2023 Oracle, Inc. CVE-2022-3924 CVE-2022-2795 CVE-2022-3736 CVE-2022-3094 Oracle Linux 9 [4.4.1-3.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404] [2:4.4.1-3] - update to the latest content of https://github.com/containers/podman/tree/v4.4.1-rhel (https://github.com/containers/podman/commit/e1703bb) - Related: #2124478 [2:4.4.1-2] - update to the latest content of https://github.com/containers/podman/tree/v4.4.1-rhel (https://github.com/containers/podman/commit/0b38633) - Related: #2124478 [2:4.4.1-1] - update to the latest content of https://github.com/containers/podman/tree/v4.4.1-rhel (https://github.com/containers/podman/commit/d4e285a) - Related: #2124478 [2:4.4.1-0.1] - update to the latest content of https://github.com/containers/podman/tree/v4.4 (https://github.com/containers/podman/commit/f5670f0) - Related: #2124478 [2:4.4.0-1] - update to podman-4.4 release - Related: #2124478 [2:4.4.0-0.10] - update to the latest content of https://github.com/containers/podman/tree/main (https://github.com/containers/podman/commit/68bbdc2) - Related: #2124478 [2:4.4.0-0.9] - update to the latest content of https://github.com/containers/podman/tree/main (https://github.com/containers/podman/commit/323b515) - Related: #2124478 [2:4.4.0-0.8] - update to the latest content of https://github.com/containers/podman/tree/main (https://github.com/containers/podman/commit/c35e74f) - Related: #2124478 [2:4.4.0-0.7] - update to the latest content of https://github.com/containers/podman/tree/main (https://github.com/containers/podman/commit/ce504bb) - Related: #2124478 [2:4.4.0-0.6] - add quadlet to tests - Related: #2124478 [2:4.4.0-0.5] - obsolete podman-catatonit in order to not to file conflict with catatonit - Related: #2124478 [2:4.4.0-0.4] - build v4.4.0-rc2 - Related: #2124478 [2:4.4.0-0.3] - remove podman-machine-cni, it is now part of podman 4.0 or newer - Related: #2124478 [2:4.4.0-0.2] - update to the latest content of https://github.com/containers/podman/tree/main (https://github.com/containers/podman/commit/07ba51d) - update gvisor-tap-vsock to 0.5.0 - Related: #2124478 [2:4.4.0-0.1] - podman-4.4.0-rc1 - update to the latest content of https://github.com/containers/podman/tree/main (https://github.com/containers/podman/commit/f1af5b3) - Related: #2124478 [2:4.3.1-4] - podman shouldn't provide and file conflict with catatonit in CRB - Resolves: #2151322 [2:4.3.1-3] - fix 'podman manifest add' is not concurrent safe - Resolves: #2105173 [2:4.3.1-2] - properly obsolete catatonit - Resolves: #2123319 [2:4.3.1-1] - update to https://github.com/containers/podman/releases/tag/v4.3.1 - Related: #2124478 [2:4.3.0-2] - rebuild to fix CVE-2022-30629 - Related: #2102994 [2:4.3.0-1] - update to https://github.com/containers/podman/releases/tag/v4.3.0 - Related: #2124478 [2:4.2.0-3] - fix dependency in test subpackage - Related: #2061316 [2:4.2.0-2] - readd catatonit - Related: #2061316 [2:4.2.0-1] - update to latest content of https://github.com/containers/podman/releases/tag/4.2.0 (https://github.com/containers/podman/commit/7fe5a419cfd2880df2028ad3d7fd9378a88a04f4) - Related: #2061316 [2:4.2.0-0.3rc3] - require catatonit for gating tests - Related: #2061316 [2:4.2.0-0.2rc3] - update to 4.2.0-rc3 - Related: #2061316 [2:4.2.0-0.1rc2] - update to 4.2.0-rc2 - Related: #2061316 [2:4.1.1-6] - convert catatonit dependency to soft dep as catatonit is no longer in Appstream but in CRB - Related: #2061316 [2:4.1.1-5] - rebuild for combined gating with catatonit - Related: #2097694 [2:4.1.1-4] - catatonit is now a standalone package - Related: #2097694 [2:4.1.1-3] - update to the latest content of https://github.com/containers/podman/tree/v4.1.1-rhel (https://github.com/containers/podman/commit/fa692a6) - Related: #2097694 [2:4.1.1-2] - be sure podman services/sockets are stopped upon package removal - Related: #2061316 [2:4.1.1-1] - update to https://github.com/containers/podman/releases/tag/v4.1.1 - Related: #2061316 [2:4.1.0-4] - don't require runc and Recommends: crun - Related: #2061316 [2:4.1.0-3] - Re-enable LTO and debuginfo - Related: #2061316 [2:4.1.0-2] - update gvisor-tap-vsock to 0.2.0 to fix compilation with golang 1.18 - Related: #2061316 [2:4.1.0-1] - update to https://github.com/containers/podman/releases/tag/v4.1.0 - Related: #2061316 [2:4.0.3-2] - require netavark and move CNI to soft dependencies - Related: #2061316 [2:4.0.3-1] - update to https://github.com/containers/podman/releases/tag/v4.0.3 - Related: #2061316 [2:4.0.2-3] - bump minimal libseccomp version requirement - Related: #2061316 [2:4.0.2-2] - rebuilt with golang >= 1.17.5 (CVE-2021-44716, CVE-2021-44717) - Related: #2061316 [2:4.0.2-1] - update to https://github.com/containers/podman/releases/tag/v4.0.2 - Related: #2059681 [2:4.0.1-1] - update to https://github.com/containers/podman/releases/tag/v4.0.1 - Related: #2000051 [2:4.0.0-6] - set catatonit cflags after configure step, don't explicitly set ldflags - Related: #2054115 [2:4.0.0-5] - revert previous change and run set_build_flags before the build process - Related: #2054115 [2:4.0.0-4] - add -D_FORTIFY_SOURCE=2 for podman-catatonit - Related: #2054115 [2:4.0.0-3] - depend on containers-common >= 2:1-28 - Related: #2000051 [2:4.0.0-2] - use correct commit 49f8da72 for podman, previous commit said 4.0.1-dev - Related: #2000051 [2:4.0.0-1] - update to podman-4.0.0 release - Related: #2000051 [2:4.0.0-0.32] - update to the latest content of https://github.com/containers/podman/tree/v4.0 (https://github.com/containers/podman/commit/a34f279) - Related: #2000051 [2:4.0.0-0.31] - update to the latest content of https://github.com/containers/podman/tree/v4.0 (https://github.com/containers/podman/commit/ab3e566) - Related: #2000051 [2:4.0.0-0.30] - fix linker flags to assure -D_FORTIFY_SOURCE=2 is present at the command line - Related: #2000051 [2:4.0.0-0.29] - update to the latest content of https://github.com/containers/podman/tree/v4.0 (https://github.com/containers/podman/commit/b0a445e) - Related: #2000051 [2:4.0.0-0.28] - update to the latest content of https://github.com/containers/podman/tree/v4.0 (https://github.com/containers/podman/commit/c4a9aa7) - Related: #2000051 [2:4.0.0-0.27] - update to the latest content of https://github.com/containers/podman/tree/v4.0 (https://github.com/containers/podman/commit/5b2d96f) - Related: #2000051 [2:4.0.0-0.26] - set CGO_CFLAGS explicitly - Related: #2000051 [2:4.0.0-0.25] - bump to 0.25 to have highest NVR - Related: #2000051 [2:4.0.0-0.4] - rebuilt - Related: #2000051 [2:4.0.0-0.3] - update to the latest content of https://github.com/containers/podman/tree/v4.0 (https://github.com/containers/podman/commit/2dca7b2) - Related: #2000051 [2:4.0.0-0.2] - update to the latest content of https://github.com/containers/podman/tree/v4.0 (https://github.com/containers/podman/commit/4ad9e00) - Related: #2000051 [2:4.0.0-0.1] - update to the latest content of https://github.com/containers/podman/tree/v4.0 (https://github.com/containers/podman/commit/337f706) - Related: #2000051 [2:3.4.5-0.8] - update to the latest content of https://github.com/containers/podman/tree/v3.4 (https://github.com/containers/podman/commit/a54320a) - Related: #2000051 [2:3.4.5-0.7] - add rootless_role (Ed Santiago) - Related: #2000051 [2:3.4.5-0.6] - add git-daemon to test subpackage (https://github.com/containers/podman/issues/12851) - Related: #2000051 [2:3.4.5-0.5] - update to the latest content of https://github.com/containers/podman/tree/v3.4 (https://github.com/containers/podman/commit/63134a1) - Related: #2000051 [2:3.4.5-0.4] - update to the latest content of https://github.com/containers/podman/tree/v3.4 (https://github.com/containers/podman/commit/3f57b6e) - Related: #2000051 [2:3.4.5-0.3] - update to the latest content of https://github.com/containers/podman/tree/v3.4 (https://github.com/containers/podman/commit/17788ed) - Related: #2000051 [2:3.4.5-0.2] - incorporate gating test fixes from Ed Santiago: - remove buildah and skopeo (unused) - bump BATS from v1.1 to v1.5 - rename 'nonroot' to 'rootless' - Related: #2000051 [2:3.4.5-0.1] - update to the latest content of https://github.com/containers/podman/tree/v3.4 (https://github.com/containers/podman/commit/b8fde5c) - Related: #2000051 [2:3.4.4-0.1] - update to the latest content of https://github.com/containers/podman/tree/v3.4 (https://github.com/containers/podman/commit/49f589d) - Related: #2000051 [2:3.4.3-0.11] - remove downstream patch already applied upstream - Related: #2000051 [2:3.4.3-0.10] - update to the latest content of https://github.com/containers/podman/tree/v3.4 (https://github.com/containers/podman/commit/fe44757) - Related: #2000051 [2:3.4.3-0.9] - update to the latest content of https://github.com/containers/podman/tree/v3.4 (https://github.com/containers/podman/commit/815f36a) - Related: #2000051 [2:3.4.3-0.8] - update to the latest content of https://github.com/containers/podman/tree/v3.4 (https://github.com/containers/podman/commit/31bc358) - Related: #2000051 [2:3.4.3-0.7] - bump Epoch to not to pull in older versions built off upstream main branch - Related: #2000051 [1:3.4.3-0.6] - update to the latest content of https://github.com/containers/podman/tree/v3.4 (https://github.com/containers/podman/commit/e3a7a74) - add libsubid_tag.sh into BUILDTAGS - Related: #2000051 [1:3.4.3-0.5] - do not put patch URL as the backported patch will get overwritten when 'spectool -g -f' is executed - Related: #2000051 [1:3.4.3-0.4] - update to the latest content of https://github.com/containers/podman/tree/v3.4 (https://github.com/containers/podman/commit/7203178) - Related: #2000051 [1:3.4.3-0.3] - remove -t 0 from podman gating test - Related: #2000051 [1:3.4.3-0.2] - add BuildRequires: shadow-utils-subid-devel - Related: #2000051 [1:3.4.3-0.1] - update to the latest content of https://github.com/containers/podman/tree/v3.4 (https://github.com/containers/podman/commit/4808a63) - Related: #2000051 [1:3.4.2-0.8] - update to the latest content of https://github.com/containers/podman/tree/v3.4 (https://github.com/containers/podman/commit/fd010ad) - Related: #2000051 [1:3.4.2-0.7] - backport https://github.com/containers/podman/pull/12118 to 3.4 in attempt to fix gating tests - Related: #2000051 [1:3.4.2-0.6] - add Requires: gnupg (https://github.com/containers/podman/pull/12270) - Related: #2000051 [1:3.4.2-0.5] - update to the latest content of https://github.com/containers/podman/tree/v3.4 (https://github.com/containers/podman/commit/8de9950) - Related: #2000051 [1:3.4.2-0.4] - update catatonit to 1.7 - Related: #2000051 [1:3.4.2-0.3] - update to the latest content of https://github.com/containers/podman/tree/v3.4 (https://github.com/containers/podman/commit/75023e9) - Related: #2000051 [1:3.4.2-0.2] - compile catatonit library as PIE - Related: #2000051 [1:3.4.2-0.1] - update to the latest content of https://github.com/containers/podman/tree/v3.4 (https://github.com/containers/podman/commit/09aade7) - Related: #2000051 [1:3.4.1-2] - more dependency tightening - thanks to Michael Rochefort for noticing - Related: #2000051 [1:3.4.1-1] - update to the latest content of https://github.com/containers/podman/tree/v3.4 (https://github.com/containers/podman/commit/c15c154) - Related: #2000051 [1:4.0.0-0.24] - respect Epoch in subpackage dependencies - Related: #2000051 [1:4.0.0-0.23] - bump Epoch to preserve upgrade path from RHEL8 - Related: #2000051 [4.0.0-0.22] - update to the latest content of https://github.com/containers/podman/tree/main (https://github.com/containers/podman/commit/ea86893) - Related: #2000051 [4.0.0-0.21] - update to the latest content of https://github.com/containers/podman/tree/main (https://github.com/containers/podman/commit/14c0fcc) - Related: #2000051 [4.0.0-0.20] - update to the latest content of https://github.com/containers/podman/tree/main (https://github.com/containers/podman/commit/bfb904b) - Related: #2000051 [4.0.0-0.19] - update to the latest content of https://github.com/containers/podman/tree/main (https://github.com/containers/podman/commit/8bcc086) - Related: #2000051 [4.0.0-0.18] - update to the latest content of https://github.com/containers/podman/tree/main (https://github.com/containers/podman/commit/c963a50) - Related: #2000051 [4.0.0-0.17] - update to the latest content of https://github.com/containers/podman/tree/main (https://github.com/containers/podman/commit/b9d8c63) - Related: #2000051 [4.0.0-0.16] - update to the latest content of https://github.com/containers/podman/tree/main (https://github.com/containers/podman/commit/317e20a) - Related: #2000051 [4.0.0-0.15] - update to the latest content of https://github.com/containers/podman/tree/main (https://github.com/containers/podman/commit/b187dfe) - Related: #2000051 [4.0.0-0.14] - update to the latest content of https://github.com/containers/podman/tree/main (https://github.com/containers/podman/commit/cd10304) - Related: #2000051 [4.0.0-0.13] - update to the latest content of https://github.com/containers/podman/tree/main (https://github.com/containers/podman/commit/e19a09c) - Related: #2000051 [4.0.0-0.12] - update to the latest content of https://github.com/containers/podman/tree/main (https://github.com/containers/podman/commit/800d594) - Related: #2000051 [4.0.0-0.11] - update to the latest content of https://github.com/containers/podman/tree/main (https://github.com/containers/podman/commit/1dba601) - Related: #2000051 [4.0.0-0.10] - update to the latest content of https://github.com/containers/podman/tree/main (https://github.com/containers/podman/commit/8e2d25e) - Related: #2000051 [4.0.0-0.9] - update to the latest content of https://github.com/containers/podman/tree/main (https://github.com/containers/podman/commit/b925d70) - Related: #2000051 [4.0.0-0.8] - update to the latest content of https://github.com/containers/podman/tree/main (https://github.com/containers/podman/commit/6cf13c3) - Related: #2000051 [4.0.0-0.7] - update to the latest content of https://github.com/containers/podman/tree/main (https://github.com/containers/podman/commit/5f41ffd) - update to https://github.com/containers/podman-machine-cni/releases/tag/v0.2.0 - Related: #2000051 [4.0.0-0.6] - update to the latest content of https://github.com/containers/podman/tree/main (https://github.com/containers/podman/commit/4b6ffda) - Related: #2000051 [4.0.0-0.5] - update to the latest content of https://github.com/containers/podman/tree/main (https://github.com/containers/podman/commit/323fe36) - Related: #2000051 [4.0.0-0.4] - update to the latest content of https://github.com/containers/podman/tree/main (https://github.com/containers/podman/commit/b603c7a) - Related: #2000051 [4.0.0-0.3] - update to the latest content of https://github.com/containers/podman/tree/main (https://github.com/containers/podman/commit/0f3d3bd) - Related: #2000051 [4.0.0-0.2] - update to the latest content of https://github.com/containers/podman/tree/main (https://github.com/containers/podman/commit/63f6656) - Related: #2000051 [4.0.0-0.1] - update to the latest content of https://github.com/containers/podman/tree/main (https://github.com/containers/podman/commit/26c8549) - Related: #2000051 [3.3.1-1] - update to the latest content of https://github.com/containers/podman/tree/v3.3.1-rhel (https://github.com/containers/podman/commit/405507a) - Related: #2000051 - mark ghost dir correctly [3.3.0-4] - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 [3.3.0-3] - update to the latest content of https://github.com/containers/podman/tree/v3.3 (https://github.com/containers/podman/commit/57422d2) - Related: #1970747 [3.3.0-2] - update to the latest content of https://github.com/containers/podman/tree/v3.3 (https://github.com/containers/podman/commit/b1d3875) - Related: #1970747 [3.3.0-1] - update to 3.3.0 release and switch to the v3.3 maint branch - Related: #1970747 [3.3.0-0.27] - update to the latest content of https://github.com/containers/podman/tree/main (https://github.com/containers/podman/commit/4244288) - Related: #1970747 [3.3.0-0.26] - update to the latest content of https://github.com/containers/podman/tree/main (https://github.com/containers/podman/commit/f17b810) - Related: #1970747 [3.3.0-0.25] - update to the latest content of https://github.com/containers/podman/tree/main (https://github.com/containers/podman/commit/2041731) - Related: #1970747 [3.3.0-0.24] - update to the latest content of https://github.com/containers/podman/tree/main (https://github.com/containers/podman/commit/f9395dd) - Related: #1970747 [3.3.0-0.23] - update to the latest content of https://github.com/containers/podman/tree/main (https://github.com/containers/podman/commit/a5de831) - Related: #1970747 [3.3.0-0.22] - bump version to follow the 3.3.0 upgrade path - Related: #1970747 [3.3.0-0.9] - update to the latest content of https://github.com/containers/podman/tree/main (https://github.com/containers/podman/commit/4f5b19c) - Related: #1970747 [3.2.3-0.8] - update to the latest content of https://github.com/containers/podman/tree/v3.2.3-rhel (https://github.com/containers/podman/commit/78f0bd7) - Related: #1970747 [3.2.3-0.7] - switch to v3.2.3-rhel branch - Related: #1970747 [3.2.3-0.6] - update to the latest content of https://github.com/containers/podman/tree/v3.2 (https://github.com/containers/podman/commit/2eea7fe) - Related: #1970747 [3.2.3-0.5] - update to the latest content of https://github.com/containers/podman/tree/v3.2 (https://github.com/containers/podman/commit/4136f8b) - Related: #1970747 [3.2.3-0.4] - update product version in gating.yaml - update to the latest content of https://github.com/containers/podman/tree/v3.2 (https://github.com/containers/podman/commit/60d12f7) - Related: #1970747 [3.2.3-0.3] - update to the latest content of https://github.com/containers/podman/tree/v3.2 (https://github.com/containers/podman/commit/275b0d8) - Related: #1970747 [3.2.3-0.2] - put 87-podman-bridge.conflist to main podman package not podman-remote - Related: #1970747 [3.2.3-0.1] - update to the latest content of https://github.com/containers/podman/tree/v3.2 (https://github.com/containers/podman/commit/6f0bf16) - Related: #1970747 [3.2.2-2] - remove missing unit files - Related: #1970747 [3.2.2-1] - consume content from v3.2 upstream branch - Related: #1970747 [3.3.0-0.21] - fix build - Related: #1970747 [3.3.0-0.20] - update install targets - Related: #1970747 [3.3.0-0.19] - update to the latest content of https://github.com/containers/podman/tree/master (https://github.com/containers/podman/commit/1846070) - Related: #1970747 [3.3.0-0.18] - update to the latest content of https://github.com/containers/podman/tree/master (https://github.com/containers/podman/commit/c260cbd) - Related: #1970747 [3.3.0-0.17] - update to the latest content of https://github.com/containers/podman/tree/master (https://github.com/containers/podman/commit/0a0ade3) - Related: #1970747 [3.3.0-0.16] - update to the latest content of https://github.com/containers/podman/tree/master (https://github.com/containers/podman/commit/d1f57a0) - Related: #1970747 [3.3.0-0.15] - update to the latest content of https://github.com/containers/podman/tree/master (https://github.com/containers/podman/commit/fc34f35) - Related: #1970747 [3.3.0-0.14] - update to the latest content of https://github.com/containers/podman/tree/master (https://github.com/containers/podman/commit/d3afc6b) - Related: #1970747 [3.3.0-0.13] - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 [3.3.0-0.12] - update to the latest content of https://github.com/containers/podman/tree/master (https://github.com/containers/podman/commit/be15e69) - Related: #1970747 [3.3.0-0.11] - update to the latest content of https://github.com/containers/podman/tree/master (https://github.com/containers/podman/commit/928687e) - Resolves: #1970747 [3.3.0-0.10] - update to the latest content of https://github.com/containers/podman/tree/master (https://github.com/containers/podman/commit/ce04a3e) - Resolves: #1970747 [3.3.0-0.9] - update to the latest content of https://github.com/containers/podman/tree/master (https://github.com/containers/podman/commit/814a8b6) - Resolves: #1970747 [3.3.0-0.8] - add new systemd unit files - Related: #1970747 [3.3.0-0.7] - update to the latest content of https://github.com/containers/podman/tree/master (https://github.com/containers/podman/commit/092b2ec) - Related: #1970747 [3.3.0-0.6] - update to the latest content of https://github.com/containers/podman/tree/master (https://github.com/containers/podman/commit/e2f51ee) - Related: #1970747 [3.3.0-0.5] - update to the latest content of https://github.com/containers/podman/tree/master (https://github.com/containers/podman/commit/e549ca5) - Related: #1970747 [3.3.0-0.4] - update podman - Related: #1970747 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-30629 CVE-2022-41717 Oracle Linux 9 [2:1.11.2-0.1] - update to the latest content of https://github.com/containers/skopeo/tree/release-1.11 (https://github.com/containers/skopeo/commit/3f98753) - Related: #2124478 [2:1.11.1-1] - update to https://github.com/containers/skopeo/releases/tag/v1.11.1 - Related: #2124478 [2:1.11.0-1] - update to 1.11.0 release - Related: #2124478 [2:1.11.0-0.4] - update to the latest content of https://github.com/containers/skopeo/tree/main (https://github.com/containers/skopeo/commit/b3b2c73) - Related: #2124478 [2:1.11.0-0.3] - update to the latest content of https://github.com/containers/skopeo/tree/main (https://github.com/containers/skopeo/commit/fe15a36) - Related: #2124478 [2:1.11.0-0.2] - update to the latest content of https://github.com/containers/skopeo/tree/main (https://github.com/containers/skopeo/commit/8e09e64) - Related: #2124478 [2:1.11.0-0.1] - update to the latest content of https://github.com/containers/skopeo/tree/main (https://github.com/containers/skopeo/commit/2817510) - Related: #2124478 [2:1.10.0-1] - update to https://github.com/containers/skopeo/releases/tag/v1.10.0 - Related: #2124478 [2:1.9.3-1] - update to https://github.com/containers/skopeo/releases/tag/v1.9.3 - Related: #2124478 [2:1.9.2-1] - update to https://github.com/containers/skopeo/releases/tag/v1.9.2 - Related: #2061316 [2:1.9.1-1] - update to https://github.com/containers/skopeo/releases/tag/v1.9.1 - Related: #2061316 [2:1.9.0-1] - update to https://github.com/containers/skopeo/releases/tag/v1.9.0 - Related: #2061316 [2:1.8.0-4] - Re-enable debuginfo - Related: #2061316 [2:1.8.0-3] - BuildRequires: /usr/bin/go-md2man - Related: #2061316 [2:1.8.0-2] - enable LTO - Related: #1988128 [2:1.8.0-1] - update to https://github.com/containers/skopeo/releases/tag/v1.8.0 - Related: #2061316 [2:1.7.0-1] - update to https://github.com/containers/skopeo/releases/tag/v1.7.0 - Related: #2061316 [2:1.6.1-4] - add tags: classic (Ed Santiago) - Related: #2061316 [2:1.6.1-3] - remove BATS from required packages (Ed Santiago) - Related: #2061316 [2:1.6.1-2] - be sure to install BATS before gating tests are executed (thanks to Ed Santiago) - Related: #2061316 [2:1.6.1-1] - update to https://github.com/containers/skopeo/releases/tag/v1.6.1 - Related: #2000051 [2:1.6.0-1] - update to https://github.com/containers/skopeo/releases/tag/v1.6.0 - Related: #2000051 [2:1.5.2-1] - update to https://github.com/containers/skopeo/releases/tag/v1.5.2 - Related: #2000051 [2:1.5.1-1] - update to https://github.com/containers/skopeo/releases/tag/v1.5.1 - Related: #2000051 [2:1.5.1-0.9] - update to the latest content of https://github.com/containers/skopeo/tree/main (https://github.com/containers/skopeo/commit/4acc9f0) - Related: #2000051 [2:1.5.1-0.8] - update to the latest content of https://github.com/containers/skopeo/tree/main (https://github.com/containers/skopeo/commit/c2732cb) - Related: #2000051 [2:1.5.1-0.7] - update to the latest content of https://github.com/containers/skopeo/tree/main (https://github.com/containers/skopeo/commit/01e58f8) - Related: #2000051 [2:1.5.1-0.6] - update to the latest content of https://github.com/containers/skopeo/tree/main (https://github.com/containers/skopeo/commit/8f64c04) - Related: #2000051 [2:1.5.1-0.5] - update to the latest content of https://github.com/containers/skopeo/tree/main (https://github.com/containers/skopeo/commit/8182255) - Related: #2000051 [2:1.5.1-0.4] - bump Epoch to preserve upgrade patch from RHEL8 - Related: #2000051 [1:1.5.1-0.3] - update to the latest content of https://github.com/containers/skopeo/tree/main (https://github.com/containers/skopeo/commit/9c9a9f3) - Related: #2000051 [1:1.5.1-0.2] - update to the latest content of https://github.com/containers/skopeo/tree/main (https://github.com/containers/skopeo/commit/116e75f) - Related: #2000051 [1:1.5.1-0.1] - update to the latest content of https://github.com/containers/skopeo/tree/main (https://github.com/containers/skopeo/commit/fc81803) - Related: #2000051 [1:1.4.1-0.14] - update to the latest content of https://github.com/containers/skopeo/tree/main (https://github.com/containers/skopeo/commit/ff88d3f) - Related: #2000051 [1:1.4.1-0.13] - update to the latest content of https://github.com/containers/skopeo/tree/main (https://github.com/containers/skopeo/commit/a95b0cc) - Related: #2000051 [1:1.4.1-0.12] - add skopeo tests from Fedora - Related: #2000051 [1:1.4.1-0.11] - update to the latest content of https://github.com/containers/skopeo/tree/main (https://github.com/containers/skopeo/commit/53cf287) - Related: #2000051 [1:1.4.1-0.10] - add gating.yaml - Related: #2000051 [1:1.4.1-0.9] - update to the latest content of https://github.com/containers/skopeo/tree/main (https://github.com/containers/skopeo/commit/86fa758) - Related: #2000051 [1:1.4.1-0.8] - update to the latest content of https://github.com/containers/skopeo/tree/main (https://github.com/containers/skopeo/commit/2c2e5b7) - Related: #2000051 [1:1.4.1-0.7] - update to the latest content of https://github.com/containers/skopeo/tree/main (https://github.com/containers/skopeo/commit/25d3e7b) - Related: #2000051 [1:1.4.1-0.6] - update to the latest content of https://github.com/containers/skopeo/tree/main (https://github.com/containers/skopeo/commit/c5a5199) - Related: #2000051 [1:1.4.1-0.5] - update to the latest content of https://github.com/containers/skopeo/tree/main (https://github.com/containers/skopeo/commit/db1e814) - Related: #2000051 [1:1.4.1-0.4] - update to the latest content of https://github.com/containers/skopeo/tree/main (https://github.com/containers/skopeo/commit/31b8981) - Related: #2000051 [1:1.4.1-0.3] - update to the latest content of https://github.com/containers/skopeo/tree/main (https://github.com/containers/skopeo/commit/177443f) - Related: #2000051 [1:1.4.1-0.2] - update to the latest content of https://github.com/containers/skopeo/tree/main (https://github.com/containers/skopeo/commit/30f208e) - Related: #2000051 [1:1.4.1-0.1] - update to the latest content of https://github.com/containers/skopeo/tree/main (https://github.com/containers/skopeo/commit/47b8082) - Related: #2000051 [1:1.4.1-1] - rebuild with containers-common dep fixed - Related: #2000051 [1:1.4.0-7] - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 [1:1.4.0-6] - be sure short-name-mode is permissive in RHEL8 - Related: #1970747 [1:1.4.0-5] - don't define short-name-mode in RHEL8 - Related: #1970747 [1:1.4.0-4] - put both RHEL8 and RHEL9 conditional configurations into update.sh - Related: #1970747 [1:1.4.0-3] - update vendored components - always require runc on RHEL8 or lesser - Related: #1970747 [1:1.4.0-2] - update to the latest content of https://github.com/containers/skopeo/tree/release-1.4 (https://github.com/containers/skopeo/commit/a44da44) - Related: #1970747 [1:1.4.0-1] - update to 1.4.0 release and switch to the release-1.4 maint branch - Related: #1970747 [1:1.4.0-0.2] - update vendored components - ship /etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release only on non-RHEL and CentOS distros - Related: #1970747 [1:1.4.0-0.1] - switch to the main branch of skopeo - Related: #1970747 [1:1.3.1-9] - Add support for signed RHEL images, enabled by default - Related: #1970747 [1:1.3.1-8] - update seccomp.json from Fedora to allow clone3 to pass - Related: #1970747 [1:1.3.1-7] - update shortnames from Pyxis - put RHEL9/UBI9 images into overrides - Related: #1970747 [1:1.3.1-6] - correct name of the option is 'short-name-mode' not 'short-names-mode' - Related: #1970747 [1:1.3.1-5] - handle CentOS Stream while updating vendored components - Related: #1970747 [1:1.3.1-4] - update to the latest content of https://github.com/containers/skopeo/tree/release-1.3 (https://github.com/containers/skopeo/commit/038f70e) - Related: #1970747 [1:1.3.1-3] - update registries.conf to be consistent with upstream - Related: #1970747 [1:1.3.1-2] - consume content from the release-1.3 upstream branch - Related: #1970747 [1:1.3.1-1] - update to https://github.com/containers/skopeo/releases/tag/v1.3.1 - Related: #1970747 [1:1.3.0-7] - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 [1:1.3.0-6] - set short-names-mode = 'enforcing' in registries.conf - Resolves: #1971752 [1:1.3.0-5] - configure for RHEL9 - Related: #1970747 [1:1.3.0-4] - add missing containers-mounts.conf.5.md file to git - don't list/install the same doc twice - Related: #1970747 [1:1.3.0-3] - update to new versions of vendored components - fail is there is an issue in communication with Pyxis API - understand devel branch in update.sh script, use pkg wrapper - sync with Pyxis - use containers-mounts.conf.5.md from containers/common - Related: #1970747 [1:1.2.2-4] - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 [1:1.2.2-3] - disable LTO again [1:1.2.2-2] - use rhel-shortnames only from trusted registries - sync with config files from current versions of vendored projects MODERATE Copyright 2023 Oracle, Inc. CVE-2022-30629 CVE-2022-41717 Oracle Linux 9 jss [5.3.0-1] - Rebase to JSS 5.3.0 [5.3.0-0.3.beta2] - Rebase to JSS 5.3.0-beta2 - Bug 2017098 - pki pkcs12-cert-add command failing with 'Unable to validate PKCS #12 file: Digests do not match' exception [5.3.0-0.2.beta1] - Rebase to JSS 5.3.0-beta1 ldapjdk [5.3.0-1] - Rebase to LDAP SDK 5.3.0 [5.3.0-0.2.beta1] - Rebase to LDAP SDK 5.3.0-beta1 pki-core [11.3.0-1.0.1] - Replaced upstream graphical references [Orabug: 33952704] [11.3.0-1] - Rebase to PKI 11.3.0 - Bug #2091993 - IdM Install fails on RHEL 8.5 Beta when DISA STIG is applied - Bug #2122409 - pki-tomcat/kra unable to decrypt when using RSA-OAEP padding in RHEL9 with FIPS enabled [11.3.0-0.2.beta1] - Rebase to PKI 11.3.0-beta1 - Bug #1849834 - [RFE] Provide EST Responder (RFC 7030) - Bug #1883477 - [RFE] Automatic expired certificate purging - Bug #2091999 - Error displayed should be user friendly in case RSNv3 certificate serial number collision - Bug #2106452 - softhsm2: Unable to create cert: Private key not found - Bug #2106459 - CVE-2022-2393 pki-core: Improper authentication/authorization with caServerKeygen_DirUserCert profile [11.2.1-1] - Rebase to PKI 11.2.1 - Bug #2107336 - CVE-2022-2414 pki-core: access to external entities when parsing XML can lead to XXE [rhel-9.1.0] [11.2.0-1] - Rebase to PKI 11.2.0 - Bug #2084639 ipa cert-request ssl error - Bug #2099312 SKI field is not reflected back in generated CSR - Bug #2095197 PKI cert-fix operation failing [11.2.0-0.4.beta3] - Rebase to PKI 11.2.0-beta3 - Bug #2062808 Drop SHA-1 use from authentication challenges [rhel-9.1.0] [11.2.0-0.3.beta2] - Rebase to PKI 11.2.0-beta2 - Rename packages to idm-pki [11.2.0-0.2.beta1] - Rebase to PKI 11.2.0-beta1 [11.0.3-1] - Bug #2033109 Invalid certificates with creation of subCA (pkispawn single step)[rhel-9.0.0] - Bug #2013141 kra-key-retrieve failed to accept xml input format to generate .p12 key through cli - Bug #2029838 SHA1withRSA being listed in signing certificates while approving certificate via Agent page in browser [11.0.1-3] - Change gcc compiler flags to fix annobin gating failures [11.0.1-2] - Rebase to PKI 11.0.1 [11.0.0-1] - Rebase to PKI 11.0.0 [11.0.0-0.6.beta1] - Rebase to PKI 11.0.0-beta1 - Bug #1999052 - pki instance creation fails for IPA server [11.0.0-0.5.alpha1] - Drop BuildRequires and Requires on glassfish-jaxb-api and jaxb-impl Resolves #2002594 [11.0.0-0.4.alpha1] - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 [11.0.0-0.3] - Drop sudo dependency [11.0.0-0.2] - Resolves: rhbz#1975406 - IPA installation fails during pki-tomcatd setup. [11.0.0-0.1] - Rebase to PKI 11.0.0-alpha1 [10.11.0-0.1] - Rebase to PKI 10.11.0-alpha1 tomcatjss [8.3.0-1] - Rebase to Tomcat JSS 8.3.0 [8.3.0-0.2.beta1] - Rebase to Tomcat JSS 8.3.0-beta1 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-2393 Oracle Linux 9 jackson-annotations [2.14.1-1] - Update to version 2.14.1 - Resolves: #2070122 jackson-core [2.14.1-1] - Update to version 2.14.1 - Resolves: #2070122 jackson-databind [2.14.1-1] - Update to version 2.14.1 - Resolves: #2070122 jackson-jaxrs-providers [2.14.1-1] - Update to version 2.14.1 - Resolves: #2070122 jackson-modules-base [2.14.1-1] - Update to version 2.14.1 - Resolves: #2070122 MODERATE Copyright 2023 Oracle, Inc. CVE-2020-36518 Oracle Linux 9 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-39253 CVE-2022-24765 CVE-2022-29187 CVE-2022-39260 Oracle Linux 9 [2:2.4.1-5] - Fix 'implicit declaration of function' errors (#2136155, #2145140) [- 2:2.4.1-4] - CVE-2022-39282: Fix length checks in parallel driver (#2136152) - CVE-2022-39283: Add missing length check in video channel (#2136154) - CVE-2022-39316, CVE-2022-39317: Add missing length checks in zgfx (#2145140) - CVE-2022-39318: Fix division by zero in urbdrc channel (#2145140) - CVE-2022-39319: Add missing length checks in urbdrc channel (#2145140) - CVE-2022-39320: Ensure urb_create_iocompletion uses size_t (#2145140) - CVE-2022-39347: Fix path validation in drive channel (#2145140) - CVE-2022-41877: Add missing length check in drive channel (#2145140) MODERATE Copyright 2023 Oracle, Inc. CVE-2022-39316 CVE-2022-39319 CVE-2022-39320 CVE-2022-39283 CVE-2022-39282 CVE-2022-41877 CVE-2022-39318 CVE-2022-39347 CVE-2022-39317 Oracle Linux 9 [4.4.0-7] - Fix CVE-2022-3970 - Resolves: CVE-2022-3970 [4.4.0-6] - Fix CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570 CVE-2022-3598 CVE-2022-3627 - Resolves: CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570 CVE-2022-3598 CVE-2022-3627 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-3570 CVE-2022-3597 CVE-2022-3627 CVE-2022-3626 CVE-2022-3970 CVE-2022-4645 CVE-2022-3598 CVE-2022-3599 CVE-2023-30774 CVE-2023-30775 Oracle Linux 9 [3.2.0-1] - Update to 3.2.0 - Resolves: #2139383 [2.13.3-4] - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 [2.13.3-3] - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 [2.13.3-2] - Fixed name of source tarball - Fixed date in the latest changelog entry - Related: #1952517 [2.13.3-1] - Update to latest version - Resolves: #1952517 [2.13.0-2] - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 [2.13.0-1] - Enable bundling - Update to latest version MODERATE Copyright 2023 Oracle, Inc. CVE-2022-27664 CVE-2022-30632 CVE-2022-32189 CVE-2022-2880 CVE-2022-1705 CVE-2022-30635 CVE-2022-30630 CVE-2022-32148 CVE-2022-41715 CVE-2022-41717 Oracle Linux 8 [1.6.1-8] - Update Istio config to include 1.15.7 to support upgrade from 1.5.x to 1.6.x [1.6.1-7] - Bugfix:Append a slash in oci-instance-metada query url [1.6.1-6] - Fixed helm installation in OLCNE upgrade [1.6.1-5] - Deprecate oci-private-key <path-on-control-plane-nodes> in favour of oci-private-key-file <path-on-operatpr-node> - Updated olcne_version argument in olcnectl provision to support <major.minor.patch> [1.6.1-4] - Update Istio version to 1.16.4 to address CVE's - CVE-2022-27496 - CVE-2022-27488 - CVE-2022-27493 - CVE-2022-27492 - CVE-2022-27491 - CVE-2022-27487 [1.6.1-3] - Resolved the issue to install multiple network cards using multus [1.6.1-2] - Update kubelet for upstream runc misc cgroups patch [1.6.1-1] - Fix the bug olcnectl provision fails if ol8_developer does not exist IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-27488 CVE-2022-27491 CVE-2022-27492 CVE-2022-27487 CVE-2022-27493 CVE-2022-27496 Oracle Linux 7 [1.6.1-9] - Updated the CVE ID's in Istio-1.16.4 changelog entry * [1.6.1-8] - Update Istio config to include 1.15.7 to support upgrade from 1.5.x to 1.6.x * [1.6.1-7] - Bugfix:Append a slash in oci-instance-metada query url * [1.6.1-6] - Fixed helm installation in OLCNE upgrade * [1.6.1-5] - Deprecate oci-private-key <path-on-control-plane-nodes> in favour of oci-private-key-file <path-on-operatpr-node> - Updated olcne_version argument in olcnectl provision to support <major.minor.patch> * [1.6.1-4] - Update Istio version to 1.16.4 to address CVE's - CVE-2023-27496 - CVE-2023-27488 - CVE-2023-27493 - CVE-2023-27492 - CVE-2023-27491 - CVE-2023-27487 * [1.6.1-3] - Resolved the issue to install multiple network cards using multus * [1.6.1-2] - Update kubelet for upstream runc misc cgroups patch * [1.6.1-1] - Fix the bug olcnectl provision fails if ol8_developer does not exist IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-27488 CVE-2023-27487 CVE-2023-27496 CVE-2023-27491 CVE-2023-27492 CVE-2023-27493 cpe:/a:oracle:linux:7::developer_olcne cpe:/a:oracle:linux:7::olcne16 Oracle Linux 9 [1:27.2-8] - Use a 64KB page size for pdump (#1979804) [1:27.2-7] - Fix ctags local command execute vulnerability (#2149387) MODERATE Copyright 2023 Oracle, Inc. CVE-2022-45939 Oracle Linux 9 [1:1.2.0-1] - update to https://github.com/containernetworking/plugins/releases/tag/v1.2.0 - Related: #2124478 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-30629 CVE-2022-41717 Oracle Linux 9 [1.16.2-3] - Fix NRDelegation attack leading to uncontrolled resource consumption (CVE-2022-3204) MODERATE Copyright 2023 Oracle, Inc. CVE-2022-3204 Oracle Linux 9 [1:3.4.10-4] - Resolves: #2152064 - CVE-2022-3190 wireshark: f5ethtrailer Infinite loop in legacy style dissector [1:3.4.10-3] - Resolves: #2083581 - capinfos aborts in FIPS [1:3.4.10-2] - Resolves: #2160648 - Enhanced TMT testing for centos-stream MODERATE Copyright 2023 Oracle, Inc. CVE-2022-3190 Oracle Linux 9 [42.2.27-1] - rebase to 42.2.27 - fix for CVE-2022-41946 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-41946 Oracle Linux 9 php-pecl-apcu [5.1.21-1] - update to 5.1.21 for PHP 8.1 #2070040 php-pecl-rrd [2.0.3-4] - build for PHP 8.1 #2070040 php-pecl-xdebug3 [3.1.4-1] - update to 3.1.4 for PHP 8.1 #2070040 php-pecl-zip [1.20.1-1] - update to 1.20.1 for PHP 8.1 #2070040 php [8.1.14-1] - rebase to 8.1.14 [8.1.8-1] - update to 8.1.8 #2070040 [8.1.7-2] - clean unneeded dependency on useradd command [8.1.7-1] - update to 8.1.7 #2070040 [8.1.6-2] - add upstream patch to initialize pcre before mbstring - add upstream patch to use more sha256 in openssl tests [8.1.6-1] - update to 8.1.6 #2070040 [8.0.13-1] - rebase to 8.0.13 #2032429 - refresh configuration files from upstream [8.0.12-1] - rebase to 8.0.12 #2017111 #1981423 - build using system libxcrypt #2015903 [8.0.10-1] - rebase to 8.0.10 #1992513 - compatibility with OpenSSL 3.0 #1992492 - snmp: add sha256 / sha512 security protocol #1936635 - phar: implement openssl_256 and openssl_512 for phar signatures - phar: use sha256 signature by default [8.0.6-9] - Rebuilt for libffi 3.4.2 SONAME transition. Related: rhbz#1891914 [8.0.6-8] - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 [8.0.6-7] - Rebuild to pick up new build flags from redhat-rpm-config (#1984652) [8.0.6-6] - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 [8.0.6-5] - fix build with net-snmp without DES #1953492 [8.0.6-4] - fix build with openssl 3.0 #1953492 [8.0.6-3] - get rid of inet_addr and gethostbyaddr calls [8.0.6-2] - get rid of inet_ntoa and inet_aton calls [8.0.6-1] - Update to 8.0.6 - http://www.php.net/releases/8_0_6.php [8.0.5-1] - Update to 8.0.5 - http://www.php.net/releases/8_0_5.php [8.0.5~RC1-1] - update to 8.0.5RC1 [8.0.4~RC1-2] - make libdb usage conditional default: on for Fedora, off for RHEL [8.0.4~RC1-1] - update to 8.0.4RC1 [8.0.3-2] - clean conditions [8.0.3-1] - Update to 8.0.3 - http://www.php.net/releases/8_0_3.php - see https://fedoraproject.org/wiki/Changes/php80 - drop xmlrpc extension - drop json subpackage, extension always there - enchant: use libenchant-2 instead of libenchant [7.4.16-1] - Update to 7.4.16 - http://www.php.net/releases/7_4_16.php [7.4.15-3] - drop php-imap, fix #1929640 [7.4.15-2] - rebuild for libpq ABI fix rhbz#1908268 [7.4.15-1] - Update to 7.4.15 - http://www.php.net/releases/7_4_15.php - add upstream patch for https://bugs.php.net/80682 fix opcache doesn't honour pcre.jit option [7.4.15~RC2-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild [7.4.15~RC2-1] - update to 7.4.15RC2 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-31629 CVE-2022-31630 CVE-2022-31628 CVE-2022-31631 CVE-2022-37454 Oracle Linux 9 [1:5.9.1-9.0.1] - fix error index value when snmpget is used a proxy pass [Orabug: 35010262] [1:5.9.1-9] - fix CVE-2022-44792 and CVE-2022-44793 (#2141902) and (#2141906) - fix memory leak when ipv6 disable set to 1 (#2151540) [1:5.9.1-8] - fix default snmpd.conf file content (#2067954) MODERATE Copyright 2023 Oracle, Inc. CVE-2022-44793 CVE-2022-44792 Oracle Linux 9 [0.9.1-3.20211126git1ff6fe1f43] - Backport 'tpm2: Check size of buffer before accessing it' (CVE-2023-1017 & CVE-2023-1018) Resolves: rhbz#2173960 Resolves: rhbz#2173967 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-1018 CVE-2023-1017 Oracle Linux 9 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-3567 CVE-2022-47929 CVE-2022-1462 CVE-2022-3640 CVE-2022-3028 CVE-2022-3522 CVE-2022-3628 CVE-2022-42721 CVE-2022-39189 CVE-2022-42896 CVE-2022-1882 CVE-2021-33655 CVE-2023-1382 CVE-2022-3566 CVE-2022-3623 CVE-2022-1789 CVE-2022-4129 CVE-2023-0461 CVE-2022-2196 CVE-2021-26341 CVE-2023-1195 CVE-2022-3619 CVE-2022-20141 CVE-2022-42703 CVE-2022-3435 CVE-2022-3524 CVE-2022-21505 CVE-2022-33743 CVE-2022-28388 CVE-2022-2663 CVE-2022-39188 CVE-2022-4128 CVE-2022-3707 CVE-2022-43750 CVE-2022-42720 CVE-2022-3625 CVE-2022-41674 CVE-2023-0394 CVE-2022-42722 CVE-2023-0590 Oracle Linux 9 [0.8.7-20] - Add 0083-multipath.rules-fix-smart-bug-with-failed-valid-path.patch - Add 0084-libmultipath-limit-paths-that-can-get-wwid-from-envi.patch - Change how the installation dir for kpartx_id is specified - Resolves: bz #1926147 [0.8.7-19] - Fix bugzilla linked to the changes (was previously linked to the wrong bug, 2162536) - Resolves: bz #2166467 [0.8.7-18] - Add 0079-libmultipath-use-select_reload_action-in-select_acti.patch - Add 0080-libmultipath-select-resize-action-even-if-reload-is-.patch - Add 0081-libmultipath-cleanup-ACT_CREATE-code-in-select_actio.patch - Add 0082-libmultipath-keep-renames-from-stopping-other-multip.patch - Resolves: bz #2166467 [0.8.7-17] - Add 0077-libmultipath-don-t-leak-memory-on-invalid-strings.patch - Add 0078-libmutipath-validate-the-argument-count-of-config-st.patch - Resolves: bz #2145225 [0.8.7-16] - Add 0076-multipath.conf-5-remove-io-affinity-information.patch - Resolves: bz #2143125 [0.8.7-15] - Add 0067-kpartx-hold-device-open-until-partitions-have-been-c.patch * Fixes bz #2141860 - Add 0068-libmultipath-cleanup-remove_feature.patch - Add 0069-libmultipath-cleanup-add_feature.patch - Add 0070-multipath-tests-tests-for-adding-and-removing-featur.patch - Add 0071-libmultipath-fix-queue_mode-feature-handling.patch - Add 0072-multipath-tests-tests-for-reconcile_features_with_qu.patch - Add 0073-libmultipath-prepare-proto_id-for-use-by-non-scsi-de.patch - Add 0074-libmultipath-get-nvme-path-transport-protocol.patch - Add 0075-libmultipath-enforce-queue_mode-bio-for-nmve-tcp-pat.patch * Fixes bz #2033080 - Resolves: bz #2033080, #2141860 [0.8.7-14] - Add 0065-multipathd-ignore-duplicated-multipathd-command-keys.patch * Fixes bz #2133999 - Add 0066-multipath-tools-use-run-instead-of-dev-shm.patch * Fixes bz #2133989 - Resolves: bz #2133989, #2133999 [0.8.7-13] - Add 0062-multipathd-factor-out-the-code-to-flush-a-map-with-n.patch - Add 0063-libmultipath-return-success-if-we-raced-to-remove-a-.patch - Add 0064-multipathd-Handle-losing-all-path-in-update_map.patch - Resolves: bz #2125357 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-41973 Oracle Linux 9 [7.76.1-23] - fix HTTP multi-header compression denial of service (CVE-2023-23916) [7.76.1-22] - smb/telnet: fix use-after-free when HTTP proxy denies tunnel (CVE-2022-43552) [7.76.1-21] - fix POST following PUT confusion (CVE-2022-32221) [7.76.1-20] - control code in cookie denial of service (CVE-2022-35252) LOW Copyright 2023 Oracle, Inc. CVE-2022-43552 CVE-2022-35252 Oracle Linux 9 [1.8.10-2.0.1] - Drop pesign.service restart in postun [Orabug: 34760075] - Update signing certificate [JIRA: OLDIS-16371] - Rebuild for SecureBoot signatures [Orabug: 33801813] - Build with the updated Oracle certificate - Use oraclesecureboot301 as certdir [Orabug: 29881368] - Use new signing certificate (Alex Burmashev) - Update SBAT data to include Oracle [Oracle: 33072886] [1.8.10-2] - Rebuild because distrobaker did entirely the wrong thing. - Resolves: rhbz#2128384, needed for rhbz#2119436 and rhbz#2128384 [1.8.10-1] - Rebase to latest upstream release to fix multiple ESP detection problems - Resolves: rhbz#2128384, needed for rhbz#2119436 and rhbz#2128384 [1.7.10-1] - New upstream release - Resolves: rhbz#2129280 [1.7.9-2] - Include the new dbx updates on the filesystem; clients typically do not have LVFS enabled. - Resolves: rhbz#2120708 [1.7.8-1] - New upstream release - Resolves: rhbz#2059075 [1.7.4-3] - Disable the Logitech bulkcontroller plugin to avoid adding a dep to protobuf-c which lives in AppStream, not BaseOS. - Use the efi_vendor variable from EFI-RPM - Resolves: rhbz#2064904 [1.7.4-1] - New upstream release - Backport Fedora 34 changes - Include support for Lenovo TBT4 Docking stations - Do not cause systemd-modules-load failures - Build against a new enough pesign - Resolves: rhbz#2007520 [1.7.1-1] - New upstream release - Backport Fedora 34 changes - Include support for Dell TBT4 Docking stations - Resolves: rhbz#1974347 - Resolves: rhbz#1991426 [1.5.9-4] - Rebuilt to use redhatsecureboot503 signatures - Undo last Fedora sync to use the RHEL-specific patches - Resolves: rhbz#2007520 [1.5.9-3] - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 [1.5.9-2] - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 [1.5.9-1] - Rebase to include the SBAT metadata section to allow fixing BootHole - Resolves: rhbz#1951030 [1.5.5-4] - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 [1.5.5-3] - Backport a patch from master to drop the python3-pillow dep - Resolves: rhbz#1935838 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-34301 CVE-2022-34302 CVE-2022-3287 CVE-2022-34303 Oracle Linux 9 [12:4.4.2-18.b1] - Fix for CVE-2022-2928 - Fix for CVE-2022-2929 - Use systemd-sysusers for dhcp user and group (#2095396) MODERATE Copyright 2023 Oracle, Inc. CVE-2022-2928 CVE-2022-2929 Oracle Linux 9 evolution-mapi [3.40.1-5] - Related: #2131993 (Rebuild against samba 4.17) openchange [2.3-40] - Related: #2131993 (Rebuild against samba 4.17) samba [4.17.5-102.0.1] - Fix memleak in _nss_winbind_initgroups_dyn [Orabug: 34994509] [4.17.5-102] - resolves: rhbz#2169980 - Fix winbind memory leak - resolves: rhbz#2156056 - Fix Samba shares not accessible issue [4.17.5-101] - resolves: rhbz#2168534 - Create package samba-tools [4.17.5-100] - related: rhbz#2131993 - Update to version 4.17.5 [4.17.4-102] - related: rhbz#2131993 - Create package dc-libs also for 'non-dc build' [4.17.4-101] - related: rhbz#2131993 - Rebuild for MIT Kerberos 1.20.1 [4.17.4-100] - related: rhbz#2131993 - Update to version 4.17.4 - resolves: rhbz#2154373 - Fix CVE-2022-38023 - resolves: rhbz#2143196 - Fix %U include directive for share listing (netshareenum) - resolves: rhbz#2114884 - Fix id command to return new groups after successful user login - resolves: rhbz#2154885 - Fix Winbind to retrieve user groups from Active Directory [4.17.2-103] - Always add epoch to samba_depver to fix osci.brew-build.rpmdeplint.functional - related: rhbz#2131993 [4.17.2-102] - Fix CVE-2022-1615 GnuTLS gnutls_rnd() can fail and give predictable random values - resolves: rhbz#2126175 [4.17.2-101] - resolves: rhbz#2131993 - Update to version 4.17.2 [4.16.4-101] - resolves: rhbz#2121317 - Do not require samba package in python3-samba [4.16.4-100] - Rebase to version 4.16.4 - resolves: rhbz#2108332 - Fix CVE-2022-32742 [ 4.16.3-101] - related: rhbz#2077487 - Rebase Samba to 4.16.3 - resolves: rhbz#2097655 - The pcap background queue process should not be stopped - resolves: rhbz#2100105 - Fix net ads info LDAP server and LDAP server name [4.16.2-102] - resolves: rhbz#2106279 - Fix crash in rpcd_classic [4.16.2-101] - resolves: rhbz#2093833 - Fix weak dependency on logrotate - resolves: rhbz#2096813 - Fix printer displays only after 300 seconds timeout [4.16.2-100] - Fix rpminspect abidiff - related: rhbz#2077487 - Rebase Samba to 4.16.2 [4.16.1-100] - resolves: rhbz#2077487 - Rebase Samba to the the latest 4.16.x release [4.15.5-108] - resolves: rhbz#2078838 - Fix UPNs handling in lookup_name*() calls [4.15.5-106] - resolves: rhbz#2065376 - Fix 'create krb5 conf = yes when a KDC has a single IP address. - resolves: rhbz#2076504 - PAM Kerberos authentication fails with a clock skew error [4.15.5-105] - resolves: rhbz#2074891 - Fix username map for unix groups [4.15.5-104] - resolves: rhbz#2057500 - Fix winbind kerberos ticket refresh [4.15.5-103] - related: rhbz#2044231 - Fix typo in testparm output [4.15.5-102] - resolves: rhbz#2044231 - Improve idmap autorid sanity checks and documentation [4.15.5-101] - resolves: #2050111 - [RFE] Change change password change prompt phrasing - resolves: #2054110 - virusfilter_vfs_openat: Not scanned: Directory or special file [4.15.5-100] - related: rhbz#2013578 - Rebase Samba to the the latest 4.15.x release - resolves: #2046129 - Fix CVE-2021-44141 - resolves: #2046154 - Fix CVE-2021-44142 - resolves: #2044405 - Fix printing no longer works on Windows 7 - resolves: #2049485 - Fix systemd notifications - resolves: #2049604 - Disable NTLMSSP for ldap client connections [4.15.4-100] - related: rhbz#2013578 - Rebase Samba to the the latest 4.15.x release - resolves: #2039154 - Fix CVE-2021-20316 - resolves: #2044238 - Failed to authenticate users after upgrade samba package to release samba-4.14.5-7x - resolves: #2044239 - [smb] Segmentation fault when joining the domain - resolves: #2044241 - filename_convert_internal: open_pathref_fsp [xxx] failed: NT_STATUS_ACCESS_DENIED - resolves: #2044255 - Fix CVE-2021-43566 [4.15.3-1] - related: rhbz#2013578 - Rebase to Samba 4.15.3 - resolves: rhbz#2028026 - Fix possible null pointer dereference in winbind - resolves: rhbz#2033317 - Winexe: Kerberos Auth is respected via --use-kerberos=desired [4.15.2-3] - related: rhbz#2013578 - Remove unneeded lmdb dependency [4.15.2-2] - resolves: rhbz#2019675 - Fix CVE-2020-25717 [4.15.2-2] - resolves: rhbz#2019669 - Fix CVE-2021-23192 [4.15.2-2] - resolves: rhbz#2019663 - Fix CVE-2016-2124 [4.15.2-1] - resolves: rhbz#2013578 - Rebase to Samba 4.15.2 [4.14.5-103] - resolves: rhbz#1980356 - Fix winbind restart on package upgrade [0:4.14.5-102] - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 [4.14.5-101] - related: rhbz#1975690 - Create a subpackage for vfs-iouring [4.14.5-100] - related: rhbz#1954531 - Make sure upgrades to RHEL9 will work [4.14.5-0] - related: rhbz#1954531 - Update to Samba 4.14.5 [4.14.4-7] - related: rhbz#1954531 - Fix build issues with gcc - resolves: rhbz#1959712 - Add iouring vfs module [4.14.4-5] * related: rhbz#1954531 - Add rpminspect.yaml [4.14.4-2] - related: rhbz#1954531 - Remove obsolete /var/spool/samba [4.14.4-1] - resolves: rhbz#1954531 - Update to Samba 4.14.4 - resolves: rhbz#1949446 - Fix CVE-2021-20254 - resolves: rhbz#1942378 - Disable nis support [0:4.14.2-0.1] - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 LOW Copyright 2023 Oracle, Inc. CVE-2022-1615 Oracle Linux 9 [3.0.7-6.0.1] - Replace upstream references [Orabug: 34340177] [1:3.0.7-6] - Fixes RNG slowdown in FIPS mode Resolves: rhbz#2168224 [1:3.0.7-5] - Fixed X.509 Name Constraints Read Buffer Overflow Resolves: CVE-2022-4203 - Fixed Timing Oracle in RSA Decryption Resolves: CVE-2022-4304 - Fixed Double free after calling PEM_read_bio_ex Resolves: CVE-2022-4450 - Fixed Use-after-free following BIO_new_NDEF Resolves: CVE-2023-0215 - Fixed Invalid pointer dereference in d2i_PKCS7 functions Resolves: CVE-2023-0216 - Fixed NULL dereference validating DSA public key Resolves: CVE-2023-0217 - Fixed X.400 address type confusion in X.509 GeneralName Resolves: CVE-2023-0286 - Fixed NULL dereference during PKCS7 data verification Resolves: CVE-2023-0401 [1:3.0.7-4] - Disallow SHAKE in RSA-OAEP decryption in FIPS mode Resolves: rhbz#2142121 [1:3.0.7-3] - Refactor OpenSSL fips module MAC verification Resolves: rhbz#2157965 [1:3.0.7-2] - Various provider-related imrovements necessary for PKCS#11 provider correct operations Resolves: rhbz#2142517 - We should export 2 versions of OPENSSL_str[n]casecmp to be compatible with upstream Resolves: rhbz#2133809 - Removed recommended package for openssl-libs Resolves: rhbz#2093804 - Adjusting include for the FIPS_mode macro Resolves: rhbz#2083879 - Backport of ppc64le Montgomery multiply enhancement Resolves: rhbz#2130708 - Fix explicit indicator for PSS salt length in FIPS mode when used with negative magic values Resolves: rhbz#2142087 - Update change to default PSS salt length with patch state from upstream Related: rhbz#2142087 [1:3.0.7-1] - Rebasing to OpenSSL 3.0.7 Resolves: rhbz#2129063 [1:3.0.1-44] - SHAKE-128/256 are not allowed with RSA in FIPS mode Resolves: rhbz#2144010 - Avoid memory leaks in TLS Resolves: rhbz#2144008 - FIPS RSA CRT tests must use correct parameters Resolves: rhbz#2144006 - FIPS-140-3 permits only SHA1, SHA256, and SHA512 for DRBG-HASH/DRBG-HMAC Resolves: rhbz#2144017 - Remove support for X9.31 signature padding in FIPS mode Resolves: rhbz#2144015 - Add explicit indicator for SP 800-108 KDFs with short key lengths Resolves: rhbz#2144019 - Add explicit indicator for HMAC with short key lengths Resolves: rhbz#2144000 - Set minimum password length for PBKDF2 in FIPS mode Resolves: rhbz#2144003 - Add explicit indicator for PSS salt length in FIPS mode Resolves: rhbz#2144012 - Clamp default PSS salt length to digest size for FIPS 186-4 compliance Related: rhbz#2144012 - Forbid short RSA keys for key encapsulation/decapsulation in FIPS mode Resolves: rhbz#2145170 [1:3.0.1-43] - CVE-2022-3602: X.509 Email Address Buffer Overflow - CVE-2022-3786: X.509 Email Address Buffer Overflow Resolves: CVE-2022-3602 [1:3.0.1-42] - CVE-2022-3602: X.509 Email Address Buffer Overflow Resolves: CVE-2022-3602 (rhbz#2137723) [1:3.0.1-41] - Zeroize public keys as required by FIPS 140-3 Related: rhbz#2102542 - Add FIPS indicator for HKDF Related: rhbz#2114772 [1:3.0.1-40] - Deal with DH keys in FIPS mode according FIPS-140-3 requirements Related: rhbz#2102536 - Deal with ECDH keys in FIPS mode according FIPS-140-3 requirements Related: rhbz#2102537 - Use signature for RSA pairwise test according FIPS-140-3 requirements Related: rhbz#2102540 - Reseed all the parent DRBGs in chain on reseeding a DRBG Related: rhbz#2102541 [1:3.0.1-39] - Use RSA-OAEP in FIPS RSA encryption/decryption FIPS self-test - Use Use digest_sign & digest_verify in FIPS signature self test - Use FFDHE2048 in Diffie-Hellman FIPS self-test Resolves: rhbz#2102535 [1:3.0.1-38] - Fix segfault in EVP_PKEY_Q_keygen() when OpenSSL was not previously initialized. Resolves: rhbz#2103289 - Improve AES-GCM performance on Power9 and Power10 ppc64le Resolves: rhbz#2051312 - Improve ChaCha20 performance on Power10 ppc64le Resolves: rhbz#2051312 [1:3.0.1-37] - CVE-2022-2097: AES OCB fails to encrypt some bytes on 32-bit x86 Resolves: CVE-2022-2097 [1:3.0.1-36] - Ciphersuites with RSAPSK KX should be filterd in FIPS mode - Related: rhbz#2085088 - FIPS provider should block RSA encryption for key transport. - Other RSA encryption options should still be available if key length is enough - Related: rhbz#2053289 - Improve diagnostics when passing unsupported groups in TLS - Related: rhbz#2070197 - Fix PPC64 Montgomery multiplication bug - Related: rhbz#2098199 - Strict certificates validation shouldn't allow explicit EC parameters - Related: rhbz#2058663 - CVE-2022-2068: the c_rehash script allows command injection - Related: rhbz#2098277 [1:3.0.1-35] - Add explicit indicators for signatures in FIPS mode and mark signature primitives as unapproved. Resolves: rhbz#2087147 [1:3.0.1-34] - Some OpenSSL test certificates are expired, updating - Resolves: rhbz#2092456 [1:3.0.1-33] - CVE-2022-1473 openssl: OPENSSL_LH_flush() breaks reuse of memory - Resolves: rhbz#2089444 - CVE-2022-1343 openssl: Signer certificate verification returned inaccurate response when using OCSP_NOCHECKS - Resolves: rhbz#2087911 - CVE-2022-1292 openssl: c_rehash script allows command injection - Resolves: rhbz#2090362 - Revert 'Disable EVP_PKEY_sign/EVP_PKEY_verify in FIPS mode' Related: rhbz#2087147 - Use KAT for ECDSA signature tests, s390 arch - Resolves: rhbz#2069235 [1:3.0.1-32] - openssl ecparam -list_curves lists only FIPS-approved curves in FIPS mode - Resolves: rhbz#2083240 - Ciphersuites with RSA KX should be filterd in FIPS mode - Related: rhbz#2085088 - In FIPS mode, signature verification works with keys of arbitrary size above 2048 bit, and only with 1024, 1280, 1536, 1792 bits for keys below 2048 bits - Resolves: rhbz#2077884 [1:3.0.1-31] - Disable SHA-1 signature verification in FIPS mode - Disable EVP_PKEY_sign/EVP_PKEY_verify in FIPS mode Resolves: rhbz#2087147 [1:3.0.1-30] - Use KAT for ECDSA signature tests - Resolves: rhbz#2069235 [1:3.0.1-29] - -config argument of openssl app should work properly in FIPS mode - Resolves: rhbz#2083274 - openssl req defaults on PKCS#8 encryption changed to AES-256-CBC - Resolves: rhbz#2063947 [1:3.0.1-28] - OpenSSL should not accept custom elliptic curve parameters - Resolves rhbz#2066412 - OpenSSL should not accept explicit curve parameters in FIPS mode - Resolves rhbz#2058663 [1:3.0.1-27] - Change FIPS module version to include hash of specfile, patches and sources Resolves: rhbz#2070550 [1:3.0.1-26] - OpenSSL FIPS module should not build in non-approved algorithms - Resolves: rhbz#2081378 [1:3.0.1-25] - FIPS provider should block RSA encryption for key transport. - Other RSA encryption options should still be available - Resolves: rhbz#2053289 [1:3.0.1-24] - Fix regression in evp_pkey_name2type caused by tr_TR locale fix Resolves: rhbz#2071631 [1:3.0.1-23] - Fix openssl curl error with LANG=tr_TR.utf8 - Resolves: rhbz#2071631 [1:3.0.1-22] - FIPS provider should block RSA encryption for key transport - Resolves: rhbz#2053289 [1:3.0.1-21] - Fix occasional internal error in TLS when DHE is used - Resolves: rhbz#2004915 [1:3.0.1-20] - Fix acceptance of SHA-1 certificates with rh-allow-sha1-signatures = yes when no OpenSSL library context is set - Resolves: rhbz#2065400 [1:3.0.1-19] - Fix TLS connections with SHA1 signatures if rh-allow-sha1-signatures = yes - Resolves: rhbz#2065400 [1:3.0.1-18] - CVE-2022-0778 fix - Resolves: rhbz#2062315 [1:3.0.1-17] - Fix invocation of EVP_PKEY_CTX_set_rsa_padding(RSA_PKCS1_PSS_PADDING) before setting an allowed digest with EVP_PKEY_CTX_set_signature_md() - Skipping 3.0.1-16 due to version numbering confusion with the RHEL-9.0 branch - Resolves: rhbz#2062640 [1:3.0.1-15] - Allow SHA1 in SECLEVEL 2 if rh-allow-sha1-signatures = yes - Resolves: rhbz#2060510 [1:3.0.1-14] - Prevent use of SHA1 with ECDSA - Resolves: rhbz#2031742 [1:3.0.1-13] - OpenSSL will generate keys with prime192v1 curve if it is provided using explicit parameters - Resolves: rhbz#1977867 [1:3.0.1-12] - Support KBKDF (NIST SP800-108) with an R value of 8bits - Resolves: rhbz#2027261 [1:3.0.1-11] - Allow SHA1 usage in MGF1 for RSASSA-PSS signatures - Resolves: rhbz#2031742 [1:3.0.1-10] - rebuilt [1:3.0.1-9] - Allow SHA1 usage in HMAC in TLS - Resolves: rhbz#2031742 [1:3.0.1-8] - OpenSSL will generate keys with prime192v1 curve if it is provided using explicit parameters - Resolves: rhbz#1977867 - pkcs12 export broken in FIPS mode - Resolves: rhbz#2049265 [1:3.0.1-8] - Disable SHA1 signature creation and verification by default - Set rh-allow-sha1-signatures = yes to re-enable - Resolves: rhbz#2031742 [1:3.0.1-7] - s_server: correctly handle 2^14 byte long records - Resolves: rhbz#2042011 [1:3.0.1-6] - Adjust FIPS provider version - Related: rhbz#2026445 [1:3.0.1-5] - On the s390x, zeroize all the copies of TLS premaster secret - Related: rhbz#2040448 [1:3.0.1-4] - rebuilt [1:3.0.1-3] - KATS tests should be executed before HMAC verification - Restoring fips=yes for SHA1 - Related: rhbz#2026445, rhbz#2041994 [1:3.0.1-2] - Add enable-buildtest-c++ to the configure options. - Related: rhbz#1990814 [1:3.0.1-1] - Rebase to upstream version 3.0.1 - Fixes CVE-2021-4044 Invalid handling of X509_verify_cert() internal errors in libssl - Resolves: rhbz#2038910, rhbz#2035148 [1:3.0.0-7] - Remove algorithms we don't plan to certify from fips module - Remove native fipsmodule.cnf - Related: rhbz#2026445 [1:3.0.0-6] - openssl speed should run in FIPS mode - Related: rhbz#1977318 [1:3.0.0-5] - rebuilt for spec cleanup - Related: rhbz#1985362 [1:3.0.0-4] - Embed FIPS HMAC in fips.so - Enforce loading FIPS provider when FIPS kernel flag is on - Related: rhbz#1985362 [1:3.0.0-3] - Fix memory leak in s_client - Related: rhbz#1996092 [1:3.0.0-2] - Avoid double-free on error seeding the RNG. - KTLS and FIPS may interfere, so tests need to be tuned - Resolves: rhbz#1952844, rhbz#1961643 [1:3.0.0-1] - Rebase to upstream version 3.0.0 - Related: rhbz#1990814 [1:3.0.0-0.beta2.7] - Removes the dual-abi build as it not required anymore. The mass rebuild was completed and all packages are rebuilt against Beta version. - Resolves: rhbz#1984097 [1:3.0.0-0.beta2.6] - Correctly process CMS reading from /dev/stdin - Resolves: rhbz#1986315 [3.0.0-0.beta2.5] - Add instruction for loading legacy provider in openssl.cnf - Resolves: rhbz#1975836 [3.0.0-0.beta2.4] - Adds support for IDEA encryption. - Resolves: rhbz#1990602 [3.0.0-0.beta2.3] - Fixes core dump in openssl req -modulus - Fixes 'openssl req' to not ask for password when non-encrypted private key is used - cms: Do not try to check binary format on stdin and -rctform fix - Resolves: rhbz#1988137, rhbz#1988468, rhbz#1988137 [1:3.0.0-0.beta2.2.1] - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 [3.0.0-0.beta2.2] - When signature_algorithm extension is omitted, use more relevant alerts - Resolves: rhbz#1965017 [3.0.0-0.beta2.1] - Rebase to upstream version beta2 - Related: rhbz#1903209 [3.0.0-0.beta1.5] - Prevents creation of duplicate cert entries in PKCS #12 files - Resolves: rhbz#1978670 [3.0.0-0.beta1.4] - NVR bump to update to OpenSSL 3.0 Beta1 [3.0.0-0.beta1.3] - Update patch dual-abi.patch to add the #define macros in implementation files instead of public header files [3.0.0-0.beta1.2] - Removes unused patch dual-abi.patch [3.0.0-0.beta1.1] - Update to Beta1 version - Includes a patch to support dual-ABI, as Beta1 brekas ABI with alpha16 [3.0.0-0.alpha16.7] - Fixes override of openssl_conf in openssl.cnf - Use AI_ADDRCONFIG only when explicit host name is given - Temporarily remove fipsmodule.cnf for arch i686 - Fixes segmentation fault in BN_lebin2bn - Resolves: rhbz#1975847, rhbz#1976845, rhbz#1973477, rhbz#1975855 [3.0.0-0.alpha16.6] - Adds FIPS mode compatibility patch (sahana@redhat.com) - Related: rhbz#1977318 [3.0.0-0.alpha16.5] - Fixes system hang issue when booted in FIPS mode (sahana@redhat.com) - Temporarily disable downstream FIPS patches - Related: rhbz#1977318 [3.0.0-0.alpha16.4] - Speeding up building openssl (dbelyavs@redhat.com) Resolves: rhbz#1903209 [3.0.0-0.alpha16.3] - Fix reading SPKAC data from stdin - Fix incorrect OSSL_PKEY_PARAM_MAX_SIZE for ed25519 and ed448 - Return 0 after cleanup in OPENSSL_init_crypto() - Cleanup the peer point formats on regotiation - Fix default digest to SHA256 [3.0.0-0.alpha16.2] - Enable FIPS via config options [3.0.0-0.alpha16.1] - Update to alpha 16 version Resolves: rhbz#1952901 openssl sends alert after orderly connection close LOW Copyright 2023 Oracle, Inc. CVE-2022-3358 Oracle Linux 9 [3.5.3-4] - Resolves: CVE-2022-36227 LOW Copyright 2023 Oracle, Inc. CVE-2022-36227 Oracle Linux 7 [1.6.2-1] - CVE-2023-2727, CVE-2023-2728 Kubernetes upgraded to 1.25.11 - Add all modules to registry-image-helper - update yq to 4.x IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-2728 CVE-2023-2727 cpe:/a:oracle:linux:7::developer_olcne cpe:/a:oracle:linux:7::olcne16 Oracle Linux 8 [1.6.2-1] - CVE-2023-2727, CVE-2023-2728 Kubernetes upgraded to 1.25.11 - Add all modules to registry-image-helper - update yq to 4.x IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-2728 CVE-2023-2727 cpe:/a:oracle:linux:8::olcne16 cpe:/a:oracle:linux:8::developer_olcne Oracle Linux 9 [1.20.1-8.0.1] - Fixed race condition in krb5_set_password() [Orabug: 33609767] [1.20.1-8] - Fix datetime parsing in kadmin on s390x - Resolves: rhbz#2169985 [1.20.1-7] - Fix double free on kdb5_util key creation failure - Resolves: rhbz#2166603 [1.20.1-6] - Add support for MS-PAC extended KDC signature (CVE-2022-37967) - Resolves: rhbz#2165827 [1.20.1-5] - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode - Resolves: rhbz#2162461 [1.20.1-4] - Set aes256-cts-hmac-sha384-192 as EXAMLE.COM master key in kdc.conf - Add AES SHA-2 HMAC family as EXAMPLE.COM supported etypes in kdc.conf - Resolves: rhbz#2068535 [1.20.1-2] - Strip debugging data from ksu executable file - Resolves: rhbz#2159643 [1.20.1-1] - Make tests compatible with sssd-client - Resolves: rhbz#2151513 - Remove invalid password expiry warning - Resolves: rhbz#2121099 - Update error checking for OpenSSL CMS_verify - Resolves: rhbz#2063838 - New upstream version (1.20.1) - Resolves: rhbz#2016312 - Fix integer overflows in PAC parsing (CVE-2022-42898) - Resolves: rhbz#2140971 [1.19.1-23] - Fix kprop for propagating dump files larger than 4GB - Resolves: rhbz#2133014 [1.19.1-22] - Restore 'supportedCMSTypes' attribute in PKINIT preauth requests - Set SHA-512 or SHA-256 with RSA as preferred CMS signature algorithms - Resolves: rhbz#2068935 [1.19.1-21] - Fix libkrad client cleanup - Allow use of larger RADIUS attributes in krad library - Resolves: rhbz#2100351 [1.19.1-20] - Fix OpenSSL 3 MD5 encyption in FIPS mode - Allow libkrad UDP/TCP connection to localhost in FIPS mode - Resolves: rhbz#2068458 [1.19.1-19] - Use p11-kit as default PKCS11 module - Resolves: rhbz#2030981 [1.19.1-18] - Try harder to avoid password change replay errors - Resolves: rhbz#2075186 [1.19.1-15] - Use SHA-256 instead of SHA-1 for PKINIT CMS digest [1.19.1-14] - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode [1.19.1-13] - Remove -specs= from krb5-config output - Resolves #1997021 [1.19.1-12] - Fix KDC null deref on TGS inner body null server (CVE-2021-37750) - Resolves: #1997602 [1.19.1-11.1] - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 [1.19.1-11] - Fix KDC null deref on bad encrypted challenge (CVE-2021-36222) - Resolves: #1983733 [1.19.1-10] - Update OpenSSL 3 provider handling to clean up properly - Resolves: #1955873 [1.19.1-9] - Sync openssl3 patches with upstream - Resolves: #1955873 [1.19.1-8] - Rebuild for rpminspect and mass rebuild cleanup; no code changes - Resolves: #1967505 [1.19.1-7] - Fix several fallback canonicalization problems - Resolves: #1967505 [1.19.1-6.1] - Rebuilt for RHEL 9 BETA for openssl 3.0 - Resolves: rhbz#1971065 [1.19.1-6] - Backport KCM retrieval fixes - Resolves: #1956403 [1.19.1-5] - Fix DES3 mention in KDFs - Resolves: #1955873 [1.19.1-4] - Port to OpenSSL 3 (alpha 15) - Resolves: #1955873 [1.19.1-3.1] - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 MODERATE Copyright 2023 Oracle, Inc. CVE-2020-17049 Oracle Linux 9 [5.4.4-3] - Apply upstream patch for CVE-2022-28805 LOW Copyright 2023 Oracle, Inc. CVE-2022-28805 Oracle Linux 9 [0.31.1-65] - Resolves: rhbz#2121828 Fix the gating tests by using only local test Upstream testsuite will not work as this package code is very old [0.31.1-64] - Resolves: rhbz#2121828 CVE-2022-32323 - heap-buffer overflow via the ReadImage() at input-bmp.c MODERATE Copyright 2023 Oracle, Inc. CVE-2022-32323 Oracle Linux 9 [2.0.2-4] - fix RHEL9.2 build - thanks to Debarshi Ray - Related: #2124478 [2.0.2-3] - rebuild - Resolves: #2037812 [2.0.2-2] - limit to golang arches only - Related: #2061316 * Thu Aug 04 2022 Jindrich Novy <jnovy@redhat.com> - update to 2.0.2 - Related: #2061316 [2.0.0-18.gitaf8da76] - fix gating.yaml as we have no functional gating tests - Related: #2000051 [2.0.0-17.gitaf8da76] - update gating.yaml and rebuild - Related: #2000051 [2.0.0-16.gitaf8da76] - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 [2.0.0-15.gitaf8da76] - Resolves: #1975362 - enable additional hardening flags [2.0.0-14.gitaf8da76] - Resolves: #1975362 - enable full cf-protection for x86_64 [2.0.0-13.gitaf8da76] - Resolves: #1975362 - use latest upstream commit [2.0.0-12] - Resolves: #1975362 - add -fcf-protection to CGO_CFLAGS [2.0.0-11] - Resolves: #1975362 - add gating.yaml [2.0.0-10] - Resolves: #1975362 - build with CGO_CFLAGS defined MODERATE Copyright 2023 Oracle, Inc. CVE-2022-41715 Oracle Linux 9 [8.0.32-1] - Update to MySQL 8.0.32 [8.0.31-1] - Update to MySQL 8.0.31 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-21865 CVE-2023-21880 CVE-2023-21883 CVE-2022-21604 CVE-2023-21867 CVE-2022-21640 CVE-2022-39400 CVE-2023-21871 CVE-2023-21881 CVE-2022-21625 CVE-2023-21917 CVE-2023-21887 CVE-2022-21611 CVE-2023-21864 CVE-2023-21869 CVE-2023-21870 CVE-2023-21873 CVE-2022-21608 CVE-2022-39408 CVE-2022-39410 CVE-2023-21877 CVE-2023-21912 CVE-2022-21594 CVE-2022-21599 CVE-2023-21874 CVE-2023-21836 CVE-2023-21868 CVE-2023-21878 CVE-2022-21617 CVE-2022-21633 CVE-2023-21875 CVE-2023-21876 CVE-2023-21882 CVE-2022-21632 CVE-2023-21863 CVE-2023-21879 CVE-2022-21637 Oracle Linux 9 [1:27.2-8.1] - Fix etags local command injection vulnerability (#2184369) - Fix htmlfontify.el command injection vulnerability (#2184368) - Fix ruby-mode.el local command injection vulnerability (#2184367) - Fix ob-latex.el command injection vulnerability (#2184377) [1:27.2-8] - Use a 64KB page size for pdump (#1979804) [1:27.2-7] - Fix ctags local command execute vulnerability (#2149387) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-48338 CVE-2023-2491 CVE-2022-48339 CVE-2022-48337 Oracle Linux 9 [4.9-2.0.1] - Add libreswan-oracle.patch to detect Oracle Linux distro [4.9-2] - Fix CVE-2023-23009: remote DoS via crafted TS payload with an incorrect selector length (rhbz#2173674) MODERATE Copyright 2023 Oracle, Inc. CVE-2023-23009 Oracle Linux 9 [8.7p1-29] - Resolve possible self-DoS with some clients Resolves: rhbz#2186473 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-25136 Oracle Linux 9 [7.76.1-23.el9_2.1] - fix FTP too eager connection reuse (CVE-2023-27535) [7.76.1-23] - fix HTTP multi-header compression denial of service (CVE-2023-23916) [7.76.1-22] - smb/telnet: fix use-after-free when HTTP proxy denies tunnel (CVE-2022-43552) [7.76.1-21] - fix POST following PUT confusion (CVE-2022-32221) [7.76.1-20] - control code in cookie denial of service (CVE-2022-35252) MODERATE Copyright 2023 Oracle, Inc. CVE-2023-27535 Oracle Linux 9 [2.38.5-1.1] - Add patch for CVE-2023-28205 Resolves: #2185745 [2.38.5-1] - Update to 2.38.5 Related: #2127467 [2.38.4-1] - Update to 2.38.4 Related: #2127467 [2.38.3-1] - Update to 2.38.3 Related: #2127467 [2.38.2-1] - Update to 2.38.2 Related: #2127467 [2.38.1-2] - Fix use with aarch64 64 KiB page size Related: #2127467 [2.38.1-1] - Update to 2.38.1 Resolves: #2127467 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-2203 Oracle Linux 9 nodejs [1:18.14.2-2] - Provide simduft - Resolves: #2159389 [1:18.14.2-1] - Rebase to 18.14.2 - Resolves: #2159389 - Resolves: CVE-2022-25881, CVE-2022-4904, CVE-2023-23936, CVE-2023-24807 - Resolves: CVE-2023-23918, CVE-2023-23919, CVE-2023-23920 nodejs-nodemon [2.0.20-2] - Patch bundled glob-parent - Resolves: CVE-2021-35065 nodejs-packaging MODERATE Copyright 2023 Oracle, Inc. CVE-2021-35065 CVE-2023-23936 CVE-2023-23918 CVE-2022-25881 CVE-2022-4904 CVE-2023-23919 CVE-2023-23920 CVE-2023-24807 Oracle Linux 9 nodejs [1:16.19.1-1] - Rebase to 16.19.1 - Resolves: rhbz#2153714 - Resolves: CVE-2023-23918 CVE-2023-23919 CVE-2023-23936 CVE-2023-24807 CVE-2023-23920 - Resolves: CVE-2022-25881 CVE-2022-4904 nodejs-nodemon [2.0.20-3] - Patch bundled glob-parent - Resolves: CVE-2021-35065 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-25881 CVE-2023-24807 CVE-2023-23918 CVE-2022-4904 CVE-2023-23920 CVE-2023-23936 Oracle Linux 8 hivex libguestfs [1.44.0-9.0.1] - Replace upstream references from description tag - Config supermin to use host yum.conf in ol8 [Orabug: 29319324] - Set DISTRO_ORACLE_LINUX correspeonding to ol [1:1.44.0-9] - Fix CVE-2022-2211 Denial of Service in --key parameter resolves: rhbz#2101280 [1:1.44.0-8] - Obsolete old libguestfs-benchmarking subpackage resolves: rhbz#2091597 [1:1.44.0-7] - Disable 5-level page tables when using -cpu max resolves: rhbz#2084566 related: rhbz#2075424 [1:1.44.0-6] - Backport support for -cpu max to allow RHEL 9 guests to be modified resolves: rhbz#2075424 [1:1.44.0-5] - Fix libguestfs failure with qemu 6.2, libvirt 7.10 resolves: rhbz#2035177 [1:1.44.0-4] - Autodetect backing format for qemu-img create -b - Move appliance to separate subpackage - Read rpm database through librpm resolves: rhbz#2013916, rhbz#1989520, rhbz#1836094 [1.44.0-3.el8] - Resolves: bz#2000225 (Rebase virt:rhel module:stream based on AV-8.6) [1:1.40.2-28] - daemon: lvm: Use lvcreate --yes to avoid interactive prompts resolves: rhbz#1933640 libguestfs-winsupport [8.8-1] - Rebase to ntfs-3g 2022.5.17 - Fixes: CVE-2021-46790, CVE-2022-30783, CVE-2022-30784, CVE-2022-30785, CVE-2022-30786, CVE-2022-30787, CVE-2022-30788, CVE-2022-30789 resolves: rhbz#2127240 rhbz#2127248 (also: 2127233 2127234 2127241 2127249 2127255 2127256 2127262 2127263) libiscsi libnbd [1.6.0-5.el8] - Fix CVE-2022-0485: Fail nbdcopy if NBD read or write fails resolves: rhbz#2045718 [1.6.0-4.el8] - Resolves: bz#2000225 (Rebase virt:rhel module:stream based on AV-8.6) [1.2.2] - Resolves: bz#1844296 (Upgrade components in virt:rhel module:stream for RHEL-8.3 release) [1.2.2-1] - New stable release 1.2.2. [1.2.1-1] - New stable release 1.2.1. [1.2.0-1] - New stable release 1.2.0. [1.0.3-1] - New upstream version 1.0.3. - Contains fix for remote code execution vulnerability. - Add new libnbd-security(3) man page. [1.0.2-1] - New upstream version 1.0.2. - Remove patches which are upstream. - Contains fix for NBD Protocol Downgrade Attack (CVE-2019-14842). - Fix previous commit message. [1.0.1-2] - Add upstream patch to fix nbdsh (for nbdkit tests). - Fix interop tests on slow machines. [1.0.1-1] - New stable version 1.0.1. [1.0.0-1] - New upstream version 1.0.0. [0.9.9-2] - Rebuilt for Python 3.8 [0.9.9-1] - New upstream version 0.9.9. [0.9.8-4] - Fix nbdkit dependencies so we're actually running the tests. - Add glib2-devel BR so we build the glib main loop example. - Add upstream patch to fix test error: nbd_connect_unix: getlogin: No such device or address - Fix test failure on 32 bit. [0.9.8-3] - Bump and rebuild to fix releng brokenness. https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/2LIDI33G3IEIPYSCCIP6WWKNHY7XZJGQ/ [0.9.8-2] - Rebuilt for Python 3.8 [0.9.8-1] - New upstream version 0.9.8. - Package the new nbd_*(3) man pages. [0.9.7-1] - New upstream version 0.9.7. - Add libnbd-ocaml(3) man page. [0.9.6-2] - Add all upstream patches since 0.9.6 was released. - Package the ocaml bindings into a subpackage. [0.9.6-1] - New upstream verison 0.9.6. [0.1.9-1] - New upstream version 0.1.9. [0.1.8-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild [0.1.8-1] - New upstream version 0.1.8. [0.1.7-1] - New upstream version 0.1.7. [0.1.6-1] - New upstream version 0.1.6. [0.1.5-1] - New upstream version 0.1.5. [0.1.4-1] - New upstream version 0.1.4. [0.1.2-2] - Enable libxml2 for NBD URI support. [0.1.2-1] - New upstream version 0.1.2. [0.1.1-1] - Fix license in man pages and examples. - Add nbdsh(1) man page. - Include the signature and keyring even if validation is disabled. - Update devel subpackage license. - Fix old FSF address in Python tests. - Filter Python provides. - Remove executable permission on the tar.gz.sig file. - Initial release. libtpms [0.9.1-2.20211126git1ff6fe1f43] - Backport 'tpm2: Check size of buffer before accessing it' (CVE-2023-1017 & CVE-2023-1018) Resolves: rhbz#2173964 Resolves: rhbz#2173970 libvirt [8.0.0-19.0.1] - Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554] - Add runtime deps for pkg librbd1 >= 1:10.2.5 (Keshav Sharma) [8.0.0-19] - qemu: domain: Fix logic when tainting domain (rhbz#2174447) - qemu: agent: Make fetching of 'can-offline' member from 'guest-query-vcpus' optional (rhbz#2174447) [8.0.0-18] - conf: Make VIR_DOMAIN_NET_TYPE_ETHERNET not share 'host view' (rhbz#2172578) [8.0.0-17] - vircpi: Add PCIe 5.0 and 6.0 link speeds (rhbz#2168116) [8.0.0-16] - qemu_namespace: Don't leak memory in qemuDomainGetPreservedMounts() (rhbz#2166573) [8.0.0-15] - nodedev: fix reported error msg in css cap XML parsing (rhbz#2165011) - util: refactor virDomainDeviceCCWAddress into virccw.h (rhbz#2165011) - util: refactor virDomainCCWAddressAsString into virccw (rhbz#2165011) - util: make reuse of ccw device address format constant (rhbz#2165011) - util: refactor ccw address constants into virccw (rhbz#2165011) - util: refactor virDomainCCWAddressIncrement into virccw (rhbz#2165011) - util: refactor virDomainDeviceCCWAddressIsValid into virccw (rhbz#2165011) - util: refactor virDomainDeviceCCWAddressEqual into virccw (rhbz#2165011) - conf: adjust method name virDomainDeviceCCWAddressParseXML (rhbz#2165011) - util: add ccw device address parsing into virccw (rhbz#2165011) - util: add virCCWDeviceAddressFromString to virccw (rhbz#2165011) - nodedev: refactor css format from ccw format method (rhbz#2165011) - nodedev: refactor ccw device address parsing from XML (rhbz#2165011) - nodedev: refactor css XML parsing from ccw XML parsing (rhbz#2165011) - schemas: refactor out nodedev ccw address schema (rhbz#2165011) - nodedev: add optional device address of channel device to css device (rhbz#2165011) - nodedev: add tests for optional device address to css device (rhbz#2165011) - nodedev: prevent internal error on dev_busid parse (rhbz#2165011) - rpc: Fix memory leak of fds (rhbz#2165428) [8.0.0-14] - qemu: Ignore missing vm.unprivileged_userfaultfd sysctl (rhbz#2148578) [8.0.0-13] - build: Only install libvirt-guests when building libvirtd (rhbz#2153688) - tools: Fix install_mode for some scripts (rhbz#2153688) [8.0.0-12] - util: json: Split out array->strinlist conversion from virJSONValueObjectGetStringArray (rhbz#2149752) - qemuAgentGetDisks: Don't use virJSONValueObjectGetStringArray for optional data (rhbz#2149752) - virpidfile: Add virPidFileReadPathIfLocked func (rhbz#2152188) - qemu: tpm: Get swtpm pid without binary validation (rhbz#2152188) - qemu_tpm: Do async IO when starting swtpm emulator (rhbz#2152188) - qemu: gpu: Get pid without binary validation (rhbz#2152188) - spec: libvirt-daemon: Add optional dependency on *-client (rhbz#2136591) [8.0.0-11] - qemu_process: Don't require a hugetlbfs mount for memfd (rhbz#2123196) - qemu_namespace: Tolerate missing ACLs when creating a path in namespace (rhbz#2123196) - qemu_namespace: Fix a corner case in qemuDomainGetPreservedMounts() (rhbz#2123196) - qemu_namespace: Introduce qemuDomainNamespaceSetupPath() (rhbz#2123196) - qemu_process.c: Propagate hugetlbfs mounts on reconnect (rhbz#2123196) - qemuProcessReconnect: Don't build memory paths (rhbz#2123196) libvirt-dbus [1.3.0-2.el8] - Resolves: bz#2000225 (Rebase virt:rhel module:stream based on AV-8.6) [1.3.0] - Resolves: bz#1810193 (Upgrade components in virt:rhel module:stream for RHEL-8.3 release) [1.2.0-3] - Rebuild all virt packages to fix RHEL's upgrade path - Resolves: rhbz#1695587 (Ensure modular RPM upgrade path) [1.2.0-2] - util: fix virtDBusUtilDecodeUUID (rhbz#1647823) [1.2.0-1] - Rebased to libvirt-dbus-1.2.0 (rhbz#1630196) [1.0.0-1] - Rebase from Fedora libvirt-python nbdkit [1.24.0-5] - vddk: Add support for VDDK 8.0.0 resolves: rhbz#2143907 netcf perl-Sys-Virt qemu-kvm [6.2.0-32.el8_8] - kvm-aio_wait_kick-add-missing-memory-barrier.patch [bz#2168472] - kvm-qatomic-add-smp_mb__before-after_rmw.patch [bz#2168472] - kvm-qemu-thread-posix-cleanup-fix-document-QemuEvent.patch [bz#2168472] - kvm-qemu-thread-win32-cleanup-fix-document-QemuEvent.patch [bz#2168472] - kvm-edu-add-smp_mb__after_rmw.patch [bz#2168472] - kvm-aio-wait-switch-to-smp_mb__after_rmw.patch [bz#2168472] - kvm-qemu-coroutine-lock-add-smp_mb__after_rmw.patch [bz#2168472] - kvm-physmem-add-missing-memory-barrier.patch [bz#2168472] - kvm-async-update-documentation-of-the-memory-barriers.patch [bz#2168472] - kvm-async-clarify-usage-of-barriers-in-the-polling-case.patch [bz#2168472] - kvm-scsi-protect-req-aiocb-with-AioContext-lock.patch [bz#2090990] - kvm-dma-helpers-prevent-dma_blk_cb-vs-dma_aio_cancel-rac.patch [bz#2090990] - kvm-virtio-scsi-reset-SCSI-devices-from-main-loop-thread.patch [bz#2090990] - Resolves: bz#2168472 (Guest hangs when starting or rebooting) - Resolves: bz#2090990 (qemu crash with error scsi_req_unref(SCSIRequest *): Assertion req->refcount > 0' failed or scsi_dma_complete(void *, int): Assertion r->req.aiocb != NULL' failed [8.7.0]) [6.2.0-31] - kvm-io-Add-support-for-MSG_PEEK-for-socket-channel.patch [bz#2137740] - kvm-migration-check-magic-value-for-deciding-the-mapping.patch [bz#2137740] - kvm-target-s390x-arch_dump-Fix-memory-corruption-in-s390.patch [bz#2168187] - Resolves: bz#2137740 (Multifd migration fails under a weak network/socket ordering race) - Resolves: bz#2168187 ([s390x] qemu-kvm coredumps when SE crashes) [6.2.0-30] - kvm-qcow2-Fix-theoretical-corruption-in-store_bitmap-err.patch [bz#2147617] - kvm-qemu-img-commit-Report-errors-while-closing-the-imag.patch [bz#2147617] - kvm-qemu-img-bitmap-Report-errors-while-closing-the-imag.patch [bz#2147617] - kvm-qemu-iotests-Test-qemu-img-bitmap-commit-exit-code-o.patch [bz#2147617] - Resolves: bz#2147617 (qemu-img finishes successfully while having errors in commit or bitmaps operations) [6.2.0-29] - kvm-block-mirror-Do-not-wait-for-active-writes.patch [bz#2125119] - kvm-block-mirror-Drop-mirror_wait_for_any_operation.patch [bz#2125119] - kvm-block-mirror-Fix-NULL-s-job-in-active-writes.patch [bz#2125119] - kvm-accel-introduce-accelerator-blocker-API.patch [bz#2161188] - kvm-KVM-keep-track-of-running-ioctls.patch [bz#2161188] - kvm-kvm-Atomic-memslot-updates.patch [bz#2161188] - kvm-migration-Read-state-once.patch [bz#2074205] - kvm-s390x-pci-RPCIT-second-pass-when-mappings-exhausted.patch [bz#2163713] - kvm-s390x-pci-coalesce-unmap-operations.patch [bz#2163713] - kvm-s390x-pci-shrink-DMA-aperture-to-be-bound-by-vfio-DM.patch [bz#2163713] - kvm-s390x-pci-reset-ISM-passthrough-devices-on-shutdown-.patch [bz#2163713] - Resolves: bz#2125119 (Mirror job with 'copy-mode':'write-blocking' that used for storage migration can't converge under heavy I/O) - Resolves: bz#2161188 (SVM: non atomic memslot updates cause boot failure with seabios and cpu-pm=on) - Resolves: bz#2074205 (while live-migrating many instances concurrently, libvirt sometimes return internal error: migration was active, but no RAM info was set) - Resolves: bz#2163713 ([s390x] VM fails to start with ISM passed through) [6.2.0-28] - kvm-s390x-tod-kvm-don-t-save-restore-the-TOD-in-PV-guest.patch [bz#2155448] - Resolves: bz#2155448 (RHEL8.8 - KVM: s390: pv: don't allow userspace to set the clock under PV - QEMU part) [6.2.0-27] - kvm-hw-display-qxl-Have-qxl_log_command-Return-early-if-.patch [bz#2148545] - kvm-hw-display-qxl-Document-qxl_phys2virt.patch [bz#2148545] - kvm-hw-display-qxl-Pass-requested-buffer-size-to-qxl_phy.patch [bz#2148545] - kvm-hw-display-qxl-Avoid-buffer-overrun-in-qxl_phys2virt.patch [bz#2148545] - kvm-hw-display-qxl-Assert-memory-slot-fits-in-preallocat.patch [bz#2148545] - Resolves: bz#2148545 (CVE-2022-4144 virt:rhel/qemu-kvm: QEMU: QXL: qxl_phys2virt unsafe address translation can lead to out-of-bounds read [rhel-8]) [6.2.0-26] - kvm-docs-system-s390x-Document-the-loadparm-machine-prop.patch [bz#2128225] - kvm-s390x-Register-TYPE_S390_CCW_MACHINE-properties-as-c.patch [bz#2128225] - kvm-ui-vnc.c-Fixed-a-deadlock-bug.patch [bz#2141896] - Resolves: bz#2128225 ([s390x] [RHEL8][s390x-ccw bios] lacking document about parameter loadparm in qemu) - Resolves: bz#2141896 (VMs hung on vnc_clipboard_send) [6.2.0-25] - kvm-hw-acpi-Add-ospm_status-hook-implementation-for-acpi.patch [bz#2132609] - kvm-target-arm-kvm-Retry-KVM_CREATE_VM-call-if-it-fails-.patch [bz#2132609] - Resolves: bz#2132609 (qemu-kvm: backport some aarch64 fixes) [6.2.0-24] - kvm-s390x-pci-use-a-reserved-ID-for-the-default-PCI-grou.patch [bz#1664378 bz#2043909] - kvm-s390x-pci-don-t-use-hard-coded-dma-range-in-reg_ioat.patch [bz#1664378 bz#2043909] - kvm-s390x-pci-use-the-passthrough-measurement-update-int.patch [bz#1664378 bz#2043909] - kvm-s390x-pci-add-supported-DT-information-to-clp-respon.patch [bz#1664378 bz#2043909] - kvm-Update-linux-headers-to-v6.0-rc4.patch [bz#1664378 bz#2043909] - kvm-s390x-pci-add-routine-to-get-host-function-handle-fr.patch [bz#1664378 bz#2043909] - kvm-s390x-pci-enable-for-load-store-interpretation.patch [bz#1664378 bz#2043909] - kvm-s390x-pci-don-t-fence-interpreted-devices-without-MS.patch [bz#1664378 bz#2043909] - kvm-s390x-pci-enable-adapter-event-notification-for-inte.patch [bz#1664378 bz#2043909] - kvm-s390x-pci-let-intercept-devices-have-separate-PCI-gr.patch [bz#1664378 bz#2043909] - kvm-s390x-pci-reflect-proper-maxstbl-for-groups-of-inter.patch [bz#1664378 bz#2043909] - kvm-s390x-s390-virtio-ccw-Switch-off-zPCI-enhancements-o.patch [bz#1664378 bz#2043909] - kvm-dump-Use-ERRP_GUARD.patch [bz#1664378 bz#2043909] - kvm-dump-Remove-the-sh_info-variable.patch [bz#1664378 bz#2043909] - kvm-dump-Introduce-shdr_num-to-decrease-complexity.patch [bz#1664378 bz#2043909] - kvm-dump-Remove-the-section-if-when-calculating-the-memo.patch [bz#1664378 bz#2043909] - kvm-dump-Add-more-offset-variables.patch [bz#1664378 bz#2043909] - kvm-dump-Introduce-dump_is_64bit-helper-function.patch [bz#1664378 bz#2043909] - kvm-dump-Consolidate-phdr-note-writes.patch [bz#1664378 bz#2043909] - kvm-dump-Cleanup-dump_begin-write-functions.patch [bz#1664378 bz#2043909] - kvm-dump-Consolidate-elf-note-function.patch [bz#1664378 bz#2043909] - kvm-dump-Replace-opaque-DumpState-pointer-with-a-typed-o.patch [bz#1664378 bz#2043909] - kvm-dump-Rename-write_elf_loads-to-write_elf_phdr_loads.patch [bz#1664378 bz#2043909] - kvm-dump-Refactor-dump_iterate-and-introduce-dump_filter.patch [bz#1664378 bz#2043909] - kvm-dump-Rework-get_start_block.patch [bz#1664378 bz#2043909] - kvm-dump-Rework-filter-area-variables.patch [bz#1664378 bz#2043909] - kvm-dump-Rework-dump_calculate_size-function.patch [bz#1664378 bz#2043909] - kvm-dump-Split-elf-header-functions-into-prepare-and-wri.patch [bz#1664378 bz#2043909] - kvm-dump-Rename-write_elf-_phdr_note-to-prepare_elf-_phd.patch [bz#1664378 bz#2043909] - kvm-dump-simplify-a-bit-kdump-get_next_page.patch [bz#1664378 bz#2043909] - kvm-dump-fix-kdump-to-work-over-non-aligned-blocks.patch [bz#1664378 bz#2043909] - kvm-dump-Use-a-buffer-for-ELF-section-data-and-headers.patch [bz#1664378 bz#2043909] - kvm-dump-Write-ELF-section-headers-right-after-ELF-heade.patch [bz#1664378 bz#2043909] - kvm-dump-Reorder-struct-DumpState.patch [bz#1664378 bz#2043909] - kvm-dump-Reintroduce-memory_offset-and-section_offset.patch [bz#1664378 bz#2043909] - kvm-dump-Add-architecture-section-and-section-string-tab.patch [bz#1664378 bz#2043909] - kvm-s390x-Add-protected-dump-cap.patch [bz#1664378 bz#2043909] - kvm-s390x-Introduce-PV-query-interface.patch [bz#1664378 bz#2043909] - kvm-include-elf.h-add-s390x-note-types.patch [bz#1664378 bz#2043909] - kvm-s390x-Add-KVM-PV-dump-interface.patch [bz#1664378 bz#2043909] - kvm-s390x-pv-Add-dump-support.patch [bz#1664378 bz#2043909] - kvm-ui-vnc-clipboard-fix-integer-underflow-in-vnc_client.patch [bz#2129760] - Resolves: bz#1664378 ([IBM 8.8 FEAT] Enhanced Interpretation for PCI Functions (kvm) - qemu part) - Resolves: bz#2043909 ([IBM 8.8 FEAT] KVM: Secure Execution guest dump encryption with customer keys - qemu part) - Resolves: bz#2129760 (CVE-2022-3165 virt:rhel/qemu-kvm: QEMU: VNC: integer underflow in vnc_client_cut_text_ext leads to CPU exhaustion [rhel-8]) [6.2.0-23] - kvm-virtio-fix-the-condition-for-iommu_platform-not-supp.patch [bz#2116302] - kvm-virtio-fix-feature-negotiation-for-ACCESS_PLATFORM.patch [bz#2116302] - Resolves: bz#2116302 (RHEL8.6 - virtiofs will not mount fs on secure execution guest) seabios sgabios supermin [5.2.1-2.el8] - Supermin should ignore +debug kernels resolves: rhbz#2051332 - Add copy-patches script. [5.2.1-1.el8] - Resolves: bz#2000225 (Rebase virt:rhel module:stream based on AV-8.6) [5.1.19] - Resolves: bz#1810193 (Upgrade components in virt:rhel module:stream for RHEL-8.3 release) [5.1.19-9] - Rebuild all virt packages to fix RHEL's upgrade path - Resolves: rhbz#1695587 (Ensure modular RPM upgrade path) [5.1.19-8] - Pass CFLAGS & LDFLAGS to final supermin link resolves: rhbz#1624175 [5.1.19-7] - Rebuild for OCaml 4.07.0. [5.1.19-6] - Drop dietlibc in RHEL 8 resolves: rhbz#1588067 [5.1.19-5] - Bump release and rebuild. [5.1.19-4] - Reenable hardened build [5.1.19-3] - Fix bytes/string problems. [5.1.19-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [5.1.19-1] - New upstream version 5.1.19. - Remove all patches, now upstream. [5.1.18-5] - Rebuilt for RPM soname bump [5.1.18-4] - Fix supermin crash with truncated vmlinuz file (RHBZ#1477758). - Include all upstream patches since 5.1.18. [5.1.18-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild [5.1.18-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [5.1.18-1] - New upstream release 5.1.18. - Fixes problem with creating incorrect symlinks (RHBZ#1470157). [5.1.17-5] - Enable dietlibc on aarch64 and POWER. [5.1.17-4] - Drop dependency on hawkey and versioned dependencies on dnf. [5.1.17-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [5.1.17-2] - Rebuild for OCaml 4.04.0. [5.1.17-1] - New upstream release 5.1.17. - Check signature on the tarball before unpacking it. - Remove patches, all upstream. [5.1.16-6] - Switch to dietlibc on s390x [5.1.16-5] - Do not break the binary on interpreted builds (#1375213) [5.1.16-4] - Add all upstream patches since 5.1.16 was released. [5.1.16-3] - Add upstream patch for DAX / vNVDIMM support. [5.1.16-2] - New upstream version 5.1.16. - Drop all patches since they are upstream. - Depend on systemd-udev to work around RHBZ#1331012. [5.1.15-2] - Add all upstream patches since 5.1.15 was released. - These should improve boot performance and initrd size. [5.1.15-1] - New upstream version 5.1.15. - Remove all patches, since they are now included in this version. - Enable dietlibc, remove glibc-static, xz-static, zlib-static. [5.1.14-4] - Add more patches since 5.1.14. [5.1.14-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [5.1.14-2] - Add all patches since 5.1.14. [5.1.14-1] - New upstream version 5.1.14. - Remove all patches - now upstream. [5.1.13-4] - Pull in all upstream patches since 5.1.13. - Choose providers better (RHBZ#1266918). - Use autopatch. - Explicitly depend on pod2html. [5.1.13-3] - Bump version to rebuild against new RPM in Rawhide. [5.1.13-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [5.1.13-1] - New upstream version 5.1.13. - Remove patch, now upstream. [5.1.12-11] - Prefer 'dnf download' over 'yumdownloader' (again). - BR grubby for the tests to work. [5.1.12-9] - Revert back to yumdownloader (RHBZ#1186948). [5.1.12-8] - Prefer 'dnf download' over 'yumdownloader'. [5.1.12-7] - Disable hardened build again. See RHBZ#1202091 RHBZ#1204162. [5.1.12-6] - Enable hardening flags by building the static 'init' specially before the main build. - Use _smp_mflags. [5.1.12-4] - Add a -devel subpackage containing automated RPM dependency generator for supermin appliances. [5.1.12-2] - Disable hardened build as it breaks building the static 'init' binary. [5.1.12-1] - New upstream version 5.1.12. - Includes ARM fix: lpae kernels can now be booted (RHBZ#1199733). [5.1.11-2] - Rebuild for xz-5.2.0 in Rawhide (RHBZ#1179252). [5.1.11-1] - New upstream version 5.1.11. [5.1.10-2] - Update to upstream commit d78c898c7e2bc5f12cbebef98b95a7908d9120f1. - BR rpm-devel, since it is now used instead of invoking rpm. - BR automake and autoconf, and run autoreconf (configure.ac is modified by the patches). [5.1.10-1] - New upstream version 5.1.10. - Remove patch which is now included upstream. [5.1.9-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild [5.1.9-2] - Add upstream patch to avoid endless loop in Rawhide. [5.1.9-1] - New upstream version 5.1.9. - Remove patches which are now upstream. [5.1.8-9] - Add Requires findutils (RHBZ#1113029). [5.1.8-8] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild [5.1.8-7] - Add patch to fix RPM handler when filenames may contain spaces. [5.1.8-4] - Skip execstack test on Fedora 20 (ARM only). [5.1.8-3] - BR xz-static & xz-devel packages, to support xz-compressed kernel modules. [5.1.8-1] - New upstream version 5.1.8. - Remove patches which are now upstream. [5.1.7-3] - Add upstream patch which removes need to run execstack (RHBZ#1093261). [5.1.7-2] - Add patch to fix quoting around mke2fs parameter (RHBZ#1084960). [5.1.7-1] - New upstream version 5.1.7. - Remove ppc64p7 patch which is now upstream. [5.1.6-5] - Requires tar, which is not installed in an @Core installation. [5.1.6-4] - Add upstream patch to fix supermin on ppc64p7. [5.1.6-3] - New upstream version 5.1.6. - Fix tests. [5.1.5-2] - Disable execstack on aarch64. It comes from prelink which does not exist on aarch64. [5.1.5-1] - New upstream version 5.1.5. [5.1.3-1] - New upstream version 5.1.3. [5.1.2-1] - New upstream version 5.1.2. - Fixes a serious bug in --build mode. [5.1.1-1] - New upstream version 5.1.1. - Remove patch which is now upstream. [5.1.0-3] - Add BR yum-utils (for yumdownloader). - Add upstream patch which stops duplicate packages appearing. [5.1.0-2] - New upstream version 5.1.0. - Note this is effectively a rewrite, and is not completely compatible. - There is no separate 'supermin-helper' subpackage any more. - Requires rpm instead of yum. [4.1.6-2] - New upstream version 4.1.6. - Should fix all autotools brokenness. - Man pages are now all in section 1. - Remove patch which is now upstream. - +BR /usr/bin/execstack (from prelink). [4.1.5-5] - Rerun autoreconf to fix autotools brokenness. [4.1.5-4] - Why was prelink required? Remove it. [4.1.5-3] - correct Obsoletes version for febootstrap and febootstrap-supermin-helper [4.1.5-2] - (For ARM) Don't crash if SUPERMIN_DTB is set and --dtb not specified. [4.1.5-1] - New upstream version 4.1.5. - Has (optionally) a new command line syntax. - Supports device trees for ARM. [4.1.4-1] - New upstream version 4.1.4. - Supports compressed cpio image files, experimentally. [4.1.3-1] - New upstream version 4.1.3. - Remove patch which is now upstream. - Add examples directory to documentation. [4.1.2-2] - Include upstream patch to get correct directory setgid/sticky bits in the appliance. [4.1.2-1] - New upstream version 4.1.2. - Remove patch which is now upstream. [4.1.1-2] - Add upstream patch to ignore ghost non-regular files. - This fixes builds on Fedora 20 because the filesystem package has been changed so /var/lock and /var/run are marked as ghost. [4.1.1-1] - New upstream version 4.1.1. - The program has been renamed 'supermin' from 'febootstrap'. - Obsolete, but don't Provide because supermin is not a compatible replacement. - Use '_isa' to specify architecture of supermin-helper subpackage. [1:3.21-2] - Add upstream patch to drop supplemental groups (RHBZ#902476). - Remove 'Group:' RPM headers which are no longer necessary. - Remove some commented-out requirements. [1:3.21-1] - New upstream version 3.21. [1:3.20-1] - New upstream version 3.20. [1:3.19-2] - Work around brokenness in yum (RHBZ#850913). - Remove defattr, no longer required. [1:3.19-1] - New upstream version 3.19. [3.18-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild [3.18-1] - New upstream version 3.18. - This adds support for EPEL 5. [3.17-1] - New upstream version 3.17. [3.16-1] - New upstream version 3.16. [3.15-1] - New upstream version 3.15. - This version includes root=<device> support, needed for libguestfs with virtio-scsi. - Remove upstream patch. [3.14-6] - For RHEL 7 only, add ExclusiveArch x86-64. [3.14-5] - Bundled gnulib (RHBZ#821752). [3.14-4] - Add back explicit dependencies for external programs. [3.14-3] - Drop ExclusiveArch as it's supported on all primary & secondary arches - Cleanup spec and deps [3.14-2] - New upstream version 3.14. - Add upstream patch to fix RHBZ#808421. [3.13-4] - e2fsprogs moved /sbin/mke2fs to /usr/sbin (thanks Eric Sandeen). [3.13-2] - Missing BR zlib-static. [3.13-1] - New upstream version 3.13. - Remove upstream patch which is included in this version. [3.12-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild [3.12-4] - Depend on latest e2fsprogs (RHBZ#771310). [3.12-2] - Include upstream patch to work around Python stupidity. [3.12-1] - New upstream version 3.12. - Remove upstream patch which is included in this version. [3.11-2] - Add upstream patch to fix febootstrap on non-Debian. [3.11-1] - New upstream version 3.11. [3.10-1] - New upstream version 3.10. [3.9-1] - New upstream version 3.9. [3.8-1] - New upstream version 3.8. [3.7-1] - New upstream version 3.7. [3.6-1] - New upstream version 3.6. - This version no longer needs external insmod.static. [3.5-1] - New upstream version 3.5. - Remove patch which is now upstream. [3.4-2] - Don't fail if objects are created in a symlinked dir (RHBZ#698089). [3.4-1] - New upstream version 3.4. - febootstrap-supermin-helper Obsoletes older versions of febootstrap. [3.3-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild [3.3-4] - Split package into febootstrap (for building) and febootstrap-supermin-helper (for running). Note that febootstrap depends on febootstrap-supermin-helper, but you can install febootstrap-supermin-helper on its own. [3.3-3] - Clear executable stack flag on febootstrap-supermin-helper. [3.3-2] - add the ocaml's ExclusiveArch [3.3-1] - New upstream version 3.3. [3.2-1] - New upstream version 3.2. - Remove upstream patches. [3.1-5] - Previous fix for RHBZ#654638 didn't work, fix it correctly. [3.1-4] - Properly ignore .*.hmac files (accidental reopening of RHBZ#654638). [3.1-3] - Uses yumdownloader at runtime, so require yum-utils. [3.1-2] - New upstream version 3.1. - BR insmod.static. [3.0-2] - New upstream version 3.0 (note this is incompatible with 2.x). - Fix upstream URLs. - fakeroot, fakechroot no longer required. - insmod.static is required at runtime (missing dependency from earlier). - The only programs are 'febootstrap' and 'febootstrap-supermin-helper'. - BR ocaml, ocaml-findlib-devel. - No examples are provided with this version of febootstrap. [2.11-1] - New upstream version 2.11. - Fixes 'ext2fs_mkdir .. No free space in directory' bug which affects libguestfs on rawhide. [2.10-1] - New upstream version 2.10. - Adds -u and -g options to febootstrap-supermin-helper which are required by virt-v2v. [2.9-1] - New upstream version 2.9. - Fixes directory ordering problem in febootstrap-supermin-helper. [2.8-1] - New upstream version 2.8. [2.8-0.2] - New pre-release version of 2.8. + Note this is based on 2.7 + mailing list patches. - New BRs on mke2fs, libext2fs, glibc-static. [2.7-2] - New upstream version 2.7. - febootstrap-supermin-helper shell script rewritten in C for speed. - This package contains C code so it is no longer 'noarch'. - MAKEDEV isn't required. [2.6-1] - New upstream release 2.6. - Recheck package in rpmlint. [2.5-2] - New upstream release 2.5. - Remove BR upx (not needed by upstream). - Two more scripts / manpages. [2.4-1] - New upstream release 2.4. [2.3-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild [2.3-1] - New upstream release 2.3. [2.2-1] - New upstream release 2.2. [2.0-1] - New upstream release 2.0. [1.9-1] - New upstream release 1.9. [1.8-1] - New upstream release 1.8. [1.7-1] - New upstream release 1.7. [1.5-3] - Configure script has (unnecessary) BuildRequires on fakeroot, fakechroot, yum. [1.5-2] - Initial build for Fedora. swtpm virt-v2v [1:1.42.0-22] - RHEL 8: If setfiles fails fall back to autorelabel resolves: rhbz#XXX - Reapply patches since we are using git format-patch --submodule=diff MODERATE Copyright 2023 Oracle, Inc. CVE-2022-30786 CVE-2022-30789 CVE-2022-30788 CVE-2023-1018 CVE-2021-46790 CVE-2022-30784 CVE-2022-3165 Oracle Linux 8 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-30633 CVE-2022-27664 CVE-2022-30632 CVE-2022-30630 CVE-2022-30635 CVE-2022-1962 CVE-2022-30629 CVE-2023-0778 CVE-2022-1705 CVE-2022-32148 CVE-2022-32189 CVE-2022-41717 CVE-2022-30631 CVE-2022-28131 Oracle Linux 8 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-45061 CVE-2020-10735 CVE-2021-28861 Oracle Linux 8 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-45061 CVE-2020-10735 CVE-2021-28861 Oracle Linux 8 [1.16.2-5] - Stop creating wrong devel manual pages (#2135322) [1.16.2-4] - Apply correctly previous change (CVE-2022-3204) [1.16.2-3] - Fix NRDelegation attack leading to uncontrolled resource consumption (CVE-2022-3204) MODERATE Copyright 2023 Oracle, Inc. CVE-2022-3204 Oracle Linux 8 cockpit-composer [45-1.0.1] - Make per page documentation links point to Oracle Linux [Orabug: 32013095] [45-1] - New upstream release [44-1] - New upstream release [43-1] - New upstream release [42-1] - New upstream release [40-1] - New upstream release [39-1] - New upstream release [38-1] - New upstream release [37-1] - New upstream release [35-1] - New upstream release [34-1] - New upstream release [33-1] - Add support for OCI upload target - Update translations - Update dependencies [32-1] - Add Edge Raw, RHEL Installer, Edge Simplified Installer image types - Improve user account modal responsiveness - Update tests - Update minor NPM dependencies - Update translation files [31-1] - Add new ostree image types - Improve loading state when waiting for api responses - Improve notification system - Improve test stability - Update NPM dependencies - Update translations [29-1] - Add ability to upload to VMWare - Add support for additional ostree parameters - Update NPM dependencies - Add and update translations - Minor test fixes [28-1] - Use sentence case rather than title case - Add and update tests - Update translations from weblate - Update minor NPM dependencies [27-1] - Sync with upstream release 27 - Add additional form validation for the Create Image Wizard - Improve page size dropdown styling - Improve error state messages - Update pagination component for pf4 - Add wildcards and support for multiple values to input filter - Update translations [22.1-1] - Patternfly imports are standardized to be consistent with cockpit - Cancel image build button bug fixed - Empty components state provides a help message - Wizard component has bug fixes and is refactored for future scalability - Test updates - ESLint upgraded to version 7 and the code style is improved - Translation files are updated from fedora weblate - Cockpit-composer's dependency on osbuild-composer is more specific - Coverity scan is now supported to help improve code quality - Resolves: #1820539 [21.1-1] - Support setting parameters (ref and parent) for ostree images - Loosen restrictions on password strength - Various UI refinements [20.1-1] - Migrate to the osbuild-composer backend - Supports uploading images to AWS and Azure [12.1-1] - Fix integration tests, external test repository URL ceased to exist - Translation updates rhbz#1784453 - Add documentation URL page help menu [11-1] - Show depsolve errors on the blueprints page - Add labels for additional output types (rhbz#1769154) - Expose Image Builder on /composer, not /welder - Define a URL for each tab on a blueprint page - Provide a link in the image creation notification to the Images tab on the blueprint page [5-1] - Fix PropTypes for the homepage - Code clean up for the list of components [4-1] - Add additional blueprint name validation rhbz#1696415 - Fix images not loading on refresh - Add notification for source repo deletion - Fix AppStream ID - Translation updates [2-1] - Strip newlines from SSH keys before saving - Translation updates rhbz#1689979 [1-1] - New version 1 - Translation updates rhbz#1689979 [0.4-1] - New version 0.4 - Include ability to start lorax-composer rhbz#1708387 [0.3-1] - New version 0.3 - Add/edit/remove sources - Remove new line in encrypted password rhbz#1655862 - Resolve issues with changes saved to the workspace [0.2.1-1] - New version 0.2.1 - Several fixes to User Account creation dialog [0.2.0-1] - New version 0.2.0 - Include ability to add a user to a blueprint rhbz#1655862 [0.1.8-1] - New version 0.1.8 - Provide visual indication when a blueprint component is a dependency - Enable Undo to retrieve changes after the Discard Changes action - Update how blueprint contents are depsolved when contents are added/removed - Display an error if a component is added that results in a depsolve failure - Show all versions available for a package - Provide ability to specify a wildcard version for a package rhbz#1673066 [0.1.7-1] - New version 0.1.7 Resolves: rhbz#1640184 - Capitalize OpenStack corrently in the image create dialog (anilsson) - Add AppStream metainfo (mpitt) - Make cockpit-composer the only package name (mpitt) - Lots of integration test improvements (henrywangxf) [0.1.6-1] - New version 0.1.6 Resolves: rhbz#1640184 - Include spec into release tarball (mpitt) - Fix a bug in importSanity test. (henrywangxf) - Add RHEL-X in welder-web test scenarios. (henrywangxf) - test: Support Cockpit test scenario (mpitt) - Makefile: Simplify variable defaults (mpitt) - A big commit to fix random failure on chrome. (henrywangxf) - Remove inert 'Architecture' field in 'Create Image' dialog (#388) (stefw) - po: Update from Fedora Zanata (lars) - Remove ForEach to run two test cases but use two separate cases. If there's one case failed, I can find it according to case name. (henrywangxf) - Wait for delete menu action visable before click it. (henrywangxf) - test: Drop node installation from vm.install (mpitt) - Don't clean bots/ directory for VM preparation (mpitt) - Two improvements: (henrywangxf) - Go to view blueprint page by clicking blueprint name link instead of by URL. That helps improving case stability. (henrywangxf) - Move sed to test/vm.install from test/run because developers do not normally use test/run to trigger tests. (henrywangxf) - test: Only install node if it isn't already available (mpitt) - Makefile: bots is not a phony target (mpitt) [0.1.5-1] - New version 0.1.5 Related: rhbz#1613058 - Found a code coverage bug and fix it. (henrywangxf) - Update README.md to support Cockpit CI. (henrywangxf) - Updates Create Image modal to not have a default image type (jgiardin) - Add support for Modules during Add/Remove (jgiardin) - new test: Build mock images and verify download becomes enabled (atodorov) - Fix flaky issue when running test on chrome (henrywangxf) - Add selenium debug support. (henrywangxf) - Creates user-friendly labels to display for image types (jgiardin) - Compile with code coverage enabled, collect coverage result and upload to codecov.io. (henrywangxf) - new test: verify stock blueprints from backend are displayed (atodorov) - Simplify selenium startup again (mpitt) - Temporarily support selenium images with and without -debug variants (mpitt) - Fix python string format issue (henrywangxf) - Remove ugly blank except in tests (henrywangxf) - README: We're running tests on Cockpit's CI now (lars) - Fix tests to not exit with non-zero code (#362) (henrywangxf) - Update Discard Changes to delete workspace (jgiardin) - Fix test case 'Then selected component icon should have border' (henrywangxf) - Cockpit CI Integration (henrywangxf) - Display modules in list of selected components (jgiardin) - pass blueprint data that's expected on save (jgiardin) - Fix /run/weldr permission issue (henrywangxf) - Fix end-to-end test cases (henrywangxf) - po: Update Japanese translations from Zanata (lars) [0.1.4-1] - New version 0.1.4 Related: rhbz#1613058 - Adds queue status to an infotip in the Create Image modal (jgiardin) - Update Create Image modal to also commit unsaved changes (jgiardin) - Catching a couple of minor issues (jgiardin) - Update Create Image modal to include blueprint object instead of just name (jgiardin) - Update Create Image button selector in end-to-end test (jgiardin) - Display warning messages to the user in Create Image modal (jgiardin) - use updated property key from api for date created (jgiardin) - translations: Fail when zanata-js is not installed (lars) - README.md: Add missing translations: (lars) - translations: remove test target (lars) - po: Update from Fedora Zanata (lars) - translations: move po files and scripts to po/ (lars) - translations: Strip country code when loading react-intl's locale-data (mpitt) - remove redundant .then(data => data) (jgiardin) - Add ability to stop builds that are waiting or running (jgiardin) - Change text from 'Delete Build' to 'Delete Image' (jgiardin) - Update Delete Blueprint modal to match layout of Delete Build (jgiardin) - Fix miscellaneous propType warnings (jgiardin) - Include confirmation modal for deleting a finished build (jgiardin) - Swap order of date and type in the Image list item details (jgiardin) - Add Delete action for Finished composes (jgiardin) - Add ability to delete Failed builds (jgiardin) - test_blueprints: Make blueprint selection more robust (lars) - Use upstream patternfly-react's Tab component (lars) - Changes en-dash to dash and adds spaces (jgiardin) - Updates based on a11y review, also simplified i18n format (jgiardin) - minor tweaks to improve the screen reader experience (jgiardin) - Makes strings translatable in pagination for available components (jgiardin) - Update React and enzyme (lars) - package.json: Use ~ instead of ^ versions for dependencies (lars) - Drop unused dependencies (lars) - package.json: update dependencies (lars) - Remove package-lock.json (lars) [0.1.3-1] - New version 0.1.3 Related: rhbz#1613058 - Update Create Image notifications (#328) (jgiardin) - Make strings translatable in Pending Changes dialog (#341) (jgiardin) - Makefile: don't run po-pull on dist (lars) - Add the .spec files to .PHONY (bcl) [0.1.2-1] - New Version 0.1.2 Related: rhbz#1613058 - Add the .spec files to .PHONY (bcl) - Add welder-web and cockpit-composer release instructions (bcl) - Add a 'tag' target to the Makefile (bcl) - Adjust image list layout to improve alignment (jgiardin) - Fix blueprint packages getting added to history (jacobdkozol) - Fixed bug where startComposeApi would not return start compose response (sfondell) - Run make po-push from travis on pushes to master. (dshea) - Add a po-push target to the Makefile. (dshea) - Don't call compose API on the blueprints page (lars) - Support downloading images (lars) - Fix fetchComposes() call (lars) - Update text string (jgiardin) - add bootstrap class for large modals (jgiardin) - Fix issues with translated strings and add one more for 'Close' (jgiardin) - Make strings translatable (but includes build error) (jgiardin) - Update layout (jgiardin) - Don't show custom sources section if empty (jgiardin) - Add modal for listing sources (jgiardin) - Revert 'Revert 'Add python and gcc to the Dockerfiles.'' (dshea) - Include translations in the dist tarball (dshea) - Remove the zanata-js crud from package-lock.json (dshea) - Fix how fetching blueprints/composes is triggered (jacobdkozol) - Update API calls error messages (jacobdkozol) - Fix polling issue. Add error action. (jacobdkozol) - Add loading images from prior sessions and sort by start time. (jacobdkozol) - Revert 'Run npm rebuild after npm install.' (lars) - Revert 'Add python and gcc to the Dockerfiles.' (lars) - Don't update translations on every build (lars) - Fix yamllint errors on .travis.yml (dshea) - Add new requirements to the travis environment (dshea) - Add a script for testing translations. (dshea) - Run npm rebuild after npm install. (dshea) - Make the editBlueprint selector more specific. (dshea) - Add python and gcc to the Dockerfiles. (dshea) - Add a i18n section to the README (dshea) - Create cockpit translation modules. (dshea) - Extract cockpit manifest strings for translation. (dshea) - Add translated messages. (dshea) - Add scripts for interacting with Zanata. (dshea) - Internationalize strings with react-intl. (dshea) - Fix PR#309 imported issue. The rpm package should be welder-web*.noarch.rpm, not welder-web*.x86_64.rpm (henrywangxf) - Build srpm together with rpm (atodorov) - Images list UI refinements (jgiardin) - cockpituous-release: Use upstream release-source (martinpitt) - core: Use escalated privileges to access Lorax API (stefw) - remove utils from Layout (jgiardin) - Remove unused Layout components (jgiardin) - Submit coverage report only if present (atodorov) - Use default composer dir without --group option (atodorov) - Fix created image not being added to state (jacobdkozol) - package.json: Remove bootstrap-select (lars) - package.json: Update stylelint (lars) - blueprints: Show actual error message (lars) - core: propagate errors from cockpitFetch() (lars) [0.1.1-1] - fixes blueprints end-to-end test (jgiardin) - Hides Comment feature from Pending Changes modal (jgiardin) - Remove non-functional UI elements/components (jgiardin) - fixes line length in unit test (jgiardin) - update selector for Edit Blueprint button in test (jgiardin) - fixes empty state on blueprints page and tests (jgiardin) - fixes spacing errors (jgiardin) - fixes bad merges during rebase (jgiardin) - handles error case for fetching blueprints (jgiardin) - sets timeout on Loading state (jgiardin) - how did that 'n' get in there? (jgiardin) - fixes line length (jgiardin) - Disables actions (jgiardin) - Updates UI based on state, for loading and error (jgiardin) - Adds reducer for updating state when an error occurs (jgiardin) - updates state to hold values for fetch status (jgiardin) - components: Use consistent syntax for handlers (lars) - Fix two issues. (henrywangxf) - test/create.image: simplify shallow wrapper creation (lars) - CreateImage: don't call unset handlers (lars) - test/create.image: also conider handleStartCompose (lars) - correcting the initial state (jgiardin) - updates mockState in unit tests to match state updates for Filters (jgiardin) - Merge pull request #250 from larskarlitski/remove-mock-data (jgiardin) - Remove mock data (lars) - Add lorax-composer test and remove stand alone welder-web test. (henrywangxf) - Domain socket support in UI testing. (henrywangxf) - Update queue status text, Remove cancel button (jacobdkozol) - Added status icons for imageListView (jacobdkozol) - Add start compose functionality (jacobdkozol) - Fix blueprint page issue loading components (jacobdkozol) - Remove redux persist (jacobdkozol) - Remove unused code (lars) - Merge pull request #248 from jgiardino/filter (jgiardin) - Merge pull request #262 from andreasn/form-control-fx-style (jgiardin) - Fix style of pagination input under available components (anilsson) - fix issue when multiple filters are defined (jgiardin) - implements filtering and refactors toolbars (jgiardin) osbuild [81-1] - New upstream release [80-1] - New upstream release [79-1] - New upstream release [78-1] - New upstream release [77-1] - New upstream release [76-1] - New upstream release [75-1] - New upstream release [73-1] - New upstream release [72-1] - New upstream release [71-1] - New upstream release [70-1] - New upstream release osbuild-composer [75-1] - New upstream release [74-1] - New upstream release [73-1] - New upstream release [72-1] - New upstream release [71-1] - New upstream release [70-1] - New upstream release [69-1] - New upstream release [68-1] - New upstream release [67-1] - New upstream release [62-1] - New upstream release [60-1] - New upstream release [59-1] - New upstream release [58-1] - New upstream release [57-1] - New upstream release [55-1] - New upstream release [54-1] - New upstream release [53-1] - New upstream release [51-1] - New upstream release [46-1] - New upstream release [45-1] - New upstream release [44-1] - New upstream release [43-1] - New upstream release [42-1] - New upstream release [40-1] - New upstream release [37-1] - New upstream release [36-1] - New upstream release [33-1] - New upstream release [32-2] - New upstream release [31-1] - New upstream release [28-1] - New upstream release [27-1] - New upstream release [26-1] - New upstream release [25-1] - New upstream release 25 (rhbz#1883481) [20.1-1] - New upstream release 20.1 (rhbz#1872370) [20-1] - New upstream release 20 (rhbz#1871184 and rhbz#1871179) [19-1] - New upstream release 19 (rhbz#1866015 and rhbz#1866013) [17-1] - New upstream release 17 (rhbz#1831653) - Obsolete lorax-composer in favor of osbuild-composer (rhbz#1836844) [16-1] - New upstream release 16 (rhbz#1831653) [15-1] - New upstream release 15 (rhbz#1831653) [14-1] - New upstream release 14 (rhbz#1831653) [13-1] - New upstream release 13 (rhbz#1831653) [11-1] - Initial package (renamed from golang-github-osbuild-composer) (rhbz#1771887) weldr-client [35.9-2] - tests: Remove default repos before running tests Related: rhbz#2168666 [35.9-1] - Copy rhel-88.json test repository from osbuild-composer - Update osbuild-composer test repositories from osbuild-composer - New release: 35.9 (bcl) Resolves: rhbz#2168666 - tests: Replace os.MkdirTemp with t.TempDir (bcl) - blueprint save: Allow overriding bad blueprint names (bcl) - tests: Clean up checking err in tests (bcl) - composer-cli: Implement blueprints diff (bcl) - saveBlueprint: Return the filename to the caller (bcl) - composer-cli: Add tests for using --commit with old servers (bcl) - weldr: Return error about the blueprints change route (bcl) - weldr: Save the http status code as part of APIResponse (bcl) - Add --commit support to blueprints save (bcl) - Add --commit to blueprints show (bcl) - gitleaks: Exclude the test password used in tests (bcl) - ci: add tags to AWS instances (tlavocat) - Update github.com/BurntSushi/toml to 1.2.1 - Update github.com/stretchr/testify to 1.8.1 - Update bump github.com/spf13/cobra to 1.6.1 - New release: 35.8 (bcl) - completion: Remove providers from bash completion script (bcl) - completion: Filter out new headers from compose list (bcl) - docs: Remove unneeded Long descriptions (bcl) - docs: Use a custom help template (bcl) - docs: Add more command documentation (bcl) - cmdline: Add package glob support to modules list command (bcl) - workflow: Add govulncheck on go v1.18 (bcl) - tests: Update to use golangci-lint 1.49.0 (bcl) - New release: 35.7 (bcl) - spec: Move %gometa macro above %gourl (bcl) - weldr: When starting a compose pass size as bytes, not MiB (bcl) - tests: Use correct size value in bytes for test (bcl) - workflow: Add Go 1.18 to text matrix (bcl) - Replace deprecated ioutil functions (bcl) - New release: 35.6 (bcl) - tests: Update tests for osbuild-composer changes (bcl) - CMD: Compose status format (eloy.coto) - CMD: Compose list format (eloy.coto) - tests: Update tests to check for JSON list output (bcl) - composer-cli: Change JSON output to be a list of objects (bcl) - weldr: Simplify the old ComposeLog, etc. functions (bcl) - composer-cli: Add --filename to blueprints freeze save command (bcl) - composer-cli: Add --filename to blueprints save command (bcl) - composer-cli: Add --filename to compose logs command (bcl) - composer-cli: Add --filename to compose image command (bcl) - composer-cli: Add --filename to compose metadata command (bcl) - composer-cli: Add --filename to compose results command (bcl) - weldr: Add saving to a new filename to GetFilePath function (bcl) - github: Fix issue with codecov and forced pushes in PRs (bcl) - Use golangci-lint 1.45.2 in workflow (bcl) - Run workflow tests for go 1.16.x and 1.17.x (bcl) - Move go.mod to go 1.16 (bcl) - workflows/trigger-gitlab: run Gitlab CI in new image-builder project (jrusz) - Update GitHub actions/setup-go to 3 - Update GitHub actions/checkout to 3 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-2879 CVE-2022-27664 CVE-2022-2880 CVE-2022-41715 CVE-2022-41717 Oracle Linux 8 [7.5.15-4] - resolve CVE-2022-39229 grafana: using email as a username can block other users from signing in - resolve CVE-2022-27664 golang: net/http: handle server errors after sending GOAWAY - resolve CVE-2022-41715 golang: regexp/syntax: limit memory used by parsing regexps - resolve CVE-2022-2880 golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters - run integration tests in check phase - update FIPS patch with latest changes in Go packaging MODERATE Copyright 2023 Oracle, Inc. CVE-2022-41715 CVE-2022-2880 CVE-2022-39229 CVE-2022-27664 Oracle Linux 8 [3.2.0-3] - resolve CVE-2022-27664 grafana-pcp: golang: net/http: handle server errors after sending GOAWAY MODERATE Copyright 2023 Oracle, Inc. CVE-2022-27664 Oracle Linux 8 [1.21.0-1] - wayland 1.21.0 (rhbz#2137625) MODERATE Copyright 2023 Oracle, Inc. CVE-2021-3782 Oracle Linux 8 [32:9.16.23-0.14] - Handle subtle difference between upstream and rhel (CVE-2022-3094) [32:9.16.23-0.13] - Prevent flooding with UPDATE requests (CVE-2022-3094) - Handle RRSIG queries when server-stale is active (CVE-2022-3736) - Fix crash when soft-quota is reached and serve-stale is active (CVE-2022-3924) [32:9.16.23-0.12] - Include bind9.16-dnssec-utils in public repository (#2115322) [32:9.16.23-0.11] - Bound the amount of work performed for delegations (CVE-2022-2795) [32:9.16.23-0.10] - Fix possible serve-stale related crash (CVE-2022-3080) - Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178) MODERATE Copyright 2023 Oracle, Inc. CVE-2022-3094 CVE-2022-3924 CVE-2022-3736 CVE-2022-2795 Oracle Linux 8 [11.7.3-9.0.1] - add mpstat -H option to also display physically hotplugged vCPUs [Orabug: 34683071] [11.7.3-9] - add -f flag to force fdatasync() after sa file update (#2153192) [11.7.3-8] - arithmetic overflow in allocate_structures() on 32 bit systems (CVE-2022-39377) MODERATE Copyright 2023 Oracle, Inc. CVE-2022-39377 Oracle Linux 8 [7.5.1-7.0.1] - Fix POSTIN scriptlet [Orabug: 34712485] [7.5.1-7] - Resolves: #2128737 - out-of-bounds read in the BGP daemon may lead to information disclosure or denial of service [7.5.1-6] - Resolves: #1939516 - frr service cannot reload itself, due to executing in the wrong SELinux context [7.5.1-5] - Resolves: #2127140 - Frr is unable to push routes to the system routing table MODERATE Copyright 2023 Oracle, Inc. CVE-2022-37032 Oracle Linux 8 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-27664 CVE-2022-1705 CVE-2022-32148 CVE-2022-30635 CVE-2022-41717 CVE-2022-30630 CVE-2022-30632 CVE-2022-32189 CVE-2023-0778 CVE-2022-30633 CVE-2022-1962 CVE-2022-2989 CVE-2022-28131 CVE-2022-30631 Oracle Linux 8 [21.1.3-10] - Fix CVE-2023-0494 (#2166972) [21.1.3-9] - Follow-up fix for CVE-2022-46340 (#2151777) [21.1.3-8] - CVE fix for: CVE-2022-4283 (#2151802), CVE-2022-46340 (#2151777), CVE-2022-46341 (#2151782), CVE-2022-46342 (#2151785), CVE-2022-46343 (#2151792), CVE-2022-46344 (#2151795) [ 21.1.3-7] - Fix CVE-2022-3550, CVE-2022-3551 Resolves: rhbz#2140767, rhbz#2140774 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-4283 CVE-2022-46343 CVE-2022-3551 CVE-2022-46341 CVE-2023-0494 CVE-2022-3550 CVE-2022-46340 CVE-2022-46342 CVE-2022-46344 Oracle Linux 8 [1.20.11-15] - Rebuild for the missing debuginfo Related: rhbz#2169522 [1.20.11-14] - Fix xvfb-run script with --listen-tcp Resolves: rhbz#2169522 [1.20.11-13] - Fix CVE-2023-0494 (#2166977) [1.20.11-12] - Follow-up fix for CVE-2022-46340 (#2151774) [1.20.11-11] - CVE fix for: CVE-2022-4283 (#2151799), CVE-2022-46340 (#2151774), CVE-2022-46341 (#2151779), CVE-2022-46342 (#2151784), CVE-2022-46343 (#2151789), CVE-2022-46344 (#2151794) [1.20.11-10] - Fix CVE-2022-3550, CVE-2022-3551 Resolves: rhbz#2140766, rhbz#2140772 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-46344 CVE-2022-3551 CVE-2022-46342 CVE-2023-0494 CVE-2022-46341 CVE-2022-46343 CVE-2022-4283 CVE-2022-46340 CVE-2022-3550 Oracle Linux 8 [20.11.0-6] - Check for overflow when computing number of symbols - in JBIG2 text region - Resolves: #2126361 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-38784 Oracle Linux 8 [1.12.0-15] - xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege Escalation Vulnerability Resolves: bz#2180305 [1.12.0-14] - SELinux: allow vncsession create .vnc directory Resolves: bz#2164704 [1.12.0-13] - Add sanity check when cleaning up keymap changes Resolves: bz#2169960 [1.12.0-12] - xorg-x11-server: DeepCopyPointerClasses use-after-free leads to privilege elevation Resolves: bz#2167058 [1.12.0-11] - Rebuild for xorg-x11-server CVE-2022-46340 follow up fix [1.12.0-10] - Rebuild for xorg-x11-server CVEs Resolves: CVE-2022-4283 (bz#2154233) Resolves: CVE-2022-46340 (bz#2154220) Resolves: CVE-2022-46341 (bz#2154223) Resolves: CVE-2022-46342 (bz#2154225) Resolves: CVE-2022-46343 (bz#2154227) Resolves: CVE-2022-46344 (bz#2154229) MODERATE Copyright 2023 Oracle, Inc. CVE-2022-46340 CVE-2022-46343 CVE-2022-4283 CVE-2022-46341 CVE-2022-46344 CVE-2022-46342 Oracle Linux 8 [2.38.5-1] - Update to 2.38.5 Related: #2127468 [2.38.4-1] - Update to 2.38.4 Related: #2127468 [2.38.3-1] - Update to 2.38.3 Related: #2127468 [2.38.2-1] - Update to 2.38.2 Related: #2127468 [2.38.1-2] - Fix crashes on aarch64 Enable WPE renderer Related: #2127468 [2.38.1-1] - Update to 2.38.1 Related: #2127468 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-23518 CVE-2022-42823 CVE-2022-46691 CVE-2022-46698 CVE-2023-25360 CVE-2023-23517 CVE-2023-25361 CVE-2022-42867 CVE-2022-42824 CVE-2022-32923 CVE-2022-42852 CVE-2023-25358 CVE-2023-25362 CVE-2023-25363 CVE-2022-46700 CVE-2022-32886 CVE-2022-32888 CVE-2022-42863 CVE-2022-46692 CVE-2022-46699 CVE-2022-42799 CVE-2022-42826 Oracle Linux 8 [2:2.2.0-10] - Fix 'implicit declaration of function' errors (#2136153, #2145139) [- 2:2.2.0-9] - CVE-2022-39282: Fix length checks in parallel driver (#2136151) - CVE-2022-39283: Add missing length check in video channel (#2136153) - CVE-2022-39316, CVE-2022-39317: Add missing length checks in zgfx (#2145139) - CVE-2022-39318: Fix division by zero in urbdrc channel (#2145139) - CVE-2022-39319: Add missing length checks in urbdrc channel (#2145139) - CVE-2022-39320: Ensure urb_create_iocompletion uses size_t (#2145139) - CVE-2022-39347: Fix path validation in drive channel (#2145139) - CVE-2022-41877: Add missing length check in drive channel (#2145139) MODERATE Copyright 2023 Oracle, Inc. CVE-2022-39283 CVE-2022-39320 CVE-2022-39319 CVE-2022-41877 CVE-2022-39282 CVE-2022-39318 CVE-2022-39347 CVE-2022-39317 CVE-2022-39316 Oracle Linux 8 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-29187 CVE-2022-39260 CVE-2022-24765 CVE-2022-39253 Oracle Linux 8 babel [2.5.1-10] - Fix CVE-2021-20095 Resolves: rhbz#1955615 [2.5.1-9] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 [2.5.1-8] - Fix unversioned requires/buildrequires - Resolves: rhbz#1628242 [2.5.1-7] - Remove unversioned binaries - Resolves: rhbz#1613343 [2.5.1-6] - Make possible to disable python3 subpackage [2.5.1-5] - Remove dependency on an exotic testing package python-freezegun which we don't have capacity to ship in RHEL8 - Run tests in pytest (as declared in BuildRequires) instead of unittest [2.5.1-4] - Build the documentation always using the Python 3 version Sphinx [2.5.1-3] - Require the python36-devel package when building for the python36 module [2.5.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [2.5.1-1] - update to upstream version 2.5.1 [2.3.4-7] - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) [2.3.4-6] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [2.3.4-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [2.3.4-4] - Finish bootstrapping for Python 3.6 [2.3.4-3] - Rebuild for Python 3.6 - Add 'bootstrap' conditions [2.3.4-2] - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages * Tue May 31 2016 Nils Philippsen <nils@redhat.com> - fix source URL [2.3.4-1] - version 2.3.4 - always build Python3 subpackages - remove obsolete packaging constructs - update to current Python packaging guidelines - build docs non-destructively - tag license file as %license - use %python_provide macro only if present - update remove-pytz-version patch - fix build dependencies - set TZ in %check [1.3-12] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [1.3-11] - Rebuilt for https://fedoraproject.org/wiki/Changes/python3.5 [1.3-10] - Also make sure that the babel package that has pybabel depends on the correct packages (python2 packages on F23 or less and python3 packages on F24 and greater.) [1.3-9] - Install the python3 version of pybabel on Fedora 24+ to match with Fedora's default python version [1.3-8] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [1.3-7] - Remove pytz version requirement in egginfo as it confuses newer setuptools [1.3-6] - Change python-setuptools-devel BR into python-setuptools [1.3-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild [1.3-4] - Rebuilt for https://fedoraproject.org/wiki/Changes/Python_3.4 [1.3-3] - fix dependencies (#1083470) [1.3-2] - enable python3 subpackage [1.3-1] - update to Babel 1.3 - disabled %check as it tries to download the CLDR [0.9.6-9] - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild [0.9.6-8] - split documentation off to a separate subpackage [0.9.6-7] - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild [0.9.6-6] - run tests in %check - add pytz build requirement for tests [0.9.6-5] - rebuild for https://fedoraproject.org/wiki/Features/Python_3.3 [0.9.6-4] - disable building of non-functional python3 subpackage (#761583) [0.9.6-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild [0.9.6-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild [0.9.6-1] - version 0.9.6: * Backport r493-494: documentation typo fixes. * Make the CLDR import script work with Python 2.7. * Fix various typos. * Fixed Python 2.3 compatibility (ticket #146, #233). * Sort output of list-locales. * Make the POT-Creation-Date of the catalog being updated equal to POT-Creation-Date of the template used to update (ticket #148). * Use a more explicit error message if no option or argument (command) is passed to pybabel (ticket #81). * Keep the PO-Revision-Date if it is not the default value (ticket #148). * Make --no-wrap work by reworking --width's default and mimic xgettext's behaviour of always wrapping comments (ticket #145). * Fixed negative offset handling of Catalog._set_mime_headers (ticket #165). * Add --project and --version options for commandline (ticket #173). * Add a __ne__() method to the Local class. * Explicitly sort instead of using sorted() and don't assume ordering (Python 2.3 and Jython compatibility). * Removed ValueError raising for string formatting message checkers if the string does not contain any string formattings (ticket #150). * Fix Serbian plural forms (ticket #213). * Small speed improvement in format_date() (ticket #216). * Fix number formatting for locales where CLDR specifies alt or draft items (ticket #217) * Fix bad check in format_time (ticket #257, reported with patch and tests by jomae) * Fix so frontend.CommandLineInterface.run does not accumulate logging handlers (#227, reported with initial patch by dfraser) * Fix exception if environment contains an invalid locale setting (#200) - install python2 rather than python3 executable (#710880) [0.9.5-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild [0.9.5-3] - Add python3 subpackage [0.9.5-2] - Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild [0.9.5-1] - This release contains a small number of bugfixes over the 0.9.4 - release. - - What's New: - ----------- - * Fixed the case where messages containing square brackets would break - with an unpack error - * Fuzzy matching regarding plurals should *NOT* be checked against - len(message.id) because this is always 2, instead, it's should be - checked against catalog.num_plurals (ticket #212). [0.9.4-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild [0.9.4-4] - Added missing requires to python-setuptools for pkg_resources [0.9.4-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild [0.9.4-2] - Rebuild for Python 2.6 [0.9.4-1] - Update to 0.9.4 [0.9.3-1] - Update to 0.9.3 [0.9.1-1] - Update to 0.9.1 [0.9-2] - BR python-setuptools-devel [0.9-1] - Update to 0.9 [0.8.1-1] - Update to 0.8.1 - Remove upstreamed patch. [0.8-3] - Replace patch with one that actually applies. [0.8-2] - Apply upstream patch to rename command line script to 'pybabel' - BZ#246208 [0.8-1] - First version for Fedora Cython [0.28.1-7] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 [0.28.1-6] - Replace GCC's attribute optimize('Os') by the better supported and similar (cold). - Resolves: rhbz#1658621 [0.28.1-5] - Remove unversioned provides - Resolves: rhbz#1628242 [0.28.1-4] - Remove unversioned binaries from python2 subpackage - Resolves: rhbz#1613343 [0.28.1-3] - First version for python27 module numpy [1:1.14.2-16] - Fix include path - Related: rhbz#1907601 [1:1.14.2-15] - Fix %check - Related: rhbz#1907601 [1:1.14.2-14] - Use macros rather than hardcoded paths - Resolves: rhbz#1907601 [1:1.14.2-13] - Fix CVE-2019-6446 - Resolves: rhbz#1668829 [1.14.2-12] - Set proper build flags for https://fedoraproject.org/wiki/Changes/Python_Extension_Flags - Resolves: rhbz#1715036 [1.14.2-11] - Fix broken float128 on all arches except x86_64 - Resolves: rhbz#1688709 [1.14.2-10] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 [1:1.14.2-9] - Remove unversioned provides - Resolves: rhbz#1628242 [1:1.14.2-8] - Fix unversioned requires/buildrequires - Resolves: rhbz#1628242 [1:1.14.2-7] - Bring symlink f2py2 back for symlink modules - Resolves: rhbz#1615727 [1:1.14.2-6] - Remove unversioned binaries from python2 subpackage - Resolves: rhbz#1613343 [1:1.14.2-5] - Switch python3 coditions to bcond [1:1.14.2-4] - Use python2 macros instead of unversioned python macros [1:1.14.2-3] - Change the shebang of f2py to the versioned /usr/bin/python2 [1:1.14.2-2] - Fix incorrect Python version guess when building on Platform-Python [1:1.14.2-1] - 1.14.2 [1:1.14.1-1] - 1.14.1 [1:1.14.0-0.rc1.1] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [1:1.14.0-0.rc1] - 1.14.0 rc1 [1:1.13.3-5] - Fix ambiguous Python 2 dependency declarations (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) [1:1.13.3-4] - Split out doc subpackage. [1:1.13.3-3] - Cleanup spec file conditionals [1:1.13.3-2] - set proper environment variables for openblas [1:1.13.3-1] - 1.13.3 [1:1.13.2-1] - 1.13.2 [1:1.13.1-4] - Use openblas where available, BZ 1472318. [1:1.13.1-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild [1:1.13.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [1:1.13.1-1] - 1.13.1 final [1:1.13.0-1] - 1.13.0 final [1:1.13.0-0.rc2] - 1.13.0 rc2 [1:1.13.0-0.rc1] - 1.13.0 rc1 [1:1.12.1-1] - 1.12.1 [1:1.12.0-1] - Update to 1.12.0, build with gcc 7.0. [1:1.11.2-2] - Rebuild for Python 3.6 [1:1.11.2-1] - Update to 1.11.2 final [1:1.11.2-0.rc1] - Update to 1.11.2rc1, BZ 1340440. [1:1.11.1-2] - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages [1:1.11.1-1] - Update to 1.11.1 final [1:1.11.1-0.rc1] - Update to 1.11.1rc1, BZ 1340440. [1:1.11.0-4] - Update to 1.11.0 final [1:1.11.0-3.rc2] - Update to 1.11.0rc2 [1:1.11.0-2.b3] - Bump Release. 1b2 is higher than 0b3 [1:1.11.0-0.b3] - Update to 1.11.0b2, BZ 1306249. [1:1.11.0-1b2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [1:1.11.0-0.b2] - Update to 1.11.0b2, BZ 1303387. [1:1.11.0-020161016.cc2b04git] - Update to git snapshot (due to build issue) after 1.11.0b1, BZ 1301943. [1:1.10.4-1] - Update to 1.10.4, BZ 1296509. [1:1.10.2-1] - Update to 1.10.2, BZ 1291674. [1:1.10.2-0.2.rc2] - Update to 1.10.2rc1, BZ 1289550. [1:1.10.2-0.1.rc1] - Update to 1.10.2rc1 - Drop opt-flags patch applied upstream [1:1.10.1-6] - Add provides to satisfy numpy%{_isa} requires in other packages [1:1.10.1-5] - Re-add provides f2py [1:1.10.1-4] - Fix obsoletes / provides for numpy -> python2-numpy rename [1:1.10.1-3] - Remove fortran flags or arm would build with -march=x86-64 [1:1.10.1-2] - Provide python2-* packages - Run tests with verbose=2 [1:1.10.1-1] - Update to 1.10.1, BZ 1271022. [1:1.10.0-2] - Rebuilt for Python3.5 rebuild [1:1.10.0-1] - Update to 1.10.0 final. [1:1.10.0-0.b1] - Update to 1.10.0b1, BZ 1252641. [1:1.9.2-3] - Add python2-numpy provides (bug #1249423) - Spec cleanup [1:1.9.2-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [1:1.9.2-1] - Update to 1.9.2 [1:1.9.1-2] - Add upstream patch to fix xerbla linkage (bug #1172834) [1:1.9.1-1] - Update to 1.9.1, BZ 1160273. [1:1.9.0-1] - Update to 1.9.0 [1:1.9.0-0.1.rc1] - Update to 1.9.0rc1 [1:1.8.2-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild [1:1.8.2-1] - Update to 1.8.2 [1:1.8.1-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild [1:1.8.1-3] - Rebuild for Python 3.4 [1:1.8.1-2] - Fixing FTBFS on ppc64le (#1078354) [1:1.8.1-1] - Update to 1.8.1 [1:1.8.0-5] - Fix __pycache__ ownership (bug #1072467) [1:1.8.0-4] - Fix CVE-2014-1858, CVE-2014-1859: #1062009, #1062359 [1:1.8.0-3] - Ship doc module (bug #1034357) [1:1.8.0-2] - Move f2py documentation to f2py package (bug #1027394) [1:1.8.0-1] - Update to 1.8.0 final [1:1.8.0-0.7.rc2] - Update to 1.8.0rc2 - Create clean site.cfg - Use serial atlas [1:1.8.0-0.6.b2] - Add [atlas] to site.cfg for new atlas library names [1:1.8.0-0.5.b2] - Update site.cfg for new atlas library names [1:1.8.0-0.4.b2] - rebuild for atlas 3.10 [1:1.8.0-0.3.b2] - Fix libdir path in site.cfg, BZ 1006242. [1:1.8.0-0.2.b2] - Update to 1.8.0b2 [1:1.8.0-0.1.b1] - Update to 1.8.0b1 - Drop f2py patch applied upstream [1:1.7.1-5] - URL Fix, BZ 1001337 [1:1.7.1-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild [1:1.7.1-3] - Fix rpmlint warnings - Update License - Apply patch: change shebang of f2py to use binary directly [1:1.7.1-2] - Specfile cleanup (bug #969854) [1:1.7.1-1] - Update to 1.7.1 [1:1.7.0-1] - Update to 1.7.0 final [1:1.7.0-0.5.rc1] - Update to 1.7.0rc1 [1:1.7.0-0.4.b2] - Update to 1.7.0b2 - Drop patches applied upstream [1:1.7.0-0.3.b1] - Add patch from github pull 371 to fix python 3.3 pickle issue - Remove cython .c source regeneration - fails now [1:1.7.0-0.2.b1] - add workaround for rhbz#849713 (fixes FTBFS) [1:1.7.0-0.1.b1] - Update to 1.7.0b1 - Rebase python 3.3 patchs to current git master - Drop patches applied upstream [1:1.6.2-5] - rework patches for 3.3 to more directly reflect upstream's commits - re-enable test suite on python 3 - forcibly regenerate Cython .c source to avoid import issues on Python 3.3 [1:1.6.2-4] - rebuild for https://fedoraproject.org/wiki/Features/Python_3.3 - needs unicode patch [1:1.6.2-3] - remove rhel logic from with_python3 conditional [1:1.6.2-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild [1:1.6.2-1] - Update to 1.6.2 final [1:1.6.2rc1-0.1] - Update to 1.6.2rc1 [1:1.6.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild [1:1.6.1-1] - Update to 1.6.1 [1:1.6.0-2] - Bump and rebuild for BZ 712251. [1:1.6.0-1] - Update to 1.6.0 final [1:1.6.0-0.2.b2] - Update to 1.6.0b2 - Drop import patch fixed upstream [1:1.6.0-0.1.b1] - Update to 1.6.0b1 - Build python3 module with python3 - Add patch from upstream to fix build time import error [1:1.5.1-1] - Update to 1.5.1 final [1:1.5.1-0.4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild [1:1.5.1-0.3] - fix the AttributeError during tests - fix build on s390(x) [1:1.5.1-0.2] - rebuild for newer python3 [1:1.5.1-0.1] - update to 1.5.1rc1 - add python3 subpackage - some spec-cleanups [1:1.4.1-6] - actually add the patch this time [1:1.4.1-5] - fix segfault within %check on 2.7 (patch 2) [1:1.4.1-4] - Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild [1.4.1-3] - ignore the 'Ticket #1299 second test' failure on s390(x) [1.4.1-2] - source commit fix [1.4.1-1] - New upstream release. Include backported doublefree patch [1.3.0-8] - Moved distutils back to the main package, BZ 572820. [1.3.0-7] - Reverted to 1.3.0 after upstream pulled 1.4.0, BZ 579065. [1.4.0-5] - Linking /usr/include/numpy to .h files, BZ 185079. [1.4.0-4] - Re-enabling atlas BR, dropping lapack Requires. [1.4.0-3] - Since the previous didn't work, Requiring lapack. [1.4.0-2] - Temporarily dropping atlas BR to work around 562577. [1.4.0-1] - 1.4.0. - Dropped ARM patch, ARM support added upstream. [1.3.0-6.fa1] - Add ARM support [1.3.0-6] - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild [1.3.0-5] - Fixed atlas BR, BZ 505376. [1.3.0-4] - EVR bump for pygame chainbuild. [1.3.0-3] - Moved linalg, fft back to main package. [1.3.0-2] - Split out f2py into subpackage, thanks Peter Robinson pbrobinson@gmail.com. [1.3.0-1] - Update to latest upstream. - Fixed Source0 URL. [1.3.0-0.rc1] - Update to latest upstream. [1.2.1-3] - Require python-devel, BZ 488464. [1.2.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild [1.2.1-1] - Update to 1.2.1. [1.2.0-2] - Rebuild for Python 2.6 [1.2.0-1] - New upstream release, added python-nose BR. BZ 465999. - Using atlas blas, not blas-devel. BZ 461472. [1.1.1-1] - New upstream release [1.1.0-1] - New upstream release [1.0.4-1] - New upstream release [1.0.3.1-2] - Add python egg to %files on f9+ [1.0.3.1-1] - New upstream release [1.0.3-1] - New upstream release [1.0.2-2] - Drop BR: atlas-devel, since it just provides binary-compat blas and lapack libs. Atlas can still be optionally used at runtime. (Note: this is all per the atlas maintainer). [1.0.2-1] - New upstream release [1.0.1-4] - Update gfortran patch to recognize latest gfortran f95 support - Resolves rhbz#236444 [1.0.1-3] - Fix up cpuinfo bug (#229753). Upstream bug/change: http://projects.scipy.org/scipy/scipy/ticket/349 [1.0.1-2] - Per discussion w/Jose Matos, Obsolete/Provide f2py, as the stand-alone one is no longer supported/maintained upstream [1.0.1-1] - New upstream release [1.0-2] - Rebuild for python 2.5 [1.0-1] - New upstream release [0.9.8-1] - New upstream release [0.9.6-1] - Upstream update [0.9.5-1] - Upstream update [0.9.4-2] - Rebuild for Fedora Extras 5 [0.9.4-1] - Initial RPM release - Added gfortran patch from Neal Becker pytest python2-pip [9.0.3-19] - Remove bundled windows executables - Resolves: rhbz#2006792 python2 [2.7.18-12.0.1] - Add Oracle Linux distribution in platform.py [Orabug: 20812544] [2.7.18-12] - Security fix for CVE-2022-45061: CPU denial of service via inefficient IDNA decoder Resolves: rhbz#2144072 python2-rpm-macros python2-setuptools [39.0.1-13] - When building for Flatpak inclusion, build in bootstrap mode Resolves: rhbz#1907597 python2-six [1.11.0-6] - Rename component name to python2-six, clean specfile and remove bconds - Resolves: rhbz#1908300 [1.11.0-5] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 [1.11.0-4] - Run tests only of the Python versions that are actually built [1.11.0-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [1.11.0-2] - Removed and obsoleted the platform-python subpackage [1.11.0-1] - Update to 1.11.0 [1.10.0-11] - Added the platform-python subpackage [1.10.0-10] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [1.10.0-9] - Fix unversioned Python BuildRequires [1.10.0-8] - Rebuild as wheel [1.10.0-7] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [1.10.0-6] - Enable tests [1.10.0-5] - Rebuild for Python 3.6 - Disable python3 tests [1.10.0-4] - Modernize spec more - Depend on system-python(abi) - Cleanups [1.10.0-3] - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages [1.10.0-2] - Modernize spec - Fix python3 package file ownership [1.10.0-1] python-attrs python-backports [1.0-16] - Update python macros to python2 versioned macros - Issue found when rebuilding the python27 module to include CVE fixes - Related: rhbz#1883890 rhbz#1883258 python-backports-ssl_match_hostname [3.5.0.1-12] - Remove unversioned Provides - Resolves: rhbz#1908300 python-chardet [3.0.4-10] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 [3.0.4-9] - Remove unversioned binaries from python2 subpackage - Resolves: rhbz#1613343 [3.0.4-8] - Switch python3 conditions to bcond [3.0.4-7] - First version for python27 module python-coverage [4.5.1-4] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 [4.5.1-3] - Remove unversioned binaries from python2 subpackage - Resolves: rhbz#1613343 [4.5.1-2] - Make possible to disable python3 subpackage [4.5.1-1] - update to 4.5.1 [4.5-1] - update to 4.5 [4.4.2-1] - update to 4.4.2 [4.4.1-6] - Use better Obsoletes for platform-python [4.4.1-5] - Remove platform-python subpackage - Cleanup spec [4.4.1-4] - Add platform-python subpackage [4.4.1-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild [4.4.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [4.4.1-1] - update to 4.4.1 [4.4-1] - update to 4.4 [4.3.3-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [4.3.3-1] - update to 4.3.3 [4.3.1-1] - update to 4.3.1 [4.2-2] - Rebuild for Python 3.6 [4.2-1] - 4.2 final [4.2-0.2.b1] - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages [4.2-0.1.b1] - update to 4.2b1 [4.1-1] - update to 4.1 [4.1-0.5.b3] - update to 4.1b3 [4.1-0.4.b2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [4.1-0.3.b2] - update to 4.1b2 [4.1-0.2.b1] - Fix and install license - Cleanup and modernize spec - Note bundled jquery libraries [4.1-0.1.b1] - update to 4.1b1 [4.0.3-1] - update to 4.0.3 [4.0.2-2] - Rebuilt for https://fedoraproject.org/wiki/Changes/python3.5 [4.0.2-1] - update to 4.0.2 [4.0.1-1] - update to 4.0.1 [4.0-1] - update to 4.0 final [4.0-0.13.b3] - Rebuilt for Python3.5 rebuild [4.0-0.12.b3] - update to 4.0b3 [4.0-0.11.b2] - update to 4.0b2 [4.0-0.10.b1] - update to 4.0b1 [4.0-0.9.a6] - add missing Provides: python2-coverage [4.0-0.8.a6] - update to 4.0a6 [4.0-0.7.a5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [4.0-0.6.a5] - No longer run 2to3 on the python3 sources. [4.0-0.5.a5] - unicode fixup [4.0-0.4.a5] - update to 4.0a5 [4.0-0.3.a3] - update to 4.0a3 [4.0-0.2.a2] - update to 4.0a2 [4.0-0.1.a] - Update to 4.0a1 [3.7.1-1] - Update to 3.7.1 (#1043090) [3.7-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild [3.7-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild [3.7-2] - Rebuild for Python 3.4 [3.7-1] - update to 3.7 - fix macros for current guidelines - rename binary (with compat symlinks) [3.6-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild [3.6-1] - update to 3.6 final [3.6-0.3.b3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild [3.6-0.3.b3] - update to 3.6beta3 [3.6-0.1.b1] - update to 3.6beta1 - patch0 merged into upstream [3.5.3-2] - Patch from upstream for traceback when people use this with python2 and python3 in the same directory [3.5.3-1] - update to 3.5.3 [3.5.2-0.4.b1] - rebuild for https://fedoraproject.org/wiki/Features/Python_3.3 [3.5.2-0.3.b1] - remove rhel logic from with_python3 conditional [3.5.2-0.2.b1] - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild [3.5.2-0.1.b1] - update to 3.5.2b1 [3.5.1-0.2.b1] - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild [3.5.1-0.1.b1] - update to 3.5.1b1 [3.5-0.1.b1] - update to 3.5b1 [3.4-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild [3.4-2] - rebuild for newer python3 [3.4-1] - Update to 3.4 (#631751) [3.3.1-4] - Rebuild against Python 3.2 [3.3.1-3] - Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild [3.3.1-2] - Fix license tag, permissions, and filtering extraneous provides [3.3.1-1] - Update to 3.3.1 [3.2-3] - add python 3 subpackage (#536948) [3.2-2] - Require python-setuptools (#556290) [3.2-1] - update to 3.2 [3.1-1] - Update to 3.1 [3.0.1-1] - update to 3.0.1 [2.85-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild [2.85-2] - fix install invocation [2.85-1] - Initial package for Fedora python-dns python-docs [2.7.16-2] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 [2.7.16-1] - Update to 2.7.16 Resolves: rhbz#1680967 [2.7.15-3] - Modify for prebuilding and deploying on RHEL8 - Rename the info page to python2 - Resolves: rhbz#1656048 [2.7.15-2] - Modify for building on RHEL8 - Disable the tests, because the linkchecker package isn't available in RHEL8 - Resolves: rhbz#1656048 [2.7.15-1] - Update to 2.7.15 [2.7.14-5] - Only recommend the python2 package [2.7.14-4] - Remove Obsoletes tag from when python was renamed to python2 (Fedora 25 was last) [2.7.14-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [2.7.14-2] - Fix ambiguous Python 2 dependencies declarations (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) [2.7.14-1] - Update to 2.7.14 [2.7.13-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [2.7.13-3] - Change fixed Obsoletes version with a dynamic one (rhbz#1457336) [2.7.13-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [2.7.13-1] - Update to 2.7.13 - Rename package to python2-docs [2.7.12-2] - Remove unversioned Obsoletes. [2.7.12-1] - Update to 2.7.12. [2.7.11-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [2.7.11-1] - Update to 2.7.11 [2.7.10-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [2.7.10-1] - Update to 2.7.10 [2.7.9-1] - Update to 2.7.9 [2.7.8-1] - Update to 2.7.8 [2.7.7-1] - Update to 2.7.7 [2.7.6-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild [2.7.6-1] - Updated to v2.7.6 [2.7.5-6] - Used _pkgdocdir instead of _docdir [2.7.5-5] - Small tweaks of Suvayu's patch [2.7.5-4] - Enable Texinfo builder, add subpackage with python info pages [2.7.5-3] - Spec cleanup [2.7.5-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild [2.7.5-1] - Version 2.7.5. [2.7.4-1] - Version 2.7.4. [2.7.3-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild [2.7.3-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild [2.7.3-2] - make link checking optional, to avoid needing to pull in linkchecker and its dependencies (rbhz#823930) [2.7.3-1] - 2.7.3 [2.7.2-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild [2.7.2-2] - fix broken link to 'Global Module Index', and add a %check, verifying the absence of broken links (rhbz#670493) [2.7.2-1] - 2.7.2 [2.7.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild [2.7.1-1] - 2.7.1 [2.7-1] - Update to 2.7 [2.6.5-1] - move to 2.6.5: http://www.python.org/download/releases/2.6.5/ [2.6.4-3] - fix %description (bug #559710) [2.6.4-2] - update sources for 2.6.4 [2.6.4-1] - move to 2.6.4 - drop build requirement on python-jinja; python-sphinx requires python-jinja2 (bug 532135) [2.6.2-1] - Move to 2.6.2 like python itself. [2.6-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild [2.6-4] - Fix import error (#511647) [2.6-3] - Spec file cleanup (#226341) [2.6-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild [2.6-1] - Update to 2.6 [2.5.2-1] - Move to 2.5.2 like python itself. [2.5.1-3] - fix license tag [2.5.1-2] - mkdir a build root to keep recent rpm/mock happy. [2.5.1-1] - update to 2.5.1 [2.5-1] - update to 2.5 [2.4.4-1] - update to 2.4.4 [2.4.3-1.1] - rebuild [2.4.3-1] - updated to 2.4.3 * Fri Dec 09 2005 Jesse Keating <jkeating@redhat.com> - rebuilt [2.4.2-1] - updated to 2.4.2 [2.4.1-1] - updated to 2.4.1 [2.4-102] - changed package to noarch [2.4-100] - split the doc building step into a separate source rpm python-docutils python-funcsigs python-idna [2.5-7] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 [2.5-6] - Switch python3 coditions to bcond [2.5-5] - First version for python27 module python-ipaddress python-jinja2 [2.10-9] - Fix CVE-2020-28493: ReDOS vulnerability due to the sub-pattern Resolves: rhbz#1928707 [2.10-8] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 [2.10-7] - Fix conditions [2.10-6] - Specfile cleanup and fixes [2.10-5] - Disable Python 2 build by default [2.10-4] - Allow build with Python 2 [2.10-3] - Remove docs from Python 2 package - Remove dependency on python2-babel and python2-sphinx [2.10-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [2.10-1] - Update to 2.10. - Use %bcond. - Move BRs to their respective subpackages. [2.9.6-4] - Really cleanup spec file conditionals [2.9.6-3] - Cleanup spec file conditionals [2.9.6-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [2.9.6-1] - Update to 2.9.6. [2.9.5-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [2.9.5-1] - Update to 2.9.5. [2.9.4-1] - Update to 2.9.4. [2.8.1-1] - Update to 2.8.1. [2.8-8] - Rebuild for Python 3.6 [2.8-7] - Ship python2-jinja2 (bug #1378519) - Modernize spec [2.8-6] - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages [2.8-5] - Do not call py.test, there are currently no tests in the tarball. [2.8-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [2.8-3] - Rebuilt for Python3.5 rebuild [2.8-2] - Apply updates Python packaging guidelines. - Mark LICENSE with %license. [2.8-1] - Upstream 2.8 [2.7.3-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [2.7.3-2] - Add Requires python(3)-setuptools (bug #1168774) [2.7.3-1] - Update to 2.7.3. - Reenable docs. [2.7.2-2] - Bootstrap (without docs) build for Python 3.4 [2.7.2-1] - Update to 2.7.2. - Update python3 conditional. [2.7.1-1] - Update to 2.7.1. [2.7-1] - Update to 2.7 - spec cleanup [2.6-6] - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild [2.6-5] - rebuild for https://fedoraproject.org/wiki/Features/Python_3.3 [2.6-4] - remove rhel logic from with_python3 conditional [2.6-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild [2.6-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild [2.6-1] - Update to 2.6. [2.5.5-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild [2.5.5-3] - Re-enable html doc generation. - Remove conditional for F-12 and below. - Do not silently fail the testsuite for with py3k. [2.5.5-2] - Move python3 runtime requirements to python3 subpackage [2.5.5-1] - Update to 2.5.5. [2.5.2-4] - Revert to previous behavior: fail the build on failed test. - Rebuild for Python 3.2. [2.5.2-3] - %ifnarch doesn't work on noarch package so don't fail the build on failed tests [2.5.2-2] - disable the testsuite on s390(x) [2.5.2-1] - Update to upstream version 2.5.2. - Package depends on python-markupsafe and is noarch now. [2.5-4] - add explicit build-requirement on python-setuptools - fix doc disablement for python3 subpackage [2.5-3] - support disabling documentation in the build to break a circular build-time dependency with python-sphinx; disable docs for now [2.5-2] - Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild [2.5-1] - Update to upstream version 2.5. - Create python3 subpackage. - Minor specfile fixes. - Add examples directory. - Thanks to Gareth Armstrong for additional hints. [2.4.1-1] - Update to 2.4.1. [2.4-1] - Update to 2.4. [2.3.1-1] - Update to 2.3.1. - Docs are built using Sphinx now. - Run the testsuite. [2.2.1-1] - Update to 2.2.1, mainly a bugfix release. - Remove patch no longer needed. - Remove conditional for FC-8. - Compilation of speedup module has to be explicitly requested now. [2.1.1-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild [2.1.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild [2.1.1-1] - Update to 2.1.1 (bugfix release). [2.1-1] - Update to 2.1, which fixes a number of bugs. See http://jinja.pocoo.org/2/documentation/changelog#version-2-1. [2.0-3] - Rebuild for Python 2.6 [2.0-2] - Use rpm buildroot macro instead of RPM_BUILD_ROOT. [2.0-1] - Upstream released 2.0. [2.0-0.1.rc1] - Modified specfile from the existing python-jinja package. python-lxml [4.2.3-6] - Security fix for CVE-2021-43818 Resolves: rhbz#2032569 [4.2.3-5] - Security fix for CVE-2021-28957 Resolves: rhbz#1941534 [4.2.3-4] - Security fix for CVE-2020-27783: mXSS due to the use of improper parser Resolves: rhbz#1901633 [4.2.3-3] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 [4.2.3-2] - Conditionalize the python3 subpackage - Resolves: rhbz#1638698 [4.2.3-1] - New upstream release 4.2.3 [4.1.1-3] - Conditionalize the python2 subpackage [4.1.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [4.1.1-1] - Update to 4.1.1 [4.0.0-2] - Conditionally allow building without Cython [4.0.0-1] - Update to 4.0.0 [3.8.0-1] - Update to 3.8.0. Fixes bug #1458529 [3.7.2-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild [3.7.2-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [3.7.2-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [3.7.2-1] - Update to 3.7.2 [3.7.1-1] - Update to 3.7.1 [3.7.0-2] - Rebuild for Python 3.6 [3.7.0-1] - Update to 3.7.0 [3.6.4-1] - Update to 3.6.4 [3.4.4-5] - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages [3.4.4-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [3.4.4-3] - fix conditional [3.4.4-2] - Rebuilt for Python3.5 rebuild [3.4.4-1] - Update to 3.4.4 - Use %license, cleanup spec [3.3.6-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [3.3.6-1] - 3.3.6 (2014-08-28) - ================== - - Bugs fixed - ---------- - - * Prevent tree cycle creation when adding Elements as siblings. - - * LP#1361948: crash when deallocating Element siblings without parent. - - * LP#1354652: crash when traversing internally loaded documents in XSLT - extension functions. * Sun Aug 17 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild [3.3.5-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild [3.3.5-2] - Rebuilt for https://fedoraproject.org/wiki/Changes/Python_3.4 [3.3.5-1] - 3.3.5 (2014-04-18) - ================== - - Bugs fixed - ---------- - - * HTML cleaning could fail to strip javascript links that mix control - characters into the link scheme. [3.3.4-1] - 3.3.4 (2014-04-03) - ================== - - Features added - -------------- - - * Source line numbers above 65535 are available on Elements when - using libxml2 2.9 or later. - - Bugs fixed - ---------- - - * lxml.html.fragment_fromstring() failed for bytes input in Py3. [3.3.3-4] - Fix macro definition [3.3.3-3] - Add python3-cssselect to correct package [3.3.3-3] - python3-cssselect is not available on F19 [3.3.3-2] - BZ#1075070 add requires and buildrequires for cssselect [3.3.3-1] - 3.3.3 (2014-03-04) - ================== - - Bugs fixed - ---------- - - * LP#1287118: Crash when using Element subtypes with __slots__. - - Other changes - ------------- - - * The internal classes _LogEntry and _Attrib can no longer be - subclassed from Python code. [3.3.2-2] - Add check section #1075070 [3.3.2-1] - 3.3.2 (2014-02-26) - ================== - - Bugs fixed - ---------- - - * The properties resolvers and version, as well as the methods - set_element_class_lookup() and makeelement(), were lost from - iterparse objects. - - * LP#1222132: instances of XMLSchema, Schematron and RelaxNG - did not clear their local error_log before running a validation. - - * LP#1238500: lxml.doctestcompare mixed up 'expected' and 'actual' in - attribute values. - - * Some file I/O tests were failing in MS-Windows due to incorrect temp - file usage. Initial patch by Gabi Davar. - - * LP#910014: duplicate IDs in a document were not reported by DTD - validation. - - * LP#1185332: tostring(method='html') did not use HTML serialisation - semantics for trailing tail text. Initial patch by Sylvain Viollon. - - * LP#1281139: .attrib value of Comments lost its mutation methods - in 3.3.0. Even though it is empty and immutable, it should still - provide the same interface as that returned for Elements. [3.3.2-1] - 3.3.1 (2014-02-12) - ================== - - Bugs fixed - ---------- - - * LP#1014290: HTML documents parsed with parser.feed() failed to find - elements during tag iteration. - - * LP#1273709: Building in PyPy failed due to missing support for - PyUnicode_Compare() and PyByteArray_*() in PyPy's C-API. - - * LP#1274413: Compilation in MSVC failed due to missing 'stdint.h' standard - header file. - - * LP#1274118: iterparse() failed to parse BOM prefixed files. [3.3.0-2] - Update Cython requirement to >= 0.20 [3.3.0-1] - 3.3.0 (2014-01-26) - ================== - - Features added - -------------- - - Bugs fixed - ---------- - - * The heuristic that distinguishes file paths from URLs was tightened - to produce less false negatives. - - Other changes - ------------- - - - 3.3.0beta5 (2014-01-18) - ======================= - - Features added - -------------- - - * The PEP 393 unicode parsing support gained a fallback for wchar strings - which might still be somewhat common on Windows systems. - - Bugs fixed - ---------- - - * Several error handling problems were fixed throughout the code base that - could previously lead to exceptions being silently swallowed or not - properly reported. - - * The C-API function appendChild() is now deprecated as it does not - propagate exceptions (its return type is void). The new function - appendChildToElement() was added as a safe replacement. - - * Passing a string into fromstringlist() raises an exception instead of - parsing the string character by character. - - Other changes - ------------- - - * Document cleanup code was simplified using the new GC features in - Cython 0.20. - - - 3.3.0beta4 (2014-01-12) - ======================= - - Features added - -------------- - - Bugs fixed - ---------- - - * The (empty) value returned by the attrib property of Entity and - Comment objects was mutable. - - * Element class lookup wasn't available for the new pull parsers or when - using a custom parser target. - - * Setting Element attributes on instantiation with both the attrib - argument and keyword arguments could modify the mapping passed as - attrib. - - * LP#1266171: DTDs instantiated from internal/external subsets (i.e. - through the docinfo property) lost their attribute declarations. - - Other changes - ------------- - - * Built with Cython 0.20pre (gitrev 012ae82eb) to prepare support for - Python 3.4. - - - 3.3.0beta3 (2014-01-02) - ======================= - - Features added - -------------- - - * Unicode string parsing was optimised for Python 3.3 (PEP 393). - - Bugs fixed - ---------- - - * HTML parsing of Unicode strings could misdecode the input on some - platforms. - - * Crash in xmlfile() when closing open elements out of order in an error - case. - - Other changes - ------------- - - - 3.3.0beta2 (2013-12-20) - ======================= - - Features added - -------------- - - * iterparse() supports the recover option. - - Bugs fixed - ---------- - - * Crash in iterparse() for HTML parsing. - - * Crash in target parsing with attributes. - - Other changes - ------------- - - * The safety check in the read-only tree implementation (e.g. used by - PythonElementClassLookup) raises a more appropriate - ReferenceError for illegal access after tree disposal instead of - an AssertionError. This should only impact test code that - specifically checks the original behaviour. - - - 3.3.0beta1 (2013-12-12) - ======================= - - Features added - -------------- - - * New option handle_failures in make_links_absolute() and - resolve_base_href() (lxml.html) that enables ignoring or - discarding links that fail to parse as URLs. - - * New parser classes XMLPullParser and HTMLPullParser for - incremental parsing, as implemented for ElementTree in Python 3.4. - - * iterparse() enables recovery mode by default for HTML parsing - (html=True). - - Bugs fixed - ---------- - - * LP#1255132: crash when trying to run validation over non-Element (e.g. - comment or PI). - - * Error messages in the log and in exception messages that originated - from libxml2 could accidentally be picked up from preceding warnings - instead of the actual error. - - * The ElementMaker in lxml.objectify did not accept a dict as - argument for adding attributes to the element it's building. This - works as in lxml.builder now. - - * LP#1228881: repr(XSLTAccessControl) failed in Python 3. - - * Raise ValueError when trying to append an Element to itself or - to one of its own descendants, instead of running into an infinite - loop. - - * LP#1206077: htmldiff discarded whitespace from the output. - - * Compressed plain-text serialisation to file-like objects was broken. - - * lxml.html.formfill: Fix textarea form filling. - The textarea used to be cleared before the new content was set, - which removed the name attribute. - - Other changes - ------------- - - * Some basic API classes use freelists internally for faster - instantiation. This can speed up some iterparse() scenarios, - for example. - - * iterparse() was rewritten to use the new *PullParser - classes internally instead of being a parser itself. [3.2.4-1] - 3.2.4 (2013-11-07) - ================== - - Bugs fixed - ---------- - - * Memory leak when creating an XPath evaluator in a thread. - - * LP#1228881: repr(XSLTAccessControl) failed in Python 3. - - * Raise ValueError when trying to append an Element to itself or - to one of its own descendants. - - * LP#1206077: htmldiff discarded whitespace from the output. - - * Compressed plain-text serialisation to file-like objects was broken. [3.2.3-2] - Add requirement for on python-cssselect for the python2 version [3.2.3-1] - and here's a version 3.2.3. The last release accidentally lost the ability - to work on Python 2.4. There are no other changes over 3.2.2. - - 3.2.2 (2013-07-28) - ================== - - Features added - -------------- - - Bugs fixed - ---------- - - * LP#1185701: spurious XMLSyntaxError after finishing iterparse(). - - * Crash in lxml.objectify during xsi annotation. - - Other changes - ------------- - - * Return values of user provided element class lookup methods are now - validated against the type of the XML node they represent to prevent - API class mismatches. [3.2.1-1] - 3.2.1 (2013-05-11) - ================== - - Features added - -------------- - - * The methods apply_templates() and process_children() of XSLT - extension elements have gained two new boolean options elements_only - and remove_blank_text that discard either all strings or - whitespace-only strings from the result list. - - Bugs fixed - ---------- - - * When moving Elements to another tree, the namespace cleanup mechanism - no longer drops namespace prefixes from attributes for which it finds - a default namespace declaration, to prevent them from appearing as - unnamespaced attributes after serialisation. - - * Returning non-type objects from a custom class lookup method could lead - to a crash. - - * Instantiating and using subtypes of Comments and ProcessingInstructions - crashed. [3.2.0-1] - 3.2.0 (2013-04-28) - ================== - - Features added - -------------- - - Bugs fixed - ---------- - - * LP#690319: Leading whitespace could change the behaviour of the string - parsing functions in lxml.html. - - * LP#599318: The string parsing functions in lxml.html are more robust - in the face of uncommon HTML content like framesets or missing body tags. - Patch by Stefan Seelmann. - - * LP#712941: I/O errors while trying to access files with paths that - contain non-ASCII characters could raise UnicodeDecodeError instead - of properly reporting the IOError. - - * LP#673205: Parsing from in-memory strings disabled network access in the - default parser and made subsequent attempts to parse from a URL fail. - - * LP#971754: lxml.html.clean appends 'nofollow' to 'rel' attributes instead - of overwriting the current value. - - * LP#715687: lxml.html.clean no longer discards scripts that are explicitly - allowed by the user provided whitelist. Patch by Christine Koppelt. - - 3.1.2 (2013-04-12) - ================== - - Bugs fixed - ---------- - - * LP#1136509: Passing attributes through the namespace-unaware API of - the sax bridge (i.e. the handler.startElement() method) failed - with a TypeError. Patch by Mike Bayer. - - * LP#1123074: Fix serialisation error in XSLT output when converting - the result tree to a Unicode string. - - * GH#105: Replace illegal usage of xmlBufLength() in libxml2 2.9.0 - by properly exported API function xmlBufUse(). - - 3.1.1 (2013-03-29) - ================== - - Features added - -------------- - - Bugs fixed - ---------- - - * LP#1160386: Write access to lxml.html.FormElement.fields raised - an AttributeError in Py3. - - * Illegal memory access during cleanup in incremental xmlfile writer. - - Other changes - ------------- - - * The externally useless class lxml.etree._BaseParser was removed - from the module dict. [3.1.0-1] - 3.1.0 (2013-02-10) - ================== - - Features added - -------------- - - * GH#89: lxml.html.clean allows overriding the set of attributes that it - considers 'safe'. Patch by Francis Devereux. - - Bugs fixed - ---------- - - * LP#1104370: copy.copy(el.attrib) raised an exception. It now returns - a copy of the attributes as a plain Python dict. - - * GH#95: When used with namespace prefixes, the el.find*() methods - always used the first namespace mapping that was provided for each - path expression instead of using the one that was actually passed - in for the current run. - - * LP#1092521, GH#91: Fix undefined C symbol in Python runtimes compiled - without threading support. Patch by Ulrich Seidl. - - Other changes - ------------- - - - 3.1beta1 (2012-12-21) - ===================== - - Features added - -------------- - - * New build-time option --with-unicode-strings for Python 2 that - makes the API always return Unicode strings for names and text - instead of byte strings for plain ASCII content. - - * New incremental XML file writing API etree.xmlfile(). - - * E factory in lxml.objectify is callable to simplify the creation of - tags with non-identifier names without having to resort to getattr(). - - Bugs fixed - ---------- - - * When starting from a non-namespaced element in lxml.objectify, searching - for a child without explicitly specifying a namespace incorrectly found - namespaced elements with the requested local name, instead of restricting - the search to non-namespaced children. - - * GH#85: Deprecation warnings were fixed for Python 3.x. - - * GH#33: lxml.html.fromstring() failed to accept bytes input in Py3. - - * LP#1080792: Static build of libxml2 2.9.0 failed due to missing file. - - Other changes - ------------- - - * The externally useless class _ObjectifyElementMakerCaller was - removed from the module API of lxml.objectify. - - * LP#1075622: lxml.builder is faster for adding text to elements with - many children. Patch by Anders Hammarquist. [3.0.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild [3.0.1-1] - 3.0.1 (2012-10-14) - Bugs fixed - - * LP#1065924: Element proxies could disappear during garbage collection - in PyPy without proper cleanup. - * GH#71: Failure to work with libxml2 2.6.x. - * LP#1065139: static MacOS-X build failed in Py3. [3.0-1] - 3.0 (2012-10-08) - ================ - - Features added - -------------- - - Bugs fixed - ---------- - - * End-of-file handling was incorrect in iterparse() when reading from - a low-level C file stream and failed in libxml2 2.9.0 due to its - improved consistency checks. - - Other changes - ------------- - - * The build no longer uses Cython by default unless the generated C files - are missing. To use Cython, pass the option '--with-cython'. To ignore - the fatal build error when Cython is required but not available (e.g. to - run special setup.py commands that do not actually run a build), pass - '--without-cython'. - - - 3.0beta1 (2012-09-26) - ===================== - - Features added - -------------- - - * Python level access to (optional) libxml2 memory debugging features - to simplify debugging of memory leaks etc. - - Bugs fixed - ---------- - - * Fix a memory leak in XPath by switching to Cython 0.17.1. - - * Some tests were adapted to work with PyPy. - - Other changes - ------------- - - * The code was adapted to work with the upcoming libxml2 2.9.0 release. - - - 3.0alpha2 (2012-08-23) - ====================== - - Features added - -------------- - - * The .iter() method of elements now accepts tag arguments like '{*}name' - to search for elements with a given local name in any namespace. With - this addition, all combinations of wildcards now work as expected: - '{ns}name', '{}name', '{*}name', '{ns}*', '{}*' and '{*}*'. Note that - 'name' is equivalent to '{}name', but '*' is '{*}*'. The same change - applies to the .getiterator(), .itersiblings(), .iterancestors(), - .iterdescendants(), .iterchildren() and .itertext() methods, the - strip_attributes(), strip_elements() and strip_tags() functions as well - as the iterparse() function. - - * C14N allows specifying the inclusive prefixes to be promoted to - top-level during exclusive serialisation. - - Bugs fixed - ---------- - - * Passing long Unicode strings into the feed() parser interface failed to - read the entire string. - - Other changes - ------------- - - - 3.0alpha1 (2012-07-31) - ====================== - - Features added - -------------- - - * Initial support for building in PyPy (through cpyext). - - * DTD objects gained an API that allows read access to their - declarations. - - * xpathgrep.py gained support for parsing line-by-line (e.g. - from grep output) and for surrounding the output with a new root - tag. - - * E-factory in lxml.builder accepts subtypes of known data - types (such as string subtypes) when building elements around them. - - * Tree iteration and iterparse() with a selective tag - argument supports passing a set of tags. Tree nodes will be - returned by the iterators if they match any of the tags. - - Bugs fixed - ---------- - - * The .find*() methods in lxml.objectify no longer use XPath - internally, which makes them faster in many cases (especially when - short circuiting after a single or couple of elements) and fixes - some behavioural differences compared to lxml.etree. Note that - this means that they no longer support arbitrary XPath expressions - but only the subset that the ElementPath language supports. - The previous implementation was also redundant with the normal - XPath support, which can be used as a replacement. - - * el.find('*') could accidentally return a comment or processing - instruction that happened to be in the wrong spot. (Same for the - other .find*() methods.) - - * The error logging is less intrusive and avoids a global setup where - possible. - - * Fixed undefined names in html5lib parser. - - * xpathgrep.py did not work in Python 3. - - * Element.attrib.update() did not accept an attrib of - another Element as parameter. - - * For subtypes of ElementBase that make the .text or .tail - properties immutable (as in objectify, for example), inserting text - when creating Elements through the E-Factory feature of the class - constructor would fail with an exception, stating that the text - cannot be modified. - - Other changes - -------------- - - * The code base was overhauled to properly use 'const' where the API - of libxml2 and libxslt requests it. This also has an impact on the - public C-API of lxml itself, as defined in etreepublic.pxd, as - well as the provided declarations in the lxml/includes/ directory. - Code that uses these declarations may have to be adapted. On the - plus side, this fixes several C compiler warnings, also for user - code, thus making it easier to spot real problems again. - - * The functionality of 'lxml.cssselect' was moved into a separate PyPI - package called 'cssselect'. To continue using it, you must install - that package separately. The 'lxml.cssselect' module is still - available and provides the same interface, provided the 'cssselect' - package can be imported at runtime. - - * Element attributes passed in as an attrib dict or as keyword - arguments are now sorted by (namespaced) name before being created - to make their order predictable for serialisation and iteration. - Note that adding or deleting attributes afterwards does not take - that order into account, i.e. setting a new attribute appends it - after the existing ones. - - * Several classes that are for internal use only were removed - from the lxml.etree module dict: - _InputDocument, _ResolverRegistry, _ResolverContext, _BaseContext, - _ExsltRegExp, _IterparseContext, _TempStore, _ExceptionContext, - __ContentOnlyElement, _AttribIterator, _NamespaceRegistry, - _ClassNamespaceRegistry, _FunctionNamespaceRegistry, - _XPathFunctionNamespaceRegistry, _ParserDictionaryContext, - _FileReaderContext, _ParserContext, _PythonSaxParserTarget, - _TargetParserContext, _ReadOnlyProxy, _ReadOnlyPIProxy, - _ReadOnlyEntityProxy, _ReadOnlyElementProxy, _OpaqueNodeWrapper, - _OpaqueDocumentWrapper, _ModifyContentOnlyProxy, - _ModifyContentOnlyPIProxy, _ModifyContentOnlyEntityProxy, - _AppendOnlyElementProxy, _SaxParserContext, _FilelikeWriter, - _ParserSchemaValidationContext, _XPathContext, - _XSLTResolverContext, _XSLTContext, _XSLTQuotedStringParam - - * Several internal classes can no longer be inherited from: - _InputDocument, _ResolverRegistry, _ExsltRegExp, _ElementUnicodeResult, - _IterparseContext, _TempStore, _AttribIterator, _ClassNamespaceRegistry, - _XPathFunctionNamespaceRegistry, _ParserDictionaryContext, - _FileReaderContext, _PythonSaxParserTarget, _TargetParserContext, - _ReadOnlyPIProxy, _ReadOnlyEntityProxy, _OpaqueDocumentWrapper, - _ModifyContentOnlyPIProxy, _ModifyContentOnlyEntityProxy, - _AppendOnlyElementProxy, _FilelikeWriter, _ParserSchemaValidationContext, - _XPathContext, _XSLTResolverContext, _XSLTContext, - _XSLTQuotedStringParam, _XSLTResultTree, _XSLTProcessingInstruction [2.3.5-1] - Bugs fixed - - * Crash when merging text nodes in element.remove(). - * Crash in sax/target parser when reporting empty doctype. [2.3.4-1] - Bugs fixed - - * Crash when building an nsmap (Element property) with empty namespace - URIs. - * Crash due to race condition when errors (or user messages) occur during - threaded XSLT processing (or compilation). - * XSLT stylesheet compilation could ignore compilation errors. [2.3.3-4] - rebuild for https://fedoraproject.org/wiki/Features/Python_3.3 [2.3.3-3] - remove rhel logic from with_python3 conditional [2.3.3-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild [2.3.3-1] - 2.3.3 (2012-01-04) - Features added - - * lxml.html.tostring() gained new serialisation options with_tail and - doctype. - - Bugs fixed - - * Fixed a crash when using iterparse() for HTML parsing and requesting - start events. - * Fixed parsing of more selectors in cssselect. Whitespace before pseudo- - elements and pseudo-classes is significant as it is a descendant - combinator. 'E :pseudo' should parse the same as 'E *:pseudo', not - 'E:pseudo'. Patch by Simon Sapin. - * lxml.html.diff no longer raises an exception when hitting 'img' tags - without 'src' attribute. [2.3.2-1] - 2.3.2 (2011-11-11) - Features added - - * lxml.objectify.deannotate() has a new boolean option - cleanup_namespaces to remove the objectify namespace declarations - (and generally clean up the namespace declarations) after removing - the type annotations. - * lxml.objectify gained its own SubElement() function as a copy of - etree.SubElement to avoid an otherwise redundant import of - lxml.etree on the user side. - - Bugs fixed - - * Fixed the 'descendant' bug in cssselect a second time (after a first - fix in lxml 2.3.1). The previous change resulted in a serious - performance regression for the XPath based evaluation of the - translated expression. Note that this breaks the usage of some - of the generated XPath expressions as XSLT location paths that - previously worked in 2.3.1. - * Fixed parsing of some selectors in cssselect. Whitespace after - combinators '>', '+' and '~' is now correctly ignored. Previously - it was parsed as a descendant combinator. For example, 'div> .foo' - was parsed the same as 'div>* .foo' instead of 'div>.foo'. Patch by - Simon Sapin. [2.3.1-1] - Features added - -------------- - - * New option kill_tags in lxml.html.clean to remove specific - tags and their content (i.e. their whole subtree). - - * pi.get() and pi.attrib on processing instructions to parse - pseudo-attributes from the text content of processing instructions. - - * lxml.get_include() returns a list of include paths that can be - used to compile external C code against lxml.etree. This is - specifically required for statically linked lxml builds when code - needs to compile against the exact same header file versions as lxml - itself. - - * Resolver.resolve_file() takes an additional option - close_file that configures if the file(-like) object will be - closed after reading or not. By default, the file will be closed, - as the user is not expected to keep a reference to it. - - Bugs fixed - ---------- - - * HTML cleaning didn't remove 'data:' links. - - * The html5lib parser integration now uses the 'official' - implementation in html5lib itself, which makes it work with newer - releases of the library. - - * In lxml.sax, endElementNS() could incorrectly reject a plain - tag name when the corresponding start event inferred the same plain - tag name to be in the default namespace. - - * When an open file-like object is passed into parse() or - iterparse(), the parser will no longer close it after use. This - reverts a change in lxml 2.3 where all files would be closed. It is - the users responsibility to properly close the file(-like) object, - also in error cases. - - * Assertion error in lxml.html.cleaner when discarding top-level elements. - - * In lxml.cssselect, use the xpath 'A//B' (short for - 'A/descendant-or-self::node()/B') instead of 'A/descendant::B' for the - css descendant selector ('A B'). This makes a few edge cases to be - consistent with the selector behavior in WebKit and Firefox, and makes - more css expressions valid location paths (for use in xsl:template - match). - - [tags no longer show up in the - collected form values. - - [values to/from a multiple select form - field properly selects them and unselects them. - - Other changes - -------------- - - * Static builds can specify the download directory with the - --download-dir option. [2.3-1] - 2.3 (2011-02-06) - ================ - - Features added - -------------- - - * When looking for children, lxml.objectify takes '{}tag' as - meaning an empty namespace, as opposed to the parent namespace. - - Bugs fixed - ---------- - - * When finished reading from a file-like object, the parser - immediately calls its .close() method. - - * When finished parsing, iterparse() immediately closes the input - file. - - * Work-around for libxml2 bug that can leave the HTML parser in a - non-functional state after parsing a severly broken document (fixed - in libxml2 2.7.8). - - * marque tag in HTML cleanup code is correctly named marquee. - - Other changes - -------------- - - * Some public functions in the Cython-level C-API have more explicit - return types. - - 2.3beta1 (2010-09-06) - ===================== - - Features added - -------------- - - Bugs fixed - ---------- - - * Crash in newer libxml2 versions when moving elements between - documents that had attributes on replaced XInclude nodes. - - * XMLID() function was missing the optional parser and - base_url parameters. - - * Searching for wildcard tags in iterparse() was broken in Py3. - - * lxml.html.open_in_browser() didn't work in Python 3 due to the - use of os.tempnam. It now takes an optional 'encoding' parameter. - - Other changes - -------------- - - 2.3alpha2 (2010-07-24) - ====================== - - Features added - -------------- - - Bugs fixed - ---------- - - * Crash in XSLT when generating text-only result documents with a - stylesheet created in a different thread. - - Other changes - -------------- - - * repr() of Element objects shows the hex ID with leading 0x - (following ElementTree 1.3). - - 2.3alpha1 (2010-06-19) - ====================== - - Features added - -------------- - - * Keyword argument namespaces in lxml.cssselect.CSSSelector() - to pass a prefix-to-namespace mapping for the selector. - - * New function lxml.etree.register_namespace(prefix, uri) that - globally registers a namespace prefix for a namespace that newly - created Elements in that namespace will use automatically. Follows - ElementTree 1.3. - - * Support 'unicode' string name as encoding parameter in - tostring(), following ElementTree 1.3. - - * Support 'c14n' serialisation method in ElementTree.write() and - tostring(), following ElementTree 1.3. - - * The ElementPath expression syntax (el.find*()) was extended to - match the upcoming ElementTree 1.3 that will ship in the standard - library of Python 3.2/2.7. This includes extended support for - predicates as well as namespace prefixes (as known from XPath). - - * During regular XPath evaluation, various ESXLT functions are - available within their namespace when using libxslt 1.1.26 or later. - - * Support passing a readily configured logger instance into - PyErrorLog, instead of a logger name. - - * On serialisation, the new doctype parameter can be used to - override the DOCTYPE (internal subset) of the document. - - * New parameter output_parent to XSLTExtension.apply_templates() - to append the resulting content directly to an output element. - - * XSLTExtension.process_children() to process the content of the - XSLT extension element itself. - - * ISO-Schematron support based on the de-facto Schematron reference - 'skeleton implementation'. - - * XSLT objects now take XPath object as __call__ stylesheet - parameters. - - * Enable path caching in ElementPath (el.find*()) to avoid parsing - overhead. - - * Setting the value of a namespaced attribute always uses a prefixed - namespace instead of the default namespace even if both declare the - same namespace URI. This avoids serialisation problems when an - attribute from a default namespace is set on an element from a - different namespace. - - * XSLT extension elements: support for XSLT context nodes other than - elements: document root, comments, processing instructions. - - * Support for strings (in addition to Elements) in node-sets returned - by extension functions. - - * Forms that lack an action attribute default to the base URL of - the document on submit. - - * XPath attribute result strings have an attrname property. - - * Namespace URIs get validated against RFC 3986 at the API level - (required by the XML namespace specification). - - * Target parsers show their target object in the .target property - (compatible with ElementTree). - - Bugs fixed - ---------- - - * API is hardened against invalid proxy instances to prevent crashes - due to incorrectly instantiated Element instances. - - * Prevent crash when instantiating CommentBase and friends. - - * Export ElementTree compatible XML parser class as - XMLTreeBuilder, as it is called in ET 1.2. - - * ObjectifiedDataElements in lxml.objectify were not hashable. They - now use the hash value of the underlying Python value (string, - number, etc.) to which they compare equal. - - * Parsing broken fragments in lxml.html could fail if the fragment - contained an orphaned closing '</div>' tag. - - * Using XSLT extension elements around the root of the output document - crashed. - - * lxml.cssselect did not distinguish between x[attr='val'] and - x [attr='val'] (with a space). The latter now matches the - attribute independent of the element. - - * Rewriting multiple links inside of HTML text content could end up - replacing unrelated content as replacements could impact the - reported position of subsequent matches. Modifications are now - simplified by letting the iterlinks() generator in lxml.html - return links in reversed order if they appear inside the same text - node. Thus, replacements and link-internal modifications no longer - change the position of links reported afterwards. - - * The .value attribute of textarea elements in lxml.html did - not represent the complete raw value (including child tags etc.). It - now serialises the complete content on read and replaces the - complete content by a string on write. - - * Target parser didn't call .close() on the target object if - parsing failed. Now it is guaranteed that .close() will be - called after parsing, regardless of the outcome. - - Other changes - ------------- - - * Official support for Python 3.1.2 and later. - - * Static MS Windows builds can now download their dependencies - themselves. - - * Element.attrib no longer uses a cyclic reference back to its - Element object. It therefore no longer requires the garbage - collector to clean up. - - * Static builds include libiconv, in addition to libxml2 and libxslt. [2.2.8-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild [2.2.8-3] - rebuild for newer python3 [2.2.8-2] - Rebuild for newer libxml2 [2.2.8-1] - 2.2.8 (2010-09-02) - Bugs fixed - - * Crash in newer libxml2 versions when moving elements between - documents that had attributes on replaced XInclude nodes. - * Import fix for urljoin in Python 3.1+. [2.2.7-3] - Don't byte-compile files during install because setup.py doesn't properly byte compile for Python version 3.2 [2.2.7-2] - Rebuild for Python 3.2 [2.2.7-1] - 2.2.7 (2010-07-24) - Bugs fixed - - * Crash in XSLT when generating text-only result documents with a stylesheet created in a different thread. [2.2.6-4] - actually add the patch this time [2.2.6-3] - workaround for 2to3 issue (patch 0; bug 600036) [2.2.6-2] - Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild [2.2.6-1] - 2.2.6 (2010-03-02) - - Bugs fixed - - * Fixed several Python 3 regressions by building with Cython 0.11.3. [2.2.5-1] - 2.2.5 (2010-02-28) - - Features added - - * Support for running XSLT extension elements on the input root node - (e.g. in a template matching on '/'). - - Bugs fixed - - * Crash in XPath evaluation when reading smart strings from a document - other than the original context document. - * Support recent versions of html5lib by not requiring its XHTMLParser - in htmlparser.py anymore. - * Manually instantiating the custom element classes in lxml.objectify - could crash. - * Invalid XML text characters were not rejected by the API when they - appeared in unicode strings directly after non-ASCII characters. - * lxml.html.open_http_urllib() did not work in Python 3. - * The functions strip_tags() and strip_elements() in lxml.etree did - not remove all occurrences of a tag in all cases. - * Crash in XSLT extension elements when the XSLT context node is not - an element. [2.2.4-2] - update to current python3 guidelines - be more explicit in %files - use %global and not %define - create docs subpackage - add stripping 3-byte Byte Order Marker from src/lxml/tests/test_errors.py to get 2to3 to work (dmalcolm) - fixes FTBFS (#564674) [2.2.4-1] - Update to 2.2.4 - Enable Python 3 subpackage [2.2.3-3] - F-13's python build chain must be a little different... [2.2.3-2] - Add option to build a Python 3 subpackage, original patch by David Malcolm [2.2.3-1] - 2.2.3 (2009-10-30) - Bugs fixed - - * The resolve_entities option did not work in the incremental feed - parser. - * Looking up and deleting attributes without a namespace could hit a - namespaced attribute of the same name instead. - * Late errors during calls to SubElement() (e.g. attribute related - ones) could leave a partially initialised element in the tree. - * Modifying trees that contain parsed entity references could result - in an infinite loop. - * ObjectifiedElement.__setattr__ created an empty-string child element - when the attribute value was rejected as a non-unicode/non-ascii - string - * Syntax errors in lxml.cssselect could result in misleading error - messages. - * Invalid syntax in CSS expressions could lead to an infinite loop in - the parser of lxml.cssselect. - * CSS special character escapes were not properly handled in - lxml.cssselect. - * CSS Unicode escapes were not properly decoded in lxml.cssselect. - * Select options in HTML forms that had no explicit value attribute - were not handled correctly. The HTML standard dictates that their - value is defined by their text content. This is now supported by - lxml.html. - * XPath raised a TypeError when finding CDATA sections. This is now - fully supported. - * Calling help(lxml.objectify) didn't work at the prompt. - * The ElementMaker in lxml.objectify no longer defines the default - namespaces when annotation is disabled. - * Feed parser failed to honour the 'recover' option on parse errors. - * Diverting the error logging to Python's logging system was broken. [2.2.2-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild [2.2.2-1] - 2.2.2 (2009-06-21) - Features added - - * New helper functions strip_attributes(), strip_elements(), - strip_tags() in lxml.etree to remove attributes/subtrees/tags - from a subtree. - - Bugs fixed - - * Namespace cleanup on subtree insertions could result in missing - namespace declarations (and potentially crashes) if the element - defining a namespace was deleted and the namespace was not used - by the top element of the inserted subtree but only in deeper - subtrees. - * Raising an exception from a parser target callback didn't always - terminate the parser. - * Only {true, false, 1, 0} are accepted as the lexical representation - for BoolElement ({True, False, T, F, t, f} not any more), restoring - lxml <= 2.0 behaviour. [2.2.1-1] - 2.2.1 (2009-06-02) - Features added - - * Injecting default attributes into a document during XML Schema - validation (also at parse time). - * Pass huge_tree parser option to disable parser security restrictions - imposed by libxml2 2.7. - - Bugs fixed - - * The script for statically building libxml2 and libxslt didn't work - in Py3. - * XMLSchema() also passes invalid schema documents on to libxml2 for - parsing (which could lead to a crash before release 2.6.24). [2.2-1] - 2.2 (2009-03-21) - Features added - - * Support for standalone flag in XML declaration through - tree.docinfo.standalone and by passing standalone=True/False on - serialisation. - - Bugs fixed - - * Crash when parsing an XML Schema with external imports from a - filename. [2.2-0.8.beta4] - 2.2beta4 (2009-02-27) - Features added - - * Support strings and instantiable Element classes as child arguments - to the constructor of custom Element classes. - * GZip compression support for serialisation to files and file-like - objects. - - Bugs fixed - - * Deep-copying an ElementTree copied neither its sibling PIs and - comments nor its internal/external DTD subsets. - * Soupparser failed on broken attributes without values. - * Crash in XSLT when overwriting an already defined attribute using - xsl:attribute. - * Crash bug in exception handling code under Python 3. This was due to - a problem in Cython, not lxml itself. - * lxml.html.FormElement._name() failed for non top-level forms. - * TAG special attribute in constructor of custom Element classes was - evaluated incorrectly. - - Other changes - - * Official support for Python 3.0.1. - * Element.findtext() now returns an empty string instead of None for - Elements without text content. [2.2-0.7.beta3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild [2.2-0.6.beta3] - 2.2beta3 (2009-02-17) - Features added - - * XSLT.strparam() class method to wrap quoted string parameters that - require escaping. - - Bugs fixed - - * Memory leak in XPath evaluators. - * Crash when parsing indented XML in one thread and merging it with - other documents parsed in another thread. - * Setting the base attribute in lxml.objectify from a unicode string - failed. - * Fixes following changes in Python 3.0.1. - * Minor fixes for Python 3. - - Other changes - - * The global error log (which is copied into the exception log) is now - local to a thread, which fixes some race conditions. - * More robust error handling on serialisation. [2.2-0.5.beta2] - 2.2beta2 (2009-01-25) - Bugs fixed - - * Potential memory leak on exception handling. This was due to a - problem in Cython, not lxml itself. - * iter_links (and related link-rewriting functions) in lxml.html would - interpret CSS like url('link') incorrectly (treating the quotation - marks as part of the link). - * Failing import on systems that have an io module. [2.2-0.4.beta1] - 2.2beta1 (2008-12-12) - Features added - - * Allow lxml.html.diff.htmldiff to accept Element objects, - not just HTML strings. - - Bugs fixed - - * Crash when using an XPath evaluator in multiple threads. - * Fixed missing whitespace before Link:... in lxml.html.diff. - - Other changes - - * Export lxml.html.parse. [2.2-0.3.alpha1] - Rebuild for Python 2.6 [2.2-0.2.alpha1] - Don't forget to upload the sources! [2.2-0.1.alpha1] - 2.2alpha1 (2008-11-23) - Features added - - * Support for XSLT result tree fragments in XPath/XSLT extension - functions. - * QName objects have new properties namespace and localname. - * New options for exclusive C14N and C14N without comments. - * Instantiating a custom Element classes creates a new Element. - - Bugs fixed - - * XSLT didn't inherit the parse options of the input document. - * 0-bytes could slip through the API when used inside of Unicode - strings. - * With lxml.html.clean.autolink, links with balanced parenthesis, that - end in a parenthesis, will be linked in their entirety (typical with - Wikipedia links). [2.1.3-1] - 2.1.3 (2008-11-17) - Bugs fixed - - * Ref-count leaks when lxml enters a try-except statement while an - outside exception lives in sys.exc_*(). This was due to a problem - in Cython, not lxml itself. - * Parser Unicode decoding errors could get swallowed by other - exceptions. - * Name/import errors in some Python modules. - * Internal DTD subsets that did not specify a system or public ID - were not serialised and did not appear in the docinfo property - of ElementTrees. - * Fix a pre-Py3k warning when parsing from a gzip file in Py2.6. - * Test suite fixes for libxml2 2.7. - * Resolver.resolve_string() did not work for non-ASCII byte strings. - * Resolver.resolve_file() was broken. - * Overriding the parser encoding didn't work for many encodings. [2.1.2-1] - 2.1.2 (2008-09-05) - Features added - - * lxml.etree now tries to find the absolute path name of files when - parsing from a file-like object. This helps custom resolvers when - resolving relative URLs, as lixbml2 can prepend them with the path of - the source document. - - Bugs fixed - - * Memory problem when passing documents between threads. - * Target parser did not honour the recover option and raised an exception - instead of calling .close() on the target. [2.1.1-1] - Update to 2.1.1 [2.0.7-1] - Update to 2.0.7 - Update download URL [2.0.6-1] - Update to 2.0.6 [2.0.5-1] - Update to 2.0.5 [2.0.3-1] - Update to 2.0.3 [2.0.2-1] - Update to 2.0.2 [2.0.1-1] - Update to 2.0.1 [1.3.6-2] - Autorebuild for GCC 4.3 [1.3.6-1] - Update to 1.3.6. [1.3.5-1] - Update to 1.3.5. [1.3.4-1] - Update to 1.3.4. [1.3.3-3] - Rebuild for selinux ppc32 issue. [1.3.3-2] - BR python-setuptools-devel [1.3.3-1] - Update to 1.3.3 [1.1.2-1] - Update to 1.1.2 [1.0.3-3] - Rebuild for new Python [1.0.3-2] - Rebuild for FC6 [1.0.3-1] - Update to new upstream version [1.0.2-2] - Include, don't ghost .pyo files per new guidelines [1.0.2-1] - Update to new upstream release [1.0.1-1] - Update to new upstream release [1.0-1] - Update to new upstream 1.0 release [0.9.1-3] - Add python-setuptools to BuildRequires - Use dist tag [0.9.1-2] - Fix summary and description [0.9.1-1] - update the new upstream version - remove Pyrex build req [0.8-1] - Initial package python-markupsafe [0.23-19] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 [0.23-18] - Make possible to disable python3 subpackage - Disable debugsource package [0.23-17] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [0.23-16] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild [0.23-15] - Clean up spec file [0.23-14] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [0.23-13] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [0.23-12] - Rebuild for Python 3.6 [0.23-11] - Ship python2-markupsafe - Modernize spec [0.23-10] - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages [0.23-9] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [0.23-8] - Rebuilt for Python3.5 rebuild [0.23-7] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [0.23-6] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild [0.23-5] - Replace the python-setuptools-devel BR with python-setuptools [0.23-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild [0.23-3] - Really rebuild for Python 3.4 [0.23-2] - Rebuild for Python 3.4 [0.23-1] - Update to 0.23 [0.18-1] - Update to 0.18 (#678537) [0.11-9] - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild [0.11-8] - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild [0.11-7] - rebuild for https://fedoraproject.org/wiki/Features/Python_3.3 [0.11-6] - remove rhel logic from with_python3 conditional [0.11-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild [0.11-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild [0.11-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild [0.11-2] - rebuild for newer python3 [0.11-1] - Update to 0.11 [0.9.2-5] - rebuild with python3.2 http://lists.fedoraproject.org/pipermail/devel/2010-August/141368.html [0.9.2-4] - Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild [0.9.2-3] - Fix missing setuptools BuildRequires. [0.9.2-2] - Fixed sitearch and python3 definitions to work better with older Fedora/RHEL. [0.9.2-1] - Initial version. python-mock python-nose python-pluggy python-psycopg2 [2.7.5-7] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 [2.7.5-6] - Use the fully versioned binaries during build - Related: rhbz#1619153 [2.7.5-5] - Require python2-psycopg2 instead of python-psycopg2 from the python2-psycopg2-debug subpackage - Resolves: rhbz#1628242 [2.7.5-4] - re-enable testsuite [2.7.5-3] - Disable failing tests [2.7.5-2] - BuildRequire also python36-rpm-macros as part of the python36 module build [2.7.5-1] - sync with fedora rawhide [2.7.4-5] - Let the doc subpackage be standalone installable [2.7.4-4] - Make requires on python36-devel/debug dependant on a python36_module bcond [2.7.4-3] - Revert switching Python 3 subpackages to the python3X- prefix - Switch only the requires for python3-devel/debug to the python36-prefix: the rest of the packages in the python36 collection will have the python3 prefix to be unified with the Python 3 packages for Platform-Python [2.7.4-2] - Switch the Python 3 subpackages to the python3X- prefix using the 3 macro [2.7.4-1] - rebase to latest upstream release, per release notes: http://initd.org/psycopg/articles/2018/02/08/psycopg-274-released/ [2.7.3.2-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [2.7.3.2-2] - treat python3/python2 equally [2.7.3.2-1] - update to 2.7.3.2, per release notes: http://initd.org/psycopg/articles/2017/10/24/psycopg-2732-released/ [2.7.3.1-1] - http://initd.org/psycopg/articles/2017/08/26/psycopg-2731-released/ [2.7.3-1] - rebase to latest upstream release, per release notes: http://initd.org/psycopg/articles/2017/07/24/psycopg-273-released/ [2.7.2-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild [2.7.2-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [2.7.2-1] - rebase to latest upstream release, per release notes: http://initd.org/psycopg/articles/2017/07/22/psycopg-272-released/ [2.7.1-1] - rebase to latest upstream release, per release notes: http://initd.org/psycopg/articles/2017/03/01/psycopg-271-released/ - fix testsuite [2.7-1] - rebase to latest upstream release, per release notes: http://initd.org/psycopg/articles/2017/03/01/psycopg-27-released/ - enable testsuite during build, and package it [2.6.2-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [2.6.2-3] - Rebuild for Python 3.6 [2.6.2-2] - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages [2.6.2-1] - rebase (rhbz#1353545), per release notes http://initd.org/psycopg/articles/2016/07/07/psycopg-262-released/ [2.6.1-6] - provide python2-psycopg2 (rhbz#1306025) - cleanup obsoleted packaging stuff [2.6.1-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [2.6.1-4] - again bump for new Python 3.5, not build previously? - fix rpmlint issues - no pyo files with python 3.5 * Tue Nov 10 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - Rebuilt for https://fedoraproject.org/wiki/Changes/python3.5 [2.6.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [2.6.1-1] - Update to 2.6.1 [2.6-1] - Update to 2.6, per changes described at: http://www.psycopg.org/psycopg/articles/2015/02/09/psycopg-26-and-255-released/ [2.5.4-1] - Update to 2.5.4, per changes described at: http://www.psycopg.org/psycopg/articles/2014/08/30/psycopg-254-released [2.5.3-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild [2.5.3-1] - rebase to most recent upstream version, per release notes: http://www.psycopg.org/psycopg/articles/2014/05/13/psycopg-253-released/ [2.5.2-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild [2.5.2-2] - Rebuilt for https://fedoraproject.org/wiki/Changes/Python_3.4 [2.5.2-1] - Update to 2.5.2, per changes described at: http://www.psycopg.org/psycopg/articles/2014/01/07/psycopg-252-released [2.5.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild [2.5.1-1] - rebase to 2.5.1 [2.5-1] - Update to 2.5, per changes described at: http://www.psycopg.org/psycopg/articles/2013/04/07/psycopg-25-released/ [2.4.5-7] - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild [2.4.5-6] - rebuild for https://fedoraproject.org/wiki/Features/Python_3.3 [2.4.5-5] - generalize python 3 fileglobbing to work with both Python 3.2 and 3.3 [2.4.5-4] - replace 'python3.2dmu' with 'python3-debug'; with_python3 fixes [2.4.5-3] - add with_python3 conditional [2.4.5-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild [2.4.5-1] - Update to 2.4.5 [2.4.4-1] - Update to 2.4.4 - More specfile neatnik-ism [2.4.2-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild [2.4.2-2] - Fix mistaken %dir marking on python3 files, per Dan Horak [2.4.2-1] - Update to 2.4.2 Related: #711095 - Some neatnik specfile cleanups [2.4-0.beta2] - 2.4.0-beta2 - add python 2 debug, python3 (optimized) and python3-debug subpackages [2.3.2-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild [2.3.2-1] - Update to 2.3.2 - Clean up a few rpmlint warnings [2.2.2-3] - Fix incorrect (and invalid) License: tag. [2.2.2-2] - Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild [2.2.2-1] - Update to 2.2.2 [2.2.1-1] - Update to 2.2.1 - Improve description for 2.2 features. - Changelog for 2.2.0 is: http://initd.org/pub/software/psycopg/ChangeLog-2.2 [2.0.14-1] - Update to 2.0.14 - Update license (upstream switched to LGPL3) [2.0.13-2] - Fix rpmlint complaints: remove unneeded explicit Requires:, use Conflicts: instead of bogus Obsoletes: to indicate lack of zope subpackage [2.0.13-1] - Update to 2.0.13 [2.0.12-1] - Update to 2.0.12 [2.0.11-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild [2.0.11-1] - Update to 2.0.11 [2.0.10-1] - Update to 2.0.10 [2.0.9-1] - Update to 2.0.9 [2.0.8-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild [2.0.8-2] - Rebuild for Python 2.6 [2.0.8-1] - Update to 2.0.8 [2.0.8-1] - Update to 2.0.8 [2.0.7-3] - Rebuild for Python 2.6 [2.0.7-2] - fix license tags [2.0.7-1] - Update to 2.0.7 [2.0.6-4.1] - Autorebuild for GCC 4.3 [2.0.6-3.1] - Rebuilt against PostgreSQL 8.3 [2.0.6-3] - Rebuild for rawhide changes [2.0.6-2] - Rebuild for selinux ppc32 issue. [2.0.6-1] - Update to 2.0.6 [2.0.5.1-8] - Disabled zope package temporarily. [2.0.5.1-7] - Rebuilt [2.0.5.1-5] - Bumped up spec version [2.0.5.1-4] - Rebuilt for PostgreSQL 8.2.0 [2.0.5.1-3] - Rebuilt [2.0.5.1-2] - Remove ghost'ing, per Python Packaging Guidelines [2.0.5.1-1] - Update to 2.0.5.1 [2.0.3-3] - Fixed zope package dependencies and macro definition, per bugzilla review (#199784) - Fixed zope package directory ownership, per bugzilla review (#199784) - Fixed cp usage for zope subpackage, per bugzilla review (#199784) [2.0.3-2] - Fixed 64 bit builds - Fixed license - Added Zope subpackage - Fixed typo in doc description - Added macro for zope subpackage dir [2.0.3-1] - Update to 2.0.3 - Fixed spec file, per bugzilla review (#199784) [2.0.2-3] - Removed python dependency, per bugzilla review. (#199784) - Changed doc package group, per bugzilla review. (#199784) - Replaced dos2unix with sed, per guidelines and bugzilla review (#199784) - Fix changelog dates [2.0.2-2] - Added dos2unix to buildrequires - removed python related part from package name [2.0.2-1] - Fix rpmlint errors, including dos2unix solution - Re-engineered spec file * Mon Jan 23 2006 - Devrim GUNDUZ <devrim@commandprompt.com> - First 2.0.X build * Mon Jan 23 2006 - Devrim GUNDUZ <devrim@commandprompt.com> - Update to 1.2.21 * Tue Dec 06 2005 - Devrim GUNDUZ <devrim@commandprompt.com> - Initial release for 1.1.20 python-pygments python-pymongo python-PyMySQL [0.8.0-10] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 [0.8.0-9] - Make possible to disable python3 subpackage [0.8.0-8] - BuildRequire also python36-rpm-macros as part of the python36 module build [0.8.0-7] - Add a bcond for python2 [0.8.0-6] - Make requires on python36-devel dependant on a python36_module bcond [0.8.0-5] - Hardcode requires on python36-devel for the python36 module. This will have to be modified when python37 is added. [0.8.0-4] - make spec file compatible with epel7 - remove conditionals and always build for Python 3 [0.8.0-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [0.8.0-2] - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) [0.8.0-1] - Update to 0.8.0 [0.7.11-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [0.7.11-1] - Update to 0.7.11 [0.7.10-1] - Update to 0.7.10 [0.7.9-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [0.7.9-3] - Rebuild for Python 3.6 [0.7.9-2] - cherrypick commit 755dfdc upstream to allow bind before connect Related: rhbz#1378008 [0.7.9-1] - Update to 0.7.9 [0.6.7-6] - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages [0.6.7-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [0.6.7-4] - Correct installation problems due to Requires: mariadb [0.6.7-3] - Rebuilt for python 3.5 [0.6.7-2] - Drop unnecessary mariadb requirement - Add python3 conditionals in order to rebuild it in EL7 [0.6.7-1] - Update to 0.6.7 [0.6.6-4] - Use %license in %files [0.6.6-3] - Move python2 package in its own subpackage - Add provides [0.6.6-2] - Add Provides: python2-PyMySQL - Remove usage of %py3dir [0.6.6-1] - Update to 0.6.6 [0.6.2-1] - Initial packaging python-py python-pysocks [1.6.8-6] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 [1.6.8-5] - Stop providing the unversioned name python-SocksiPy - Resolves: rhbz#1628242 [1.6.8-4] - Make possible to disable python3 subpackage [1.6.8-3] - First version for python27 module python-pytest-mock python-requests [2.20.0-3] - Properly handle default ports when stripping the authorization header Resolves: rhbz#1762422 [2.20.0-2] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 [2.20.0-1] - Update to v2.20.0 for CVE-2018-18074. [2.19.1-5] - Make possible to disable python3 subpackage [2.19.1-4] - First version for python27 module [2.19.1-3] - Allow build with Python 2 [2.19.1-2] - Remove the python-pytest-cov dependency [2.19.1-1] - Update to v2.19.1 (rhbz 1591531) [2.19.0-1] - Update to v2.19.0 (rhbz 1590508) [2.18.4-6] - Skip all tests needing httpbin: httpbin has too many dependencies to be shipped in RHEL just for build-time package tests [2.18.4-5] - BR idna, or the tests fail to start [2.18.4-4] - Stop injecting PyOpenSSL (rhbz 1567862) [2.18.4-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [2.18.4-2] - Fix ambiguous Python 2 dependency declarations (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) [2.18.4-1] - Update to 2.18.4 [2.18.2-1] - Update to 2.18.2 [2.18.1-2] - Drop the dependency on certifi in setup.py [2.18.1-1] - Update to 2.18.1 (#1449432) - Remove tests that require non-local network (#1450608) [2.14.2-1] - Update to 2.14.2 (#1449432) - Switch to autosetup to apply patches [2.13.0-2] - Don't run tests when building as a module [2.13.0-1] - Update to 2.13.0 (#1418138) [2.12.4-3] - Include and enable tests (now python-pytest-httpbin is packaged) [2.12.4-2] - Rebuild for Python 3.6 again. [2.12.4-1] - Update to 2.12.4. Fixes #1404680 [2.12.3-2] - Rebuild for Python 3.6 [2.12.3-1] - Update to 2.12.3. Fixes #1400601 [2.12.2-1] - Update to 2.12.2 [2.12.1-2] - Backport #3713. Fixes #1397149 [2.12.1-1] - Update to 2.12.1. Fixes #1395469 - Unbundle idna, a new upstream dependency [2.11.1-1] - Update to 2.11.1. Fixes #1370814 [2.11.0-1] - Update to 2.11.0. Fixes #1365332 [2.10.0-4] - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages [2.10.0-3] - Update python2 packaging. [2.10.0-2] - Fix python2 subpackage to comply with guidelines. [2.9.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [2.9.1-1] - new version [2.9.0-1] - new version [2.8.1-1] - Latest upstream. - Bump hard dep on urllib3 to 1.12. [2.7.0-8] - Rebuilt for Python3.5 rebuild [2.7.0-7] - Tell setuptools about what version of urllib3 we're unbundling for https://github.com/kennethreitz/requests/issues/2816 [2.7.0-6] - Replace the provides macro with a plain provides field for now until we can re-organize this package into two different subpackages. [2.7.0-5] - Remove 'provides: python2-requests' from the python3 subpackage, obviously. [2.7.0-4] - Employ %python_provides macro to provide python2-requests. [2.7.0-3] - Lock down the python-urllib3 version to the specific version we unbundled. https://bugzilla.redhat.com/show_bug.cgi?id=1253823 [2.7.0-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [2.7.0-1] - new version [2.6.2-1] - new version [2.6.1-1] - new version [2.6.0-1] - new version - Remove patch for CVE-2015-2296, now included in the upstream release. [2.5.3-2] - Backport fix for CVE-2015-2296. [2.5.3-1] - new version [2.5.1-1] - new version [2.5.0-3] - Pin python-urllib3 requirement at 1.10. - Fix requirement pinning syntax. [2.5.0-2] - Do the most basic of tests in the check section. [2.5.0-1] - Latest upstream, 2.5.0 for #1171068 [2.4.3-1] - Latest upstream, 2.4.3 for #1136283 [2.3.0-4] - Re-do unbundling by symlinking system libs into the requests/packages/ dir. [2.3.0-3] - fix license handling [2.3.0-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild [2.3.0-1] - Latest upstream [2.0.0-2] - Rebuilt for https://fedoraproject.org/wiki/Changes/Python_3.4 [2.0.0-1] - Latest upstream. - Add doc macro to the python3 files section. - Require python-urllib3 greater than or at 1.7.1. [1.2.3-5] - fix versioned dep on python-urllib3 [1.2.3-4] - Explicitly versioned the requirements on python-urllib3. [1.2.3-3] - Release bump for a coupled update with python-urllib3. [1.2.3-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild [1.2.3-1] - Latest upstream. - Fixed bogus date in changelog. [1.1.0-4] - Correct a rhel conditional on python-ordereddict [1.1.0-3] - Unbundled python-urllib3. Using system python-urllib3 now. - Conditionally include python-ordereddict for el6. [1.1.0-2] - Unbundled python-charade/chardet. Using system python-chardet now. - Removed deprecated comments and actions against oauthlib unbundling. Those are no longer necessary in 1.1.0. - Added links to bz tickets over Patch declarations. [1.1.0-1] - Latest upstream. - Relicense to ASL 2.0 with upstream. - Removed cookie handling patch (fixed in upstream tarball). - Updated cert unbundling patch to match upstream. - Added check section, but left it commented out for koji. [0.14.1-4] - Let brp_python_bytecompile run again, take care of the non-python{2,3} modules by removing them from the python{,3}-requests package that they did not belong in. - Use the certificates in the ca-certificates package instead of the bundled one + https://bugzilla.redhat.com/show_bug.cgi?id=904614 - Fix a problem with cookie handling + https://bugzilla.redhat.com/show_bug.cgi?id=906924 [ 0.14.1-1] - Updated to latest upstream release [0.13.1-1] - Updated to latest upstream release 0.13.1 - Use system provided ca-certificates - No more async requests use grrequests https://github.com/kennethreitz/grequests - Remove gevent as it is no longer required by requests [0.11.1-1] - Updated to upstream release 0.11.1 [0.10.6-3] - Support building package for EL6 [0.10.6-2] - +python3-requests pkg [0.10.6-1] - Updated to new upstream version [0.9.3-1] - Updated to new upstream version 0.9.3 - Include python-gevent as a dependency for requests.async - Clean up shebangs in requests/setup.py,test_requests.py and test_requests_ext.py [0.8.2-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild [0.8.2-1] - New upstream version - keep alive support - complete removal of cookiejar and urllib2 [0.7.6-1] - Updated to new upstream release 0.7.6 [0.6.6-1] - Updated to version 0.6.6 [0.6.1-1] - Updated to version 0.6.1 [0.6.0-1] - Updated to latest version 0.6.0 [0.5.1-2] - Remove OPT_FLAGS from build section since it is a noarch package - Fix use of mixed tabs and space - Remove extra space around the word cumbersome in description [0.5.1-1] - Initial package python-setuptools_scm python-sqlalchemy python-urllib3 [1.24.2-3] - Update RECENT_DATE dynamically Related: rhbz#1883890 rhbz#1761380 [1.24.2-2] - Security fix for CVE-2020-26137 Resolves: rhbz#1883890 [1.24.2-1] - Rebased to 1.24.2 to fix CVE-2019-11324 - Added patches for CVE-2019-11236 (AKA CVE-2019-9740) - Resolves: rhbz#1706765 rhbz#1706762 [1.23-7] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 [1.23-6] - Make possible to disable python3 subpackage [1.23-5] - First version for python27 module python-virtualenv python-wheel [1:0.31.1-3] - Adjusted the postun scriptlets to enable upgrading to RHEL 9 - Resolves: rhbz#1933055 [1:0.31.1-2] - Removed wheel's own implementation of crypto due to FIPS concerns Resolves: rhbz#1731526 [1:0.31.1-1] - Update to 0.31.1 Resolves: rhbz#1671681 [1:0.30.0-14] - Create python{2,3}-wheel-wheel packages with the wheel of wheel Resolves: rhbz#1659550 [1:0.30.0-13] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 [1:0.30.0-12] - Fix alternatives - post and postun sections only with python3 - Resolves: rhbz#1633534 [1:0.30.0-11] - Fix update of alternatives for wheel-3 - Resolves: rhbz#1633534 [1:0.30.0-10] - Add alternatives for wheel-3 - Resolves: rhbz#1633534 [1:0.30.0-9] - Remove python3 executables without full version suffix - Resolves: rhbz#1615727 [1:0.30.0-8] - Different BR for python36 module build - Resolves: rhbz#1615727 [1:0.30.0-7] - Remove unversioned binaries from python2 subpackage - Resolves: rhbz#1613343 [1:0.30.0-6] - Disable tests (enable bootstrap) - Build Python 3 version in python27 module [1:0.30.0-5] - This package might be built with the non-modular python2 package from RHEL8 buildroot and thus we need to enable it [1:0.30.0-4] - Also remove test dependency on python3-jsonschema [1:0.30.0-3] - Remove test dependency on python2-jsonschema https://bugzilla.redhat.com/show_bug.cgi?id=1584189 [1:0.30.0-2] - Remove build-time (test) dependency on python-keyring [1:0.30.0-1] - Update to 0.30.0 [0.30.0a0-9] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [0.30.0a0-8] - Switch macros to bcond's and make Python 2 optional to facilitate building the Python 2 and Python 3 modules [0.30.0a0-7] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [0.30.0a0-6] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [0.30.0a0-5] - Enable tests [0.30.0a0-4] - Rebuild for Python 3.6 without tests [0.30.0a0-3] - Add bootstrap method [0.30.0a0-2] - Use the python_provide macro [0.30.0a0-1] - Update to 0.30.0a0 - Added patch to remove keyrings.alt dependency [0.29.0-1] - Update to 0.29.0 - Cleanups and fixes [0.26.0-3] - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages [0.26.0-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [0.26.0-1] - Update to 0.26.0 - Rebuilt for Python3.5 rebuild [0.24.0-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [0.24.0-3] - Make spec buildable in EPEL 6, too. - Remove additional sources added to upstream tarball. [0.24.0-2] - Make python3 conditional (switched off for RHEL-7; fixes #1131111). [0.24.0-1] - Update to 0.24.0 - Remove patches merged upstream [0.22.0-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild [0.22.0-3] - Another rebuild with python 3.4 [0.22.0-2] - Rebuild with python 3.4 [0.22.0-1] - Initial package. pytz [2017.2-12] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 [2017-2-11] - Remove unversioned provides - Resolves: rhbz#1628242 [2017.2-10] - Fix unversioned requires/buildrequires - Resolves: rhbz#1628242 [2017.2-9] - Switch python3 coditions to bcond [2017.2-8] - Change the shebang to a versioned Python executable [2017.2-7] - Switch __python for __python2 macro. [2017.2-6] - remove test_tzinfo.PicklingTest.testRoundtrip which fails with our system-wide timezone database (#1497572) [2017.2-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [2017.2-4] - Cleanup spec file conditionals [2017.2-3] - Python 2 binary package renamed to python2-pytz See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 [2017.2-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [2017.2-1] - Update to 2017.2 [2016.10-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [2016.10-3] - Enable tests [2016.10-2] - Rebuild for Python 3.6 - Disable python3 tests for now [2016.10-1] - Update to 2016.10 [2016.7-1] - Update to 2016.7 [2016.6.1-1] - Update to 2016.6.1 (RHBZ #1356337) - Fix Source0 URL to override a change in PyPI URLs (see https://bitbucket.org/pypa/pypi/issues/438/) [2016.4-3] - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages [2016.4-1] - Use proper PYTHONPATH with python3 test - Use %license - Drop BuildRoot and %clean [2016.4-1] - Update to 2016.4 (RHBZ #1265036) [2015.7-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [2015.7-2] - Rebuilt for Python3.5 rebuild [2015.7-1] - Update to 2015.7 [2015.4-1] - Update to 2015.4 (bug #1161236) - Do not ship zoneinfo with python3 package (bug #1251554) - Run tests [2012d-8] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [2012d-7] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild [2012d-6] - Rebuilt for https://fedoraproject.org/wiki/Changes/Python_3.4 [2012d-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild [2012d-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild [2012d-3] - remove rhel logic from with_python3 conditional [2012d-2] - Use system zoneinfo, BZ 857266. [2012d-1] - Latest upstream, python3 support, BZ 851226. [2010h-6] - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild [2010h-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild [2010h-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild [2010h-3] - Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild [2010h-2] - Define => global [2010h-1] - Update to current version, BZ 573252. [2009i-7] - Corrected Source0 URL, BZ 560168. [2008i-6] - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild [2008i-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild [2008i-4] - Rebuild for Python 2.6 [2008i-3] - Apply patch correctly. [2008i-2] - Updated tzdata patch from Petr Machata bug 471014 [2008i-1] - Update to latest, now using timezone files provided by tzdata package [2006p-3] - Fix for egg-info file creation [2006p-2] - Bump for rebuild against python 2.5 and change BR to python-devel accordingly [2006p-1] - Update to 2006p [2006g-1] - Update to 2006g [2005r-2] - Rebuild for gcc/glibc changes [2005r-1] - Update to 2005r [2005m-1] - Update to 2005m [2005i-2] - Remove -O1 from install command [2005i-1] - Initial Fedora Extras package PyYAML [3.12-16] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 [3.12-15] - Remove unversioned provides - Resolves: rhbz#1628242 [3.12-14] - Remove unversioned provides - Resolves: rhbz#1628242 [3.12-13] - Fix unversioned requires/buildrequires - Resolves: rhbz#1628242 [3.12-12] - Switch python3 coditions to bcond [3.12-11] - Use python2 macros instead of unversioned python macros [3.12-10] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [3.12-9] - Fix ambiguous Python 2 dependency declarations (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) [3.12-8] - Cleanup spec file conditionals [3.12-7] - Add Provides for the old name without %_isa [3.12-6] - Python 2 binary package renamed to python2-pyyaml See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 [3.12-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild [3.12-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [3.12-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [3.12-2] - Rebuild for Python 3.6 [3.12-1] - New upstream release 3.12 (RHBZ#1371150) [3.11-13] - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages [3.11-12] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [3.11-11] - Add provides for python3-yaml (RHBZ#1288807) [3.11-10] - Rebuilt for Python3.5 rebuild [3.11-9] - Add provides for python2-yaml (RHBZ#1241678) [3.11-8] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [3.11-7] - Add patch for CVE-2014-9130 (bug 1204829) [3.11-6] - fixed typecast issues using debian patch(int->size_t)(BZ#1140189) - spec file cleanup [3.11-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild [3.11-4] - fix license handling [3.11-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild [3.11-2] - Rebuilt for https://fedoraproject.org/wiki/Changes/Python_3.4 [3.11-1] - New upstream release 3.11 (BZ#1081521) [3.10-9] - Add check section and run test suite [3.10-8] - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild [3.10-7] - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild [3.10-6] - rebuild for https://fedoraproject.org/wiki/Features/Python_3.3 [3.10-5] - remove rhel logic from with_python3 conditional [3.10-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild [3.10-3] - Add Provides for python-yaml (BZ#740390) [3.10-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild [3.10-1] - New upstream release 3.10 [3.09-8] - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild [3.09-7] - Add support to build for python 3 [3.09-6] - Bump release number for upgrade path [3.09-3] - Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild [3.09-1] - New upstream release 3.09 [3.08-6] - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild [3.08-5] - Minor tweaks to spec file aligning with latest Fedora packaging guidelines - Enforce inclusion of libyaml in build with --with-libyaml option to setup.py - Deliver to %{python_sitearch} instead of %{python_sitelib} due to _yaml.so - Thanks to Gareth Armstrong <gareth.armstrong@hp.com> [3.08-4] - Correction, change libyaml to libyaml-devel in BuildRequires [3.08-3] - Add libyaml to BuildRequires [3.08-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild [3.08-1] - New upstream release [3.06-2] - Rebuild for Python 2.6 [3.06-1] - New upstream release [3.05-2] - Remove explicit dependency on python >= 2.3 - Remove executable on example script in docs [3.05-1] - Initial packaging for Fedora scipy MODERATE Copyright 2023 Oracle, Inc. CVE-2022-45061 cpe:/a:oracle:exadata_dbserver:23.1.0.0.0::ol8 cpe:/a:oracle:exadata_dbserver:23.1.3.0.0::ol8 cpe:/a:oracle:linux:8::appstream_developer cpe:/a:oracle:exadata_dbserver:23.1.2.0.0::ol8 cpe:/a:oracle:linux:8:8:appstream_base cpe:/a:oracle:exadata_dbserver:23.1.4.0.0::ol8 cpe:/a:oracle:exadata_dbserver:23.1.1.0.0::ol8 cpe:/a:oracle:linux:8::appstream Oracle Linux 8 [5.8-23] - CVE-2022-4515, arbitrary code execution issue Resolves: rhbz#2153787 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-4515 Oracle Linux 8 [3.2.0-2] - Rebuild with Golang-1.19.4 - Resolves: #2163744 [3.2.0-1] - Update to version 3.2.0 - Resolves: #2139382 [2.13.3-2] - Define %gobuild macro with proper ldflags - Related: rhbz#2021549 [2.13.3-1] - Update to version 2.13.3 - Fixed round brackets in Provides - Moved manpages.tgz to look-a-side cache - Resolves: rhbz#2021549, rhbz#1870080, rhbz#1866441 [2.11.0-2] - Removed mangen source file - Cleaned docs/man folder - Resolves: rhbz#1852842 [2.11.0-1] - Update to version 2.11.0 - Resolves: rhbz#1783391 [2.4.1-3] - Add pregenerated manpages, due to missing dependency 'ronn' in rhel7. [2.4.1-2] - Initial build for rh-git218-git-lfs-2.4.1 [2.4.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild [2.4.1-1] - Update to latest release [2.4.0-3] - Fix %preun to correctly remove the lfs filter on uninstall (rhbz#1580357) [2.4.0-2] - Add %go_arches fallback to work around Koji issues [2.4.0-1] - Update to latest release. [2.3.4-6] - Add patches to build with Go 1.10. [2.3.4-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [2.3.4-4] - Use vendored libraries on RHEL - Skip test on RHEL - Don't build man pages on RHEL due to missing ronn - Don't build html versions of man pages [2.3.4-3] - Require git-core instead of git. [2.3.4-2] - Patch tests to work on slow systems like arm and aarch builders. - Fix 'git lfs help' command. [2.3.4-1] - Update to latest release. - Run all tests during build. [2.2.1-3] - Remove redundant doc tag on manpages. - Use path macros in %post/%postun. [2.2.1-2] - Disable unnecessary subpackages. [2.2.1-1] - Update to latest version. [2.0.2-2] - Patch up to build with Go 1.7 [2.0.2-1] - Update to latest release - Add some requested macros [2.0.1-1] - Update to latest release - Don't disable git-lfs globally during upgrade [2.0.0-1] - Update to latest release [1.5.5-1] - Update to latest release - Add -devel and -unit-test-devel subpackages - Add post/preun scriptlets for global enablement [1.2.0-1] - Initial package MODERATE Copyright 2023 Oracle, Inc. CVE-2022-2880 CVE-2022-41717 CVE-2022-41715 Oracle Linux 8 [42.2.14-2] - Fix CVE-2022-41946 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-41946 Oracle Linux 8 [3.0.20-14] - Fix defect found by Covscan Resolves: #2151704 [3.0.20-13] - Fix multiple CVEs - Add rpminspect configuration Resolves: #2151702 Resolves: #2151704 Resolves: #2151706 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-41861 CVE-2022-41859 CVE-2022-41860 Oracle Linux 8 [2.38-17] - Fix an illegal memory access parsing a corrupt ELF file. (#2153220) MODERATE Copyright 2023 Oracle, Inc. CVE-2022-4285 Oracle Linux 8 Oracle Linux 9 [12.1.1-2.0.4] - CVE-2023-4039 mitigation. Orabug 35752028. - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> LOW Copyright 2023 Oracle, Inc. CVE-2023-4039 cpe:/a:oracle:linux:9::developer cpe:/a:oracle:linux:8::developer Oracle Linux 8 [11.2.1-5.0.2] - CVE-2023-4039 mitigation. Orabug 35752004. - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> LOW Copyright 2023 Oracle, Inc. CVE-2023-4039 cpe:/a:oracle:linux:8::developer Oracle Linux 8 [4.0.9-27] - Fix various CVEs - Resolves: CVE-2022-3627 CVE-2022-3970 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-3627 CVE-2022-3970 Oracle Linux 8 [1.0.6-14] - Fix CVE-2022-40023 (#2128977) MODERATE Copyright 2023 Oracle, Inc. CVE-2022-40023 Oracle Linux 8 [1.2.20-17] - fix use-after-free bugs introduced by incorrect memleak fixes (CVE-2021-33640) [1.2.20-16] - fix memory leaks through gnu_long{name,link} (CVE-2021-33645 CVE-2021-33646) - fix out-of-bounds read in gnu_long{name,link} (CVE-2021-33643 CVE-2021-33644) MODERATE Copyright 2023 Oracle, Inc. CVE-2021-33643 CVE-2021-33645 CVE-2021-33644 CVE-2021-33646 Oracle Linux 8 libzip [1.6.1-1] - update to 1.6.1 - enable lzma support [1.5.2-1] - update to 1.5.2 - add all explicit cmake options to ensure openssl is used even in local build with other lilbraries available [1.5.1-1] - update to 1.5.1 - drop dependency on zlib-devel and bzip2-devel no more referenced in libzip.pc - drop rpath patch merged upstream [1.5.0-2] - add dependency on zlib-devel and bzip2-devel #1556068 [1.5.0-1] - update to 1.5.0 - use openssl for cryptography instead of bundled custom AES implementation [1.4.0-5] - missing BR on C compiler - use ldconfig_scriptlets [1.4.0-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [1.4.0-3] - add upstream patch and drop multilib hack [1.4.0-2] - re-add multilib hack #1529886 [1.4.0-1] - update to 1.4.0 - switch to cmake - add upstream patch for lib64 [1.3.2-1] - update to 1.3.2 - drop multilib header hack - change URL to https://libzip.org/ - test suite now ok on all arch [1.3.0-2] - use multilib-rpm-config for multilib hacks [1.3.0-1] - update to 1.3.0 - add dependency on bzip2 library - ignore 3 tests failing on 32-bit [1.2.0-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild [1.2.0-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [1.2.0-1] - update to 1.2.0 - soname bump to 5 [1.2.0-0] - update to 1.2.0 - soname bump to 5 - temporarily keep libzip.so.4 [1.1.3-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [1.1.3-1] - update to 1.1.3 [1.1.2-1] - update to 1.1.2 - add BR on perl(Getopt::Long) [1.1.1-1] - update to 1.1.1 [1.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [1.1-1] - update to 1.1 - new ziptool command - add fix for undefined optopt in ziptool.c (upstream) [1.0.1-3] - fix libzip-tools summary #1288424 [1.0.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [1.0.1-1] - update to 1.0.1 - soname bump from .2 to .4 - drop ziptorrent - create 'tools' sub package [0.11.2-5] - actually apply patch (using %autosetup) [0.11.2-4] - CVE-2015-2331: integer overflow when processing ZIP archives (#1204676,#1204677) [0.11.2-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild [0.11.2-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild [0.11.2-1] - update to 0.11.2 - run test during build [0.11.1-3] - replace php patch with upstream one [0.11.1-2] - include API-CHANGES and LICENSE in package doc [0.11.1-1] - update to 0.11.1 [0.10.1-7] - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild [0.10.1-6] - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild [0.10.1-5] - fix typo in multiarch (#866171) [0.10.1-4] - Warning about conflicting contexts for /usr/lib64/libzip/include/zipconf.h versus /usr/include/zipconf-64.h (#853954) [0.10.1-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild [0.10.1-2] - spec cleanup, better multilib fix [0.10.1-1] - update to 0.10.1 (security fix only) - fixes for CVE-2012-1162 and CVE-2012-1163 [0.10-2] - try to fix ARM issue (#799684) [0.10-1] - update to 0.10 - apply patch with changes from php bundled lib (thanks spot) - handle multiarch headers (ex from MySQL) [0.9.3-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild [0.9.3-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild [0.9.3-2] - Cleaned up pkgconfig deps which are now automatically handled by RPM. [0.9.3-1] - Updated to libzip 0.9.3 [0.9-4] - Use bzipped upstream tarball. [0.9-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild [0.9-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild [0.9-1] - libzip-0.9 [0.8-5] - rebuild for new gcc-4.3 [0.8-4] - use better workaround for removing rpaths [0.8-3] - require pkgconfig in devel subpkg - move api description to devel subpkg - keep timestamps in %install - avoid lib64 rpaths [0.8-2] - Change License to BSD [0.8-1] - Initial version for Fedora php-pear php-pecl-apcu [5.1.18-1] - update to 5.1.18 [5.1.17-1] - update to 5.1.17 [5.1.12-1] - update to 5.1.12 (stable) [5.1.11-1] - update to 5.1.11 (stable) [5.1.10-1] - update to 5.1.10 (stable) [5.1.9-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [5.1.9-2] - undefine _strict_symbol_defs_build [5.1.9-1] - Update to 5.1.9 (php 7, stable) [5.1.8-5] - rebuild for https://fedoraproject.org/wiki/Changes/php72 [5.1.8-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild [5.1.8-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [5.1.8-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [5.1.8-1] - Update to 5.1.8 (php 7, stable) [5.1.7-2] - rebuild for https://fedoraproject.org/wiki/Changes/php71 [5.1.7-1] - Update to 5.1.7 (php 7, stable) [5.1.6-1] - Update to 5.1.6 (php 7, stable) [5.1.5-1] - Update to 5.1.5 (php 7, stable) [4.0.11-1] - Update to 4.0.11 (stable) - fix license usage and spec cleanup [4.0.10-4] - add upstream patch, fix FTBFS with 5.6.21RC1, thanks Koschei [4.0.10-3] - drop scriptlets (replaced file triggers in php-pear) [4.0.10-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [4.0.10-1] - Update to 4.0.10 (stable) [4.0.8-1] - Update to 4.0.8 [4.0.7-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [4.0.7-1] - Update to 4.0.7 [4.0.6-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild [4.0.6-2] - rebuild for https://fedoraproject.org/wiki/Changes/Php56 [4.0.6-1] - Update to 4.0.6 (beta) [4.0.4-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild [4.0.4-2] - add numerical prefix to extension configuration file [4.0.4-1] - Update to 4.0.4 (beta) [4.0.3-1] - Update to 4.0.3 (beta) - install doc in pecl doc_dir - install tests in pecl test_dir (in devel) - cleanup SCL stuff [4.0.2-3] - EPEL-7 build [4.0.2-2] - fix perm on config dir - improve SCL compatibility - always provides php-pecl-apc-devel and apc-panel [4.0.2-1] - Update to 4.0.2 [4.0.1-3] - restore APC serializers ABI (patch merged upstream) [4.0.1-2] - adapt for SCL [4.0.1-1] - Update to 4.0.1 - add missing scriptlet - fix Conflicts [4.0.0-2] - fix segfault when used from command line [4.0.0-1] - first pecl release - rename from php-apcu to php-pecl-apcu [4.0.0-0.4.git4322fad] - new snapshot (test before release) [4.0.0-0.3.git647cb2b] - new snapshot with our pull request - allow to run test suite simultaneously on 32/64 arch - build warning free [4.0.0-0.2.git6d20302] - new snapshot with full APC compatibility [4.0.0-0.1.git44e8dd4] - initial package, version 4.0.0 php-pecl-rrd [2.0.1-1] - build for RHEL 8 [2.0.1-13] - rebuild for https://fedoraproject.org/wiki/Changes/php74 [2.0.1-12] - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild [2.0.1-11] - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild [2.0.1-10] - Rebuild for https://fedoraproject.org/wiki/Changes/php73 [2.0.1-9] - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild [2.0.1-8] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [2.0.1-7] - undefine _strict_symbol_defs_build [2.0.1-6] - rebuild for https://fedoraproject.org/wiki/Changes/php72 [2.0.1-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild [2.0.1-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [2.0.1-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [2.0.1-2] - rebuild for https://fedoraproject.org/wiki/Changes/php71 [2.0.1-1] - update to 2.0.1 [1.1.3-10] - rebuild for new rrdtool - fix license management - don't provide the test suite [1.1.3-9] - drop scriptlets (replaced by file triggers in php-pear) - cleanup [1.1.3-8] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [1.1.3-7] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [1.1.3-6] - ignore failed tests with rrdtool 1.5 FTBFS detected by Koschei, reported upstream - skip test suite on arm [1.1.3-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild [1.1.3-4] - rebuild for https://fedoraproject.org/wiki/Changes/Php56 [1.1.3-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild [1.1.3-2] - add numerical prefix to extension configuration file [1.1.3-1] - Update to 1.1.3 (stable) - drop merged patch [1.1.2-1] - Update to 1.1.2 (stable) - install doc in pecl doc_dir - install tests in pecl test_dir - add conditional build of ZTS extension [1.1.1-2] - patch for build warning - patch to fix test result with recent rrdtool [1.1.1-1] - Update to 1.1.1 [1.1.0-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild [1.1.0-3] - rebuild for http://fedoraproject.org/wiki/Features/Php55 [1.1.0-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild [1.1.0-1] - Version 1.1.0 (stable), api 1.1.0 (stable) [1.0.5-4] - ignore test results (fails with rrdtool 1.4.7) [1.0.5-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild [1.0.5-3] - build against php 5.4 [1.0.5-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild [1.0.5-1] - update to 1.0.5 - change license from PHP to BSD [1.0.4-1] - Version 1.0.4 (stable) - API 1.0.4 (stable) - fix filters [1.0.3-1] - Version 1.0.3 (stable) - API 1.0.3 (stable) - no change in sources [1.0.2-1] - Version 1.0.2 (stable) - API 1.0.2 (stable) - no change in sources [1.0.1-1] - Version 1.0.1 (stable) - API 1.0.1 (stable) - no change in sources - remove generated Changelog (only latest version, no real value) [1.0.0-1] - Version 1.0.0 (stable) - API 1.0.0 (stable) - remove all patches merged by upstream [0.10.0-2] - improved patches - implement rrd_strversion [0.10.0-1] - Version 0.10.0 (stable) - API 0.10.0 (beta) - remove patches, merged upstream - add links to 5 new upstream bugs [0.9.0-1] - Version 0.9.0 (beta) - API 0.9.0 (beta) - initial RPM php-pecl-xdebug [2.9.5-1] - update to 2.9.5 php-pecl-zip [1.18.2-1] - update to 1.18.2 [1.15.4-1] - Update to 1.15.4 [1.15.3-1] - Update to 1.15.3 [1.15.2-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [1.15.2-2] - undefine _strict_symbol_defs_build [1.15.2-1] - Update to 1.15.2 [1.15.1-4] - rebuild for https://fedoraproject.org/wiki/Changes/php72 [1.15.1-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild [1.15.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [1.15.1-1] - Update to 1.15.1 [1.15.0-1] - Update to 1.15.0 [1.14.0-1] - Update to 1.14.0 [1.13.5-4] - rebuild for new libzip [1.13.5-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [1.13.5-2] - rebuild for https://fedoraproject.org/wiki/Changes/php71 [1.13.5-1] - Update to 1.13.5 [1.13.4-1] - Update to 1.13.4 [1.13.3-2] - rebuild for https://fedoraproject.org/wiki/Changes/php70 [1.13.3-1] - Update to 1.13.3 [1.13.2-1] - Update to 1.13.2 - fix license management [1.13.1-3] - drop scriptlets (replaced file triggers in php-pear) - ignore 1 test (change in php, FTBFS detected by Koschei) [1.13.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [1.13.1-1] - Update to 1.13.1 (no change) [1.13.0-1] - Update to 1.13.0 - raise dependency on libzip 1.0.0 - don't install/register tests [1.12.5-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [1.12.5-2] - rebuild for new libzip [1.12.5-1] - Update to 1.12.5 (stable) [1.12.4-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild [1.12.4-4] - rebuild for https://fedoraproject.org/wiki/Changes/Php56 [1.12.4-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild [1.12.4-2] - add numerical prefix to extension configuration file [1.12.4-1] - Update to 1.12.4 (stable) for libzip 0.11.2 [1.12.3-1] - Update to 1.12.3 (stable) - drop merged patch [1.12.2-2] - upstream patch, don't use any libzip private struct - drop LICENSE_libzip when system version is used - always build ZTS extension [1.12.2-1] - update to 1.12.2 (beta) - drop merged patches - install doc in pecl doc_dir - install tests in pecl test_dir [1.12.1-5] - really really fix all spurious-executable-perm [1.12.1-4] - really fix all spurious-executable-perm [1.12.1-3] - fixes from review comments #999313: clarify License - drop execution right from sources - BR libzip-devel always needed [1.12.1-2] - refresh our merged patches from upstream git [1.12.1-1] - New spec for version 1.12.1 (beta) php [7.4.33-1] - rebase to 7.4.33 - fix: due to an integer overflow PDO::quote() may return unquoted string CVE-2022-31631 [7.4.30-1] - rebase to 7.4.30 #2099615 [7.4.19-3] - fix password of excessive length triggers buffer overflow leading to RCE CVE-2022-31626 [7.4.19-2] - fix SSRF bypass in FILTER_VALIDATE_URL CVE-2021-21705 - fix Local privilege escalation via PHP-FPM CVE-2021-21703 [7.4.19-1] - rebase to 7.4.19 #1944110 [7.4.6-4] - fix regression in 7.4.6 with generators and exception [7.4.6-3] - build phpdbg only once - fix regression in 7.4.6 when yielding an array based generator [7.4.6-2] - use php-config from embed SAPI to reduce used libs [7.4.6-1] - update to 7.4.6 - add ffi extension - add /usr/share/php/preload as default ffi.preload configuration - run FPM tests - set opcache.enable_cli in provided default configuration - ensure all shared extensions can be loaded - drop wddx, recode and extensions - run test suite using 4 concurrent workers [7.3.5-5] - fix underflow in env_path_info in fpm_main.c CVE-2019-11043 [7.3.5-3] - fix AVC denied httpd_execmem when php-opcache is installed #1725104 [7.3.5-2] - cleanup php-devel dependencies [7.3.5-1] - update to 7.3.5 [7.2.11-1] - update to 7.2.11 #1628543 [7.2.8-4] - drop tidy extension #1619290 [7.2.8-3] - update to 7.2.8 [7.2.7-3] - FPM: add getallheaders, backported from 7.3 #1582533 [7.2.7-2] - drop libargon2 dependency #1595261 [7.2.7-1] - Update to 7.2.7 - http://www.php.net/releases/7_2_7.php - drop -mstackrealign option, workaround to #1593144 [7.2.6-2] - switch back to bundled onigurama [7.2.6-1] - Update to 7.2.6 - http://www.php.net/releases/7_2_6.php [7.2.5-1] - Update to 7.2.5 - http://www.php.net/releases/7_2_5.php [7.2.4-1] - Update to 7.2.4 - http://www.php.net/releases/7_2_4.php - FPM: update default pool configuration for process.dumpable [7.2.3-4] - use systemd RuntimeDirectory instead of /etc/tmpfiles.d [7.2.3-3] - enable argon2 password hash [7.2.3-2] - php-json is optional - add file trigger to restart the php-fpm service when new pool or new extension installed [7.2.3-1] - Update to 7.2.3 - http://www.php.net/releases/7_2_3.php - FPM: revert pid file removal [7.2.3~RC1-4] - disable ZTS on RHEL [7.2.3~RC1-3] - disable pspell extension on RHEL - improve devel dependencies [7.2.3~RC1-2] - rebuild for new tag and drop patch merged upstream - drop ldconfig scriptlets [7.2.3~RC1-1] - update to 7.2.3RC1 - adapt systzdata, fixheader and ldap_r patches - apply upstream patch for date ext [7.2.2-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [7.2.2-1] - Update to 7.2.2 - http://www.php.net/releases/7_2_2.php [7.2.2~RC1-3] - disable interbase, imap, pdo_dblib and sodium on rhel [7.2.2~RC1-3] - undefine _strict_symbol_defs_build [7.2.2~RC1-2] - Rebuilt for switch to libxcrypt [7.2.2~RC1-1] - update to 7.2.2RC1 - define SOURCE_DATE_EPOCH for reproducible build [7.2.1-1] - Update to 7.2.1 - http://www.php.net/releases/7_2_1.php [7.2.1~RC1-1] - update to 7.2.1RC1 [7.2.0-3] - Rebuild for ICU 60.1 [7.2.0-2] - refresh patch for https://bugs.php.net/75514 [7.2.0-1] - update to 7.2.0 GA - add upstream patch for https://bugs.php.net/75514 [7.2.0~RC6-1] - Update to 7.2.0RC6 [7.2.0~RC5-1] - Update to 7.2.0RC5 - make php-fpm a weak dependency [7.2.0~RC4-2] - enable argon2 password hash [7.2.0~RC4-1] - Update to 7.2.0RC4 [7.2.0~RC3-1] - Update to 7.2.0RC3 - drop mcrypt extension - add sodium extension - use system oniguruma - drop .so suffix from ini files - refresh configuration files from upstream [7.1.10-1] - Update to 7.1.10 - http://www.php.net/releases/7_1_10.php [7.1.10~RC1-2] - php now requires php-fpm and start it with httpd / nginx [7.1.10~RC1-1] - Update to 7.1.10RC1 [7.1.9-2] - Automatically load OpenSSL configuration file, from PHP 7.2 [7.1.9-1] - Update to 7.1.9 - http://www.php.net/releases/7_1_9.php [7.1.9~RC1-1] - Update to 7.1.9RC1 - php-fpm: drop unneeded 'pid' from default configuration [7.1.8-1] - Update to 7.1.8 - http://www.php.net/releases/7_1_8.php [7.1.8~RC1-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [7.1.8~RC1-1] - Update to 7.1.8RC1 [7.1.7-2] - disable httpd MPM check [7.1.7-1] - Update to 7.1.7 - http://www.php.net/releases/7_1_7.php [7.1.7~RC1-1] - Update to 7.1.7RC1 [7.1.6-1] - Update to 7.1.6 - http://www.php.net/releases/7_1_6.php - add upstream security patches for oniguruma [7.1.6~RC1-1] - Update to 7.1.6RC1 [7.1.5-1] - Update to 7.1.5 - http://www.php.net/releases/7_1_5.php [7.1.5-0.3.RC1] - enable PHP execution of .phar files, see #1117140 [7.1.5-0.2.RC1] - new sources from new tag [7.1.5-0.1.RC1] - Update to 7.1.5RC1 [7.1.4-1] - Update to 7.1.4 - http://www.php.net/releases/7_1_4.php [7.1.4-0.1.RC1] - Update to 7.1.4RC1 [7.1.3-3] - timelib is MIT license [7.1.3-2] - remove %attr, see #1432372 [7.1.3-1] - Update to 7.1.3 - http://www.php.net/releases/7_1_3.php [7.1.3-0.1.RC1] - Update to 7.1.3RC1 [7.1.2-1] - Update to 7.1.2 - http://www.php.net/releases/7_1_2.php [7.1.2-0.2.RC1.1] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [7.1.2-0.2.RC1] - Update to 7.1.2RC1 (new sources) [7.1.2-0.1.RC1] - Update to 7.1.2RC1 [7.1.1-1] - Update to 7.1.1 - http://www.php.net/releases/7_1_1.php [7.1.1-0.1.RC1] - Update to 7.1.1RC1 [7.1.0-1] - Update to 7.1.0 - http://www.php.net/releases/7_1_0.php [7.1.0-0.3.RC6] - disable pcre.jit everywhere as it raise AVC #1398474 - sync provided configuration with upstream production defaults [7.1.0-0.2.RC6] - re-enable interbase sub package see http://bugzilla.redhat.com/1394750 sub package inconsistency - add patch to fix firebird include path (using fb_config) [7.1.0-0.1.RC6] - Update to 7.1.0RC6 - update tzdata patch to v14, improve check for valid tz file - disable interbase sub package (interbase and pdo_firebird) [7.1.0-0.1.RC3] - Update to 7.1.0RC3 [7.0.12-0.1.RC1] - Update to 7.0.12RC1 [7.0.11-1] - Update to 7.0.11 - http://www.php.net/releases/7_0_11.php [7.0.11-0.1.RC1] - Update to 7.0.11RC1 [7.0.10-1] - Update to 7.0.10 - http://www.php.net/releases/7_0_10.php [7.0.10-0.1.RC1] - Update to 7.0.10RC1 [7.0.9-1] - Update to 7.0.9 - http://www.php.net/releases/7_0_9.php - wddx: add upstream patch for https://bugs.php.net/72564 [7.0.9-0.1.RC1] - Update to 7.0.9RC1 [7.0.8-2] - own tests/doc directories for pecl packages #1351345 [7.0.8-1] - Update to 7.0.8 - http://www.php.net/releases/7_0_8.php - https://fedoraproject.org/wiki/Changes/php70 - drop ereg, mysql, mssql extensions - add json extension [5.6.23-1] - Update to 5.6.23 - http://www.php.net/releases/5_6_23.php [5.6.23-0.1.RC1] - update to 5.6.23RC1 [5.6.22-2] - drop unneeded option --with-vpx-dir, fix FTBFS, thanks Koschei [5.6.22-1] - Update to 5.6.22 - http://www.php.net/releases/5_6_22.php [5.6.22-0.1.RC1] - update to 5.6.22RC1 [5.6.21-1] - Update to 5.6.21 http://www.php.net/releases/5_6_21.php [5.6.21-0.2.RC1] - rebuild for ICU 57.1 [5.6.21-0.1.RC1] - update to 5.6.21RC1 [5.6.20-1.1] - rebuild for ICU 57.1 [5.6.20-1] - Update to 5.6.20 http://www.php.net/releases/5_6_20.php [5.6.20-0.1.RC1] - update to 5.6.20RC1 [5.6.19-1] - Update to 5.6.19 http://www.php.net/releases/5_6_19.php [5.6.19-0.1.RC1] - update to 5.6.19RC1 [5.6.18-2] - define %pecl_xmldir and own it (/var/lib/php/peclxml) [5.6.18-1] - Update to 5.6.18 http://www.php.net/releases/5_6_18.php [5.6.18-0.1.RC1] - update to 5.6.18RC1 [5.6.17-1] - Update to 5.6.17 http://www.php.net/releases/5_6_17.php [5.6.17-0.1.RC1] - update to 5.6.17RC1 [5.6.16-2] - rebuild for libvpx 1.5.0 [5.6.16-1] - Update to 5.6.16 http://www.php.net/releases/5_6_16.php [5.6.16-0.2.RC2] - rebuild (tidy) [5.6.16-0.1.RC1] - update to 5.6.16RC1 [5.6.15-1] - Update to 5.6.15 http://www.php.net/releases/5_6_15.php - php-config: reports all built sapis [5.6.15-0.1.RC1] - update to 5.6.15RC1 [5.6.14-1] - Update to 5.6.14 http://www.php.net/releases/5_6_14.php - php-fpm: enable http authorization headers [5.6.14-0.1.RC1] - update to 5.6.14RC1 [5.6.13-1] - Update to 5.6.13 http://www.php.net/releases/5_6_13.php [5.6.12-1] - Update to 5.6.12 http://www.php.net/releases/5_6_12.php [5.6.12-0.1.RC1] - update to 5.6.12RC1 [5.6.11-2] - fix typo in php.conf #1244104 [5.6.11-1] - Update to 5.6.11 http://www.php.net/releases/5_6_11.php [5.6.11-0.1.RC1] - update to 5.6.11RC1 - the phar link is now correctly created [5.6.10-1.1] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [5.6.10-1] - Update to 5.6.10 http://www.php.net/releases/5_6_10.php - add explicit spec license (implicit by FPCA) [5.6.10-0.1.RC1] - update to 5.6.10RC1 - opcache is now 7.0.6-dev [5.6.9-1] - Update to 5.6.9 http://www.php.net/releases/5_6_9.php [5.6.9-0.1.RC1] - update to 5.6.9RC1 - adapt systzdata patch for upstream changes for new zic [5.6.8-1] - Update to 5.6.8 http://www.php.net/releases/5_6_8.php [5.6.8-0.3.RC1] - add upstream patch to drop SSLv3 tests [5.6.8-0.2.RC1] - rebuild for libvpx 1.4.0 [5.6.8-0.1.RC1] - update to 5.6.8RC1 [5.6.7-2] - Update to 5.6.7 http://www.php.net/releases/5_6_7.php [5.6.7-1] - update to 5.6.7RC1 [5.6.6-1] - Update to 5.6.6 http://www.php.net/releases/5_6_6.php [5.6.6-0.1.RC1] - php 5.6.6RC1 for Koschei [5.6.5-2] - rebuild for ICU 54.1 [5.6.5-1] - Update to 5.6.5 http://www.php.net/releases/5_6_5.php - drop deprecated php-fpm EnvironmentFile [5.6.5-0.1.RC1] - update to 5.6.5RC1 - FPM: enable ACL support for Unix Domain Socket - FPM: switch default configuration to use UDS [5.6.4-2] - Update to 5.6.4 (real) http://www.php.net/releases/5_6_4.php - php-xmlrpc requires php-xml [5.6.4-1] - Update to 5.6.4 http://www.php.net/releases/5_6_4.php [5.6.4-0.1.RC1] - php 5.6.4RC1 [5.6.3-4] - FPM: add upstream patch for https://bugs.php.net/68428 listen.allowed_clients is IPv4 only [5.6.3-3] - sync php-fpm configuration with upstream - refresh upstream patch for 68421 [5.6.3-2] - FPM: add upstream patch for https://bugs.php.net/68421 access.format=R doesn't log ipv6 address - FPM: add upstream patch for https://bugs.php.net/68420 listen=9000 listens to ipv6 localhost instead of all addresses - FPM: add upstream patch for https://bugs.php.net/68423 will no longer load all pools [5.6.3-1] - Update to PHP 5.6.3 http://php.net/releases/5_6_3.php [5.6.3-0.2.RC1] - php 5.6.3RC1 (refreshed, phpdbg changes reverted) - new version of systzdata patch, fix case sensitivity - ignore Factory in date tests [5.6.3-0.1.RC1] - php 5.6.3RC1 - disable opcache.fast_shutdown in default config - enable phpdbg_webhelper new extension (in php-dbg) [5.6.1-1] - Update to PHP 5.6.2 http://php.net/releases/5_6_2.php [5.6.1-1] - Update to PHP 5.6.1 http://php.net/releases/5_6_1.php - use default system cipher list by Fedora policy http://fedoraproject.org/wiki/Changes/CryptoPolicy [5.6.1-0.2.RC1] - provides nginx configuration (see #1142298) [5.6.1-0.1.RC1] - php 5.6.1RC1 [5.6.0-1] - PHP 5.6.0 is GA http://php.net/releases/5_6_0.php - fix ZTS man pages, upstream patch for 67878 - provides php(httpd) [5.6.0-0.7.RC4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild [5.6.0-0.6.RC4] - php 5.6.0RC4 [5.6.0-0.5.RC3] - fpm requires httpd >= 2.4.10 for proxy support in SetHandler [5.6.0-0.4.RC3] - php 5.6.0RC3 - cleanup with_libmysql - fix licenses handling - fix zts-php-config --php-binary output #1124605 - provide php.conf with php-fpm, allow apache + fpm to work with default configuration, without mod_php [5.6.0-0.3.RC2] - php 5.6.0RC2 [5.6.0-0.2.RC1] - fix phpdbg with libedit https://bugs.php.net/67499 - add workaround for unserialize/mock issue from 5.4/5.5 [5.6.0-0.1.RC1] - php 5.6.0RC1 https://fedoraproject.org/wiki/Changes/Php56 - add php-dbg subpackage - update php.ini and opcache.ini from upstream production template - move zts-php to php-cli [5.5.13-3] - fix regression introduce in fix for #67118 [5.5.13-2] - fileinfo: fix insufficient boundary check - workaround regression introduce in fix for 67072 in serialize/unzerialize functions [5.5.13-1] - Update to 5.5.13 http://www.php.net/releases/5_5_13.php - sync php.ini with upstream php.ini-production [5.5.12-1] - Update to 5.5.12 http://www.php.net/releases/5_5_12.php - php-fpm: change default unix socket permission CVE-2014-0185 [5.5.11-2] - add numerical prefix to extension configuration files - prevent .user.ini files from being viewed by Web clients - load php directives only when mod_php is active [5.5.11-1] - Update to 5.5.11 http://www.php.net/ChangeLog-5.php#5.5.11 [5.5.10-1] - Update to 5.5.10 http://www.php.net/ChangeLog-5.php#5.5.10 - php-fpm should own /var/lib/php/session and wsdlcache - fix pcre test results with libpcre < 8.34 [5.5.9-2] - upstream patch for https://bugs.php.net/66731 [5.5.9-1.1] - rebuild [5.5.9-1] - Update to 5.5.9 http://www.php.net/ChangeLog-5.php#5.5.9 - Install macros to /usr/lib/rpm/macros.d [5.5.8-2] - fix _httpd_mmn expansion in absence of httpd-devel [5.5.8-1] - update to 5.5.8 - drop conflicts with other opcode caches as both can be used only for user data cache [5.5.7-1] - update to 5.5.7, fix for CVE-2013-6420 - fix zend_register_functions breaks reflection, php bug 66218 - fix Heap buffer over-read in DateInterval, php bug 66060 - fix fix overflow handling bug in non-x86 [5.5.6-1] - update to 5.5.6 [5.5.5-1] - update to 5.5.5 - sync php.ini with upstream [5.5.4-1] - update to 5.5.4 - improve security, use specific soap.wsdl_cache_dir use /var/lib/php/wsdlcache for mod_php and php-fpm - sync short_tag comments in php.ini with upstream [5.5.3-1] - update to 5.5.3 - fix typo and add missing entries in php.ini - drop zip extension [5.5.2-1] - update to 5.5.2, fixes for CVE-2011-4718 + CVE-2013-4248 [5.5.1-3] - improve system libzip patch [5.5.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild [5.5.1-1] - update to 5.5.1 - add Provides: php(pdo-abi), for consistency with php(api) and php(zend-abi) - improved description for mod_php - fix opcache ZTS configuration (blacklists in /etc/php-zts.d) - add missing man pages (phar, php-cgi) [5.5.0-2] - add security fix for CVE-2013-4113 - add missing ASL 1.0 license - 32k stack size seems ok for tests on both 32/64bits build [5.5.0-1] - update to 5.5.0 final [5.5.0-0.11.RC3] - also drop JSON from sources - clean conditional for JSON (as removed from the sources) - clean conditional for FPM (always build) [5.5.0-0.10.RC3] - drop JSON extension [5.5.0-0.9.RC3] - build with system GD >= 2.1.0 [5.5.0-0.8.RC3] - update to 5.5.0RC3 [5.5.0-0.7.RC2] - update to 5.5.0RC2 - add missing options in php-fpm.conf - run php-fpm in systemd notify mode - /etc/syconfig/php-fpm is deprecated (still used) - add /systemd/system/php-fpm.service.d [5.5.0-0.6.RC1] - update to 5.5.0RC1 - remove reference to apache in some sub-packages description - add option to disable json extension - drop most (very old) 'Obsoletes', add version to others [5.5.0-0.5.beta4] - update to 5.5.0beta4 - zend_extension doesn't requires full path - refresh patch for system libzip - drop opcache patch merged upstream - add BuildRequires libvpx-devel for WebP support in php-gd - php-fpm own /usr/share/fpm [5.5.0-0.4.beta3] - update to 5.5.0beta3 - allow wildcard in opcache.blacklist_filename and provide default /etc/php.d/opcache-default.blacklist - clean spec, use only spaces (no tab) [5.5.0-0.3.beta2] - clean old deprecated options [5.5.0-0.2.beta2] - update to 5.5.0beta2 - Zend Optimizer+ renamed to Zend OPcache - sync provided configuration with upstream [5.5.0-0.1.beta1] - update to 5.5.0beta1 http://fedoraproject.org/wiki/Features/Php55 - new Zend OPcache extension in php-opccache new sub-package - don't display XFAIL tests in report - use xz compressed tarball - build simplexml and xml extensions shared (moved in php-xml) - build bz2, calendar, ctype, exif, ftp, gettext, iconv sockets and tokenizer extensions shared (in php-common) - build gmp extension shared (in php-gmp new sub-package) - build shmop extension shared (moved in php-process) - drop some old compatibility provides (php-api, php-zend-abi, php-pecl-*) [5.4.13-1] - update to 5.4.13 - security fix for CVE-2013-1643 - Hardened build (links with -z now option) [ 5.4.13-0.2.RC1] - Remove %config from %{_sysconfdir}/rpm/macros.* (https://fedorahosted.org/fpc/ticket/259). [5.4.13-0.1.RC1] - update to 5.4.13RC1 - drop patches merged upstream [5.4.12-4] - add support for ppc64p7 arch (Power7 optimized) [5.4.12-3] - make ZTS build optional (still enabled) [5.4.12-2] - make php-mysql package optional and disabled [5.4.12-1] - update to 5.4.12 - security fix for CVE-2013-1635 - drop gdbm because of license incompatibility [5.4.12-0.6.RC2] - enable tokyocabinet and gdbm dba handlers [5.4.12-0.5.RC2] - update to 5.4.12RC2 [5.4.12-0.4.RC1] - upstream patch (5.4.13) to fix dval to lval conversion https://bugs.php.net/64142 [5.4.12-0.3.RC1] - upstream patch (5.4.13) for 2 failed tests [5.4.12-0.2.RC1] - fix buit-in web server on ppc64 (fdset usage) https://bugs.php.net/64128 [5.4.12-0.1.RC1] - update to 5.4.12RC1 [5.4.11-3] - rebuild for new libicu [5.4.11-2] - rebuild due to 'jpeg8-ABI' feature drop [5.4.11-1] - update to 5.4.11 [5.4.11-0.2.RC1] - fix php.conf to allow MultiViews managed by php scripts [5.4.11-0.1.RC1] - update to 5.4.11RC1 [5.4.10-1] - update to 5.4.10 - remove patches merged upstream [5.4.9-3] - drop 'Configure Command' from phpinfo output [5.4.9-2] - prevent php_config.h changes across (otherwise identical) rebuilds [5.4.9-1] - update to 5.4.9 [5.4.9-0.5.RC1] - switch back to upstream generated scanner/parser [5.4.9-0.4.RC1] - use _httpd_contentdir macro and fix php.gif path [5.4.9-0.3.RC1] - improve system libzip patch to use pkg-config [5.4.9-0.2.RC1] - use _httpd_moddir macro [5.4.9-0.1.RC1] - update to 5.4.9RC1 - improves php.conf (use FilesMatch + SetHandler) - improves filter (httpd module) - apply ldap_r patch on fedora >= 18 only [5.4.8-6] - clarify Licenses - missing provides xmlreader and xmlwriter - modernize spec - change php embedded library soname version to 5.4 [5.4.8-5] - fix _httpd_mmn macro definition [5.4.8-4] - fix mysql_sock macro definition [5.4.8-3] - fix installed headers [5.4.8-2] - use libldap_r for ldap extension [5.4.8-1] - update to 5.4.8 - define both session.save_handler and session.save_path - fix possible segfault in libxml (#828526) - php-fpm: create apache user if needed - use SKIP_ONLINE_TEST during make test - php-devel requires pcre-devel and php-cli (instead of php) [5.4.7-11] - provides php-phar - update systzdata patch to v10, timezone are case insensitive [5.4.7-10] - fix typo in systemd macro [5.4.7-9] - php-fpm: enable PrivateTmp - php-fpm: new systemd macros (#850268) - php-fpm: add upstream patch for startup issue (#846858) [5.4.7-8] - systemd integration, https://bugs.php.net/63085 - no odbc call during timeout, https://bugs.php.net/63171 - check sqlite3_column_table_name, https://bugs.php.net/63149 [5.4.7-7] - most failed tests explained (i386, x86_64) [5.4.7-6] - fix for http://bugs.php.net/63126 (#783967) [5.4.7-5] - patch to ensure we use latest libdb (not libdb4) [5.4.7-4] - really fix rhel tests (use libzip and libdb) [5.4.7-3] - fix test to enable zip extension on RHEL-7 [5.4.7-2] - remove session.save_path from php.ini move it to apache and php-fpm configuration files [5.4.7-1] - update to 5.4.7 http://www.php.net/releases/5_4_7.php - php-fpm: don't daemonize [5.4.6-2] - enable php-fpm on secondary arch (#849490) [5.4.6-1] - update to 5.4.6 - update to v9 of systzdata patch - backport fix for new libxml [5.4.5-1] - update to 5.4.5 [5.4.4-4] - also provide php(language)%{_isa} - define %{php_version} [5.4.4-3] - drop BR for libevent (#835671) - provide php(language) to allow version check [5.4.4-2] - add missing provides (core, ereg, filter, standard) [5.4.4-1] - update to 5.4.4 (CVE-2012-2143, CVE-2012-2386) - use /usr/lib/tmpfiles.d instead of /etc/tmpfiles.d - use /run/php-fpm instead of /var/run/php-fpm [5.4.3-1] - update to 5.4.3 (CVE-2012-2311, CVE-2012-2329) [5.4.2-1] - update to 5.4.2 (CVE-2012-1823) [5.4.1-1] - update to 5.4.1 [5.4.0-6] - rebuild for new icu - switch (conditionally) to libdb-devel [5.4.0-5] - fix Loadmodule with MPM event (use ZTS if not MPM worker) - split conf.d/php.conf + conf.modules.d/10-php.conf with httpd 2.4 [5.4.0-4] - rebuild for missing automatic provides (#807889) [5.4.0-3] - really use _httpd_mmn [5.4.0-2] - rebuild against httpd 2.4 - use _httpd_mmn, _httpd_apxs macros [5.4.0-1] - update to PHP 5.4.0 finale [5.4.0-0.4.RC8] - update to PHP 5.4.0RC8 [5.4.0-0.3.RC7] - update to PHP 5.4.0RC7 - provides env file for php-fpm (#784770) - add patch to use system libzip (thanks to spot) - don't provide INSTALL file [5.4.0-0.2.RC6] - all binaries in /usr/bin with zts prefix [5.4.0-0.1.RC6] - update to PHP 5.4.0RC6 https://fedoraproject.org/wiki/Features/Php54 [5.3.8-4.4] - fix systemd unit [5.3.8-4.3] - switch to systemd [5.3.8-4.2] - Rebuild for new libpng [5.3.8-3.2] - rebuild with new gmp without compat lib [5.3.8-3.1] - rebuild with new gmp [5.3.8-3] - revert is_a() to php <= 5.3.6 behavior (from upstream) with new option (allow_string) for new behavior [5.3.8-2] - add mysqlnd sub-package - drop patch4, use --libdir to use /usr/lib*/php/build - add patch to redirect mysql.sock (in mysqlnd) [5.3.8-1] - update to 5.3.8 http://www.php.net/ChangeLog-5.php#5.3.8 [5.3.7-1] - update to 5.3.7 http://www.php.net/ChangeLog-5.php#5.3.7 - merge php-zts into php (#698084) [5.3.6-4] - rebuild for net-snmp SONAME bump [5.3.6-3] - enable mhash extension (emulated by hash extension) [5.3.6-2] - rebuild for new MySQL client library [5.3.6-1] - update to 5.3.6 http://www.php.net/ChangeLog-5.php#5.3.6 - fix php-pdo arch specific requires [5.3.5-6] - disable zip extension per 'No Bundled Libraries' policy (#551513) [5.3.5-5] - rebuild for icu 4.6 [5.3.5-4] - fix systemd-units requires [5.3.5-3] - add tmpfiles.d configuration for php-fpm - add Arch specific requires/provides [5.3.5-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild [5.3.5-1] - update to 5.3.5 http://www.php.net/ChangeLog-5.php#5.3.5 - clean duplicate configure options [5.3.4-2] - rebuild against MySQL 5.5.8 - remove all RPM_SOURCE_DIR [5.3.4-1.1] - security patch from upstream for #660517 [5.3.4-1] - update to 5.3.4 http://www.php.net/ChangeLog-5.php#5.3.4 - move phpize to php-cli (see #657812) [5.3.3-5] - ghost /var/run/php-fpm (see #656660) - add filter_setup to not provides extensions as .so [5.3.3-4] - use mysql_config in libdir directly to avoid biarch build failures [5.3.3-3] - rebuild for new net-snmp [5.3.3-2] - add php-fpm sub-package [5.3.3-1] - PHP 5.3.3 released [5.3.2-3] - garbage collector upstream patches (#580236) [5.3.2-2] - rebuild for icu 4.4 [5.3.2-1] - PHP 5.3.2 Released! - remove mime_magic option (now provided by fileinfo, by emu) - add patch for http://bugs.php.net/50578 - remove patch for libedit (upstream) - add runselftest option to allow build without test suite [5.3.1-3] - update to v7 of systzdata patch [5.3.1-2] - fix build with autoconf 2.6x [5.3.1-1] - update to 5.3.1 - remove openssl patch (merged upstream) - add provides for php-pecl-json - add prod/devel php.ini in doc [5.3.0-7] - use libedit instead of readline to resolve licensing issues [5.3.0-6] - rebuilt with new openssl [5.3.0-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild [5.3.0-4] - rediff systzdata patch [5.3.0-3] - update to v6 of systzdata patch; various fixes [5.3.0-2] - update to v5 of systzdata patch; parses zone.tab and extracts timezone->{country-code,long/lat,comment} mapping table [5.3.0-1] - update to 5.3.0 - remove ncurses, dbase, mhash extensions - add enchant, sqlite3, intl, phar, fileinfo extensions - raise sqlite version to 3.6.0 (for sqlite3, build with --enable-load-extension) - sync with upstream 'production' php.ini [5.2.10-1] - update to 5.2.10 - add interbase sub-package [5.2.9-1] - update to 5.2.9 [5.2.8-10] - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild [5.2.8-9] - add recode support, -recode subpackage (#106755) - add -zts subpackage with ZTS-enabled build of httpd SAPI - adjust php.conf to use -zts SAPI build for worker MPM [5.2.8-8] - fix patch fuzz, renumber patches [5.2.8-7] - drop obsolete configure args - drop -odbc patch (#483690) [5.2.8-5] - split out sysvshm, sysvsem, sysvmsg, posix into php-process [5.2.8-4] - move wddx to php-xml, build curl shared in -common - remove BR for expat-devel, bogus configure option [5.2.8-3] - rebuild for new MySQL [5.2.8-2] - libtool 2 workaround for phpize (#476004) - add missing php_embed.h (#457777) [5.2.8-1] - update to 5.2.8 [5.2.7-1.1] - libtool 2 workaround [5.2.7-1] - update to 5.2.7 - enable pdo_dblib driver in php-mssql [5.2.6-7] - tweak Summary, thanks to Richard Hughes [5.2.6-6] - move gd_README to php-gd - update to r4 of systzdata patch; introduces a default timezone name of 'System/Localtime', which uses /etc/localtime (#469532) [5.2.6-5] - enable XPM support in php-gd - Fix BR for php-gd [5.2.6-4] - enable T1lib support in php-gd [5.2.6-3] - update to 5.2.6 - sync default php.ini with upstream - drop extension_dir from default php.ini, rely on hard-coded default, to make php-common multilib-safe (#455091) - update to r3 of systzdata patch [5.2.5-7] - split pspell extension out into php-spell (#443857) [5.2.5-6] - Autorebuild for GCC 4.3 [5.2.5-5] - ext/date: use system timezone database [5.2.5-4] - rebuild for libc-client bump [5.2.5-3] - Rebuild for openssl bump [5.2.5-2] - update to 5.2.5 [5.2.4-3] - correct pcre BR version (#333021) - restore metaphone fix (#205714) - add READMEs to php-cli [5.2.4-2] - update to 5.2.4 [5.2.3-9] - rebuild for fixed APR [5.2.3-8] - add ldconfig post/postun for -embedded (Hans de Goede) [5.2.3-7] - add php-embedded sub-package [5.2.3-6] - fix build with new glibc - fix License [5.2.3-5] - define php_extdir in macros.php [5.2.3-4] - obsolete php-dbase [5.2.3-3] - add mcrypt, mhash, tidy, mssql subpackages (Dmitry Butskoy) - enable dbase extension and package in -common [5.2.3-2] - update to 5.2.3 (thanks to Jeff Sheltren) [5.2.2-4] - fix php-pdo *_arg_force_ref global symbol abuse (#216125) [5.2.2-3] - rebuild against uw-imap-devel [5.2.2-2] - update to 5.2.2 - synch changes from upstream recommended php.ini [5.2.1-5] - enable SASL support in LDAP extension (#205772) [5.2.1-4] - drop mime_magic extension (deprecated by php-pecl-Fileinfo) [5.2.1-3] - fix regression in str_{i,}replace (from upstream) [5.2.1-2] - update to 5.2.1 - add Requires(pre) for httpd - trim %changelog to versions >= 5.0.0 [5.2.0-10] - bump default memory_limit to 32M (#220821) - mark config files noreplace again (#174251) - drop trailing dots from Summary fields - use standard BuildRoot - drop libtool15 patch (#226294) [5.2.0-9] - add php(api), php(zend-abi) provides (#221302) - package /usr/share/php and append to default include_path (#225434) [5.2.0-8] - fix filter.h installation path - fix php-zend-abi version (Remi Collet, #212804) [5.2.0-7] - rebuild again [5.2.0-6] - rebuild for net-snmp soname bump [5.2.0-5] - build json and zip shared, in -common (Remi Collet, #215966) - obsolete php-json and php-pecl-zip - build readline extension into /usr/bin/php* (#210585) - change module subpackages to require php-common not php (#177821) [5.2.0-4] - provide php-zend-abi (#212804) - add /etc/rpm/macros.php exporting interface versions - synch with upstream recommended php.ini [5.2.0-3] - update to 5.2.0 (#213837) - php-xml provides php-domxml (#215656) - fix php-pdo-abi provide (#214281) [5.1.6-4] - rebuild for curl soname bump - add build fix for curl 7.16 API [5.1.6-3] - from upstream: add safety checks against integer overflow in _ecalloc [5.1.6-2] - update to 5.1.6 (security fixes) - bump default memory_limit to 16M (#196802) [5.1.4-8.1] - rebuild [5.1.4-8] - Provide php-posix (#194583) - only provide php-pcntl from -cli subpackage - add missing defattr's (thanks to Matthias Saou) [5.1.4-7] - move Obsoletes for php-openssl to -common (#194501) - Provide: php-cgi from -cli subpackage [5.1.4-6] - split out php-cli, php-common subpackages (#177821) - add php-pdo-abi version export (#193202) [5.1.4-5.1] - rebuilt for new libnetsnmp [5.1.4-5] - provide mod_php (#187891) - provide php-cli (#192196) - use correct LDAP fix (#181518) - define _GNU_SOURCE in php_config.h and leave it defined - drop (circular) dependency on php-pear [5.1.4-3] - update to 5.1.4 [5.1.3-3] - update to 5.1.3 [5.1.2-5] - provide php-api (#183227) - add provides for all builtin modules (Tim Jackson, #173804) - own %{_libdir}/php/pear for PEAR packages (per #176733) - add obsoletes to allow upgrade from FE4 PDO packages (#181863) [5.1.2-4.3] - bump again for double-long bug on ppc(64) [5.1.2-4.1] - rebuilt for new gcc4.1 snapshot and glibc changes [5.1.2-4] - rebuild for new libc-client soname [5.1.2-3] - only build xmlreader and xmlwriter shared (#177810) [5.1.2-2] - update to 5.1.2 [5.1.1-8] - rebuild again [5.1.1-7] - rebuild for new net-snmp [5.1.1-6] - enable short_open_tag in default php.ini again (#175381) * Fri Dec 09 2005 Jesse Keating <jkeating@redhat.com> - rebuilt [5.1.1-5] - require net-snmp for php-snmp (#174800) [5.1.1-4] - add /usr/share/pear back to hard-coded include_path (#174885) [5.1.1-3] - rebuild for httpd 2.2 [5.1.1-2] - update to 5.1.1 - remove pear subpackage - enable pdo extensions (php-pdo subpackage) - remove non-standard conditional module builds - enable xmlreader extension [5.0.5-6] - rebuilt against new openssl [5.0.5-5] - pear: update to XML_RPC 1.4.4, XML_Parser 1.2.7, Mail 1.1.9 (#172528) [5.0.5-4] - rebuild for new libnetsnmp [5.0.5-3] - update to 5.0.5 - add fix for upstream #34435 - devel: require autoconf, automake (#159283) - pear: update to HTTP-1.3.6, Mail-1.1.8, Net_SMTP-1.2.7, XML_RPC-1.4.1 - fix imagettftext et al (upstream, #161001) [5.0.4-11] - ldap: restore ldap_start_tls() function [5.0.4-10] - disable RPATHs in shared extensions (#156974) [5.0.4-9] - build simplexml_import_dom even with shared dom (#156434) - prevent truncation of copied files to ~2Mb (#155916) - install /usr/bin/php from CLI build alongside CGI - enable sysvmsg extension (#142988) [5.0.4-8] - prevent build of builtin dba as well as shared extension [5.0.4-7] - split out dba and bcmath extensions into subpackages - BuildRequire gcc-c++ to avoid AC_PROG_CXX{,CPP} failure (#155221) - pear: update to DB-1.7.6 - enable FastCGI support in /usr/bin/php-cgi (#149596) [5.0.4-6] - build /usr/bin/php with the CLI SAPI, and add /usr/bin/php-cgi, built with the CGI SAPI (thanks to Edward Rudd, #137704) - add php(1) man page for CLI - fix more test cases to use -n when invoking php [5.0.4-5] - rebuild for new libpq soname [5.0.4-4] - bundle from PEAR: HTTP, Mail, XML_Parser, Net_Socket, Net_SMTP - snmp: disable MSHUTDOWN function to prevent error_log noise (#153988) - mysqli: add fix for crash on x86_64 (Georg Richter, upstream #32282) [5.0.4-3] - build shared objects as PIC (#154195) [5.0.4-2] - fix PEAR installation and bundle PEAR DB-1.7.5 package [5.0.4-1] - update to 5.0.4 (#153068) - add .phps AddType to php.conf (#152973) - better gcc4 fix for libxmlrpc [5.0.3-5] - BuildRequire mysql-devel >= 4.1 - don't mark php.ini as noreplace to make upgrades work (#152171) - fix subpackage descriptions (#152628) - fix memset(,,0) in Zend (thanks to Dave Jones) - fix various compiler warnings in Zend [5.0.3-4] - package mysqli extension in php-mysql - really enable pcntl (#142903) - don't build with --enable-safe-mode (#148969) - use 'Instant Client' libraries for oci8 module (Kai Bolay, #149873) [5.0.3-3] - fix build with GCC 4 [5.0.3-2] - install the ext/gd headers (#145891) - enable pcntl extension in /usr/bin/php (#142903) - add libmbfl array arithmetic fix (dcb314@hotmail.com, #143795) - add BuildRequire for recent pcre-devel (#147448) [5.0.3-1] - update to 5.0.3 (thanks to Robert Scheck et al, #143101) - enable xsl extension (#142174) - package both the xsl and dom extensions in php-xml - enable soap extension, shared (php-soap package) (#142901) - add patches from upstream 5.0 branch: * Zend_strtod.c compile fixes * correct php_sprintf return value usage [5.0.2-8] - update for db4-4.3 (Robert Scheck, #140167) - build against mysql-devel - run tests in %check [5.0.2-7] - truncate changelog at 4.3.1-1 - merge from 4.3.x package: - enable mime_magic extension and Require: file (#130276) [5.0.2-6] - fix dom/sqlite enable/without confusion [5.0.2-5] - fix phpize installation for lib64 platforms - add fix for segfault in variable parsing introduced in 5.0.2 [5.0.2-4] - update to 5.0.2 (#127980) - build against mysqlclient10-devel - use new RTLD_DEEPBIND to load extension modules - drop explicit requirement for elfutils-devel - use AddHandler in default conf.d/php.conf (#135664) - 'fix' round() fudging for recent gcc on x86 - disable sqlite pending audit of warnings and subpackage split [5.0.1-4] - don't build dom extension into 2.0 SAPI [5.0.1-3] - ExclusiveArch: x86 ppc x86_64 for the moment [5.0.1-2] - fix default extension_dir and conf.d/php.conf [5.0.1-1] - update to 5.0.1 - only build shared modules once - put dom extension in php-dom subpackage again - move extension modules into %{_libdir}/php/modules - don't use --with-regex=system, it's ignored for the apache* SAPIs * Wed Aug 11 2004 Tom Callaway <tcallawa@redhat.com> - Merge in some spec file changes from Jeff Stern (jastern@uci.edu) * Mon Aug 09 2004 Tom Callaway <tcallawa@redhat.com> - bump to 5.0.0 - add patch to prevent clobbering struct re_registers from regex.h - remove domxml references, replaced with dom now built-in - fix php.ini to refer to php5 not php4 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-31631 CVE-2022-31629 CVE-2022-31630 CVE-2022-31628 CVE-2022-37454 Oracle Linux 8 [20220126gitbb1bba3d77-4] - edk2-openssl-update.patch [bz#2164531 bz#2164543 bz#2164558 bz#2164581] - edk2-rh-openssl-add-crypto-bn-rsa_sup_mul.c-to-file-list.patch [bz#2164531 bz#2164543 bz#2164558 bz#2164581] - Resolves: bz#2164531 (CVE-2023-0286 edk2: openssl: X.400 address type confusion in X.509 GeneralName [rhel-8]) - Resolves: bz#2164543 (CVE-2022-4304 edk2: openssl: timing attack in RSA Decryption implementation [rhel-8]) - Resolves: bz#2164558 (CVE-2023-0215 edk2: openssl: use-after-free following BIO_new_NDEF [rhel-8]) - Resolves: bz#2164581 (CVE-2022-4450 edk2: openssl: double free after calling PEM_read_bio_ex [rhel-8]) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-0286 CVE-2022-4450 CVE-2022-4304 CVE-2023-0215 Oracle Linux 8 [0.8.4-37] - Fix bugzilla linked to the changes (was previously linked to the wrong bug, 2162537) - Resolves: bz #2166468 [0.8.4-36] - Add 0129-libmultipath-select-resize-action-even-if-reload-is-.patch - Add 0130-libmultipath-cleanup-ACT_CREATE-code-in-select_actio.patch - Add 0131-libmultipath-keep-renames-from-stopping-other-multip.patch - Resolves: bz #2166468 [0.8.4-35] - Add 0127-libmultipath-don-t-leak-memory-on-invalid-strings.patch - Add 0128-libmutipath-validate-the-argument-count-of-config-st.patch - Resolves: bz #2155560 [0.8.4-34] - Add 0126-libmultipath-copy-mpp-hwe-from-pp-hwe.patch * Fixes bz #2126714 - Cleanup multiple CI tests - Resolves: bz #2126714 [0.8.4-33] - Add 0125-multipath-add-historical-service-time-to-the-man-pag.patch * Fixes bz #2141996 - Modify tests/multipath_conf_syntax/main.sh * fix unrelated test error - Resolves: bz #2141996 [0.8.4-32] - Add 0116-kpartx-hold-device-open-until-partitions-have-been-c.patch * Fixes bz #2128885 - Add 0117-libmultipath-cleanup-remove_feature.patch - Add 0118-libmultipath-cleanup-add_feature.patch - Add 0119-multipath-tests-tests-for-adding-and-removing-featur.patch - Add 0120-libmultipath-fix-queue_mode-feature-handling.patch - Add 0121-multipath-tests-tests-for-reconcile_features_with_qu.patch - Add 0122-libmultipath-prepare-proto_id-for-use-by-non-scsi-de.patch - Add 0123-libmultipath-get-nvme-path-transport-protocol.patch - Add 0124-libmultipath-enforce-queue_mode-bio-for-nmve-tcp-pat.patch * Fixes bz #2022359 - Resolves: bz #2022359, #2128885 [0.8.4-31] - Add 0114-multipathd-ignore-duplicated-multipathd-command-keys.patch * Fixes bz #2133996 - Add 0115-multipath-tools-use-run-instead-of-dev-shm.patch * Fixes bz #2133990 - Resolves: bz #2133990, #2133996 [0.8.4-30] - Add 0111-multipathd-factor-out-the-code-to-flush-a-map-with-n.patch - Add 0112-libmultipath-return-success-if-we-raced-to-remove-a-.patch - Add 0113-multipathd-Handle-losing-all-path-in-update_map.patch - Resolves: bz #2110485 [0.8.4-29] - Rebuild for rhel-8.8.0 - Resolves: bz #2123446 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-41973 Oracle Linux 8 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-23454 CVE-2022-1679 CVE-2022-42722 CVE-2022-20141 CVE-2022-1462 CVE-2022-1789 CVE-2022-3524 CVE-2022-3566 CVE-2022-2196 CVE-2021-26341 CVE-2022-3707 CVE-2022-3623 CVE-2022-4129 CVE-2023-0394 CVE-2022-39189 CVE-2022-43750 CVE-2022-41218 CVE-2021-33656 CVE-2022-3564 CVE-2022-39188 CVE-2022-3628 CVE-2022-25265 CVE-2022-30594 CVE-2023-1195 CVE-2023-1582 CVE-2022-2663 CVE-2022-3028 CVE-2022-42720 CVE-2022-47929 CVE-2022-3522 CVE-2022-42721 CVE-2023-0461 CVE-2022-3619 CVE-2022-3625 CVE-2022-42703 CVE-2021-33655 CVE-2022-3239 CVE-2022-3567 CVE-2022-41674 Oracle Linux 8 [7.61.1-30] - fix HTTP multi-header compression denial of service (CVE-2023-23916) [7.61.1-29] - h2: lower initial window size to 32 MiB (#2166254) [7.61.1-28] - smb/telnet: fix use-after-free when HTTP proxy denies tunnel (CVE-2022-43552) [7.61.1-27] - upon HTTP_1_1_REQUIRED, retry the request with HTTP/1.1 (#2139337) [7.61.1-26] - control code in cookie denial of service (CVE-2022-35252) LOW Copyright 2023 Oracle, Inc. CVE-2022-43552 CVE-2022-35252 Oracle Linux 8 [5.8-27.0.1] - fix error index value when snmpget is used a proxy pass [Orabug: 34905643] [1:5.8-27] - fix memory leak due of proc file creating (#2105957) - fix CVE-2022-44792 and CVE-2022-44793 (#2141901) and (#2141905) - fix memory leak when ipv6 disable set to 1 (#2151537) - fix proxy timeout issue (#2160723) [1:5.8-26] - backport two memory leaks from upstream (#2134635) MODERATE Copyright 2023 Oracle, Inc. CVE-2022-44793 CVE-2022-44792 Oracle Linux 8 LOW Copyright 2023 Oracle, Inc. CVE-2022-1615 Oracle Linux 8 [12:4.3.6-49] - Fix for CVE-2022-2928 - Fix for CVE-2022-2929 - send back dhcp6.vendor-opts again (#2142024) MODERATE Copyright 2023 Oracle, Inc. CVE-2022-2929 CVE-2022-2928 Oracle Linux 8 [32:9.11.36-8] - Correct regression preventing bind-dyndb-ldap build (#2133889) [32:9.11.36-7] - Prevent excessive resource use while processing large delegations. (CVE-2022-2795) [32:9.11.36-6] - Prevent freeing zone during statistics rendering (#2101712) MODERATE Copyright 2023 Oracle, Inc. CVE-2022-2795 Oracle Linux 8 [3.3.3-5] - Fix for CVE-2022-36227 LOW Copyright 2023 Oracle, Inc. CVE-2022-36227 Oracle Linux 8 [1:26.1-9] - Fix MH-E mail composition with GNU Mailutils (#1991156) [1:26.1-8] - Fix ctags local command execute vulnerability (#2149386) MODERATE Copyright 2023 Oracle, Inc. CVE-2022-45939 Oracle Linux 8 [0.10.15-4.0.1.el8_8.1] - Replace HAM-logo.png with a generic one [0.10.15-4.el8_8.1] - Fix displaying differences between configuration checkpoints in pcs config checkpoint diff command - Fix pcs stonith update-scsi-devices command which was broken since Pacemaker-2.1.5-rc1 - Updated bundled rubygem rack - Resolves: rhbz#2180700 rhbz#2180706 rhbz#2180713 rhbz#2180974 [0.10.15-4] - Fixed enabling/disabling sbd when cluster is not running - Added BuildRequires: pam - needed for tier0 tests during build - Resolves: rhbz#2166243 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-27539 CVE-2023-27530 Oracle Linux 8 delve [1.9.1-1.0.1] - Disable DWARF compression which has issues (Alex Burmashev) [1.9.1-1] - Rebase to 1.9.1 - Related: rhbz#2131026 golang [1.19.6-1] - Rebase to Go 1.19.6 - Resolves: rhbz#2174430 [1.19.4-2] - Fix memory leaks in EVP_{sign,verify}_raw - Resolves: rhbz#2132767 go-toolset [1.19.6-1] - Rebase to Go 1.19.6 - Resolves: rhbz#2174430 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-41725 CVE-2022-41724 Oracle Linux 8 mecab [0.996-2.12] - Bump version for 'mysql' module rebuild We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'AppStream' repo - Resolves: #2180411 mecab-ipadic mysql [8.0.32-1] - Update to MySQL 8.0.32 [8.0.31-1] - Update to MySQL 8.0.31 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-21875 CVE-2023-21917 CVE-2022-21604 CVE-2022-39400 CVE-2023-21863 CVE-2023-21871 CVE-2022-21611 CVE-2022-21617 CVE-2023-21836 CVE-2023-21868 CVE-2023-21879 CVE-2022-39408 CVE-2023-21870 CVE-2022-21608 CVE-2023-21887 CVE-2022-21625 CVE-2023-21867 CVE-2023-21877 CVE-2023-21878 CVE-2023-21880 CVE-2023-21882 CVE-2023-21883 CVE-2022-39410 CVE-2023-21869 CVE-2023-21912 CVE-2022-21633 CVE-2022-21640 CVE-2022-21599 CVE-2022-21632 CVE-2023-21864 CVE-2023-21865 CVE-2023-21876 CVE-2022-21637 CVE-2022-21594 CVE-2023-21873 CVE-2023-21874 CVE-2023-21881 Oracle Linux 8 [4.9-2.0.1.2] - Add libreswan-oracle.patch to detect Oracle Linux distro [4.9-2.2] - Update libreswan-4.9-2176248-authby-rsasig.patch [4.9-2.1] - Resolves: rhbz#2187647 authby=rsasig fails in FIPS policy [4.9-2] - Fix CVE-2023-23009: remote DoS via crafted TS payload with an incorrect selector length (rhbz#2186127) MODERATE Copyright 2023 Oracle, Inc. CVE-2023-23009 Oracle Linux 8 [1.2.0-1] - New release 1.2.0 - Fix CVE-2023-25563: multiple out-of-bounds read when decoding NTLM fields - Fix CVE-2023-25564: memory corruption when decoding UTF16 strings - Fix CVE-2023-25565: incorrect free when decoding target information - Fix CVE-2023-25566: memory leak when parsing usernames - Fix CVE-2023-25567: out-of-bounds read when decoding target information - Resolves: rhbz#2181313 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-25564 CVE-2023-25563 CVE-2023-25565 CVE-2023-25566 CVE-2023-25567 Oracle Linux 8 [1:26.1-10.2] - Bump release [1:26.1-10.1] - Bump release [1:26.1-10] - Fix ob-latex.el command injection vulnerability (#2180586) [1:26.1-9] - Fix MH-E mail composition with GNU Mailutils (#1991156) [1:26.1-8] - Fix ctags local command execute vulnerability (#2149386) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-2491 Oracle Linux 8 [7.61.1-30.el8_8.2] - sftp: do not specify O_APPEND when not in append mode (#2187717) [7.61.1-30.el8_8.1] - fix FTP too eager connection reuse (CVE-2023-27535) MODERATE Copyright 2023 Oracle, Inc. CVE-2023-27535 Oracle Linux 8 [4.9-3.0.1] - Add libreswan-oracle.patch to detect Oracle Linux distro [4.9-3] - Fix CVE-2023-30570: Malicious IKEv1 Aggressive Mode packets can crash libreswan - Resolves: rhbz#2187179 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-2295 Oracle Linux 8 [2.38.5-1.3] - Restore libwpe and wpebackend-fdo dependencies Related: #2185741 (sort of) [2.38.5-1.2] - Disable libwpe and wpebackend-fdo dependencies Related: #2185741 (sort of) [2.38.5-1.1] - Add patch for CVE-2023-28205 Resolves: #2185741 [2.38.5-1] - Update to 2.38.5 Related: #2127468 [2.38.4-1] - Update to 2.38.4 Related: #2127468 [2.38.3-1] - Update to 2.38.3 Related: #2127468 [2.38.2-1] - Update to 2.38.2 Related: #2127468 [2.38.1-2] - Fix crashes on aarch64 Enable WPE renderer Related: #2127468 [2.38.1-1] - Update to 2.38.1 Related: #2127468 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-2203 Oracle Linux 8 [1.6.1-6.1] - Resolves: #2196572 - CVE-2022-25147 apr-util: out-of-bounds writes in the apr_base64 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-25147 Oracle Linux 7 [102.11.0-2.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.11.0-2] - Update to 102.11.0 build2 [102.11.0-1] - Update to 102.11.0 build1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-32207 CVE-2023-32211 CVE-2023-32215 CVE-2023-32213 CVE-2023-32206 CVE-2023-32205 CVE-2023-32212 Oracle Linux 9 [102.11.0-2.0.1] - Updated homepages to use https [Orabug: 34648274] [102.11.0-2] - Update to 102.11.0 build2 [102.11.0-1] - Update to 102.11.0 build1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-32207 CVE-2023-32215 CVE-2023-32212 CVE-2023-32205 CVE-2023-32206 CVE-2023-32211 CVE-2023-32213 Oracle Linux 7 [1.5.2-6.0.1.1] - Rebuild bumping release [1.5.2-6.1] - Resolves: #2196120 - CVE-2022-25147 apr-util: out-of-bounds writes in the apr_base64 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-25147 Oracle Linux 9 [1.6.1-20.1] - Resolves: #2196575 - CVE-2022-25147 apr-util: out-of-bounds writes in the apr_base64 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-25147 Oracle Linux 9 [4.9-4.0.1] - Add libreswan-oracle.patch to detect Oracle Linux distro [4.9-4] - Just bumping up the version as an incorrect 9.3 build was created. - Related: rhbz#2187171 [4.9-3] - Fix CVE-2023-30570:Malicious IKEv1 Aggressive Mode packets can crash libreswan - Resolves: rhbz#2187171 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-2295 Oracle Linux 9 [102.11.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.11.0-1] - Update to 102.11.0 build1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-32213 CVE-2023-32215 CVE-2023-32205 CVE-2023-32212 CVE-2023-32206 CVE-2023-32211 CVE-2023-32207 Oracle Linux 7 [102.11.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [102.11.0-1] - Update to 102.11.0 build1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-32207 CVE-2023-32205 CVE-2023-32215 CVE-2023-32212 CVE-2023-32211 CVE-2023-32206 CVE-2023-32213 Oracle Linux 8 [102.11.0-2.0.1] - Updated homepages to use https [Orabug: 34648274] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.11.0-2] - Update to 102.11.0 build2 [102.11.0-1] - Update to 102.11.0 build1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-32207 CVE-2023-32206 CVE-2023-32212 CVE-2023-32215 CVE-2023-32205 CVE-2023-32213 CVE-2023-32211 cpe:/a:oracle:linux:8::appstream Oracle Linux 8 [102.11.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.11.0-1] - Update to 102.11.0 build1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-32207 CVE-2023-32206 CVE-2023-32212 CVE-2023-32215 CVE-2023-32211 CVE-2023-32205 CVE-2023-32213 Oracle Linux 9 [2.39.3-1] - Update to 2.39.3 - Resolves: #2188352, #2188361, #2189976, #2189977 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-25815 CVE-2023-25652 CVE-2023-22490 CVE-2023-23946 CVE-2023-29007 Oracle Linux 8 [2.39.3-1] - Update to 2.39.3 - Resolves: #2188364, #2188373, #2190157, #2190158 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-22490 CVE-2023-23946 CVE-2023-29007 CVE-2023-25652 CVE-2023-25815 Oracle Linux 7 [1.8.3.1-25] - Fixes CVE-2023-25652 and CVE-2023-29007 - Resolves: #2188354, #2188365 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-25652 CVE-2023-29007 Oracle Linux 9 [20230821] - Create new 20230821 release for OL8 which includes the following fixed CVEs: CVE-2019-14560 - Update to OpenSSL 1.1.1v which includes the following fixed CVEs: CVE-2023-3817 CVE-2023-3446 CVE-2023-2650 CVE-2023-0465 CVE-2023-0466 CVE-2023-0464 CVE-2023-0286 CVE-2023-0215 CVE-2022-4450 CVE-2022-4304 CVE-2022-2097 CVE-2022-2068 CVE-2022-1292 CVE-2022-0778 CVE-2021-4160 CVE-2021-3712 CVE-2021-3711 CVE-2021-3450 CVE-2021-3449 CVE-2021-23841 CVE-2021-23840 CVE-2020-1971 CVE-2020-1967 CVE-2019-1551 CVE-2019-1563 CVE-2019-1549 CVE-2019-1547 CVE-2019-1552 CVE-2019-1543 CVE-2018-0734 CVE-2018-0735 [20230613] - Create new 20230613.cvm release for OL8 [20230227] - Create new 20230227.cvm release for OL8 which includes the following fixed CVEs: CVE-2021-38578 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-4450 CVE-2023-0215 CVE-2023-0286 CVE-2022-4304 cpe:/a:oracle:linux:9::developer_kvm_utils cpe:/a:oracle:linux:9::kvm_utils Oracle Linux 8 [20230821] - Create new 20230821 release for OL8 which includes the following fixed CVEs: CVE-2019-14560 - Update to OpenSSL 1.1.1v which includes the following fixed CVEs: CVE-2023-3817 CVE-2023-3446 CVE-2023-2650 CVE-2023-0465 CVE-2023-0466 CVE-2023-0464 CVE-2023-0286 CVE-2023-0215 CVE-2022-4450 CVE-2022-4304 CVE-2022-2097 CVE-2022-2068 CVE-2022-1292 CVE-2022-0778 CVE-2021-4160 CVE-2021-3712 CVE-2021-3711 CVE-2021-3450 CVE-2021-3449 CVE-2021-23841 CVE-2021-23840 CVE-2020-1971 CVE-2020-1967 CVE-2019-1551 CVE-2019-1563 CVE-2019-1549 CVE-2019-1547 CVE-2019-1552 CVE-2019-1543 CVE-2018-0734 CVE-2018-0735 [20230613] - Create new 20230613.cvm release for OL8 [20230227] - Create new 20230227.cvm release for OL8 which includes the following fixed CVEs: CVE-2021-38578 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-0215 CVE-2023-0286 CVE-2022-4450 CVE-2022-4304 cpe:/a:oracle:linux:8::distro_builder cpe:/a:oracle:linux:8::kvm_appstream Oracle Linux 9 golang [1.19.9-2] - Fix TestEncryptOAEP and TLS failures in FIPS mode - Resolves: rhbz#2204476 [1.19.9-1] - Rebase to Go 1.19.9 - Resolves: rhbz#2204476 go-toolset [1.19.9-1] - Update to Go 1.19.9 - Related: rhbz#2204476 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-24540 Oracle Linux 8 delve [1.9.1-1.0.1] - Disable DWARF compression which has issues (Alex Burmashev) [1.9.1-1] - Rebase to 1.9.1 - Related: rhbz#2131026 golang [1.19.9-1] - Rebase to Go 1.19.9 - Resolves: rhbz#2204473 go-toolset [1.19.9-1] - Rebase to Go 1.19.9 - Resolves: rhbz#2204473 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-24540 Oracle Linux 8 [4.18.0-477.13.1_8.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3 - Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652] [4.18.0-477.13.1_8] - netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196147 2196146] {CVE-2023-32233} [4.18.0-477.12.1_8] - redhat/configs: Fix incorrect configs location and content (Vladis Dronov) - wifi: iwlwifi: mvm: protect TXQ list manipulation (Jose Ignacio Tornos Martinez) [2183471 2152168] - wifi: iwlwifi: mvm: fix mvmtxq->stopped handling (Jose Ignacio Tornos Martinez) [2183471 2152168] - migrate: grab the compound head in migration_entry_wait_on_locked (Nico Pache) [2189629 2188249] - redhat/configs: Fix DEBUG_BLK_CGROUP and BFQ_CGROUP_DEBUG configs (Vladis Dronov) - redhat: switch release to zstream (Lucas Zampieri) [4.18.0-477.11.1_8] - crypto: drbg - Only fail when jent is unavailable in FIPS mode (Vladis Dronov) [2181730 2175712] - crypto: jitter - permanent and intermittent health errors (Vladis Dronov) [2181730 2175712] - crypto: jitter - quit sample collection loop upon RCT failure (Vladis Dronov) [2181730 2175712] - crypto: jitter - don't limit ->health_failure check to FIPS mode (Vladis Dronov) [2181730 2175712] - crypto: jitter - drop kernel-doc notation (Vladis Dronov) [2181730 2175712] - qede: avoid uninitialized entries in coal_entry array (Michal Schmidt) [2176104 2160054] - qede: fix interrupt coalescing configuration (Jonathan Toppins) [2176104 2160054] - crypto: qat - add support for 402xx devices (Vladis Dronov) [2176850 2144529] - crypto: qat - drop log level of msg in get_instance_node() (Vladis Dronov) [2176850 2144529] - crypto: qat - fix out-of-bounds read (Vladis Dronov) [2176850 2144529] - Documentation: qat: change kernel version (Vladis Dronov) [2176850 2144529] - crypto: qat - add qat_zlib_deflate (Vladis Dronov) [2176850 2144529] - crypto: qat - extend buffer list logic interface (Vladis Dronov) [2176850 2144529] - crypto: qat - fix spelling mistakes from 'bufer' to 'buffer' (Vladis Dronov) [2176850 2144529] - crypto: qat - add resubmit logic for decompression (Vladis Dronov) [2176850 2144529] - crypto: acomp - define max size for destination (Vladis Dronov) [2176850 2144529] - crypto: qat - enable deflate for QAT GEN4 (Vladis Dronov) [2176850 2144529] - crypto: qat - expose deflate through acomp api for QAT GEN2 (Vladis Dronov) [2176850 2144529] - crypto: qat - rename and relocate GEN2 config function (Vladis Dronov) [2176850 2144529] - crypto: qat - relocate qat_algs_alloc_flags() (Vladis Dronov) [2176850 2144529] - crypto: qat - relocate backlog related structures (Vladis Dronov) [2176850 2144529] - crypto: qat - extend buffer list interface (Vladis Dronov) [2176850 2144529] - crypto: qat - generalize crypto request buffers (Vladis Dronov) [2176850 2144529] - crypto: qat - change bufferlist logic interface (Vladis Dronov) [2176850 2144529] - crypto: qat - rename bufferlist functions (Vladis Dronov) [2176850 2144529] - crypto: qat - relocate bufferlist logic (Vladis Dronov) [2176850 2144529] - crypto: qat - Use helper to set reqsize (Vladis Dronov) [2176850 2144529] - crypto: kpp - Add helper to set reqsize (Vladis Dronov) [2176850 2144529] - crypto: qat - fix error return code in adf_probe (Vladis Dronov) [2176850 2144529] - crypto: qat - remove ADF_STATUS_PF_RUNNING flag from probe (Vladis Dronov) [2176850 2144529] - sched/core: Fix arch_scale_freq_tick() on tickless systems (Phil Auld) [2188067 2184083] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-32233 __Affected_cpe_list__ Oracle Linux 9 [1.28.7-11.0.1] - header/footer not being printed in banner page. [Orabug: 28265099] (isaac.chen@oracle.com) - Fixes [Orabug: 29163824] source indentation not following convention (isaac.chen@oracle.com) [1.28.7-11.1] - CVE-2023-24805 cups-filters: remote code execution in cups-filters, beh CUPS backend IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-24805 __Affected_cpe_list__ Oracle Linux 8 [1.20.0-29.0.1] - header/footer not being printed in banner page. [Orabug: 28265099] (isaac.chen@oracle.com) - Fixes [Orabug: 29163824] source indentation not following convention (isaac.chen@oracle.com) [1.20.0-29.2] - CVE-2023-24805 cups-filters: remote code execution in cups-filters, beh CUPS backend IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-24805 __Affected_cpe_list__ Oracle Linux 9 [2.38.5-1.2] - Add patch for CVE-2023-28204 Resolves: #2209747 - Add patch for CVE-2023-32373 Resolves: #2209730 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-32373 CVE-2023-28204 __Affected_cpe_list__ Oracle Linux 8 [2.38.5-1.4] - Add patch for CVE-2023-28204 Resolves: #2209744 - Add patch for CVE-2023-32373 Resolves: #2209727 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-28204 CVE-2023-32373 __Affected_cpe_list__ Oracle Linux 7 [1:24.3-23.1] - Fix htmlfontify.el command injection vulnerability (#2175177) MODERATE Copyright 2023 Oracle, Inc. CVE-2022-48339 __Affected_cpe_list__ Oracle Linux 6 [2.6.6-68.0.3] - ASCII newline and tab characters are stripped from the URL [CVE-2022-0391][Orabug: 35479836] - Start stripping C0 control and space chars in urlsplit [CVE-2023-24329][Orabug: 35479836] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-0391 CVE-2023-24329 cpe:/a:oracle:linux:6:10:ELS Oracle Linux 7 [2.7.5-93.0.1] - Add Oracle Linux distribution in platform.py [orabug 20812544] [2.7.5-93] - Fix for CVE-2023-24329 Resolves: rhbz#2173917 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-24329 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7::optional_latest cpe:/a:oracle:linux:7:9:patch Oracle Linux 7 [3.6.8-19.0.1] - Remove the 'getfile' feature of pydoc [Orabug: 33182027][CVE-2021-3426] - Fix buffer overflow in PyCArg_repr [Orabug: 32551171][CVE-2021-3177] - Add Oracle Linux distribution in platform.py [Orabug: 20812544] [3.6.8-19] - Security fix for CVE-2023-24329 - Fix the test suite support for Expat >= 2.4.5 Resolves: rhbz#2173917 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-24329 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7::optional_latest cpe:/a:oracle:linux:7:9:patch Oracle Linux 9 [1.17.1-5.1] - Resolves: rhbz#2209519 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-9.2.0.z] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-32067 cpe:/a:oracle:linux:9::appstream cpe:/o:oracle:linux:9::baseos_latest cpe:/o:oracle:linux:9:2:baseos_patch Oracle Linux 7 [102.12.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [102.12.0-1] - Update to 102.12.0 build1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-34414 CVE-2023-34416 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7::optional_latest cpe:/a:oracle:linux:7:9:patch Oracle Linux 9 nodejs [1:18.14.2-3] - Update bundled c-ares to 1.19.1 Resolves: CVE-2023-31124 CVE-2023-31130 CVE-2023-31147 CVE-2023-32067 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-31130 CVE-2023-32067 CVE-2023-31147 CVE-2023-31124 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::appstream_developer cpe:/a:oracle:linux:9:2:appstream_base cpe:/a:oracle:linux:9:1:appstream_base Oracle Linux 7 [102.12.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.12.0-1] - Update to 102.12.0 build1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-34414 CVE-2023-34416 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7::optional_latest cpe:/a:oracle:linux:7:9:patch Oracle Linux 9 [6.0.118-1.0.1] - Add missing Oracle Linux Runtime IDs [6.0.118-1] - Update to .NET SDK 6.0.118 and Runtime 6.0.18 - Resolves: RHBZ#2212379 [6.0.117-1] - Update to .NET SDK 6.0.117 and Runtime 6.0.17 - Resolves: RHBZ#2190264 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-24936 CVE-2023-29337 CVE-2023-33128 CVE-2023-29331 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 8 [6.0.118-1.0.1] - Add missing Oracle Linux Runtime IDs [6.0.118-1] - Update to .NET SDK 6.0.118 and Runtime 6.0.18 - Resolves: RHBZ#2212378 [6.0.117-2] - Update to .NET SDK 6.0.117 and Runtime 6.0.17 - Resolves: RHBZ#2190262 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-29331 CVE-2023-29337 CVE-2023-24936 CVE-2023-33128 cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 8 [1.13.0-6.1] - Resolves: rhbz#2209516 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-8.8.0.z] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-32067 cpe:/o:oracle:linux:8::baseos_latest cpe:/o:oracle:linux:8:8:baseos_patch Oracle Linux 9 [3.11.2-2.1] - Security fix for CVE-2023-24329 Resolves: rhbz#2173917 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-24329 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 9 [1:16.19.1-2] - Update bundled c-ares to 1.19.1 Resolves: CVE-2023-31124 CVE-2023-31130 CVE-2023-31147 CVE-2023-32067 [1:16.19.1-1] - Rebase to 16.19.1 - Resolves: rhbz#2153714 - Resolves: CVE-2023-23918 CVE-2023-23919 CVE-2023-23936 CVE-2023-24807 CVE-2023-23920 - Resolves: CVE-2022-25881 CVE-2022-4904 [1:16.18.1-3] - Update sources of undici WASM blobs Resolves: rhbz#2151617 [1:16.18.1-2] - Add back libs and v8-devel subpackages - Related: RHBZ#2121126 - Record previously fixed CVE - Resolves: CVE-2021-44906 [1:16.18.1-1] - Rebase + CVEs - Resolves: #2142808 - Resolves: #2142826, #2131745, #2142855 [16.17.1-1] - Rebase to version 16.17.1 Resolves: CVE-2022-35255 CVE-2022-35256 [16.16.0-1] - Rebase to version 16.16.0 Resolves: RHBZ#2106290 Resolves: CVE-2022-32212 CVE-2022-32213 CVE-2022-32214 CVE-2022-32215 Resolves: CVE-2022-29244 [16.14.0-5] - Decouple dependency bundling from bootstrapping IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-31124 CVE-2023-32067 CVE-2023-31147 CVE-2023-31130 cpe:/a:oracle:linux:9::appstream Oracle Linux 9 [102.12.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.12.0-1] - Update to 102.12.0 build1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-34414 CVE-2023-34416 cpe:/a:oracle:linux:9::appstream Oracle Linux 8 [102.12.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.12.0-1] - Update to 102.12.0 build1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-34414 CVE-2023-34416 cpe:/a:oracle:linux:8::appstream Oracle Linux 9 [102.12.0-1.0.1] - Updated homepages to use https [Orabug: 34648274] [102.12.0-1] - Update to 102.12.0 build1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-34416 CVE-2023-34414 cpe:/a:oracle:linux:9::appstream Oracle Linux 8 [102.12.0-1.0.1] - Updated homepages to use https [Orabug: 34648274] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.12.0-1] - Update to 102.12.0 build1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-34416 CVE-2023-34414 cpe:/a:oracle:linux:8::appstream Oracle Linux 8 [3.6.8-51.0.1] - Add Oracle Linux distribution in platform.py [Orabug: 20812544] [3.6.8-51.1] - Security fix for CVE-2023-24329 Resolves: rhbz#2173917 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-24329 cpe:/o:oracle:linux:8::baseos_latest cpe:/a:oracle:linux:8::appstream cpe:/o:oracle:linux:8:8:baseos_patch Oracle Linux 9 [7.0.107-1.0.1] - Set TargetRid based on os release major version, add OL arm64 RuntimeIdentifier [Orabug: 34671152] [7.0.107-1] - Update to .NET SDK 7.0.107 and Runtime 7.0.7 - Resolves: RHBZ#2211877 [7.0.106-1] - Update to .NET SDK 7.0.106 and Runtime 7.0.6 - Resolves: RHBZ#2190269 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-24936 CVE-2023-32032 CVE-2023-29337 CVE-2023-29331 CVE-2023-33128 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 8 [7.0.107-1.0.1] - Set TargetRid based on os release major version, add OL arm64 RuntimeIdentifier [Orabug: 34671152] [7.0.107-1] - Update to .NET SDK 7.0.107 and Runtime 7.0.7 - Resolves: RHBZ#2211876 [7.0.106-2] - Update to .NET SDK 7.0.106 and Runtime 7.0.6 - Resolves: RHBZ#2190267 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-33128 CVE-2023-24936 CVE-2023-29331 CVE-2023-29337 CVE-2023-32032 cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 8 [3.11.2-2.1] - Security fix for CVE-2023-24329 Resolves: rhbz#2173917 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-24329 cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 9 [3.9.16-1.1] - Security fix for CVE-2023-24329 Resolves: rhbz#2173917 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-24329 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::codeready_builder cpe:/o:oracle:linux:9::baseos_latest cpe:/o:oracle:linux:9:2:baseos_patch Oracle Linux 8 Oracle Linux 9 [9:20200406-26] - Resolves: #2209872, CVE-2023-32700 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-32700 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:9::codeready_builder cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 9 [4.4.0-8] - Fix CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804 CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798 CVE-2023-0799 CVE-2022-48281 - Resolves: CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804 CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798 CVE-2023-0799 CVE-2022-48281 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-0800 CVE-2023-0802 CVE-2023-0796 CVE-2023-0795 CVE-2023-0804 CVE-2023-0803 CVE-2023-0797 CVE-2023-0798 CVE-2023-0799 CVE-2022-48281 CVE-2023-0801 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 9 [13.11-1.0.1] - Fixed postgresql port binding issue during bootup [Orabug: 35420628] [13.11-1] - Update to 13.11 - Resolves: #2207935 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-2454 CVE-2023-2455 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 9 [9.0.0-10.2.0.1] - Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554] [9.0.0-10.2.el9_2] - virpci: Resolve leak in virPCIVirtualFunctionList cleanup (CVE-2023-2700, rhbz#2208596) MODERATE Copyright 2023 Oracle, Inc. CVE-2023-2700 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 9 [3.0.7-16.0.1] - Replace upstream references [Orabug: 34340177] [1:3.0.7-16] - Fix possible DoS translating ASN.1 object identifiers Resolves: CVE-2023-2650 - Release the DRBG in global default libctx early Resolves: rhbz#2211396 [1:3.0.7-15.1] - Re-enable DHX keys in FIPS mode, disable FIPS 186-4 parameter validation and generation in FIPS mode Resolves: rhbz#2178030 [1:3.0.7-15] - Enforce using EMS in FIPS mode - alerts tuning Related: rhbz#2157951 [1:3.0.7-14] - Input buffer over-read in AES-XTS implementation on 64 bit ARM Resolves: rhbz#2188554 [1:3.0.7-13] - Enforce using EMS in FIPS mode Resolves: rhbz#2157951 - Fix excessive resource usage in verifying X509 policy constraints Resolves: rhbz#2186661 - Fix invalid certificate policies in leaf certificates check Resolves: rhbz#2187429 - Certificate policy check not enabled Resolves: rhbz#2187431 - OpenSSL rsa_verify_recover key length checks in FIPS mode Resolves: rhbz#2186819 [1:3.0.7-12] - Change explicit FIPS indicator for RSA decryption to unapproved Resolves: rhbz#2179379 [1:3.0.7-11] - Add missing reference to patchfile to add explicit FIPS indicator to RSA encryption and RSASVE and fix the gettable parameter list for the RSA asymmetric cipher implementation. Resolves: rhbz#2179379 [1:3.0.7-10] - Add explicit FIPS indicator to RSA encryption and RSASVE Resolves: rhbz#2179379 [1:3.0.7-9] - Fix explicit FIPS indicator for X9.42 KDF when used with output lengths < 14 bytes Resolves: rhbz#2175864 [1:3.0.7-8] - Fix Wpointer-sign compiler warning Resolves: rhbz#2178034 [1:3.0.7-7] - Add explicit FIPS indicators to key derivation functions Resolves: rhbz#2175860 rhbz#2175864 - Zeroize FIPS module integrity check MAC after check Resolves: rhbz#2175873 - Add explicit FIPS indicator for IV generation in AES-GCM Resolves: rhbz#2175868 - Add explicit FIPS indicator for PBKDF2, use test vector with FIPS-compliant salt in PBKDF2 FIPS self-test Resolves: rhbz#2178137 - Limit RSA_NO_PADDING for encryption and signature in FIPS mode Resolves: rhbz#2178029 - Pairwise consistency tests should use Digest+Sign/Verify Resolves: rhbz#2178034 - Forbid DHX keys import in FIPS mode Resolves: rhbz#2178030 - DH PCT should abort on failure Resolves: rhbz#2178039 - Increase RNG seeding buffer size to 32 Related: rhbz#2168224 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-2650 CVE-2023-0465 CVE-2023-0464 CVE-2023-0466 CVE-2023-1255 cpe:/a:oracle:linux:9::appstream cpe:/o:oracle:linux:9::baseos_latest cpe:/o:oracle:linux:9:2:baseos_patch Oracle Linux 9 - [5.14.0-284.18.1_2] - cifs: fix wrong unlock before return from cifs_tree_connect() - docs: Remove the unnecessary unicode character - perf vendor events intel: Refresh ivytown metrics and events - perf vendor events: Update Intel ivytown - perf vendor events intel: Refresh jaketown metrics and events - perf vendor events: Update Intel jaketown - NFSD: RHEL-only bug introduced in fix for COMMIT and NFS4ERR_DELAY loop - NFSD: Fix problem of COMMIT and NFS4ERR_DELAY in infinite loop - workqueue: Fix isolated CPUs interference problem - sched/core: Fix arch_scale_freq_tick() on tickless systems - ice: no busy waiting in GNSS thread and for SQ commands - wdat_wdt: avoid watchdog timeout during reboot - hugetlbfs: don't delete error page from pagecache - mm/filemap: fix page end in filemap_get_read_batch - isched/deadline: Add more reschedule cases to prio_changed_dl() - sched/rt: Fix bad task migration for rt tasks - blk-mq: directly poll requests - KVM: VMX: Fix crash due to uninitialized current_vmcs - wifi: iwlwifi: mvm: protect TXQ list manipulation - crypto: jitter - permanent and intermittent health errors - cpufreq: intel_pstate: hybrid: Use known scaling factor for P-cores - cpufreq: intel_pstate: Read all MSRs on the target CPU - cpufreq: intel_pstate: Enable HWP IO boost for all servers - crypto: qat: Update QAT drivers upto v6.2 - info/owners.yaml: Adjust intel_qat subsystem entry - net: tls: fix possible race condition between do_tls_getsockopt_conf and do_tls_setsockopt_conf() {CVE-2023-28466} - i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() {CVE-2023-2194} - xfs: verify buffer contents when we skip log replay {CVE-2023-2124} - bluetooth: Perform careful capability checks in hci_sock_ioctl() {CVE-2023-2002} - netfilter: nf_tables: deactivate anonymous set from preparation phase {CVE-2023-32233} - perf: Fix check before add_event_to_groups() in perf_group_detach() {CVE-2023-2235} IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-2235 CVE-2023-2194 CVE-2023-2124 CVE-2023-28466 CVE-2023-2002 CVE-2023-32233 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::codeready_builder cpe:/o:oracle:linux:9::baseos_latest cpe:/o:oracle:linux:9:2:baseos_patch Oracle Linux 9 [590-2] - Fix CVE-2022-46663 - Resolves: CVE-2022-46663 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-46663 cpe:/o:oracle:linux:9::baseos_latest cpe:/o:oracle:linux:9:2:baseos_patch Oracle Linux 7 [1.10.0-3.1] - Resolves: rhbz#2209503 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-7.9.z] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-32067 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7::optional_latest cpe:/a:oracle:linux:7:9:patch Oracle Linux 8 babel [2.5.1-10] - Fix CVE-2021-20095 Resolves: rhbz#1955615 Cython [0.28.1-7] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 numpy [1:1.14.2-16] - Fix include path - Related: rhbz#1907601 pytest python2 [2.7.18-13.0.1.1] - Fix for CVE-2023-24329 - Add missing part of fix for CVE-2022-45061 python2-pip [9.0.3-19] - Remove bundled windows executables - Resolves: rhbz#2006792 python2-rpm-macros python2-setuptools [39.0.1-13] - When building for Flatpak inclusion, build in bootstrap mode Resolves: rhbz#1907597 python2-six [1.11.0-6] - Rename component name to python2-six, clean specfile and remove bconds - Resolves: rhbz#1908300 python-attrs python-backports [1.0-16] - Update python macros to python2 versioned macros - Issue found when rebuilding the python27 module to include CVE fixes - Related: rhbz#1883890 rhbz#1883258 python-backports-ssl_match_hostname [3.5.0.1-12] - Remove unversioned Provides - Resolves: rhbz#1908300 python-chardet [3.0.4-10] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 python-coverage [4.5.1-4] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 python-dns python-docs [2.7.16-2] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 python-docutils python-funcsigs python-idna [2.5-7] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 python-ipaddress python-jinja2 [2.10-9] - Fix CVE-2020-28493: ReDOS vulnerability due to the sub-pattern Resolves: rhbz#1928707 python-lxml [4.2.3-6] - Security fix for CVE-2021-43818 Resolves: rhbz#2032569 python-markupsafe [0.23-19] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 python-mock python-nose python-pluggy python-psycopg2 [2.7.5-7] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 python-py python-pygments python-pymongo python-PyMySQL [0.8.0-10] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 python-pysocks [1.6.8-6] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 python-pytest-mock python-requests [2.20.0-3] - Properly handle default ports when stripping the authorization header Resolves: rhbz#1762422 python-setuptools_scm python-sqlalchemy python-urllib3 [1.24.2-3] - Update RECENT_DATE dynamically Related: rhbz#1883890 rhbz#1761380 python-virtualenv python-wheel [1:0.31.1-3] - Adjusted the postun scriptlets to enable upgrading to RHEL 9 - Resolves: rhbz#1933055 pytz [2017.2-12] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 PyYAML [3.12-16] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 scipy IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-24329 cpe:/a:oracle:exadata_dbserver:23.1.0.0.0::ol8 cpe:/a:oracle:exadata_dbserver:23.1.3.0.0::ol8 cpe:/a:oracle:linux:8::appstream_developer cpe:/a:oracle:exadata_dbserver:23.1.2.0.0::ol8 cpe:/a:oracle:linux:8:8:appstream_base cpe:/a:oracle:exadata_dbserver:23.1.1.0.0::ol8 cpe:/a:oracle:linux:8::appstream Oracle Linux 8 babel [2.7.0-11] - Fix CVE-2021-20095 Resolves: rhbz#1955615 Cython [0.29.14-4] - Exclude unsupported i686 arch mod_wsgi [4.6.8-4] - Core dumped upon file upload >= 1GB Resolves: rhbz#2125171 numpy [1.17.3-6] - Adjusted the postun scriptlets to enable upgrading to RHEL 9 - Resolves: rhbz#1933055 python38 [3.8.16-1.1] - Fix CVE-2023-24329 python3x-pip [19.3.1-6] - Backport patch to fix infinite recursion with pip wheel with in /u03/ksharma/errata_processing/work/el8/prod - Resolves: rhbz#2090006 python3x-setuptools [41.6.0-5] - Adjusted the postun scriptlets to enable upgrading to RHEL 9 - Resolves: rhbz#1933055 python3x-six [1.12.0-10] - Rebuild from a new component name python-asn1crypto python-cffi [1.13.2-3] - Exclude unsupported i686 arch python-chardet python-cryptography [2.8-3] - Exclude unsupported i686 arch python-idna [2.8-6] - Exclude unsupported i686 arch python-jinja2 [2.11.3-1] - Update to 2.11.3. - Fix URL. - Remove patch that is included in this release. Resolves: rhbz#2086141. python-lxml [4.4.1-7] - Security fix for CVE-2021-43818 Resolves: rhbz#2032569 python-markupsafe [1.1.1-6] - Exclude unsupported i686 arch python-ply python-psutil [5.6.4-4] - Security fix for CVE-2019-18874: double free because of refcount mishandling Resolves: rhbz#1772014 python-psycopg2 [2.8.4-4] - Exclude unsupported i686 arch python-pycparser [2.19-3] - Exclude unsupported i686 arch python-PyMySQL [0.10.1-1] - Rebase to 0.10 version to add support for MariaDB ed25519 authentication mechanism python-pysocks python-requests [2.22.0-9] - Exclude unsupported i686 arch python-urllib3 [1.25.7-5] - Fix for CVE-2021-33503 Catastrophic backtracking in URL authority parser Resolves: rhbz#1968074 - Update RECENT_DATE dynamically python-wheel [0.33.6-6] - Adjusted the postun scriptlets to enable upgrading to RHEL 9 - Resolves: rhbz#1933055 pytz [2019.3-3] - Exclude unsupported i686 arch PyYAML scipy [1.3.1-4] - Exclude unsupported i686 arch IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-24329 cpe:/a:oracle:linux:8:8:appstream_base cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::appstream_developer Oracle Linux 8 python39 [3.9.16-1.1] - Security fix for CVE-2023-24329 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-24329 cpe:/a:oracle:linux:8:8:appstream_base cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::codeready_builder cpe:/a:oracle:linux:8::appstream_developer Oracle Linux 8 ruby [2.7.8-139] - Upgrade to Ruby 2.7.8. Resolves: rhbz#2149262 - Fix HTTP response splitting in CGI. Resolves: CVE-2021-33621 - Fix ReDoS vulnerability in URI. Resolves: CVE-2023-28755 - Fix ReDoS vulnerability in Time. Resolves: CVE-2023-28756 rubygem-abrt [0.4.0-1] - Update to abrt 0.4.0. Resolves: rhbz#1842476 rubygem-bson [4.8.1-1] - Update to bson 4.8.1 by merging Fedora master branch (commit: 0741dbc) Resolves: rhbz#1817135 rubygem-mongo [2.11.3-1] - Update to mongo 2.11.3 by merging Fedora master branch (commit: c3f83c2) Resolves: rhbz#1817135 rubygem-mysql2 [0.5.3-2] - Update by merging Fedora rawhide branch (commit: 81e2cc9) - Fix Mysql2::Result test for Ruby 3.1. - Remove gem_make.out and mkmf.log files from the binary RPM package. - Fix test assertion for mariadb-connector-c. Related: rhbz#2063772 [0.5.3-1] - New upstream release 0.5.3 by merging Fedora master branch (commit: 674d475) Resolves: rhbz#1817135 [0.5.2-1] - New upstream release 0.5.2 by merging Fedora master branch (commit: cc15309) Resolves: rhbz#1672575 rubygem-pg [1.2.3-1] - Update to pg 1.2.3 by merging Fedora master branch (commit: 5db4d26) Resolves: rhbz#1817135 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-28755 CVE-2023-28756 CVE-2021-33621 cpe:/a:oracle:linux:8:8:appstream_base cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::appstream_developer Oracle Linux 8 hivex libguestfs [1.44.0-9.0.1] - Replace upstream references from description tag - Config supermin to use host yum.conf in ol8 [Orabug: 29319324] - Set DISTRO_ORACLE_LINUX correspeonding to ol [1:1.44.0-9] - Fix CVE-2022-2211 Denial of Service in --key parameter resolves: rhbz#2101280 [1:1.44.0-8] - Obsolete old libguestfs-benchmarking subpackage resolves: rhbz#2091597 [1:1.44.0-7] - Disable 5-level page tables when using -cpu max resolves: rhbz#2084566 related: rhbz#2075424 [1:1.44.0-6] - Backport support for -cpu max to allow RHEL 9 guests to be modified resolves: rhbz#2075424 [1:1.44.0-5] - Fix libguestfs failure with qemu 6.2, libvirt 7.10 resolves: rhbz#2035177 [1:1.44.0-4] - Autodetect backing format for qemu-img create -b - Move appliance to separate subpackage - Read rpm database through librpm resolves: rhbz#2013916, rhbz#1989520, rhbz#1836094 [1.44.0-3.el8] - Resolves: bz#2000225 (Rebase virt:rhel module:stream based on AV-8.6) [1:1.40.2-28] - daemon: lvm: Use lvcreate --yes to avoid interactive prompts resolves: rhbz#1933640 libguestfs-winsupport [8.8-1] - Rebase to ntfs-3g 2022.5.17 - Fixes: CVE-2021-46790, CVE-2022-30783, CVE-2022-30784, CVE-2022-30785, CVE-2022-30786, CVE-2022-30787, CVE-2022-30788, CVE-2022-30789 resolves: rhbz#2127240 rhbz#2127248 (also: 2127233 2127234 2127241 2127249 2127255 2127256 2127262 2127263) libiscsi libnbd [1.6.0-5.el8] - Fix CVE-2022-0485: Fail nbdcopy if NBD read or write fails resolves: rhbz#2045718 [1.6.0-4.el8] - Resolves: bz#2000225 (Rebase virt:rhel module:stream based on AV-8.6) [1.2.2] - Resolves: bz#1844296 (Upgrade components in virt:rhel module:stream for RHEL-8.3 release) [1.2.2-1] - New stable release 1.2.2. [1.2.1-1] - New stable release 1.2.1. [1.2.0-1] - New stable release 1.2.0. [1.0.3-1] - New upstream version 1.0.3. - Contains fix for remote code execution vulnerability. - Add new libnbd-security(3) man page. [1.0.2-1] - New upstream version 1.0.2. - Remove patches which are upstream. - Contains fix for NBD Protocol Downgrade Attack (CVE-2019-14842). - Fix previous commit message. [1.0.1-2] - Add upstream patch to fix nbdsh (for nbdkit tests). - Fix interop tests on slow machines. [1.0.1-1] - New stable version 1.0.1. [1.0.0-1] - New upstream version 1.0.0. [0.9.9-2] - Rebuilt for Python 3.8 [0.9.9-1] - New upstream version 0.9.9. [0.9.8-4] - Fix nbdkit dependencies so we're actually running the tests. - Add glib2-devel BR so we build the glib main loop example. - Add upstream patch to fix test error: nbd_connect_unix: getlogin: No such device or address - Fix test failure on 32 bit. [0.9.8-3] - Bump and rebuild to fix releng brokenness. https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/2LIDI33G3IEIPYSCCIP6WWKNHY7XZJGQ/ [0.9.8-2] - Rebuilt for Python 3.8 [0.9.8-1] - New upstream version 0.9.8. - Package the new nbd_*(3) man pages. [0.9.7-1] - New upstream version 0.9.7. - Add libnbd-ocaml(3) man page. [0.9.6-2] - Add all upstream patches since 0.9.6 was released. - Package the ocaml bindings into a subpackage. [0.9.6-1] - New upstream verison 0.9.6. [0.1.9-1] - New upstream version 0.1.9. [0.1.8-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild [0.1.8-1] - New upstream version 0.1.8. [0.1.7-1] - New upstream version 0.1.7. [0.1.6-1] - New upstream version 0.1.6. [0.1.5-1] - New upstream version 0.1.5. [0.1.4-1] - New upstream version 0.1.4. [0.1.2-2] - Enable libxml2 for NBD URI support. [0.1.2-1] - New upstream version 0.1.2. [0.1.1-1] - Fix license in man pages and examples. - Add nbdsh(1) man page. - Include the signature and keyring even if validation is disabled. - Update devel subpackage license. - Fix old FSF address in Python tests. - Filter Python provides. - Remove executable permission on the tar.gz.sig file. - Initial release. libtpms [0.9.1-2.20211126git1ff6fe1f43] - Backport 'tpm2: Check size of buffer before accessing it' (CVE-2023-1017 & CVE-2023-1018) Resolves: rhbz#2173964 Resolves: rhbz#2173970 libvirt [8.0.0-19.0.2] - qemu: monitor: Drop old monitor fields from 'struct _qemuMonitorMessage' - qemu: Make 'struct _qemuMonitorMessage' private - qemu: monitor: Move declaration of struct _qemuMonitor to qemu_monitor_priv.h - qemu: qemuBlockGetNamedNodeData: Remove pointless error path - qemu: monitor: Store whether 'query-named-block-nodes' supports 'flat' parameter - qemuMonitorJSONBlockStatsUpdateCapacityBlockdev: Use 'flat' mode of query-named-block-nodes - virpci: Resolve leak in virPCIVirtualFunctionList cleanup [CVE-2023-2700] - node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap() [CVE-2023-2700] -[8.0.0-19.0.1 -- Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554] -- Add runtime deps for pkg librbd1 >= 1:10.2.5 (Keshav Sharma) [8.0.0-19] - qemu: domain: Fix logic when tainting domain (rhbz#2174447) - qemu: agent: Make fetching of 'can-offline' member from 'guest-query-vcpus' optional (rhbz#2174447) [8.0.0-18] - conf: Make VIR_DOMAIN_NET_TYPE_ETHERNET not share 'host view' (rhbz#2172578) [8.0.0-17] - vircpi: Add PCIe 5.0 and 6.0 link speeds (rhbz#2168116) [8.0.0-16] - qemu_namespace: Don't leak memory in qemuDomainGetPreservedMounts() (rhbz#2166573) [8.0.0-15] - nodedev: fix reported error msg in css cap XML parsing (rhbz#2165011) - util: refactor virDomainDeviceCCWAddress into virccw.h (rhbz#2165011) - util: refactor virDomainCCWAddressAsString into virccw (rhbz#2165011) - util: make reuse of ccw device address format constant (rhbz#2165011) - util: refactor ccw address constants into virccw (rhbz#2165011) - util: refactor virDomainCCWAddressIncrement into virccw (rhbz#2165011) - util: refactor virDomainDeviceCCWAddressIsValid into virccw (rhbz#2165011) - util: refactor virDomainDeviceCCWAddressEqual into virccw (rhbz#2165011) - conf: adjust method name virDomainDeviceCCWAddressParseXML (rhbz#2165011) - util: add ccw device address parsing into virccw (rhbz#2165011) - util: add virCCWDeviceAddressFromString to virccw (rhbz#2165011) - nodedev: refactor css format from ccw format method (rhbz#2165011) - nodedev: refactor ccw device address parsing from XML (rhbz#2165011) - nodedev: refactor css XML parsing from ccw XML parsing (rhbz#2165011) - schemas: refactor out nodedev ccw address schema (rhbz#2165011) - nodedev: add optional device address of channel device to css device (rhbz#2165011) - nodedev: add tests for optional device address to css device (rhbz#2165011) - nodedev: prevent internal error on dev_busid parse (rhbz#2165011) - rpc: Fix memory leak of fds (rhbz#2165428) [8.0.0-14] - qemu: Ignore missing vm.unprivileged_userfaultfd sysctl (rhbz#2148578) [8.0.0-13] - build: Only install libvirt-guests when building libvirtd (rhbz#2153688) - tools: Fix install_mode for some scripts (rhbz#2153688) [8.0.0-12] - util: json: Split out array->strinlist conversion from virJSONValueObjectGetStringArray (rhbz#2149752) - qemuAgentGetDisks: Don't use virJSONValueObjectGetStringArray for optional data (rhbz#2149752) - virpidfile: Add virPidFileReadPathIfLocked func (rhbz#2152188) - qemu: tpm: Get swtpm pid without binary validation (rhbz#2152188) - qemu_tpm: Do async IO when starting swtpm emulator (rhbz#2152188) - qemu: gpu: Get pid without binary validation (rhbz#2152188) - spec: libvirt-daemon: Add optional dependency on *-client (rhbz#2136591) [8.0.0-11] - qemu_process: Don't require a hugetlbfs mount for memfd (rhbz#2123196) - qemu_namespace: Tolerate missing ACLs when creating a path in namespace (rhbz#2123196) - qemu_namespace: Fix a corner case in qemuDomainGetPreservedMounts() (rhbz#2123196) - qemu_namespace: Introduce qemuDomainNamespaceSetupPath() (rhbz#2123196) - qemu_process.c: Propagate hugetlbfs mounts on reconnect (rhbz#2123196) - qemuProcessReconnect: Don't build memory paths (rhbz#2123196) [8.0.0-10] - security_selinux.c: Relabel existing mode='bind' UNIX sockets (rhbz#2101575) - RHEL: qemu_migration: Fix restoring memlock limit on destination (rhbz#2107954) [8.0.0-9] - conf: virtiofs: add thread_pool element (rhbz#2079582) - qemu: virtiofs: format --thread-pool-size (rhbz#2079582) - conf: Move virDomainObj::originalMemlock into qemuDomainObjPrivate (rhbz#2089433) - qemu_domain: Format qemuDomainObjPrivate::originalMemlock (rhbz#2089433) - qemu: Add qemuDomainSetMaxMemLock helper (rhbz#2089433) - qemu_migration: Use qemuDomainSetMaxMemLock (rhbz#2089433) - qemu_migration: Restore original memory locking limit (rhbz#2089433) - Add VIR_MIGRATE_ZEROCOPY flag (rhbz#2089433) - virsh: Add support for VIR_MIGRATE_ZEROCOPY flag (rhbz#2089433) - qemu_migration: Implement VIR_MIGRATE_ZEROCOPY flag (rhbz#2089433) [8.0.0-8] - nwfilter: fix crash when counting number of network filters (CVE-2022-0897, rhbz#2063902) - virDomainDiskDefValidate: Improve error messages for 'startupPolicy' checks (rhbz#2095758) - domain_validate: Split out validation of disk startup policy (rhbz#2095758) - virDomainDiskDefValidateStartupPolicy: Validate disk type better (rhbz#2095758) - virDomainDiskTranslateSourcePool: Fix check of 'startupPolicy' definition (rhbz#2095758) [8.0.0-7] - cpu_map: Disable cpu64-rhel* for host-model and baseline (rhbz#1851227) - cputest: Drop some old artificial baseline tests (rhbz#1851227) - cputest: Give better names to baseline tests (rhbz#1851227) - cputest: Add some real world baseline tests (rhbz#1851227) - cpu_x86: Consolidate signature match in x86DecodeUseCandidate (rhbz#1851227) - cpu_x86: Refactor feature list comparison in x86DecodeUseCandidate (rhbz#1851227) - cpu_x86: Penalize disabled features when computing CPU model (rhbz#1851227) - cpu_x86: Ignore enabled features for input models in x86DecodeUseCandidate (rhbz#1851227) [8.0.0-6] - conf: Introduce memory allocation threads (rhbz#2067126) - qemu_capabilities: Detect memory-backend-*.prealloc-threads property (rhbz#2067126) - qemu_validate: Validate prealloc threads against qemuCpas (rhbz#2067126) - qemu_command: Generate prealloc-threads property (rhbz#2067126) [8.0.0-5] - node_device: Rework udevKludgeStorageType() (rhbz#2056673) - node_device: Treat NVMe disks as regular disks (rhbz#2056673) [8.0.0-4] - qemu_command: Generate memory only after controllers (rhbz#2050697) - qemu: Validate domain definition even on migration (rhbz#2050702) [8.0.0-3] - qemuDomainSetupDisk: Initialize 'targetPaths' (rhbz#2046172) - RHEL: Remove <glib-2.64.0 workaround for GSource race (rhbz#2045879) [8.0.0-2] - Revert 'report error when virProcessGetStatInfo() is unable to parse data' (rhbz#2041610) - qemu: fix inactive snapshot revert (rhbz#2043584) [8.0.0-1] - Rebased to libvirt-8.0.0 (rhbz#2012802) [8.0.0-0rc1.1] - Rebased to libvirt-8.0.0-rc1 (rhbz#2012802) - The rebase also fixes the following bugs: rhbz#1689202, rhbz#2014369, rhbz#2030119, rhbz#2029380, rhbz#2035237 rhbz#2035714, rhbz#2034180 [7.10.0-1] - Rebased to libvirt-7.10.0 (rhbz#2012802) - The rebase also fixes the following bugs: rhbz#1845468, rhbz#2017928, rhbz#2024419, rhbz#1953389, rhbz#1510237 [7.9.0-1] - Rebased to libvirt-7.9.0 (rhbz#2012802) - The rebase also fixes the following bugs: rhbz#2011731, rhbz#2012385, rhbz#2013539 [7.8.0-1] - Rebased to libvirt-7.8.0 (rhbz#2012802) - The rebase also fixes the following bugs: rhbz#1839070, rhbz#1942275, rhbz#1995865, rhbz#1806857, rhbz#1924616 rhbz#1978574, rhbz#1989457, rhbz#1965589, rhbz#1677608, rhbz#1926508 rhbz#1810863, rhbz#1845468, rhbz#1738392, rhbz#1965140 [7.6.0-2.fc34] - Resolves: bz#2000225 (Rebase virt:rhel module:stream based on AV-8.6) [6.0.0-37] - security: fix SELinux label generation logic (CVE-2021-3631) - storage_driver: Unlock object on ACL fail in storagePoolLookupByTargetPath (CVE-2021-3667) [6.0.0-36] - network: make it safe to call networkSetupPrivateChains() multiple times (rhbz#1942805) - network: force re-creation of iptables private chains on firewalld restart (rhbz#1942805) - hostdev: Update mdev pointer reference after checking device type (rhbz#1940449) - hostdev: mdev: Lookup mdevs by sysfs path rather than mdev struct (rhbz#1940449) - qemu_firmware: don't error out for unknown firmware features (rhbz#1961562) - docs: improve description of secure attribute for loader element (rhbz#1929357) - conf: introduce virDomainDefParseBootInitOptions (rhbz#1929357) - conf: introduce virDomainDefParseBootKernelOptions (rhbz#1929357) - conf: introduce virDomainDefParseBootFirmwareOptions (rhbz#1929357) - conf: introduce virDomainDefParseBootLoaderOptions (rhbz#1929357) - conf: introduce virDomainDefParseBootAcpiOptions (rhbz#1929357) - conf: use switch in virDomainDefParseBootOptions (rhbz#1929357) - conf: introduce support for firmware auto-selection feature filtering (rhbz#1929357) - qemu: implement support for firmware auto-selection feature filtering (rhbz#1929357) - domain_conf: Don't leak def->os.firmwareFeatures (rhbz#1929357) - conf: remove duplicated firmware type attribute (rhbz#1929357) [6.0.0-35] - vircgroupv2: properly detect placement of running VM (rhbz#1798463) - virsystemd: export virSystemdHasMachined (rhbz#1798463) - virsystemd: introduce virSystemdGetMachineByPID (rhbz#1798463) - virsystemd: introduce virSystemdGetMachineUnitByPID (rhbz#1798463) - vircgroup: use DBus call to systemd for some APIs (rhbz#1798463) - vircgroupv1: refactor virCgroupV1DetectPlacement (rhbz#1798463) - vircgroupv2: move task into cgroup before enabling controllers (rhbz#1798463) - vircgroup: introduce virCgroupV1Exists and virCgroupV2Exists (rhbz#1798463) - vircgroup: introduce nested cgroup to properly work with systemd (rhbz#1798463) - tests: add cgroup nested tests (rhbz#1798463) - vircgroup: correctly free nested virCgroupPtr (rhbz#1798463) - qemu: Add virtio related options to vsock (rhbz#1931548) - domain_validate: use defines for cpu period and quota limits (rhbz#1798463) - docs: use proper cpu quota value in our documentation (rhbz#1798463) - vircgroup: enforce range limit for cpu.shares (rhbz#1798463) - cgroup: use virCgroupSetCpuShares instead of virCgroupSetupCpuShares (rhbz#1798463) - cpumap: Add support for ibrs CPU feature (rhbz#1926864) - cpumap: Add support for svme-addr-check CPU feature (rhbz#1926864) - cpu_map: Add EPYC-Milan x86 CPU model (rhbz#1926864) - cpu_map: Install x86_EPYC-Milan.xml (rhbz#1926864) - cpu_map: Fix spelling of svme-addr-chk feature (rhbz#1926864) [6.0.0-34] - qemu: move cgroup cpu period and quota defines to vircgroup.h (rhbz#1915733) - vircgroupv1: use defines for cpu period and quota limits (rhbz#1915733) - vircgroupv2: use defines for cpu period and quota limits (rhbz#1915733) - vircgroup: fix cpu quota maximum limit (rhbz#1915733) - util: add virNetDevGetPhysPortName (rhbz#1918708) - util: avoid manual VIR_FREE of a g_autofree pointer in virPCIGetName() (rhbz#1918708) - util: Add phys_port_name support on virPCIGetNetName (rhbz#1918708) [6.0.0-33] - cpu_map: Fix Icelake Server model number (rhbz#1537734) - cputestdata: Add test data for Snowridge (rhbz#1537734) - cpu_map: Add support for fsrm CPU feature (rhbz#1537734) - cpu_map: Add support for core-capability CPU feature (rhbz#1537734) - cpu_map: Add support for split-lock-detect CPU feature (rhbz#1537734) - cpu_map: Define and enable Snowridge model (rhbz#1537734) - util: fix typo in VIR_MOCK_WRAP_RET_ARGS() (rhbz#1607929) - util/tests: enable locking on iptables/ebtables commandlines in unit tests (rhbz#1607929) - util/tests: enable locking on iptables/ebtables commandlines by default (rhbz#1607929) - tests: fix iptables test case commandline options in virfirewalltest.c (rhbz#1607929) - network: be more verbose about the reason for a firewall reload (rhbz#1607929) - util: always check for ebtables/iptables binaries, even when using firewalld (rhbz#1607929) - util: synchronize with firewalld before we start calling iptables directly (rhbz#1607929) - util: call iptables directly rather than via firewalld (rhbz#1607929) - util: virhostcpu: Fail when fetching CPU Stats for invalid cpu (rhbz#1915183) [6.0.0-32] - util: replace macvtap name reservation bitmap with a simple counter (rhbz#1874304) - util: assign tap device names using a monotonically increasing integer (rhbz#1874304) - util: virNetDevTapCreate: initialize fd to -1 (rhbz#1874304) [6.0.0-31] - conf: properly clear out autogenerated macvtap names when formatting/parsing (rhbz#1872610) - qemu: format 'ramfb' attribute for mediated devices (rhbz#1876297) [6.0.0-30] - cpu_map: Add missing x86 features in 0x7 CPUID leaf (rhbz#1861506) - cpu_map: Add missing x86 features in 0x80000008 CPUID leaf (rhbz#1861506) - cpu_map: Add missing AMD SVM features (rhbz#1861506) - Add testdata for AMD EPYC 7502 (rhbz#1861506) - cpu_map: Defined and enable EPYC-Rome model (rhbz#1861506) - cpu_map: Remove monitor feature from EPYC-Rome (rhbz#1861506) - tests: qemuxml2argv: Use existing machine type for 'numatune-distances' case (rhbz#1749518) - qemuxml2xmltest: Add 'numatune-distance' test case (rhbz#1749518) - conf: Move and rename virDomainParseScaledValue() (rhbz#1749518) - numa_conf: Drop CPU from name of two functions (rhbz#1749518) - qemu_command: Rename qemuBuildNumaArgStr() (rhbz#1749518) - qemuBuildMachineCommandLine: Drop needless check (rhbz#1749518) - numa_conf: Make virDomainNumaSetNodeCpumask() return void (rhbz#1749518) - Allow NUMA nodes without vCPUs (rhbz#1749518) - conf: Parse and format HMAT (rhbz#1749518) - conf: Validate NUMA HMAT configuration (rhbz#1749518) - numa: expose HMAT APIs (rhbz#1749518) - qemu: Introduce QEMU_CAPS_NUMA_HMAT capability (rhbz#1749518) - qemu: Build HMAT command line (rhbz#1749518) - qemuBuildNumaCommandLine: Fix @masterInitiator check (rhbz#1749518) - numa_conf: Properly check for caches in virDomainNumaDefValidate() (rhbz#1749518) - RNG: Allow interleaving of /domain/cpu/numa/cell children (rhbz#1749518) [6.0.0-29] - qemu: substitute missing model name for host-passthrough (rhbz#1850680) - rpc: gendispatch: handle empty flags (CVE-2020-25637) - rpc: add support for filtering @acls by uint params (CVE-2020-25637) - rpc: require write acl for guest agent in virDomainInterfaceAddresses (CVE-2020-25637) - qemu: agent: set ifname to NULL after freeing (CVE-2020-25637) - qemu: Fix domfsinfo for non-PCI device information from guest agent (rhbz#1858771) - virDomainNetFindIdx: add support for CCW addresses (rhbz#1837495) - check for NULL before calling g_regex_unref (rhbz#1861176) - virhostcpu.c: fix 'die_id' parsing for Power hosts (rhbz#1876742) - qemuFirmwareFillDomain: Fill NVRAM template on migration too (rhbz#1880418) - node_device: refactor udevProcessCCW (rhbz#1853289, rhbz#1865932) - node_device: detect CSS devices (rhbz#1853289, rhbz#1865932) - virsh: nodedev: ability to filter CSS capabilities (rhbz#1853289, rhbz#1865932) - node_device: detect DASD devices (rhbz#1853289, rhbz#1865932) - udevProcessCSS: Check if def->driver is non-NULL (rhbz#1853289, rhbz#1865932) [6.0.0-28] - virdevmapper: Don't cache device-mapper major (rhbz#1860421) - virdevmapper: Handle kernel without device-mapper support (rhbz#1860421) - virdevmapper: Ignore all errors when opening /dev/mapper/control (rhbz#1860421) [6.0.0-27] - src: assume sys/sysmacros.h always exists on Linux (rhbz#1860421) - virdevmapper.c: Join two WITH_DEVMAPPER sections together (rhbz#1860421) - virDevMapperGetTargetsImpl: Use VIR_AUTOSTRINGLIST (rhbz#1860421) - virdevmapper: Don't use libdevmapper to obtain dependencies (CVE-2020-14339, rhbz#1860421) - virDevMapperGetTargets: Don't ignore EBADF (rhbz#1860421) [6.0.0-26] - qemu: blockjob: Don't base bitmap handling of active-layer block commit on QEMU_CAPS_BLOCKDEV_REOPEN (rhbz#1857779) - qemu: blockjob: Actually delete temporary bitmap on failed active commit (rhbz#1857779) - qemu: block: Remove 'active-write' bitmap even if there are no bitmaps to merge (rhbz#1857779) - qemuDomainBlockPivot: Rename 'actions' to 'bitmapactions' (rhbz#1857779) - qemuDomainBlockPivot: Ignore failures of creating active layer bitmap (rhbz#1857779) [6.0.0-25] - Upgrade components in virt:rhel module:stream for RHEL-8.3 release (rhbz#1828317) - conf: Don't format http cookies unless VIR_DOMAIN_DEF_FORMAT_SECURE is used (CVE-2020-14301) - util: Introduce a parser for kernel cmdline arguments (rhbz#1848997) - qemu: Check if s390 secure guest support is enabled (rhbz#1848997) - qemu: Check if AMD secure guest support is enabled (rhbz#1848997) - tools: Secure guest check on s390 in virt-host-validate (rhbz#1848997) - tools: Secure guest check for AMD in virt-host-validate (rhbz#1848997) - docs: Update AMD launch secure description (rhbz#1848997) - docs: Describe protected virtualization guest setup (rhbz#1848997) [6.0.0] - Resolves: bz#1828317 (Upgrade components in virt:rhel module:stream for RHEL-8.3 release) [6.0.0] - Resolves: bz#1810193 (Upgrade components in virt:rhel module:stream for RHEL-8.3 release) [6.0.0] - Resolves: bz#1810193 (Upgrade components in virt:rhel module:stream for RHEL-8.3 release) [6.0.0] - Resolves: bz#1810193 (Upgrade components in virt:rhel module:stream for RHEL-8.3 release) [4.5.0-42] - RHEL: virscsi: Check device type before getting it's /dev node name (rhbz#1808388) - RHEL: virscsi: Support TAPEs in virSCSIDeviceGetDevName() (rhbz#1808388) - RHEL: virscsi: Introduce and use virSCSIDeviceGetUnprivSGIOSysfsPath() (rhbz#1808388) - RHEL: virutil: Accept non-block devices in virGetDeviceID() (rhbz#1808388) - RHEL: qemuSetUnprivSGIO: Actually use calculated @sysfs_path to set unpriv_sgio (rhbz#1808388) - RHEL: qemuCheckUnprivSGIO: use @sysfs_path to get unpriv_sgio (rhbz#1808399) [4.5.0-41] - qemu: Translate features in virQEMUCapsGetCPUFeatures (rhbz#1804224) [4.5.0-40] - process: wait longer on kill per assigned Hostdev (rhbz#1785338) - process: wait longer 5->30s on hard shutdown (rhbz#1785338) [4.5.0-39] - selinux: Do not report an error when not returning -1 (rhbz#1788096) - qemu: Fix hyperv features with QEMU 4.1 (rhbz#1794868) - qemu: Prefer dashes for hyperv features (rhbz#1794868) - cpu: Drop KVM_ from hyperv feature macros (rhbz#1794868) - cpu: Drop unused KVM features (rhbz#1794868) - qemu: Fix KVM features with QEMU 4.1 (rhbz#1794868) - cpu: Drop CPUID definition for hv-spinlocks (rhbz#1794868) [4.5.0-38] - cpu_map/x86: Add support for BFLOAT16 data type (rhbz#1749516) [4.5.0-37] - cpu_map: Add TAA_NO bit for IA32_ARCH_CAPABILITIES MSR (CVE-2019-11135) - cpu_map: Add TSX_CTRL bit for IA32_ARCH_CAPABILITIES MSR (CVE-2019-11135) [4.5.0-36] - cpu_conf: Pass policy to CPU feature filtering callbacks (rhbz#1749672, rhbz#1756156, rhbz#1721608) - qemuxml2*test: Add tests for Icelake-Server, -pconfig (rhbz#1749672, rhbz#1756156, rhbz#1721608) - qemu: Drop disabled CPU features unknown to QEMU (rhbz#1749672, rhbz#1756156, rhbz#1721608) - cputest: Add data for Ice Lake Server CPU (rhbz#1749672, rhbz#1756156, rhbz#1721608) - cpu_map: Drop pconfig from Icelake-Server CPU model (rhbz#1749672, rhbz#1756156, rhbz#1721608) - qemu: Fix NULL ptr dereference caused by qemuDomainDefFormatBufInternal (rhbz#1749672, rhbz#1756156, rhbz#1721608) [4.5.0-35] - vircgroupv2: fix setting cpu.max period (rhbz#1749227) [4.5.0-34] - vircgroupv2: fix abort in VIR_AUTOFREE (rhbz#1747440) [4.5.0-33] - vircgroupv2: fix parsing multiple values in single file (rhbz#1741825) - vircgroupv2: fix virCgroupV2GetCpuCfsQuota for 'max' value (rhbz#1741837) [4.5.0-32] - virDomainObjListAddLocked: Produce better error message than 'Duplicate key' (rhbz#1737790) - virdbus: Grab a ref as long as the while loop is executed (rhbz#1741900) [4.5.0-31] - virDomainObjListAddLocked: fix double free (rhbz#1728530) - docs: schemas: Decouple the virtio options from each other (rhbz#1729675) - util: command: use VIR_AUTOFREE instead of VIR_FREE for scalar types (rhbz#1721434) - util: command: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1721434) - util: netdevopenvswitch: use VIR_AUTOFREE instead of VIR_FREE for scalar types (rhbz#1721434) - util: virnetdevopenvswitch: Drop an unused variable @ovs_timeout (rhbz#1721434) - util: netdevopenvswitch: use VIR_AUTOPTR for aggregate types (rhbz#1721434) - util: suppress unimportant ovs-vsctl errors when getting interface stats (rhbz#1721434) - virNetDevOpenvswitchInterfaceStats: Optimize for speed (rhbz#1721434) - test: Introduce virnetdevopenvswitchtest (rhbz#1721434) - vircommand: Separate mass FD closing into a function (rhbz#1721434) - virCommand: use procfs to learn opened FDs (rhbz#1721434) - util: command: Ignore bitmap errors when enumerating file descriptors to close (rhbz#1721434) - util: Avoid possible error in virCommandMassClose (rhbz#1721434) - vircgroup: fix cgroups v2 controllers detection (rhbz#1689297) - vircgroupv2: store enabled controllers (rhbz#1689297) [4.5.0-30] - virWaitForDevices: Drop confusing part of comment (rhbz#1710575) - lib: Drop UDEVSETTLE (rhbz#1710575) - m4: Provide default value fore UDEVADM (rhbz#1710575) - m4: Drop needless string checks (rhbz#1710575) - util: vircgroup: introduce virCgroup(Get|Set)ValueRaw (rhbz#1658890) - util: vircgroup: move virCgroupGetValueStr out of virCgroupGetValueForBlkDev (rhbz#1658890) - util: vircgroupv1: add support for BFQ blkio files (rhbz#1658890) - util: vircgroupv2: add support for BFQ files (rhbz#1658890) - Handle copying bitmaps to larger data buffers (rhbz#1703160) [4.5.0-29] - cpu: allow include files for CPU definition (rhbz#1686895) - cpu: fix cleanup when signature parsing fails (rhbz#1686895) - cpu: push more parsing logic into common code (rhbz#1686895) - cpu: simplify failure cleanup paths (rhbz#1686895) - cpu_map: Add support for arch-capabilities feature (rhbz#1693433) - cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1686895) - cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1686895) - cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1686895) - cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1686895) - cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1686895) - cpu_x86: Separate ancestor model parsing from x86ModelParse (rhbz#1686895) - cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1686895) - cpu_x86: Separate vendor parsing from x86ModelParse (rhbz#1686895) - cpu_x86: Separate feature list parsing from x86ModelParse (rhbz#1686895) - cpu_x86: Make sure CPU model names are unique in cpu_map (rhbz#1686895) - cpu_x86: Add x86ModelCopySignatures helper (rhbz#1686895) - cpu_x86: Store CPU signature in an array (rhbz#1686895) - cpu_x86: Allow multiple signatures for a CPU model (rhbz#1686895) - cpu_x86: Log decoded CPU model and signatures (rhbz#1686895) - qemu_capabilities: Inroduce virQEMUCapsGetCPUModelX86Data (rhbz#1686895) - qemu_capabilities: Introduce virQEMUCapsGetCPUModelInfo (rhbz#1686895) - qemu_capabilities: Use virQEMUCapsGetCPUModelInfo (rhbz#1686895) - cpu_x86: Add virCPUx86DataGetSignature for tests (rhbz#1686895) - cpu_map: Add hex representation of signatures (rhbz#1686895) - cputest: Test CPU signatures (rhbz#1686895) - cpu_map: Add more signatures for Conroe CPU model (rhbz#1686895) - cpu_map: Add more signatures for Penryn CPU model (rhbz#1686895) - cpu_map: Add more signatures for Nehalem CPU models (rhbz#1686895) - cpu_map: Add more signatures for Westmere CPU model (rhbz#1686895) - cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1686895) - cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1686895) - cpu_map: Add more signatures for Haswell CPU models (rhbz#1686895) - cpu_map: Add more signatures for Broadwell CPU models (rhbz#1686895) - cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1686895) - cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1686895) - cpu_x86: Require <cpuid> within <feature> in CPU map (rhbz#1697627) - cputest: Add data for Intel(R) Xeon(R) Platinum 8268 CPU (rhbz#1693433) - cpu_map: Add Cascadelake-Server CPU model (rhbz#1693433) - cpu_x86: Introduce virCPUx86DataItem container struct (rhbz#1697627) - cpu_x86: Rename virCPUx86Vendor.cpuid (rhbz#1697627) - cpu_x86: Rename virCPUx86DataItem variables (rhbz#1697627) - cpu_x86: Rename x86DataCpuidNext function (rhbz#1697627) - cpu_x86: Rename x86DataCpuid (rhbz#1697627) - cpu_x86: Rename virCPUx86CPUIDSorter (rhbz#1697627) - cpu_x86: Rename virCPUx86DataAddCPUIDInt (rhbz#1697627) - cpu_x86: Rename virCPUx86DataAddCPUID (rhbz#1697627) - cpu_x86: Rename virCPUx86VendorToCPUID (rhbz#1697627) - cpu_x86: Simplify x86DataAdd (rhbz#1697627) - cpu_x86: Introduce virCPUx86DataCmp (rhbz#1697627) - cpu_x86: Make x86cpuidSetBits more general (rhbz#1697627) - cpu_x86: Make x86cpuidClearBits more general (rhbz#1697627) - cpu_x86: Make x86cpuidAndBits more general (rhbz#1697627) - cpu_x86: Make x86cpuidMatchMasked more general (rhbz#1697627) - cpu_x86: Make x86cpuidMatch more general (rhbz#1697627) - cpu_x86: Store virCPUx86DataItem content in union (rhbz#1697627) - cpu_x86: Add support for storing MSR features in CPU map (rhbz#1697627) - cpu_x86: Move *CheckFeature functions (rhbz#1697627) - cputest: Add support for MSR features to cpu-parse.sh (rhbz#1697627) - util: file: introduce VIR_AUTOCLOSE macro to close fd of the file automatically (rhbz#1697627) - vircpuhost: Add support for reading MSRs (rhbz#1697627) - virhostcpu: Make virHostCPUGetMSR() work only on x86 (rhbz#1697627) - cpu_x86: Fix placement of *CheckFeature functions (rhbz#1697627) - cpu_conf: Introduce virCPUDefFilterFeatures (rhbz#1697627) - qemu_command: Use consistent syntax for CPU features (rhbz#1697627) - tests: Add QEMU caps data for future 4.1.0 (rhbz#1697627) - tests: Add domain capabilities case for QEMU 4.1.0 (rhbz#1697627) - qemuxml2argvtest: Add test for CPU features translation (rhbz#1697627) - qemu: Add APIs for translating CPU features (rhbz#1697627) - qemu: Probe for max-x86_64-cpu type (rhbz#1697627) - qemu: Probe for 'unavailable-features' CPU property (rhbz#1697627) - qemu: Probe host CPU after capabilities (rhbz#1697627) - qemu_command: Use canonical names of CPU features (rhbz#1697627) - qemu: Translate feature names from query-cpu-model-expansion (rhbz#1697627) - qemu: Don't use full CPU model expansion (rhbz#1697627) - qemu: Make qemuMonitorGetGuestCPU usable on x86 only (rhbz#1697627) - cpu: Introduce virCPUDataAddFeature (rhbz#1697627) - qemu: Add type filter to qemuMonitorJSONParsePropsList (rhbz#1697627) - util: string: Introduce macro for automatic string lists (rhbz#1697627) - util: json: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1697627) - qemu: Introduce generic qemuMonitorGetGuestCPU (rhbz#1697627) - qemu_process: Prefer generic qemuMonitorGetGuestCPU (rhbz#1697627) - util: Rework virStringListAdd (rhbz#1697627) - conf: Introduce virCPUDefCheckFeatures (rhbz#1697627) - cpu_x86: Turn virCPUx86DataIteratorInit into a function (rhbz#1697627) - cpu_x86: Introduce virCPUx86FeatureFilter*MSR (rhbz#1697627) - cpu_x86: Read CPU features from IA32_ARCH_CAPABILITIES MSR (rhbz#1697627) - cpu_map: Introduce IA32_ARCH_CAPABILITIES MSR features (rhbz#1697627) - qemu: Forbid MSR features with old QEMU (rhbz#1697627) - qemu: Drop MSR features from host-model with old QEMU (rhbz#1697627) - cpu_x86: Fix memory leak - virCPUx86GetHost (rhbz#1697627) - qemu: Use @tmpChr in qemuDomainDetachChrDevice to build device string (rhbz#1624204) - qemu: Drop 'user-' prefix for guestfwd netdev (rhbz#1624204) - qemu_hotplug: Attach guestfwd using netdev_add (rhbz#1624204) - qemu_hotplug: Detach guestfwd using netdev_del (rhbz#1624204) - qemuhotplugtest: Test guestfwd attach and detach (rhbz#1624204) - daemon: Register secret driver before storage driver (rhbz#1685151) - bhyve: Move autostarting of domains into bhyveStateInitialize (rhbz#1685151) - Revert 'virStateDriver - Separate AutoStart from Initialize' (rhbz#1685151) - Revert 'Separate out StateAutoStart from StateInitialize' (rhbz#1685151) - util: moving 'type' argument to avoid issues with mount() syscall. (rhbz#1689297) - util: cgroup: use VIR_AUTOFREE instead of VIR_FREE for scalar types (rhbz#1689297) - vircgroup: Rename structs to start with underscore (rhbz#1689297) - vircgroup: Introduce standard set of typedefs and use them (rhbz#1689297) - vircgroup: Extract file link resolving into separate function (rhbz#1689297) - vircgroup: Remove unused function virCgroupKill() (rhbz#1689297) - vircgroup: Unexport unused function virCgroupAddTaskController() (rhbz#1689297) - vircgroup: Unexport unused function virCgroupRemoveRecursively (rhbz#1689297) - vircgroup: Move function used in tests into vircgrouppriv.h (rhbz#1689297) - vircgroup: Remove pointless bool parameter (rhbz#1689297) - vircgroup: Extract mount options matching into function (rhbz#1689297) - vircgroup: Use virCgroupMountOptsMatchController in virCgroupDetectPlacement (rhbz#1689297) - vircgroup: Introduce virCgroupEnableMissingControllers (rhbz#1689297) - vircgroup: machinename will never be NULL (rhbz#1689297) - vircgroup: Remove virCgroupAddTaskController (rhbz#1689297) - vircgroup: Introduce virCgroupGetMemoryStat (rhbz#1689297) - lxc: Use virCgroupGetMemoryStat (rhbz#1689297) - vircgroup: fix MinGW build (rhbz#1689297) - vircgroup: Duplicate string before modifying (rhbz#1689297) - vircgroup: Extract controller detection into function (rhbz#1689297) - vircgroup: Extract placement validation into function (rhbz#1689297) - vircgroup: Split virCgroupPathOfController into two functions (rhbz#1689297) - vircgroup: Call virCgroupRemove inside virCgroupMakeGroup (rhbz#1689297) - vircgroup: Simplify if conditions in virCgroupMakeGroup (rhbz#1689297) - vircgroup: Remove obsolete sa_assert (rhbz#1689297) - tests: Resolve possible overrun (rhbz#1689297) - vircgroup: cleanup controllers not managed by systemd on error (rhbz#1689297) - vircgroup: fix bug in virCgroupEnableMissingControllers (rhbz#1689297) - vircgroup: rename virCgroupAdd.*Task to virCgroupAdd.*Process (rhbz#1689297) - vircgroup: introduce virCgroupTaskFlags (rhbz#1689297) - vircgroup: introduce virCgroupAddThread (rhbz#1689297) - vircgroupmock: cleanup unused cgroup files (rhbz#1689297) - vircgroupmock: rewrite cgroup fopen mocking (rhbz#1689297) - vircgrouptest: call virCgroupDetectMounts directly (rhbz#1689297) - vircgrouptest: call virCgroupNewSelf instead virCgroupDetectMounts (rhbz#1689297) - util: introduce vircgroupbackend files (rhbz#1689297) - vircgroup: introduce cgroup v1 backend files (rhbz#1689297) - vircgroup: extract virCgroupV1Available (rhbz#1689297) - vircgroup: detect available backend for cgroup (rhbz#1689297) - vircgroup: extract virCgroupV1ValidateMachineGroup (rhbz#1689297) - vircgroup: extract virCgroupV1CopyMounts (rhbz#1689297) - vircgroup: extract v1 detect functions (rhbz#1689297) - vircgroup: extract virCgroupV1CopyPlacement (rhbz#1689297) - vircgroup: extract virCgroupV1ValidatePlacement (rhbz#1689297) - vircgroup: extract virCgroupV1StealPlacement (rhbz#1689297) - vircgroup: extract virCgroupV1DetectControllers (rhbz#1689297) - vircgroup: extract virCgroupV1HasController (rhbz#1689297) - vircgroup: extract virCgroupV1GetAnyController (rhbz#1689297) - vircgroup: extract virCgroupV1PathOfController (rhbz#1689297) - vircgroup: extract virCgroupV1MakeGroup (rhbz#1689297) - vircgroup: extract virCgroupV1Remove (rhbz#1689297) - vircgroup: extract virCgroupV1AddTask (rhbz#1689297) - vircgroup: extract virCgroupV1HasEmptyTasks (rhbz#1689297) - vircgroup: extract virCgroupV1BindMount (rhbz#1689297) - vircgroup: extract virCgroupV1SetOwner (rhbz#1689297) - vircgroup: extract virCgroupV1(Set|Get)BlkioWeight (rhbz#1689297) - vircgroup: extract virCgroupV1GetBlkioIoServiced (rhbz#1689297) - vircgroup: extract virCgroupV1GetBlkioIoDeviceServiced (rhbz#1689297) - vircgroup: extract virCgroupV1(Set|Get)BlkioDeviceWeight (rhbz#1689297) - vircgroup: extract virCgroupV1(Set|Get)BlkioDeviceReadIops (rhbz#1689297) - vircgroup: extract virCgroupV1(Set|Get)BlkioDeviceWriteIops (rhbz#1689297) - vircgroup: extract virCgroupV1(Set|Get)BlkioDeviceReadBps (rhbz#1689297) - vircgroup: extract virCgroupV1(Set|Get)BlkioDeviceWriteBps (rhbz#1689297) - vircgroup: extract virCgroupV1SetMemory (rhbz#1689297) - vircgroup: extract virCgroupV1GetMemoryStat (rhbz#1689297) - vircgroup: extract virCgroupV1GetMemoryUsage (rhbz#1689297) - vircgroup: extract virCgroupV1(Set|Get)Memory*Limit (rhbz#1689297) - vircgroup: extract virCgroupV1GetMemSwapUsage (rhbz#1689297) - vircgroup: extract virCgroupV1(Allow|Deny)Device (rhbz#1689297) - vircgroup: extract virCgroupV1(Allow|Deny)AllDevices (rhbz#1689297) - vircgroup: extract virCgroupV1(Set|Get)CpuShares (rhbz#1689297) - vircgroup: extract virCgroupV1(Set|Get)CpuCfsPeriod (rhbz#1689297) - vircgroup: extract virCgroupV1(Set|Get)CpuCfsQuota (rhbz#1689297) - vircgroup: extract virCgroupV1SupportsCpuBW (rhbz#1689297) - vircgroup: extract virCgroupV1GetCpuacct*Usage (rhbz#1689297) - vircgroup: extract virCgroupV1GetCpuacctStat (rhbz#1689297) - vircgroup: extract virCgroupV1(Set|Get)FreezerState (rhbz#1689297) - vircgroup: extract virCgroupV1(Set|Get)CpusetMems (rhbz#1689297) - vircgroup: extract virCgroupV1(Set|Get)CpusetMemoryMigrate (rhbz#1689297) - vircgroup: extract virCgroupV1(Set|Get)CpusetCpus (rhbz#1689297) - vircgroup: rename virCgroupController into virCgroupV1Controller (rhbz#1689297) - vircgroup: rename controllers to legacy (rhbz#1689297) - vircgroup: remove VIR_CGROUP_SUPPORTED (rhbz#1689297) - vircgroup: include system headers only on linux (rhbz#1689297) - vircgroupv1: fix build on non-linux OSes (rhbz#1689297) - Revert 'vircgroup: cleanup controllers not managed by systemd on error' (rhbz#1689297) - util: introduce cgroup v2 files (rhbz#1689297) - vircgroup: introduce virCgroupV2Available (rhbz#1689297) - vircgroup: introduce virCgroupV2ValidateMachineGroup (rhbz#1689297) - vircgroup: introduce virCgroupV2CopyMounts (rhbz#1689297) - vircgroup: introduce virCgroupV2CopyPlacement (rhbz#1689297) - vircgroup: introduce virCgroupV2DetectMounts (rhbz#1689297) - vircgroup: introduce virCgroupV2DetectPlacement (rhbz#1689297) - vircgroup: introduce virCgroupV2ValidatePlacement (rhbz#1689297) - vircgroup: introduce virCgroupV2StealPlacement (rhbz#1689297) - vircgroup: introduce virCgroupV2DetectControllers (rhbz#1689297) - vircgroup: introduce virCgroupV2HasController (rhbz#1689297) - vircgroup: introduce virCgroupV2GetAnyController (rhbz#1689297) - vircgroup: introduce virCgroupV2PathOfController (rhbz#1689297) - vircgroup: introduce virCgroupV2MakeGroup (rhbz#1689297) - vircgroup: introduce virCgroupV2Remove (rhbz#1689297) - vircgroup: introduce virCgroupV2AddTask (rhbz#1689297) - vircgroup: introduce virCgroupV2HasEmptyTasks (rhbz#1689297) - vircgroup: introduce virCgroupV2BindMount (rhbz#1689297) - vircgroup: introduce virCgroupV2SetOwner (rhbz#1689297) - vircgroup: introduce virCgroupV2(Set|Get)BlkioWeight (rhbz#1689297) - vircgroup: introduce virCgroupV2GetBlkioIoServiced (rhbz#1689297) - vircgroup: introduce virCgroupV2GetBlkioIoDeviceServiced (rhbz#1689297) - vircgroup: introduce virCgroupV2(Set|Get)BlkioDeviceWeight (rhbz#1689297) - vircgroup: introduce virCgroupV2(Set|Get)BlkioDeviceReadIops (rhbz#1689297) - vircgroup: introduce virCgroupV2(Set|Get)BlkioDeviceWriteIops (rhbz#1689297) - vircgroup: introduce virCgroupV2(Set|Get)BlkioDeviceReadBps (rhbz#1689297) - vircgroup: introduce virCgroupV2(Set|Get)BlkioDeviceWriteBps (rhbz#1689297) - vircgroup: introduce virCgroupV2SetMemory (rhbz#1689297) - vircgroup: introduce virCgroupV2GetMemoryStat (rhbz#1689297) - vircgroup: introduce virCgroupV2GetMemoryUsage (rhbz#1689297) - vircgroup: introduce virCgroupV2(Set|Get)MemoryHardLimit (rhbz#1689297) - vircgroup: introduce virCgroupV2(Set|Get)MemorySoftLimit (rhbz#1689297) - vircgroup: introduce virCgroupV2(Set|Get)MemSwapHardLimit (rhbz#1689297) - vircgroup: introduce virCgroupV2GetMemSwapUsage (rhbz#1689297) - vircgroup: introduce virCgroupV2(Set|Get)CpuShares (rhbz#1689297) - vircgroup: introduce virCgroupV2(Set|Get)CpuCfsPeriod (rhbz#1689297) - vircgroup: introduce virCgroupV2(Set|Get)CpuCfsQuota (rhbz#1689297) - vircgroup: introduce virCgroupV2SupportsCpuBW (rhbz#1689297) - vircgroup: introduce virCgroupV2GetCpuacctUsage (rhbz#1689297) - vircgroup: introduce virCgroupV2GetCpuacctStat (rhbz#1689297) - vircgroup: register cgroup v2 backend (rhbz#1689297) - vircgroup: add support for hybrid configuration (rhbz#1689297) - vircgroupmock: change cgroup prefix (rhbz#1689297) - vircgroupmock: add support to test cgroup v2 (rhbz#1689297) - vircgrouptest: introduce initFakeFS and cleanupFakeFS helpers (rhbz#1689297) - vircgrouptest: prepare testCgroupDetectMounts for cgroup v2 (rhbz#1689297) - vircgrouptest: add detect mounts test for cgroup v2 (rhbz#1689297) - vircgrouptest: add detect mounts test for hybrid cgroups (rhbz#1689297) - vircgrouptest: prepare validateCgroup for cgroupv2 (rhbz#1689297) - vircgrouptest: add cgroup v2 tests (rhbz#1689297) - vircgrouptest: add hybrid tests (rhbz#1689297) - virt-host-validate: rewrite cgroup detection to use util/vircgroup (rhbz#1689297) - virt-host-validate: require freezer for LXC (rhbz#1689297) - virt-host-validate: Fix build on non-Linux (rhbz#1689297) - tests: Use correct function name in error path (rhbz#1689297) - util: Fix virCgroupGetMemoryStat (rhbz#1689297) - tests: Augment vcgrouptest to add virCgroupGetMemoryStat (rhbz#1689297) - vircgroup: introduce virCgroupKillRecursiveCB (rhbz#1689297) - vircgroupv2: fix virCgroupV2ValidateMachineGroup (rhbz#1689297) - util: implement virCgroupV2(Set|Get)CpusetMems (rhbz#1689297) - util: implement virCgroupV2(Set|Get)CpusetMemoryMigrate (rhbz#1689297) - util: implement virCgroupV2(Set|Get)CpusetCpus (rhbz#1689297) - util: enable cgroups v2 cpuset controller for threads (rhbz#1689297) - util: vircgroup: pass parent cgroup into virCgroupDetectControllersCB (rhbz#1689297) - internal: introduce a family of NULLSTR macros (rhbz#1689297) - util: vircgroup: improve controller detection (rhbz#1689297) - util: vircgroupv2: use any controller to create thread directory (rhbz#1689297) - util: vircgroupv2: enable CPU controller only if it's available (rhbz#1689297) - util: vircgroupv2: separate return values of virCgroupV2EnableController (rhbz#1689297) - util: vircgroupv2: don't error out if enabling controller fails (rhbz#1689297) - util: vircgroupv2: mark only requested controllers as available (rhbz#1689297) - Revert 'util: vircgroup: pass parent cgroup into virCgroupDetectControllersCB' (rhbz#1689297) - util: vircgroupv2: stop enabling missing controllers with systemd (rhbz#1689297) [4.5.0-28] - Rebuild all virt packages to fix RHEL's upgrade path - Resolves: rhbz#1695587 (Ensure modular RPM upgrade path) [4.5.0-27] - RHEL: spec: Disable gluster on i686 (rhbz#1722668) - rpc: virnetlibsshsession: update deprecated functions (rhbz#1722735) [4.5.0-26] - api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161) - api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166) - api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167) - api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168) [4.5.0-25] - admin: reject clients unless their UID matches the current UID (CVE-2019-10132) - locking: restrict sockets to mode 0600 (CVE-2019-10132) - logging: restrict sockets to mode 0600 (CVE-2019-10132) - util: skip RDMA detection for non-PCI network devices (rhbz#1693299) - virfile: Detect ceph as shared FS (rhbz#1698133) - virfile: added GPFS as shared fs (rhbz#1698133) - util: bitmap: define cleanup function using VIR_DEFINE_AUTOPTR_FUNC (rhbz#1716943) - qemu: Rework setting process affinity (rhbz#1716943) - qemu: Set up EMULATOR thread and cpuset.mems before exec()-ing qemu (rhbz#1716943) - conf: Add definitions for 'uid' and 'fid' PCI address attributes (rhbz#1508149) - qemu: Introduce zPCI capability (rhbz#1508149) - qemu: Enable PCI multi bus for S390 guests (rhbz#1508149) - conf: Introduce extension flag and zPCI member for PCI address (rhbz#1508149) - conf: Introduce address caching for PCI extensions (rhbz#1508149) - qemu: Auto add pci-root for s390/s390x guests (rhbz#1508149) - conf: use virXMLFormatElement() in virDomainDeviceInfoFormat() (rhbz#1508149) - conf: Introduce parser, formatter for uid and fid (rhbz#1508149) - qemu: Add zPCI address definition check (rhbz#1508149) - conf: Allocate/release 'uid' and 'fid' in PCI address (rhbz#1508149) - qemu: Generate and use zPCI device in QEMU command line (rhbz#1508149) - qemu: Add hotpluging support for PCI devices on S390 guests (rhbz#1508149) - qemuDomainRemoveRNGDevice: Remove associated chardev too (rhbz#1508149) - qemu_hotplug: remove erroneous call to qemuDomainDetachExtensionDevice() (rhbz#1508149) - qemu_hotplug: remove another erroneous qemuDomainDetachExtensionDevice() call (rhbz#1508149) - util: Propagate numad failures correctly (rhbz#1716907) - util: Introduce virBitmapUnion() (rhbz#1716908) - util: Introduce virNumaNodesetToCPUset() (rhbz#1716908) - qemu: Fix qemuProcessInitCpuAffinity() (rhbz#1716908) - qemu: Fix leak in qemuProcessInitCpuAffinity() (rhbz#1716908) - qemu: Drop cleanup label from qemuProcessInitCpuAffinity() (rhbz#1716908) - qemu: Fix NULL pointer access in qemuProcessInitCpuAffinity() (rhbz#1716908) - qemuBuildMemoryBackendProps: Pass @priv instead of its individual members (rhbz#1624223) - qemu: Don't use -mem-prealloc among with .prealloc=yes (rhbz#1624223) - nwfilter: fix adding std MAC and IP values to filter binding (rhbz#1691356) - qemuProcessBuildDestroyMemoryPathsImpl: Don't overwrite error (rhbz#1658112) - qemu_security: Fully implement qemuSecurityDomainSetPathLabel (rhbz#1658112) - qemu: process: SEV: Assume libDir to be the directory to create files in (rhbz#1658112) - qemu: process: SEV: Relabel guest owner's SEV files created before start (rhbz#1658112) [4.5.0-24] - tests: qemuxml2argv: add CAPS_ARCH_LATEST macro (rhbz#1698855) - qemu: Add ccw support for vhost-vsock (rhbz#1698855) - qemu: Allow creating ppc64 guests with graphics and no USB mouse (rhbz#1683681) - conf: Expose virDomainSCSIDriveAddressIsUsed (rhbz#1692354) - qemuhotplugtest: Don't plug a SCSI disk at unit 7 (rhbz#1692354) - qemu_hotplug: Check for duplicate drive addresses (rhbz#1692354) - cpu_map: Add support for cldemote CPU feature (rhbz#1537731) - util: alloc: add macros for implementing automatic cleanup functionality (rhbz#1505998) - qemu: domain: Simplify non-VFIO memLockLimit calculation for PPC64 (rhbz#1505998) - qemu_domain: add a PPC64 memLockLimit helper (rhbz#1505998) - qemu_domain: NVLink2 bridge detection function for PPC64 (rhbz#1505998) - PPC64 support for NVIDIA V100 GPU with NVLink2 passthrough (rhbz#1505998) - cpu_x86: Do not cache microcode version (CVE-2018-12127, CVE-2019-11091, CVE-2018-12126, CVE-2018-12130) - qemu: Don't cache microcode version (CVE-2018-12127, CVE-2019-11091, CVE-2018-12126, CVE-2018-12130) - cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12127, CVE-2019-11091, CVE-2018-12126, CVE-2018-12130) - cpu_map: Define md-clear CPUID bit (CVE-2018-12127, CVE-2019-11091, CVE-2018-12126, CVE-2018-12130) [4.5.0-23] - network: explicitly allow icmp/icmpv6 in libvirt zonefile (rhbz#1650320) [4.5.0-22] - util: fix memory leak in virFirewallDInterfaceSetZone() (rhbz#1650320) [4.5.0-21] - docs: Drop /dev/net/tun from the list of shared devices (rhbz#1665400) - qemu: conf: Remove /dev/sev from the default cgroup device acl list (rhbz#1665400) - qemu: cgroup: Expose /dev/sev/ only to domains that require SEV (rhbz#1665400) - qemu: domain: Add /dev/sev into the domain mount namespace selectively (rhbz#1665400) - security: dac: Relabel /dev/sev in the namespace (rhbz#1665400) - qemu: caps: Use CAP_DAC_OVERRIDE for probing to avoid permission issues (rhbz#1665400) - qemu: caps: Don't try to ask for CAP_DAC_OVERRIDE if non-root (rhbz#1665400) - Revert 'RHEL: Require firewalld-filesystem for firewalld rpm macros' (rhbz#1650320) - Revert 'RHEL: network: regain guest network connectivity after firewalld switch to nftables' (rhbz#1650320) - configure: change HAVE_FIREWALLD to WITH_FIREWALLD (rhbz#1650320) - util: move all firewalld-specific stuff into its own files (rhbz#1650320) - util: new virFirewallD APIs + docs (rhbz#1650320) - configure: selectively install a firewalld 'libvirt' zone (rhbz#1650320) - network: set firewalld zone of bridges to 'libvirt' zone when appropriate (rhbz#1650320) - network: allow configuring firewalld zone for virtual network bridge device (rhbz#1650320) - util: remove test code accidentally committed to virFirewallDZoneExists (rhbz#1650320) - qemu: command: Don't skip 'readonly' and throttling info for empty drive (rhbz#1670337) [4.5.0-20] - RHEL: qemu: Fix crash trying to use iSCSI hostdev (rhbz#1669424) [4.5.0-19] - qemu: Fix logic error in qemuSetUnprivSGIO (rhbz#1666605) - tests: qemuxml2argv: Add test case for empty CDROM with cache mode (rhbz#1553255) - qemu: command: Don't format image properties for empty -drive (rhbz#1553255) [4.5.0-18] - conf: correct false boot order error during domain parse (rhbz#1630393) - qemu: Remove duplicated qemuAgentCheckError (rhbz#1665000) - qemu: require reply from guest agent in qemuAgentGetInterfaces (rhbz#1665000) - qemu: Filter non SCSI hostdevs in qemuHostdevPrepareSCSIDevices (rhbz#1665244) - util: remove const specifier from nlmsghdr arg to virNetlinkDumpCallback() (rhbz#1583131) - util: add a function to insert new interfaces to IPv6CheckForwarding list (rhbz#1583131) - util: use nlmsg_find_attr() instead of an open-coded loop (rhbz#1583131) - util: check accept_ra for all nexthop interfaces of multipath routes (rhbz#1583131) - util: make forgotten changes suggested during review of commit d40b820c (rhbz#1583131) [4.5.0-17] - virsh: Strip XML declaration when extracting CPU XMLs (rhbz#1659048) - RHEL: qemu: Add ability to set sgio values for hostdev (rhbz#1582424) - RHEL: qemu: Add check for unpriv sgio for SCSI generic host device (rhbz#1582424) - qemu: Alter @val usage in qemuSetUnprivSGIO (rhbz#1656362) - qemu: Alter qemuSetUnprivSGIO hostdev shareable logic (rhbz#1656362) [4.5.0-16] - util: Don't overflow in virRandomBits (rhbz#1655586) - virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1655586) - spec: remove libcgroup and cgconfig (rhbz#1602407) - qemu: Drop duplicated code from qemuDomainDefValidateFeatures() (rhbz#1647822) - tests: Add capabilities data for QEMU 3.1.0 on ppc64 (rhbz#1647822) - qemu: Introduce QEMU_CAPS_MACHINE_PSERIES_CAP_NESTED_HV (rhbz#1647822) - conf: Parse and format nested-hv feature (rhbz#1647822) - qemu: Format nested-hv feature on the command line (rhbz#1647822) - qemu: Add check for whether KVM nesting is enabled (rhbz#1645139) - secret: Add check/validation for correct usage when LookupByUUID (rhbz#1656255) - cpu: Add support for 'stibp' x86_64 feature (rhbz#1655032) [4.5.0-15] - virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1634782) - qemu: Ignore nwfilter binding instantiation issues during reconnect (rhbz#1648544) - qemu: Set identity for the reconnect all thread (rhbz#1648546) - Revert 'access: Modify the VIR_ERR_ACCESS_DENIED to include driverName' (rhbz#1631608) - access: Modify the VIR_ERR_ACCESS_DENIED to include driverName (rhbz#1631608) - qemu: add vfio-ap capability (rhbz#1508146) - qemu: vfio-ap device support (rhbz#1508146) - qemu: Extract MDEV VFIO PCI validation code into a separate helper (rhbz#1508146) - conf: Move VFIO AP validation from post parse to QEMU validation code (rhbz#1508146) - qemu: Fix post-copy migration on the source (rhbz#1649169) [4.5.0-14] - storage: Remove secretPath from _virStorageBackendQemuImgInfo (rhbz#1645459) - storage: Allow for inputvol to have any format for encryption (rhbz#1645459) - storage: Allow inputvol to be encrypted (rhbz#1645459) - access: Modify the VIR_ERR_ACCESS_DENIED to include driverName (rhbz#1631608) - docs: Enhance polkit documentation to describe secondary connection (rhbz#1631608) - qemu: Don't ignore resume events (rhbz#1634758, rhbz#1643338) [4.5.0-13] - Revert 'spec: Temporarily drop gluster support' (rhbz#1599339) [4.5.0-12] - RHEL: Require firewalld-filesystem for firewalld rpm macros (rhbz#1639932) [4.5.0-11] - virfile: fix cast-align error (rhbz#1634782) - virfiletest: Fix test name prefix for virFileInData test (rhbz#1634782) - virfiletst: Test virFileIsSharedFS (rhbz#1634782) - virFileIsSharedFSType: Detect direct mount points (rhbz#1634782) - virfile: Rework virFileIsSharedFixFUSE (rhbz#1634782) - RHEL: network: regain guest network connectivity after firewalld switch to nftables (rhbz#1638864) [4.5.0-10] - conf: Fix check for chardev source path (rhbz#1609723) - tests: Reuse qemucapabilities data for qemucaps2xml (rhbz#1629862) - tests: Add more tests to qemucaps2xml (rhbz#1629862) - qemu: Drop QEMU_CAPS_ENABLE_KVM (rhbz#1629862) - qemu: Avoid probing non-native binaries all the time (rhbz#1629862) - qemu: Clarify QEMU_CAPS_KVM (rhbz#1629862) - qemu: Don't check for /dev/kvm presence (rhbz#1629862) - tests: Follow up on qemucaps2xmldata rename (rhbz#1629862) - security: dac: also label listen UNIX sockets (rhbz#1634775) - spec: Set correct TLS priority (rhbz#1632269) - spec: Build ceph and gluster support everywhere (rhbz#1599546) - virsh: Require explicit --domain for domxml-to-native (rhbz#1634769) - virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1634782) - qemu: fix up permissions for pre-created UNIX sockets (rhbz#1634775) - cpu_map: Add features for Icelake CPUs (rhbz#1527657, rhbz#1526625) - cpu_map: Add Icelake CPU models (rhbz#1526625) - qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634758) - qemu: Report more appropriate running reasons (rhbz#1634758) - qemu: Pass running reason to RESUME event handler (rhbz#1634758) - qemu: Map running reason to resume event detail (rhbz#1634758) - qemu: Avoid duplicate resume events and state changes (rhbz#1634758) - conf: qemu: add support for Hyper-V frequency MSRs (rhbz#1589702) - conf: qemu: add support for Hyper-V reenlightenment notifications (rhbz#1589702) - conf: qemu: add support for Hyper-V PV TLB flush (rhbz#1589702) [4.5.0-9] - RHEL: Fix virConnectGetMaxVcpus output (rhbz#1582222) - storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1622534) - access: Fix nwfilter-binding ACL access API name generation (rhbz#1622540) - conf: Add validation of input devices (rhbz#1591240) - tests: qemu: Remove disk from graphics-vnc-tls (rhbz#1598167) - tests: qemu: test more versions for graphics-vnc-tls (rhbz#1598167) - qemu: vnc: switch to tls-creds-x509 (rhbz#1598167) - qemu: mdev: Use vfio-pci 'display' property only with vfio-pci mdevs (rhbz#1624740) - virDomainDefCompatibleDevice: Relax alias change check (rhbz#1603133) - virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1603133) - virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623158) - RHEL: spec: Require python3-devel on RHEL-8 (rhbz#1518446) - qemu: monitor: Remove qemuMonitorJSONExtractCPUArchInfo wrapper (rhbz#1598829) - qemu: monitor: Use 'target' instead of 'arch' in reply of 'query-cpus-fast' (rhbz#1598829) [4.5.0-8] - tests: Add missing thread_siblings_list files (rhbz#1608479) - util: Rewrite virHostCPUCountThreadSiblings() (rhbz#1608479) - utils: Remove arbitrary limit on socket_id/core_id (rhbz#1608479) - tests: Add linux-high-ids test (rhbz#1608479) - qemu: hotplug: Fix asynchronous unplug of 'shmem' (rhbz#1618680) - tests: rename hugepages to hugepages-default (rhbz#1615461) - tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1615461) - tests: rename hugepages-numa into hugepages-numa-default (rhbz#1615461) - tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1615461) - tests: extract pages-discard out of hugepages-pages (rhbz#1615461) - tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1615461) - tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1615461) - tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1615461) - tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1615461) - tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1615461) - tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1615461) - tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1615461) - tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1615461) - tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1615461) - tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1615461) - tests: introduce hugepages-nodeset (rhbz#1615461) - conf: Move hugepage XML validation check out of qemu_command (rhbz#1615461) - conf: Move hugepages validation out of XML parser (rhbz#1615461) - conf: Introduce virDomainDefPostParseMemtune (rhbz#1615461) - tests: sev: Test launch-security with specific QEMU version (rhbz#1619150) - qemu: Fix probing of AMD SEV support (rhbz#1619150) - qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1619150) - conf: Parse guestfwd channel device info again (rhbz#1610072) [4.5.0-7] - qemu_migration: Avoid writing to freed memory (rhbz#1615854) [4.5.0-6] - qemu: Exempt video model 'none' from getting a PCI address on Q35 - conf: Fix a error msg typo in virDomainVideoDefValidate [4.5.0-5] - esx storage: Fix typo lsilogic -> lsiLogic - networkGetDHCPLeases: Don't always report error if unable to read leases file - nwfilter: Resolve SEGV for NWFilter Snoop processing - qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs - qemuDomainSaveMemory: Don't enforce dynamicOwnership - domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl - examples: Add clean-traffic-gateway into nwfilters [4.5.0-4] - qemu: hotplug: don't overwrite error message in qemuDomainAttachNetDevice - qemu: hotplug: report error when changing rom enabled attr for net iface - qemu: Fix setting global_period cputune element - tests: qemucaps: Add test data for upcoming qemu 3.0.0 - qemu: capabilities: Add capability for werror/rerror for 'usb-device' frontend - qemu: command: Move graphics iteration to its own function - qemu: address: Handle all the video devices within a single loop - conf: Introduce virDomainVideoDefClear helper - conf: Introduce virDomainDefPostParseVideo helper - qemu: validate: Enforce compile time switch type checking for videos - tests: Add capabilities data for QEMU 2.11 x86_64 - tests: Update capabilities data for QEMU 3.0.0 x86_64 - qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc - qemu: caps: Introduce a capability for egl-headless - qemu: Introduce a new graphics display type 'headless' - qemu: caps: Add vfio-pci.display capability - conf: Introduce virDomainGraphicsDefHasOpenGL helper - conf: Replace 'error' with 'cleanup' in virDomainHostdevDefParseXMLSubsys - conf: Introduce new <hostdev> attribute 'display' - qemu: command: Enable formatting vfio-pci.display option onto cmdline - docs: Rephrase the mediated devices hostdev section a bit - conf: Introduce new video type 'none' - virt-xml-validate: Add schema for nwfilterbinding - tools: Fix typo generating adapter_wwpn field - src: Fix memory leak in virNWFilterBindingDispose [4.5.0-3] - qemu: hotplug: Do not try to add secret object for TLS if it does not exist - qemu: monitor: Make qemuMonitorAddObject more robust against programming errors - spec: Explicitly require matching libvirt-libs - virDomainConfNWFilterInstantiate: initialize @xml to avoid random crash - qemuProcessStartPRDaemonHook: Try to set NS iff domain was started with one - qemuDomainValidateStorageSource: Relax PR validation - virStoragePRDefFormat: Suppress path formatting for migratable XML - qemu: Wire up PR_MANAGER_STATUS_CHANGED event - qemu_monitor: Introduce qemuMonitorJSONGetPRManagerInfo - qemu: Fetch pr-helper process info on reconnect - qemu: Fix ATTRIBUTE_NONNULL for qemuMonitorAddObject - virsh.pod: Fix a command name typo in nwfilter-binding-undefine - docs: schema: Add missing <alias> to vsock device - virnetdevtap: Don't crash on !ifname in virNetDevTapInterfaceStats - tests: fix TLS handshake failure with TLS 1.3 [4.5.0-2] - qemu: Add capability for the HTM pSeries feature - conf: Parse and format the HTM pSeries feature - qemu: Format the HTM pSeries feature - qemu: hotplug: Don't access srcPriv when it's not allocated - qemuDomainNestedJobAllowed: Allow QEMU_JOB_NONE - src: Mention DEVICE_REMOVAL_FAILED event in virDomainDetachDeviceAlias docs - virsh.pod: Drop --persistent for detach-device-alias - qemu: don't use chardev FD passing with standalone args - qemu: remove chardevStdioLogd param from vhostuser code path - qemu: consolidate parameters of qemuBuildChrChardevStr into flags - qemu: don't use chardev FD passing for vhostuser backend - qemu: fix UNIX socket chardevs operating in client mode - qemuDomainDeviceDefValidateNetwork: Check for range only if IP prefix set - spec: Temporarily drop gluster support [4.5.0-1] - Rebased to libvirt-4.5.0 [4.3.0-1] - Rebased to libvirt-4.3.0 [4.1.0-2] - Fix systemd macro argument with line continuations (rhbz#1558648) [4.1.0-1] - Rebase to version 4.1.0 [4.0.0-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [4.0.0-1] - Rebase to version 4.0.0 [3.10.0-2] - Rebuild for xen 4.10 [3.10.0-1] - Rebase to version 3.10.0 [3.9.0-1] - Rebase to version 3.9.0 [3.8.0-1] - Rebase to version 3.8.0 [3.7.0-1] - Rebase to version 3.7.0 [3.6.0-1] - Rebase to version 3.6.0 [3.5.0-4] - Rebuild with binutils fix for ppc64le (#1475636) [3.5.0-3] - Disabled RBD on i386, arm, ppc64 (rhbz #1474743) [3.5.0-2] - Rebuild for xen 4.9 [3.5.0-1] - Rebase to version 3.5.0 [3.4.0-1] - Rebase to version 3.4.0 [3.3.0-1] - Rebase to version 3.3.0 [3.2.0-1] - Rebase to version 3.2.0 [3.1.0-1] - Rebase to version 3.1.0 [3.0.0-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [3.0.0-1] - Rebase to version 3.0.0 libvirt-dbus [1.3.0-2.el8] - Resolves: bz#2000225 (Rebase virt:rhel module:stream based on AV-8.6) [1.3.0] - Resolves: bz#1810193 (Upgrade components in virt:rhel module:stream for RHEL-8.3 release) [1.2.0-3] - Rebuild all virt packages to fix RHEL's upgrade path - Resolves: rhbz#1695587 (Ensure modular RPM upgrade path) [1.2.0-2] - util: fix virtDBusUtilDecodeUUID (rhbz#1647823) [1.2.0-1] - Rebased to libvirt-dbus-1.2.0 (rhbz#1630196) [1.0.0-1] - Rebase from Fedora libvirt-python nbdkit [1.24.0-5] - vddk: Add support for VDDK 8.0.0 resolves: rhbz#2143907 netcf perl-Sys-Virt qemu-kvm [6.2.0-32.el8_8] - kvm-aio_wait_kick-add-missing-memory-barrier.patch [bz#2168472] - kvm-qatomic-add-smp_mb__before-after_rmw.patch [bz#2168472] - kvm-qemu-thread-posix-cleanup-fix-document-QemuEvent.patch [bz#2168472] - kvm-qemu-thread-win32-cleanup-fix-document-QemuEvent.patch [bz#2168472] - kvm-edu-add-smp_mb__after_rmw.patch [bz#2168472] - kvm-aio-wait-switch-to-smp_mb__after_rmw.patch [bz#2168472] - kvm-qemu-coroutine-lock-add-smp_mb__after_rmw.patch [bz#2168472] - kvm-physmem-add-missing-memory-barrier.patch [bz#2168472] - kvm-async-update-documentation-of-the-memory-barriers.patch [bz#2168472] - kvm-async-clarify-usage-of-barriers-in-the-polling-case.patch [bz#2168472] - kvm-scsi-protect-req-aiocb-with-AioContext-lock.patch [bz#2090990] - kvm-dma-helpers-prevent-dma_blk_cb-vs-dma_aio_cancel-rac.patch [bz#2090990] - kvm-virtio-scsi-reset-SCSI-devices-from-main-loop-thread.patch [bz#2090990] - Resolves: bz#2168472 (Guest hangs when starting or rebooting) - Resolves: bz#2090990 (qemu crash with error scsi_req_unref(SCSIRequest *): Assertion req->refcount > 0' failed or scsi_dma_complete(void *, int): Assertion r->req.aiocb != NULL' failed [8.7.0]) [6.2.0-31] - kvm-io-Add-support-for-MSG_PEEK-for-socket-channel.patch [bz#2137740] - kvm-migration-check-magic-value-for-deciding-the-mapping.patch [bz#2137740] - kvm-target-s390x-arch_dump-Fix-memory-corruption-in-s390.patch [bz#2168187] - Resolves: bz#2137740 (Multifd migration fails under a weak network/socket ordering race) - Resolves: bz#2168187 ([s390x] qemu-kvm coredumps when SE crashes) [6.2.0-30] - kvm-qcow2-Fix-theoretical-corruption-in-store_bitmap-err.patch [bz#2147617] - kvm-qemu-img-commit-Report-errors-while-closing-the-imag.patch [bz#2147617] - kvm-qemu-img-bitmap-Report-errors-while-closing-the-imag.patch [bz#2147617] - kvm-qemu-iotests-Test-qemu-img-bitmap-commit-exit-code-o.patch [bz#2147617] - Resolves: bz#2147617 (qemu-img finishes successfully while having errors in commit or bitmaps operations) [6.2.0-29] - kvm-block-mirror-Do-not-wait-for-active-writes.patch [bz#2125119] - kvm-block-mirror-Drop-mirror_wait_for_any_operation.patch [bz#2125119] - kvm-block-mirror-Fix-NULL-s-job-in-active-writes.patch [bz#2125119] - kvm-accel-introduce-accelerator-blocker-API.patch [bz#2161188] - kvm-KVM-keep-track-of-running-ioctls.patch [bz#2161188] - kvm-kvm-Atomic-memslot-updates.patch [bz#2161188] - kvm-migration-Read-state-once.patch [bz#2074205] - kvm-s390x-pci-RPCIT-second-pass-when-mappings-exhausted.patch [bz#2163713] - kvm-s390x-pci-coalesce-unmap-operations.patch [bz#2163713] - kvm-s390x-pci-shrink-DMA-aperture-to-be-bound-by-vfio-DM.patch [bz#2163713] - kvm-s390x-pci-reset-ISM-passthrough-devices-on-shutdown-.patch [bz#2163713] - Resolves: bz#2125119 (Mirror job with 'copy-mode':'write-blocking' that used for storage migration can't converge under heavy I/O) - Resolves: bz#2161188 (SVM: non atomic memslot updates cause boot failure with seabios and cpu-pm=on) - Resolves: bz#2074205 (while live-migrating many instances concurrently, libvirt sometimes return internal error: migration was active, but no RAM info was set) - Resolves: bz#2163713 ([s390x] VM fails to start with ISM passed through) [6.2.0-28] - kvm-s390x-tod-kvm-don-t-save-restore-the-TOD-in-PV-guest.patch [bz#2155448] - Resolves: bz#2155448 (RHEL8.8 - KVM: s390: pv: don't allow userspace to set the clock under PV - QEMU part) [6.2.0-27] - kvm-hw-display-qxl-Have-qxl_log_command-Return-early-if-.patch [bz#2148545] - kvm-hw-display-qxl-Document-qxl_phys2virt.patch [bz#2148545] - kvm-hw-display-qxl-Pass-requested-buffer-size-to-qxl_phy.patch [bz#2148545] - kvm-hw-display-qxl-Avoid-buffer-overrun-in-qxl_phys2virt.patch [bz#2148545] - kvm-hw-display-qxl-Assert-memory-slot-fits-in-preallocat.patch [bz#2148545] - Resolves: bz#2148545 (CVE-2022-4144 virt:rhel/qemu-kvm: QEMU: QXL: qxl_phys2virt unsafe address translation can lead to out-of-bounds read [rhel-8]) [6.2.0-26] - kvm-docs-system-s390x-Document-the-loadparm-machine-prop.patch [bz#2128225] - kvm-s390x-Register-TYPE_S390_CCW_MACHINE-properties-as-c.patch [bz#2128225] - kvm-ui-vnc.c-Fixed-a-deadlock-bug.patch [bz#2141896] - Resolves: bz#2128225 ([s390x] [RHEL8][s390x-ccw bios] lacking document about parameter loadparm in qemu) - Resolves: bz#2141896 (VMs hung on vnc_clipboard_send) [6.2.0-25] - kvm-hw-acpi-Add-ospm_status-hook-implementation-for-acpi.patch [bz#2132609] - kvm-target-arm-kvm-Retry-KVM_CREATE_VM-call-if-it-fails-.patch [bz#2132609] - Resolves: bz#2132609 (qemu-kvm: backport some aarch64 fixes) [6.2.0-24] - kvm-s390x-pci-use-a-reserved-ID-for-the-default-PCI-grou.patch [bz#1664378 bz#2043909] - kvm-s390x-pci-don-t-use-hard-coded-dma-range-in-reg_ioat.patch [bz#1664378 bz#2043909] - kvm-s390x-pci-use-the-passthrough-measurement-update-int.patch [bz#1664378 bz#2043909] - kvm-s390x-pci-add-supported-DT-information-to-clp-respon.patch [bz#1664378 bz#2043909] - kvm-Update-linux-headers-to-v6.0-rc4.patch [bz#1664378 bz#2043909] - kvm-s390x-pci-add-routine-to-get-host-function-handle-fr.patch [bz#1664378 bz#2043909] - kvm-s390x-pci-enable-for-load-store-interpretation.patch [bz#1664378 bz#2043909] - kvm-s390x-pci-don-t-fence-interpreted-devices-without-MS.patch [bz#1664378 bz#2043909] - kvm-s390x-pci-enable-adapter-event-notification-for-inte.patch [bz#1664378 bz#2043909] - kvm-s390x-pci-let-intercept-devices-have-separate-PCI-gr.patch [bz#1664378 bz#2043909] - kvm-s390x-pci-reflect-proper-maxstbl-for-groups-of-inter.patch [bz#1664378 bz#2043909] - kvm-s390x-s390-virtio-ccw-Switch-off-zPCI-enhancements-o.patch [bz#1664378 bz#2043909] - kvm-dump-Use-ERRP_GUARD.patch [bz#1664378 bz#2043909] - kvm-dump-Remove-the-sh_info-variable.patch [bz#1664378 bz#2043909] - kvm-dump-Introduce-shdr_num-to-decrease-complexity.patch [bz#1664378 bz#2043909] - kvm-dump-Remove-the-section-if-when-calculating-the-memo.patch [bz#1664378 bz#2043909] - kvm-dump-Add-more-offset-variables.patch [bz#1664378 bz#2043909] - kvm-dump-Introduce-dump_is_64bit-helper-function.patch [bz#1664378 bz#2043909] - kvm-dump-Consolidate-phdr-note-writes.patch [bz#1664378 bz#2043909] - kvm-dump-Cleanup-dump_begin-write-functions.patch [bz#1664378 bz#2043909] - kvm-dump-Consolidate-elf-note-function.patch [bz#1664378 bz#2043909] - kvm-dump-Replace-opaque-DumpState-pointer-with-a-typed-o.patch [bz#1664378 bz#2043909] - kvm-dump-Rename-write_elf_loads-to-write_elf_phdr_loads.patch [bz#1664378 bz#2043909] - kvm-dump-Refactor-dump_iterate-and-introduce-dump_filter.patch [bz#1664378 bz#2043909] - kvm-dump-Rework-get_start_block.patch [bz#1664378 bz#2043909] - kvm-dump-Rework-filter-area-variables.patch [bz#1664378 bz#2043909] - kvm-dump-Rework-dump_calculate_size-function.patch [bz#1664378 bz#2043909] - kvm-dump-Split-elf-header-functions-into-prepare-and-wri.patch [bz#1664378 bz#2043909] - kvm-dump-Rename-write_elf-_phdr_note-to-prepare_elf-_phd.patch [bz#1664378 bz#2043909] - kvm-dump-simplify-a-bit-kdump-get_next_page.patch [bz#1664378 bz#2043909] - kvm-dump-fix-kdump-to-work-over-non-aligned-blocks.patch [bz#1664378 bz#2043909] - kvm-dump-Use-a-buffer-for-ELF-section-data-and-headers.patch [bz#1664378 bz#2043909] - kvm-dump-Write-ELF-section-headers-right-after-ELF-heade.patch [bz#1664378 bz#2043909] - kvm-dump-Reorder-struct-DumpState.patch [bz#1664378 bz#2043909] - kvm-dump-Reintroduce-memory_offset-and-section_offset.patch [bz#1664378 bz#2043909] - kvm-dump-Add-architecture-section-and-section-string-tab.patch [bz#1664378 bz#2043909] - kvm-s390x-Add-protected-dump-cap.patch [bz#1664378 bz#2043909] - kvm-s390x-Introduce-PV-query-interface.patch [bz#1664378 bz#2043909] - kvm-include-elf.h-add-s390x-note-types.patch [bz#1664378 bz#2043909] - kvm-s390x-Add-KVM-PV-dump-interface.patch [bz#1664378 bz#2043909] - kvm-s390x-pv-Add-dump-support.patch [bz#1664378 bz#2043909] - kvm-ui-vnc-clipboard-fix-integer-underflow-in-vnc_client.patch [bz#2129760] - Resolves: bz#1664378 ([IBM 8.8 FEAT] Enhanced Interpretation for PCI Functions (kvm) - qemu part) - Resolves: bz#2043909 ([IBM 8.8 FEAT] KVM: Secure Execution guest dump encryption with customer keys - qemu part) - Resolves: bz#2129760 (CVE-2022-3165 virt:rhel/qemu-kvm: QEMU: VNC: integer underflow in vnc_client_cut_text_ext leads to CPU exhaustion [rhel-8]) [6.2.0-23] - kvm-virtio-fix-the-condition-for-iommu_platform-not-supp.patch [bz#2116302] - kvm-virtio-fix-feature-negotiation-for-ACCESS_PLATFORM.patch [bz#2116302] - Resolves: bz#2116302 (RHEL8.6 - virtiofs will not mount fs on secure execution guest) seabios sgabios supermin [5.2.1-2.el8] - Supermin should ignore +debug kernels resolves: rhbz#2051332 - Add copy-patches script. [5.2.1-1.el8] - Resolves: bz#2000225 (Rebase virt:rhel module:stream based on AV-8.6) [5.1.19] - Resolves: bz#1810193 (Upgrade components in virt:rhel module:stream for RHEL-8.3 release) [5.1.19-9] - Rebuild all virt packages to fix RHEL's upgrade path - Resolves: rhbz#1695587 (Ensure modular RPM upgrade path) [5.1.19-8] - Pass CFLAGS & LDFLAGS to final supermin link resolves: rhbz#1624175 [5.1.19-7] - Rebuild for OCaml 4.07.0. [5.1.19-6] - Drop dietlibc in RHEL 8 resolves: rhbz#1588067 [5.1.19-5] - Bump release and rebuild. [5.1.19-4] - Reenable hardened build [5.1.19-3] - Fix bytes/string problems. [5.1.19-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [5.1.19-1] - New upstream version 5.1.19. - Remove all patches, now upstream. [5.1.18-5] - Rebuilt for RPM soname bump [5.1.18-4] - Fix supermin crash with truncated vmlinuz file (RHBZ#1477758). - Include all upstream patches since 5.1.18. [5.1.18-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild [5.1.18-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [5.1.18-1] - New upstream release 5.1.18. - Fixes problem with creating incorrect symlinks (RHBZ#1470157). [5.1.17-5] - Enable dietlibc on aarch64 and POWER. [5.1.17-4] - Drop dependency on hawkey and versioned dependencies on dnf. [5.1.17-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [5.1.17-2] - Rebuild for OCaml 4.04.0. [5.1.17-1] - New upstream release 5.1.17. - Check signature on the tarball before unpacking it. - Remove patches, all upstream. [5.1.16-6] - Switch to dietlibc on s390x [5.1.16-5] - Do not break the binary on interpreted builds (#1375213) [5.1.16-4] - Add all upstream patches since 5.1.16 was released. [5.1.16-3] - Add upstream patch for DAX / vNVDIMM support. [5.1.16-2] - New upstream version 5.1.16. - Drop all patches since they are upstream. - Depend on systemd-udev to work around RHBZ#1331012. [5.1.15-2] - Add all upstream patches since 5.1.15 was released. - These should improve boot performance and initrd size. [5.1.15-1] - New upstream version 5.1.15. - Remove all patches, since they are now included in this version. - Enable dietlibc, remove glibc-static, xz-static, zlib-static. [5.1.14-4] - Add more patches since 5.1.14. [5.1.14-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [5.1.14-2] - Add all patches since 5.1.14. [5.1.14-1] - New upstream version 5.1.14. - Remove all patches - now upstream. [5.1.13-4] - Pull in all upstream patches since 5.1.13. - Choose providers better (RHBZ#1266918). - Use autopatch. - Explicitly depend on pod2html. [5.1.13-3] - Bump version to rebuild against new RPM in Rawhide. [5.1.13-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [5.1.13-1] - New upstream version 5.1.13. - Remove patch, now upstream. [5.1.12-11] - Prefer 'dnf download' over 'yumdownloader' (again). - BR grubby for the tests to work. [5.1.12-9] - Revert back to yumdownloader (RHBZ#1186948). [5.1.12-8] - Prefer 'dnf download' over 'yumdownloader'. [5.1.12-7] - Disable hardened build again. See RHBZ#1202091 RHBZ#1204162. [5.1.12-6] - Enable hardening flags by building the static 'init' specially before the main build. - Use _smp_mflags. [5.1.12-4] - Add a -devel subpackage containing automated RPM dependency generator for supermin appliances. [5.1.12-2] - Disable hardened build as it breaks building the static 'init' binary. [5.1.12-1] - New upstream version 5.1.12. - Includes ARM fix: lpae kernels can now be booted (RHBZ#1199733). [5.1.11-2] - Rebuild for xz-5.2.0 in Rawhide (RHBZ#1179252). [5.1.11-1] - New upstream version 5.1.11. [5.1.10-2] - Update to upstream commit d78c898c7e2bc5f12cbebef98b95a7908d9120f1. - BR rpm-devel, since it is now used instead of invoking rpm. - BR automake and autoconf, and run autoreconf (configure.ac is modified by the patches). [5.1.10-1] - New upstream version 5.1.10. - Remove patch which is now included upstream. [5.1.9-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild [5.1.9-2] - Add upstream patch to avoid endless loop in Rawhide. [5.1.9-1] - New upstream version 5.1.9. - Remove patches which are now upstream. [5.1.8-9] - Add Requires findutils (RHBZ#1113029). [5.1.8-8] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild [5.1.8-7] - Add patch to fix RPM handler when filenames may contain spaces. [5.1.8-4] - Skip execstack test on Fedora 20 (ARM only). [5.1.8-3] - BR xz-static & xz-devel packages, to support xz-compressed kernel modules. [5.1.8-1] - New upstream version 5.1.8. - Remove patches which are now upstream. [5.1.7-3] - Add upstream patch which removes need to run execstack (RHBZ#1093261). [5.1.7-2] - Add patch to fix quoting around mke2fs parameter (RHBZ#1084960). [5.1.7-1] - New upstream version 5.1.7. - Remove ppc64p7 patch which is now upstream. [5.1.6-5] - Requires tar, which is not installed in an @Core installation. [5.1.6-4] - Add upstream patch to fix supermin on ppc64p7. [5.1.6-3] - New upstream version 5.1.6. - Fix tests. [5.1.5-2] - Disable execstack on aarch64. It comes from prelink which does not exist on aarch64. [5.1.5-1] - New upstream version 5.1.5. [5.1.3-1] - New upstream version 5.1.3. [5.1.2-1] - New upstream version 5.1.2. - Fixes a serious bug in --build mode. [5.1.1-1] - New upstream version 5.1.1. - Remove patch which is now upstream. [5.1.0-3] - Add BR yum-utils (for yumdownloader). - Add upstream patch which stops duplicate packages appearing. [5.1.0-2] - New upstream version 5.1.0. - Note this is effectively a rewrite, and is not completely compatible. - There is no separate 'supermin-helper' subpackage any more. - Requires rpm instead of yum. [4.1.6-2] - New upstream version 4.1.6. - Should fix all autotools brokenness. - Man pages are now all in section 1. - Remove patch which is now upstream. - +BR /usr/bin/execstack (from prelink). [4.1.5-5] - Rerun autoreconf to fix autotools brokenness. [4.1.5-4] - Why was prelink required? Remove it. [4.1.5-3] - correct Obsoletes version for febootstrap and febootstrap-supermin-helper [4.1.5-2] - (For ARM) Don't crash if SUPERMIN_DTB is set and --dtb not specified. [4.1.5-1] - New upstream version 4.1.5. - Has (optionally) a new command line syntax. - Supports device trees for ARM. [4.1.4-1] - New upstream version 4.1.4. - Supports compressed cpio image files, experimentally. [4.1.3-1] - New upstream version 4.1.3. - Remove patch which is now upstream. - Add examples directory to documentation. [4.1.2-2] - Include upstream patch to get correct directory setgid/sticky bits in the appliance. [4.1.2-1] - New upstream version 4.1.2. - Remove patch which is now upstream. [4.1.1-2] - Add upstream patch to ignore ghost non-regular files. - This fixes builds on Fedora 20 because the filesystem package has been changed so /var/lock and /var/run are marked as ghost. [4.1.1-1] - New upstream version 4.1.1. - The program has been renamed 'supermin' from 'febootstrap'. - Obsolete, but don't Provide because supermin is not a compatible replacement. - Use '_isa' to specify architecture of supermin-helper subpackage. [1:3.21-2] - Add upstream patch to drop supplemental groups (RHBZ#902476). - Remove 'Group:' RPM headers which are no longer necessary. - Remove some commented-out requirements. [1:3.21-1] - New upstream version 3.21. [1:3.20-1] - New upstream version 3.20. [1:3.19-2] - Work around brokenness in yum (RHBZ#850913). - Remove defattr, no longer required. [1:3.19-1] - New upstream version 3.19. [3.18-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild [3.18-1] - New upstream version 3.18. - This adds support for EPEL 5. [3.17-1] - New upstream version 3.17. [3.16-1] - New upstream version 3.16. [3.15-1] - New upstream version 3.15. - This version includes root=<device> support, needed for libguestfs with virtio-scsi. - Remove upstream patch. [3.14-6] - For RHEL 7 only, add ExclusiveArch x86-64. [3.14-5] - Bundled gnulib (RHBZ#821752). [3.14-4] - Add back explicit dependencies for external programs. [3.14-3] - Drop ExclusiveArch as it's supported on all primary & secondary arches - Cleanup spec and deps [3.14-2] - New upstream version 3.14. - Add upstream patch to fix RHBZ#808421. [3.13-4] - e2fsprogs moved /sbin/mke2fs to /usr/sbin (thanks Eric Sandeen). [3.13-2] - Missing BR zlib-static. [3.13-1] - New upstream version 3.13. - Remove upstream patch which is included in this version. [3.12-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild [3.12-4] - Depend on latest e2fsprogs (RHBZ#771310). [3.12-2] - Include upstream patch to work around Python stupidity. [3.12-1] - New upstream version 3.12. - Remove upstream patch which is included in this version. [3.11-2] - Add upstream patch to fix febootstrap on non-Debian. [3.11-1] - New upstream version 3.11. [3.10-1] - New upstream version 3.10. [3.9-1] - New upstream version 3.9. [3.8-1] - New upstream version 3.8. [3.7-1] - New upstream version 3.7. [3.6-1] - New upstream version 3.6. - This version no longer needs external insmod.static. [3.5-1] - New upstream version 3.5. - Remove patch which is now upstream. [3.4-2] - Don't fail if objects are created in a symlinked dir (RHBZ#698089). [3.4-1] - New upstream version 3.4. - febootstrap-supermin-helper Obsoletes older versions of febootstrap. [3.3-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild [3.3-4] - Split package into febootstrap (for building) and febootstrap-supermin-helper (for running). Note that febootstrap depends on febootstrap-supermin-helper, but you can install febootstrap-supermin-helper on its own. [3.3-3] - Clear executable stack flag on febootstrap-supermin-helper. [3.3-2] - add the ocaml's ExclusiveArch [3.3-1] - New upstream version 3.3. [3.2-1] - New upstream version 3.2. - Remove upstream patches. [3.1-5] - Previous fix for RHBZ#654638 didn't work, fix it correctly. [3.1-4] - Properly ignore .*.hmac files (accidental reopening of RHBZ#654638). [3.1-3] - Uses yumdownloader at runtime, so require yum-utils. [3.1-2] - New upstream version 3.1. - BR insmod.static. [3.0-2] - New upstream version 3.0 (note this is incompatible with 2.x). - Fix upstream URLs. - fakeroot, fakechroot no longer required. - insmod.static is required at runtime (missing dependency from earlier). - The only programs are 'febootstrap' and 'febootstrap-supermin-helper'. - BR ocaml, ocaml-findlib-devel. - No examples are provided with this version of febootstrap. [2.11-1] - New upstream version 2.11. - Fixes 'ext2fs_mkdir .. No free space in directory' bug which affects libguestfs on rawhide. [2.10-1] - New upstream version 2.10. - Adds -u and -g options to febootstrap-supermin-helper which are required by virt-v2v. [2.9-1] - New upstream version 2.9. - Fixes directory ordering problem in febootstrap-supermin-helper. [2.8-1] - New upstream version 2.8. [2.8-0.2] - New pre-release version of 2.8. + Note this is based on 2.7 + mailing list patches. - New BRs on mke2fs, libext2fs, glibc-static. [2.7-2] - New upstream version 2.7. - febootstrap-supermin-helper shell script rewritten in C for speed. - This package contains C code so it is no longer 'noarch'. - MAKEDEV isn't required. [2.6-1] - New upstream release 2.6. - Recheck package in rpmlint. [2.5-2] - New upstream release 2.5. - Remove BR upx (not needed by upstream). - Two more scripts / manpages. [2.4-1] - New upstream release 2.4. [2.3-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild [2.3-1] - New upstream release 2.3. [2.2-1] - New upstream release 2.2. [2.0-1] - New upstream release 2.0. [1.9-1] - New upstream release 1.9. [1.8-1] - New upstream release 1.8. [1.7-1] - New upstream release 1.7. [1.5-3] - Configure script has (unnecessary) BuildRequires on fakeroot, fakechroot, yum. [1.5-2] - Initial build for Fedora. swtpm virt-v2v MODERATE Copyright 2023 Oracle, Inc. CVE-2023-2700 cpe:/a:oracle:linux:8:8:appstream_base cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::codeready_builder cpe:/a:oracle:linux:8::appstream_developer cpe:/a:oracle:linux:8::codeready_builder_developer Oracle Linux 8 [4.0.9-28] - Fix CVE-2022-48281 - Resolves: CVE-2022-48281 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-48281 cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 8 [239-74.0.4.2] - Fix CVE-2023-26604 - pager: set whenver we invoke a pager (lukas.lipinsky@oracle.com) (#2175624) - pager: make pager secure when under euid is changed or explicitly requested (lukas.lipinsky@oracle.com) (#2175624) - pager: lets check SYSTEMD_PAGERSECURE with secure_getenv() (lukas.lipinsky@oracle.com) (#2175624) - pstore: fix crash and forward dummy arguments instead of NULL (lukas.lipinsky@oracle.com) (#2190151) MODERATE Copyright 2023 Oracle, Inc. CVE-2023-26604 cpe:/o:oracle:linux:8::baseos_latest cpe:/o:oracle:linux:8:8:baseos_patch Oracle Linux 8 [0.9.6-10] - Add missing ci.fmf file - Related: rhbz#2182251, rhbz#2189742 [0.9.6-9] - Fix covscan errors found at gating - Related: rhbz#2182251, rhbz#2189742 [0.9.6-8] - Backport test fixing commits to make the build pass - Related: rhbz#2182251, rhbz#2189742 [0.9.6-7] - Fix NULL dereference during rekeying with algorithm guessing GHSL-2023-032 / CVE-2023-1667 - Fix possible authentication bypass GHSL 2023-085 / CVE-2023-2283 - Resolves: rhbz#2182251, rhbz#2189742 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-2283 CVE-2023-1667 cpe:/o:oracle:linux:8::baseos_latest cpe:/a:oracle:linux:8::appstream cpe:/o:oracle:linux:8:8:baseos_patch Oracle Linux 8 [3.26.0-18.0.1] - Bumped release to add correct changelog entry. Version 3.26.0-18 fixes CVE-2020-24736 [3.26.0-18] - Fixed CVE-2022-24736 MODERATE Copyright 2023 Oracle, Inc. CVE-2020-24736 cpe:/o:oracle:linux:8::baseos_latest cpe:/a:oracle:linux:8::appstream cpe:/o:oracle:linux:8:8:baseos_patch Oracle Linux 8 [4.18.0-477.15.1_8.OL8] - net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() (Hangyu Hua) {CVE-2023-28466} [4.18.0-477.13.1_8.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3 - Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652] MODERATE Copyright 2023 Oracle, Inc. CVE-2023-28466 cpe:/o:oracle:linux:8::baseos_latest cpe:/o:oracle:linux:8:8:baseos_patch cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 8 delve [1.9.1-1.0.1] - Disable DWARF compression which has issues (Alex Burmashev) [1.9.1-1] - Rebase to 1.9.1 - Related: rhbz#2131026 golang [1.19.10-1.0.1] - New Go version 1.19.10 [CVE-2023-29402] [CVE-2023-29403] [CVE-2023-29404] [CVE-2023-29405] go-toolset [1.19.10-1.0.1] - Update for Go 1.19.10 [CVE-2023-29402] [CVE-2023-29403] [CVE-2023-29404] [CVE-2023-29405] CRITICAL Copyright 2023 Oracle, Inc. CVE-2023-29402 CVE-2023-29404 CVE-2023-29405 CVE-2023-29403 cpe:/a:oracle:linux:8:8:appstream_base cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::appstream_developer Oracle Linux 9 golang [1.19.10-1.0.1] - New Go version 1.19.10 [CVE-2023-29402] [CVE-2023-29403] [CVE-2023-29404] [CVE-2023-29405] go-toolset [1.19.10-1.0.1] - New Go version 1.19.10 [CVE-2023-29402] [CVE-2023-29403] [CVE-2023-29404] [CVE-2023-29405] CRITICAL Copyright 2023 Oracle, Inc. CVE-2023-29402 CVE-2023-29405 CVE-2023-29403 CVE-2023-29404 cpe:/a:oracle:linux:9::appstream Oracle Linux 7 [11.0.5-3.0.1] - fix spaces in vmware udev rule for scsi devices [Orabug: 24461968] - Fix vmware udev rule in 99-vmware-scsi-timeout.rules file. [Orabug: 22815019] - Increase timeout for scsi devices on VMWare guests by adding a udev rule. - Created a new file 99-vmware-scsi-timeout.rules - Modified spec file to install this new file. [Orabug: 21819156] [11.0.5-3.el7_9.6] - ovt-Remove-some-dead-code.patch [bz#2215562] - Resolves: bz#2215562 ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-7]) [11.0.5-3.el7_9.5] - ovt-Track-Linux-filesystem-id-FSID-for-quiesced-frozen-f.patch [bz#1880404 bz#1994590] - Resolves: bz#1880404 ([ESXi] [RHEL7] vmtoolsd task is blocked in the uninterruptible state while attempting to delete (unlink) the file 'quiesce_manifest.xml') - Resolves: bz#1994590 ([ESXi][RHEL7.9][open-vm-tools] Snapshot of the RHEL7 guest on the VMWare ESXi hypervisor failed vm hangs) LOW Copyright 2023 Oracle, Inc. CVE-2023-20867 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7:9:patch cpe:/a:oracle:linux:7::optional_latest Oracle Linux 9 [12.1.5-1.0.2] - [CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module LOW Copyright 2023 Oracle, Inc. CVE-2023-20867 cpe:/a:oracle:linux:9::appstream Oracle Linux 8 [12.1.5-1.0.2] - [CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module LOW Copyright 2023 Oracle, Inc. CVE-2023-20867 cpe:/a:oracle:linux:8::appstream Oracle Linux 9 [9.0.9-3] - resolve CVE-2023-3128 grafana: Remove Email Lookup from oauth integrations (rhbz#2213701 rhbz#2213626) CRITICAL Copyright 2023 Oracle, Inc. CVE-2023-3128 cpe:/a:oracle:linux:9::appstream Oracle Linux 8 nodejs [1:16.19.1-2] - Update bundled c-ares to 1.19.1 Resolves: CVE-2023-31124 CVE-2023-31130 CVE-2023-31147 CVE-2023-32067 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-31147 CVE-2023-31130 CVE-2023-32067 CVE-2023-31124 cpe:/a:oracle:linux:8:8:appstream_base cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::appstream_developer Oracle Linux 8 nodejs [1:18.14.2-3] - Update bundled c-ares to 1.19.1 Resolves: CVE-2022-4904 Resolves: CVE-2023-31124 CVE-2023-31130 CVE-2023-31147 CVE-2023-32067 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-31130 CVE-2023-31124 CVE-2022-4904 CVE-2023-31147 CVE-2023-32067 cpe:/a:oracle:linux:8:8:appstream_base cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::appstream_developer Oracle Linux 9 [7.0.109-1.0.1] - Set TargetRid based on os release major version, add OL arm64 RuntimeIdentifier [Orabug: 34671152] [7.0.109-1] - Update to .NET SDK 7.0.109 and Runtime 7.0.9 - Resolves: RHBZ#2219632 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-33170 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 8 [7.0.109-1.0.1] - Set TargetRid based on os release major version, add OL arm64 RuntimeIdentifier [Orabug: 34671152] [7.0.109-1] - Update to .NET SDK 7.0.109 and Runtime 7.0.9 - Resolves: RHBZ#2219632 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-33170 cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 8 [6.0.120-1.0.1] - Add missing Oracle Linux Runtime IDs [6.0.120-1] - Update to .NET SDK 6.0.120 and Runtime 6.0.20 - Resolves: RHBZ#2219637 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-33170 cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 9 [6.0.120-1.0.1] - Add missing Oracle Linux Runtime IDs [6.0.120-1] - Update to .NET SDK 6.0.120 and Runtime 6.0.20 - Resolves: RHBZ#2219637 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-33170 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 7 [102.13.0-2.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [102.13.0-2] - Update to 102.13.0 build2 [102.13.0-1] - Update to 102.13.0 build1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-37211 CVE-2023-37207 CVE-2023-37202 CVE-2023-37201 CVE-2023-37208 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7::optional_latest cpe:/a:oracle:linux:7:9:patch Oracle Linux 8 [102.13.0-2.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.13.0-2] - Update to 102.13.0 build2 [102.13.0-1] - Update to 102.13.0 build1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-37201 CVE-2023-37207 CVE-2023-37208 CVE-2023-37211 CVE-2023-37202 cpe:/a:oracle:linux:8::appstream Oracle Linux 9 [102.13.0-2.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [102.13.0-2] - Update to 102.13.0 build2 [102.13.0-1] - Update to 102.13.0 build1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-37207 CVE-2023-37201 CVE-2023-37211 CVE-2023-37208 CVE-2023-37202 cpe:/a:oracle:linux:9::appstream Oracle Linux 9 [102.13.0-2.0.1] - Updated homepages to use https [Orabug: 34648274] [102.13.0-2] - Update to 102.13.0 build2 [102.13.0-1] - Update to 102.13.0 build1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-37207 CVE-2023-37211 CVE-2023-37202 CVE-2023-37208 CVE-2023-37201 cpe:/a:oracle:linux:9::appstream Oracle Linux 8 [102.13.0-2.0.1] - Updated homepages to use https [Orabug: 34648274] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.13.0-2] - Update to 102.13.0 build2 [102.13.0-1] - Update to 102.13.0 build1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-37202 CVE-2023-37211 CVE-2023-37207 CVE-2023-37208 CVE-2023-37201 cpe:/a:oracle:linux:8::appstream Oracle Linux 7 [102.13.0-2.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.13.0-2] - Update to 102.13.0 build2 [102.13.0-1] - Update to 102.13.0 build1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-37207 CVE-2023-37202 CVE-2023-37201 CVE-2023-37208 CVE-2023-37211 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7::optional_latest cpe:/a:oracle:linux:7:9:patch Oracle Linux 9 [32:9.16.23-11.1] - Improve RBT overmem cache cleaning (CVE-2023-2828) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-2828 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 8 [32:9.16.23-14.1] - Improve RBT overmem cache cleaning (CVE-2023-2828) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-2828 cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 8 [32:9.11.36-8.1] - Improve RBT overmem cache cleaning (CVE-2023-2828) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-2828 cpe:/o:oracle:linux:8::baseos_latest cpe:/a:oracle:linux:8::appstream cpe:/o:oracle:linux:8:8:baseos_patch Oracle Linux 7 [3.10.0-1160.95.1.0.1.OL7] - debug: lock down kgdb [Orabug: 34270798] {CVE-2022-21499} [3.10.0-1160.95.1.OL7] - Update Oracle Linux certificates (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and shim-x64 <= 15-2.0.9 - Update oracle(kernel-sig-key) value to match new certificate (Ilya Okomin) [3.10.0-1160.95.1] - perf/s390x: Align the register list to what we support (Michael Petlan) [2207745] - Revert '[tools] s390/perf: add perf register support for floating-point registers' (Michael Petlan) [2207745] - s390/perf: add perf_regs support and user stack dump (Michael Petlan) [2207745] - s390/zcrypt: handle new reply code FILTERED_BY_HYPERVISOR (Tobias Huschle) [2212672] [3.10.0-1160.94.1] - netfilter: nf_tables: deactivate anonymous set from preparation phase (Florian Westphal) [2196159] {CVE-2023-32233} [3.10.0-1160.93.1] - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (Wander Lairson Costa) [2152941] {CVE-2022-3564} - proc/pagemap: walk page tables under pte lock (Rafael Aquini) [2190338] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-3564 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7:9:patch cpe:/a:oracle:linux:7::optional_latest Oracle Linux 7 [2:9.11.4-26.P2.14] - Prevent the cache going over the configured limit (CVE-2023-2828) [32:9.11.4-26.P2.13] - Tighten cache protection against record from forwarders (CVE-2021-25220) [32:9.11.4-26.P2.12] - Include test of forwarders (CVE-2021-25220) [32:9.11.4-26.P2.11] - Prevent excessive resource use while processing large delegations. (CVE-2022-2795) [32:9.11.4-26.P2.10] - Fix memory leak in ECDSA verify processing (CVE-2022-38177) - Fix memory leak in EdDSA verify processing (CVE-2022-38178) [32:9.11.4-26.P2.9] - Fix possible assertion failure isc_refcount_current == 0 in free_rbtdb (#1935152) [32:9.11.4-26.P2.8] - Prevent a race after zone load (#2011220) [32:9.11.4-26.P2.7] - Apply again patch 172, got removed by mistake [32:9.11.4-26.P2.6] - Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214) [32:9.11.4-26.P2.5] - Possible assertion failure on DNAME processing (CVE-2021-25215) [32:9.11.4-26.P2.4] - Fix off-by-one bug in ISC SPNEGO implementation (CVE-2020-8625) [32:9.11.4-26.P2.3] - Fix inline re-signing (#rh1889902) [32:9.11.4-26.P2.2] - Fix unsupported algorithms validation (#rh1769876) [32:9.11.4-26.P2.1] - Fix tsig-request verify (CVE-2020-8622) - Prevent PKCS11 daemon crash on crafted packet (CVE-2020-8623) - Correct update-policy type subdomain to match documentation (CVE-2020-8624) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-2828 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7::optional_latest cpe:/a:oracle:linux:7:9:patch Oracle Linux 9 [1:11.0.20.0.8-2.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] - Fix tzdata requirement copy-and-paste error that led to two BuildRequires and no Requires [1:11.0.20.0.8-2] - Bump release number so we are newer than 9.0 - Related: rhbz#2221106 [1:11.0.20.0.8-1] - Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Bump tzdata requirement to 2023c now it is available in the buildroot - Bump bundled LCMS version to 2.15 as in jdk-11.0.20+1. - Bump bundled HarfBuzz version to 7.0.1 as in jdk-11.0.20+7 - Use tapsets from the misc tarball - Introduce 'prelease' for the portable release versioning, to handle EA builds - Make sure root installation directory is created first - Use in-place substitution for all but the first of the tapset changes - Sync the copy of the portable specfile with the latest update - Add note at top of spec file about rebuilding - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2217715 - Resolves: rhbz#2221106 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-22036 CVE-2023-22041 CVE-2023-22049 CVE-2023-22006 CVE-2023-25193 CVE-2023-22045 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 8 [1:17.0.8.0.7-2.0.1] - OpenJDK: ZIP file parsing infinite loop (8302483) (CVE-2023-22036) - OpenJDK: weakness in AES implementation (8308682) (CVE-2023-22041) - OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312) (CVE-2023-22049) - harfbuzz: OpenJDK: O(n^2) growth via consecutive marks (CVE-2023-25193) - OpenJDK: HTTP client insufficient file name validation (8302475) (CVE-2023-22006) - OpenJDK: modulo operator array indexing issue (8304460) (CVE-2023-22044) - OpenJDK: array indexing integer overflow issue (8304468) (CVE-2023-22045) - Add Oracle vendor bug URL [Orabug: 34340155] [1:17.0.8.0.6-0.1.ea] - Update to jdk-17.0.8+6 (EA) - Sync the copy of the portable specfile with the latest update - Resolves: rhbz#2217716 [1:17.0.8.0.1-0.1.ea] - Update to jdk-17.0.8+1 (EA) - Update release notes to 17.0.8+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 17.0.8+1 - Bump bundled LCMS version to 2.15 as in jdk-17.0.8+1. - Bump bundled HarfBuzz version to 7.0.1 as in jdk-17.0.8+1 - Use tapsets from the misc tarball - Introduce 'prelease' for the portable release versioning, to handle EA builds - Make sure root installation directory is created first - Use in-place substitution for all but the first of the tapset changes - Related: rhbz#2217716 [1:17.0.7.0.7-4] - Introduce vm_variant global for consistency with future JDK builds - Related: rhbz#2203412 [1:17.0.7.0.7-4] - Exclude classes_nocoops.jsa on i686 and arm32 - Related: rhbz#2203412 [1:17.0.7.0.7-4] - Following JDK-8005165, class data sharing can be enabled on all JIT architectures - Related: rhbz#2203412 [1:17.0.7.0.7-4] - Fix packaging of CDS archives - Resolves: rhbz#2203412 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-22045 CVE-2023-22036 CVE-2023-22049 CVE-2023-25193 CVE-2023-22006 CVE-2023-22041 CVE-2023-22044 cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 7 [1:1.8.0.382.b05-1] - Update to shenandoah-jdk8u372-b05 (GA) - Update release notes for shenandoah-8u372-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106 [1:1.8.0.382.b04-0.1.ea] - Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 [1:1.8.0.382.b01-0.1.ea] - Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-22049 CVE-2023-22045 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7::optional_latest cpe:/a:oracle:linux:7:9:patch Oracle Linux 8 [1:11.0.20.0.8-2.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:11.0.20.0.8-2] - Bump release number so we are newer than 9.0 - Related: rhbz#2221106 [1:11.0.20.0.8-1] - Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Bump tzdata requirement to 2023c now it is available in the buildroot - Bump bundled LCMS version to 2.15 as in jdk-11.0.20+1. - Bump bundled HarfBuzz version to 7.0.1 as in jdk-11.0.20+7 - Use tapsets from the misc tarball - Introduce 'prelease' for the portable release versioning, to handle EA builds - Make sure root installation directory is created first - Use in-place substitution for all but the first of the tapset changes - Sync the copy of the portable specfile with the latest update - Add note at top of spec file about rebuilding - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2217715 - Resolves: rhbz#2221106 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-22036 CVE-2023-22049 CVE-2023-22045 CVE-2023-25193 CVE-2023-22041 CVE-2023-22006 cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 8 [1:1.8.0.382.b05-2.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:1.8.0.382.b05-2] - CVE-2023-22045 and CVE-2023-22049 fixed - Release bump for Oracle rebuild [1:1.8.0.382.b05-1] - Update to shenandoah-jdk8u372-b05 (GA) - Update release notes for shenandoah-8u372-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106 [1:1.8.0.382.b04-0.1.ea] - Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 [1:1.8.0.382.b01-0.1.ea] - Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-22045 CVE-2023-22049 cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 9 [1:17.0.8.0.7-2.0.1] - OpenJDK: ZIP file parsing infinite loop (8302483) (CVE-2023-22036) - OpenJDK: weakness in AES implementation (8308682) (CVE-2023-22041) - OpenJDK: improper handling of slash characters in URI-to-path conversion (8305312) (CVE-2023-22049) - harfbuzz: OpenJDK: O(n^2) growth via consecutive marks (CVE-2023-25193) - OpenJDK: HTTP client insufficient file name validation (8302475) (CVE-2023-22006) - OpenJDK: modulo operator array indexing issue (8304460) (CVE-2023-22044) - OpenJDK: array indexing integer overflow issue (8304468) (CVE-2023-22045) - Add Oracle vendor bug URL [Orabug: 34340155] [1:17.0.8.0.6-0.1.ea] - Update to jdk-17.0.8+6 (EA) - Sync the copy of the portable specfile with the latest update - Resolves: rhbz#2217716 [1:17.0.8.0.1-0.1.ea] - Update to jdk-17.0.8+1 (EA) - Update release notes to 17.0.8+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 17.0.8+1 - Bump bundled LCMS version to 2.15 as in jdk-17.0.8+1. - Bump bundled HarfBuzz version to 7.0.1 as in jdk-17.0.8+1 - Use tapsets from the misc tarball - Introduce 'prelease' for the portable release versioning, to handle EA builds - Make sure root installation directory is created first - Use in-place substitution for all but the first of the tapset changes - Related: rhbz#2217716 [1:17.0.7.0.7-4] - Introduce vm_variant global for consistency with future JDK builds - Related: rhbz#2203412 [1:17.0.7.0.7-4] - Exclude classes_nocoops.jsa on i686 and arm32 - Related: rhbz#2203412 [1:17.0.7.0.7-4] - Following JDK-8005165, class data sharing can be enabled on all JIT architectures - Related: rhbz#2203412 [1:17.0.7.0.7-4] - Fix packaging of CDS archives - Resolves: rhbz#2203412 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-22045 CVE-2023-22036 CVE-2023-22049 CVE-2023-22006 CVE-2023-22041 CVE-2023-22044 CVE-2023-25193 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 9 [1:1.8.0.382.b05-2.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] [1:1.8.0.382.b05-2] - CVE-2023-22045 and CVE-2023-22049 fixed - Release bump for Oracle rebuild [1:1.8.0.382.b05-1] - Update to shenandoah-jdk8u372-b05 (GA) - Update release notes for shenandoah-8u372-b05. - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106 [1:1.8.0.382.b04-0.1.ea] - Update to shenandoah-jdk8u382-b04 (EA) - Update release notes for shenandoah-8u382-b04. - Related: rhbz#2221106 [1:1.8.0.382.b01-0.1.ea] - Update to shenandoah-jdk8u382-b01 (EA) - Update release notes for shenandoah-8u382-b01. - Switch to EA mode. - Remove JDK-8271199 patch which is now upstream. - Related: rhbz#2221106 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-22045 CVE-2023-22049 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 9 [2.38.5-1.3] - Disable JIT (CVE-2023-32435, CVE-2023-32439) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-32439 CVE-2023-32435 cpe:/a:oracle:linux:9::appstream Oracle Linux 8 [2.38.5-1.5] - Disable JIT (CVE-2023-32435, CVE-2023-32439) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-32435 CVE-2023-32439 cpe:/a:oracle:linux:8::appstream Oracle Linux 7 [1:11.0.20.0.8-1.0.1] - link atomic for ix86 build [1:11.0.20.0.8-1] - Update to jdk-11.0.20.0+8 (GA) - Update release notes to 11.0.20.0+8 - Switch to GA mode for release - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. ** - Resolves: rhbz#2221106 [1:11.0.20.0.7-0.1.ea] - Update to jdk-11.0.20+7 (EA) - Update release notes to 11.0.20+7 - Related: rhbz#2221106 [1:11.0.20.0.1-0.1.ea] - Update to jdk-11.0.20+1 (EA) - Update release notes to 11.0.20+1 - Switch to EA mode - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1 - Add missing Swing release note - Related: rhbz#2221106 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-22036 CVE-2023-22049 CVE-2023-22006 CVE-2023-22041 CVE-2023-25193 CVE-2023-22045 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7::optional_latest cpe:/a:oracle:linux:7:9:patch Oracle Linux 9 [4.17.5-103.0.1] - Fix memleak in _nss_winbind_initgroups_dyn [Orabug: 34994509] [4.17.5-103] - resolves: rhbz#2223600 - Fix trust relationship between workstation and DC - resolves: rhbz#2222895 - Fix CVE-2023-3347 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-3347 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::codeready_builder cpe:/o:oracle:linux:9::baseos_latest cpe:/o:oracle:linux:9:2:baseos_patch Oracle Linux 7 [3.1.7-3] - Resolves: #2224558 - iperf3: memory allocation hazard and crash (CVE-2023-38403) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-38403 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7::optional_latest cpe:/a:oracle:linux:7:9:patch Oracle Linux 9 pgaudit pg_repack postgres-decoderbufs postgresql [15.3-1] - update to 15.3 - Fixes CVE-2023-2454 and CVE-2023-2455 Resolves: #2214875 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-2455 CVE-2023-2454 cpe:/a:oracle:linux:9::appstream Oracle Linux 8 [4.17.5-3.0.1] - Fix memleak in _nss_winbind_initgroups_dyn [Orabug: 34727815] - Gluster volumes not accessible via Samba due to missing samba-vfs-glusterfs in OL8 [Orabug: 30205755] [4.17.5-3] - resolves: rhbz#2223601 - Fix trust relationship between workstation and DC - resolves: rhbz#2222895 - Fix CVE-2023-3347 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-3347 cpe:/o:oracle:linux:8::baseos_latest cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::developer cpe:/o:oracle:linux:8:8:baseos_patch cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 9 nodejs [1:18.16.1-1] - Rebase to 18.16.1 Resolves: rhbz#2188292 rhbz#2187683 Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590 - Replace /usr/etc/npmrc symlink with builtin configuration Resolves: rhbz#2222285 nodejs-nodemon nodejs-packaging MODERATE Copyright 2023 Oracle, Inc. CVE-2023-30588 CVE-2023-30589 CVE-2023-30590 CVE-2023-30581 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::appstream_developer cpe:/a:oracle:linux:9:2:appstream_base cpe:/a:oracle:linux:9:1:appstream_base Oracle Linux 9 [1:16.20.1-1] - Rebase to 16.20.1 Resolves: rhbz#2188291 Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590 - Replace /usr/etc/npmrc symlink with builtin configuration Resolves: rhbz#2177781 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-30588 CVE-2023-30581 CVE-2023-30590 CVE-2023-30589 cpe:/a:oracle:linux:9::appstream Oracle Linux 9 [0.4.1-3] - Fix stack-based buffer overflow in read_file(). Resolves: #2212467 (CVE-2023-22652) MODERATE Copyright 2023 Oracle, Inc. CVE-2023-22652 cpe:/o:oracle:linux:9::baseos_latest cpe:/o:oracle:linux:9:2:baseos_patch Oracle Linux 9 [2.9.13-3.1] - Fix CVE-2023-28484 (#2186694) - Fix CVE-2023-29469 (#2186694) MODERATE Copyright 2023 Oracle, Inc. CVE-2023-29469 CVE-2023-28484 cpe:/a:oracle:linux:9::appstream cpe:/o:oracle:linux:9::baseos_latest cpe:/o:oracle:linux:9:2:baseos_patch Oracle Linux 9 [2.25.1-7] - Security fix for CVE-2023-32681 Resolves: rhbz#2209469 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-32681 cpe:/a:oracle:linux:9::appstream cpe:/o:oracle:linux:9::baseos_latest cpe:/o:oracle:linux:9:2:baseos_patch Oracle Linux 9 [7.76.1-23.el9_2.2] - unify the upload/method handling (CVE-2023-28322) - fix host name wildcard checking (CVE-2023-28321) MODERATE Copyright 2023 Oracle, Inc. CVE-2023-28321 CVE-2023-28322 cpe:/a:oracle:linux:9::appstream cpe:/o:oracle:linux:9::baseos_latest cpe:/o:oracle:linux:9:2:baseos_patch Oracle Linux 9 [5.14.0-284.25.1.0.1_2] - Fix KVM: x86/mmu: Fix race condition in direct_page_fault [Orabug: 35673032] {CVE-2022-45869} [5.14.0-284.25.1_2] - KVM: x86/mmu: Fix race condition in direct_page_fault - prlimit: do_prlimit needs to have a speculation check {CVE-2023-0458} - x86/speculation: Allow enabling STIBP with legacy IBRS {CVE-2023-1998} - ipvlan: Fix out of bounds caused by unclear skb->cb {CVE-2023-3090} - net/sched: flower: fix possible OOB write in fl_set_geneve_opt {CVE-2023-35788} IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-0458 CVE-2023-35788 CVE-2022-45869 CVE-2023-3090 CVE-2023-1998 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:2:appstream_patch cpe:/a:oracle:linux:9::codeready_builder cpe:/o:oracle:linux:9::baseos_latest cpe:/o:oracle:linux:9:2:baseos_patch Oracle Linux 7 [7.4p1-23.0.1] - enlarge format buffer size for certificate serial number so the log message can record any 64-bit integer without truncation (openssh bz#3012) [Orabug: 30448895] [7.4p1-23 + 0.10.3-2] - Avoid remote code execution in ssh-agent PKCS#11 support Resolves: CVE-2023-38408 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-38408 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7::optional_latest cpe:/a:oracle:linux:7:9:patch Oracle Linux 9 [0.6.1-13] - CVE-2023-37464 cjose: AES GCM decryption uses the Tag length from the actual Authentication Tag provided in the JWE Resolves: rhbz#2223308 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-37464 cpe:/a:oracle:linux:9::appstream Oracle Linux 9 [8.7p1-30] - Avoid remote code execution in ssh-agent PKCS#11 support Resolves: CVE-2023-38408 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-38408 cpe:/a:oracle:linux:9::appstream cpe:/o:oracle:linux:9::baseos_latest cpe:/o:oracle:linux:9:2:baseos_patch Oracle Linux 8 cjose [0.6.1-3] - CVE-2023-37464 cjose: AES GCM decryption uses the Tag length from the actual Authentication Tag provided in the JWE Resolves: rhbz#2223308 mod_auth_openidc [2.4.9.4-1] - Resolves: rhbz#2025368 - Rebase to new version IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-37464 cpe:/a:oracle:linux:8:8:appstream_base cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::appstream_developer Oracle Linux 8 [8.0p1-19] - Release bump [8.0p1-18] - Avoid remote code execution in ssh-agent PKCS#11 support Resolves: CVE-2023-38408 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-38408 cpe:/o:oracle:linux:8::baseos_latest cpe:/a:oracle:linux:8::appstream cpe:/o:oracle:linux:8:8:baseos_patch Oracle Linux 6 [5.3p1-124.0.2] - Fix for CVE-2016-6210 incomplete fix [Orabug: 29375502][CVE-2016-6210] [5.3p1-124.0.1] - Fix for CVE-2023-38408 [Orabug: 35672523] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-38408 CVE-2016-6210 cpe:/a:oracle:linux:6:10:ELS Oracle Linux 7 [102.14.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.14.0-1] - Update to 102.14.0 build1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-4045 CVE-2023-4048 CVE-2023-4056 CVE-2023-4057 CVE-2023-4050 CVE-2023-4047 CVE-2023-4046 CVE-2023-4055 CVE-2023-4049 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7::optional_latest cpe:/a:oracle:linux:7:9:patch Oracle Linux 9 [102.14.0-1.0.1] - Updated homepages to use https [Orabug: 34648274] [102.14.0-1] - Update to 102.14.0 build1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-4047 CVE-2023-4057 CVE-2023-4050 CVE-2023-4048 CVE-2023-4049 CVE-2023-4046 CVE-2023-4055 CVE-2023-4045 CVE-2023-4056 cpe:/a:oracle:linux:9::appstream Oracle Linux 8 [102.14.0-1.0.1] - Updated homepages to use https [Orabug: 34648274] - Removed Upstream references - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.14.0-1] - Update to 102.14.0 build1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-4049 CVE-2023-4056 CVE-2023-4047 CVE-2023-4050 CVE-2023-4046 CVE-2023-4057 CVE-2023-4045 CVE-2023-4048 CVE-2023-4055 cpe:/a:oracle:linux:8::appstream Oracle Linux 7 [102.14.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [102.14.0-1] - Update to 102.14.0 build1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-4046 CVE-2023-4048 CVE-2023-4049 CVE-2023-4056 CVE-2023-4055 CVE-2023-4045 CVE-2023-4050 CVE-2023-3417 CVE-2023-4047 CVE-2023-4057 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7::optional_latest cpe:/a:oracle:linux:7:9:patch Oracle Linux 8 [102.14.0-1.0.1] - Update to 102.14.0 build1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-4050 CVE-2023-3417 CVE-2023-4048 CVE-2023-4057 CVE-2023-4047 CVE-2023-4055 CVE-2023-4045 CVE-2023-4056 CVE-2023-4049 CVE-2023-4046 cpe:/a:oracle:linux:8::appstream Oracle Linux 8 [1:1.12.8-24.0.1.1] - Fix CVE-2023-34969 (#2213166) MODERATE Copyright 2023 Oracle, Inc. CVE-2023-34969 cpe:/o:oracle:linux:8::baseos_latest cpe:/a:oracle:linux:8::appstream cpe:/o:oracle:linux:8:8:baseos_patch Oracle Linux 9 [102.14.0-1.0.1] - Update to 102.14.0 build1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-4049 CVE-2023-4056 CVE-2023-4046 CVE-2023-4047 CVE-2023-4057 CVE-2023-4045 CVE-2023-4050 CVE-2023-3417 CVE-2023-4048 CVE-2023-4055 cpe:/a:oracle:linux:9::appstream Oracle Linux 8 [4.18.0-477.21.1_8.OL8] - Bluetooth: L2CAP: Fix accepting connection request for invalid SPSM (Tamas Koczka) {CVE-2022-42896} - net/sched: tcindex: update imperfect hash filters respecting rcu (Jamal Hadi Salim) {CVE-2023-1281} - net/sched: tcindex: search key must be 16 bits (Jamal Hadi Salim) {CVE-2023-1281} - net/sched: Retire tcindex classifier (Jamal Hadi Salim) {CVE-2023-1829} - xfs: verify buffer contents when we skip log replay (Darrick J. Wong) {CVE-2023-2124} - i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() (Wei Chen) {CVE-2023-2194} - perf: Fix check before add_event_to_groups() in perf_group_detach() (Budimir Markovic) {CVE-2023-2235} IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-1829 CVE-2023-2124 CVE-2023-2235 CVE-2022-42896 CVE-2023-1281 CVE-2023-2194 cpe:/o:oracle:linux:8::baseos_latest cpe:/o:oracle:linux:8:8:baseos_patch cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 8 [2.20.0-3] - Fix Unintended leak of Proxy-Authorization header (CVE-2023-32681) MODERATE Copyright 2023 Oracle, Inc. CVE-2023-32681 cpe:/o:oracle:linux:8::baseos_latest cpe:/o:oracle:linux:8:8:baseos_patch Oracle Linux 8 [7.61.1-30.el8_8.3] - GSS delegation too eager connection re-use (CVE-2023-27536) - fix host name wildcard checking (CVE-2023-28321) - rebuild certs with 2048-bit RSA keys MODERATE Copyright 2023 Oracle, Inc. CVE-2023-27536 CVE-2023-28321 cpe:/o:oracle:linux:8::baseos_latest cpe:/o:oracle:linux:8:8:baseos_patch Oracle Linux 8 [2.48-5] - Fix integer overflow in _libcap_strdup() (CVE-2023-2603) Resolves: rhbz#2210637 - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602) Resolves: rhbz#2210644 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-2603 CVE-2023-2602 cpe:/o:oracle:linux:8::baseos_latest cpe:/o:oracle:linux:8:8:baseos_patch Oracle Linux 8 pgaudit pg_repack postgres-decoderbufs postgresql [13.11-1.0.1] - Update to 13.11 - Resolves: #2212815 - Update postgresql-setup to 8.7 (https://github.com/devexp-db/postgresql-setup/pull/35) - Resolves: #2207933 - Update 1001-Fixed-postgresql-service-network-binding-issue.patch for postgresql-setup MODERATE Copyright 2023 Oracle, Inc. CVE-2023-2455 CVE-2023-2454 cpe:/a:oracle:linux:8:8:appstream_base cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::appstream_developer Oracle Linux 8 [2.9.7-16.1] - Fix CVE-2023-28484 (#2185994) - Fix CVE-2023-29469 (#2185984) MODERATE Copyright 2023 Oracle, Inc. CVE-2023-28484 CVE-2023-29469 cpe:/o:oracle:linux:8::baseos_latest cpe:/a:oracle:linux:8::appstream cpe:/o:oracle:linux:8:8:baseos_patch Oracle Linux 8 pgaudit pg_repack postgres-decoderbufs postgresql [12.15-1.0.1] - Fixed postgresql port binding issue during bootup [Orabug: 35103668] [12.15-1] - Update postgresql-setup to 8.7 (https://github.com/devexp-db/postgresql-setup/pull/35) - Resolves: #2207932 - Update to version 12.15 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-41862 CVE-2023-2454 CVE-2023-2455 cpe:/a:oracle:linux:8:8:appstream_base cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::appstream_developer Oracle Linux 8 nodejs [1:18.16.1-1] - Rebase to 18.16.1 Resolves: rhbz#2188290 rhbz#2166926 Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590 - Replace /usr/etc/npmrc symlink with builtin configuration Resolves: rhbz#2222287 nodejs-nodemon nodejs-packaging [2021.06-4] - NPM bundler: also find namespaced bundled dependencies [2021.06-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild [2021.06-2] - Fix hard-coded output directory in the bundler [2021.06-1] - Update to 2021.06-1 - bundler: Handle archaic license metadata - bundler: Warn about bundled dependencies with no license metadata [2021.01-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild [2021.01-2] - nodejs-packaging-bundler improvements to handle uncommon characters [2021.01] - Add nodejs-packaging-bundler and update README.md [2020.09-1] - Move to dist-git as the upstream [25-1] - Fix incorrect bundled library detection for Requires [24-1] - Check node_modules_prod for bundled dependencies [23-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild [23-3] - Drop Requires: nodejs(engine) [23-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild [23-1] - Ensure nodejs(engine) is required for packages with no dependencies [22-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild [22-1] - Refactor nodejs.req in more idiomatic Python - Treat only external dependency links as un-bundled [21-1] - Refactor nodejs.prov in more idiomatic Python [20-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild [20-1] - Fix handling of ^ dependencies for multiversion modules [18-1] - Handle =, >= and <= dependencies for multiversion modules [17-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild [17-1] - Fix version comparators with a space after the operator [16-1] - Rewrite nodejs.req to better match npm versioning rules - Add tests for nodejs.req and nodejs.prov [15-1] - Fix caret dependency ranges [14-1] - Only match top level modules for requires and provides generation [13-1] - Add %nodejs_setversion macro [12-1] - Port to python 3 [11-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [11-1] - nodesjs.req: use boolean with for range dependencies [10-1] - Release v10 - Automatically generate Provides for bundled npm dependencies [9-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [9-3] - switch source URL to pagure [9-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [9-1] - nodejs-fixdep: stop --move erroring on missing dependency types [8-1] - nodejs-fixdep: add --move option - nodejs-symlink-deps: add --optional option - req: generate suggests for optional dependencies [7-5] - nodejs-symlink-deps: handle caret in versions [7-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [7-3] - Install macros in %{_rpmconfidir}/macros.d where available (#1074279) [7-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild [7-1] - nodejs-symlink-deps: fix regression preventing multiply versioned modules from being symlinked correctly [6-1] - nodejs-fixdep: use real option parsing - nodejs-fixdep: support modifying optionalDependencies and devDependencies - req: support the caret operator - nodejs-symlink-deps: add --force option - nodejs-symlink-deps: add --build alias for --check - nodejs-fixdep: support converting to caret dependencies - nodejs-fixdep: support non-dictionary dependency properties - multiver_modules: add nan [4-1] - handle cases where the symlink target exists gracefully [3-1] - dependencies and engines can be lists or strings too - handle unversioned dependencies on multiply versioned modules correctly (RHBZ#982798) - restrict to compatible arches [2-1] - move multiple version list to /usr/share/node - bump nodejs Requires to 0.10.12 - add Requires: redhat-rpm-config [1-1] - initial package MODERATE Copyright 2023 Oracle, Inc. CVE-2023-30581 CVE-2023-30588 CVE-2023-30590 CVE-2023-30589 cpe:/a:oracle:linux:8:8:appstream_base cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::appstream_developer Oracle Linux 8 nodejs [1:16.20.1-1] - Rebase to 16.20.1 Resolves: rhbz#2188289 Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590 - Replace /usr/etc/npmrc symlink with builtin configuration Resolves: rhbz#2222288 nodejs-nodemon nodejs-packaging MODERATE Copyright 2023 Oracle, Inc. CVE-2023-30589 CVE-2023-30590 CVE-2023-30581 CVE-2023-30588 cpe:/a:oracle:linux:8:8:appstream_base cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::appstream_developer Oracle Linux 8 [10.23-2.0.1] - Fixed postgresql port binding issue during bootup [Orabug: 35103668] [10.23-2] - Backport fixes for CVE-2023-2454 and CVE-2023-2455 - Update postgresql-setup to 8.7 (https://github.com/devexp-db/postgresql-setup/pull/35) - Resolves: #2207931 [10.23-1] - Resolves: CVE-2022-2625 - Rebase to 10.23 [10.21-1] - Resolves: CVE-2022-1552 - Update to 10.21 - Release notes: https://www.postgresql.org/docs/release/10.21/ [10.19-2] - Add missing files into file section of server package postgresql-setup v8.6 newly provides postgresql-upgrade [10.19-1] - Update to 10.19 - Resolves: CVE-2021-23214 [10.17-4] - Update postgresql-setup to 8.6 (#2024568) [10.17-3] - Fix tmp files deprecated path - Resolves: #1992263 [10.17-2] - Enable ssl for upgrade server Resolves: #1982701 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-2455 CVE-2023-2454 cpe:/a:oracle:linux:8::appstream Oracle Linux 9 [1:1.12.20-7.0.1.1] - Fix CVE-2023-34969 (#2213402) [1.12.20-7.0.1] - fix netlink poll: error 4 (Zhenzhong Duan) [1:1.12.20-7] - Fix CVE-2022-42010 (#2133647) - Fix CVE-2022-42011 (#2133641) - Fix CVE-2022-42012 (#2133635) [1:1.12.20-6] - Override upstream sysusers.d confguration (#2118226) [1:1.12.20-5] - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-34969 cpe:/a:oracle:linux:9::appstream cpe:/o:oracle:linux:9::baseos_latest cpe:/o:oracle:linux:9:2:baseos_patch Oracle Linux 8 [3.5-7] - Fixes CVE-2023-38403 Resolves: rhbz#2223729 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-38403 cpe:/a:oracle:linux:8::appstream Oracle Linux 9 [3.9-10] - Fixes CVE-2023-38403 Resolves: rhbz#2223676 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-38403 cpe:/a:oracle:linux:9::appstream Oracle Linux 9 [1.66.1-2] - rust-cargo: cargo does not respect the umask when extracting dependencies (CVE-2023-38497) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-38497 cpe:/a:oracle:linux:9::appstream Oracle Linux 8 [1.66.1-2] - rust-cargo: cargo does not respect the umask when extracting dependencies (CVE-2023-38497) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-38497 cpe:/a:oracle:linux:8::appstream Oracle Linux 9 [7.0.110-1.0.1] - Update to .NET SDK 7.0.110 and Runtime 7.0.10 - Resolves: RHBZ#2228571 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-38180 CVE-2023-35390 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 8 [7.0.110-1.0.1] - Update to .NET SDK 7.0.110 and Runtime 7.0.10 - Resolves: RHBZ#2228571 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-38180 CVE-2023-35390 cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 9 [6.0.121-1.0.1] - Update to .NET SDK 6.0.121 and Runtime 6.0.21 - Resolves: RHBZ#2228567 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-35390 CVE-2023-38180 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 8 [6.0.121-1.0.1] - Update to .NET SDK 6.0.121 and Runtime 6.0.21 - Resolves: RHBZ#2228567 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-35390 CVE-2023-38180 cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 7 [1:1.6.3-52] - CVE-2023-32360 cups: Information leak through Cups-Get-Document operation IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-32360 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7::optional_latest cpe:/a:oracle:linux:7:9:patch Oracle Linux 7 [3.10.0-1160.99.1.0.1.OL7] - debug: lock down kgdb [Orabug: 34270798] {CVE-2022-21499} [3.10.0-1160.99.1.OL7] - Update Oracle Linux certificates (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and shim-x64 <= 15-2.0.9 - Update oracle(kernel-sig-key) value to match new certificate (Ilya Okomin) [3.10.0-1160.99.1] - x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226841] {CVE-2023-20593} - x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226841] {CVE-2023-20593} [3.10.0-1160.98.1] - GFS2: gfs2_dir_get_hash_table(): avoiding deferred vfree() is easy here... (Andrew Price) [2190450] - GFS2: use kvfree() instead of open-coding it (Andrew Price) [2190450] [3.10.0-1160.97.1] - net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (Davide Caratti) [2216982] {CVE-2023-35788} - netfilter: conntrack: re-fetch conntrack after insertion (Florian Westphal) [2188190] - netfilter: conntrack: handle tcp challenge acks during connection reuse (Florian Westphal) [2128262] - netfilter: conntrack: reduce timeout when receiving out-of-window fin or rst (Florian Westphal) [2128262] - netfilter: conntrack: remove unneeded indent level (Florian Westphal) [2128262] - netfilter: conntrack: ignore overly delayed tcp packets (Florian Westphal) [2128262] - netfilter: conntrack: prepare tcp_in_window for ternary return value (Florian Westphal) [2128262] - netfilter: conntrack: connection timeout after re-register (Florian Westphal) [2128262] - netfilter: conntrack: always store window size un-scaled (Florian Westphal) [2128262] - netfilter: conntrack: work around exceeded receive window (Florian Westphal) [2128262] - netfilter: conntrack: avoid misleading 'invalid' in log message (Florian Westphal) [2128262] - netfilter: remove BUG_ON() after skb_header_pointer() (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: re-init for syn packets only (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (Florian Westphal) [2128262] - netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2128262] - netfilter: conntrack: move synack init code to helper (Florian Westphal) [2128262] - netfilter: conntrack: do not renew entry stuck in tcp SYN_SENT state (Florian Westphal) [2128262] - netfilter: nf_conntrack_tcp: Fix stack out of bounds when parsing TCP options (Florian Westphal) [2128262] [3.10.0-1160.96.1] - sched/fair: Eliminate bandwidth race between throttling and distribution (Phil Auld) [2180681] - sched/fair: Fix race between runtime distribution and assignment (Phil Auld) [2180681] - sched/fair: Don't assign runtime for throttled cfs_rq (Phil Auld) [2180681] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-20593 CVE-2023-35788 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7:9:patch cpe:/a:oracle:linux:7::optional_latest Oracle Linux 9 [1:2.3.3op2-16.1] - CVE-2023-32360 cups: Information leak through Cups-Get-Document operation IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-32360 cpe:/a:oracle:linux:9::appstream cpe:/o:oracle:linux:9::baseos_latest cpe:/o:oracle:linux:9:2:baseos_patch Oracle Linux 8 [1:2.2.6-51.1] - CVE-2023-32360 cups: Information leak through Cups-Get-Document operation IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-32360 cpe:/o:oracle:linux:8::baseos_latest cpe:/a:oracle:linux:8::appstream cpe:/o:oracle:linux:8:8:baseos_patch Oracle Linux 7 [102.15.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [102.15.0-1] - Update to 102.15.0 build1 [102.14.0-3] - Bump NVR to rebuild [102.14.0-2] - Rebuild due to rhbz#2228948 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-4051 CVE-2023-4053 CVE-2023-4574 CVE-2023-4580 CVE-2023-4583 CVE-2023-4575 CVE-2023-4584 CVE-2023-4578 CVE-2023-4577 CVE-2023-4573 CVE-2023-4581 CVE-2023-4585 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7::optional_latest cpe:/a:oracle:linux:7:9:patch Oracle Linux 8 [102.15.0-1.0.1] - Update to 102.15.0 build2 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-4580 CVE-2023-4584 CVE-2023-4573 CVE-2023-4577 CVE-2023-4585 CVE-2023-4583 CVE-2023-4581 CVE-2023-4574 CVE-2023-4575 CVE-2023-4578 CVE-2023-4053 CVE-2023-4051 cpe:/a:oracle:linux:8::appstream Oracle Linux 8 [102.15.0-1.0.1] - Update to 102.15.0 build1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-4573 CVE-2023-4585 CVE-2023-4577 CVE-2023-4581 CVE-2023-4051 CVE-2023-4578 CVE-2023-4584 CVE-2023-4575 CVE-2023-4583 CVE-2023-4574 CVE-2023-4053 CVE-2023-4580 cpe:/a:oracle:linux:8::appstream Oracle Linux 9 [102.15.0-1.0.1] - Update to 102.15.0 build1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-4573 CVE-2023-4577 CVE-2023-4578 CVE-2023-4051 CVE-2023-4581 CVE-2023-4583 CVE-2023-4574 CVE-2023-4585 CVE-2023-4053 CVE-2023-4580 CVE-2023-4575 CVE-2023-4584 cpe:/a:oracle:linux:9::appstream Oracle Linux 9 [102.15.0-1.0.1] - Update to 102.15.0 build2 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-4573 CVE-2023-4585 CVE-2023-4574 CVE-2023-4578 CVE-2023-4583 CVE-2023-4051 CVE-2023-4577 CVE-2023-4581 CVE-2023-4580 CVE-2023-4584 CVE-2023-4053 CVE-2023-4575 cpe:/a:oracle:linux:9::appstream Oracle Linux 7 [102.15.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.15.0-1] - Update to 102.15.0 build2 [102.14.0-3] - Bump NVR to rebuild [102.14.0-2] - Rebuild due to rhbz#2228948 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-4574 CVE-2023-4585 CVE-2023-4573 CVE-2023-4583 CVE-2023-4051 CVE-2023-4578 CVE-2023-4577 CVE-2023-4581 CVE-2023-4575 CVE-2023-4053 CVE-2023-4584 CVE-2023-4580 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7::optional_latest cpe:/a:oracle:linux:7:9:patch Oracle Linux 8 [1.3.2-9.el8_8.1] - don't free memory that is still used after realloc() error (CVE-2020-22219) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2020-22219 cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 9 [1.3.3-10.el9_2.1] - don't free memory that is still used after realloc() error (CVE-2020-22219) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2020-22219 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 8 httpd [2.4.37-56.0.1.7] - Resolves: #2176723 - CVE-2023-27522 httpd:2.4/httpd: mod_proxy_uwsgi HTTP response splitting [2.4.37-56.0.1.6] - Set vstring per ORACLE_SUPPORT_PRODUCT [Orabug: 29892262] - Replace index.html with Oracle's index page oracle_index.html [2.4.37-56.6] - Resolves: #2190133 - mod_rewrite regression with CVE-2023-25690 [2.4.37-56.4] - Resolves: #2177748 - CVE-2023-25690 httpd:2.4/httpd: HTTP request splitting with mod_rewrite and mod_proxy [2.4.37-56] - Resolves: #2162499 - CVE-2006-20001 httpd: mod_dav: out-of-bounds read/write of zero byte - Resolves: #2162485 - CVE-2022-37436 httpd: mod_proxy: HTTP response splitting - Resolves: #2162509 - CVE-2022-36760 httpd: mod_proxy_ajp: Possible request smuggling [2.4.37-55] - Resolves: #2155961 - prevent sscg creating /dhparams.pem [2.4.37-54] - Resolves: #2095650 - Dependency from mod_http2 on httpd broken [2.4.37-53] - Resolves: #2050888 - httpd with SSL fails to start unless hostname command was installed [2.4.37-52] - Add the SNI support in mod_proxy_wstunnel module for Apache httpd - Resolves: rhbz#2017543 mod_http2 [1.15.7-8.3] - Resolves: #2177748 - CVE-2023-25690 httpd:2.4/httpd: HTTP request splitting with mod_rewrite and mod_proxy [1.15.7-7] - Resolves: #2095650 - Dependency from mod_http2 on httpd broken [1.15.7-6] - Backport SNI feature refactor - Resolves: rhbz#2137257 mod_md MODERATE Copyright 2023 Oracle, Inc. CVE-2023-27522 cpe:/a:oracle:linux:8:8:appstream_base cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::appstream_developer Oracle Linux 9 [1:3.3-7.1] - Resolves: CVE-2023-30630 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-30630 cpe:/o:oracle:linux:9::baseos_latest cpe:/o:oracle:linux:9:2:baseos_patch Oracle Linux 9 [20230516-999.27.git6c9e0ed5.el9] - Update firmware for qat_4xxx devices (Orabug: 35811008) [20230516-999.26.git6c9e0ed5.el9] - Run dracut -f in %posttrans instead of %post (Orabug: 35661938) - Drop latest AMD microcode commits to family 19 file to include Milan microcode but not Genoa (Orabug: 35708511) [20230516-999.25.git6c9e0ed5.el9] - Add missing amd-ucode/ files to nano and core rpm (Orabug: 35642190) - Add posttrans scriptlet to reload microcode on AMD (Orabug: 35636951) - Recreate initramfs for AMD systems (Orabug: 35636951) [20230516-999.24.git6c9e0ed5.el7] - 8a07fa49 linux-firmware: Update AMD fam19h cpu microcode (Orabug: 35659485) [20230516-999.23.git6c9e0ed5.el9] - Firmware files need to be uncompressed for early kernel load to work - Resolves Zenbleed (Orabug: 35650345) {CVE-2023-20593} MODERATE Copyright 2023 Oracle, Inc. CVE-2023-20593 cpe:/o:oracle:linux:9::baseos_latest cpe:/o:oracle:linux:9:2:baseos_patch Oracle Linux 9 - [5.14.0-284.30.0.1_2.OL9] - x86/tsx: Add a feature bit for TSX control MSR support {CVE-2023-1637} - x86/speculation: Restore speculation related MSRs {CVE-2023-1637} - x86/pm: Save the MSR validity status at context setup {CVE-2023-1637} - x86/pm: Fix false positive kmemleak report in msr_build_context() {CVE-2023-1637} - x86/cpu: Restore AMD's DE_CFG MSR after resume {CVE-2023-1637} - x86/pm: Add enumeration check before spec MSRs {CVE-2023-1637} - arm64: efi: Execute runtime services from a dedicated {CVE-2023-21102} - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE {CVE-2023-3390} - netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain {CVE-2023-3390} - netfilter: nf_tables: unbind non-anonymous set if rule construction fails {CVE-2023-3390} - netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID {CVE-2023-4147} - netfilter: nf_tables: do not ignore genmask when looking up chain by id {CVE-2023-31248} - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval {CVE-2023-35001} - netfilter: nft_set_pipapo: fix improper element removal {CVE-2023-4004} - net/sched: cls_fw: Fix improper refcount update leads to use-after-free {CVE-2023-3776} IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-1637 CVE-2023-3776 CVE-2023-21102 CVE-2023-4147 CVE-2023-35001 CVE-2023-3390 CVE-2023-31248 CVE-2023-4004 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::codeready_builder cpe:/o:oracle:linux:9::baseos_latest cpe:/o:oracle:linux:9:2:baseos_patch Oracle Linux 9 [2.48-9] - Fix integer overflow in _libcap_strdup() (CVE-2023-2603) Resolves: rhbz#2210638 - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602) Resolves: rhbz#2222198 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-2602 CVE-2023-2603 cpe:/a:oracle:linux:9::appstream cpe:/o:oracle:linux:9::baseos_latest cpe:/o:oracle:linux:9:2:baseos_patch Oracle Linux 9 [6.5.2-6] - Fix registrar is subject to a DoS against SSL (CVE-2023-38200) Resolves: rhbz#2222694 - Fix challenge-protocol bypass during agent registration (CVE-2023-38201) Resolves: rhbz#2222695 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-38201 CVE-2023-38200 cpe:/a:oracle:linux:9::appstream Oracle Linux 9 [2.50.7-1.el9_2.1] - Fix CVE-2023-38633 (#2224947) MODERATE Copyright 2023 Oracle, Inc. CVE-2023-38633 cpe:/a:oracle:linux:9::appstream Oracle Linux 9 [7.2.0-14.el9_2.5] - rhel guest failed boot with multi disks on error Failed to start udev Wait for Complete Device Initialization - CVE-2023-3354 QEMU: VNC: improper I/O watch removal in TLS handshake can lead to remote unauthenticated denial of service - hotplug/hotunplug mlx vdpa device to the occupied addr port, then qemu core dump occurs after shutdown guest IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-3354 cpe:/a:oracle:linux:9::appstream Oracle Linux 9 [6.0.122-1.0.1] - Update to .NET SDK 6.0.122 and Runtime 6.0.22 - Resolves: RHEL-1997 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-36799 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 8 [6.0.122-1.0.1] - Update to .NET SDK 6.0.122 and Runtime 6.0.22 - Resolves: RHEL-1996 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-36799 cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 8 [7.0.111-1.0.1] - Update to .NET SDK 7.0.111 and Runtime 7.0.11 - Resolves: RHEL-2001 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-36799 cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 9 [7.0.111-1.0.1] - Update to .NET SDK 7.0.111 and Runtime 7.0.11 - Resolves: RHEL-2000 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-36799 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 6 [1:1.15.1-21.0.1] - Backport fix for CVE-2022-48174 [Orabug: 35819048] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-48174 cpe:/a:oracle:linux:6:10:ELS Oracle Linux 8 [102.15.1-1.0.1] - Update to 102.15.1 build2 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-4863 cpe:/a:oracle:linux:8::appstream Oracle Linux 7 [102.15.1-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [102.15.1-1] - Update to 102.15.1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-4863 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7::optional_latest cpe:/a:oracle:linux:7:9:patch Oracle Linux 9 [8.3.1-5.2] - Fix for CVE-2023-38802 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-38802 cpe:/a:oracle:linux:9::appstream Oracle Linux 7 [102.15.1-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [102.15.1-1] - Update to 102.15.1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-4863 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7::optional_latest cpe:/a:oracle:linux:7:9:patch Oracle Linux 9 [102.15.1-1.0.1] - Update to 102.15.1 build2 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-4863 cpe:/a:oracle:linux:9::appstream Oracle Linux 8 [102.15.1-1.0.1] - Update to 102.15.1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-4863 cpe:/a:oracle:linux:8::appstream Oracle Linux 9 [1.2.0-7] - Added fix for CVE-2023-4863 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-4863 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 7 [11.0.5-3.0.1] - fix spaces in vmware udev rule for scsi devices [Orabug: 24461968] - Fix vmware udev rule in 99-vmware-scsi-timeout.rules file. [Orabug: 22815019] - Increase timeout for scsi devices on VMWare guests by adding a udev rule. - Created a new file 99-vmware-scsi-timeout.rules - Modified spec file to install this new file. [Orabug: 21819156] [11.0.5-3.el7_9.7] - ovt-VGAuth-Allow-only-X509-certs-to-verify-the-SAML-toke.patch [RHEL-2413] - Resolves: RHEL-2413 (CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-7.9.z]) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-20900 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7:9:patch cpe:/a:oracle:linux:7::optional_latest Oracle Linux 8 [7.5.1-7.0.1.2] - Fix BFD crash in FRR running in MetalLB (BZ#2231829) - Fix for CVE-2023-38802 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-38802 cpe:/a:oracle:linux:8::appstream Oracle Linux 9 [102.15.1-1.0.1] - Update to 102.15.1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-4863 cpe:/a:oracle:linux:9::appstream Oracle Linux 8 [4.18.0-477.27.0.1_8.OL8] - bluetooth: Perform careful capability checks in hci_sock_ioctl() {CVE-2023-2002} - ipvlan:Fix out-of-bounds caused by unclear skb->cb {CVE-2023-3090} - net/sched: cls_fw: Fix improper refcount update leads to use-after-free {CVE-2023-3776} - netfilter: nft_set_pipapo: fix improper element removal {CVE-2023-4004} - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval {CVE-2023-35001} - net/sched: flower: fix possible OOB write in fl_set_geneve_opt() {CVE-2023-35788} IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-3776 CVE-2023-35001 CVE-2023-2002 CVE-2023-3090 CVE-2023-35788 CVE-2023-4004 cpe:/o:oracle:linux:8::baseos_latest cpe:/o:oracle:linux:8:8:baseos_patch cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 8 [6.1-9.20180224.1] - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491) MODERATE Copyright 2023 Oracle, Inc. CVE-2023-29491 cpe:/o:oracle:linux:8::baseos_latest cpe:/o:oracle:linux:8:8:baseos_patch Oracle Linux 8 [1:3.3-4.1] - Resolves: CVE-2023-30630 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-30630 cpe:/o:oracle:linux:8::baseos_latest cpe:/o:oracle:linux:8:8:baseos_patch Oracle Linux 8 galera [25.3.37-1] - Rebase to 25.3.37 Judy [1.0.5-18.0.1] - Rebuild [Orabug: 31667911] mariadb [3:10.3.39-1] - [MariaDB 10.3.32] socat: E Failed to set SNI host '' (SST failure) - Rebase to 10.3.39 - CVEs fixed: CVE-2022-47015, CVE-2018-25032, CVE-2022-32091, CVE-2022-32084 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-38791 CVE-2022-32084 CVE-2022-32091 CVE-2022-47015 cpe:/a:oracle:linux:8:8:appstream_base cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::codeready_builder cpe:/a:oracle:linux:8::appstream_developer cpe:/a:oracle:linux:8::codeready_builder_developer Oracle Linux 8 hivex libguestfs libguestfs-winsupport [8.8-2] - Rebase to ntfs-3g 2022.10.3 - Fixes: CVE-2022-40284 - resolves: rhbz#2236373 libiscsi libnbd libtpms libvirt libvirt-dbus libvirt-python nbdkit netcf perl-Sys-Virt qemu-kvm [6.2.0-33] - CVE-2023-3354 QEMU: VNC: improper I/O watch removal in TLS handshake can lead to remote unauthenticated denial of service seabios [1.16.0-4] - seabios-malloc-use-variable-for-ZoneHigh-size.patch [bz#2227373] - seabios-malloc-use-large-ZoneHigh-when-there-is-enough-memor.patch [bz#2227373] - Resolves: bz#2227373 ("No bootable device" with OS boot disk interface VirtIO-SCSI and with more than 9 VirtIO disks.) sgabios supermin swtpm virt-v2v IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-3354 CVE-2022-40284 cpe:/a:oracle:linux:8:8:appstream_base cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::codeready_builder cpe:/a:oracle:linux:8::appstream_developer cpe:/a:oracle:linux:8::codeready_builder_developer Oracle Linux 8 pgaudit pg_repack postgres-decoderbufs postgresql [15.3-1] - Update to upstream version 15.3 - Fixes: CVE-2023-2454 CVE-2023-2455 - Resolves: #2207934 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-2454 CVE-2023-2455 cpe:/a:oracle:linux:8:8:appstream_base cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::appstream_developer Oracle Linux 8 [1.0.0-8.1] - Added fix for CVE-2023-4863 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-4863 cpe:/a:oracle:linux:8::appstream Oracle Linux 8 [12.1.5-2.0.2.3] - Resolves: RHEL-4584 (CVE-2023-20900 open-vm-tools: SAML token signature bypass) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-20900 cpe:/a:oracle:linux:8::appstream Oracle Linux 9 [12.1.5-1.0.2.3] - Resolves: RHEL-4584 (CVE-2023-20900 open-vm-tools: SAML token signature bypass IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-20900 cpe:/a:oracle:linux:9::appstream Oracle Linux 8 [4.0.9-29] - Fix CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804 - Resolves: (BZ#2170167) (BZ#2170172) (BZ#2170178) (BZ#2170187) (BZ#2170192) MODERATE Copyright 2023 Oracle, Inc. CVE-2023-0802 CVE-2023-0801 CVE-2023-0803 CVE-2023-0804 CVE-2023-0800 cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 8 nodejs [1:16.20.2-2] - Rebase to 16.20.2 Resolves: rhbz#2231866 Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559 nodejs-nodemon [3.0.1-1] - Rebase to 3.0.1 Resolves: CVE-2022-25883 nodejs-packaging [26-1] - nodejs.prov: find namespaced bundled dependencies - Apply https://src.fedoraproject.org/rpms/nodejs-packaging/c/e24e7df IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-25883 CVE-2023-32559 CVE-2023-32002 CVE-2023-32006 cpe:/a:oracle:linux:8::appstream Oracle Linux 8 nodejs [1:18.17.1-1] - Rebase to version 18.17.1 Resolves: rhbz#2228939 Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559 - Specify proper OpenSSL configuration section build nodejs-nodemon [3.0.1-1] - Rebase to 3.0.1 - Resolves: CVE-2022-25883 nodejs-packaging IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-32006 CVE-2022-25883 CVE-2023-32002 CVE-2023-32559 cpe:/a:oracle:linux:8:8:appstream_base cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::appstream_developer Oracle Linux 9 nodejs [1:18.17.1-1] - Rebase to version 18.17.1 Resolves: rhbz#2228940 Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559 - Specify proper OpenSSL configuration section build Related: rhbz#2226726 nodejs-nodemon [3.0.1-1] - Rebase to 3.0.1 - Resolves: CVE-2022-25883 nodejs-packaging IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-32006 CVE-2023-32002 CVE-2022-25883 CVE-2023-32559 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:2:appstream_patch cpe:/a:oracle:linux:9::appstream_developer cpe:/a:oracle:linux:9:2:appstream_base cpe:/a:oracle:linux:9:1:appstream_base Oracle Linux 8 [115.3.1-1.0.1] - Update to 115.3.1 build1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-5171 CVE-2023-5217 CVE-2023-3600 CVE-2023-5169 CVE-2023-5176 cpe:/a:oracle:linux:8::appstream Oracle Linux 8 [115.3.1-1.0.1] - Update to 115.3.1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-3600 CVE-2023-5176 CVE-2023-5217 CVE-2023-5169 CVE-2023-5171 cpe:/a:oracle:linux:8::appstream Oracle Linux 9 [115.3.1-1.0.1] - Update to 115.3.1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-5169 CVE-2023-5176 CVE-2023-3600 CVE-2023-5217 CVE-2023-5171 cpe:/a:oracle:linux:9::appstream Oracle Linux 9 [115.3.1-1.0.1] - Update to 115.3.1 build1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-5169 CVE-2023-5217 CVE-2023-5171 CVE-2023-5176 CVE-2023-3600 cpe:/a:oracle:linux:9::appstream Oracle Linux 9 [2.34-60.0.3.7] - CVE-2023-4527: Stack read overflow in getaddrinfo in no-aaa mode (#2234716). - CVE-2203-4806: potential use-after-free in getaddrinfo. - CVE-2023-4813: potential use-after-free in gaih_inet. Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com> IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-4813 CVE-2023-4806 CVE-2023-4527 CVE-2023-4911 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::codeready_builder cpe:/o:oracle:linux:9::baseos_latest cpe:/o:oracle:linux:9:2:baseos_patch Oracle Linux 8 [2.28-225.0.4.6] - CVE-2023-4527: Stack read overflow in getaddrinfo in no-aaa mode. - CVE-2203-4806: potential use-after-free in getaddrinfo. - CVE-2023-4813: potential use-after-free in gaih_inet (RHEL-2435). - CVE-2023-4813: work around RHEL-8 limitation in test (RHEL-2435). Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com> IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-4527 CVE-2023-4806 CVE-2023-4911 CVE-2023-4813 cpe:/o:oracle:linux:8::baseos_latest cpe:/a:oracle:linux:8::appstream cpe:/o:oracle:linux:8:8:baseos_patch cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 9 [3.11.2-2.2] - Security fix for CVE-2023-40217 Resolves: rhbz#2235789 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-40217 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 9 [9.54.0-10] - fix for CVE-2023-36664 - Resolves: rhbz#2217798 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-36664 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 8 [32:9.16.23-14.2] - stack exhaustion in control channel code may lead to DoS (CVE-2023-3341) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-3341 cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 7 [6.9.10.68-7] - Added fix for CVE-2021-40211 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2021-40211 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7::optional_latest cpe:/a:oracle:linux:7:9:patch Oracle Linux 9 [3.9.16-1.2] - Security fix for CVE-2023-40217 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-40217 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::codeready_builder cpe:/o:oracle:linux:9::baseos_latest cpe:/o:oracle:linux:9:2:baseos_patch Oracle Linux 8 [3.11.2-2.2] - Security fix for CVE-2023-40217 Resolves: rhbz#2235789 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-40217 cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 8 [32:9.11.36-8.2] - stack exhaustion in control channel code may lead to DoS (CVE-2023-3341) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-3341 cpe:/o:oracle:linux:8::baseos_latest cpe:/a:oracle:linux:8::appstream cpe:/o:oracle:linux:8:8:baseos_patch Oracle Linux 7 [115.3.1-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [115.3.1-1] - Update to 115.3.1 build1 [115.3.0-1] - Update to 115.3.0 [115.2.1-5] - Update to 115.2.1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-5171 CVE-2023-5217 CVE-2023-5169 CVE-2023-5176 CVE-2023-3600 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7::optional_latest cpe:/a:oracle:linux:7:9:patch Oracle Linux 7 [115.3.1-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [115.3.1-1] - Update to 115.3.1 [115.3.0-1] - Update to 115.3.0 ESR [115.2.0-3] - Update to 115.2.0 ESR [115.1.0-1] - Update to 115.1.0 ESR [115.0.2-1] - Update to 115.0.2 ESR [115.0b8-1] - Update to 115.0b8 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-5171 CVE-2023-5217 CVE-2023-5169 CVE-2023-5176 CVE-2023-3600 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7::optional_latest cpe:/a:oracle:linux:7:9:patch Oracle Linux 9 [1:16.20.2-1] - Update to 16.20.2-1 Resolves CVE-2023-32002 CVE-2023-32006 CVE-2023-32559 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-32002 CVE-2023-32006 CVE-2023-32559 cpe:/a:oracle:linux:9::appstream Oracle Linux 8 [1.7.0-10] - Heap buffer overflow in vp8 encoding in libvpx (CVE-2023-5217) Resolves: rhbz#2241191 - crash related to VP9 encoding in libvpx (CVE-2023-44488) Resolves: rhbz#2241806 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-5217 CVE-2023-44488 cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 9 [1.9.0-7] - Heap buffer overflow in vp8 encoding in libvpx (CVE-2023-5217) Resolves: rhbz#2241191 - crash related to VP9 encoding in libvpx (CVE-2023-44488) Resolves: rhbz#2241806 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-44488 CVE-2023-5217 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 7 [1.8.0-4.el7_9.1] - fix use-of-uninitialized-value (CVE-2020-22218) MODERATE Copyright 2023 Oracle, Inc. CVE-2020-22218 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7::optional_latest cpe:/a:oracle:linux:7:9:patch Oracle Linux 7 [2.5-11] - Do not evaluate unichar element - Resolves: RHEL-7011 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2019-19450 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7::optional_latest cpe:/a:oracle:linux:7:9:patch Oracle Linux 7 [3.10.0-1160.102.1.0.1.OL7] - debug: lock down kgdb [Orabug: 34270798] {CVE-2022-21499} [3.10.0-1160.102.1.OL7] - Update Oracle Linux certificates (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and shim-x64 <= 15-2.0.9 - Update oracle(kernel-sig-key) value to match new certificate (Ilya Okomin) [3.10.0-1160.102.1] - net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225486] {CVE-2023-3609} - NFSv4.1: fix handling of backchannel binding in BIND_CONN_TO_SESSION (Benjamin Coddington) [2219604] [3.10.0-1160.101.1] - cifs: fix a buffer leak in smb2_query_symlink (Jay Shin) [2166706] - kernfs: Improve kernfs_notify() poll notification latency (Ian Kent) [1703180] - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221720] {CVE-2023-35001} [3.10.0-1160.100.1] - bnxt: count Tx drops (Jamie Bainbridge) [2175062] - bnxt: make sure xmit_more + errors does not miss doorbells (Jamie Bainbridge) [2175062] - netfilter: nf_tables: skip deactivated anonymous sets during lookups (Florian Westphal) [2196159] {CVE-2023-32233} - netfilter: nf_tables: do not allow SET_ID to refer to another table (Florian Westphal) [2196159] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-3609 CVE-2023-35001 CVE-2023-32233 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7:9:patch cpe:/a:oracle:linux:7::optional_latest Oracle Linux 8 galera [26.4.14-1] - Rebase to 26.4.14 [26.4.13-1] - Rebase to 26.4.13 [26.4.12-1] - Rebase to 26.4.12 Judy mariadb [3:10.5.22-1] - Rebase to 10.5.22 [3:10.5.21-1] - Rebase to version 10.5.21 [3:10.5.20-2] - Use _fortify_level to disable fortification in debug builds [3:10.5.20-1] - Rebase to version 10.5.20 [3:10.5.18-1] - Rebase to 10.5.18 - OpenSSL 3 patch upstreamed IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-32084 CVE-2022-38791 CVE-2022-32089 CVE-2022-32091 CVE-2023-5157 CVE-2022-32081 CVE-2022-32082 CVE-2022-47015 cpe:/a:oracle:linux:8:8:appstream_base cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::appstream_developer Oracle Linux 9 galera [26.4.14-1.0.1] - Rebase to 26.4.14 [26.4.13-1.0.1] - Rebase to 26.4.13 [26.4.12-1.0.1] - Rebase to 26.4.12 mariadb [3:10.5.22-1] - Rebase to 10.5.22 [3:10.5.21-1] - Rebase to version 10.5.21 [3:10.5.20-2] - Use _fortify_level to disable fortification in debug builds [3:10.5.20-1] - Rebase to version 10.5.20 [3:10.5.18-1] - Rebase to 10.5.18 - OpenSSL 3 patch upstreamed IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-32081 CVE-2022-47015 CVE-2022-32089 CVE-2022-32084 CVE-2022-32091 CVE-2022-32082 CVE-2022-38791 CVE-2023-5157 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 9 [32:9.16.23-11.2] - stack exhaustion in control channel code may lead to DoS (CVE-2023-3341) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-3341 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 7 [32:9.11.4-26.P2.15] - Limit the amount of recursion possible in control channel (CVE-2023-3341) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-3341 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7::optional_latest cpe:/a:oracle:linux:7:9:patch Oracle Linux 9 [6.0.123-1.0.1] - Update to .NET SDK 6.0.123 and Runtime 6.0.23 - Resolves: RHEL-11696 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-44487 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 8 [7.0.112-1.0.1] - Update to .NET SDK 7.0.112 and Runtime 7.0.12 - Resolves: RHEL-11698 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-44487 cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 8 [6.0.123-1.0.1] - Update to .NET SDK 6.0.123 and Runtime 6.0.23 - Resolves: RHEL-11696 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-44487 cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 9 [1:1.20.1-14.0.1.1] - Resolves: RHEL-12518 - nginx: HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487) MODERATE Copyright 2023 Oracle, Inc. CVE-2023-44487 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 8 [1:1.20.1-1.0.1.1] - Resolves: RHEL-12732 - nginx:1.20/nginx: HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487) MODERATE Copyright 2023 Oracle, Inc. CVE-2023-44487 cpe:/a:oracle:linux:8::appstream Oracle Linux 8 [1:1.22.1-1.0.1.1] - Resolves: RHEL-12728 - nginx:1.22/nginx: HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)(CVE-2023-44487) MODERATE Copyright 2023 Oracle, Inc. CVE-2023-44487 cpe:/a:oracle:linux:8::appstream Oracle Linux 8 delve golang [1.19.13-1] - Rebase to Go 1.19.13 [CVE-2023-39325] [CVE-2023-44487] go-toolset [1.19.13-1] - Rebase to Go 1.19.13 [CVE-2023-39325] [CVE-2023-44487] IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-39325 CVE-2023-44487 cpe:/a:oracle:linux:8:8:appstream_base cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::appstream_developer Oracle Linux 8 [1:1.8.0.392.b08-4.0.1] - Update to shenandoah-jdk8u392-b08 (GA) - OpenJDK: segmentation fault in ciMethodBlocks (CVE-2022-40433) - OpenJDK: IOR deserialization issue in CORBA (8303384) (CVE-2023-22067) - OpenJDK: certificate path validation issue during client authentication (8309966) (CVE-2023-22081) - A maximum signature file size property, jdk.jar.maxSignatureFileSize, was introduced in the 8u382 release of OpenJDK by JDK-8300596, with a default of 8 MB. This default proved to be too small for some JAR files. This release, 8u392, increases it to 16 MB. (RHEL-13593) MODERATE Copyright 2023 Oracle, Inc. CVE-2022-40433 CVE-2023-22067 CVE-2023-22081 cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 9 [1:1.8.0.392.b08-3.0.1] - Update to shenandoah-jdk8u392-b08 (GA) - OpenJDK: segmentation fault in ciMethodBlocks (CVE-2022-40433) - OpenJDK: IOR deserialization issue in CORBA (8303384) (CVE-2023-22067) - OpenJDK: certificate path validation issue during client authentication (8309966) (CVE-2023-22081) - A maximum signature file size property, jdk.jar.maxSignatureFileSize, was introduced in the 8u382 release of OpenJDK by JDK-8300596, with a default of 8 MB. This default proved to be too small for some JAR files. This release, 8u392, increases it to 16 MB. (RHEL-13593) MODERATE Copyright 2023 Oracle, Inc. CVE-2022-40433 CVE-2023-22081 CVE-2023-22067 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 7 [1:11.0.21.0.9-1.0.1] - link atomic for ix86 build [1:11.0.21.0.9-1] - Update to jdk-11.0.21+9 (GA) - Update release notes to 11.0.21+9 - Remove system crypto policy patch which doesn't belong on RHEL 7 with no system policies - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Apply all patches using -p1 - Drop local backport of JDK-8243210 which is upstream from 11.0.21+2 - Add missing JFR alternative ghost - Move jcmd to the headless package - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment - Disable the serviceability agent on Zero architectures even when the architecture itself is supported - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12217 - Resolves: RHEL-12910 - Resolves: RHEL-12913 - Resolves: RHEL-11320 - Resolves: RHEL-13227 - Resolves: RHEL-13217 [1:11.0.21.0.9-1] - For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11320 [1:11.0.20.1.1-1] - Update to jdk-11.0.20.1+1 (GA) - Update release notes to 11.0.20.1+1 - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095) - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269) - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise runtime and buildtime tzdata requirements - Update README.md to match the version in later RHEL releases - Resolves: rhbz#2236229 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-22081 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7::optional_latest cpe:/a:oracle:linux:7:9:patch Oracle Linux 9 golang [1.19.13-1] - Update to go 1.19.13 [CVE-2023-44487] [CVE-2023-39325] [CVE-2023-29409] go-toolset [1.19.13-1] - Update to Go version 1.19.13 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-39325 CVE-2023-29409 CVE-2023-44487 cpe:/a:oracle:linux:9::appstream Oracle Linux 8 [1:11.0.21.0.9-2.0.1] - Update to jdk-11.0.21+9 (GA) - Update release notes to 11.0.21+9 - OpenJDK: certificate path validation issue during client authentication (8309966) (CVE-2023-22081) - OpenJDK: Additional zip64 files validation (8313765) (RHBZ#2237170) - OpenJDK: Print an exception when encountering null addresses while producing thread dumps (8243210) MODERATE Copyright 2023 Oracle, Inc. CVE-2023-22081 cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 9 [1:11.0.21.0.9-2.0.1] - Add Oracle vendor bug URL [Orabug: 34340155] - Update to jdk-11.0.21+9 (GA) - Update release notes to 11.0.21+9 - OpenJDK: certificate path validation issue during client authentication (8309966) (CVE-2023-22081) - OpenJDK: Additional zip64 files validation (8313765) (RHBZ#2237170) - OpenJDK: Print an exception when encountering null addresses while producing thread dumps (8243210) MODERATE Copyright 2023 Oracle, Inc. CVE-2023-22081 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 9 [7.0.112-1.0.1] - Update to .NET SDK 7.0.112 and Runtime 7.0.12 - Resolves: RHEL-11698 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-44487 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 8 [1:17.0.9.0.9-2.0.1] - Update to jdk-17.0.9+9 (GA) - Update release notes to 17.0.9+9 - OpenJDK: memory corruption issue on x86_64 with AVX-512 (JDK-8317121) (CVE-2023-22025) - OpenJDK: certificate path validation issue during client authentication (JDK-8309966) (CVE-2023-22081) - OpenJDK: Additional zip64 files validation (JDK-8313765) (RHBZ#2237170) MODERATE Copyright 2023 Oracle, Inc. CVE-2023-22081 CVE-2023-22025 cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 9 [1:17.0.9.0.9-2.0.1] - Update to jdk-17.0.9+9 (GA) - Update release notes to 17.0.9+9 - OpenJDK: memory corruption issue on x86_64 with AVX-512 (JDK-8317121) (CVE-2023-22025) - OpenJDK: certificate path validation issue during client authentication (JDK-8309966) (CVE-2023-22081) - OpenJDK: Additional zip64 files validation (JDK-8313765) (RHBZ#2237170) MODERATE Copyright 2023 Oracle, Inc. CVE-2023-22081 CVE-2023-22025 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 7 [1:1.8.0.392.b08-2] - Revert jcmd move as jcmd will not operate without tools.jar - Related: RHEL-13577 [1:1.8.0.392.b08-1] - Update to shenandoah-jdk8u392-b08 (GA) - Update release notes for shenandoah-8u392-b08. - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal - Update bug URL for RHEL to point to the Red Hat customer portal - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Regenerate PR2462 patch following JDK-8315135 - Add backport of JDK-8312489 heading upstream for 8u402 (see OPENJDK-2095) - Add missing JFR alternative ghost - Move jcmd to the headless package - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. ** - Resolves: RHEL-12212 - Resolves: RHEL-13574 - Resolves: RHEL-13575 - Resolves: RHEL-13576 - Resolves: RHEL-11319 - Resolves: RHEL-13577 [1:1.8.0.392.b08-1] - For non debug subpackages, ghosted all alternatives (rhbz1649776) - For non system JDKs, if-outed versionless provides. - Aligned versions to be %{epoch}:%{version}-%{release} instead of chaotic - Related: RHEL-11319 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-22067 CVE-2023-22081 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7::optional_latest cpe:/a:oracle:linux:7:9:patch Oracle Linux 9 [7.76.1-23.el9_2.4] - curl: a heap-based buffer overflow in the SOCKS5 proxy handshake (CVE-2023-38545) - curl: cookie injection with none file (CVE-2023-38546) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-38546 CVE-2023-38545 cpe:/a:oracle:linux:9::appstream cpe:/o:oracle:linux:9::baseos_latest cpe:/o:oracle:linux:9:2:baseos_patch Oracle Linux 9 [1:16.20.2-3.0.1] - Update nghttp2 to 1.57.0 Resolves: CVE-2023-44487 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-44487 cpe:/a:oracle:linux:9::appstream Oracle Linux 8 [3.4.0-8.1] - python-reportlab: code injection in paraparser.py allows code execution (CVE-2019-19450) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2019-19450 cpe:/a:oracle:linux:8::appstream Oracle Linux 8 [1.33.0-5] - fix HTTP/2 Rapid Reset (CVE-2023-44487) [1.33.0-4] - prevent DoS caused by overly large SETTINGS frames (CVE-2020-11080) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-44487 cpe:/o:oracle:linux:8::baseos_latest cpe:/o:oracle:linux:8:8:baseos_patch cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 9 [1.43.0-5.1] - fix HTTP/2 Rapid Reset (CVE-2023-44487) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-44487 cpe:/a:oracle:linux:9::codeready_builder cpe:/o:oracle:linux:9::baseos_latest cpe:/o:oracle:linux:9:2:baseos_patch Oracle Linux 9 nodejs [1:18.18.2-2] - Rebase to version 18.18.2 Resolves: CVE-2023-44487 CVE-2023-45143 CVE-2023-38552 CVE-2023-39333 nodejs-nodemon [3.0.1-1] - Rebase to 3.0.1 - Resolves: CVE-2022-25883 nodejs-packaging [2021.06-4] - NPM bundler: also find namespaced bundled dependencies [2021.06-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild [2021.06-2] - Fix hard-coded output directory in the bundler [2021.06-1] - Update to 2021.06-1 - bundler: Handle archaic license metadata - bundler: Warn about bundled dependencies with no license metadata [2021.01-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild [2021.01-2] - nodejs-packaging-bundler improvements to handle uncommon characters [2021.01] - Add nodejs-packaging-bundler and update README.md [2020.09-1] - Move to dist-git as the upstream [25-1] - Fix incorrect bundled library detection for Requires [24-1] - Check node_modules_prod for bundled dependencies [23-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild [23-3] - Drop Requires: nodejs(engine) [23-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-44487 CVE-2023-39333 CVE-2023-38552 CVE-2023-45143 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:2:appstream_patch cpe:/a:oracle:linux:9::appstream_developer cpe:/a:oracle:linux:9:2:appstream_base cpe:/a:oracle:linux:9:1:appstream_base Oracle Linux 8 nodejs [1:16.20.2-3.0.1] - Update nghttp2 to 1.57.0 Resolves: CVE-2023-44487 nodejs-nodemon nodejs-packaging [26-1] - nodejs.prov: find namespaced bundled dependencies - Apply https://src.fedoraproject.org/rpms/nodejs-packaging/c/e24e7df IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-44487 cpe:/a:oracle:linux:8::appstream Oracle Linux 8 [7.5.15-5] - Resolve CVE-2023-44487 Rapid Reset Attack - Resolve CVE-2023-39325 rapid stream resets can cause excessive work MODERATE Copyright 2023 Oracle, Inc. CVE-2023-44487 CVE-2023-39325 cpe:/a:oracle:linux:8::appstream Oracle Linux 9 [9.0.9-4] - Resolve CVE-2023-44487 Rapid Reset Attack - Resolve CVE-2023-39325 rapid stream resets can cause excessive work MODERATE Copyright 2023 Oracle, Inc. CVE-2023-39325 CVE-2023-44487 cpe:/a:oracle:linux:9::appstream Oracle Linux 8 nodejs [1:18.18.2-1] - Rebase to version 18.18.2 Resolves: CVE-2023-44487 CVE-2023-45143 CVE-2023-38552 CVE-2023-39333 nodejs-nodemon nodejs-packaging IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-38552 CVE-2023-45143 CVE-2023-44487 CVE-2023-39333 cpe:/a:oracle:linux:8:8:appstream_base cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::appstream_developer Oracle Linux 9 [6.6.2-3.el9_2.1] - Add parameters h2_rst_allowance and h2_rst_allowance_period to mitigate CVE-2023-44487 - Resolves: RHEL-12818 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-44487 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 9 [8.0.30-1] - rebase to 8.0.30 - Resolves: RHEL-11946 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-0567 CVE-2023-0662 CVE-2023-0568 CVE-2023-3247 CVE-2023-3824 CVE-2023-3823 cpe:/a:oracle:linux:9::appstream Oracle Linux 8 libzip php [8.0.30-1] - rebase to 8.0.30 - Resolves: RHEL-11946 php-pear php-pecl-apcu php-pecl-rrd php-pecl-xdebug3 php-pecl-zip IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-3824 CVE-2023-0568 CVE-2023-0567 CVE-2023-3823 CVE-2023-0662 CVE-2023-3247 cpe:/a:oracle:linux:8:8:appstream_base cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::appstream_developer Oracle Linux 8 [1:9.0.62-5.2] - HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-44487 cpe:/a:oracle:linux:8::appstream Oracle Linux 9 [1:9.0.62-11.3] - HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-44487 cpe:/a:oracle:linux:9::appstream Oracle Linux 8 varnish [6.0.8-3.1] - Add parameters h2_rst_allowance and h2_rst_allowance_period to mitigate CVE-2023-44487 varnish-modules IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-44487 cpe:/a:oracle:linux:8:8:appstream_base cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::appstream_developer Oracle Linux 8 babel Cython numpy pytest python2 [2.7.18-13.0.1.2] - Security fix for CVE-2023-40217 python2-pip python2-rpm-macros python2-setuptools python2-six python-attrs python-backports python-backports-ssl_match_hostname python-chardet python-coverage python-dns python-docs python-docutils python-funcsigs python-idna python-ipaddress python-jinja2 python-lxml python-markupsafe python-mock python-nose python-pluggy python-psycopg2 python-py python-pygments python-pymongo python-PyMySQL python-pysocks python-pytest-mock python-requests python-setuptools_scm python-sqlalchemy python-urllib3 python-virtualenv python-wheel pytz PyYAML scipy IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-40217 cpe:/a:oracle:exadata_dbserver:23.1.0.0.0::ol8 cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::appstream_developer cpe:/a:oracle:exadata_dbserver:23.1.5.0.0::ol8 cpe:/a:oracle:exadata_dbserver:23.1.6.0.0::ol8 cpe:/a:oracle:linux:8:8:appstream_base cpe:/a:oracle:exadata_dbserver:23.1.4.0.0::ol8 cpe:/a:oracle:exadata_dbserver:23.1.1.0.0::ol8 cpe:/a:oracle:exadata_dbserver:23.1.2.0.0::ol8 cpe:/a:oracle:exadata_dbserver:23.1.7.0.0::ol8 cpe:/a:oracle:exadata_dbserver:23.1.3.0.0::ol8 Oracle Linux 8 [3.6.8-51.0.1.2] - Security fix for CVE-2023-40217 Resolves: rhbz#2235789 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-40217 cpe:/o:oracle:linux:8::baseos_latest cpe:/a:oracle:linux:8::appstream cpe:/o:oracle:linux:8:8:baseos_patch Oracle Linux 8 Cython [0.29.21-5] - Convert from Fedora to the python39 module in RHEL8 - Resolves: rhbz#1877430 mod_wsgi [4.7.1-5] - Core dumped upon file upload >= 1GB Resolves: rhbz#2125172 numpy [1.19.4-3] - Adjusted the postun scriptlets to enable upgrading to RHEL 9 - Resolves: rhbz#1933055 pybind11 [2.7.1-1] - Update to 2.7.1 - Resolves: rhbz#2000212 pytest [6.0.2-2] - Convert from Fedora to the python39 module in RHEL8 - Resolves: rhbz#1877430 [6.0.2-1] - Update to 6.0.2. [6.0.1-1] - Update to 6.0.1 (#1862097) [6.0.0~rc1-1] - Update to 6.0.0rc1 [5.4.3-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild [5.4.3-1] - Update to 5.4.3. [5.4.2-1] - Update to 5.4.2 (#1707986) [4.6.10-3] - Rebuilt for Python 3.9 [4.6.10-2] - Bootstrap for Python 3.9 [4.6.10-1] - Update to 4.6.10. [4.6.9-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild [4.6.9-1] - Update to 4.6.9. [4.6.8-1] - Update to 4.6.8. [4.6.7-1] - Update to 4.6.7 python39 python3x-pip [20.2.4-7] - Remove bundled windows executables - Resolves: rhbz#2006790 python3x-setuptools [50.3.2-4] - Adjusted the postun scriptlets to enable upgrading to RHEL 9 - Resolves: rhbz#1933055 python3x-six [1.15.0-3] - Convert from Fedora to the python39 module in RHEL8 - Resolves: rhbz#1877430 [1.15.0-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild [1.15.0-1] - Update to 1.15.0 (#1838702) [1.14.0-4] - Rebuilt for Python 3.9 [1.14.0-3] - Bootstrap for Python 3.9 [1.14.0-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild [1.14.0-1] - Update to 1.14.0 (#1768982) for Python 3.9 support (#1788494) - Drop old obsoletes for platform-python-six python-attrs [20.3.0-2] - Convert from Fedora to the python39 module in RHEL8 - Resolves: rhbz#1877430 [20.3.0-1] - Update to 20.3.0 (#1894866) [20.2.0-1] - Update to 20.2.0 (#1876063) [20.1.0-1] - Update to 20.1.0 (#1870794) [19.3.0-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild [19.3.0-4] - Rebuilt for Python 3.9 python-cffi [1.14.3-2] - Convert from Fedora to the python39 module in RHEL8 - Resolves: rhbz#1877430 [1.14.3-1] - Update to 1.14.3 [1.14.2-1] - Update to 1.14.2 (#1869032) [1.14.1-1] - Update to 1.14.1 - Fixes: rhbz#1860698 - Fixes: rhbz#1865276 [1.14.0-2] - Rebuilt for Python 3.9 [1.14.0] - Update to 1.14.0 (#1800646) python-chardet python-cryptography [3.3.1-2] - Convert from Fedora to the python39 module in RHEL8 - Resolves: rhbz#1877430 [3.3.1-1] - Update to 3.3.1 (#1905756) [3.2.1-1] - Update to 3.2.1 (#1892153) [3.2-1] - Update to 3.2 (#1891378) [3.1-1] - Update to 3.1 (#1872978) [3.0-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild [3.0-1] - Update to 3.0 (#185897) [2.9-3] - Rebuilt for Python 3.9 [2.9-2] - add source file verification [2.9-1] - Update to 2.9 (#1820348) python-idna [2.10-3] - Convert from Fedora to the python39 module in RHEL8 - Resolves: rhbz#1877430 [2.10-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild [2.10-1] - Update to 2.10 (#1851653) [2.9-2] - Rebuilt for Python 3.9 [2.9-1] - Update to 2.9 (#1803654) python-iniconfig [1.1.1-2] - Convert from Fedora to the python39 module in RHEL8 - Revert usage of pyproject-rpm-macros - Remove dependency on setuptools_scm - Resolves: rhbz#1877430 python-lxml [4.6.5-1] - Update to 4.6.5 - Security fix for CVE-2021-43818 Resolves: rhbz#2032569 python-more-itertools [8.5.0-2] - Convert from Fedora to the python39 module in RHEL8 - Resolves: rhbz#1877430 [8.5.0-1] - Update to 8.5.0 (#1873653) [8.4.0-1] - Update to 8.4.0 - Fixes rhbz#1778332 [7.2.0-6] - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild python-packaging [20.4-4] - Convert from Fedora to the python39 module in RHEL8 - Resolves: rhbz#1877430 [20.4-3] - Drop the dependency on six to make the package lighter [20.4-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild [20.4-1] - Update to 20.4 (#1838285) [20.3-3] - Rebuilt for Python 3.9 [20.3-2] - Bootstrap for Python 3.9 [20.3-1] - Update to 20.3 (#1810738) [20.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild [20.1-1] - Update to 20.1 (#1794865) [20.0-2] - Ignore broken tests [20.0-1] - Update to 20.0 (#1788012) python-pluggy [0.13.1-3] - Convert from Fedora to the python39 module in RHEL8 - Resolves: rhbz#1877430 [0.13.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild [0.13.1-1] - update to 0.13.1 [0.13.0-4] - Rebuilt for Python 3.9 python-ply python-psutil [5.8.0-4] - Convert from Fedora to the python39 module in RHEL8 - Resolves: rhbz#1877430 [5.8.0-3] - Disable test_leak_mem test. [5.8.0-2] - Disable test_sensors_temperatures test. [5.8.0-1] - Update to 5.8.0. Fixes rhbz#1909321 - Re-enable tests (skipping 2 that fail in mock). [5.7.3-1] - Update to 5.7.3 (rhbz#1857187) [5.7.2-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild [5.7.2-1] - Update to 5.7.2 [5.6.7-3] - Add BR on setuptools for all package combinations [5.6.7-2] - Rebuilt for Python 3.9 [5.6.7-1] - Update to 5.6.7. Fixes bug 1768362. python-psycopg2 [2.8.6-2] - Convert from Fedora to the python39 module in RHEL8 - Resolves: rhbz#1877430 [2.8.6-1] - Rebase to upstream version 2.8.6 [2.8.5-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild [2.8.5-2] - Rebuilt for Python 3.9 [2.8.5-1] - Rebase to upstream version 2.8.5 python-py [1.10.0-1] - Update to 1.10.0. - Resolves: rhbz#1877430 [1.9.0-3] - Convert from Fedora to the python39 module in RHEL8 - Resolves: rhbz#1877430 [1.9.0-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild [1.9.0-1] - Update to 1.9.0. [1.8.2-1] - Update to 1.8.2. [1.8.0-10] - Rebuilt for Python 3.9 [1.8.0-9] - Bootstrap for Python 3.9 python-pycparser [2.20-3] - Convert from Fedora to the python39 module in RHEL8 - Resolves: rhbz#1877430 [2.20-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild [2.20-1] - Update to 2.20 (#1810349) python-PyMySQL python-pysocks python-requests [2.25.0-2] - Convert from Fedora to the python39 module in RHEL8 - Resolves: rhbz#1877430 [2.25.0-1] - Update to 2.25.0 [2.24.0-5] - Don't BR pytest-cov [2.24.0-3] - Build with pytest 6, older version is no longer required [2.24.0-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild [2.24.0-1] - Update to 2.24.0 - Resolves rhbz#1848104 [2.23.0-5] - Add requests[security] and requests[socks] subpackages [2.23.0-4] - Test with pytest 4, drop manual requires [2.23.0-3] - Rebuilt for Python 3.9 [2.23.0-2] - Bootstrap for Python 3.9 [2.23.0-1] - Update to 2.23.0 (#1804863). - https://requests.readthedocs.io/en/latest/community/updates/ python-toml [0.10.1-5] - Convert spec for python39 module in RHEL8 - Revert usage of pyproject-rpm-macros - Resolves: rhbz#1877430 python-urllib3 [1.25.10-4] - Fix for CVE-2021-33503 Catastrophic backtracking in URL authority parser Resolves: rhbz#1968074 python-wcwidth [0.2.5-3] - Convert from Fedora to the python39 module in RHEL8 - Resolves: rhbz#1877430 [0.2.5-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild [0.2.5-1] - Update to 0.2.5 (#1850238) [0.2.4-1] - Update to 0.2.4 [0.2.3-1] - Update to 0.2.3 [0.1.9-3] - Rebuilt for Python 3.9 [0.1.9-2] - Bootstrap for Python 3.9 [0.1.9-1] - Update to 0.1.9 python-wheel [1:0.35.1-4] - Adjusted the postun scriptlets to enable upgrading to RHEL 9 - Resolves: rhbz#1933055 PyYAML scipy [1.5.4-3] - Specify LDFLAGS explicitly - Force preprocessing of Fortran sources to make annobin record proper flags - Resolves: rhbz#1778983 rhbz#1877430 [1.5.4-2] - Convert from Fedora to the python39 module in RHEL8 - Resolves: rhbz#1877430 [1.5.4-1] - New upstream release 1.5.4 - Increase test timeout, 300 seconds is not always enough for test_logpdf_overflow on s390x resolves: #1894887 [1.5.3-1] - New upstream release 1.5.3 resolves: #1889132 [1.5.2-2] - Skip one more test expected to fail on 32-bit architectures [1.5.2-1] - New upstream release 1.5.2 resolves: #1853871 and 1840077 [1.5.0-4] - https://fedoraproject.org/wiki/Changes/FlexiBLAS_as_BLAS/LAPACK_manager [1.5.0-3] - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild [1.5.0-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild [1.5.0-1] - Update to latest version [1.4.1-2] - Rebuilt for Python 3.9 [1.4.1-1] - Update to 1.4.1 (bz#1771154) - Workaround FTBFS with gcc 10 (bz#1800078) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-40217 cpe:/a:oracle:linux:8:8:appstream_base cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::codeready_builder cpe:/a:oracle:linux:8::appstream_developer cpe:/a:oracle:linux:8::codeready_builder_developer Oracle Linux 9 [1:1.22.1-3.0.1.1] - Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (CVE-2023-44487) MODERATE Copyright 2023 Oracle, Inc. CVE-2023-44487 cpe:/a:oracle:linux:9::appstream Oracle Linux 7 [115.4.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [115.4.0-1] - Update to 115.4.0 build1 - Add fix for CVE-2023-44488 - Set homepage from os-release HOME_URL IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-5724 CVE-2023-44488 CVE-2023-5721 CVE-2023-5725 CVE-2023-5730 CVE-2023-5728 CVE-2023-5732 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7::optional_latest cpe:/a:oracle:linux:7:9:patch Oracle Linux 9 [9.2-2] - Rebase to ntfs-3g 2022.10.3 - Fixes: CVE-2022-40284 - resolves: rhbz#2236130 LOW Copyright 2023 Oracle, Inc. CVE-2022-40284 cpe:/a:oracle:linux:9::appstream Oracle Linux 8 [115.4.0-1.0.1] - Update to 115.4.0 build1 - Add fix for CVE-2023-44488 - Set homepage from os-release HOME_URL IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-5730 CVE-2023-5732 CVE-2023-44488 CVE-2023-5721 CVE-2023-5728 CVE-2023-5725 CVE-2023-5724 cpe:/a:oracle:linux:8::appstream Oracle Linux 9 [115.4.0-1.0.1] - Update to 115.4.0 build1 - Add fix for CVE-2023-44488 - Set homepage from os-release HOME_URL IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-5732 CVE-2023-5725 CVE-2023-5730 CVE-2023-5728 CVE-2023-5721 CVE-2023-5724 CVE-2023-44488 cpe:/a:oracle:linux:9::appstream Oracle Linux 9 [115.4.1-1.0.1] - Update to 115.4.1 build1 - Add fix for CVE-2023-44488 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-5721 CVE-2023-5730 CVE-2023-5725 CVE-2023-5728 CVE-2023-5732 CVE-2023-44488 CVE-2023-5724 cpe:/a:oracle:linux:9::appstream Oracle Linux 7 [115.4.1-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [115.4.1-1] - Update to 115.4.1 build1 [115.4.0-3] - Update to 115.4.0 build3 [115.4.0-2] - Update to 115.4.0 build2 [115.4.0-1] - Update to 115.4.0 build1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-5721 CVE-2023-5724 CVE-2023-5730 CVE-2023-5732 CVE-2023-5728 CVE-2023-44488 CVE-2023-5725 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7::optional_latest cpe:/a:oracle:linux:7:9:patch Oracle Linux 8 [115.4.1-1.0.1] - Update to 115.4.1 build1 - Add fix for CVE-2023-44488 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-5730 CVE-2023-44488 CVE-2023-5721 CVE-2023-5725 CVE-2023-5732 CVE-2023-5728 CVE-2023-5724 cpe:/a:oracle:linux:8::appstream Oracle Linux 8 [2.30-119.0.2.2] - Fix for CVE-2022-4285. - Fix illegal memory address when parsing an ELF file contaiing corrupt symbol version information. Upstream commit 5c831a3c7f3ca98d6aba1200353311e1a1f84c70. - Partial backport of _bfd_mul_overflow support from upstream commit 1f4361a77b18c5ab32baf2f30fefe5e301e017be - Reviewed-by: David Faust <david.faust@oracle.com> MODERATE Copyright 2023 Oracle, Inc. CVE-2022-4285 cpe:/o:oracle:linux:8::baseos_latest cpe:/a:oracle:linux:8::appstream cpe:/o:oracle:linux:8:8:baseos_patch Oracle Linux 9 [6.0.124-1.0.1] - Update to .NET SDK 6.0.124 and Runtime 6.0.24 - Resolves: RHEL-14462 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-36799 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 8 [6.0.124-1.0.1] - Update to .NET SDK 6.0.124 and Runtime 6.0.24 - Resolves: RHEL-14466 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-36799 cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 9 [7.0.113-1.0.1] - Update to .NET SDK 7.0.113 and Runtime 7.0.13 - Resolves: RHEL-14467 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-36799 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 8 [7.0.113-1.0.1] - Update to .NET SDK 7.0.113 and Runtime 7.0.13 - Resolves: RHEL-14474 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-36799 cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 9 [9.54.0-11] - fix for CVE-2023-43115 - Resolves: rhbz#2241108 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-43115 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 9 [7:5.5-5.el9_2.1] - Improve HTTP chunked encoding compliance (CVE-2023-46846) - Fix stack buffer overflow when parsing Digest Authorization (CVE-2023-46847) - Fix userinfo percent-encoding (CVE-2023-46848) CRITICAL Copyright 2023 Oracle, Inc. CVE-2023-46847 CVE-2023-46848 CVE-2023-46846 cpe:/a:oracle:linux:9::appstream Oracle Linux 8 libecap squid [4.15-6.0.1] - Improve HTTP chunked encoding compliance (CVE-2023-46846) - Fix stack buffer overflow when parsing Digest Authorization (CVE-2023-46847) CRITICAL Copyright 2023 Oracle, Inc. CVE-2023-46847 CVE-2023-46846 cpe:/a:oracle:linux:8:8:appstream_base cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::appstream_developer Oracle Linux 9 [0.11.6-3] - Refreshing any page in pcs-web-ui no longer causes it to display a blank page - Resolves: rhbz#2222788 [0.11.6-2] - Added BuildRequires: debugedit - for generating MiniDebugInfo - triggered by removing find-debuginfo.sh from rpm - Make use of filters when extracting tarballs to enhance security if provided by Python (pcs config restore command) - Exporting constraints with rules in form of pcs commands now escapes # and fixes spaces in dates to make the commands valid - Constraints containing options unsupported by pcs are not exported and a warning is printed instead - Using spaces in dates in location constraint rules is deprecated - Resolves: rhbz#2163953 rhbz#2216434 rhbz#2217850 rhbz#2219407 [0.11.6-1] - Rebased to the latest upstream sources (see CHANGELOG.md) - Updated bundled rubygems: puma, tilt - Resolves: rhbz#1465829 rhbz#2163440 rhbz#2168155 [0.11.5-2] - Fixed a regression causing crash in pcs resource move command (broken since pcs-0.11.5) - Resolves: rhbz#2210855 [0.11.5-1] - Rebased to the latest upstream sources (see CHANGELOG.md) - Updated pcs-web-ui - Updated bundled dependencies: tornado, dacite - Added bundled rubygems: nio4r, puma - Removed bundled rubygems: daemons, eventmachine, thin, webrick - Updated bundled rubygems: backports, rack, rack-protection, rack-test, sinatra, tilt - Added dependency nss-tools - for working with qdevice certificates - Resolves: rhbz#1423473 rhbz#1860626 rhbz#2160664 rhbz#2163440 rhbz#2163914 rhbz#2163953 rhbz#2168155 rhbz#2168617 rhbz#2174735 rhbz#2174829 rhbz#2175881 rhbz#2177996 rhbz#2178701 rhbz#2178714 rhbz#2179902 rhbz#2180379 rhbz#2182810 LOW Copyright 2023 Oracle, Inc. CVE-2022-38900 cpe:/a:oracle:linux:9::addons Oracle Linux 9 [22.3.1-4] - Use tarfile.data_filter for extracting (CVE-2007-4559, PEP-721, PEP-706) Resolves: RHBZ#2218247 [22.3.1-3] - Fix changelog to contain Fedora contributors Resolves: RHEL-232 MODERATE Copyright 2023 Oracle, Inc. CVE-2007-4559 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base Oracle Linux 9 [20230524-3] - edk2-OvmfPkg-AmdSev-fix-BdsPlatform.c-assertion-failure-d.patch [bz#2190244] - edk2-OvmfPkg-IoMmuDxe-add-locking-to-IoMmuAllocateBounceB.patch [bz#2211060] - edk2-OvmfPkg-AmdSevDxe-Shim-Reboot-workaround-RHEL-only.patch [bz#2218196] - Resolves: bz#2190244 ([EDK2] [AMDSERVER 9.3 Bug] OVMF AP Creation Fixes) - Resolves: bz#2211060 (SEV-es guest randomly stuck at boot to hard drive screen from powerdown and boot again) - Resolves: bz#2218196 (Add vtpm devices with OVMF.amdsev.fd causes VM reset) [20230524-2] - edk2-ArmVirt-add-VirtioSerialDxe-to-ArmVirtQemu-builds.patch [RHEL-643] - edk2-ArmVirt-PlatformBootManagerLib-factor-out-IsVirtio.patch [RHEL-643] - edk2-ArmVirt-PlatformBootManagerLib-factor-out-IsVirtioPc.patch [RHEL-643] - edk2-ArmVirt-PlatformBootManagerLib-set-up-virtio-serial-.patch [RHEL-643] - edk2-OvmfPkg-VirtioSerialDxe-use-TPL_NOTIFY.patch [RHEL-643] - edk2-OvmfPkg-VirtioSerialDxe-Remove-noisy-debug-print-on-.patch [RHEL-643] - edk2-OvmfPkg-PlatformInitLib-limit-phys-bits-to-46.patch [bz#2174749] - edk2-Revert-OvmfPkg-disable-dynamic-mmio-window-rhel-only.patch [bz#2174749] - edk2-UefiCpuPkg-MpInitLib-fix-apic-mode-for-cpu-hotplug.patch [bz#2124143] - edk2-OvmfPkg-PlatformInitLib-check-PcdUse1GPageTable.patch [RHEL-644] - edk2-OvmfPkg-OvmfPkgIa32X64-enable-1G-pages.patch [RHEL-644] - edk2-OvmfPkg-MicrovmX64-enable-1G-pages.patch [RHEL-644] - Resolves: RHEL-643 (add virtio serial support to armvirt) - Resolves: bz#2174749 ([edk2] re-enable dynamic mmio window) - Resolves: bz#2124143 (ovmf must consider max cpu count not boot cpu count for apic mode [rhel-9]) - Resolves: RHEL-644 (enable gigabyte pages) [20230524-1] - Rebase to edk2-stable202305 tag [RHEL-585] Resolves: RHEL-585 ([rhel-9.3] rebase EDK2 to edk2-stable202305) [20230301gitf80f052277c8-5] - edk2-dbx-update-2023-05-09-black-lotus-edition.patch [RHEL-470] - edk2-json-descriptors-explicitly-set-mode-split.patch [RHEL-469] - Resolves: RHEL-470 (edk2: update variable store with latest dbx updates (may 9, black lotus edition)) - Resolves: RHEL-469 (explicitly set mode = split in firmware json description files) [20230301gitf80f052277c8-4] - edk2-OvmfPkg-Clarify-invariants-for-NestedInterruptTplLib.patch [bz#2189136] - edk2-OvmfPkg-Relax-assertion-that-interrupts-do-not-occur.patch [bz#2189136] - Resolves: bz#2189136 (windows 11 installation broken with edk2-20230301gitf80f052277c8-1.el9) [20230301gitf80f052277c8-3] - edk2-add-aarch64-qcow2-images.patch [bz#2186754] - edk2-update-json-files.patch [bz#2186754] - edk2-add-libvirt-version-conflict.patch [bz#2186754] - edk2-add-dbx-update-blob-rh-only.patch [RHEL-377] - edk2-spec-apply-dbx-update-rh-only.patch [RHEL-377] - Resolves: bz#2186754 (edk2: Add firmware images in qcow2 format) - Resolves: RHEL-377 (edk2: ship secure build variable store with latest dbx updates) [20230301gitf80f052277c8-2] - edk2-build-script-update.patch [bz#2183230] - edk2-PcdDxeNxMemoryProtectionPolicy-update.patch [bz#2183230] - Resolves: bz#2183230 ([edk2] Instruction abort exception when booting a VM) [20230301gitf80f052277c8-1] - Rebase to edk2-stable202302 [RHEL-266] - Resolves: RHEL-266 (rebase edk2 to 2023-02 stable tag) MODERATE Copyright 2023 Oracle, Inc. CVE-2023-2650 CVE-2019-14560 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 9 [1.20.11-19] - Backport fix for a deadlock with DRI3 Resolves: rhbz#2192550 [1.20.11-18] - CVE fix for: CVE-2023-1393 Resolves: rhbz#2180297 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-1393 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 9 [22.1.9-2] - Rebuild (#2158761) [22.1.9-1] - xwayland 22.1.9 (#2158761) [21.1.3-8] - Fix CVE-2023-1393 (#2180299) MODERATE Copyright 2023 Oracle, Inc. CVE-2023-1393 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base cpe:/a:oracle:linux:9::distro_builder Oracle Linux 9 [0.20.2-6] - Fix CVE-2021-32142 Resolves: #2172140 MODERATE Copyright 2023 Oracle, Inc. CVE-2021-32142 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base cpe:/a:oracle:linux:9::distro_builder cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 9 [2:1.13.3-1] - update to https://github.com/containers/skopeo/releases/tag/v1.13.3 - Related: #2176063 [2:1.13.2-1] - update to https://github.com/containers/skopeo/releases/tag/v1.13.2 - Related: #2176063 [2:1.13.1-1] - update to https://github.com/containers/skopeo/releases/tag/v1.13.1 - Related: #2176063 [2:1.13.0-1] - update to https://github.com/containers/skopeo/releases/tag/v1.13.0 - Related: #2176063 [2:1.12.0-3] - rebuild for following CVEs: CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400 - Resolves: #2179967 - Resolves: #2187323 - Resolves: #2187384 - Resolves: #2203703 - Resolves: #2207523 [2:1.12.0-2] - remove fakeroot from skopeo-tests - Related: #2176063 [2:1.12.0-1] - update to 1.12.0 - Related: #2176063 [2:1.11.3-0.1] - update to the latest content of https://github.com/containers/skopeo/tree/release-1.11 (https://github.com/containers/skopeo/commit/d79588e) - Related: #2176063 [2:1.11.2-0.2] - update to the latest content of https://github.com/containers/skopeo/tree/release-1.11 (https://github.com/containers/skopeo/commit/8191ef3) - Related: #2176063 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-24536 CVE-2023-24538 CVE-2022-41723 CVE-2023-24540 CVE-2022-41724 CVE-2023-29406 CVE-2023-24534 CVE-2023-29400 CVE-2023-24537 CVE-2022-41725 CVE-2023-24539 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base Oracle Linux 9 [2.4.9.4-4] Resolves: rhbz#2189268 - auth_openidc.conf mode 0640 by default [2.4.9.4-3] - Resolves: rhbz#2184145 - CVE-2023-28625 NULL pointer dereference when OIDCStripCookies is set and a crafted Cookie header is supplied [2.4.9.4-2] - Resolves: rhbz#2153656 - CVE-2022-23527 - Open Redirect in oidc_validate_redirect_url() using tab character MODERATE Copyright 2023 Oracle, Inc. CVE-2023-28625 CVE-2022-23527 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base Oracle Linux 9 [8.0.0-16.el9_3] - kvm-migration-Add-migration-prefix-to-functions-in-targe.patch [bz#2229868] - kvm-migration-Move-more-initializations-to-migrate_init.patch [bz#2229868] - kvm-migration-Add-.save_prepare-handler-to-struct-SaveVM.patch [bz#2229868] - kvm-vfio-migration-Block-VFIO-migration-with-postcopy-mi.patch [bz#2229868] - Resolves: bz#2229868 ([vfio migration]Disable postcopy for VM with migratable vfio device) [8.0.0-15.el9_3] - kvm-io-remove-io-watch-if-TLS-channel-is-closed-during-h.patch [bz#2216504] - Resolves: bz#2216504 (CVE-2023-3354 qemu-kvm: QEMU: VNC: improper I/O watch removal in TLS handshake can lead to remote unauthenticated denial of service [rhel-9.3.0]) [8.0.0-13] - kvm-vdpa-return-errno-in-vhost_vdpa_get_vring_group-erro.patch [RHEL-923] - kvm-vdpa-move-CVQ-isolation-check-to-net_init_vhost_vdpa.patch [RHEL-923] - kvm-vdpa-use-first-queue-SVQ-state-for-CVQ-default.patch [RHEL-923] - kvm-vdpa-export-vhost_vdpa_set_vring_ready.patch [RHEL-923] - kvm-vdpa-rename-vhost_vdpa_net_load-to-vhost_vdpa_net_cv.patch [RHEL-923] - kvm-vdpa-move-vhost_vdpa_set_vring_ready-to-the-caller.patch [RHEL-923] - kvm-vdpa-remove-net-cvq-migration-blocker.patch [RHEL-923] - Resolves: RHEL-923 (vhost shadow virtqueue: state restore through CVQ) [8.0.0-12] - kvm-target-i386-allow-versioned-CPUs-to-specify-new-cach.patch [bz#2094913] - kvm-target-i386-Add-new-EPYC-CPU-versions-with-updated-c.patch [bz#2094913] - kvm-target-i386-Add-a-couple-of-feature-bits-in-8000_000.patch [bz#2094913] - kvm-target-i386-Add-feature-bits-for-CPUID_Fn80000021_EA.patch [bz#2094913] - kvm-target-i386-Add-missing-feature-bits-in-EPYC-Milan-m.patch [bz#2094913] - kvm-target-i386-Add-VNMI-and-automatic-IBRS-feature-bits.patch [bz#2094913] - kvm-target-i386-Add-EPYC-Genoa-model-to-support-Zen-4-pr.patch [bz#2094913] - Resolves: bz#2094913 (Add EPYC-Genoa CPU model in qemu) [8.0.0-11] - kvm-block-blkio-enable-the-completion-eventfd.patch [bz#2225354 bz#2225439] - kvm-block-blkio-do-not-use-open-flags-in-qemu_open.patch [bz#2225354 bz#2225439] - kvm-block-blkio-move-blkio_connect-in-the-drivers-functi.patch [bz#2225354 bz#2225439] - kvm-block-blkio-retry-blkio_connect-if-it-fails-using-fd.patch [bz#2225354 bz#2225439] - kvm-block-blkio-fall-back-on-using-path-when-fd-setting-.patch [bz#2225354 bz#2225439] - kvm-block-blkio-use-blkio_set_int-fd-to-check-fd-support.patch [bz#2225354 bz#2225439] - kvm-hw-virtio-iommu-Fix-potential-OOB-access-in-virtio_i.patch [bz#2229133] - kvm-virtio-iommu-Standardize-granule-extraction-and-form.patch [bz#2229133] - kvm-hw-arm-smmu-Handle-big-endian-hosts-correctly.patch [bz#2229133] - kvm-qapi-i386-sev-Change-the-reduced-phys-bits-value-fro.patch [bz#2214839] - kvm-qemu-options.hx-Update-the-reduced-phys-bits-documen.patch [bz#2214839] - kvm-i386-sev-Update-checks-and-information-related-to-re.patch [bz#2214839] - kvm-i386-cpu-Update-how-the-EBX-register-of-CPUID-0x8000.patch [bz#2214839] - kvm-Provide-elf2dmp-binary-in-qemu-tools.patch [bz#2165917] - Resolves: bz#2225354 ([vdpa-blk] The new driver virtio-blk-vhost-user not work in VM booting) - Resolves: bz#2225439 ([vdpa-blk] read-only=on option not work on driver virtio-blk-vhost-vdpa) - Resolves: bz#2229133 (Backport some virtio-iommu and smmu fixes) - Resolves: bz#2214839 ([AMDSERVER 9.3 Bug] Qemu SEV reduced-phys-bits fixes) - Resolves: bz#2165917 (qemu-kvm: contrib/elf2dmp: Windows Server 2022 support) [8.0.0-10] - kvm-util-iov-Make-qiov_slice-public.patch [bz#2174676] - kvm-block-Collapse-padded-I-O-vecs-exceeding-IOV_MAX.patch [bz#2174676] - kvm-util-iov-Remove-qemu_iovec_init_extended.patch [bz#2174676] - kvm-iotests-iov-padding-New-test.patch [bz#2174676] - kvm-block-Fix-pad_request-s-request-restriction.patch [bz#2174676] - kvm-vdpa-do-not-block-migration-if-device-has-cvq-and-x-.patch [RHEL-573] - kvm-virtio-net-correctly-report-maximum-tx_queue_size-va.patch [bz#2040509] - kvm-hw-pci-Disable-PCI_ERR_UNCOR_MASK-reg-for-machine-ty.patch [bz#2223691] - kvm-vhost-vdpa-mute-unaligned-memory-error-report.patch [bz#2141965] - Resolves: bz#2174676 (Guest hit EXT4-fs error on host 4K disk when repeatedly hot-plug/unplug running IO disk [RHEL9]) - Resolves: RHEL-573 ([mlx vhost_vdpa][rhel 9.3]live migration fail with 'net vdpa cannot migrate with CVQ feature') - Resolves: bz#2040509 ([RFE]:Add support for changing 'tx_queue_size' to a setable value) - Resolves: bz#2223691 ([machine type 9.2]Failed to migrate VM from RHEL 9.3 to RHEL 9.2) - Resolves: bz#2141965 ([TPM][vhost-vdpa][rhel9.2]Boot a guest with 'vhost-vdpa + TPM emulator', qemu output: qemu-kvm: vhost_vdpa_listener_region_add received unaligned region) [8.0.0-9] - kvm-scsi-fetch-unit-attention-when-creating-the-request.patch [bz#2176702] - kvm-scsi-cleanup-scsi_clear_unit_attention.patch [bz#2176702] - kvm-scsi-clear-unit-attention-only-for-REPORT-LUNS-comma.patch [bz#2176702] - kvm-s390x-ap-Wire-up-the-device-request-notifier-interfa.patch [RHEL-794] - kvm-multifd-Create-property-multifd-flush-after-each-sec.patch [bz#2196295] - kvm-multifd-Protect-multifd_send_sync_main-calls.patch [bz#2196295] - kvm-multifd-Only-flush-once-each-full-round-of-memory.patch [bz#2196295] - kvm-net-socket-prepare-to-cleanup-net_init_socket.patch [RHEL-582] - kvm-net-socket-move-fd-type-checking-to-its-own-function.patch [RHEL-582] - kvm-net-socket-remove-net_init_socket.patch [RHEL-582] - kvm-pcie-Add-hotplug-detect-state-register-to-cmask.patch [bz#2215819] - kvm-spec-Build-DBUS-display.patch [bz#2207940] - Resolves: bz#2176702 ([RHEL9][virtio-scsi] scsi-hd cannot hot-plug successfully after hot-plug it repeatly) - Resolves: RHEL-794 (Backport s390x fixes from QEMU 8.1) - Resolves: bz#2196295 (Multifd flushes its channels 10 times per second) - Resolves: RHEL-582 ([passt][rhel 9.3] qemu core dump occurs when guest is shutdown after hotunplug/hotplug a passt interface) - Resolves: bz#2215819 (Migration test failed while guest with PCIe devices) - Resolves: bz#2207940 ([RFE] Enable qemu-ui-dbus subpackage) [8.0.0-8] - kvm-virtio-iommu-Fix-64kB-host-page-size-VFIO-device-ass.patch [bz#2211609 bz#2211634] - kvm-virtio-iommu-Rework-the-traces-in-virtio_iommu_set_p.patch [bz#2211609 bz#2211634] - kvm-vfio-pci-add-support-for-VF-token.patch [bz#2192818] - kvm-vfio-migration-Skip-log_sync-during-migration-SETUP-.patch [bz#2192818] - kvm-vfio-pci-Static-Resizable-BAR-capability.patch [bz#2192818] - kvm-vfio-pci-Fix-a-use-after-free-issue.patch [bz#2192818] - kvm-util-vfio-helpers-Use-g_file_read_link.patch [bz#2192818] - kvm-migration-Make-all-functions-check-have-the-same-for.patch [bz#2192818] - kvm-migration-Move-migration_properties-to-options.c.patch [bz#2192818] - kvm-migration-Add-switchover-ack-capability.patch [bz#2192818] - kvm-migration-Implement-switchover-ack-logic.patch [bz#2192818] - kvm-migration-Enable-switchover-ack-capability.patch [bz#2192818] - kvm-vfio-migration-Refactor-vfio_save_block-to-return-sa.patch [bz#2192818] - kvm-vfio-migration-Store-VFIO-migration-flags-in-VFIOMig.patch [bz#2192818] - kvm-vfio-migration-Add-VFIO-migration-pre-copy-support.patch [bz#2192818] - kvm-vfio-migration-Add-support-for-switchover-ack-capabi.patch [bz#2192818] - kvm-vfio-Implement-a-common-device-info-helper.patch [bz#2192818] - kvm-hw-vfio-pci-quirks-Support-alternate-offset-for-GPUD.patch [bz#2192818] - kvm-vfio-pci-Call-vfio_prepare_kvm_msi_virq_batch-in-MSI.patch [bz#2192818] - kvm-vfio-migration-Reset-bytes_transferred-properly.patch [bz#2192818] - kvm-vfio-migration-Make-VFIO-migration-non-experimental.patch [bz#2192818] - kvm-vfio-pci-Fix-a-segfault-in-vfio_realize.patch [bz#2192818] - kvm-vfio-pci-Free-leaked-timer-in-vfio_realize-error-pat.patch [bz#2192818] - kvm-hw-vfio-pci-quirks-Sanitize-capability-pointer.patch [bz#2192818] - kvm-vfio-pci-Disable-INTx-in-vfio_realize-error-path.patch [bz#2192818] - kvm-vfio-migration-Change-vIOMMU-blocker-from-global-to-.patch [bz#2192818] - kvm-vfio-migration-Free-resources-when-vfio_migration_re.patch [bz#2192818] - kvm-vfio-migration-Remove-print-of-Migration-disabled.patch [bz#2192818] - kvm-vfio-migration-Return-bool-type-for-vfio_migration_r.patch [bz#2192818] - kvm-vfio-Fix-null-pointer-dereference-bug-in-vfio_bars_f.patch [bz#2192818] - kvm-pc-bios-s390-ccw-Makefile-Use-z-noexecstack-to-silen.patch [bz#2220866] - kvm-pc-bios-s390-ccw-Fix-indentation-in-start.S.patch [bz#2220866] - kvm-pc-bios-s390-ccw-Provide-space-for-initial-stack-fra.patch [bz#2220866] - kvm-pc-bios-s390-ccw-Don-t-use-__bss_start-with-the-larl.patch [bz#2220866] - kvm-ui-Fix-pixel-colour-channel-order-for-PNG-screenshot.patch [bz#2222579] - kvm-block-blkio-fix-module_block.py-parsing.patch [bz#2213317] - kvm-Fix-virtio-blk-vhost-vdpa-typo-in-spec-file.patch [bz#2213317] - Resolves: bz#2211609 (With virtio-iommu and vfio-pci, qemu reports 'warning: virtio-iommu page mask 0xfffffffffffff000 does not match 0x40201000') - Resolves: bz#2211634 ([aarch64] With virtio-iommu and vfio-pci, qemu coredump when host using kernel-64k package) - Resolves: bz#2192818 ([VFIO LM] Live migration) - Resolves: bz#2220866 (Misaligned symbol for s390-ccw image during qemu-kvm build) - Resolves: bz#2222579 (PNG screendump doesn't save screen correctly) - Resolves: bz#2213317 (Enable libblkio-based block drivers in QEMU) [8.0.0-7] - kvm-numa-Validate-cluster-and-NUMA-node-boundary-if-requ.patch [bz#2171363] - kvm-hw-arm-Validate-cluster-and-NUMA-node-boundary.patch [bz#2171363] - kvm-hw-arm-virt-Validate-cluster-and-NUMA-node-boundary-.patch [bz#2171363] - kvm-vhost-fix-vhost_dev_enable_notifiers-error-case.patch [RHEL-330] - kvm-kvm-reuse-per-vcpu-stats-fd-to-avoid-vcpu-interrupti.patch [bz#2218644] - kvm-vhost-vdpa-do-not-cleanup-the-vdpa-vhost-net-structu.patch [bz#2128929] - Resolves: bz#2171363 ([aarch64] Kernel hits Call trace with irregular CPU-to-NUMA association) - Resolves: RHEL-330 ([virtual network][qemu-kvm-8.0.0-rc1]qemu core dump: qemu-kvm: ../softmmu/memory.c:2592: void memory_region_del_eventfd(MemoryRegion *, hwaddr, unsigned int, _Bool, uint64_t, EventNotifier *): Assertion i != mr->ioeventfd_nb' failed) - Resolves: bz#2218644 (query-stats QMP command interrupts vcpus, the Max Latencies could be more than 100us (rhel 9.3.0 clone)) - Resolves: bz#2128929 ([rhel9.2] hotplug/hotunplug mlx vdpa device to the occupied addr port, then qemu core dump occurs after shutdown guest) [8.0.0-6] - kvm-target-i386-add-support-for-FLUSH_L1D-feature.patch [bz#2216201] - kvm-target-i386-add-support-for-FB_CLEAR-feature.patch [bz#2216201] - kvm-block-blkio-use-qemu_open-to-support-fd-passing-for-.patch [bz#2180076] - kvm-qapi-add-fdset-feature-for-BlockdevOptionsVirtioBlkV.patch [bz#2180076] - kvm-Enable-libblkio-block-drivers.patch [bz#2213317] - Resolves: bz#2216201 ([qemu-kvm]VM reports vulnerabilty to mmio_stale_data on patched host with microcode) - Resolves: bz#2180076 ([qemu-kvm] support fd passing for libblkio QEMU BlockDrivers) - Resolves: bz#2213317 (Enable libblkio-based block drivers in QEMU) [8.0.0-5] - kvm-block-compile-out-assert_bdrv_graph_readable-by-defa.patch [bz#2186725] - kvm-graph-lock-Disable-locking-for-now.patch [bz#2186725] - kvm-nbd-server-Fix-drained_poll-to-wake-coroutine-in-rig.patch [bz#2186725] - kvm-iotests-Test-commit-with-iothreads-and-ongoing-I-O.patch [bz#2186725] - kvm-memory-prevent-dma-reentracy-issues.patch [RHEL-516] - kvm-async-Add-an-optional-reentrancy-guard-to-the-BH-API.patch [RHEL-516] - kvm-checkpatch-add-qemu_bh_new-aio_bh_new-checks.patch [RHEL-516] - kvm-hw-replace-most-qemu_bh_new-calls-with-qemu_bh_new_g.patch [RHEL-516] - kvm-lsi53c895a-disable-reentrancy-detection-for-script-R.patch [RHEL-516] - kvm-bcm2835_property-disable-reentrancy-detection-for-io.patch [RHEL-516] - kvm-raven-disable-reentrancy-detection-for-iomem.patch [RHEL-516] - kvm-apic-disable-reentrancy-detection-for-apic-msi.patch [RHEL-516] - kvm-async-avoid-use-after-free-on-re-entrancy-guard.patch [RHEL-516] - kvm-loongarch-mark-loongarch_ipi_iocsr-re-entrnacy-safe.patch [RHEL-516] - kvm-memory-stricter-checks-prior-to-unsetting-engaged_in.patch [RHEL-516] - kvm-lsi53c895a-disable-reentrancy-detection-for-MMIO-reg.patch [RHEL-516] - kvm-hw-scsi-lsi53c895a-Fix-reentrancy-issues-in-the-LSI-.patch [RHEL-516] - kvm-hw-pci-Disable-PCI_ERR_UNCOR_MASK-register-for-machi.patch [bz#2189423] - kvm-multifd-Fix-the-number-of-channels-ready.patch [bz#2196289] - kvm-util-async-teardown-wire-up-query-command-line-optio.patch [bz#2168500] - kvm-s390x-pv-Fix-spurious-warning-with-asynchronous-tear.patch [bz#2168500] - Resolves: bz#2186725 (Qemu hang when commit during fio running(iothread enable)) - Resolves: RHEL-516 (CVE-2023-2680 qemu-kvm: QEMU: hcd-ehci: DMA reentrancy issue (incomplete fix for CVE-2021-3750) [rhel-9]) - Resolves: bz#2189423 (Failed to migrate VM from rhel 9.3 to rhel 9.2) - Resolves: bz#2196289 (Fix number of ready channels on multifd) - Resolves: bz#2168500 ([IBM 9.3 FEAT] KVM: Improve memory reclaiming for z15 Secure Execution guests - qemu part) [8.0.0-4] - kvm-migration-Attempt-disk-reactivation-in-more-failure-.patch [bz#2058982] - kvm-util-mmap-alloc-qemu_fd_getfs.patch [bz#2057267] - kvm-vl.c-Create-late-backends-before-migration-object.patch [bz#2057267] - kvm-migration-postcopy-Detect-file-system-on-dest-host.patch [bz#2057267] - kvm-migration-mark-mixed-functions-that-can-suspend.patch [bz#2057267] - kvm-postcopy-ram-do-not-use-qatomic_mb_read.patch [bz#2057267] - kvm-migration-remove-extra-whitespace-character-for-code.patch [bz#2057267] - kvm-migration-Merge-ram_counters-and-ram_atomic_counters.patch [bz#2057267] - kvm-migration-Update-atomic-stats-out-of-the-mutex.patch [bz#2057267] - kvm-migration-Make-multifd_bytes-atomic.patch [bz#2057267] - kvm-migration-Make-dirty_sync_missed_zero_copy-atomic.patch [bz#2057267] - kvm-migration-Make-precopy_bytes-atomic.patch [bz#2057267] - kvm-migration-Make-downtime_bytes-atomic.patch [bz#2057267] - kvm-migration-Make-dirty_sync_count-atomic.patch [bz#2057267] - kvm-migration-Make-postcopy_requests-atomic.patch [bz#2057267] - kvm-migration-Rename-duplicate-to-zero_pages.patch [bz#2057267] - kvm-migration-Rename-normal-to-normal_pages.patch [bz#2057267] - kvm-migration-rename-enabled_capabilities-to-capabilitie.patch [bz#2057267] - kvm-migration-Pass-migrate_caps_check-the-old-and-new-ca.patch [bz#2057267] - kvm-migration-move-migration_global_dump-to-migration-hm.patch [bz#2057267] - kvm-spice-move-client_migrate_info-command-to-ui.patch [bz#2057267] - kvm-migration-Create-migrate_cap_set.patch [bz#2057267] - kvm-migration-Create-options.c.patch [bz#2057267] - kvm-migration-Move-migrate_colo_enabled-to-options.c.patch [bz#2057267] - kvm-migration-Move-migrate_use_compression-to-options.c.patch [bz#2057267] - kvm-migration-Move-migrate_use_events-to-options.c.patch [bz#2057267] - kvm-migration-Move-migrate_use_multifd-to-options.c.patch [bz#2057267] - kvm-migration-Move-migrate_use_zero_copy_send-to-options.patch [bz#2057267] - kvm-migration-Move-migrate_use_xbzrle-to-options.c.patch [bz#2057267] - kvm-migration-Move-migrate_use_block-to-options.c.patch [bz#2057267] - kvm-migration-Move-migrate_use_return-to-options.c.patch [bz#2057267] - kvm-migration-Create-migrate_rdma_pin_all-function.patch [bz#2057267] - kvm-migration-Move-migrate_caps_check-to-options.c.patch [bz#2057267] - kvm-migration-Move-qmp_query_migrate_capabilities-to-opt.patch [bz#2057267] - kvm-migration-Move-qmp_migrate_set_capabilities-to-optio.patch [bz#2057267] - kvm-migration-Move-migrate_cap_set-to-options.c.patch [bz#2057267] - kvm-migration-Move-parameters-functions-to-option.c.patch [bz#2057267] - kvm-migration-Use-migrate_max_postcopy_bandwidth.patch [bz#2057267] - kvm-migration-Move-migrate_use_block_incremental-to-opti.patch [bz#2057267] - kvm-migration-Create-migrate_throttle_trigger_threshold.patch [bz#2057267] - kvm-migration-Create-migrate_checkpoint_delay.patch [bz#2057267] - kvm-migration-Create-migrate_max_cpu_throttle.patch [bz#2057267] - kvm-migration-Move-migrate_announce_params-to-option.c.patch [bz#2057267] - kvm-migration-Create-migrate_cpu_throttle_initial-to-opt.patch [bz#2057267] - kvm-migration-Create-migrate_cpu_throttle_increment-func.patch [bz#2057267] - kvm-migration-Create-migrate_cpu_throttle_tailslow-funct.patch [bz#2057267] - kvm-migration-Move-migrate_postcopy-to-options.c.patch [bz#2057267] - kvm-migration-Create-migrate_max_bandwidth-function.patch [bz#2057267] - kvm-migration-Move-migrate_use_tls-to-options.c.patch [bz#2057267] - kvm-migration-Move-qmp_migrate_set_parameters-to-options.patch [bz#2057267] - kvm-migration-Allow-postcopy_ram_supported_by_host-to-re.patch [bz#2057267] - kvm-block-bdrv-blk_co_unref-for-calls-in-coroutine-conte.patch [bz#2185688] - kvm-block-Don-t-call-no_coroutine_fns-in-qmp_block_resiz.patch [bz#2185688] - kvm-iotests-Use-alternative-CPU-type-that-is-not-depreca.patch [bz#2185688] - kvm-iotests-Test-resizing-image-attached-to-an-iothread.patch [bz#2185688] - kvm-Enable-Linux-io_uring.patch [bz#1947230] - Resolves: bz#2058982 (Qemu core dump if cut off nfs storage during migration) - Resolves: bz#2057267 (Migration with postcopy fail when vm set with shared memory) - Resolves: bz#2185688 ([qemu-kvm] no response with QMP command block_resize) - Resolves: bz#1947230 (Enable QEMU support for io_uring in RHEL9) [8.0.0-3] - kvm-migration-Handle-block-device-inactivation-failures-.patch [bz#2058982] - kvm-migration-Minor-control-flow-simplification.patch [bz#2058982] - Resolves: bz#2058982 (Qemu core dump if cut off nfs storage during migration) [8.0.0-2] - kvm-acpi-pcihp-allow-repeating-hot-unplug-requests.patch [bz#2087047] - kvm-hw-acpi-limit-warning-on-acpi-table-size-to-pc-machi.patch [bz#1934134] - kvm-hw-acpi-Mark-acpi-blobs-as-resizable-on-RHEL-pc-mach.patch [bz#1934134] - Resolves: bz#2087047 (Disk detach is unsuccessful while the guest is still booting) - Resolves: bz#1934134 (ACPI table limits warning when booting guest with 512 VCPUs) [8.0.0-1] - Rebase to QEMU 8.0.0 - Resolves: bz#2180898 (Rebase to QEMU 8.0.0 for RHEL 9.3.0) MODERATE Copyright 2023 Oracle, Inc. CVE-2023-2680 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base Oracle Linux 9 adwaita-qt [1.4.2-1] - 1.4.2 Resolves: bz#2175754 python-pyqt5-sip [12.11.1-1] - 12.11.1 Resolves: bz#2188589 python-qt5 [5.15.9-1] - 5.15.9 Resolves: bz#2175758 qgnomeplatform [0.9.0-1] - 0.9.0 Resolves: bz#2175753 qt5 [5.15.9-1] - 5.15.9 Resolves: bz#2175724 qt5-doc [5.15.9-1] - 5.15.9 Resolves: bz#2175726 qt5-qt3d [5.15.9-1] - 5.15.9 Resolves: bz#2175729 qt5-qtbase [5.15.9-7] - Fix infinite loops in QXmlStreamReader (CVE-2023-38197) Resolves: bz#2222771 [5.15.9-6] - Don't allow remote attacker to bypass security restrictions caused by flaw in certificate validation (CVE-2023-34410) (version #2) Resolves: bz#2212754 [5.15.9-5] - Don't allow remote attacker to bypass security restrictions caused by flaw in certificate validation (CVE-2023-34410) Resolves: bz#2212754 [5.15.9-4] - Fix specific overflow in qtextlayout - Fix incorrect parsing of the strict-transport-security (HSTS) header - Fix buffer over-read via a crafted reply from a DNS server Resolves: bz#2209492 [5.15.9-3] - Rebuild (elfutils#2188064) Resolves: bz#2175727 [5.15.9-2] - Disable tests failing in gating Resolves: bz#2175727 [5.15.9-1] - 5.15.9 + sync with Fedora Resolves: bz#2175727 qt5-qtconnectivity [5.15.9-2] - Rebuild (elfutils#2188064) Resolves: bz#2175730 [5.15.9-1] - 5.15.9 Resolves: bz#2175730 qt5-qtdeclarative [5.15.9-3] - Rebuild (elfutils#2188064) Resolves: bz#2175728 [5.15.9-2] - Disable tests failing in gating Resolves: bz#2175728 [5.15.9-1] - 5.15.9 + sync with Fedora Resolves: bz#2178624 Resolves: bz#2175728 qt5-qtdoc [5.15.9-1] - 5.15.9 Resolves: bz#2175731 qt5-qtgraphicaleffects [5.15.9-1] - 5.15.9 Resolves: bz#2175733 qt5-qtimageformats [5.15.9-1] - 5.15.9 Resolves: bz#2175734 qt5-qtlocation [5.15.9-1] - 5.15.9 Resolves: bz#2175735 qt5-qtmultimedia [5.15.9-1] - 5.15.9 Resolves: bz#2175736 qt5-qtquickcontrols2 [5.15.9-1] - 5.15.9 Resolves: bz#2175738 qt5-qtquickcontrols [5.15.9-1] - 5.15.9 Resolves: bz#2175737 qt5-qtscript [5.15.9-1] - 5.15.9 Resolves: bz#2175745 qt5-qtsensors [5.15.9-1] - 5.15.9 Resolves: bz#2175739 qt5-qtserialbus [5.15.9-1] - 5.15.9 Resolves: bz#2175740 qt5-qtserialport [5.15.9-1] - 5.15.9 Resolves: bz#2175741 qt5-qtsvg [5.15.9-2] - Fix uninitialized variable usage in m_unitsPerEm (CVE-2023-32573) Resolves: bz#2208140 [5.15.9-1] - 5.15.9 Resolves: bz#2175742 qt5-qttools [5.15.9-3] - Rebuild (LLVM-16) Resolves: bz#2192954 [5.15.9-2] - Rebuild (elfutils#2188064) Resolves: bz#2175743 [5.15.9-1] - 5.15.9 Resolves: bz#2175743 qt5-qttranslations [5.15.9-1] - 5.15.9 Resolves: bz#2175744 qt5-qtwayland [5.15.9-1] - 5.15.9 Resolves: bz#2175746 qt5-qtwebchannel [5.15.9-1] - 5.15.9 Resolves: bz#2175747 qt5-qtwebsockets [5.15.9-2] - Move QML imports out of -devel subpackage Resolves: bz#2175749 [5.15.9-1] - 5.15.9 Resolves: bz#2175749 qt5-qtx11extras [5.15.9-1] - 5.15.9 Resolves: bz#2175750 qt5-qtxmlpatterns [5.15.9-2] - Rebuild (elfutils#2188064) Resolves: bz#2175751 [5.15.9-1] - 5.15.9 Resolves: bz#2175751 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-38197 CVE-2023-33285 CVE-2023-32573 CVE-2023-37369 CVE-2023-34410 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base cpe:/a:oracle:linux:9::distro_builder cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 9 [23.1.1-11.0.2] - Fix Oracle Datasource network and getdata methods for OCI OL [Orabug: 35950168] [23.1.1-11.0.1] - Increase retry value and add timeout for OCI [Orabug: 35329883] - Fix log file permission [Orabug: 35302969] - Update detection logic for OL distros in config template [Orabug: 34845400] - Added missing services in rhel/systemd/cloud-init.service [Orabug: 32183938] - Added missing services in cloud-init.service.tmpl for sshd [Orabug: 32183938] - Forward port applicable cloud-init 18.4-2.0.3 changes to cloud-init-18-5 [Orabug: 30435672] - limit permissions [Orabug: 31352433] - Changes to ignore all enslaved interfaces [Orabug: 30092148] - Make Oracle datasource detect dracut based config files [Orabug: 29956753] - add modified version of enable-ec2_utils-to-stop-retrying-to-get-ec2-metadata.patch: 1. Enable ec2_utils.py having a way to stop retrying to get ec2 metadata 2. Apply stop retrying to get ec2 metadata to helper/openstack.py MetadataReader Resolves: Oracle-Bug:41660 (Bugzilla) - added OL to list of known distros [23.1.1-11] - Resolves: bz#2232296 [23.1.1-10] - Resolves: bz#2229660 bz#2229952 [23.1.1-9] - 0030-NM-renderer-set-default-IPv6-addr-gen-mode-for-all-i.patch [bz#2188388] - Resolves: bz#2188388 [23.1.1-8] - 0022-test-fixes-update-tests-to-reflect-AUTOCONNECT_PRIOR.patch [bz#2217865] - 0023-test-fixes-remove-NM_CONTROLLED-no-from-tests.patch [bz#2217865] - 0024-Revert-limit-permissions-on-def_log_file.patch [bz#2217865] - 0025-test-fixes-changes-to-apply-RHEL-specific-config-set.patch [bz#2217865] - 0026-Enable-SUSE-based-distros-for-ca-handling-2036.patch [bz#2217865] - 0027-Handle-non-existent-ca-cert-config-situation-2073.patch [bz#2217865] - 0028-logging-keep-current-file-mode-of-log-file-if-its-st.patch [bz#2222498] - 0029-DS-VMware-modify-a-few-log-level-4284.patch [bz#2225374] - Resolves: bz#2217865 bz#2222498 bz#2225374 [23.1.1-7] - 0020-Revert-Set-default-renderer-as-sysconfig-for-c9s-RHE.patch - 0021-Set-default-renderer-as-sysconfig-for-centos-rhel-41.patch [bz#2209349] - Resolves: bz#2209349 [23.1.1-6] - 0011-Revert-Manual-revert-Use-Network-Manager-and-Netplan.patch - 0012-Revert-Revert-Add-native-NetworkManager-support-1224.patch - 0013-net-sysconfig-do-not-use-the-highest-autoconnect-pri.patch - 0014-net-sysconfig-cosmetic-fix-tox-formatting.patch - 0015-nm-generate-ipv6-stateful-dhcp-config-at-par-with-sy.patch [bz#2207716] - 0016-network_manager-add-a-method-for-ipv6-static-IP-conf.patch [bz#2196284] - 0017-net-sysconfig-enable-sysconfig-renderer-if-network-m.patch [bz#2194050] - 0018-network-manager-Set-higher-autoconnect-priority-for-.patch [bz#2196231] - 0019-Set-default-renderer-as-sysconfig-for-c9s-RHEL-9.patch [bz#2209349] - Resolves: bz#2118235 bz#2194050 bz#2196231 bz#2196284 bz#2207716 bz#2209349 [23.1.1-5] - 0010-Do-not-generate-dsa-and-ed25519-key-types-when-crypt.patch [bz#2187164] - Resolves: bz#2187164 [23.1.1-4] - 0009-Make-user-vendor-data-sensitive-and-remove-log-permi.patch [bz#2190083] - Resolves: bz#2190083 [23.1.1-3] - 0008-Don-t-change-permissions-of-netrules-target-2076.patch [bz#2182948] - Resolves: bz#2182948 [23.1.1-2] - 0007-rhel-make-sure-previous-hostname-file-ends-with-a-ne.patch [bz#2184608] - Resolves: bz#2184608 [23.1.1-1] - Rebase to 23.1.1 [bz#2172811] - Resolves: bz#2172811 [22.1-9] - ci-Allow-growpart-to-resize-encrypted-partitions-1316.patch [bz#2166245] - Resolves: bz#2166245 (Add support for resizing encrypted root volume) [22.1-8] - ci-cc_set_hostname-ignore-var-lib-cloud-data-set-hostna.patch [bz#2140893] - Resolves: bz#2140893 (systemd[1]: Failed to start Initial cloud-init job after reboot system via sysrq 'b') [22.1-7] - ci-Ensure-network-ready-before-cloud-init-service-runs-.patch [bz#2152100] - Resolves: bz#2152100 ([RHEL-9] Ensure network ready before cloud-init service runs on RHEL) [22.1-6] - ci-cloud.cfg.tmpl-make-sure-centos-settings-are-identic.patch [bz#2115565] - Resolves: bz#2115565 (cloud-init configures user 'centos' or 'rhel' instead of 'cloud-user' with cloud-init-22.1) [22.1-5] - ci-Revert-Add-native-NetworkManager-support-1224.patch [bz#2107463 bz#2104389 bz#2117532 bz#2098501] - ci-Revert-Use-Network-Manager-and-Netplan-as-default-re.patch [bz#2107463 bz#2104389 bz#2117532 bz#2098501] - ci-Revert-Revert-Setting-highest-autoconnect-priority-f.patch [bz#2107463 bz#2104389 bz#2117532 bz#2098501] - Resolves: bz#2107463 ([RHEL-9.1] Cannot run sysconfig when changing the priority of network renderers) - Resolves: bz#2104389 ([RHEL-9.1]Failed to config static IP and IPv6 according to VMware Customization Config File) - Resolves: bz#2117532 ([RHEL9.1] Revert patch of configuring networking by NM keyfiles) - Resolves: bz#2098501 ([RHEL-9.1] IPv6 not workable when cloud-init configure network using NM keyfiles) [22.1-4] - ci-Honor-system-locale-for-RHEL-1355.patch [bz#2061604] - ci-cloud-init.spec-adjust-path-for-66-azure-ephemeral.r.patch [bz#2096270] - ci-setup.py-adjust-udev-rules-default-path-1513.patch [bz#2096270] - Resolves: bz#2061604 (cloud-config will change /etc/locale.conf back to en_US.UTF-8 on rhel-guest-image-9.0) - Resolves: bz#2096270 (Adjust udev/rules default path[rhel-9]) [22.1-3] - ci-Support-EC2-tags-in-instance-metadata-1309.patch [bz#2091640] - ci-cc_set_hostname-do-not-write-localhost-when-no-hostn.patch [bz#1980403] - Resolves: bz#2091640 ([cloud][init] Add support for reading tags from instance metadata) - Resolves: bz#1980403 ([RHV] RHEL 9 VM with cloud-init without hostname set doesn't result in the FQDN as hostname) [22.1-2] - ci-Add-native-NetworkManager-support-1224.patch [bz#2056964] - ci-Use-Network-Manager-and-Netplan-as-default-renderers.patch [bz#2056964] - ci-Revert-Setting-highest-autoconnect-priority-for-netw.patch [bz#2056964] - ci-Align-rhel-custom-files-with-upstream-1431.patch [bz#2088448] - ci-Remove-rhel-specific-files.patch [bz#2088448] - Resolves: bz#2056964 ([RHEL-9]Rebase cloud-init from Fedora so it can configure networking using NM keyfiles) - Resolves: bz#2088448 (Align cloud.cfg file and systemd with cloud-init upstream .tmpl files) [22.1-1] - Rebase to 22.1 [bz#2065548] - Resolves: bz#2065548 ([RHEL-9.1] cloud-init rebase to 22.1) [21.1-19] - ci-Fix-IPv6-netmask-format-for-sysconfig-1215.patch [bz#2053546] - ci-Adding-_netdev-to-the-default-mount-configuration.patch [bz#1998445] - ci-Setting-highest-autoconnect-priority-for-network-scr.patch [bz#2036060] - Resolves: bz#2053546 (cloud-init writes route6- config with a HEX netmask. ip route does not like : Error: inet6 prefix is expected rather than 'fd00:fd00:fd00::/ffff:ffff:ffff:ffff::'.) - Resolves: bz#1998445 ([Azure][RHEL-9] ordering cycle exists after reboot) - Resolves: bz#2036060 ([cloud-init][ESXi][RHEL-9] Failed to config static IP according to VMware Customization Config File) [21.1-18] - ci-Add-_netdev-option-to-mount-Azure-ephemeral-disk-121.patch [bz#1998445] - Resolves: bz#1998445 ([Azure][RHEL-9] ordering cycle exists after reboot) [21.1-17] - ci-Add-flexibility-to-IMDS-api-version-793.patch [bz#2042351] - ci-Azure-helper-Ensure-Azure-http-handler-sleeps-betwee.patch [bz#2042351] - ci-azure-Removing-ability-to-invoke-walinuxagent-799.patch [bz#2042351] - ci-Azure-eject-the-provisioning-iso-before-reporting-re.patch [bz#2042351] - ci-Azure-Retrieve-username-and-hostname-from-IMDS-865.patch [bz#2042351] - ci-Azure-Retry-net-metadata-during-nic-attach-for-non-t.patch [bz#2042351] - ci-Azure-adding-support-for-consuming-userdata-from-IMD.patch [bz#2042351] - Resolves: bz#2042351 ([RHEL-9] Support for provisioning Azure VM with userdata) [21.1-16] - ci-Datasource-for-VMware-953.patch [bz#2040090] - ci-Change-netifaces-dependency-to-0.10.4-965.patch [bz#2040090] - ci-Update-dscheck_VMware-s-rpctool-check-970.patch [bz#2040090] - ci-Revert-unnecesary-lcase-in-ds-identify-978.patch [bz#2040090] - ci-Add-netifaces-package-as-a-Requires-in-cloud-init.sp.patch [bz#2040090] - Resolves: bz#2040090 ([cloud-init][RHEL9] Support for cloud-init datasource 'cloud-init-vmware-guestinfo') [21.1-15] - ci-Add-gdisk-and-openssl-as-deps-to-fix-UEFI-Azure-init.patch [bz#2032524] - Resolves: bz#2032524 ([RHEL9] [Azure] cloud-init fails to configure the system) [21.1-14] - ci-cloudinit-net-handle-two-different-routes-for-the-sa.patch [bz#2028031] - Resolves: bz#2028031 ([RHEL-9] Above 19.2 of cloud-init fails to configure routes when configuring static and default routes to the same destination IP) [21.1-13] - ci-fix-error-on-upgrade-caused-by-new-vendordata2-attri.patch [bz#2028381] - Resolves: bz#2028381 (cloud-init.service fails to start after package update) [21.1-12] - ci-remove-unnecessary-EOF-string-in-disable-sshd-keygen.patch [bz#2016305] - Resolves: bz#2016305 (disable-sshd-keygen-if-cloud-init-active.conf:8: Missing '=', ignoring line) [21.1-11] - ci-cc_ssh.py-fix-private-key-group-owner-and-permission.patch [bz#2015974] - Resolves: bz#2015974 (cloud-init fails to set host key permissions correctly) MODERATE Copyright 2023 Oracle, Inc. CVE-2023-1786 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base Oracle Linux 9 [10.2.11.0.1] - Merge Oracle patches for ol9 Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com> [10.2-11.el9] - Backport 'libiberty: prevent buffer overflow when decoding user input' (Luis Ferreira, RHBZ2132600) * Mon Mar 27 2023 Bruno Larsen <blarsen@redhat.com> - Backport '[gdb/breakpoint] Fix assert in jit_event_handler' (Tom de Vries, RHBZ 2130624) * Thu Mar 23 2023 Bruno Larsen <blarsen@redhat.com> - Bakport 'Fix assertion failure in copy_type' (Tom Tromey, RHBZ 2155439) - Bakport '[gdb/testsuite] Fix PR20630 regression test in gdb.base/printcmds.exp' (Tom de Vries) LOW Copyright 2023 Oracle, Inc. CVE-2021-3826 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base Oracle Linux 9 [4:1.1.9-1] - update to https://github.com/opencontainers/runc/releases/tag/v1.1.9 - Related: #2176063 [4:1.1.8-1] - update to https://github.com/opencontainers/runc/releases/tag/v1.1.8 - Related: #2176063 [4:1.1.7-2] - rebuild for following CVEs: CVE-2021-43784 CVE-2022-41724 CVE-2023-28642 - Resolves: #2033659 - Resolves: #2179973 - Resolves: #2183103 [4:1.1.7-1] - update to https://github.com/opencontainers/runc/releases/tag/v1.1.7 - Related: #2176063 [4:1.1.6-1] - update to https://github.com/opencontainers/runc/releases/tag/v1.1.6 - Related: #2176063 [4:1.1.5-2] - runc 1.1.5 resolves CVE-2023-25809 and CVE-2023-27561 - Resolves: #2176110 - Resolves: #2183098 [4:1.1.5-1] - update to https://github.com/opencontainers/runc/releases/tag/v1.1.5 - Related: #2176063 [4:1.1.4-2] - rebuild - Resolves: #2102995 MODERATE Copyright 2023 Oracle, Inc. CVE-2021-43784 CVE-2023-27561 CVE-2023-28642 CVE-2023-25809 CVE-2022-41724 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base Oracle Linux 9 [3.16.1-5] - Fix CVE-2023-26767 (#2181147) - Fix CVE-2023-26768 (#2181151) - Fix CVE-2023-26769 (#2181149) MODERATE Copyright 2023 Oracle, Inc. CVE-2023-26769 CVE-2023-26767 CVE-2023-26768 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base cpe:/a:oracle:linux:9::distro_builder Oracle Linux 9 [1:1.3.0-4] - add Epoch in Provides - Related: #2176063 [1:1.3.0-3] - remove no_openssl for FIPS compliance - Related: #2176063 [1:1.3.0-2] - rebuild for following CVEs: CVE-2022-41724 CVE-2022-41725 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400 - Resolves: #2179960 - Resolves: #2187333 - Resolves: #2187376 - Resolves: #2203705 - Resolves: #2207519 [1:1.3.0-1] - update to https://github.com/containernetworking/plugins/releases/tag/v1.3.0 - Related: #2176063 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-24534 CVE-2022-41725 CVE-2023-24540 CVE-2023-24539 CVE-2022-41724 CVE-2023-29400 CVE-2023-24536 CVE-2023-24538 CVE-2023-29406 CVE-2022-41723 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base Oracle Linux 9 httpd [2.4.57-5.0.1] - Replace index.html with Oracle's index page oracle_index.html. [2.4.57-5] - Fix issue found by covscan - Related: #2222001 [2.4.57-4] - Resolves: #2217726 - Make PROPFIND tolerant of deletion race [2.4.57-3] - Resolves: #2222001 - mod_status lists BusyWorkers IdleWorkers keys twice [2.4.57-2] - Resolves: #2186645 - Fix issue found by covscan in httpd package - Resolves: #2173295 - Include Apache httpd module mod_authnz_fcgi [2.4.57-1] - Resolves: #2184403 - rebase httpd to 2.4.57 - Resolves: #2177753 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy mod_http2 [1.15.19-5] - Resolves: #2177753 - CVE-2023-25690 httpd: HTTP request splitting with mod_rewrite and mod_proxy MODERATE Copyright 2023 Oracle, Inc. CVE-2023-27522 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base Oracle Linux 9 [9.5.0-7.0.1] - The path to the guest agent socket file can become too long and cause problems.(rhbz#2233744) - Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554] [9.5.0-7] - util: use 'stubDriverType' instead of just 'stubDriver' (rhbz#2074209) - util: add stub driver name to virPCIDevice object (rhbz#2074209) - util: rename virPCIDeviceGetDriverPathAndName (rhbz#2074209) - util: permit existing binding to VFIO variant driver (rhbz#2074209) - util: probe stub driver from within function that binds to stub driver (rhbz#2074209) - util: honor stubDriverName when probing/binding stub driver for a device (rhbz#2074209) - node_device: support binding other drivers with virNodeDeviceDetachFlags() (rhbz#2074209) - qemu: turn two multiline log messages into single line (rhbz#2074209) - docs: update description of virsh nodedev-detach --driver option (rhbz#2074209) - rpm: Fix typo in daemon name (rhbz#2236057) - rpm: Recommend libvirt-daemon for with_modular_daemons distros (rhbz#2236500) [9.5.0-6] - tests: Use DO_TEST_CAPS_*_ABI_UPDATE() for ppc64 (rhbz#2196178) - tests: Switch to firmware autoselection for hvf (rhbz#2196178) - tests: Use virt-4.0 machine type for aarch64 (rhbz#2196178) - tests: Consistently use /path/to/guest_VARS.fd (rhbz#2196178) - tests: Turn abi-update.xml into a symlink (rhbz#2196178) - tests: Rename firmware-auto-efi-nvram-path (rhbz#2196178) - qemu: Fix return value for qemuFirmwareFillDomainLegacy() (rhbz#2196178) - qemu: Fix lookup against stateless/combined pflash (rhbz#2196178) - tests: Add some more DO_TEST*ABI_UPDATE* macros (rhbz#2196178) - tests: Add more tests for firmware selection (rhbz#2196178) - tests: Update firmware descriptor files (rhbz#2196178) - tests: Drop tags from BIOS firmware descriptor (rhbz#2196178) - tests: Include microvm in firmwaretest (rhbz#2196178) - qemu: Don't overwrite NVRAM template for legacy firmware (rhbz#2196178) - qemu: Generate NVRAM path in more cases (rhbz#2196178) - qemu: Filter firmware based on loader.readonly (rhbz#2196178) - qemu: Match NVRAM template extension for new domains (rhbz#2196178) - conf: Don't default to raw format for loader/NVRAM (rhbz#2196178) - tests: Rename firmware-auto-efi-format-loader-qcow2-nvram-path (rhbz#2196178) - tests: Reintroduce firmware-auto-efi-format-mismatch (rhbz#2196178) - rpm: Reorder scriptlets (rhbz#2210058) - rpm: Reduce use of with_modular_daemons (rhbz#2210058) - rpm: Remove custom libvirtd restart logic (rhbz#2210058) - rpm: Introduce new macros for handling of systemd units (rhbz#2210058) - rpm: Switch to new macros for handling of systemd units (rhbz#2210058) - rpm: Delete unused macros (rhbz#2210058) [9.5.0-5] - Revert 'qemu_passt: Actually use @logfd' (rhbz#2209191) - Revert 'qemu_passt: Precreate passt logfile' (rhbz#2209191) [9.5.0-4] - storage: Fix returning of locked objects from 'virStoragePoolObjListSearch' (CVE-2023-3750, rhbz#2221851) [9.5.0-3] - tests: remove acpi support from s390x ccw hotplug tests (rhbz#2168499) - tests: add capabilities for QEMU 8.1.0 on s390x (rhbz#2168499) - qemu: add run-with async-teardown capability (rhbz#2168499) - qemu: allow use of async teardown in domain (rhbz#2168499) - conf: domcaps: Add 'async-teardown' domain capability (rhbz#2168499) - qemu: S390 does not provide physical address size (rhbz#2224016) - nodedev: report mdev persistence properly (rhbz#2143158) - node_device: Don't leak error message buffer from virMdevctlListDefined|Active (rhbz#2143158) [9.5.0-2] - nodedev: transient mdev update on nodeDeviceCreateXML (rhbz#2143158) - nodedev: refactor mdevctl thread functions (rhbz#2143158) - nodedev: update mdevs from the mdevctl thread (rhbz#2143158) [9.5.0-1] - Rebased to libvirt-9.5.0 (rhbz#2175785) [9.5.0-0rc1.1] - Rebased to libvirt-9.5.0-rc1 (rhbz#2175785) - The rebase also fixes the following bugs: rhbz#2160356, rhbz#2209191, rhbz#2210287, rhbz#2209853, rhbz#2171860 rhbz#2138150, rhbz#2171384 [9.4.0-1] - Rebased to libvirt-9.4.0 (rhbz#2175785) - The rebase also fixes the following bugs: rhbz#2119007, rhbz#2193315, rhbz#2209658, rhbz#2143158, rhbz#2208946 rhbz#2138150, rhbz#2203657, rhbz#2180679, rhbz#2203709 [9.3.0-2] - qemu_domin: Account for NVMe disks when calculating memlock limit on hotplug (rhbz#2014030) [9.3.0-1] - Rebased to libvirt-9.3.0 (rhbz#2175785) - The rebase also fixes the following bugs: rhbz#2181235, rhbz#2176215, rhbz#2187133, rhbz#2178885, rhbz#2174700 rhbz#2160435, rhbz#2184966, rhbz#2187278, rhbz#2014030, rhbz#2185184 rhbz#2156300 [9.2.0-1] - Rebased to libvirt-9.2.0 (rhbz#2175785) - The rebase also fixes the following bugs: rhbz#2178885, rhbz#2000410, rhbz#2175582, rhbz#2154750, rhbz#2175449 rhbz#2181234, rhbz#2078693, rhbz#2176924, rhbz#2156300, rhbz#2173142 rhbz#2171973, rhbz#2178866, rhbz#2182961, rhbz#2174397, rhbz#2179030 rhbz#2161965, rhbz#2035985 [9.1.0-1] - Rebased to libvirt-9.1.0 (rhbz#2175785) - The rebase also fixes the following bugs: rhbz#2004850, rhbz#2137346, rhbz#2166235, rhbz#1961326 [9.0.0-7] - qemu_snapshot: remove memory snapshot when deleting external snapshot (rhbz#2170826) - qemu_snapshot: refactor qemuSnapshotDeleteExternalPrepare (rhbz#2170826) [9.0.0-6] - rpc: client: Don't check return value of virNetMessageNew (rhbz#2145188) - rpc: Don't warn about 'max_client_requests' in single-threaded daemons (rhbz#2145188) [9.0.0-5] - qemu_extdevice: Do cleanup host only for VIR_DOMAIN_TPM_TYPE_EMULATOR (rhbz#2168762) - qemu: blockjob: Handle 'pending' blockjob state only when we need it (rhbz#2168769) [9.0.0-4] - qemuProcessStop: Fix detection of outgoing migration for external devices (rhbz#2161557) - qemuExtTPMStop: Restore TPM state label more often (rhbz#2161557) - qemuProcessLaunch: Tighten rules for external devices wrt incoming migration (rhbz#2161557) - qemu_process: Produce better debug message wrt domain namespaces (rhbz#2167302) - qemu_namespace: Deal with nested mounts when umount()-ing /dev (rhbz#2167302) - qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (rhbz#2166411) [9.0.0-3] - src: Don't use virReportSystemError() on virProcessGetStatInfo() failure (rhbz#2148266) - qemu: Provide virDomainGetCPUStats() implementation for session connection (rhbz#2148266) - virsh: Make domif-setlink work more than once (rhbz#2165466) - qemu_fd: Remove declaration for 'qemuFDPassNewDirect' (rhbz#2040272) - qemuStorageSourcePrivateDataFormat: Rename 'tmp' to 'objectsChildBuf' (rhbz#2040272) - qemu: command: Handle FD passing commandline via qemuBuildBlockStorageSourceAttachDataCommandline (rhbz#2040272) - qemuFDPassTransferCommand: Mark that FD was passed (rhbz#2040272) - qemu: fd: Add helpers allowing storing FD set data in status XML (rhbz#2040272) - qemu: domain: Store fdset ID for disks passed to qemu via FD (rhbz#2040272) - qemu: block: Properly handle FD-passed disk hot-(un-)plug (rhbz#2040272) [9.0.0-2] - vircgroupv2: fix cpu.weight limits check (rhbz#2037998) - domain_validate: drop cpu.shares cgroup check (rhbz#2037998) - docs: document correct cpu shares limits with both cgroups v1 and v2 (rhbz#2037998) - qemu_interface: Fix managed='no' case when creating an ethernet interface (rhbz#2144738) - conf: clarify some external TPM error messages (rhbz#2063723) - qemu: hotplug: Remove legacy quirk for 'dimm' address generation (rhbz#2158701) - qemu: alias: Remove 'oldAlias' argument of qemuAssignDeviceMemoryAlias (rhbz#2158701) - qemu: Remove 'memAliasOrderMismatch' field from VM private data (rhbz#2158701) - rpc: Fix error message in virNetServerSetClientLimits (rhbz#2033879) [9.0.0-1] - Rebased to libvirt-9.0.0 (rhbz#2124466) - The rebase also fixes the following bugs: rhbz#2151064, rhbz#1874163, rhbz#2130192, rhbz#2111948, rhbz#1824722 rhbz#2150455, rhbz#2063723, rhbz#1717611, rhbz#2160448, rhbz#2151869 rhbz#2040272, rhbz#2144738, rhbz#2159851, rhbz#2156289, rhbz#2033879 rhbz#1820437, rhbz#2151202 [8.10.0-2] - qemu_process: Document qemuProcessPrepare{Domain,Host}() order (rhbz#2150760) - qemu_extdevice: Init paths in qemuExtDevicesPrepareDomain() (rhbz#2150760) - qemu_extdevice: Expose qemuExtDevicesInitPaths() (rhbz#2150760) - qemu: Init ext devices paths on reconnect (rhbz#2150760) [8.10.0-1] - Rebased to libvirt-8.10.0 (rhbz#2124466) - The rebase also fixes the following bugs: rhbz#2128993, rhbz#2143235, rhbz#2143840, rhbz#1874163, rhbz#2000075 rhbz#2143838, rhbz#2104919, rhbz#2072204, rhbz#2137298 [8.9.0-2] - RHEL: rpminspect: Disable abidiff inspection (rhbz#2124466) - spec: Fix python3-libvirt requirement in client-qemu package (rhbz#2124466) [8.9.0-1] - Rebased to libvirt-8.9.0 (rhbz#2124466) - The rebase also fixes the following bugs: rhbz#2074559, rhbz#2134009, rhbz#1777212, rhbz#2013523, rhbz#2114866 rhbz#1964855 [8.8.0-1] - Rebased to libvirt-8.8.0 (rhbz#2124466) - The rebase also fixes the following bugs: rhbz#2122534, rhbz#2121262, rhbz#2130089, rhbz#2121276, rhbz#2121627 rhbz#2125111, rhbz#2129239, rhbz#1964855, rhbz#2114866 [8.7.0-1] - Rebased to libvirt-8.7.0 (rhbz#2124466) - The rebase also fixes the following bugs: rhbz#2084046, rhbz#2108483, rhbz#2123371, rhbz#2101633, rhbz#1988211 rhbz#2086677, rhbz#2103132, rhbz#2078805, rhbz#2111301, rhbz#2094641 [8.5.0-5] - rpc: Pass OPENSSL_CONF through to ssh invocations (rhbz#2112348) [8.5.0-4] - qemu: Pass migration flags to qemuMigrationParamsApply (rhbz#2111070) - qemu_migration_params: Replace qemuMigrationParamTypes array (rhbz#2111070) - qemu_migration: Pass migParams to qemuMigrationSrcResume (rhbz#2111070) - qemu_migration: Apply max-postcopy-bandwidth on post-copy resume (rhbz#2111070) - qemu: Always assume support for QEMU_CAPS_MIGRATION_PARAM_XBZRLE_CACHE_SIZE (rhbz#2107892) - qemu_migration: Store original migration params in status XML (rhbz#2107892) - qemu_migration_params: Refactor qemuMigrationParamsApply (rhbz#2107892) - qemu_migration_params: Refactor qemuMigrationParamsReset (rhbz#2107892) - qemu_migration_params: Avoid deadlock in qemuMigrationParamsReset (rhbz#2107892) - qemu: Restore original memory locking limit on reconnect (rhbz#2107424) - qemu: Properly release job in qemuDomainSaveInternal (rhbz#1497907) - qemu: don't call qemuMigrationSrcIsAllowedHostdev() from qemuMigrationDstPrepareFresh() (rhbz#1497907) [8.5.0-3] - qemu: introduce capability QEMU_CAPS_MIGRATION_BLOCKED_REASONS (rhbz#2092833) - qemu: new function to retrieve migration blocker reasons from QEMU (rhbz#2092833) - qemu: query QEMU for migration blockers before our own harcoded checks (rhbz#2092833) - qemu: remove hardcoded migration fail for vDPA devices if we can ask QEMU (rhbz#2092833) - qemu_migration: Use EnterMonitorAsync in qemuDomainGetMigrationBlockers (rhbz#2092833) - qemu: don't try to query QEMU about migration blockers during offline migration (rhbz#2092833) - qemu_migration: Acquire correct job in qemuMigrationSrcIsAllowed (rhbz#2092833) - virsh: Require --xpath for *dumpxml (rhbz#2103524) - qemu: skip hardcoded hostdev migration check if QEMU can do it for us (rhbz#1497907) [8.5.0-2] - domain_conf: Format <defaultiothread/> more often (rhbz#2059511) - domain_conf: Format iothread IDs more often (rhbz#2059511) - qemu: Make IOThread changing more robust (rhbz#2059511) - qemuDomainSetIOThreadParams: Accept VIR_DOMAIN_AFFECT_CONFIG flag (rhbz#2059511) - virsh: Implement --config for iothreadset (rhbz#2059511) - docs: Document TPM portion of domcaps (rhbz#2103119) - virtpm: Introduce TPM-1.2 and TPM-2.0 capabilieis (rhbz#2103119) - domcaps: Introduce TPM backendVersion (rhbz#2103119) - qemu: Report supported TPM version in domcaps (rhbz#2103119) - vircpi: Add PCIe 5.0 and 6.0 link speeds (rhbz#2105231) [8.5.0-1] - Rebased to libvirt-8.5.0 (rhbz#2060313) - The rebase also fixes the following bugs: rhbz#1475431, rhbz#2026765, rhbz#2059511, rhbz#2089431, rhbz#2102009 [8.4.0-3] - qemu: fd: Fix monitor usage of qemuFDPassDirectGetPath (rhbz#2092856) [8.4.0-2] - Revert 'RHEL: Fix virConnectGetMaxVcpus output' (rhbz#2095260) [8.4.0-1] - Rebased to libvirt-8.4.0 (rhbz#2060313) - The rebase also fixes the following bugs: rhbz#2057768, rhbz#2081981, rhbz#2035163, rhbz#2075837, rhbz#2082540 rhbz#2075383 [8.3.0-1] - Rebased to libvirt-8.3.0 (rhbz#2060313) - The rebase also fixes the following bugs: rhbz#1653327, rhbz#2075765, rhbz#2075464, rhbz#2078274, rhbz#2070380 rhbz#2073887, rhbz#2073867 [8.2.0-1] - Rebased to libvirt-8.2.0 (rhbz#2060313) - The rebase also fixes the following bugs: rhbz#1866400, rhbz#2065381, rhbz#2063903, rhbz#1901394, rhbz#2065399 [8.1.0-1] - Rebased to libvirt-8.1.0 (rhbz#2060313) - The rebase also fixes the following bugs: rhbz#1643868, rhbz#2045953, rhbz#1910856, rhbz#2051451, rhbz#1745868 rhbz#2040548, rhbz#2041665, rhbz#1999372, rhbz#2038045, rhbz#2045959 rhbz#2046024, rhbz#2040555, rhbz#2057067, rhbz#2037146, rhbz#2036300 [8.0.0-5] - Make systemd unit ordering more robust (rhbz#1868537) - util: Fix machined servicename (rhbz#1868537) [8.0.0-4] - qemu_command: Generate memory only after controllers (rhbz#2047271) - qemu: Validate domain definition even on migration (rhbz#2048435) [8.0.0-3] - qemuDomainSetupDisk: Initialize 'targetPaths' (rhbz#2046170) [8.0.0-2] - build: Only install libvirt-guests when building libvirtd (rhbz#2042529) - docs: Add man page for libvirt-guests (rhbz#2042529) - remove sysconfig files (rhbz#2042529) - spec: Run pre/post-install stuff on 'daemon-driver-storage-core' (rhbz#2025644) - qemu: fix inactive snapshot revert (rhbz#2039136) - Revert 'report error when virProcessGetStatInfo() is unable to parse data' (rhbz#2043579) [8.0.0-1] - Rebased to libvirt-8.0.0 (rhbz#2001507) - The rebase also fixes the following bugs: rhbz#2039246, rhbz#2039652, rhbz#2039651, rhbz#2039131 [8.0.0-0rc1.1] - Rebased to libvirt-8.0.0-rc1 (rhbz#2001507) - The rebase also fixes the following bugs: rhbz#2034539, rhbz#2027400, rhbz#1945420, rhbz#1851249, rhbz#2032410 rhbz#2026812, rhbz#2032365, rhbz#2035888, rhbz#2036895, rhbz#2026537 [7.10.0-1] - Rebased to libvirt-7.10.0 (rhbz#2001507) - The rebase also fixes the following bugs: rhbz#2024098, rhbz#1964223, rhbz#2018488, rhbz#2021437, rhbz#2022589 rhbz#2023605, rhbz#1431589, rhbz#2024435, rhbz#2016599, rhbz#1945501 rhbz#2023674 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-3750 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 9 [9.2.10-7] - bump release number for rebuild with fixed gating.yaml file [9.2.10-6] - resolve RHEL-12665 - resolve CVE-2023-39325 CVE-2023-44487 rapid stream resets can cause excessive work - testing is turned off due to test failures caused by testing date mismatch [9.2.10-5] - resolve CVE-2023-3128 grafana: account takeover possible when using Azure AD OAuth [9.2.10-3] - bumps exporter-toolkit to v0.7.3, sanitize-url@npm to 6.0.2, skip problematic s390 tests, License AGPL-3.0-only. [9.2.10-2] - Update to 9.2.10 [9.2.10-1] - Update to 9.2.10 [9.0.9-2] - resolve CVE-2022-39229 grafana: Using email as a username can prevent other users from signing in - resolve CVE-2022-2880 CVE-2022-41715 grafana: various flaws [9.0.9-1] - update to 9.0.9 tagged upstream community sources, see CHANGELOG - resolve CVE-2022-35957 grafana: Escalation from admin to server admin when auth proxy is used (rhbz#2125530) [9.0.8-2] - bump NVR [9.0.8-1] - update to 9.0.8 tagged upstream community sources, see CHANGELOG - do not list /usr/share/grafana/conf twice - drop makefile in favor of create_bundles.sh script - sync provides/obsoletes with CentOS versions - drop husky patch [7.5.15-3] - resolve CVE-2022-1962 golang: go/parser: stack exhaustion in all Parse* functions - resolve CVE-2022-1705 golang: net/http: improper sanitization of Transfer-Encoding header - resolve CVE-2022-32148 golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working - resolve CVE-2022-30631 golang: compress/gzip: stack exhaustion in Reader.Read - resolve CVE-2022-30630 golang: io/fs: stack exhaustion in Glob - resolve CVE-2022-30632 golang: path/filepath: stack exhaustion in Glob - resolve CVE-2022-30635 golang: encoding/gob: stack exhaustion in Decoder.Decode - resolve CVE-2022-28131 golang: encoding/xml: stack exhaustion in Decoder.Skip - resolve CVE-2022-30633 golang: encoding/xml: stack exhaustion in Unmarshal [7.5.15-2] - resolve CVE-2022-31107 grafana: OAuth account takeover [7.5.15-1] - update to 7.5.15 tagged upstream community sources, see CHANGELOG - resolve CVE-2022-21673 grafana: Forward OAuth Identity Token can allow users to access some data sources - resolve CVE-2022-21702 grafana: XSS vulnerability in data source handling - resolve CVE-2022-21703 grafana: CSRF vulnerability can lead to privilege escalation - resolve CVE-2022-21713 grafana: IDOR vulnerability can lead to information disclosure - resolve CVE-2021-23648 sanitize-url: XSS - resolve CVE-2022-21698 prometheus/client_golang: Denial of service using InstrumentHandlerCounter - declare Node.js dependencies of subpackages - make vendor and webpack tarballs reproducible [7.5.11-3] - use HMAC-SHA-256 instead of SHA-1 to generate password reset tokens - update FIPS tests in check phase [7.5.11-2] - resolve CVE-2021-44716 golang: net/http: limit growth of header canonicalization cache - resolve CVE-2021-43813 grafana: directory traversal vulnerability for *.md files MODERATE Copyright 2023 Oracle, Inc. CVE-2022-23552 CVE-2022-39201 CVE-2022-39307 CVE-2022-39306 CVE-2022-39324 CVE-2022-31123 CVE-2022-31130 CVE-2022-41717 CVE-2023-24534 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base Oracle Linux 9 [13.11-1] - Update to 13.11 Resolves: #2171370 LOW Copyright 2023 Oracle, Inc. CVE-2022-41862 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base Oracle Linux 9 [0.99.9-5] - Rebuild Resolves: rhbz#2227786 [0.99.9-4] - Address CVE-2020-12762 Resolves: rhbz#2203172 MODERATE Copyright 2023 Oracle, Inc. CVE-2020-12762 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 9 [8.3.1-11] - Resolves: RHEL-2263 - bgpd: Do not explicitly print MAXTTL value for ebgp-multihop vty output [8.3.1-10] - Related: #2216912 - adding sys_admin to capabilities [8.3.1-9] - Resolves: #2215346 - frr policy does not allow the execution of /usr/sbin/ipsec [8.3.1-8] - Resolves: #2216912 - SELinux is preventing FRR-Zebra to access to network namespaces [8.3.1-7] - Resolves: #2168855 - BFD not working through VRF [8.3.1-6] - Resolves: #2184870 - Reachable assertion in peek_for_as4_capability function - Resolves: #2196795 - denial of service by crafting a BGP OPEN message with an option of type 0xff - Resolves: #2196796 - denial of service by crafting a BGP OPEN message with an option of type 0xff - Resolves: #2196794 - out-of-bounds read exists in the BGP daemon of FRRouting MODERATE Copyright 2023 Oracle, Inc. CVE-2022-40302 CVE-2022-40318 CVE-2022-36440 CVE-2022-43681 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base Oracle Linux 9 [1:3.4.10-6] - Resolves: #2211413 - XRA dissector infinite loop [1:3.4.10-5] - Resolves: #2210864 - Candump log file parser crash Resolves: #2210865 - VMS TCPIPtrace file parser crash Resolves: #2210868 - NetScaler file parser crash Resolves: #2210870 - RTPS dissector crash Resolves: #2210871 - IEEE C37.118 Synchrophasor dissector crash MODERATE Copyright 2023 Oracle, Inc. CVE-2023-2952 CVE-2023-0666 CVE-2023-2855 CVE-2023-2856 CVE-2023-0668 CVE-2023-2858 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 9 [1.31.3-1.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117178] [1:1.31.3-1] - update to https://github.com/containers/buildah/releases/tag/v1.31.3 - Related: #2176063 [1:1.31.2-1] - update to https://github.com/containers/buildah/releases/tag/v1.31.2 - Related: #2176063 [1:1.31.1-2] - build buildah off main branch for early testing of zstd compression - Related: #2176063 [1:1.31.1-1] - update to https://github.com/containers/buildah/releases/tag/v1.31.1 - Related: #2176063 [1:1.31.0-1] - update to https://github.com/containers/buildah/releases/tag/v1.31.0 - Related: #2176063 [1:1.30.0-2] - rebuild for following CVEs: CVE-2023-25173 CVE-2022-41724 CVE-2022-41725 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400 - Resolves: #2175073 - Resolves: #2179958 - Resolves: #2187332 - Resolves: #2187375 - Resolves: #2203696 - Resolves: #2207518 [1:1.30.0-1] - update to 1.30.0 - Related: #2176063 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-41723 CVE-2023-24534 CVE-2022-41725 CVE-2023-24536 CVE-2023-25173 CVE-2023-29400 CVE-2023-29406 CVE-2023-24540 CVE-2023-24539 CVE-2023-24538 CVE-2022-41724 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base Oracle Linux 9 [2:4.6.1-5.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404] [2:4.6.1-5] - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel (https://github.com/containers/podman/commit/ea33dce) - Related: #2176063 [2:4.6.1-4] - amend podmansh provides - Related: #2176063 [2:4.6.1-3] - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel (https://github.com/containers/podman/commit/8bb0204) - Related: #2176063 [2:4.6.1-2] - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel (https://github.com/containers/podman/commit/1b2fadd) - Resolves: #2232127 [2:4.6.1-1] - update to latest content of https://github.com/containers/podman/releases/tag/4.6.1 - Related: #2176063 [2:4.6.0-3] - build podman 4.6.0 off main branch for early testing of zstd compression - Related: #2176063 [2:4.6.0-2] - update license token to be SPDX compatible - Related: #2176063 [2:4.6.0-1] - update to latest content of https://github.com/containers/podman/releases/tag/4.6.0 (https://github.com/containers/podman/commit/38e6fab9664c6e59b66e73523b307a56130316ae) [2:4.6.0-0.3] - rebuild with the new bats - Related: #2176063 [2:4.6.0-0.2] - update to 4.6.0-rc2 - Related: #2176063 [2:4.6.0-0.1] - update to 4.6.0-rc1 - Related: #2176063 [2:4.5.1-5] - rebuild for following CVEs: CVE-2023-25173 CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400 - Resolves: #2175071 - Resolves: #2179950 - Resolves: #2187318 - Resolves: #2187366 - Resolves: #2203681 - Resolves: #2207512 [2:4.5.1-4] - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.6.1 - Related: #2176063 [2:4.5.1-3] - rebuild for following CVEs: CVE-2023-25173 CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400 - Resolves: #2175074 - Resolves: #2179966 - Resolves: #2187322 - Resolves: #2187383 - Resolves: #2203702 - Resolves: #2207522 [2:4.5.1-2] - rebuild - Resolves: #2177611 [2:4.5.1-1] - update to https://github.com/containers/podman/releases/tag/v4.5.1 - Related: #2176063 [2:4.5.0-1] - update to 4.5.0 - Related: #2176063 [2:4.4.1-10] - build and add missing docker man pages - Resolves: #2187187 [2:4.4.1-9] - update to the latest content of https://github.com/containers/podman/tree/v4.4.1-rhel (https://github.com/containers/podman/commit/fd0ea3b) - Resolves: #2173089 [2:4.4.1-8] - update to the latest content of https://github.com/containers/podman/tree/v4.4.1-rhel (https://github.com/containers/podman/commit/05037d3) - Resolves: #2178263 [2:4.4.1-7] - update to the latest content of https://github.com/containers/podman/tree/v4.4.1-rhel (https://github.com/containers/podman/commit/67f7e1e) - Related: #2176063 [2:4.4.1-6] - update to the latest content of https://github.com/containers/podman/tree/v4.4.1-rhel (https://github.com/containers/podman/commit/4461c9c) - Related: #2176063 [2:4.4.1-5] - update to the latest content of https://github.com/containers/podman/tree/v4.4.1-rhel (https://github.com/containers/podman/commit/bf400bd) - Related: #2176063 [2:4.4.1-4] - update to the latest content of https://github.com/containers/podman/tree/v4.4.1-rhel (https://github.com/containers/podman/commit/ffc2614) - Resolves: #2179450 [2:4.4.1-3] - update to the latest content of https://github.com/containers/podman/tree/v4.4.1-rhel (https://github.com/containers/podman/commit/e1703bb) - Related: #2124478 [2:4.4.1-2] - update to the latest content of https://github.com/containers/podman/tree/v4.4.1-rhel (https://github.com/containers/podman/commit/0b38633) - Related: #2124478 [2:4.4.1-1] - update to the latest content of https://github.com/containers/podman/tree/v4.4.1-rhel (https://github.com/containers/podman/commit/d4e285a) - Related: #2124478 [2:4.4.1-0.1] - update to the latest content of https://github.com/containers/podman/tree/v4.4 (https://github.com/containers/podman/commit/f5670f0) - Related: #2124478 [2:4.4.0-1] - update to podman-4.4 release - Related: #2124478 [2:4.4.0-0.10] - update to the latest content of https://github.com/containers/podman/tree/main (https://github.com/containers/podman/commit/68bbdc2) - Related: #2124478 [2:4.4.0-0.9] - update to the latest content of https://github.com/containers/podman/tree/main (https://github.com/containers/podman/commit/323b515) - Related: #2124478 [2:4.4.0-0.8] - update to the latest content of https://github.com/containers/podman/tree/main (https://github.com/containers/podman/commit/c35e74f) - Related: #2124478 [2:4.4.0-0.7] - update to the latest content of https://github.com/containers/podman/tree/main (https://github.com/containers/podman/commit/ce504bb) - Related: #2124478 [2:4.4.0-0.6] - add quadlet to tests - Related: #2124478 [2:4.4.0-0.5] - obsolete podman-catatonit in order to not to file conflict with catatonit - Related: #2124478 [2:4.4.0-0.4] - build v4.4.0-rc2 - Related: #2124478 [2:4.4.0-0.3] - remove podman-machine-cni, it is now part of podman 4.0 or newer - Related: #2124478 [2:4.4.0-0.2] - update to the latest content of https://github.com/containers/podman/tree/main (https://github.com/containers/podman/commit/07ba51d) - update gvisor-tap-vsock to 0.5.0 - Related: #2124478 [2:4.4.0-0.1] - podman-4.4.0-rc1 - update to the latest content of https://github.com/containers/podman/tree/main (https://github.com/containers/podman/commit/f1af5b3) - Related: #2124478 [2:4.3.1-4] - podman shouldn't provide and file conflict with catatonit in CRB - Resolves: #2151322 [2:4.3.1-3] - fix 'podman manifest add' is not concurrent safe - Resolves: #2105173 [2:4.3.1-2] - properly obsolete catatonit - Resolves: #2123319 [2:4.3.1-1] - update to https://github.com/containers/podman/releases/tag/v4.3.1 - Related: #2124478 [2:4.3.0-2] - rebuild to fix CVE-2022-30629 - Related: #2102994 [2:4.3.0-1] - update to https://github.com/containers/podman/releases/tag/v4.3.0 - Related: #2124478 [2:4.2.0-3] - fix dependency in test subpackage - Related: #2061316 [2:4.2.0-2] - readd catatonit - Related: #2061316 [2:4.2.0-1] - update to latest content of https://github.com/containers/podman/releases/tag/4.2.0 (https://github.com/containers/podman/commit/7fe5a419cfd2880df2028ad3d7fd9378a88a04f4) - Related: #2061316 [2:4.2.0-0.3rc3] - require catatonit for gating tests - Related: #2061316 [2:4.2.0-0.2rc3] - update to 4.2.0-rc3 - Related: #2061316 [2:4.2.0-0.1rc2] - update to 4.2.0-rc2 - Related: #2061316 [2:4.1.1-6] - convert catatonit dependency to soft dep as catatonit is no longer in Appstream but in CRB - Related: #2061316 [2:4.1.1-5] - rebuild for combined gating with catatonit - Related: #2097694 [2:4.1.1-4] - catatonit is now a standalone package - Related: #2097694 [2:4.1.1-3] - update to the latest content of https://github.com/containers/podman/tree/v4.1.1-rhel (https://github.com/containers/podman/commit/fa692a6) - Related: #2097694 [2:4.1.1-2] - be sure podman services/sockets are stopped upon package removal - Related: #2061316 [2:4.1.1-1] - update to https://github.com/containers/podman/releases/tag/v4.1.1 - Related: #2061316 [2:4.1.0-4] - don't require runc and Recommends: crun - Related: #2061316 [2:4.1.0-3] - Re-enable LTO and debuginfo - Related: #2061316 [2:4.1.0-2] - update gvisor-tap-vsock to 0.2.0 to fix compilation with golang 1.18 - Related: #2061316 [2:4.1.0-1] - update to https://github.com/containers/podman/releases/tag/v4.1.0 - Related: #2061316 [2:4.0.3-2] - require netavark and move CNI to soft dependencies - Related: #2061316 [2:4.0.3-1] - update to https://github.com/containers/podman/releases/tag/v4.0.3 - Related: #2061316 [2:4.0.2-3] - bump minimal libseccomp version requirement - Related: #2061316 [2:4.0.2-2] - rebuilt with golang >= 1.17.5 (CVE-2021-44716, CVE-2021-44717) - Related: #2061316 [2:4.0.2-1] - update to https://github.com/containers/podman/releases/tag/v4.0.2 - Related: #2059681 [2:4.0.1-1] - update to https://github.com/containers/podman/releases/tag/v4.0.1 - Related: #2000051 [2:4.0.0-6] - set catatonit cflags after configure step, don't explicitly set ldflags - Related: #2054115 [2:4.0.0-5] - revert previous change and run set_build_flags before the build process - Related: #2054115 [2:4.0.0-4] - add -D_FORTIFY_SOURCE=2 for podman-catatonit - Related: #2054115 [2:4.0.0-3] - depend on containers-common >= 2:1-28 - Related: #2000051 [2:4.0.0-2] - use correct commit 49f8da72 for podman, previous commit said 4.0.1-dev - Related: #2000051 [2:4.0.0-1] - update to podman-4.0.0 release - Related: #2000051 [2:4.0.0-0.32] - update to the latest content of https://github.com/containers/podman/tree/v4.0 (https://github.com/containers/podman/commit/a34f279) - Related: #2000051 [2:4.0.0-0.31] - update to the latest content of https://github.com/containers/podman/tree/v4.0 (https://github.com/containers/podman/commit/ab3e566) - Related: #2000051 [2:4.0.0-0.30] - fix linker flags to assure -D_FORTIFY_SOURCE=2 is present at the command line - Related: #2000051 [2:4.0.0-0.29] - update to the latest content of https://github.com/containers/podman/tree/v4.0 (https://github.com/containers/podman/commit/b0a445e) - Related: #2000051 [2:4.0.0-0.28] - update to the latest content of https://github.com/containers/podman/tree/v4.0 (https://github.com/containers/podman/commit/c4a9aa7) - Related: #2000051 [2:4.0.0-0.27] - update to the latest content of https://github.com/containers/podman/tree/v4.0 (https://github.com/containers/podman/commit/5b2d96f) - Related: #2000051 [2:4.0.0-0.26] - set CGO_CFLAGS explicitly - Related: #2000051 [2:4.0.0-0.25] - bump to 0.25 to have highest NVR - Related: #2000051 [2:4.0.0-0.4] - rebuilt - Related: #2000051 [2:4.0.0-0.3] - update to the latest content of https://github.com/containers/podman/tree/v4.0 (https://github.com/containers/podman/commit/2dca7b2) - Related: #2000051 [2:4.0.0-0.2] - update to the latest content of https://github.com/containers/podman/tree/v4.0 (https://github.com/containers/podman/commit/4ad9e00) - Related: #2000051 [2:4.0.0-0.1] - update to the latest content of https://github.com/containers/podman/tree/v4.0 (https://github.com/containers/podman/commit/337f706) - Related: #2000051 [2:3.4.5-0.8] - update to the latest content of https://github.com/containers/podman/tree/v3.4 (https://github.com/containers/podman/commit/a54320a) - Related: #2000051 [2:3.4.5-0.7] - add rootless_role (Ed Santiago) - Related: #2000051 [2:3.4.5-0.6] - add git-daemon to test subpackage (https://github.com/containers/podman/issues/12851) - Related: #2000051 [2:3.4.5-0.5] - update to the latest content of https://github.com/containers/podman/tree/v3.4 (https://github.com/containers/podman/commit/63134a1) - Related: #2000051 [2:3.4.5-0.4] - update to the latest content of https://github.com/containers/podman/tree/v3.4 (https://github.com/containers/podman/commit/3f57b6e) - Related: #2000051 [2:3.4.5-0.3] - update to the latest content of https://github.com/containers/podman/tree/v3.4 (https://github.com/containers/podman/commit/17788ed) - Related: #2000051 [2:3.4.5-0.2] - incorporate gating test fixes from Ed Santiago: - remove buildah and skopeo (unused) - bump BATS from v1.1 to v1.5 - rename 'nonroot' to 'rootless' - Related: #2000051 [2:3.4.5-0.1] - update to the latest content of https://github.com/containers/podman/tree/v3.4 (https://github.com/containers/podman/commit/b8fde5c) - Related: #2000051 [2:3.4.4-0.1] - update to the latest content of https://github.com/containers/podman/tree/v3.4 (https://github.com/containers/podman/commit/49f589d) - Related: #2000051 [2:3.4.3-0.11] - remove downstream patch already applied upstream - Related: #2000051 [2:3.4.3-0.10] - update to the latest content of https://github.com/containers/podman/tree/v3.4 (https://github.com/containers/podman/commit/fe44757) - Related: #2000051 [2:3.4.3-0.9] - update to the latest content of https://github.com/containers/podman/tree/v3.4 (https://github.com/containers/podman/commit/815f36a) - Related: #2000051 [2:3.4.3-0.8] - update to the latest content of https://github.com/containers/podman/tree/v3.4 (https://github.com/containers/podman/commit/31bc358) - Related: #2000051 [2:3.4.3-0.7] - bump Epoch to not to pull in older versions built off upstream main branch - Related: #2000051 [1:3.4.3-0.6] - update to the latest content of https://github.com/containers/podman/tree/v3.4 (https://github.com/containers/podman/commit/e3a7a74) - add libsubid_tag.sh into BUILDTAGS - Related: #2000051 [1:3.4.3-0.5] - do not put patch URL as the backported patch will get overwritten when 'spectool -g -f' is executed - Related: #2000051 [1:3.4.3-0.4] - update to the latest content of https://github.com/containers/podman/tree/v3.4 (https://github.com/containers/podman/commit/7203178) - Related: #2000051 [1:3.4.3-0.3] - remove -t 0 from podman gating test - Related: #2000051 [1:3.4.3-0.2] - add BuildRequires: shadow-utils-subid-devel - Related: #2000051 [1:3.4.3-0.1] - update to the latest content of https://github.com/containers/podman/tree/v3.4 (https://github.com/containers/podman/commit/4808a63) - Related: #2000051 [1:3.4.2-0.8] - update to the latest content of https://github.com/containers/podman/tree/v3.4 (https://github.com/containers/podman/commit/fd010ad) - Related: #2000051 [1:3.4.2-0.7] - backport https://github.com/containers/podman/pull/12118 to 3.4 in attempt to fix gating tests - Related: #2000051 [1:3.4.2-0.6] - add Requires: gnupg (https://github.com/containers/podman/pull/12270) - Related: #2000051 [1:3.4.2-0.5] - update to the latest content of https://github.com/containers/podman/tree/v3.4 (https://github.com/containers/podman/commit/8de9950) - Related: #2000051 [1:3.4.2-0.4] - update catatonit to 1.7 - Related: #2000051 [1:3.4.2-0.3] - update to the latest content of https://github.com/containers/podman/tree/v3.4 (https://github.com/containers/podman/commit/75023e9) - Related: #2000051 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-41725 CVE-2022-41723 CVE-2023-29400 CVE-2023-24534 CVE-2023-24539 CVE-2023-3978 CVE-2023-24536 CVE-2023-24537 CVE-2023-24540 CVE-2023-25173 CVE-2022-41724 CVE-2023-24538 CVE-2023-29406 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base Oracle Linux 9 [0.11.0-7] - add missing gating.yaml - fix rpminspect issue Related: #2215766 [0.11.0-6] - Resolves: #2215766, insecure credentials submission MODERATE Copyright 2023 Oracle, Inc. CVE-2023-35789 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 9 [14-2] - Fix service start up [14-1] - New upstream release - v14. Resolves: rhbz#2182411 Resolves: CVE-2023-1672 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-1672 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base Oracle Linux 9 [3.11.5-1] - Rebase to 3.11.5 - Security fixes for CVE-2023-40217 and CVE-2023-41105 Resolves: RHEL-3045, RHEL-3269 [3.11.4-3] - Fix symlink handling in the fix for CVE-2023-24329 Resolves: rhbz#263261 [3.11.4-2] - Security fix for CVE-2007-4559 Resolves: rhbz#263261 [3.11.4-1] - Update to 3.11.4 - Security fix for CVE-2023-24329 Resolves: rhbz#2173917 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-41105 CVE-2007-4559 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 9 [2.4.22-1] - Update to 2.4.22 (#2196530) [2.4.17-7] - Fix uninitizalized resevered bytes (CVE-2023-0836, #2180861) MODERATE Copyright 2023 Oracle, Inc. CVE-2023-0836 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base Oracle Linux 9 [1.7.0-8] - CVE fix for: CVE-2023-3138 Resolve: rhbz#2213763 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-3138 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base Oracle Linux 9 [7.1.8.1-11.0.1] - Replace colors with Oracle colors [Orabug: 32120093] - Build with --with-vendor='Oracle America, Inc.' - Added the --with-hamcrest option to configure. [1:7.1.8.1-11] - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write [1:7.1.8.1-10] - Fix erroneous libreoffice-ure dependencies [1:7.1.8.1-9] - Resolves: rhbz#2182392 CVE-2022-38745 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-1183 CVE-2022-38745 CVE-2023-0950 CVE-2023-2255 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 9 [1.12.8-1] - Update to 1.12.8 (CVE-2023-28100, CVE-2023-28101) Resolves: #2180312, #2221792 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-28100 CVE-2023-28101 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 9 [6.1.0-9] - Fix an open redirect in StaticFileHandler Resolves: CVE-2023-28370 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-28370 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base Oracle Linux 9 [2.85-14] - Backport Coverity fix to hide detected issue (#2156789) [2.85-13] - Rebuild with modified gating settings [2.85-12] - Make create logfile writeable by root (#2156789) [2.85-11] - Do not create and search --local and --address=/x/# domains (#2209031) [2.85-10] - Fix also dynamically set resolvers over dbus (#2186481) [2.85-9] - Properly initialize domain parameter in dnssec mode (#2182342) [2.85-8] - Correct possible crashes when server=/example.net/# is used (#2188712) [2.85-7] - Limit offered EDNS0 size 1232 (CVE-2023-28450) MODERATE Copyright 2023 Oracle, Inc. CVE-2023-28450 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base Oracle Linux 9 [2.40.5-1] - Update to 2.40.5 Related: #2176270 [2.40.4-1] - Update to 2.40.4 Related: #2176270 [2.40.3-2] - Disable JIT Related: #2176270 [2.40.3-1] - Update to 2.40.3 Related: #2176270 [2.40.2-1] - Update to 2.40.2 Related: #2176270 [2.40.1-1] - Upgrade to 2.40.1 Resolves: #2176270 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-38611 CVE-2023-32370 CVE-2023-32393 CVE-2023-38600 CVE-2023-38572 CVE-2023-38597 CVE-2023-40451 CVE-2022-32885 CVE-2023-27954 CVE-2023-38594 CVE-2023-38595 CVE-2023-27932 CVE-2023-39434 CVE-2023-38599 CVE-2023-38592 CVE-2023-28198 CVE-2023-38133 CVE-2023-40397 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base Oracle Linux 9 [2.29-3] - Resolves: rhbz#2218907 - Fix CVE-2023-31484 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-31484 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base Oracle Linux 9 [0.076-461] - Changes the verify_SSL default parameter from 0 to 1 - CVE-2023-31486 - Resolves: rhbz#2228412 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-31486 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base Oracle Linux 9 [9.54.0-13] - fix for CVE-2023-38559 - Resolves: rhbz#2224372 [9.54.0-12] - fix for CVE-2023-36664 - Resolves: rhbz#2217810 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-28879 CVE-2023-38559 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 9 [4.12-1.0.1] - Add libreswan-oracle.patch to detect Oracle Linux distro [4.12-1] - Update to 4.12 to fix CVE-2023-38710, CVE-2023-38711, CVE-2023-38712 - Resolves: rhbz#2215956 [4.9-5] - Just bumping up the version to include bugs for CVE-2023-2295. There is no code fix for it. Fix for it is including the code fix for CVE-2023-30570. - Fix CVE-2023-2295 Regression of CVE-2023-30570 fixes in the Red Hat Enterprise Linux - Resolves: rhbz#2189777, rhbz#2190148 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-38712 CVE-2023-38711 CVE-2023-38710 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base Oracle Linux 9 [2.1.0-22] - fix CVE-2023-33460 - Resolves: #2221253 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-33460 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 9 [1:0.9.72-5] - Add cve-2023-27371.patch Related: rhbz#2174640 CVE-2023-27371 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-27371 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 9 [12.5.4-7.0.1] - add mpstat -H option to also display physically hotplugged vCPUs [Orabug: 34683087] [12.5.4-7] - add description of UMASK to man/systat.in (rhbz#2216805) [12.5.4-6] - fix the arithmetic overflow in allocate_structures() that is still possible on some 32 bit systems (CVE-2023-33204) MODERATE Copyright 2023 Oracle, Inc. CVE-2023-33204 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base Oracle Linux 9 [1:9.0.62-37] - Resolves: RHEL-12551 - Remove JDK subpackges which are unused [1:9.0.62-16] - Related: #2184133 Declare file conflicts [1:9.0.62-15] - Resolves: #2184133 Fix bug in Obsoletes [1:9.0.62-14] - Resolves: #2210632 CVE-2023-28709 tomcat [1:9.0.62-13] - Resolves: #2189675 Missing Tomcat POM files in RHEL 9.3 [1:9.0.62-12] - Resolves: #2189675 Missing Tomcat POM files in RHEL 9.3 - Resolves: #2173872 Remove java-11-openjdk-headles as a tomcat dependency - Resolves: #2181461 CVE-2023-28708 tomcat: not including the secure attribute causes information - Resolves: #2210632 CVE-2023-28709 - Resolves: #2184133 Add Obsoletes to tomcat package - Update patch command - Update source to include the CVE fixes MODERATE Copyright 2023 Oracle, Inc. CVE-2023-28708 CVE-2023-28709 CVE-2023-24998 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base Oracle Linux 9 [4.4.0-10] - Fix CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576 - Resolves: CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576 [4.4.0-9] - Fix CVE-2023-2731 - Resolves: CVE-2023-2731 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-3316 CVE-2023-3576 CVE-2023-26965 CVE-2023-2731 CVE-2023-26966 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 9 [2.0.6-4] - bump rpm version for rhel-exception build Resolves: rhbz#2230712 [2.0.6-3] - blackbox: fix buffer overflow with long log lines Resolves: rhbz#2236171 [2.0.6-1] - ipc: Retry receiving credentials if the the message is short Resolves: rhbz2149647 [2.0.6-1] - Rebase to 2.0.6 Resolves: rhbz#2072903 [2.0.3-8] - Fix negative errno in qb_ipcc_connect (introduced in 2.0.3-4) Resolves: rhbz#2057527 [2.0.3-7] - Bump soname for async-connect API addition Resolves: rhbz#bz2031865 [2.0.3-6] - Fix gating.yaml for RHEL-9 Resolves: rhbz#bz2031865 [2.0.3-5] - Add gating.yaml from RHEL Resolves: rhbz#bz2031865 [2.0.3-4] - Add async connect call for Pacemaker Resolves: rhbz#bz2031865 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-39976 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base cpe:/a:oracle:linux:9::distro_builder Oracle Linux 9 - [5.14.0-362.8.1_3.OL9] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.5 - Remove nmap references from kernel (Mridula Shastry) [Orabug: 34313944] - Remove upstream reference during boot (Kevin Lyons) [Orabug: 34729535] - Disable unified kernel image package build - Add Oracle Linux IMA certificates [5.14.0-362.8.1_3] - Revert 'cnic: don't pass bogus GFP_ flags to dma_alloc_coherent' (Chris Leech) [RHEL-2542] - Revert 'dma-mapping: reject __GFP_COMP in dma_alloc_attrs' (Chris Leech) [RHEL-2542] [5.14.0-362.7.1_3] - drm/amd: flush any delayed gfxoff on suspend entry (Mika Penttila) [2232662] - drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix (Mika Penttila) [2232662] - drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU v13.0.4/11 (Mika Penttila) [2232662] - Revert 'net/mlx5e: Switch to using napi_build_skb()' (Mohammad Kabat) [RHEL-1267] [5.14.0-362.6.1_3] - kabi: enable check-kabi (Cestmir Kalina) [RHEL-8864] - kabi: add symbol zlib_inflate_workspacesize to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol zlib_inflateInit2 to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol zlib_inflateEnd to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol zlib_inflate to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol zalloc_cpumask_var to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol yield to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol xz_dec_run to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol xz_dec_init to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol xz_dec_end to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol xa_store to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol xas_find to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol xa_set_mark to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol xa_load to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __xa_insert to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol xa_get_mark to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol xa_find_after to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol xa_find to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol xa_erase to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol xa_destroy to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol xa_clear_mark to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __xa_alloc_cyclic to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __xa_alloc to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol x86_spec_ctrl_base to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __x86_return_thunk to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __x86_indirect_thunk_rsi to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __x86_indirect_thunk_rdx to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __x86_indirect_thunk_rdi to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __x86_indirect_thunk_rcx to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __x86_indirect_thunk_rbx to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __x86_indirect_thunk_rbp to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __x86_indirect_thunk_rax to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __x86_indirect_thunk_r9 to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __x86_indirect_thunk_r8 to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __x86_indirect_thunk_r15 to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __x86_indirect_thunk_r14 to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __x86_indirect_thunk_r13 to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __x86_indirect_thunk_r12 to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __x86_indirect_thunk_r11 to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __x86_indirect_thunk_r10 to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol x86_cpu_to_apicid to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __write_overflow_field to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __warn_printk to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __wake_up to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol wait_for_completion_timeout to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol wait_for_completion_interruptible to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol wait_for_completion to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol vzalloc to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol vsprintf to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol vsnprintf to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol vprintk to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol vm_zone_stat to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol vm_munmap to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol vm_event_states to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol vmemmap_base to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol vmalloc_to_page to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol vmalloc_node to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol vmalloc_base to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol vmalloc_32 to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol vmalloc to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __vmalloc to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __virt_addr_valid to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol vfree to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __var_waitqueue to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol uv_undefined to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol uv_teardown_irq to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol uv_setup_irq to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol uv_possible_blades to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __uv_hub_info_list to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol uv_get_hubless_system to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __uv_cpu_info to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol uv_bios_obj_count to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol uv_bios_install_heap to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol uv_bios_get_pci_topology to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol uv_bios_get_master_nasid to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol uv_bios_get_heapsize to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol uv_bios_get_geoinfo to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol uv_bios_enum_ports to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol uv_bios_enum_objs to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol usleep_range_state to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol up_write to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol up_read to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol up to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol unregister_shrinker to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol unregister_reboot_notifier to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol unregister_nmi_handler to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol unregister_kprobe to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol unregister_chrdev_region to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __unregister_chrdev to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol unregister_blkdev to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __udelay to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol tty_termios_encode_baud_rate to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol tty_std_termios to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol tsc_khz to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol try_wait_for_completion to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol trace_seq_putc to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol trace_seq_printf to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol trace_print_flags_seq to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol trace_handle_return to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol touch_softlockup_watchdog to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol _totalram_pages to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol timer_delete_sync to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol timer_delete to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol timecounter_read to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol timecounter_init to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol timecounter_cyc2time to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol time64_to_tm to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol this_cpu_off to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol tasklet_unlock_wait to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol tasklet_setup to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __tasklet_schedule to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol tasklet_kill to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol tasklet_init to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __tasklet_hi_schedule to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol sys_tz to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol system_wq to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol system_state to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol system_freezing_cnt to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol sysfs_streq to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol sysfs_emit to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol synchronize_rcu to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol synchronize_irq to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __symbol_put to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __symbol_get to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __sw_hweight64 to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __sw_hweight32 to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol strstr to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol strsep to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol strscpy_pad to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol strscpy to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol strrchr to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol strnlen_user to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol strnlen to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol strncpy_from_user to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol strncpy to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol strncmp to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol strncasecmp to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol strlen to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol strlcpy to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol strlcat to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol strim to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol strcspn to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol strcpy to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol strcmp to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol strchr to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol strcat to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol static_key_slow_inc to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol static_key_slow_dec to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol static_key_count to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __stack_chk_fail to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol sscanf to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol sprintf to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol sort to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol sn_region_size to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol snprintf to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol sn_partition_id to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol smp_call_function_single_async to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol smp_call_function_single to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol smp_call_function_many to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol sme_me_mask to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol simple_write_to_buffer to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol simple_strtoull to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol simple_strtoul to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol simple_strtol to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol simple_read_from_buffer to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol si_meminfo to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol sigprocmask to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __sg_page_iter_start to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __sg_page_iter_dma_next to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol sg_next to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol set_normalized_timespec64 to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol set_freezable to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol set_current_groups to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol security_sb_eat_lsm_opts to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol security_free_mnt_opts to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __SCT__tp_func_xdp_exception to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __SCT__preempt_schedule_notrace to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __SCT__preempt_schedule to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __SCT__might_resched to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __SCT__cond_resched to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol scsilun_to_int to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol scsi_command_size_tbl to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol scnprintf to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol schedule_timeout to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol schedule to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol sched_clock_cpu to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol sched_clock to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol round_jiffies to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol rht_bucket_nested_insert to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol rht_bucket_nested to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __rht_bucket_nested to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol rhltable_init to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol rhashtable_insert_slow to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol rhashtable_init to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol rhashtable_free_and_destroy to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol rhashtable_destroy to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol request_threaded_irq to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __request_region to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __request_module to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol remove_wait_queue to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __release_region to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol release_firmware to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol register_shrinker to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol register_reboot_notifier to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __register_nmi_handler to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol register_kprobe to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol register_chrdev_region to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __register_blkdev to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __refrigerator to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol refcount_warn_saturate to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol refcount_dec_if_one to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol refcount_dec_and_mutex_lock to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol recalc_sigpending to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __read_overflow2_field to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol rcu_read_unlock_strict to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __rcu_read_unlock to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __rcu_read_lock to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol rcu_barrier to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol rb_next to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol rb_insert_color to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol rb_first to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol rb_erase to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol _raw_write_unlock_irqrestore to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol _raw_write_unlock_irq to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol _raw_write_unlock_bh to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol _raw_write_unlock to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol _raw_write_trylock to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol _raw_write_lock_irqsave to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol _raw_write_lock_irq to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol _raw_write_lock_bh to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol _raw_write_lock to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol _raw_spin_unlock_irqrestore to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol _raw_spin_unlock_irq to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol _raw_spin_unlock_bh to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol _raw_spin_unlock to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol _raw_spin_trylock_bh to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol _raw_spin_trylock to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol _raw_spin_lock_irqsave to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol _raw_spin_lock_irq to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol _raw_spin_lock_bh to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol _raw_spin_lock to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol _raw_read_unlock_irqrestore to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol _raw_read_unlock_irq to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol _raw_read_unlock_bh to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol _raw_read_unlock to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol _raw_read_lock_irqsave to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol _raw_read_lock_irq to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol _raw_read_lock_bh to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol _raw_read_lock to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol ___ratelimit to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol radix_tree_tag_set to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol radix_tree_next_chunk to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol radix_tree_lookup to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol radix_tree_insert to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol radix_tree_delete to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol queue_work_on to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol queue_delayed_work_on to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol qed_put_iscsi_ops to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol qed_put_eth_ops to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __put_user_8 to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __put_user_4 to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __put_user_2 to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol put_unused_fd to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol ptrs_per_p4d to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol proc_dostring to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol proc_dointvec_minmax to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol proc_dointvec to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __printk_ratelimit to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol _printk to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol print_hex_dump to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol prepare_to_wait_exclusive to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol prepare_to_wait_event to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol prepare_to_wait to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol prandom_u32 to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol posix_acl_alloc to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol physical_mask to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol phys_base to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol pgprot_writecombine to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol pgdir_shift to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol perf_trace_buf_alloc to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol percpu_ref_init to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol percpu_ref_exit to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __per_cpu_offset to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol panic_notifier_list to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol panic to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol page_offset_base to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol page_frag_free to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol on_each_cpu_cond_mask to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __num_online_cpus to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol numa_node to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol ns_to_timespec64 to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol nr_cpu_ids to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol node_to_cpumask_map to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol node_states to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __node_distance to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __ndelay to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol mutex_unlock to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol mutex_trylock to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol mutex_lock_interruptible to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol mutex_lock to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol mutex_is_locked to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __mutex_init to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol msleep_interruptible to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol msleep to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __msecs_to_jiffies to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol mod_timer to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol mod_delayed_work_on to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol memset to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol mem_section to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol mempool_free_slab to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol mempool_free to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol mempool_destroy to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol mempool_create_node to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol mempool_create to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol mempool_alloc_slab to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol mempool_alloc to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol memparse to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol memory_read_from_buffer to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol memmove to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol memdup_user to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol memcpy to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol memcmp to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol memchr_inv to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol mds_idle_clear to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol loops_per_jiffy to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol lookup_bdev to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol lockref_get to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __local_bh_enable_ip to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol llist_add_batch to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __list_del_entry_valid to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __list_add_valid to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol kvmalloc_node to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol kvfree_call_rcu to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol kvfree to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol ktime_get_with_offset to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol ktime_get_ts64 to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol ktime_get_real_ts64 to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol ktime_get_real_seconds to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol ktime_get_coarse_real_ts64 to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol ktime_get to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol kthread_should_stop to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol kthread_delayed_work_timer_fn to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol kthread_complete_and_exit to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol kstrtoull to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol kstrtouint to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol kstrtou8 to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol kstrtou16 to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol kstrtoll to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol kstrtoint to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol kstrtobool to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol kstrdup to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol krealloc to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol kmemdup to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol kmem_cache_create_usercopy to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol kmem_cache_create to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol kmalloc_order_trace to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __kmalloc_node to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __kmalloc to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol kfree to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol kexec_crash_loaded to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol kernel_sigaction to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol kernel_fpu_end to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol kernel_fpu_begin_mask to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol kasprintf to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol jiffies_to_usecs to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol jiffies_to_msecs to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol jiffies_64 to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol jiffies to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol is_vmalloc_addr to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol is_uv_system to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol iscsi_boot_create_host_kset to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol irq_set_affinity_notifier to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol irq_poll_enable to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol irq_poll_disable to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol irq_cpu_rmap_add to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __irq_apply_affinity_hint to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol iowrite32be to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol iounmap to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol ioremap_wc to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol ioremap to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol ioread8 to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol ioread32be to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol ioread16be to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol iomem_resource to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol int_to_scsilun to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol int_pow to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol init_wait_var_entry to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __init_waitqueue_head to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol init_wait_entry to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol init_timer_key to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __init_swait_queue_head to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __init_rwsem to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol in_group_p to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol in_aton to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol in6_pton to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol in4_pton to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol idr_remove to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol idr_preload to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol idr_get_next_ul to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol idr_find to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol idr_destroy to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol idr_alloc_u32 to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol idr_alloc to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol ida_free to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol ida_destroy to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol ida_alloc_range to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __hw_addr_init to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol hugetlb_optimize_vmemmap_key to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol hrtimer_start_range_ns to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol hrtimer_init to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol hrtimer_forward to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol hrtimer_cancel to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol groups_free to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol groups_alloc to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol get_zeroed_page to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __get_user_nocheck_1 to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __get_user_2 to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __get_user_1 to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol get_unused_fd_flags to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol get_random_bytes to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __get_free_pages to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol gcd to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol free_percpu to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol free_pages to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol free_irq_cpu_rmap to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol free_irq to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol free_cpumask_var to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol fortify_panic to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __flush_workqueue to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol flush_work to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol finish_wait to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol _find_next_zero_bit to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol _find_next_bit to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol _find_last_bit to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol _find_first_zero_bit to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol _find_first_bit to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __fentry__ to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol enable_irq to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol empty_zero_page to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol emergency_restart to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol elfcorehdr_addr to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol efi to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __dynamic_pr_debug to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol dump_stack to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol dql_reset to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol dql_completed to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol down_write_trylock to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol down_write to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol down_trylock to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol down_read_trylock to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol down_read to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol down_interruptible to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol downgrade_write to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol down to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol dmi_get_system_info to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol dmi_find_device to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol dma_pool_free to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol dma_pool_destroy to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol dma_pool_alloc to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol disable_irq to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol devmap_managed_key to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol dev_base_lock to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol destroy_workqueue to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol delayed_work_timer_fn to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __delay to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol default_wake_function to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol dca_unregister_notify to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol dca_register_notify to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol current_umask to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol _ctype to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol csum_partial to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol csum_ipv6_magic to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol crc32_le to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol cpu_sibling_map to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __cpu_present_mask to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __cpu_possible_mask to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __cpu_online_mask to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol cpu_number to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol cpumask_local_spread to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol cpu_khz to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol cpu_info to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __cpuhp_setup_state to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __cpuhp_remove_state to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol cpufreq_quick_get to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol cpu_bit_bitmap to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol copy_user_generic_unrolled to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol copy_user_generic_string to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol _copy_to_user to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __copy_overflow to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol _copy_from_user to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __const_udelay to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol congestion_wait to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __cond_resched to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol complete_all to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol complete to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol clock_t_to_jiffies to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __check_object_size to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol cdev_alloc to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol cc_mkdec to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol capable to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol cancel_work_sync to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol cancel_work to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol cancel_delayed_work_sync to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol cancel_delayed_work to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol call_usermodehelper to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol call_srcu to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol call_rcu to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol cachemode2protval to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol boot_cpu_data to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol blocking_notifier_call_chain to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol blk_status_to_errno to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol blk_stack_limits to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol blk_mq_map_queues to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol blkdev_get_by_path to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol blkdev_get_by_dev to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __blk_alloc_disk to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol bitmap_zalloc_node to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol bitmap_zalloc to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __bitmap_xor to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __bitmap_weight to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __bitmap_subset to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __bitmap_set to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol bitmap_release_region to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol bitmap_print_to_pagebuf to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol bitmap_parselist to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __bitmap_or to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __bitmap_intersects to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol bitmap_from_arr32 to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol bitmap_free to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol bitmap_find_free_region to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __bitmap_equal to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __bitmap_clear to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __bitmap_andnot to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __bitmap_and to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol bio_kmalloc to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol bin2hex to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol avenrun to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol autoremove_wake_function to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol atomic_notifier_call_chain to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol _atomic_dec_and_lock to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol async_synchronize_full_domain to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol async_synchronize_full to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol argv_split to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol argv_free to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol arch_touch_nmi_watchdog to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol alloc_workqueue to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __alloc_percpu to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol alloc_pages to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol __alloc_pages to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol alloc_cpu_rmap to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol alloc_cpumask_var to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol alloc_chrdev_region to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol add_wait_queue_exclusive to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol add_wait_queue to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol add_timer to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol acpi_get_table to stablelist (Cestmir Kalina) [RHEL-8864] - kabi: add symbol acpi_disabled to stablelist (Cestmir Kalina) [RHEL-8864] - scsi: lpfc: Prevent use-after-free during rmmod with mapped NVMe rports (Paul Ely) [RHEL-2604] - scsi: lpfc: Early return after marking final NLP_DROPPED flag in dev_loss_tmo (Paul Ely) [RHEL-2604] [5.14.0-362.5.1_3] - x86/mce: Add support for Extended Physical Address MCA changes (Aristeu Rozanski) [2164637] - x86/mce: Define a function to extract ErrorAddr from MCA_ADDR (Aristeu Rozanski) [2164637] - x86/mce: Avoid unnecessary padding in struct mce_bank (Aristeu Rozanski) [2164637] - net/mlx5e: TC, Remove sample and ct limitation (Amir Tzin) [2229736] - net/mlx5e: TC, Remove mirror and ct limitation (Amir Tzin) [2229736] - net/mlx5e: TC, Remove tuple rewrite and ct limitation (Amir Tzin) [2229736] - net/mlx5e: TC, Remove multiple ct actions limitation (Amir Tzin) [2229736] - net/mlx5e: TC, Remove CT action reordering (Amir Tzin) [2229736] - net/mlx5e: CT: Use per action stats (Amir Tzin) [2229736] - net/mlx5e: TC, Move main flow attribute cleanup to helper func (Amir Tzin) [2229736] - net/mlx5e: TC, Remove unused vf_tun variable (Amir Tzin) [2229736] - net/mlx5e: Set default can_offload action (Amir Tzin) [2229736] [5.14.0-362.4.1_3] - Revert 'net: macsec: preserve ingress frame ordering' (Sabrina Dubroca) [RHEL-2248] - nfsd: fix change_info in NFSv4 RENAME replies (Jeffrey Layton) [2218844] - drm/amd/display: fix the white screen issue when >= 64GB DRAM (Mika Penttila) [2231925] [5.14.0-362.3.1_3] - blk-throttle: Fix io statistics for cgroup v1 (Ming Lei) [2208905] - block: make sure local irq is disabled when calling __blkcg_rstat_flush (Ming Lei) [2208905] - blk-cgroup: Flush stats before releasing blkcg_gq (Ming Lei) [2208905] - blk-cgroup: hold queue_lock when removing blkg->q_node (Ming Lei) [2217205] [5.14.0-362.2.1_3] - PCI: hv: Fix a crash in hv_pci_restore_msi_msg() during hibernation (Vitaly Kuznetsov) [2211797] - rhel: Re-add can-dev features that were removed accidentally (Radu Rendec) [2213891] - EDAC/amd64: Add support for ECC on family 19h model 60h-7Fh (Aristeu Rozanski) [2218686] - EDAC/amd64: Remove PCI Function 0 (Aristeu Rozanski) [2218686] - EDAC/amd64: Remove PCI Function 6 (Aristeu Rozanski) [2218686] - EDAC/amd64: Remove scrub rate control for Family 17h and later (Aristeu Rozanski) [2218686] - EDAC/amd64: Don't set up EDAC PCI control on Family 17h+ (Aristeu Rozanski) [2218686] - net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225102] {CVE-2023-3776} [5.14.0-362.1.1_3] - dlm: fix plock lookup when using multiple lockspaces (Alexander Aring) [2234868] - redhat: enable zstream release numbering for rhel 9.3 (Jan Stancek) - redhat: change default dist suffix for RHEL 9.3 (Jan Stancek) - thunderbolt: Fix Thunderbolt 3 display flickering issue on 2nd hot plug onwards (Desnes Nunes) [2233967] - Revert 'firmware: raspberrypi: Fix a leak in 'rpi_firmware_get()'' (Lenny Szubowicz) [2234390] - Revert 'firmware: arm_scmi: Relax base protocol sanity checks on the protocol list' (Lenny Szubowicz) [2234390] - Revert 'firmware: arm_scmi: Fix incorrect error propagation in scmi_voltage_descriptors_get' (Lenny Szubowicz) [2234390] - Revert 'pstore: Add priv field to pstore_record for backend specific use' (Lenny Szubowicz) [2234390] - Revert 'efi: vars: Don't drop lock in the middle of efivar_init()' (Lenny Szubowicz) [2234390] - Revert 'efi: vars: Add thin wrapper around EFI get/set variable interface' (Lenny Szubowicz) [2234390] - Revert 'efi: pstore: Omit efivars caching EFI varstore access layer' (Lenny Szubowicz) [2234390] - Revert 'efi: vars: Use locking version to iterate over efivars linked lists' (Lenny Szubowicz) [2234390] - Revert 'efi: vars: Drop __efivar_entry_iter() helper which is no longer used' (Lenny Szubowicz) [2234390] - Revert 'efi: vars: Remove deprecated 'efivars' sysfs interface' (Lenny Szubowicz) [2234390] - Revert 'efi: vars: Switch to new wrapper layer' (Lenny Szubowicz) [2234390] - Revert 'efi: avoid efivars layer when loading SSDTs from variables' (Lenny Szubowicz) [2234390] - Revert 'efi: vars: Move efivar caching layer into efivarfs' (Lenny Szubowicz) [2234390] - Revert 'firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails' (Lenny Szubowicz) [2234390] - Revert 'firmware: arm_scmi: Add SCMI v3.1 System Power extensions' (Lenny Szubowicz) [2234390] - Revert 'firmware: arm_scmi: Add devm_protocol_acquire helper' (Lenny Szubowicz) [2234390] - Revert 'firmware: arm_scmi: Add SCMI System Power Control driver' (Lenny Szubowicz) [2234390] - Revert 'firmware: arm_scmi: Add SCMI v3.1 powercap protocol basic support' (Lenny Szubowicz) [2234390] - Revert 'firmware: arm_scmi: Generalize the fast channel support' (Lenny Szubowicz) [2234390] - Revert 'firmware: arm_scmi: Add SCMI v3.1 powercap fast channels support' (Lenny Szubowicz) [2234390] - Revert 'include: trace: Add SCMI fast channel tracing' (Lenny Szubowicz) [2234390] - Revert 'firmware: arm_scmi: Use fast channel tracing' (Lenny Szubowicz) [2234390] - Revert 'efi: Fix efi_power_off() not being run before acpi_power_off() when necessary' (Lenny Szubowicz) [2234390] - Revert 'cpufreq: scmi: Use .register_em() to register with energy model' (Lenny Szubowicz) [2234390] - Revert 'cpufreq: scmi: Support the power scale in micro-Watts in SCMI v3.1' (Lenny Szubowicz) [2234390] - Revert 'firmware: arm_scmi: Get detailed power scale from perf' (Lenny Szubowicz) [2234390] - Revert 'firmware: dmi: Use the proper accessor for the version field' (Lenny Szubowicz) [2234390] - Revert 'firmware: arm_scmi: Fix missing kernel-doc in optee' (Lenny Szubowicz) [2234390] - Revert 'firmware: arm_scmi: Improve checks in the info_get operations' (Lenny Szubowicz) [2234390] - Revert 'firmware: arm_scmi: Harden accesses to the sensor domains' (Lenny Szubowicz) [2234390] - Revert 'firmware: arm_scmi: Harden accesses to the reset domains' (Lenny Szubowicz) [2234390] - Revert 'firmware: arm_scmi: Fix the asynchronous reset requests' (Lenny Szubowicz) [2234390] - Revert 'firmware: arm_scmi: Add SCMI PM driver remove routine' (Lenny Szubowicz) [2234390] - Revert 'efi: libstub: Disable struct randomization' (Lenny Szubowicz) [2234390] - Revert 'efi/x86: libstub: remove unused variable' (Lenny Szubowicz) [2234390] - Revert 'efi: capsule-loader: Fix use-after-free in efi_capsule_write' (Lenny Szubowicz) [2234390] - Revert 'efi/libstub: add some missing EFI prototypes' (Lenny Szubowicz) [2234390] - Revert 'efi/libstub: use EFI provided memcpy/memset routines' (Lenny Szubowicz) [2234390] - Revert 'efi/libstub: move efi_system_table global var into separate object' (Lenny Szubowicz) [2234390] - Revert 'efi/dev-path-parser: Refactor _UID handling to use acpi_dev_uid_to_integer()' (Lenny Szubowicz) [2234390] - Revert 'efi/libstub: implement generic EFI zboot' (Lenny Szubowicz) [2234390] - Revert 'efi: libstub: fix type confusion for load_options_size' (Lenny Szubowicz) [2234390] - Revert 'efi: efibc: avoid efivar API for setting variables' (Lenny Szubowicz) [2234390] - Revert 'efi: efibc: Guard against allocation failure' (Lenny Szubowicz) [2234390] - Revert 'efi: libstub: drop pointless get_memory_map() call' (Lenny Szubowicz) [2234390] - Revert 'efi: libstub: check Shim mode using MokSBStateRT' (Lenny Szubowicz) [2234390] - Revert 'Revert 'firmware: arm_scmi: Add clock management to the SCMI power domain'' (Lenny Szubowicz) [2234390] - Revert 'firmware: dmi: Fortify entry point length checks' (Lenny Szubowicz) [2234390] - Revert 'psci: Fix the function type for psci_initcall_t' (Lenny Szubowicz) [2234390] - Revert 'efi: libstub: avoid efi_get_memory_map() for allocating the virt map' (Lenny Szubowicz) [2234390] - Revert 'efi: libstub: simplify efi_get_memory_map() and struct efi_boot_memmap' (Lenny Szubowicz) [2234390] - Revert 'efi: libstub: remove pointless goto kludge' (Lenny Szubowicz) [2234390] - Revert 'efi: libstub: unify initrd loading between architectures' (Lenny Szubowicz) [2234390] - Revert 'efi: libstub: remove DT dependency from generic stub' (Lenny Szubowicz) [2234390] - Revert 'efi: libstub: install boot-time memory map as config table' (Lenny Szubowicz) [2234390] - Revert 'efi/libstub: refactor the initrd measuring functions' (Lenny Szubowicz) [2234390] - Revert 'efi/libstub: measure EFI LoadOptions' (Lenny Szubowicz) [2234390] - Revert 'efi/arm: libstub: move ARM specific code out of generic routines' (Lenny Szubowicz) [2234390] - Revert 'efi: libstub: fix up the last remaining open coded boot service call' (Lenny Szubowicz) [2234390] - Revert 'efi: zboot: create MemoryMapped() device path for the parent if needed' (Lenny Szubowicz) [2234390] - Revert 'efi/arm64: libstub: avoid SetVirtualAddressMap() when possible' (Lenny Szubowicz) [2234390] - Revert 'firmware: raspberrypi: Use dev_err_probe() to simplify code' (Lenny Szubowicz) [2234390] - Revert 'efi: pstore: Follow convention for the efi-pstore backend name' (Lenny Szubowicz) [2234390] - Revert 'efi/cper: Export several helpers for ghes_edac to use' (Lenny Szubowicz) [2234390] - Revert 'efi: libstub: Remove zboot signing from build options' (Lenny Szubowicz) [2234390] - Revert 'efi: ssdt: Don't free memory if ACPI table was loaded successfully' (Lenny Szubowicz) [2234390] - Revert 'efi: efivars: Fix variable writes without query_variable_store()' (Lenny Szubowicz) [2234390] - Revert 'efi: libstub: Give efi_main() asmlinkage qualification' (Lenny Szubowicz) [2234390] - Revert 'efi: libstub: Fix incorrect payload size in zboot header' (Lenny Szubowicz) [2234390] - Revert 'efi: runtime: Don't assume virtual mappings are missing if VA == PA == 0' (Lenny Szubowicz) [2234390] - Revert 'firmware: imx: scu-pd: add missed USB_1_PHY pd' (Lenny Szubowicz) [2234390] - Revert 'efi: random: reduce seed size to 32 bytes' (Lenny Szubowicz) [2234390] - Revert 'efi: random: Use 'ACPI reclaim' memory for random seed' (Lenny Szubowicz) [2234390] - Revert 'firmware: raspberrypi: Introduce rpi_firmware_find_node()' (Lenny Szubowicz) [2234390] - Revert 'firmware: ti_sci: Switch transport to polled mode during system suspend' (Lenny Szubowicz) [2234390] - Revert 'firmware: ti_sci: Use the bitmap API to allocate bitmaps' (Lenny Szubowicz) [2234390] - Revert 'firmware: ti_sci: Use the non-atomic bitmap API when applicable' (Lenny Szubowicz) [2234390] - Revert 'firmware: ti_sci: Fix polled mode during system suspend' (Lenny Szubowicz) [2234390] - Revert 'efi: efivars: Fix variable writes with unsupported query_variable_store()' (Lenny Szubowicz) [2234390] - Revert 'firmware: arm_scmi: Cleanup the core driver removal callback' (Lenny Szubowicz) [2234390] - Revert 'firmware: arm_scmi: Suppress the driver's bind attributes' (Lenny Szubowicz) [2234390] - Revert 'firmware: arm_scmi: Fix devres allocation device in virtio transport' (Lenny Szubowicz) [2234390] - Revert 'firmware: arm_scmi: Fix deferred_tx_wq release on error paths' (Lenny Szubowicz) [2234390] - Revert 'firmware: ti_sci: Use devm_bitmap_zalloc when applicable' (Lenny Szubowicz) [2234390] - Revert 'ARM: 9255/1: efi/dump UEFI runtime page tables for ARM' (Lenny Szubowicz) [2234390] - Revert 'efi: libstub: Drop randomization of runtime memory map' (Lenny Szubowicz) [2234390] - Revert 'efi: libstub: Drop handling of EFI properties table' (Lenny Szubowicz) [2234390] - Revert 'efi: libstub: Deduplicate ftrace command line argument filtering' (Lenny Szubowicz) [2234390] - Revert 'arm64: efi: Move dcache cleaning of loaded image out of efi_enter_kernel()' (Lenny Szubowicz) [2234390] - Revert 'arm64: efi: Avoid dcache_clean_poc() altogether in efi_enter_kernel()' (Lenny Szubowicz) [2234390] - Revert 'arm64: efi: Move efi-entry.S into the libstub source directory' (Lenny Szubowicz) [2234390] - Revert 'efi: libstub: Use local strncmp() implementation unconditionally' (Lenny Szubowicz) [2234390] - Revert 'efi: libstub: Clone memcmp() into the stub' (Lenny Szubowicz) [2234390] - Revert 'efi: libstub: Enable efi_printk() in zboot decompressor' (Lenny Szubowicz) [2234390] - Revert 'efi: libstub: Move screen_info handling to common code' (Lenny Szubowicz) [2234390] - Revert 'efi: libstub: Provide local implementations of strrchr() and memchr()' (Lenny Szubowicz) [2234390] - Revert 'efi: libstub: Factor out EFI stub entrypoint into separate file' (Lenny Szubowicz) [2234390] - Revert 'efi: libstub: Add image code and data size to the zimage metadata' (Lenny Szubowicz) [2234390] - Revert 'efi: libstub: Factor out min alignment and preferred kernel load address' (Lenny Szubowicz) [2234390] - Revert 'efi/arm64: libstub: Split off kernel image relocation for builtin stub' (Lenny Szubowicz) [2234390] - Revert 'efi: libstub: Merge zboot decompressor with the ordinary stub' (Lenny Szubowicz) [2234390] - Revert 'arm64: unwind: add asynchronous unwind tables to kernel and modules' (Lenny Szubowicz) [2234390] - Revert 'arm64: efi: Force the use of SetVirtualAddressMap() on Altra machines' (Lenny Szubowicz) [2234390] - Revert 'efi: libstub: use EFI_LOADER_CODE region when moving the kernel in memory' (Lenny Szubowicz) [2234390] - Revert 'efi: libstub: Implement devicepath support for initrd commandline loader' (Lenny Szubowicz) [2234390] - Revert 'efi: libstub: Permit mixed mode return types other than efi_status_t' (Lenny Szubowicz) [2234390] - Revert 'efi: libstub: Add mixed mode support to command line initrd loader' (Lenny Szubowicz) [2234390] - Revert 'efi: libstub: Undeprecate the command line initrd loader' (Lenny Szubowicz) [2234390] - Revert 'efi: memmap: Move EFI fake memmap support into x86 arch tree' (Lenny Szubowicz) [2234390] - Revert 'efi: Correct comment on efi_memmap_alloc' (Lenny Szubowicz) [2234390] - Revert 'drivers: fix typo in firmware/efi/memmap.c' (Lenny Szubowicz) [2234390] - Revert 'efi: memmap: Move manipulation routines into x86 arch tree' (Lenny Szubowicz) [2234390] - Revert 'efi: pstore: Add module parameter for setting the record size' (Lenny Szubowicz) [2234390] - Revert 'efi: random: combine bootloader provided RNG seed with RNG protocol output' (Lenny Szubowicz) [2234390] - Revert 'firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe()' (Lenny Szubowicz) [2234390] - Revert 'efi: stub: use random seed from EFI variable' (Lenny Szubowicz) [2234390] - Revert 'efi: libstub: Always enable initrd command line loader and bump version' (Lenny Szubowicz) [2234390] - Revert 'firmware: arm_ffa: Move constants to header file' (Lenny Szubowicz) [2234390] - Revert 'efi: Put Linux specific magic number in the DOS header' (Lenny Szubowicz) [2234390] - Revert 'efi: fix NULL-deref in init error path' (Lenny Szubowicz) [2234390] - Revert 'efi: fix userspace infinite retry read efivars after EFI runtime services page fault' (Lenny Szubowicz) [2234390] - Revert 'firmware/sysfb: Fix EFI/VESA format selection' (Lenny Szubowicz) [2234390] - Revert 'firmware: arm_scmi: Clear stale xfer->hdr.status' (Lenny Szubowicz) [2234390] - Revert 'firmware: arm_scmi: Harden shared memory access in fetch_response' (Lenny Szubowicz) [2234390] - Revert 'firmware: arm_scmi: Harden shared memory access in fetch_notification' (Lenny Szubowicz) [2234390] - Revert 'firmware: arm_scmi: Fix virtio channels cleanup on shutdown' (Lenny Szubowicz) [2234390] - Revert 'efi/earlycon: Replace open coded strnchrnul()' (Lenny Szubowicz) [2234390] - Revert 'firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle' (Lenny Szubowicz) [2234390] - Revert 'efi: memmap: Disregard bogus entries instead of returning them' (Lenny Szubowicz) [2234390] - Revert 'efi: verify that variable services are supported' (Lenny Szubowicz) [2234390] - Revert 'efi: efivars: prevent double registration' (Lenny Szubowicz) [2234390] - Revert 'efi/libstub: Add memory attribute protocol definitions' (Lenny Szubowicz) [2234390] - Revert 'efi: Accept version 2 of memory attributes table' (Lenny Szubowicz) [2234390] - Revert 'efi: fix potential NULL deref in efi_mem_reserve_persistent' (Lenny Szubowicz) [2234390] - Revert 'efi: zboot: Use EFI protocol to remap code/data with the right attributes' (Lenny Szubowicz) [2234390] - Revert 'efi: Use standard format for printing the EFI revision' (Lenny Szubowicz) [2234390] - Revert 'efi: Discover BTI support in runtime services regions' (Lenny Szubowicz) [2234390] - Revert 'arm64: efi: Force the use of SetVirtualAddressMap() on eMAG and Altra Max machines' (Lenny Szubowicz) [2234390] - Revert 'efi/libstub: zboot: Mark zboot EFI application as NX compatible' (Lenny Szubowicz) [2234390] - Revert 'efi: earlycon: Reprobe after parsing config tables' (Lenny Szubowicz) [2234390] - Revert 'efi/libstub: smbios: Use length member instead of record struct size' (Lenny Szubowicz) [2234390] - Revert 'arm64: efi: Use SMBIOS processor version to key off Ampere quirk' (Lenny Szubowicz) [2234390] - Revert 'efi/libstub: smbios: Drop unused 'recsize' parameter' (Lenny Szubowicz) [2234390] - Revert 'efi: sysfb_efi: Fix DMI quirks not working for simpledrm' (Lenny Szubowicz) [2234390] - Revert 'efi/libstub: zboot: Add compressed image to make targets' (Lenny Szubowicz) [2234390] - Revert 'efi/libstub: randomalloc: Return EFI_OUT_OF_RESOURCES on failure' (Lenny Szubowicz) [2234390] - Revert 'efi: Bump stub image version for macOS HVF compatibility' (Lenny Szubowicz) [2234390] - Revert 'firmware/sysfb: Fix VESA format selection' (Lenny Szubowicz) [2234390] - Revert 'redhat/configs: update firmware configs' (Lenny Szubowicz) [2234390] - Revert 'ACPI: power: Switch to sys-off handler API' (Lenny Szubowicz) [2234390] - Revert 'gsmi: fix null-deref in gsmi_get_variable' (Lenny Szubowicz) [2234390] - Revert 'efi: efivars: drop kobject from efivars_register()' (Lenny Szubowicz) [2234390] - Revert 'efi: libstub: fix efi_load_initrd_dev_path() kernel-doc comment' (Lenny Szubowicz) [2234390] - Revert 'notifier: Add atomic_notifier_call_chain_is_empty()' (Lenny Szubowicz) [2234390] - Revert 'kernel/reboot: Wrap legacy power-off callbacks into sys-off handlers' (Lenny Szubowicz) [2234390] - Revert 'kernel/reboot: Add do_kernel_power_off()' (Lenny Szubowicz) [2234390] - Revert 'kernel/reboot: Add stub for pm_power_off' (Lenny Szubowicz) [2234390] - Revert 'kernel/reboot: Add kernel_can_power_off()' (Lenny Szubowicz) [2234390] - Revert 'kernel/reboot: Add register_platform_power_off()' (Lenny Szubowicz) [2234390] - Revert 'reboot: Remove pm_power_off_prepare()' (Lenny Szubowicz) [2234390] - Revert 'kernel/reboot: Change registration order of legacy power-off handler' (Lenny Szubowicz) [2234390] - Revert 'kernel/reboot: Use static handler for register_platform_power_off()' (Lenny Szubowicz) [2234390] - Revert 'kernel/reboot: Fix powering off using a non-syscall code paths' (Lenny Szubowicz) [2234390] - Revert 'PM: hibernate: Use kernel_can_power_off()' (Lenny Szubowicz) [2234390] - x86/cpu: Enable STIBP on AMD if Automatic IBRS is enabled (Waiman Long) [2227917] - Documentation/hw-vuln: Document the interaction between IBRS and STIBP (Waiman Long) [2227917] - x86/CPU/AMD: Make sure EFER[AIBRSE] is set (Waiman Long) [2227917] - sched/core: Use empty mask to reset cpumasks in sched_setaffinity() (Waiman Long) [2219681] - cgroup/cpuset: Extend test_cpuset_prs.sh to test remote partition (Waiman Long) [2174568] - cgroup/cpuset: Documentation update for partition (Waiman Long) [2174568] - cgroup/cpuset: Check partition conflict with housekeeping setup (Waiman Long) [2174568] - cgroup/cpuset: Introduce remote partition (Waiman Long) [2174568] - cgroup/cpuset: Add cpuset.cpus.exclusive for v2 (Waiman Long) [2174568] - cgroup/cpuset: Add cpuset.cpus.exclusive.effective for v2 (Waiman Long) [2174568] - cgroup/cpuset: simplify the percpu kthreads check in update_tasks_cpumask() (Waiman Long) [2174568] - cgroup/cpuset: Allow suppression of sched domain rebuild in update_cpumasks_hier() (Waiman Long) [2174568] - cgroup/cpuset: Improve temporary cpumasks handling (Waiman Long) [2174568] - cgroup/cpuset: Extract out CS_CPU_EXCLUSIVE & CS_SCHED_LOAD_BALANCE handling (Waiman Long) [2174568] - cgroup/cpuset: Inherit parent's load balance state in v2 (Waiman Long) [2174568] - cgroup/cpuset: Free DL BW in case can_attach() fails (Waiman Long) [2174568] - sched/deadline: Create DL BW alloc, free & check overflow interface (Waiman Long) [2174568] - cgroup/cpuset: Iterate only if DEADLINE tasks are present (Waiman Long) [2174568] - sched/cpuset: Keep track of SCHED_DEADLINE task in cpusets (Waiman Long) [2174568] - sched/cpuset: Bring back cpuset_mutex (Waiman Long) [2174568] - cgroup/cpuset: Rename functions dealing with DEADLINE accounting (Waiman Long) [2174568] - cgroup/cpuset: Minor updates to test_cpuset_prs.sh (Waiman Long) [2174568] - cgroup/cpuset: Include offline CPUs when tasks' cpumasks in top_cpuset are updated (Waiman Long) [2174568] - cgroup/cpuset: Skip task update if hotplug doesn't affect current cpuset (Waiman Long) [2174568] - kselftest/cgroup: Add cleanup() to test_cpuset_prs.sh (Waiman Long) [2174568] - kselftest/cgroup: Fix gathering number of CPUs (Waiman Long) [2174568] - redhat: configs: Disable CONFIG_CRYPTO_STATS since performance issue for storage (Herbert Xu) [2227964] - redhat: list Z-Jiras in the changelog before Y-Jiras (Herton R. Krzesinski) [5.14.0-362] - smb: client: fix null auth (Scott Mayhew) [2223247] - ice: Fix NULL pointer deref during VF reset (Petr Oros) [2217304] - gfs2: conversion deadlock do_promote bypass (Bob Peterson) [2226861] - gfs2: do_promote cleanup (Andreas Gruenbacher) [2226861] - scsi: lpfc: Remove reftag check in DIF paths (Paul Ely) [2227947] - scsi: lpfc: Modify when a node should be put in device recovery mode during RSCN (Paul Ely) [2227947] - scsi: lpfc: Make fabric zone discovery more robust when handling unsolicited LOGO (Paul Ely) [2227947] - scsi: lpfc: Set Establish Image Pair service parameter only for Target Functions (Paul Ely) [2227947] - scsi: lpfc: Revise ndlp kref handling for dev_loss_tmo_callbk and lpfc_drop_node (Paul Ely) [2227947] - scsi: lpfc: Qualify ndlp discovery state when processing RSCN (Paul Ely) [2227947] - ext4: drop dio overwrite only flag and associated warning (Brian Foster) [2228056] - sched/core: Add __always_inline to schedule_loop() (Crystal Wood) [2232098] - net: openvswitch: add misc error drop reasons (Adrian Moreno) [2232283] - net: openvswitch: add meter drop reason (Adrian Moreno) [2232283] - net: openvswitch: add explicit drop action (Adrian Moreno) [2232283] - net: openvswitch: add action error drop reason (Adrian Moreno) [2232283] - net: openvswitch: add last-action drop reason (Adrian Moreno) [2232283] - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2225513] {CVE-2023-4128} - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2225513] {CVE-2023-4128} - net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2225513] {CVE-2023-4128} - x86/kasan: Populate shadow for shared chunk of the CPU entry area (Rafael Aquini) [2233699] - x86/kasan: Add helpers to align shadow addresses up and down (Rafael Aquini) [2233699] - x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names (Rafael Aquini) [2233699] - x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area (Rafael Aquini) [2233699] - x86/mm: Recompute physical address for every page of per-CPU CEA mapping (Rafael Aquini) [2233699] [5.14.0-361] - watch_queue: Free the page array when watch_queue is dismantled (Carlos Maiolino) [2231268] - watch_queue: Actually free the watch (Carlos Maiolino) [2231268] - Update tree for CI (kpet-db) to autosd-rt from autosd-rhivos-rt (bgrech) - x86/sev: Do not try to parse for the CC blob on non-AMD hardware (Tao Liu) [2182562] - gfs2: Fix freeze consistency check in gfs2_trans_add_meta (Andreas Gruenbacher) [2228849] - gfs2: gfs2_freeze_lock_shared cleanup (Andreas Gruenbacher) [2228849] - gfs2: Replace sd_freeze_state with SDF_FROZEN flag (Andreas Gruenbacher) [2228849] - gfs2: Rework freeze / thaw logic (Andreas Gruenbacher) [2228849] - gfs2: Rename SDF_{FS_FROZEN => FREEZE_INITIATOR} (Andreas Gruenbacher) [2228849] - gfs2: Reconfiguring frozen filesystem already rejected (Andreas Gruenbacher) [2228849] - gfs2: Rename gfs2_freeze_lock{ => _shared } (Andreas Gruenbacher) [2228849] - gfs2: Rename the {freeze,thaw}_super callbacks (Andreas Gruenbacher) [2228849] - gfs2: Rename remaining 'transaction' glock references (Andreas Gruenbacher) [2228849] - net: mana: Use the correct WQE count for ringing RQ doorbell (Bandan Das) [2220940] - net: mana: Batch ringing RX queue doorbell on receiving packets (Bandan Das) [2220940] - net: mana: use vmalloc_array and vcalloc (Bandan Das) [2220940] - net: mana: Add support for vlan tagging (Bandan Das) [2220940] - net: mana: Fix perf regression: remove rx_cqes, tx_cqes counters (Bandan Das) [2220940] - net: mana: Check if netdev/napi_alloc_frag returns single page (Bandan Das) [2220940] - net: mana: Rename mana_refill_rxoob and remove some empty lines (Bandan Das) [2220940] - net: mana: Add support for jumbo frame (Bandan Das) [2220940] - net: mana: Enable RX path to handle various MTU sizes (Bandan Das) [2220940] - net: mana: Refactor RX buffer allocation code to prepare for various MTU (Bandan Das) [2220940] - net: mana: Use napi_build_skb in RX path (Bandan Das) [2220940] - net: mana: Remove redundant pci_clear_master (Bandan Das) [2220940] - net: mana: Add new MANA VF performance counters for easier troubleshooting (Bandan Das) [2220940] [5.14.0-360] - PM: hibernate: Use kernel_can_power_off() (Sebastian Ott) [2183343] - kernel/reboot: Fix powering off using a non-syscall code paths (Sebastian Ott) [2183343] - kernel/reboot: Use static handler for register_platform_power_off() (Sebastian Ott) [2183343] - kernel/reboot: Change registration order of legacy power-off handler (Sebastian Ott) [2183343] - reboot: Remove pm_power_off_prepare() (Sebastian Ott) [2183343] - kernel/reboot: Add register_platform_power_off() (Sebastian Ott) [2183343] - kernel/reboot: Add kernel_can_power_off() (Sebastian Ott) [2183343] - kernel/reboot: Add stub for pm_power_off (Sebastian Ott) [2183343] - kernel/reboot: Add do_kernel_power_off() (Sebastian Ott) [2183343] - kernel/reboot: Wrap legacy power-off callbacks into sys-off handlers (Sebastian Ott) [2183343] - notifier: Add atomic_notifier_call_chain_is_empty() (Sebastian Ott) [2183343] - efi: libstub: fix efi_load_initrd_dev_path() kernel-doc comment (Sebastian Ott) [2183343] - efi: efivars: drop kobject from efivars_register() (Sebastian Ott) [2183343] - gsmi: fix null-deref in gsmi_get_variable (Sebastian Ott) [2183343] - ACPI: power: Switch to sys-off handler API (Sebastian Ott) [2183343] - redhat/configs: update firmware configs (Sebastian Ott) [2183343] - firmware/sysfb: Fix VESA format selection (Sebastian Ott) [2183343] - efi: Bump stub image version for macOS HVF compatibility (Sebastian Ott) [2183343] - efi/libstub: randomalloc: Return EFI_OUT_OF_RESOURCES on failure (Sebastian Ott) [2183343] - efi/libstub: zboot: Add compressed image to make targets (Sebastian Ott) [2183343] - efi: sysfb_efi: Fix DMI quirks not working for simpledrm (Sebastian Ott) [2183343] - efi/libstub: smbios: Drop unused 'recsize' parameter (Sebastian Ott) [2183343] - arm64: efi: Use SMBIOS processor version to key off Ampere quirk (Sebastian Ott) [2183343] - efi/libstub: smbios: Use length member instead of record struct size (Sebastian Ott) [2183343] - efi: earlycon: Reprobe after parsing config tables (Sebastian Ott) [2183343] - efi/libstub: zboot: Mark zboot EFI application as NX compatible (Sebastian Ott) [2183343] - arm64: efi: Force the use of SetVirtualAddressMap() on eMAG and Altra Max machines (Sebastian Ott) [2183343] - efi: Discover BTI support in runtime services regions (Sebastian Ott) [2183343] - efi: Use standard format for printing the EFI revision (Sebastian Ott) [2183343] - efi: zboot: Use EFI protocol to remap code/data with the right attributes (Sebastian Ott) [2183343] - efi: fix potential NULL deref in efi_mem_reserve_persistent (Sebastian Ott) [2183343] - efi: Accept version 2 of memory attributes table (Sebastian Ott) [2183343] - efi/libstub: Add memory attribute protocol definitions (Sebastian Ott) [2183343] - efi: efivars: prevent double registration (Sebastian Ott) [2183343] - efi: verify that variable services are supported (Sebastian Ott) [2183343] - efi: memmap: Disregard bogus entries instead of returning them (Sebastian Ott) [2183343] - firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle (Sebastian Ott) [2183343] - efi/earlycon: Replace open coded strnchrnul() (Sebastian Ott) [2183343] - firmware: arm_scmi: Fix virtio channels cleanup on shutdown (Sebastian Ott) [2183343] - firmware: arm_scmi: Harden shared memory access in fetch_notification (Sebastian Ott) [2183343] - firmware: arm_scmi: Harden shared memory access in fetch_response (Sebastian Ott) [2183343] - firmware: arm_scmi: Clear stale xfer->hdr.status (Sebastian Ott) [2183343] - firmware/sysfb: Fix EFI/VESA format selection (Sebastian Ott) [2183343] - efi: fix userspace infinite retry read efivars after EFI runtime services page fault (Sebastian Ott) [2183343] - efi: fix NULL-deref in init error path (Sebastian Ott) [2183343] - efi: Put Linux specific magic number in the DOS header (Sebastian Ott) [2183343] - firmware: arm_ffa: Move constants to header file (Sebastian Ott) [2183343] - efi: libstub: Always enable initrd command line loader and bump version (Sebastian Ott) [2183343] - efi: stub: use random seed from EFI variable (Sebastian Ott) [2183343] - firmware: raspberrypi: fix possible memory leak in rpi_firmware_probe() (Sebastian Ott) [2183343] - efi: random: combine bootloader provided RNG seed with RNG protocol output (Sebastian Ott) [2183343] - efi: pstore: Add module parameter for setting the record size (Sebastian Ott) [2183343] - efi: memmap: Move manipulation routines into x86 arch tree (Sebastian Ott) [2183343] - drivers: fix typo in firmware/efi/memmap.c (Sebastian Ott) [2183343] - efi: Correct comment on efi_memmap_alloc (Sebastian Ott) [2183343] - efi: memmap: Move EFI fake memmap support into x86 arch tree (Sebastian Ott) [2183343] - efi: libstub: Undeprecate the command line initrd loader (Sebastian Ott) [2183343] - efi: libstub: Add mixed mode support to command line initrd loader (Sebastian Ott) [2183343] - efi: libstub: Permit mixed mode return types other than efi_status_t (Sebastian Ott) [2183343] - efi: libstub: Implement devicepath support for initrd commandline loader (Sebastian Ott) [2183343] - efi: libstub: use EFI_LOADER_CODE region when moving the kernel in memory (Sebastian Ott) [2183343] - arm64: efi: Force the use of SetVirtualAddressMap() on Altra machines (Sebastian Ott) [2183343] - arm64: unwind: add asynchronous unwind tables to kernel and modules (Sebastian Ott) [2183343] - efi: libstub: Merge zboot decompressor with the ordinary stub (Sebastian Ott) [2183343] - efi/arm64: libstub: Split off kernel image relocation for builtin stub (Sebastian Ott) [2183343] - efi: libstub: Factor out min alignment and preferred kernel load address (Sebastian Ott) [2183343] - efi: libstub: Add image code and data size to the zimage metadata (Sebastian Ott) [2183343] - efi: libstub: Factor out EFI stub entrypoint into separate file (Sebastian Ott) [2183343] - efi: libstub: Provide local implementations of strrchr() and memchr() (Sebastian Ott) [2183343] - efi: libstub: Move screen_info handling to common code (Sebastian Ott) [2183343] - efi: libstub: Enable efi_printk() in zboot decompressor (Sebastian Ott) [2183343] - efi: libstub: Clone memcmp() into the stub (Sebastian Ott) [2183343] - efi: libstub: Use local strncmp() implementation unconditionally (Sebastian Ott) [2183343] - arm64: efi: Move efi-entry.S into the libstub source directory (Sebastian Ott) [2183343] - arm64: efi: Avoid dcache_clean_poc() altogether in efi_enter_kernel() (Sebastian Ott) [2183343] - arm64: efi: Move dcache cleaning of loaded image out of efi_enter_kernel() (Sebastian Ott) [2183343] - efi: libstub: Deduplicate ftrace command line argument filtering (Sebastian Ott) [2183343] - efi: libstub: Drop handling of EFI properties table (Sebastian Ott) [2183343] - efi: libstub: Drop randomization of runtime memory map (Sebastian Ott) [2183343] - ARM: 9255/1: efi/dump UEFI runtime page tables for ARM (Sebastian Ott) [2183343] - firmware: ti_sci: Use devm_bitmap_zalloc when applicable (Sebastian Ott) [2183343] - firmware: arm_scmi: Fix deferred_tx_wq release on error paths (Sebastian Ott) [2183343] - firmware: arm_scmi: Fix devres allocation device in virtio transport (Sebastian Ott) [2183343] - firmware: arm_scmi: Suppress the driver's bind attributes (Sebastian Ott) [2183343] - firmware: arm_scmi: Cleanup the core driver removal callback (Sebastian Ott) [2183343] - efi: efivars: Fix variable writes with unsupported query_variable_store() (Sebastian Ott) [2183343] - firmware: ti_sci: Fix polled mode during system suspend (Sebastian Ott) [2183343] - firmware: ti_sci: Use the non-atomic bitmap API when applicable (Sebastian Ott) [2183343] - firmware: ti_sci: Use the bitmap API to allocate bitmaps (Sebastian Ott) [2183343] - firmware: ti_sci: Switch transport to polled mode during system suspend (Sebastian Ott) [2183343] - firmware: raspberrypi: Introduce rpi_firmware_find_node() (Sebastian Ott) [2183343] - efi: random: Use 'ACPI reclaim' memory for random seed (Sebastian Ott) [2183343] - efi: random: reduce seed size to 32 bytes (Sebastian Ott) [2183343] - firmware: imx: scu-pd: add missed USB_1_PHY pd (Sebastian Ott) [2183343] - efi: runtime: Don't assume virtual mappings are missing if VA == PA == 0 (Sebastian Ott) [2183343] - efi: libstub: Fix incorrect payload size in zboot header (Sebastian Ott) [2183343] - efi: libstub: Give efi_main() asmlinkage qualification (Sebastian Ott) [2183343] - efi: efivars: Fix variable writes without query_variable_store() (Sebastian Ott) [2183343] - efi: ssdt: Don't free memory if ACPI table was loaded successfully (Sebastian Ott) [2183343] - efi: libstub: Remove zboot signing from build options (Sebastian Ott) [2183343] - efi/cper: Export several helpers for ghes_edac to use (Sebastian Ott) [2183343] - efi: pstore: Follow convention for the efi-pstore backend name (Sebastian Ott) [2183343] - firmware: raspberrypi: Use dev_err_probe() to simplify code (Sebastian Ott) [2183343] - efi/arm64: libstub: avoid SetVirtualAddressMap() when possible (Sebastian Ott) [2183343] - efi: zboot: create MemoryMapped() device path for the parent if needed (Sebastian Ott) [2183343] - efi: libstub: fix up the last remaining open coded boot service call (Sebastian Ott) [2183343] - efi/arm: libstub: move ARM specific code out of generic routines (Sebastian Ott) [2183343] - efi/libstub: measure EFI LoadOptions (Sebastian Ott) [2183343] - efi/libstub: refactor the initrd measuring functions (Sebastian Ott) [2183343] - efi: libstub: install boot-time memory map as config table (Sebastian Ott) [2183343] - efi: libstub: remove DT dependency from generic stub (Sebastian Ott) [2183343] - efi: libstub: unify initrd loading between architectures (Sebastian Ott) [2183343] - efi: libstub: remove pointless goto kludge (Sebastian Ott) [2183343] - efi: libstub: simplify efi_get_memory_map() and struct efi_boot_memmap (Sebastian Ott) [2183343] - efi: libstub: avoid efi_get_memory_map() for allocating the virt map (Sebastian Ott) [2183343] - psci: Fix the function type for psci_initcall_t (Sebastian Ott) [2183343] - firmware: dmi: Fortify entry point length checks (Sebastian Ott) [2183343] - Revert 'firmware: arm_scmi: Add clock management to the SCMI power domain' (Sebastian Ott) [2183343] - efi: libstub: check Shim mode using MokSBStateRT (Sebastian Ott) [2183343] - efi: libstub: drop pointless get_memory_map() call (Sebastian Ott) [2183343] - efi: efibc: Guard against allocation failure (Sebastian Ott) [2183343] - efi: efibc: avoid efivar API for setting variables (Sebastian Ott) [2183343] - efi: libstub: fix type confusion for load_options_size (Sebastian Ott) [2183343] - efi/libstub: implement generic EFI zboot (Sebastian Ott) [2183343] - efi/dev-path-parser: Refactor _UID handling to use acpi_dev_uid_to_integer() (Sebastian Ott) [2183343] - efi/libstub: move efi_system_table global var into separate object (Sebastian Ott) [2183343] - efi/libstub: use EFI provided memcpy/memset routines (Sebastian Ott) [2183343] - efi/libstub: add some missing EFI prototypes (Sebastian Ott) [2183343] - efi: capsule-loader: Fix use-after-free in efi_capsule_write (Sebastian Ott) [2183343] - efi/x86: libstub: remove unused variable (Sebastian Ott) [2183343] - efi: libstub: Disable struct randomization (Sebastian Ott) [2183343] - firmware: arm_scmi: Add SCMI PM driver remove routine (Sebastian Ott) [2183343] - firmware: arm_scmi: Fix the asynchronous reset requests (Sebastian Ott) [2183343] - firmware: arm_scmi: Harden accesses to the reset domains (Sebastian Ott) [2183343] - firmware: arm_scmi: Harden accesses to the sensor domains (Sebastian Ott) [2183343] - firmware: arm_scmi: Improve checks in the info_get operations (Sebastian Ott) [2183343] - firmware: arm_scmi: Fix missing kernel-doc in optee (Sebastian Ott) [2183343] - firmware: dmi: Use the proper accessor for the version field (Sebastian Ott) [2183343] - firmware: arm_scmi: Get detailed power scale from perf (Sebastian Ott) [2183343] - cpufreq: scmi: Support the power scale in micro-Watts in SCMI v3.1 (Sebastian Ott) [2183343] - cpufreq: scmi: Use .register_em() to register with energy model (Sebastian Ott) [2183343] - efi: Fix efi_power_off() not being run before acpi_power_off() when necessary (Sebastian Ott) [2183343] - firmware: arm_scmi: Use fast channel tracing (Sebastian Ott) [2183343] - include: trace: Add SCMI fast channel tracing (Sebastian Ott) [2183343] - firmware: arm_scmi: Add SCMI v3.1 powercap fast channels support (Sebastian Ott) [2183343] - firmware: arm_scmi: Generalize the fast channel support (Sebastian Ott) [2183343] - firmware: arm_scmi: Add SCMI v3.1 powercap protocol basic support (Sebastian Ott) [2183343] - firmware: arm_scmi: Add SCMI System Power Control driver (Sebastian Ott) [2183343] - firmware: arm_scmi: Add devm_protocol_acquire helper (Sebastian Ott) [2183343] - firmware: arm_scmi: Add SCMI v3.1 System Power extensions (Sebastian Ott) [2183343] - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Sebastian Ott) [2183343] - efi: vars: Move efivar caching layer into efivarfs (Sebastian Ott) [2183343] - efi: avoid efivars layer when loading SSDTs from variables (Sebastian Ott) [2183343] - efi: vars: Switch to new wrapper layer (Sebastian Ott) [2183343] - efi: vars: Remove deprecated 'efivars' sysfs interface (Sebastian Ott) [2183343] - efi: vars: Drop __efivar_entry_iter() helper which is no longer used (Sebastian Ott) [2183343] - efi: vars: Use locking version to iterate over efivars linked lists (Sebastian Ott) [2183343] - efi: pstore: Omit efivars caching EFI varstore access layer (Sebastian Ott) [2183343] - efi: vars: Add thin wrapper around EFI get/set variable interface (Sebastian Ott) [2183343] - efi: vars: Don't drop lock in the middle of efivar_init() (Sebastian Ott) [2183343] - pstore: Add priv field to pstore_record for backend specific use (Sebastian Ott) [2183343] - firmware: arm_scmi: Fix incorrect error propagation in scmi_voltage_descriptors_get (Sebastian Ott) [2183343] - firmware: arm_scmi: Relax base protocol sanity checks on the protocol list (Sebastian Ott) [2183343] - firmware: raspberrypi: Fix a leak in 'rpi_firmware_get()' (Sebastian Ott) [2183343] - redhat: stop tainting the kernel with virtio-mem (David Hildenbrand) [2228379] - x86/mm: Ease W^X enforcement back to just a warning (Ani Sinha) [2228318] - x86/mm: Disable W^X detection and enforcement on 32-bit (Ani Sinha) [2228318] - x86/mm/32: Fix W^X detection when page tables do not support NX (Ani Sinha) [2228318] - drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues (Karol Herbst) [2229988] - redhat/configs: enable CONFIG_INET_DIAG_DESTROY (Andrea Claudi) [RHEL-212] - KVM: VMX: Don't fudge CR0 and CR4 for restricted L2 guest (Maxim Levitsky) [2225079] - KVM: x86: Disallow KVM_SET_SREGS{2} if incoming CR0 is invalid (Maxim Levitsky) [2225079] - KVM: Grab a reference to KVM for VM and vCPU stats file descriptors (Maxim Levitsky) [2225079] - Revert 'KVM: SVM: Skip WRMSR fastpath on VM-Exit if next RIP isn't valid' (Maxim Levitsky) [2225079] - KVM: x86: Acquire SRCU read lock when handling fastpath MSR writes (Maxim Levitsky) [2225079] - KVM: x86/irq: Conditionally register IRQ bypass consumer again (Maxim Levitsky) [2225079] - KVM: X86: Use GFP_KERNEL_ACCOUNT for pid_table in ipiv (Maxim Levitsky) [2225079] - KVM: x86: check the kvm_cpu_get_interrupt result before using it (Maxim Levitsky) [2225079] - KVM: x86: VMX: set irr_pending in kvm_apic_update_irr (Maxim Levitsky) [2225079] - KVM: x86: VMX: __kvm_apic_update_irr must update the IRR atomically (Maxim Levitsky) [2225079] - KVM: SVM: WARN, but continue, if misc_cg_set_capacity() fails (Maxim Levitsky) [2225079] - KVM: x86/cpuid: Add AMD CPUID ExtPerfMonAndDbg leaf 0x80000022 (Maxim Levitsky) [2225079] - KVM: x86/svm/pmu: Add AMD PerfMonV2 support (Maxim Levitsky) [2225079] - KVM: x86/cpuid: Add a KVM-only leaf to redirect AMD PerfMonV2 flag (Maxim Levitsky) [2225079] - KVM: x86/pmu: Constrain the num of guest counters with kvm_pmu_cap (Maxim Levitsky) [2225079] - KVM: x86/pmu: Advertise PERFCTR_CORE iff the min nr of counters is met (Maxim Levitsky) [2225079] - KVM: x86/pmu: Disable vPMU if the minimum num of counters isn't met (Maxim Levitsky) [2225079] - KVM: x86: Explicitly zero cpuid '0xa' leaf when PMU is disabled (Maxim Levitsky) [2225079] - KVM: x86/pmu: Provide Intel PMU's pmc_is_enabled() as generic x86 code (Maxim Levitsky) [2225079] - KVM: x86/pmu: Move handling PERF_GLOBAL_CTRL and friends to common x86 (Maxim Levitsky) [2225079] - KVM: x86/pmu: Reject userspace attempts to set reserved GLOBAL_STATUS bits (Maxim Levitsky) [2225079] - KVM: x86/pmu: Move reprogram_counters() to pmu.h (Maxim Levitsky) [2225079] - KVM: x86/pmu: Rename global_ovf_ctrl_mask to global_status_mask (Maxim Levitsky) [2225079] - KVM: SVM: enhance info printk's in SEV init (Maxim Levitsky) [2225079] - KVM: selftests: Add test for race in kvm_recalculate_apic_map() (Maxim Levitsky) [2225079] - KVM: x86: Bail from kvm_recalculate_phys_map() if x2APIC ID is out-of-bounds (Maxim Levitsky) [2225079] - KVM: SVM: Invoke trace_kvm_exit() for fastpath VM-Exits (Maxim Levitsky) [2225079] - KVM: x86: Account fastpath-only VM-Exits in vCPU stats (Maxim Levitsky) [2225079] - KVM: SVM: vNMI pending bit is V_NMI_PENDING_MASK not V_NMI_BLOCKING_MASK (Maxim Levitsky) [2225079] - KVM: x86/mmu: Grab memslot for correct address space in NX recovery worker (Maxim Levitsky) [2225079] - KVM: VMX: Inject #GP, not #UD, if SGX2 ENCLS leafs are unsupported (Maxim Levitsky) [2225079] - KVM: VMX: Inject #GP on ENCLS if vCPU has paging disabled (CR0.PG==0) (Maxim Levitsky) [2225079] - KVM: VMX: restore vmx_vmexit alignment (Maxim Levitsky) [2225079] - KVM: Don't kfree(NULL) on kzalloc() failure in kvm_assign_ioeventfd_idx() (Maxim Levitsky) [2225079] - KVM: SVM: Remove TSS reloading code after VMEXIT (Maxim Levitsky) [2225079] - KVM: Clean up kvm_vm_ioctl_create_vcpu() (Maxim Levitsky) [2225079] - KVM: allow KVM_BUG/KVM_BUG_ON to handle 64-bit cond (Maxim Levitsky) [2225079] - KVM: VMX: Use proper accessor to read guest CR4 in handle_desc() (Maxim Levitsky) [2225079] - KVM: VMX: Treat UMIP as emulated if and only if the host doesn't have UMIP (Maxim Levitsky) [2225079] - KVM: VMX: add MSR_IA32_TSX_CTRL into msrs_to_save (Maxim Levitsky) [2225079] - KVM: x86: Don't adjust guest's CPUID.0x12.1 (allowed SGX enclave XFRM) (Maxim Levitsky) [2225079] - KVM: VMX: Don't rely _only_ on CPUID to enforce XCR0 restrictions for ECREATE (Maxim Levitsky) [2225079] - KVM: VMX: Fix header file dependency of asm/vmx.h (Maxim Levitsky) [2225079] - KVM: x86: Filter out XTILE_CFG if XTILE_DATA isn't permitted (Maxim Levitsky) [2225079] - KVM: x86: Add a helper to handle filtering of unpermitted XCR0 features (Maxim Levitsky) [2225079] - KVM: nVMX: Emulate NOPs in L2, and PAUSE if it's not intercepted (Maxim Levitsky) [2225079] - KVM: x86/pmu: Prevent the PMU from counting disallowed events (Maxim Levitsky) [2225079] - KVM: x86/pmu: Rewrite reprogram_counters() to improve performance (Maxim Levitsky) [2225079] - KVM: VMX: Refactor intel_pmu_{g,}set_msr() to align with other helpers (Maxim Levitsky) [2225079] - KVM: x86/pmu: Rename pmc_is_enabled() to pmc_is_globally_enabled() (Maxim Levitsky) [2225079] - KVM: x86/pmu: Disallow legacy LBRs if architectural LBRs are available (Maxim Levitsky) [2225079] - KVM: x86/pmu: Zero out pmu->all_valid_pmc_idx each time it's refreshed (Maxim Levitsky) [2225079] - KVM: VMX: Use is_64_bit_mode() to check 64-bit mode in SGX handler (Maxim Levitsky) [2225079] - KVM: x86: Assert that the emulator doesn't load CS with garbage in !RM (Maxim Levitsky) [2225079] - KVM: nSVM: Implement support for nested VNMI (Maxim Levitsky) [2225079] - KVM: x86: Add support for SVM's Virtual NMI (Maxim Levitsky) [2225079] - KVM: x86: Route pending NMIs from userspace through process_nmi() (Maxim Levitsky) [2225079] - KVM: SVM: Add definitions for new bits in VMCB::int_ctrl related to vNMI (Maxim Levitsky) [2225079] - x86/cpufeatures: Redefine synthetic virtual NMI bit as AMD's 'real' vNMI (Maxim Levitsky) [2225079] - KVM: x86: Save/restore all NMIs when multiple NMIs are pending (Maxim Levitsky) [2225079] - KVM: x86: Tweak the code and comment related to handling concurrent NMIs (Maxim Levitsky) [2225079] - KVM: x86: Raise an event request when processing NMIs if an NMI is pending (Maxim Levitsky) [2225079] - KVM: SVM: add wrappers to enable/disable IRET interception (Maxim Levitsky) [2225079] - KVM: nSVM: Raise event on nested VM exit if L1 doesn't intercept IRQs (Maxim Levitsky) [2225079] - KVM: nSVM: Disable intercept of VINTR if saved L1 host RFLAGS.IF is 0 (Maxim Levitsky) [2225079] - KVM: nSVM: Don't sync vmcb02 V_IRQ back to vmcb12 if KVM (L0) is intercepting VINTR (Maxim Levitsky) [2225079] - KVM: x86: Use boolean return value for is_{pae,pse,paging}() (Maxim Levitsky) [2225079] - KVM: SVM: Fix benign 'bool vs. int' comparison in svm_set_cr0() (Maxim Levitsky) [2225079] - KVM: PPC: Make KVM_CAP_IRQFD_RESAMPLE platform dependent (Maxim Levitsky) [2225079] - KVM: Ensure lockdep knows about kvm->lock vs. vcpu->mutex ordering rule (Maxim Levitsky) [2225079] - KVM: selftests: Build access_tracking_perf_test for arm64 (Maxim Levitsky) [2225079] - virtio-pci: Fix legacy device flag setting error in probe (Cindy Lu) [RHEL-814] - vdpa/mlx5: Fix crash on shutdown for when no ndev exists (Cindy Lu) [RHEL-814] - vdpa/mlx5: Delete control vq iotlb in destroy_mr only when necessary (Cindy Lu) [RHEL-814] - vdpa/mlx5: Fix mr->initialized semantics (Cindy Lu) [RHEL-814] [5.14.0-359] - vxlan: fix GRO with VXLAN-GPE (Jiri Benc) [2209627] - vxlan: generalize vxlan_parse_gpe_hdr and remove unused args (Jiri Benc) [2209627] - vxlan: calculate correct header length for GPE (Jiri Benc) [2209627] - redhat/configs: turn on the framework for SPI NOR for ARM (Steve Best) [2223027] - dm cache policy smq: ensure IO doesn't prevent cleaner policy progress (Benjamin Marzinski) [2159623] - selftests: mptcp: join: fix 'implicit EP' test (Andrea Claudi) [2109139] - selftests: mptcp: join: fix 'delete and re-add' test (Andrea Claudi) [2109139] - net: tap_open(): set sk_uid from current_fsuid() (Laszlo Ersek) [2229506] {CVE-2023-4194} - net: tun_chr_open(): set sk_uid from current_fsuid() (Laszlo Ersek) [2229506] {CVE-2023-4194} - scsi: storvsc: Remove errant duplicate code (Cathy Avery) [2224931] - scsi: storvsc: Limit max_sectors for virtual Fibre Channel devices (Cathy Avery) [2224931] - net/mlx5: Register a unique thermal zone per device (Mohammad Kabat) [2210257] - net/mlx5: Implement thermal zone (Mohammad Kabat) [2210257] - redhat/configs: enable Tegra114 SPI controller (Mark Salter) [2232430] - redhat: add IMA certificates (Coiby Xu) [1870705] - locking: 9.3 KRTS JiraReadiness exercise (John B. Wyatt IV) [RHEL-981] [5.14.0-358] - KVM: SEV: remove ghcb variable declarations (Vitaly Kuznetsov) [2213808] - KVM: SEV: only access GHCB fields once (Vitaly Kuznetsov) [2213808] {CVE-2023-4155} - KVM: SEV: snapshot the GHCB before accessing it (Vitaly Kuznetsov) [2213808] {CVE-2023-4155} - usb: typec: ucsi: Mark dGPUs as DEVICE scope (Desnes Nunes) [2222462] - i2c: designware-pci: Switch to use i2c_new_ccgx_ucsi() (Desnes Nunes) [2222462] - i2c: nvidia-gpu: Convert to use dev_err_probe() (Desnes Nunes) [2222462] - i2c: nvidia-gpu: Use temporary variable for struct device (Desnes Nunes) [2222462] - i2c: nvidia-gpu: Switch to use i2c_new_ccgx_ucsi() (Desnes Nunes) [2222462] - i2c: Introduce common module to instantiate CCGx UCSI (Desnes Nunes) [2222462] - power: supply: Fix logic checking if system is running from battery (Desnes Nunes) [2222462] - hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition (Chris von Recklinghausen) [2184581] {CVE-2023-1855} - netfilter: nf_tables: unbind non-anonymous set if rule construction fails (Phil Sutter) [2213271] {CVE-2023-3390} - netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain (Phil Sutter) [2213271] {CVE-2023-3390} - netfilter: nf_tables: fix chain binding transaction logic (Phil Sutter) [2213271] {CVE-2023-3390} - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE (Phil Sutter) [2213271] {CVE-2023-3390} - wifi: rtw88: unlock on error path in rtw_ops_add_interface() (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: check only affected links (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: send time sync only if needed (Inigo Huguet) [2196821] - wifi: clean up erroneously introduced file (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: Handle return value for iwl_mvm_sta_init (Inigo Huguet) [2196821] - wifi: rtw88: delete timer and free skb queue when unloading (Inigo Huguet) [2196821] - wifi: cfg80211: Fix return value in scan logic (Inigo Huguet) [2196821] - Revert 'wifi: ath11k: Enable threaded NAPI' (Inigo Huguet) [2196821] - wifi: cfg80211: fix receiving mesh packets without RFC1042 header (Inigo Huguet) [2196821] - wifi: mt76: mt7921e: fix init command fail with enabled device (Inigo Huguet) [2196821] - wifi: ath9k: convert msecs to jiffies where needed (Inigo Huguet) [2196821] - wifi: ath11k: Add missing check for ioremap (Inigo Huguet) [2196821] - wifi: ath11k: fix memory leak in WMI firmware stats (Inigo Huguet) [2196821] - wifi: ath9k: Fix possible stall on ath9k_txq_list_has_key() (Inigo Huguet) [2196821] - wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: avoid baid size integer overflow (Inigo Huguet) [2196821] - wifi: rtw88: process VO packets without workqueue to avoid PTK rekey failed (Inigo Huguet) [2196821] - wifi: rtw88: Fix action frame transmission fail before association (Inigo Huguet) [2196821] - wifi: iwlwifi: add a few rate index validity checks (Inigo Huguet) [2196821] - wifi: iwlwifi: Validate slots_num before allocating memory (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: Validate tid is in valid range before using it (Inigo Huguet) [2196821] - wifi: iwlwifi: pcie: fix NULL pointer dereference in iwl_pcie_irq_rx_msix_handler() (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: check link during TX (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: add a NULL pointer check (Inigo Huguet) [2196821] - wifi: iwlwifi: pull from TXQs with softirqs disabled (Inigo Huguet) [2196821] - wifi: iwlwifi: Correctly indicate support for VHT TX STBC (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: Add NULL check before dereferencing the pointer (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: fix potential array out of bounds access (Inigo Huguet) [2196821] - wifi: rtw88: add missing unwind goto for __rtw_download_firmware() (Inigo Huguet) [2196821] - wifi: iwlwifi: disable RX STBC when a device doesn't support it (Inigo Huguet) [2196821] - wifi: iwlwifi: don't silently ignore missing suspend or resume ops (Inigo Huguet) [2196821] - wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx (Inigo Huguet) [2196821] - wifi: ath9k: fix AR9003 mac hardware hang check register offset calculation (Inigo Huguet) [2196821] - wifi: rtw89: pci: fix interrupt enable mask for HALT C2H of RTL8851B (Inigo Huguet) [2196821] - wifi: rtw89: fix rtw89_read_chip_ver() for RTL8852B and RTL8851B (Inigo Huguet) [2196821] - wifi: rtw88: fix incorrect error codes in rtw_debugfs_set_* (Inigo Huguet) [2196821] - wifi: rtw88: fix incorrect error codes in rtw_debugfs_copy_from_user (Inigo Huguet) [2196821] - wifi: mac80211: report all unusable beacon frames (Inigo Huguet) [2196821] - wifi: iwlwifi: pcie: Handle SO-F device for PCI id 0x7AF0 (Inigo Huguet) [2196821] - config: wifi: debug configs for ath11k, brcm80211 and iwlwifi (Inigo Huguet) [2196821] - config: wifi: set RTL8821CS, RTL8822BS and RTL8822CS as disabled (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: spin_lock_bh() to fix lockdep regression (Inigo Huguet) [2196821] - wifi: mac80211: fragment per STA profile correctly (Inigo Huguet) [2196821] - wifi: mac80211: Use active_links instead of valid_links in Tx (Inigo Huguet) [2196821] - wifi: cfg80211: remove links only on AP (Inigo Huguet) [2196821] - wifi: mac80211: take lock before setting vif links (Inigo Huguet) [2196821] - wifi: cfg80211: fix link del callback to call correct handler (Inigo Huguet) [2196821] - wifi: mac80211: fix link activation settings order (Inigo Huguet) [2196821] - wifi: cfg80211: fix double lock bug in reg_wdev_chan_valid() (Inigo Huguet) [2196821] - wifi: cfg80211: fix locking in regulatory disconnect (Inigo Huguet) [2196821] - wifi: cfg80211: fix locking in sched scan stop work (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: Fix -Warray-bounds bug in iwl_mvm_wait_d3_notif() (Inigo Huguet) [2196821] - wifi: mac80211: fix switch count in EMA beacons (Inigo Huguet) [2196821] - wifi: mac80211: don't translate beacon/presp addrs (Inigo Huguet) [2196821] - wifi: mac80211: mlme: fix non-inheritence element (Inigo Huguet) [2196821] - wifi: cfg80211: reject bad AP MLD address (Inigo Huguet) [2196821] - wifi: mac80211: use correct iftype HE cap (Inigo Huguet) [2196821] - wifi: mt76: mt7996: fix possible NULL pointer dereference in mt7996_mac_write_txwi() (Inigo Huguet) [2196821] - wifi: rtw89: remove redundant check of entering LPS (Inigo Huguet) [2196821] - wifi: rtw89: correct PS calculation for SUPPORTS_DYNAMIC_PS (Inigo Huguet) [2196821] - wifi: rtw88: correct PS calculation for SUPPORTS_DYNAMIC_PS (Inigo Huguet) [2196821] - wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll (Inigo Huguet) [2196821] - wifi: b43: fix incorrect __packed annotation (Inigo Huguet) [2196821] - wifi: rtw88: sdio: Always use two consecutive bytes for word operations (Inigo Huguet) [2196821] - mac80211_hwsim: fix memory leak in hwsim_new_radio_nl (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: Add locking to the rate read flow (Inigo Huguet) [2196821] - wifi: iwlwifi: Don't use valid_links to iterate sta links (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: don't trust firmware n_channels (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: fix OEM's name in the tas approved list (Inigo Huguet) [2196821] - wifi: iwlwifi: fix OEM's name in the ppag approved list (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: fix initialization of a return value (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: fix access to fw_id_to_mac_id (Inigo Huguet) [2196821] - wifi: iwlwifi: fw: fix DBGI dump (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: fix number of concurrent link checks (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: fix cancel_delayed_work_sync() deadlock (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: don't double-init spinlock (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: always free dup_data (Inigo Huguet) [2196821] - wifi: mac80211: recalc chanctx mindef before assigning (Inigo Huguet) [2196821] - wifi: mac80211: consider reserved chanctx for mindef (Inigo Huguet) [2196821] - wifi: mac80211: simplify chanctx allocation (Inigo Huguet) [2196821] - wifi: mac80211: Abort running color change when stopping the AP (Inigo Huguet) [2196821] - wifi: mac80211: fix min center freq offset tracing (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: rfi: disable RFI feature (Inigo Huguet) [2196821] - wifi: mac80211: Fix puncturing bitmap handling in __ieee80211_csa_finalize() (Inigo Huguet) [2196821] - wifi: mac80211: fortify the spinlock against deadlock by interrupt (Inigo Huguet) [2196821] - wifi: cfg80211: Drop entries with invalid BSSIDs in RNR (Inigo Huguet) [2196821] - wifi: rtl8xxxu: fix authentication timeout due to incorrect RCR value (Inigo Huguet) [2196821] - wifi: brcmfmac: Check for probe() id argument being NULL (Inigo Huguet) [2196821] - wifi: rtw88: correct qsel_to_ep[] type as int (Inigo Huguet) [2196821] - wifi: rtw88: use work to update rate to avoid RCU warning (Inigo Huguet) [2196821] - wifi: rtw89: 8852b: adjust quota to avoid SER L1 caused by access null page (Inigo Huguet) [2196821] - wifi: mt76: connac: fix stats->tx_bytes calculation (Inigo Huguet) [2196821] - wifi: mt76: mt7996: fix endianness of MT_TXD6_TX_RATE (Inigo Huguet) [2196821] - mac80211: use the new drop reasons infrastructure (Inigo Huguet) [2196821] - wifi: rtw88: Update spelling in main.h (Inigo Huguet) [2196821] - wifi: airo: remove ISA_DMA_API dependency (Inigo Huguet) [2196821] - wifi: rtl8xxxu: Simplify setting the initial gain (Inigo Huguet) [2196821] - wifi: rtl8xxxu: Add rtl8xxxu_write{8,16,32}_{set,clear} (Inigo Huguet) [2196821] - wifi: rtl8xxxu: Don't print the vendor/product/serial (Inigo Huguet) [2196821] - wifi: rtw88: Fix memory leak in rtw88_usb (Inigo Huguet) [2196821] - wifi: rtw88: call rtw8821c_switch_rf_set() according to chip variant (Inigo Huguet) [2196821] - wifi: rtw88: set pkg_type correctly for specific rtw8821c variants (Inigo Huguet) [2196821] - wifi: rtw88: rtw8821c: Fix rfe_option field width (Inigo Huguet) [2196821] - wifi: rtw88: usb: fix priority queue to endpoint mapping (Inigo Huguet) [2196821] - wifi: rtw88: 8822c: add iface combination (Inigo Huguet) [2196821] - wifi: rtw88: handle station mode concurrent scan with AP mode (Inigo Huguet) [2196821] - wifi: rtw88: prevent scan abort with other VIFs (Inigo Huguet) [2196821] - wifi: rtw88: refine reserved page flow for AP mode (Inigo Huguet) [2196821] - wifi: rtw88: disallow PS during AP mode (Inigo Huguet) [2196821] - wifi: rtw88: 8822c: extend reserved page number (Inigo Huguet) [2196821] - wifi: rtw88: add port switch for AP mode (Inigo Huguet) [2196821] - wifi: rtw88: add bitmap for dynamic port settings (Inigo Huguet) [2196821] - wifi: rtw89: mac: use regular int as return type of DLE buffer request (Inigo Huguet) [2196821] - wifi: mac80211: remove return value check of debugfs_create_dir() (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: fix RFKILL report when driver is going down (Inigo Huguet) [2196821] - wifi: iwlwifi: mei: re-ask for ownership after it was taken by CSME (Inigo Huguet) [2196821] - wifi: iwlwifi: mei: make mei filtered scan more aggressive (Inigo Huguet) [2196821] - wifi: iwlwifi: modify scan request and results when in link protection (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: enable support for MLO APIs (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: prefer RCU_INIT_POINTER() (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: fix potential memory leak (Inigo Huguet) [2196821] - wifi: iwlwifi: fw: fix argument to efi.get_variable (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: fix MIC removal confusion (Inigo Huguet) [2196821] - wifi: iwlwifi: fw: fix memory leak in debugfs (Inigo Huguet) [2196821] - wifi: iwlwifi: Update support for b0 version (Inigo Huguet) [2196821] - wifi: ath11k: Remove disabling of 80+80 and 160 MHz (Inigo Huguet) [2196821] - wifi: ath11k: Fix SKB corruption in REO destination ring (Inigo Huguet) [2196821] - wifi: ath11k: Fix incorrect update of radiotap fields (Inigo Huguet) [2196821] - wifi: ath11k: fix tx status reporting in encap offload mode (Inigo Huguet) [2196821] - wifi: ath11k: add peer mac information in failure cases (Inigo Huguet) [2196821] - wifi: ath11k: Prevent REO cmd failures (Inigo Huguet) [2196821] - wifi: ath11k: fix double free of peer rx_tid during reo cmd failure (Inigo Huguet) [2196821] - wifi: mt76: mt7996: fill txd by host driver (Inigo Huguet) [2196821] - wifi: mt76: set NL80211_EXT_FEATURE_CAN_REPLACE_PTK0 on supported drivers (Inigo Huguet) [2196821] - wifi: mt76: dma: use napi_build_skb (Inigo Huguet) [2196821] - wifi: mt76: mt7615: increase eeprom size for mt7663 (Inigo Huguet) [2196821] - wifi: mt76: mt7996: enable mesh HW amsdu/de-amsdu support (Inigo Huguet) [2196821] - wifi: mt76: mt7996: enable configured beacon tx rate (Inigo Huguet) [2196821] - wifi: mt76: mt7996: enable BSS_CHANGED_MCAST_RATE support (Inigo Huguet) [2196821] - wifi: mt76: mt7996: enable BSS_CHANGED_BASIC_RATES support (Inigo Huguet) [2196821] - wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace (Inigo Huguet) [2196821] - wifi: mac80211: remove ieee80211_tx_status_8023 (Inigo Huguet) [2196821] - wifi: iwlwifi: bump FW API to 78 for AX devices (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: check firmware response size (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: add MLO support to SF - use sta pointer (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: configure TLC on link activation (Inigo Huguet) [2196821] - wifi: iwlwifi: fix iwl_mvm_max_amsdu_size() for MLO (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: remove RS rate init update argument (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: initialize per-link STA ratescale data (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: rs-fw: properly access sband->iftype_data (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: only clients can be 20MHz-only (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: fix iwl_mvm_sta_rc_update for MLO (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: remove per-STA MFP setting (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: allow NL80211_EXT_FEATURE_SCAN_MIN_PREQ_CONTENT (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: use BSSID when building probe requests (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: update mac id management (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: adopt the latest firmware API (Inigo Huguet) [2196821] - wifi: mt76: connac: add nss calculation into mt76_connac2_mac_tx_rate_val() (Inigo Huguet) [2196821] - wifi: mt76: connac: fix txd multicast rate setting (Inigo Huguet) [2196821] - wifi: mt76: mt7921e: stop chip reset worker in unregister hook (Inigo Huguet) [2196821] - wifi: mt76: mt7921e: improve reliability of dma reset (Inigo Huguet) [2196821] - wifi: mt76: mt7921: fix missing unwind goto in mt7921u_probe (Inigo Huguet) [2196821] - mt76: mt7921: fix kernel panic by accessing unallocated eeprom.data (Inigo Huguet) [2196821] - wifi: mt76: move mcu_uni_event and mcu_reg_event in common code (Inigo Huguet) [2196821] - wifi: mt76: mt7996: enable coredump support (Inigo Huguet) [2196821] - wifi: mt76: mt7996: add full system reset knobs into debugfs (Inigo Huguet) [2196821] - wifi: mt76: mt7996: enable full system reset support (Inigo Huguet) [2196821] - wifi: mt76: mt7921: enable p2p support (Inigo Huguet) [2196821] - wifi: mt76: mt7921: Replace fake flex-arrays with flexible-array members (Inigo Huguet) [2196821] - wifi: mt76: Replace zero-length array with flexible-array member (Inigo Huguet) [2196821] - wifi: mt76: mt7921: add Netgear AXE3000 (A8000) support (Inigo Huguet) [2196821] - wifi: mt76: mt7915: drop redundant prefix of mt7915_txpower_puts() (Inigo Huguet) [2196821] - wifi: mt76: fix 6GHz high channel not be scanned (Inigo Huguet) [2196821] - wifi: mt76: mt7921e: fix probe timeout after reboot (Inigo Huguet) [2196821] - wifi: mt76: move shared mac definitions in mt76_connac2_mac.h (Inigo Huguet) [2196821] - wifi: mt76: mt7921: get rid of eeprom.h (Inigo Huguet) [2196821] - wifi: mt76: add mt76_connac_gen_ppe_thresh utility routine (Inigo Huguet) [2196821] - wifi: mt76: get rid of unused sta_ps callbacks (Inigo Huguet) [2196821] - wifi: mt76: add mt76_connac_irq_enable utility routine (Inigo Huguet) [2196821] - wifi: mt76: move irq_tasklet in mt76_dev struct (Inigo Huguet) [2196821] - wifi: mt76: mt7921e: Set memory space enable in PCI_COMMAND if unset (Inigo Huguet) [2196821] - wifi: mt76: mt7921: use driver flags rather than mac80211 flags to mcu (Inigo Huguet) [2196821] - wifi: mt76: mt7921: introduce mt7921_get_mac80211_ops utility routine (Inigo Huguet) [2196821] - wifi: mt76: mt7996: fix eeprom tx path bitfields (Inigo Huguet) [2196821] - wifi: mt76: mt7996: remove mt7996_mcu_set_pm() (Inigo Huguet) [2196821] - wifi: mt76: mt7996: init mpdu density cap (Inigo Huguet) [2196821] - wifi: mt76: mt7996: fix pointer calculation in ie countdown event (Inigo Huguet) [2196821] - wifi: mt76: mt7996: remove unused eeprom band selection (Inigo Huguet) [2196821] - wifi: mt76: mt7996: let non-bufferable MMPDUs use correct hw queue (Inigo Huguet) [2196821] - wifi: mt76: mt7996: add eht rx rate support (Inigo Huguet) [2196821] - wifi: mt76: mt7996: remove mt7996_mcu_beacon_check_caps() (Inigo Huguet) [2196821] - wifi: mt76: mt7915: remove mt7915_mcu_beacon_check_caps() (Inigo Huguet) [2196821] - wifi: mt76: connac: refresh tx session timer for WED device (Inigo Huguet) [2196821] - wifi: mt76: add missing locking to protect against concurrent rx/status calls (Inigo Huguet) [2196821] - wifi: mt76: handle failure of vzalloc in mt7615_coredump_work (Inigo Huguet) [2196821] - wifi: mt76: drop the incorrect scatter and gather frame (Inigo Huguet) [2196821] - wifi: mt76: mt7915: rework init flow in mt7915_thermal_init() (Inigo Huguet) [2196821] - wifi: mt76: mt7915: add dev->hif2 support for mt7916 WED device (Inigo Huguet) [2196821] - wifi: mt76: mt7915: expose device tree match table (Inigo Huguet) [2196821] - wifi: mt76: dynamic channel bandwidth changes in AP mode (Inigo Huguet) [2196821] - wifi: mt76: mt7996: fix radiotap bitfield (Inigo Huguet) [2196821] - wifi: mt76: mt7915: unlock on error in mt7915_thermal_temp_store() (Inigo Huguet) [2196821] - wifi: mt76: mt7996: Remove unneeded semicolon (Inigo Huguet) [2196821] - wifi: mt76: mt7921: fix PCI DMA hang after reboot (Inigo Huguet) [2196821] - wifi: mt76: mt7921: fix wrong command to set STA channel (Inigo Huguet) [2196821] - wifi: mt76: remove redundent MCU_UNI_CMD_* definitions (Inigo Huguet) [2196821] - wifi: ath9k: fix per-packet TX-power cap for TPC (Inigo Huguet) [2196821] - wifi: ath11k: fix undefined behavior with __fls in dp (Inigo Huguet) [2196821] - wifi: ath11k: Ignore frags from uninitialized peer in dp. (Inigo Huguet) [2196821] - wifi: ath11k: print a warning when crypto_alloc_shash() fails (Inigo Huguet) [2196821] - wifi: ath11k: pci: Add more MODULE_FIRMWARE() entries (Inigo Huguet) [2196821] - wifi: ath11k: enable SAR support on WCN6750 (Inigo Huguet) [2196821] - wifi: ath11k: Disable Spectral scan upon removing interface (Inigo Huguet) [2196821] - wifi: rtw89: add support of concurrent mode (Inigo Huguet) [2196821] - wifi: rtw89: Disallow power save with multiple stations (Inigo Huguet) [2196821] - wifi: rtw89: update statistics to FW for fine-tuning performance (Inigo Huguet) [2196821] - wifi: rtw89: use struct instead of macros to set H2C command of hardware scan (Inigo Huguet) [2196821] - wifi: rtw89: refine scan function after chanctx (Inigo Huguet) [2196821] - wifi: rtw89: prohibit enter IPS during HW scan (Inigo Huguet) [2196821] - wifi: rtw89: coex: send more hardware module info to firmware for 8851B (Inigo Huguet) [2196821] - wifi: rtw89: coex: Update function to get BT RSSI and hardware counter (Inigo Huguet) [2196821] - wifi: rtw89: coex: Add path control register to monitor list (Inigo Huguet) [2196821] - wifi: rtw89: coex: Enable Wi-Fi RX gain control for free run solution (Inigo Huguet) [2196821] - wifi: rtw89: fix power save function in WoWLAN mode (Inigo Huguet) [2196821] - wifi: rtw89: support WoWLAN mode for 8852be (Inigo Huguet) [2196821] - wifi: iwlwifi: move debug buffer allocation failure to info verbosity (Inigo Huguet) [2196821] - wifi: iwlwifi: make the loop for card preparation effective (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: allow number of beacons from FW (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: implement key link switching (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: implement BAID link switching (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: track station mask for BAIDs (Inigo Huguet) [2196821] - wifi: iwlwifi: bump FW API to 77 for AX devices (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: use correct sta mask to remove queue (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: avoid iterating over an un-initialized list (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: factor out iwl_mvm_sta_fw_id_mask() (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: properly implement HE AP support (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: Fix _iwl_mvm_get_scan_type() (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: fix getting lowest TX rate for MLO (Inigo Huguet) [2196821] - wifi: iwlwifi: call napi_synchronize() before freeing rx/tx queues (Inigo Huguet) [2196821] - wifi: iwlwifi: nvm-parse: add full BW UL MU-MIMO support (Inigo Huguet) [2196821] - wifi: rtl8xxxu: Support devices with 5-6 out endpoints (Inigo Huguet) [2196821] - wifi: rtl8xxxu: Clean up some messy ifs (Inigo Huguet) [2196821] - wifi: brcmfmac: add Cypress 43439 SDIO ids (Inigo Huguet) [2196821] - wifi: rtw89: fix crash due to null pointer of sta in AP mode (Inigo Huguet) [2196821] - wifi: rtw89: correct 5 MHz mask setting (Inigo Huguet) [2196821] - wifi: rtw89: 8851b: add tables for RFK (Inigo Huguet) [2196821] - wifi: rtw89: 8851b: add BB and RF tables (2 of 2) (Inigo Huguet) [2196821] - wifi: rtw89: 8851b: add BB and RF tables (1 of 2) (Inigo Huguet) [2196821] - wifi: rtw89: pci: update PCI related settings to support 8851B (Inigo Huguet) [2196821] - wifi: rtw89: mac: update MAC settings to support 8851b (Inigo Huguet) [2196821] - wifi: rtw89: 8851b: fix TX path to path A for one RF path chip (Inigo Huguet) [2196821] - wifi: rtw89: read version of analog hardware (Inigo Huguet) [2196821] - wifi: rtw89: use hardware CFO to improve performance (Inigo Huguet) [2196821] - wifi: rtw89: support parameter tables by RFE type (Inigo Huguet) [2196821] - wifi: rtw89: add firmware format version to backward compatible with older drivers (Inigo Huguet) [2196821] - wifi: rtw89: use schedule_work to request firmware (Inigo Huguet) [2196821] - wifi: rtw89: fw: use generic flow to set/check features (Inigo Huguet) [2196821] - wifi: rtw89: fix authentication fail during scan (Inigo Huguet) [2196821] - wifi: rtw89: add flag check for power state (Inigo Huguet) [2196821] - wifi: rtw89: add ieee80211::remain_on_channel ops (Inigo Huguet) [2196821] - wifi: rtw89: add function to wait for completion of TX skbs (Inigo Huguet) [2196821] - wifi: rtw89: 8852c: add beacon filter and CQM support (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: tx: remove misleading if statement (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: Fix setting the rate for non station cases (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: validate station properly in flush (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: set STA mask for keys in MLO (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: fix ptk_pn memory leak (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: make iwl_mvm_mac_ctxt_send_beacon() static (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: track AP STA pointer and use it for MFP (Inigo Huguet) [2196821] - wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf (Inigo Huguet) [2196821] - wifi: iwlwifi: fw: move memset before early return (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: initialize seq variable (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: Fix spelling mistake 'Gerenal' -> 'General' (Inigo Huguet) [2196821] - wifi: iwlwifi: Fix spelling mistake 'upto' -> 'up to' (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: enable new MLD FW API (Inigo Huguet) [2196821] - wifi: iwlwifi: add a new PCI device ID for BZ device (Inigo Huguet) [2196821] - wifi: iwlwifi: Add RF Step Type for BZ device (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: scan legacy bands and UHB channels with same antenna (Inigo Huguet) [2196821] - wifi: iwlwifi: yoyo: Fix possible division by zero (Inigo Huguet) [2196821] - wifi: iwlwifi: yoyo: skip dump correctly on hw error (Inigo Huguet) [2196821] - wifi: iwlwifi: pcie: fix possible NULL pointer dereference (Inigo Huguet) [2196821] - wifi: iwlwifi: Fix the duplicate dump name (Inigo Huguet) [2196821] - wifi: iwlwifi: pcie: work around ROM bug on AX210 integrated (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: add DSM_FUNC_ENABLE_6E value to debugfs (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: cleanup beacon_inject_active during hw restart (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: support wowlan info notification version 2 (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: make HLTK configuration for PASN station optional (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: request limiting to 8 MSDUs per A-MSDU (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: fix shift-out-of-bounds (Inigo Huguet) [2196821] - wifi: iwlwifi: acpi: support modules with high antenna gain (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: don't drop unencrypted MCAST frames (Inigo Huguet) [2196821] - wifi: iwlwifi: dbg: print pc register data once fw dump occurred (Inigo Huguet) [2196821] - wifi: mac80211: add flush_sta method (Inigo Huguet) [2196821] - wifi: mac80211: flush queues on STA removal (Inigo Huguet) [2196821] - wifi: ieee80211: correctly mark FTM frames non-bufferable (Inigo Huguet) [2196821] - wifi: ieee80211: clean up public action codes (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: don't set CHECKSUM_COMPLETE for unsupported protocols (Inigo Huguet) [2196821] - wifi: iwlwifi: trans: don't trigger d3 interrupt twice (Inigo Huguet) [2196821] - wifi: iwlwifi: Update configurations for Bnj-a0 and specific rf devices (Inigo Huguet) [2196821] - wifi: iwlwifi: Update init sequence if tx diversity supported (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: move function sequence (Inigo Huguet) [2196821] - wifi: iwlwifi: nvm: Update HE capabilities on 6GHz band for EHT device (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: refactor TX csum mode check (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: fix A-MSDU checks (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: enable bz hw checksum from c step (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: use OFDM rate if IEEE80211_TX_CTL_NO_CCK_RATE is set (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: convert TID to FW value on queue remove (Inigo Huguet) [2196821] - wifi: iwlwifi: Update configuration for SO,SOF MAC and HR RF (Inigo Huguet) [2196821] - wifi: iwlwifi: add a validity check of queue_id in iwl_txq_reclaim (Inigo Huguet) [2196821] - wifi: iwlwifi: nvm-parse: enable 160/320 MHz for AP mode (Inigo Huguet) [2196821] - wifi: iwlwifi: debug: fix crash in __iwl_err() (Inigo Huguet) [2196821] - wifi: rtw88: Add support for the SDIO based RTL8821CS chipset (Inigo Huguet) [2196821] - wifi: rtw88: Add support for the SDIO based RTL8822CS chipset (Inigo Huguet) [2196821] - wifi: rtw88: Add support for the SDIO based RTL8822BS chipset (Inigo Huguet) [2196821] - wifi: rtw88: main: Reserve 8 bytes of extra TX headroom for SDIO cards (Inigo Huguet) [2196821] - wifi: rtw88: main: Add the {cpwm,rpwm}_addr for SDIO based chipsets (Inigo Huguet) [2196821] - wifi: rtw88: mac: Support SDIO specific bits in the power on sequence (Inigo Huguet) [2196821] - wifi: rtw88: sdio: Add HCI implementation for SDIO based chipsets (Inigo Huguet) [2196821] - wifi: rtw88: Clear RTW_FLAG_POWERON early in rtw_mac_power_switch() (Inigo Huguet) [2196821] - wifi: ath12k: Remove redundant pci_clear_master (Inigo Huguet) [2196821] - wifi: ath10k: Remove redundant pci_clear_master (Inigo Huguet) [2196821] - wifi: ath11k: Remove redundant pci_clear_master (Inigo Huguet) [2196821] - wifi: ath11k: Send 11d scan start before WMI_START_SCAN_CMDID (Inigo Huguet) [2196821] - wifi: ath11k: fix writing to unintended memory region (Inigo Huguet) [2196821] - wifi: ath11k: Fix invalid management rx frame length issue (Inigo Huguet) [2196821] - wifi: ath11k: fix rssi station dump not updated in QCN9074 (Inigo Huguet) [2196821] - wifi: ath11k: Configure the FTM responder role using firmware capability flag (Inigo Huguet) [2196821] - wifi: ath11k: Optimize 6 GHz scan time (Inigo Huguet) [2196821] - wifi: mac80211: set EHT support flag in AP mode (Inigo Huguet) [2196821] - wifi: mac80211_hwsim: fix potential NULL deref in hwsim_pmsr_report_nl() (Inigo Huguet) [2196821] - wifi: iwlwifi: fix duplicate entry in iwl_dev_info_table (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: fix the order of TIMING_MEASUREMENT notifications (Inigo Huguet) [2196821] - bus: mhi: host: Use mhi_tryset_pm_state() for setting fw error state (Inigo Huguet) [2196821] - bus: mhi: host: Remove duplicate ee check for syserr (Inigo Huguet) [2196821] - bus: mhi: host: Avoid ringing EV DB if there are no elements to process (Inigo Huguet) [2196821] - net: rfkill-gpio: Add explicit include for of.h (Inigo Huguet) [2196821] - net: qrtr: correct types of trace event parameters (Inigo Huguet) [2196821] - wifi: rt2x00: Fix memory leak when handling surveys (Inigo Huguet) [2196821] - wifi: b43legacy: Remove the unused function prev_slot() (Inigo Huguet) [2196821] - wifi: rtw89: Remove redundant pci_clear_master (Inigo Huguet) [2196821] - wifi: rtw89: fix potential race condition between napi_init and napi_enable (Inigo Huguet) [2196821] - wifi: rtw89: config EDCCA threshold during scan to prevent TX failed (Inigo Huguet) [2196821] - wifi: rtw89: fix incorrect channel info during scan due to ppdu_sts filtering (Inigo Huguet) [2196821] - wifi: rtw89: remove superfluous H2C of join_info (Inigo Huguet) [2196821] - wifi: rtw89: set data lowest rate according to AP supported rate (Inigo Huguet) [2196821] - wifi: rtw89: add counters of register-based H2C/C2H (Inigo Huguet) [2196821] - wifi: rtw89: coex: Update Wi-Fi Bluetooth coexistence version to 7.0.1 (Inigo Huguet) [2196821] - wifi: rtw89: coex: Add report control v5 variation (Inigo Huguet) [2196821] - wifi: rtw89: coex: Update RTL8852B LNA2 hardware parameter (Inigo Huguet) [2196821] - wifi: rtw89: coex: Not to enable firmware report when WiFi is power saving (Inigo Huguet) [2196821] - wifi: rtw89: coex: Add LPS protocol radio state for RTL8852B (Inigo Huguet) [2196821] - bus: mhi: pci_generic: Add Foxconn T99W510 (Inigo Huguet) [2196821] - bus: mhi: host: Use ERANGE for BHIOFF/BHIEOFF range check (Inigo Huguet) [2196821] - bus: mhi: host: Range check CHDBOFF and ERDBOFF (Inigo Huguet) [2196821] - wifi: mwifiex: remove unused evt_buf variable (Inigo Huguet) [2196821] - wifi: brcmsmac: ampdu: remove unused suc_mpdu variable (Inigo Huguet) [2196821] - wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg() (Inigo Huguet) [2196821] - wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg() (Inigo Huguet) [2196821] - wifi: brcmsmac: remove unused has_5g variable (Inigo Huguet) [2196821] - wifi: b43legacy: remove unused freq_r3A_value function (Inigo Huguet) [2196821] - wifi: rtlwifi: Replace fake flex-array with flex-array member (Inigo Huguet) [2196821] - wifi: rtw88: Remove redundant pci_clear_master (Inigo Huguet) [2196821] - wifi: rndis_wlan: Replace fake flex-array with flexible-array member (Inigo Huguet) [2196821] - wifi: rndis_wlan: clean up a type issue (Inigo Huguet) [2196821] - wifi: rtw88: remove unused rtw_pci_get_tx_desc function (Inigo Huguet) [2196821] - wifi: rsi: Slightly simplify rsi_set_channel() (Inigo Huguet) [2196821] - wifi: ipw2x00: remove unused _ipw_read16 function (Inigo Huguet) [2196821] - wifi: mac80211: enable EHT mesh support (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: correctly use link in iwl_mvm_sta_del() (Inigo Huguet) [2196821] - wifi: iwlwifi: separate AP link management queues (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: free probe_resp_data later (Inigo Huguet) [2196821] - wifi: iwlwifi: bump FW API to 75 for AX devices (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: move max_agg_bufsize into host TLC lq_sta (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: send full STA during HW restart (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: rework active links counting (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: update mac config when assigning chanctx (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: use the correct link queue (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: clean up mac_id vs. link_id in MLD sta (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: fix station link data leak (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: initialize max_rc_amsdu_len per-link (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: use appropriate link for rate selection (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: use the new lockdep-checking macros (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: remove chanctx WARN_ON (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: avoid sending MAC context for idle (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: remove only link-specific AP keys (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: skip inactive links (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: adjust iwl_mvm_scan_respect_p2p_go_iter() for MLO (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: rxmq: report link ID to mac80211 (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: use bcast/mcast link station id (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: translate management frame address (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: implement mac80211 callback change_sta_links (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: use the link sta address (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: adjust rs init to MLO (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: adjust radar detection to MLO (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: adjust iwl_mvm_sec_key_remove_ap to MLO (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: make a few warnings only trigger once (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: coex: start handling multiple links (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: rs-fw: don't crash on missing channel (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: use STA link address (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: skip MEI update for MLO (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: fix narrow RU check for MLO (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: make some HW flags conditional (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: implement link change ops (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: adjust some cleanup functions to MLO (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: refactor iwl_mvm_mac_sta_state_common() (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: update iwl_mvm_tx_reclaim() for MLO (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: adjust to MLO assign/unassign/switch_vif_chanctx() (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: add fw link id allocation (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: adjust internal stations to MLO (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: replace bss_info_changed() with vif_cfg/link_info_changed() (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: add link_conf parameter for add/remove/change link (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: don't check dtim_period in new API (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: adjust SMPS for MLO (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: add set_hw_timestamp to mld ops (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: add link to firmware earlier (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: adjust some PS and PM methods to MLD (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: adjust mld_mac_ctxt_/beacon_changed() for MLO (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: adjust smart fifo configuration to MLO (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: align to the LINK cmd update in the FW (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: always use the sta->addr as the peers addr (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: modify link instead of removing it during csa (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: fix crash on queue removal for MLD API too (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: fix 'modify_mask' value in the link cmd. (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: add all missing ops to iwl_mvm_mld_ops (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: add support for post_channel_switch in MLD mode (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: unite sta_modify_disable_tx flows (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: add cancel/remain_on_channel for MLD mode (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: refactor iwl_mvm_roc() (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: add some new MLD ops (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: add sta handling flows for MLD mode (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: add an indication that the new MLD API is used (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: sta preparation for MLO (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: vif preparation for MLO (Inigo Huguet) [2196821] - wifi: nl80211: support advertising S1G capabilities (Inigo Huguet) [2196821] - wifi: mac80211: S1G capabilities information element in probe request (Inigo Huguet) [2196821] - mac80211: minstrel_ht: remove unused n_supported variable (Inigo Huguet) [2196821] - wifi: iwlwifi: mvm: Use 64-bit division helper in iwl_mvm_get_crosstimestamp_fw() (Inigo Huguet) [2196821] - wifi: carl9170: Replace fake flex-array with flexible-array member (Inigo Huguet) [2196821] - wifi: carl9170: Fix multiple -Warray-bounds warnings (Inigo Huguet) [2196821] ... IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-3594 CVE-2023-4194 CVE-2023-35825 CVE-2023-3141 CVE-2023-26545 CVE-2022-3565 CVE-2022-38457 CVE-2022-42895 CVE-2023-3161 CVE-2023-3358 CVE-2022-40133 CVE-2023-1074 CVE-2023-1076 CVE-2023-30456 CVE-2023-0597 CVE-2023-1073 CVE-2023-1075 CVE-2023-1249 CVE-2023-1989 CVE-2022-3523 CVE-2023-1206 CVE-2023-3773 CVE-2023-4155 CVE-2023-4207 CVE-2023-4208 CVE-2023-4273 CVE-2023-1855 CVE-2023-3212 CVE-2023-4128 CVE-2023-33203 CVE-2023-33952 CVE-2022-40982 CVE-2023-3268 CVE-2023-3609 CVE-2023-1252 CVE-2023-1652 CVE-2023-33951 CVE-2023-1079 CVE-2023-4206 CVE-2023-39191 CVE-2023-3772 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base cpe:/o:oracle:linux:9:3:baseos_base cpe:/a:oracle:linux:9::codeready_builder cpe:/o:oracle:linux:9::baseos_latest Oracle Linux 9 [0.23.0-2] - Fix regression in handling OpenPGP cards - Fix CVE-2023-2977: buffer overrun in pkcs15init for cardos [0.23.0-1] - Rebase to latest 0.23.0 release (#2100409) - Use separate OpenSSL context to work better from inside of OpenSSL providers LOW Copyright 2023 Oracle, Inc. CVE-2023-2977 cpe:/o:oracle:linux:9:3:baseos_base cpe:/o:oracle:linux:9::baseos_latest Oracle Linux 9 [2.35.2-42.0.1] - Forward-port Oracle patches to 2.35.2-42. MODERATE Copyright 2023 Oracle, Inc. CVE-2022-4285 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base cpe:/o:oracle:linux:9:3:baseos_base cpe:/a:oracle:linux:9::distro_builder cpe:/o:oracle:linux:9::baseos_latest Oracle Linux 9 [20230516-999.27.git6c9e0ed5.el9] - Update firmware for qat_4xxx devices (Orabug: 35811008) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2022-40964 CVE-2022-27635 CVE-2023-20569 CVE-2022-38076 CVE-2022-36351 CVE-2022-46329 cpe:/o:oracle:linux:9:3:baseos_base cpe:/o:oracle:linux:9::baseos_latest cpe:/o:oracle:linux:9:2:baseos_patch Oracle Linux 9 [1:2.3.3op2-21] - bump the spec because the previous build was made with buildroot 9.2 [1:2.3.3op2-20] - CVE-2023-32360 cups: Information leak through Cups-Get-Document operation [1:2.3.3op2-19] - CVE-2023-34241 cups: use-after-free in cupsdAcceptClient() in scheduler/client.c - CVE-2023-32324 cups: heap buffer overflow may lead to DoS [1:2.3.3op2-19] - 2217177 - Delays printing to lpd when reserved ports are exhausted - 2217284 - The command 'cancel -x <job>' does not remove job files - 2217954 - Enlarge backlog queue for listen() in cupsd [1:2.3.3op2-18] - 2189919 - CGI scripts don't work with local Negotiate authentication [1:2.3.3op2-17] - RHEL-314 - Enable fmf tests in centos stream [1:2.3.3op2-17] - RHEL-317 - upstream test suite fails due uncorrect number of expected warnings MODERATE Copyright 2023 Oracle, Inc. CVE-2023-34241 CVE-2023-32324 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base cpe:/o:oracle:linux:9:3:baseos_base cpe:/o:oracle:linux:9::baseos_latest Oracle Linux 9 [36.0.1-4] - Fix FTBFS caused by rsa_pkcs1_implicit_rejection OpenSSL feature, resolves rhbz#2203840 [36.0.1-3] - Fix CVE-2023-23931: Don't allow update_into to mutate immutable objects, resolves rhbz#2172399 - Fix FTBFS due to failing test_load_invalid_ec_key_from_pem and test_decrypt_invalid_decrypt MODERATE Copyright 2023 Oracle, Inc. CVE-2023-23931 cpe:/o:oracle:linux:9:3:baseos_base cpe:/o:oracle:linux:9::baseos_latest Oracle Linux 9 [1.3.3-13] - Applied patch for for CVE-2022-48468 (#2186677) MODERATE Copyright 2023 Oracle, Inc. CVE-2022-48468 cpe:/o:oracle:linux:9:3:baseos_base cpe:/a:oracle:linux:9::codeready_builder cpe:/o:oracle:linux:9::baseos_latest Oracle Linux 9 [2.68.4-11] - Really fix authentication failures when sd-bus clients connect to GDBus servers - Resolves: #2217771 [2.68.4-10] - Fix authentication failures when sd-bus clients connect to GDBus servers - Resolves: #2217771 [2.68.4-9] - Resolve s390x crashes introduced by fixes for CVE-2023-24593/CVE-2023-25180 - Related: #2181196 - Related: #2181200 [2.68.4-8] - Resolve use after free introduced by fixes for CVE-2023-24593/CVE-2023-25180 - Related: #2181196 - Related: #2181200 [2.68.4-7] - Fix CVE-2023-24593 and CVE-2023-25180 - Resolves: #2181196 - Resolves: #2181200 LOW Copyright 2023 Oracle, Inc. CVE-2023-32665 CVE-2023-32611 CVE-2023-29499 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base cpe:/o:oracle:linux:9:3:baseos_base cpe:/a:oracle:linux:9::codeready_builder cpe:/o:oracle:linux:9::baseos_latest Oracle Linux 9 [2:4.9-8] - gpasswd: fix password leak. Resolves: #2215948 [2:4.9-7] - useradd: check if subid range exists for user. Resolves: #2179987 - find_new_[gu]id: Skip over IDs that are reserved for legacy reasons. Resolves: #2179988 LOW Copyright 2023 Oracle, Inc. CVE-2023-4641 cpe:/o:oracle:linux:9:3:baseos_base cpe:/a:oracle:linux:9::codeready_builder cpe:/o:oracle:linux:9::baseos_latest Oracle Linux 9 [1.19.1-1] - Resolves: rhbz#2209564 - CVE-2023-31124 c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation [rhel-9] - Resolves: rhbz#2209556 - CVE-2023-31130 c-ares: Buffer Underwrite in ares_inet_net_pton() [rhel-9] - Resolves: rhbz#2209550 - CVE-2023-31147 c-ares: Insufficient randomness in generation of DNS query IDs [rhel-9] - Resolves: rhbz#2209520 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-9.3.0] - Resolves: rhbz#2210370 - Rebase c-ares for RHEL 9.3 [1.17.1-6] - Resolves: rhbz#2170868 - c-ares: buffer overflow in config_sortlist() due to missing string length check [rhel-9] MODERATE Copyright 2023 Oracle, Inc. CVE-2022-4904 CVE-2023-31130 CVE-2023-31147 CVE-2023-31124 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base cpe:/o:oracle:linux:9:3:baseos_base cpe:/o:oracle:linux:9::baseos_latest Oracle Linux 9 [0.10.4-11] - Fix loglevel regression - Related: rhbz#2182252, rhbz#2189740 [0.10.4.10] - Fix null dereference issues found by covscan - Related: rhbz#2182252, rhbz#2189740 [0.10.4-9] - Fix CVE-2023-1667 and CVE-2023-2283 - Fix issues found by cosvcan - Resolves: rhbz#2182252, rhbz#2189740 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-2283 CVE-2023-1667 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base cpe:/o:oracle:linux:9:3:baseos_base cpe:/o:oracle:linux:9::baseos_latest Oracle Linux 9 [3.9.18-1] - Update to 3.9.18 - Security fix for CVE-2023-40217 Resolves: RHEL-3043 [3.9.17-2] - Fix symlink handling in the fix for CVE-2023-24329 Resolves: rhbz#263261 [3.9.17-1] - Update to 3.9.17 - Security fix for CVE-2023-24329 Resolves: rhbz#2173917 [3.9.16-2] - Add filters for tarfile extraction (CVE-2007-4559, PEP-706) Resolves: rhbz#263261 MODERATE Copyright 2023 Oracle, Inc. CVE-2007-4559 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base cpe:/o:oracle:linux:9:3:baseos_base cpe:/a:oracle:linux:9::codeready_builder cpe:/o:oracle:linux:9::baseos_latest Oracle Linux 9 [1:6.2.0-13] - Fix: previous commit removed one function from the library and thus broke the ABI - function gmpn_preinv_divrem_1 should now not be removed Related: rhbz#2044216 [1:6.2.0-12] - Add SIMD optimization patches for s390x (provided by the IBM) Resolves: rhbz#2044216 [1:6.2.0-11] Fix: Integer overflow and resultant buffer overflow via crafted input Resolves: CVE-2021-43618 LOW Copyright 2023 Oracle, Inc. CVE-2021-43618 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base cpe:/o:oracle:linux:9:3:baseos_base cpe:/o:oracle:linux:9::baseos_latest Oracle Linux 9 evolution-mapi [3.40.1-6] - Related: #2190415 (Rebuild against samba 4.18) openchange [2.3-41] - Related: #2190415 (Rebuild against samba 4.18) samba [4.18.6-100] - related: rhbz#2190415 - Update to version 4.18.6 - resolves: rhbz#2211617 - Fix the rpcclient dfsgetinfo command [4.18.5-100] - resolves: rhbz#2222895 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 [4.18.4-102] - resolves: rhbz#2222883 - Fix trust relationship between workstation and DC [4.18.4-101] - resolves: rhbz#2216712 - Fix broken symlink for libwbclient - resolves: rhbz#2214327 - Fix segfault of winbind child when listing users with winbind scan trusted domains = yes - resolves: rhbz#2211605 - Fix access of Samba share with veto files = /.*/ - resolves: rhbz#2207692 - Fix Python tarfile extraction to avoid a warning [4.18.4-100] - resolves: rhbz#2190415 - Update to version 4.18.4 [4.18.3-100] - resolves: rhbz#2190415 - Update to version 4.18.3 [4.18.2-101] - resolves: rhbz#2187313 - Fix weak dependencies in BaseOS [4.18.2-100] - resolves: rhbz#2190415 - Update to version 4.18.2 [4.17.5-104] - related: rhbz#2182163 - Rebuild for liburing rebase to version 2.3 [4.17.5-102] - resolves: rhbz#2169980 - Fix winbind memory leak - resolves: rhbz#2156056 - Fix Samba shares not accessible issue [4.17.5-101] - resolves: rhbz#2168534 - Create package samba-tools [4.17.5-100] - related: rhbz#2131993 - Update to version 4.17.5 [4.17.4-102] - related: rhbz#2131993 - Create package dc-libs also for 'non-dc build' [4.17.4-101] - related: rhbz#2131993 - Rebuild for MIT Kerberos 1.20.1 [4.17.4-100] - related: rhbz#2131993 - Update to version 4.17.4 - resolves: rhbz#2154373 - Fix CVE-2022-38023 - resolves: rhbz#2143196 - Fix %U include directive for share listing (netshareenum) - resolves: rhbz#2114884 - Fix id command to return new groups after successful user login - resolves: rhbz#2154885 - Fix Winbind to retrieve user groups from Active Directory [4.17.2-103] - Always add epoch to samba_depver to fix osci.brew-build.rpmdeplint.functional - related: rhbz#2131993 [4.17.2-102] - Fix CVE-2022-1615 GnuTLS gnutls_rnd() can fail and give predictable random values - resolves: rhbz#2126175 [4.17.2-101] - resolves: rhbz#2131993 - Update to version 4.17.2 [4.16.4-101] - resolves: rhbz#2121317 - Do not require samba package in python3-samba [4.16.4-100] - Rebase to version 4.16.4 - resolves: rhbz#2108332 - Fix CVE-2022-32742 [ 4.16.3-101] - related: rhbz#2077487 - Rebase Samba to 4.16.3 - resolves: rhbz#2097655 - The pcap background queue process should not be stopped - resolves: rhbz#2100105 - Fix net ads info LDAP server and LDAP server name [4.16.2-102] - resolves: rhbz#2106279 - Fix crash in rpcd_classic [4.16.2-101] - resolves: rhbz#2093833 - Fix weak dependency on logrotate - resolves: rhbz#2096813 - Fix printer displays only after 300 seconds timeout [4.16.2-100] - Fix rpminspect abidiff - related: rhbz#2077487 - Rebase Samba to 4.16.2 [4.16.1-100] - resolves: rhbz#2077487 - Rebase Samba to the the latest 4.16.x release [4.15.5-108] - resolves: rhbz#2078838 - Fix UPNs handling in lookup_name*() calls [4.15.5-106] - resolves: rhbz#2065376 - Fix 'create krb5 conf = yes when a KDC has a single IP address. - resolves: rhbz#2076504 - PAM Kerberos authentication fails with a clock skew error [4.15.5-105] - resolves: rhbz#2074891 - Fix username map for unix groups [4.15.5-104] - resolves: rhbz#2057500 - Fix winbind kerberos ticket refresh [4.15.5-103] - related: rhbz#2044231 - Fix typo in testparm output [4.15.5-102] - resolves: rhbz#2044231 - Improve idmap autorid sanity checks and documentation [4.15.5-101] - resolves: #2050111 - [RFE] Change change password change prompt phrasing - resolves: #2054110 - virusfilter_vfs_openat: Not scanned: Directory or special file [4.15.5-100] - related: rhbz#2013578 - Rebase Samba to the the latest 4.15.x release - resolves: #2046129 - Fix CVE-2021-44141 - resolves: #2046154 - Fix CVE-2021-44142 - resolves: #2044405 - Fix printing no longer works on Windows 7 - resolves: #2049485 - Fix systemd notifications - resolves: #2049604 - Disable NTLMSSP for ldap client connections [4.15.4-100] - related: rhbz#2013578 - Rebase Samba to the the latest 4.15.x release - resolves: #2039154 - Fix CVE-2021-20316 - resolves: #2044238 - Failed to authenticate users after upgrade samba package to release samba-4.14.5-7x - resolves: #2044239 - [smb] Segmentation fault when joining the domain - resolves: #2044241 - filename_convert_internal: open_pathref_fsp [xxx] failed: NT_STATUS_ACCESS_DENIED - resolves: #2044255 - Fix CVE-2021-43566 [4.15.3-1] - related: rhbz#2013578 - Rebase to Samba 4.15.3 - resolves: rhbz#2028026 - Fix possible null pointer dereference in winbind - resolves: rhbz#2033317 - Winexe: Kerberos Auth is respected via --use-kerberos=desired [4.15.2-3] - related: rhbz#2013578 - Remove unneeded lmdb dependency [4.15.2-2] - resolves: rhbz#2019675 - Fix CVE-2020-25717 [4.15.2-2] - resolves: rhbz#2019669 - Fix CVE-2021-23192 [4.15.2-2] - resolves: rhbz#2019663 - Fix CVE-2016-2124 [4.15.2-1] - resolves: rhbz#2013578 - Rebase to Samba 4.15.2 [4.14.5-103] - resolves: rhbz#1980356 - Fix winbind restart on package upgrade MODERATE Copyright 2023 Oracle, Inc. CVE-2023-34967 CVE-2023-34968 CVE-2023-34966 CVE-2022-2127 cpe:/a:oracle:linux:9::distro_builder cpe:/o:oracle:linux:9::baseos_latest cpe:/a:oracle:linux:9::appstream cpe:/o:oracle:linux:9:3:baseos_base cpe:/a:oracle:linux:9::codeready_builder cpe:/a:oracle:linux:9:3:appstream_base Oracle Linux 9 [7.76.1-26] - unify the upload/method handling (CVE-2023-28322) - fix host name wildcard checking (CVE-2023-28321) [7.76.1-25] - adapt the fix of CVE-2023-27535 for RHEL 9 curl [7.76.1-24] - fix SSH connection too eager reuse still (CVE-2023-27538) - fix GSS delegation too eager connection re-use (CVE-2023-27536) - fix FTP too eager connection reuse (CVE-2023-27535) - fix SFTP path ~ resolving discrepancy (CVE-2023-27534) - fix TELNET option IAC injection (CVE-2023-27533) MODERATE Copyright 2023 Oracle, Inc. CVE-2023-27533 CVE-2023-27536 CVE-2023-27538 CVE-2023-27534 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base cpe:/o:oracle:linux:9:3:baseos_base cpe:/o:oracle:linux:9::baseos_latest Oracle Linux 9 [3.2.2-2] - Remove misapplied license Resolves: rhbz#2160307 [3.2.2-1] - Rebase to 3.2.2 - Use systemd-sysusers to create user Resolves: CVE-2023-22745 Resolves: rhbz#2095479 Resolves: rhbz#2160307 Resolves: rhbz#2162613 LOW Copyright 2023 Oracle, Inc. CVE-2023-22745 cpe:/o:oracle:linux:9:3:baseos_base cpe:/a:oracle:linux:9::codeready_builder cpe:/o:oracle:linux:9::baseos_latest Oracle Linux 9 [21.2.3-7] - Use tarfile.data_filter for extracting (CVE-2007-4559, PEP-721, PEP-706) Resolves: RHBZ#2207997 MODERATE Copyright 2023 Oracle, Inc. CVE-2007-4559 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base cpe:/o:oracle:linux:9:3:baseos_base cpe:/o:oracle:linux:9::baseos_latest Oracle Linux 9 [6.2-10.20210508] - ignore TERMINFO and HOME only if setuid/setgid/capability (#2211666) [6.2-9.20210508] - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491) - ignore TERMINFO and HOME environment variables if running as root (#2211666) MODERATE Copyright 2023 Oracle, Inc. CVE-2023-29491 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base cpe:/o:oracle:linux:9:3:baseos_base cpe:/o:oracle:linux:9::baseos_latest Oracle Linux 9 [1.21.1-1.0.1] - Fixed race condition in krb5_set_password() [Orabug: 33609767] [1.21.1-1] - New upstream version (1.21.1) - Fix double-free in KDC TGS processing (CVE-2023-39975) - Add support for 'pac_privsvr_enctype' KDB string attribute Resolves: rhbz#2060421 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-39975 CVE-2023-36054 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base cpe:/o:oracle:linux:9:3:baseos_base cpe:/o:oracle:linux:9::baseos_latest Oracle Linux 9 [3.3.17-13.0.1] - ps: remove uptime integer conversion [Orabug: 35909347] - ps: improved three elapsed 'jiffies/tics' calculations [Orabug: 35909347] [3.3.17-13] - ps: mitigation of possible buffer overflow - Resolves: rhbz#2228504 [3.3.17-12] - sysctl: '-N' option shows values instead of names if '-p' - Resolves: rhbz#2222056 LOW Copyright 2023 Oracle, Inc. CVE-2023-4016 cpe:/o:oracle:linux:9:3:baseos_base cpe:/a:oracle:linux:9::codeready_builder cpe:/o:oracle:linux:9::baseos_latest Oracle Linux 9 [0.8-15] - Fix CVE-2023-1981 (#2186689) [0.8-14] - Fix CVE-2021-3502 (#1949949) [0.8-13] - Fix CVE-2021-3468 (#1944092) MODERATE Copyright 2023 Oracle, Inc. CVE-2023-1981 CVE-2021-3502 CVE-2021-3468 cpe:/a:oracle:linux:9::distro_builder cpe:/o:oracle:linux:9::baseos_latest cpe:/a:oracle:linux:9::appstream cpe:/o:oracle:linux:9:3:baseos_base cpe:/a:oracle:linux:9::codeready_builder cpe:/a:oracle:linux:9:3:appstream_base Oracle Linux 9 [1:0.36.2-8] - Security fix for CVE-2022-40898 - Resolves: rhbz#2178881 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-40898 cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 9 [9.54.0-14] - fix for CVE-2023-43115 - Resolves: RHEL-10184 [9.54.0-13] - fix for CVE-2023-38559 - Resolves: rhbz#2224372 [9.54.0-12] - fix for CVE-2023-36664 - Resolves: rhbz#2217810 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-43115 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 9 [1:21.0.1.0.12-2.0.1] - Add Oracle vendor bug URL [1:21.0.1.0.12-2] - Switch to using portable binaries built on RHEL 7 - Sync the copy of the portable specfile with the RHEL 7 version - Related: RHEL-12997 [1:21.0.1.0.12-1] - Update to jdk-21.0.1.0+12 (GA) - Update release notes to 21.0.1.0+12 - Sync the copy of the portable specfile with the latest update - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise bundled versions with 21u sources (FreeType, LCMS, HarfBuzz, libpng) - Sync generate_tarball.sh with 11u & 17u version - Update bug URL for RHEL to point to the Red Hat customer portal - Fix upstream release URL for OpenJDK source - Following JDK-8005165, class data sharing can be enabled on all JIT architectures - Use tapsets from the misc tarball - Introduce 'prelease' for the portable release versioning, to handle EA builds - Make sure root installation directory is created first - Use in-place substitution for all but the first of the tapset changes - Synchronise runtime and buildtime tzdata requirements - Remove ghosts for binaries not in java-21-openjdk (pack200, rmid, unpack200) - Add missing jfr, jpackage and jwebserver alternative ghosts - Move jcmd to the headless package - Revert alt-java binary location to being within the JDK tree - Resolves: RHEL-12997 - Resolves: RHEL-14954 - Resolves: RHEL-14962 - Resolves: RHEL-14958 - Related: RHEL-14946 - Resolves: RHEL-14959 - Resolves: RHEL-14948 [1:21.0.1.0.12-1] - Exclude classes_nocoops.jsa on i686 and arm32 - Related: RHEL-14946 [1:21.0.1.0.12-1] - Fix packaging of CDS archives - Resolves: RHEL-14946 [1:21.0.0.0.35-2] - Update documentation (README.md) - Replace alt-java patch with a binary separate from the JDK - Drop stale patches that are of little use any more: - * nss.cfg has been disabled since early PKCS11 work and long superseded by FIPS work - * No accessibility subpackage to warrant RH1648242 & RH1648644 patches any more - * No use of system libjpeg turbo to warrant RH649512 patch any more - Replace RH1684077 pcsc-lite-libs patch with better JDK-8009550 fix being upstreamed - Adapt alt-java test to new binary where there is always a set_speculation function - Related: RHEL-12997 [1:21.0.0.0.35-1] - Update to jdk-21.0.0+35 - Update system crypto policy & FIPS patch from new fips-21u tree - Update generate_tarball.sh to sync with upstream vanilla script inc. no more ECC removal - Drop fakefeaturever now it is no longer needed - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Use upstream release URL for OpenJDK source - Re-enable tzdata tests now we are on the latest JDK and things are back in sync - Install jaxp.properties introduced by JDK-8303530 - Install lible.so introduced by JDK-8306983 - Related: RHEL-12997 [1:21.0.0.0.35-1] - Replace smoke test files used in the staticlibs test, as fdlibm was removed by JDK-8303798 - Related: RHEL-12997 [1:20.0.0.0.36-1] - Update to jdk-20.0.2+9 - Update release notes to 20.0.2+9 - Update system crypto policy & FIPS patch from new fips-20u tree - Update generate_tarball.sh ICEDTEA_VERSION - Update CLDR reference data following update to 42 (Rocky Mountain-Normalzeit => Rocky-Mountain-Normalzeit) - Related: RHEL-12997 [1:20.0.0.0.36-1] - Dropped JDK-8295447, JDK-8296239 & JDK-8299439 patches now upstream - Adapted rh1750419-redhat_alt_java.patch - Related: RHEL-12997 [1:19.0.1.0.10-1] - Update to jdk-19.0.2 release - Update release notes to 19.0.2 - Rebase FIPS patches from fips-19u branch - Remove references to sample directory removed by JDK-8284999 - Add local patch JDK-8295447 (javac NPE) which was accepted into 19u upstream but not in the GA tag - Add local patches for JDK-8296239 & JDK-8299439 (Croatia Euro update) which are present in 8u, 11u & 17u releases - Related: RHEL-12997 [1:18.0.2.0.9-1] - Update to jdk-18.0.2 release - Support JVM variant zero following JDK-8273494 no longer installing Zero's libjvm.so in the server directory - Rebase FIPS patches from fips-18u branch - Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch - Drop now unused fresh_libjvm, build_hotspot_first, bootjdk and buildjdkver variables, as we don't build a JDK here - Drop tzdata patches added for 17.0.7 which will eventually appear in the upstream tarball when we reach OpenJDK 21 - Disable tzdata tests until we are on the latest JDK and things are back in sync - Use empty nss.fips.cfg until it is again available via the FIPS patch - Related: RHEL-12997 [1:18.0.2.0.9-1] - Update to ea version of jdk18 - Add new slave jwebserver and corresponding manpage - Adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch - Related: RHEL-12997 [1:18.0.2.0.9-1] - Add javaver- and origin-specific javadoc and javadoczip alternatives. - Related: RHEL-12997 [1:17.0.7.0.7-4] - Add files missed by centpkg import. - Related: rhbz#2192748 [1:17.0.7.0.7-3] - Create java-21-openjdk package based on java-17-openjdk - Related: rhbz#2192748 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-22025 CVE-2023-22081 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 9 [4.18.6-101] - resolves: RHEL-11937 Fix CVE-2023-3961 - smbd must check the pipename - resolves: RHEL-11937 Fix CVE-2023-4091 - SMB clients can truncate files - resolves: RHEL-11937 Fix CVE-2023-42669 - Remove rpcecho server MODERATE Copyright 2023 Oracle, Inc. CVE-2023-3961 CVE-2023-4091 CVE-2023-42669 cpe:/a:oracle:linux:9::appstream cpe:/o:oracle:linux:9:3:baseos_patch cpe:/a:oracle:linux:9::codeready_builder cpe:/o:oracle:linux:9::baseos_latest Oracle Linux 9 [7.76.1-26.el9_3.2] - fix cookie injection with none file (CVE-2023-38546) [7.76.1-26.el9_3.1] - socks: return error if hostname too long for remote resolve (CVE-2023-38545) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-38546 CVE-2023-38545 cpe:/a:oracle:linux:9::appstream cpe:/o:oracle:linux:9:3:baseos_patch cpe:/o:oracle:linux:9::baseos_latest Oracle Linux 9 [1.43.0-5.1] - fix HTTP/2 Rapid Reset (CVE-2023-44487) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-44487 cpe:/o:oracle:linux:9:3:baseos_patch cpe:/a:oracle:linux:9::codeready_builder cpe:/o:oracle:linux:9::baseos_latest Oracle Linux 9 [7:5.5-6.1] - Resolves: RHEL-14819 - squid: squid: denial of Servicein FTP - Resolves: RHEL-14807 - squid: squid: Denial of Service in HTTP Digest Authentication - Resolves: RHEL-14780 - squid: squid: Request/Response smuggling in HTTP/1.1 and ICAP [7:5.5-6] - Resolves: #2231827 - Crash with half_closed_client on CRITICAL Copyright 2023 Oracle, Inc. CVE-2023-46847 CVE-2023-46846 CVE-2023-46848 cpe:/a:oracle:linux:9::appstream Oracle Linux 7 [1.20.4-24] - CVE fix for: CVE-2023-5367 Resolves: https://issues.redhat.com/browse/RHEL-13424 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-5367 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7::optional_latest cpe:/a:oracle:linux:7:9:patch Oracle Linux 7 [7:3.5.20-17.0.1] - Mutiple CVE fixes for squid [Orabug: 33146289] - Resolves: CVE-2021-28651 squid: Bug 5104: Memory leak in RFC 2169 response parsing (#778) - Resolves: CVE-2021-28652 squid: Bug 5106: Broken cache manager URL parsing (#788) - Resolves: CVE-2021-31806,31807,31808 squid: Handle more Range requests (#790) - Resolves: CVE-2021-33620 squid: Handle more partial responses (#791) [7:3.5.20-17.9] - Resolves: RHEL-14789 - squid: Denial of Service in HTTP Digest Authentication (CVE-2023-46847) CRITICAL Copyright 2023 Oracle, Inc. CVE-2023-46847 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7::optional_latest cpe:/a:oracle:linux:7:9:patch Oracle Linux 7 [3.6.8-21.0.1] - Remove the 'getfile' feature of pydoc [Orabug: 33182027][CVE-2021-3426] - Fix buffer overflow in PyCArg_repr [Orabug: 32551171][CVE-2021-3177] - Add Oracle Linux distribution in platform.py [Orabug: 20812544] [3.6.8-21] - Test fixups for CVE-2023-40217 Resolves: RHEL-3139 [3.6.8-20] - Security fix for CVE-2023-40217 Resolves: RHEL-3139 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-40217 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7::optional_latest cpe:/a:oracle:linux:7:9:patch Oracle Linux 7 [2.7.5-94.0.1] - Add Oracle Linux distribution in platform.py [orabug 20812544] [2.7.5-94] - Security fix for CVE-2023-40217 Resolves: RHEL-9615 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-40217 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7::optional_latest cpe:/a:oracle:linux:7:9:patch Oracle Linux 7 [0:2.4.2-6] - Avoid override target symlink by standard file in AbstractUnArchiver - Fixes: CVE-2023-37460 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-37460 cpe:/a:oracle:linux:7::optional_latest Oracle Linux 8 [1:21.0.1.0.12-2.0.1] - Add Oracle vendor bug URL [1:21.0.1.0.12-2] - Switch to using portable binaries built on RHEL 7 - Sync the copy of the portable specfile with the RHEL 7 version - Related: RHEL-12997 [1:21.0.1.0.12-1] - Update to jdk-21.0.1.0+12 (GA) - Update release notes to 21.0.1.0+12 - Sync the copy of the portable specfile with the latest update - Update openjdk_news script to specify subdirectory last - Add missing discover_trees script required by openjdk_news - Synchronise bundled versions with 21u sources (FreeType, LCMS, HarfBuzz, libpng) - Sync generate_tarball.sh with 11u & 17u version - Update bug URL for RHEL to point to the Red Hat customer portal - Fix upstream release URL for OpenJDK source - Following JDK-8005165, class data sharing can be enabled on all JIT architectures - Use tapsets from the misc tarball - Introduce 'prelease' for the portable release versioning, to handle EA builds - Make sure root installation directory is created first - Use in-place substitution for all but the first of the tapset changes - Synchronise runtime and buildtime tzdata requirements - Remove ghosts for binaries not in java-21-openjdk (pack200, rmid, unpack200) - Add missing jfr, jpackage and jwebserver alternative ghosts - Move jcmd to the headless package - Revert alt-java binary location to being within the JDK tree - Resolves: RHEL-12997 - Resolves: RHEL-14954 - Resolves: RHEL-14962 - Resolves: RHEL-14958 - Related: RHEL-14946 - Resolves: RHEL-14959 - Resolves: RHEL-14948 [1:21.0.1.0.12-1] - Exclude classes_nocoops.jsa on i686 and arm32 - Related: RHEL-14946 [1:21.0.1.0.12-1] - Fix packaging of CDS archives - Resolves: RHEL-14946 [1:21.0.0.0.35-2] - Update documentation (README.md) - Replace alt-java patch with a binary separate from the JDK - Drop stale patches that are of little use any more: - * nss.cfg has been disabled since early PKCS11 work and long superseded by FIPS work - * No accessibility subpackage to warrant RH1648242 & RH1648644 patches any more - * No use of system libjpeg turbo to warrant RH649512 patch any more - Replace RH1684077 pcsc-lite-libs patch with better JDK-8009550 fix being upstreamed - Adapt alt-java test to new binary where there is always a set_speculation function - Related: RHEL-12997 [1:21.0.0.0.35-1] - Update to jdk-21.0.0+35 - Update system crypto policy & FIPS patch from new fips-21u tree - Update generate_tarball.sh to sync with upstream vanilla script inc. no more ECC removal - Drop fakefeaturever now it is no longer needed - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball - Use upstream release URL for OpenJDK source - Re-enable tzdata tests now we are on the latest JDK and things are back in sync - Install jaxp.properties introduced by JDK-8303530 - Install lible.so introduced by JDK-8306983 - Related: RHEL-12997 [1:21.0.0.0.35-1] - Replace smoke test files used in the staticlibs test, as fdlibm was removed by JDK-8303798 - Related: RHEL-12997 [1:20.0.0.0.36-1] - Update to jdk-20.0.2+9 - Update release notes to 20.0.2+9 - Update system crypto policy & FIPS patch from new fips-20u tree - Update generate_tarball.sh ICEDTEA_VERSION - Update CLDR reference data following update to 42 (Rocky Mountain-Normalzeit => Rocky-Mountain-Normalzeit) - Related: RHEL-12997 [1:20.0.0.0.36-1] - Dropped JDK-8295447, JDK-8296239 & JDK-8299439 patches now upstream - Adapted rh1750419-redhat_alt_java.patch - Related: RHEL-12997 [1:19.0.1.0.10-1] - Update to jdk-19.0.2 release - Update release notes to 19.0.2 - Rebase FIPS patches from fips-19u branch - Remove references to sample directory removed by JDK-8284999 - Add local patch JDK-8295447 (javac NPE) which was accepted into 19u upstream but not in the GA tag - Add local patches for JDK-8296239 & JDK-8299439 (Croatia Euro update) which are present in 8u, 11u & 17u releases - Related: RHEL-12997 [1:18.0.2.0.9-1] - Update to jdk-18.0.2 release - Support JVM variant zero following JDK-8273494 no longer installing Zero's libjvm.so in the server directory - Rebase FIPS patches from fips-18u branch - Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch - Drop now unused fresh_libjvm, build_hotspot_first, bootjdk and buildjdkver variables, as we don't build a JDK here - Drop tzdata patches added for 17.0.7 which will eventually appear in the upstream tarball when we reach OpenJDK 21 - Disable tzdata tests until we are on the latest JDK and things are back in sync - Use empty nss.fips.cfg until it is again available via the FIPS patch - Related: RHEL-12997 [1:18.0.2.0.9-1] - Update to ea version of jdk18 - Add new slave jwebserver and corresponding manpage - Adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch - Related: RHEL-12997 [1:18.0.2.0.9-1] - Add javaver- and origin-specific javadoc and javadoczip alternatives. - Related: RHEL-12997 [1:17.0.7.0.7-4] - Add files missed by centpkg import. - Related: rhbz#2192748 [1:17.0.7.0.7-3] - Create java-21-openjdk package based on java-17-openjdk - Related: rhbz#2192748 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-22025 CVE-2023-22081 cpe:/a:oracle:linux:8:9:appstream_base cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 8 [22.3.1-4] - Use tarfile.data_filter for extracting (CVE-2007-4559, PEP-721, PEP-706) Resolves: RHBZ#2218249 [22.3.1-3] - Fix changelog to contain Fedora contributors Resolves: RHEL-232 MODERATE Copyright 2023 Oracle, Inc. CVE-2007-4559 cpe:/a:oracle:linux:8:9:appstream_base cpe:/a:oracle:linux:8::appstream Oracle Linux 8 [1.20.11-17] - Backport fix for a deadlock with DRI3 Resolves: rhbz#2192556 [1.20.11-16] - CVE fix for: CVE-2023-1393 Resolves: rhbz#2180296 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-1393 cpe:/a:oracle:linux:8:9:appstream_base cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 8 [21.1.3-12] - Backport fix for a deadlock with DRI3 Resolves: rhbz#2212831 [21.1.3-11] - Fix CVE-2023-1393 (#2180298) MODERATE Copyright 2023 Oracle, Inc. CVE-2023-1393 cpe:/a:oracle:linux:8:9:appstream_base cpe:/a:oracle:linux:8::appstream Oracle Linux 8 [20220126gitbb1bba3d77-6] - edk2-UefiCpuPkg-MpInitLib-fix-apic-mode-for-cpu-hotplug.patch [bz#2150267] - Resolves: bz#2150267 (ovmf must consider max cpu count not boot cpu count for apic mode [rhel-8]) [20220126gitbb1bba3d77-5] - edk2-SecurityPkg-DxeImageVerificationLib-Check-result-of-.patch [bz#1861743] - Resolves: bz#1861743 (CVE-2019-14560 edk2: Function GetEfiGlobalVariable2() return value not checked in DxeImageVerificationHandler() [rhel-8]) MODERATE Copyright 2023 Oracle, Inc. CVE-2019-14560 cpe:/a:oracle:linux:8:9:appstream_base cpe:/a:oracle:linux:8::distro_builder cpe:/a:oracle:linux:8::appstream Oracle Linux 8 [6.4.7.2-15.0.1] - Replace colors with Oracle colors [Orabug: 32120093] - Build with --with-vendor='Oracle America, Inc.' - Added the --with-hamcrest option to configure. [1:6.4.7.2-15] - Resolves: rhbz#2210191 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210195 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208509 CVE-2023-1183 libreoffice: Arbitrary File Write [1:6.4.7.2-14] - Resolves: rhbz#2182390 CVE-2022-38745 Empty entry in Java class path MODERATE Copyright 2023 Oracle, Inc. CVE-2023-2255 CVE-2023-0950 CVE-2022-38745 CVE-2023-1183 cpe:/a:oracle:linux:8:9:appstream_base cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 8 buildah [1:1.24.6-7] - rebuild for CVE-2023-29406 - Related: #2176055 [1:1.24.6-6] - rebuild for following CVEs: CVE-2022-41724 CVE-2022-41725 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400 - Resolves: #2179943 - Resolves: #2187341 - Resolves: #2187359 - Resolves: #2203677 - Resolves: #2207505 cockpit-podman [46-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/46 - Related: #2061390 conmon [2:2.1.4-2] - update to https://github.com/containers/conmon/releases/tag/v2.1.4 - Related: #2176055 containernetworking-plugins [1:1.1.1-5] - add Epoch in Provides - Related: #2176055 [1:1.1.1-4] - rebuild for following CVEs: CVE-2022-41724 CVE-2022-41725 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400 - Resolves: #2179944 - Resolves: #2187342 - Resolves: #2187360 - Resolves: #2203693 - Resolves: #2207506 containers-common [1-38.0.1] - Updated removed references [Orabug: 33473101] (Alex Burmashev) - Adjust registries.conf (Nikita Gerasimov) - remove references to RedHat registry (Nikita Gerasimov) container-selinux [2:2.205.0-3] - fix build for stable module - Related: #2176055 criu crun [1.8.3-1] - fix could not find symbol criu_set_lsm_mount_context in libcriu.so - Related: #2176055 fuse-overlayfs [1.9-2] - update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.9 - Related: #2176055 libslirp oci-seccomp-bpf-hook [1.2.5-2] - fix compatibility with the new bcc - Related: #2176055 podman [2:4.0.2-24] - rebuild for CVE-2023-29406 - Related: #2176055 [2:4.0.2-23] - rebuild for following CVEs: CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400 - Resolves: #2179945 - Resolves: #2187315 - Resolves: #2187361 - Resolves: #2203678 - Resolves: #2207507 python-podman [4.0.0-2] - bump to v4.0.0 - Related: #2176055 runc [1:1.1.5-2] - rebuild for following CVEs: CVE-2022-41724 - Resolves: #2179971 skopeo [2:1.6.2-8] - rebuild for following CVEs: CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400 - Resolves: #2179946 - Resolves: #2187316 - Resolves: #2187362 - Resolves: #2203679 - Resolves: #2207508 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-29406 CVE-2022-41723 CVE-2023-3978 CVE-2023-25809 CVE-2023-29400 CVE-2022-3064 CVE-2023-24534 CVE-2023-24536 CVE-2023-24538 CVE-2022-41724 CVE-2022-41725 CVE-2023-24540 CVE-2023-27561 CVE-2023-24537 CVE-2023-24539 CVE-2023-28642 cpe:/a:oracle:linux:8:9:appstream_base cpe:/a:oracle:linux:8::appstream Oracle Linux 8 aardvark-dns [2:1.7.0-1] - update to https://github.com/containers/aardvark-dns/releases/tag/v1.7.0 - Related: #2176055 [2:1.6.0-1] - update to https://github.com/containers/aardvark-dns/releases/tag/v1.6.0 - Related: #2176055 buildah [1:1.31.3-1] - update to https://github.com/containers/buildah/releases/tag/v1.31.3 - Related: #2176055 [1:1.31.2-1] - update to https://github.com/containers/buildah/releases/tag/v1.31.2 - Related: #2176055 [1:1.31.1-2] - build buildah off main branch for early testing of zstd compression - Related: #2176055 [1:1.31.1-1] - update to https://github.com/containers/buildah/releases/tag/v1.31.1 - Related: #2176055 [1:1.31.0-1] - update to https://github.com/containers/buildah/releases/tag/v1.31.0 - Related: #2176055 [1:1.30.0-2] - rebuild for following CVEs: CVE-2023-25173 CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400 - Resolves: #2175070 - Resolves: #2179948 - Resolves: #2187317 - Resolves: #2187364 - Resolves: #2203680 - Resolves: #2207510 [1:1.30.0-1] - update to https://github.com/containers/buildah/releases/tag/v1.30.0 - Related: #2176055 [1:1.29.1-4] - update to the latest content of https://github.com/containers/buildah/tree/release-1.29 (https://github.com/containers/buildah/commit/f01e5f9) - Related: #2176055 [1:1.29.1-3] - update to the latest content of https://github.com/containers/buildah/tree/release-1.29 (https://github.com/containers/buildah/commit/f07d2c9) - Resolves: #2166195 cockpit-podman [75-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/75 - Related: #2176055 [74-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/74 - Related: #2176055 [73-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/73 - Related: #2176055 [72-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/72 - Related: #2176055 [71-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/71 - Related: #2176055 [70-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/70 - Related: #2176055 [69-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/69 - use unified spec file - Related: #2176055 [68-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/68 - Related: #2176055 [67-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/67 - Related: #2176055 [66-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/66 - Related: #2176055 [65-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/65 - Related: #2176055 [64-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/64 - Related: #2176055 [63.1-2] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/63.1 - Related: #2176055 [59-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/59 - Related: #2123641 [58-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/58 - Related: #2123641 [57-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/57 - Related: #2123641 [56-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/56 - Related: #2123641 [55-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/55 - Related: #2123641 [54-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/54 - Related: #2123641 [53-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/53 - Related: #2123641 [52-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/52 - Related: #2061390 [51.1-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/51.1 - Related: #2061390 [50-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/50 - Related: #2061390 [49.1-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/49.1 - Related: #2061390 [48-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/48 - Related: #2061390 [47-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/47 - Related: #2061390 [46-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/46 - Related: #2061390 [44-2] - use spec file from the upstream source - Related: #2061390 [44-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/44 - Related: #2061390 [43-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/43 - Related: #2061390 [42-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/42 - Related: #2001445 [41-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/41 - Related: #2001445 [40-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/40 - Related: #2001445 [39-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/39 - Related: #2001445 [38-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/38 - Related: #2001445 [37-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/37 - Related: #2001445 [36-2] - revert the ansible change to fix gating tests - Related: #2001445 [36-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/36 - Related: #2001445 [35-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/35 - Related: #2001445 [34-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/34 - Related: #2001445 [33-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/33 - Related: #1934415 [32-2] - attempt to fix gating tests - thanks for Matej Marusak - Related: #1934415 [32-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/32 - Related: #1934415 [31-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/31 - Related: #1934415 [30-1] - fix gating test failure for cockpit-podman - Related: #1934415 [29-3] - fix gating test failure for cockpit-podman - Related: #1934415 [29-2] - gating test fix - properly install browser - Related: #1934415 [29-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/29 - Related: #1883490 [28.1-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/28.1 - Related: #1883490 [28-4] - readd cockpit-system Related: #1914884 [28-3] - fix gating tests for cockpit-podman - thanks for Matej Marusak - Related: #1883490 [28-2] - remove applied patch and cockpit-shell dependency - Related: #1883490 [28-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/28 - Related: #1883490 [27.1-4] - fix 'Fix gating tests of container-tools for 8.4.0' - Related: #1883490 [27.1-3] - another gating test fix - don't remove all containers but only admin ones thanks to Matej Marusak - Related: #1883490 [27.1-2] - gating tests - always set VM password - Related: #1883490 [27.1-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/27.1 - Related: #1883490 [27-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/27 - Related: #1883490 [26-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/26 - Related: #1883490 [25-4] - replace docker.io with quay.io for gating tests due do docker.io new pull rate limit requirements - Related: #1883490 [25-3] - test: Cleanup images before pulling the ones we need - thanks to Matej Marusak - Related: #1883490 [25-2] - remove hack in tests - Related: #1883490 [25-1] - synchronize with stream-container-tools-rhel8 - Related: #1883490 [18.1-2] - revert back to 18.1 as this version is aimed at 8.3.0 - Related: #1821193 [19-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/19 - Related: #1821193 [18.1-1] - Fix AppStream metainfo (rhbz#1854673) [18-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/v18 - Related: #1821193 [17-1] - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/17 - Related: #1821193 [16-1] - synchronize containter-tools 8.3.0 with 8.2.1 - Related: #1821193 [15-1] - Drop obsolete functionality for Fedora Atomic - Localize dates and times - Make tests non-destructive, to support gating - Fix crash on filtering anonymous images - Translation updates - Show historical logs [12-1] - Configure CPU share for system containers - Translation updates [11-1] - Fix Alert notification in Image Search Modal - Allow more than a single Error Notification for Container action errors - Various Alert cleanups - Translation updates [10-1] - Support for user containers - Show list of containers that use given image - Show placeholder while loading containers and images - Fix setting memory limit rhbz#1732713 - Add container Terminal rhbz#1703245 [4-1] - Fix regression in container commit - Fix AppStream ID rhbz#1734809 [3-1] - Enable Commit button for running containers - Fix race condition with container deletion - Stop fetching all containers/images for each container/image event [2-2] - Fix podman dependency [2-1] - Update to upstream 2 release - Support podman API 1.3 - Support running commands with arguments - Show the default command coming from image - Implement filtering of images and containers [1-2] - Update to upstream 1 release conmon [3:2.1.8-1] - update to https://github.com/containers/conmon/releases/tag/v2.1.8 - Related: #2176055 [3:2.1.7-1] - update to https://github.com/containers/conmon/releases/tag/v2.1.7 - Related: #2176055 containernetworking-plugins [1:1.3.0-4] - add Epoch in Provides - Related: #2176055 [1:1.3.0-3] - remove no_openssl for FIPS compliance - Related: #2176055 [1:1.3.0-2] - rebuild for following CVEs: CVE-2022-41724 CVE-2022-41725 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400 - Resolves: #2179944 - Resolves: #2187342 - Resolves: #2187360 - Resolves: #2203693 - Resolves: #2207506 [1:1.3.0-1] - update to https://github.com/containernetworking/plugins/releases/tag/v1.3.0 - Related: #2176055 containers-common [2:1-54.0.1] - Updated removed references [Orabug: 33473101] (Alex Burmashev) - Adjust registries.conf (Nikita Gerasimov) - remove references to RedHat registry (Nikita Gerasimov) [2:1-54] - update vendored components and shortnames - Related: #2176055 [2:1-53] - update vendored components - Related: #2176055 [2:1-52] - update vendored components - Related: #2176055 [2:1-51] - be sure default_capabilities contain SYS_CHROOT - Resolves: #2166195 [2:1-50] - improve shortnames generation - Related: #2176055 [2:1-49] - update vendored components and configuration files - Related: #2123641 [2:1-48] - update vendored components and configuration files - Related: #2123641 [2:1-47] - enable NET_RAW capability for RHEL8 only - Related: #2123641 [2:1-46] - update vendored components and configuration files - Related: #2123641 [2:1-45] - update vendored components and configuration files - Related: #2123641 [2:1-44] - update vendored components and configuration files - Related: #2123641 [2:1-43] - update vendored components and configuration files - Related: #2123641 [2:1-42] - update vendored components and configuration files - Related: #2123641 [2:1-41] - add beta GPG key - Related: #2123641 [2:1-40] - add beta keys to default-policy.json - Related: #2061390 [2:1-39] - update shortnames - Related: #2061390 [2:1-38] - arch limitation because of go-md2man (missing on i686) - Related: #2061390 [2:1-37] - add install section - update vendored components - Related: #2061390 [2:1-36] - remove aardvark-dns and netavark - packaged separately - update vendored components and configuration files - Related: #2061390 [2:1-35] - update vendored components and configuration files - Related: #2061390 [2:1-34] - remove rhel-els and update shortnames - Related: #2061390 [2:1-33] - update shortnames - Related: #2061390 [2:1-32] - additional fix for unqualified registries - Related: #2061390 [2:1-31] - fix unqualified registries - Related: #2061390 [2:1-30] - update vendored components and configuration files - Related: #2061390 [2:1-29] - update unqualified registries list - Related: #2061390 [2:1-28] - update aardvark-dns and netavark to 1.0.3 - update vendored components - Related: #2061390 [2:1-27] - add man page sources too - Related: #2061390 [2:1-26] - add missing man pages from Fedora - Related: #2061390 [2:1-25] - allow consuming aardvark-dns and netavark from upstream branch - Related: #2061390 [2:1-24] - update to netavark and aardvark-dns 1.0.2 - update vendored components - Related: #2061390 [2:1-23] - update to netavark and aardvark-dns 1.0.1 - Related: #2001445 [2:1-22] - build rust packages with RUSTFLAGS set to make ExecShield happy - Related: #2001445 [2:1-21] - do not specify infra_image in containers.conf - needed to resolve gating test failures - Related: #2001445 [2:1-20] - update to netavark-1.0.0 and aardvark-dns-1.0.0 - Related: #2001445 [2:1-19] - package aarvark-dns and netavark as part of the containers-common - Related: #2001445 [2:1-18] - update shortnames and vendored components - Related: #2001445 [2:1-17] - containers.conf should contain network_backend = 'cni' in RHEL8.6 - Related: #2001445 [2:1-16] - update vendored components and configuration files - Related: #2001445 [2:1-15] - sync vendored components - Related: #2001445 [2:1-14] - sync vendored components - Related: #2001445 [2:1-13] - update shortnames from Pyxis - Related: #2001445 [2:1-12] - do not allow broken content from Pyxis to land in shortnames.conf - Related: #2001445 [2:1-11] - sync vendored components - update shortnames from Pyxis - Related: #2001445 [2:1-10] - use log_driver = 'journald' and events_logger = 'journald' for RHEL9 - Related: #2001445 [2:1-9] - consume seccomp.json from the oldest vendored version of c/common, not main branch - Related: #2001445 [2:1-8] - update vendored components - Related: #2001445 [2:1-7] - make log_driver = 'k8s-file' default in containers.conf - Related: #2001445 [2:1-6] - sync vendored components - Related: #2001445 [2:1-5] - update to the new vendored components - Related: #2001445 [2:1-4] - update to the new vendored components - Related: #2001445 [2:1-3] - update to the new vendored components - Related: #2001445 [2:1-2] - synchronize config files for RHEL-8.5 - Related: #1934415 [2:1-1] - initial import - Related: #1934415 container-selinux [2:2.221.0-1] - update to https://github.com/containers/container-selinux/releases/tag/v2.221.0 - Related: #2176055 [2:2.219.0-1] - update to https://github.com/containers/container-selinux/releases/tag/v2.219.0 - Related: #2176055 [2:2.218.0-1] - update to https://github.com/containers/container-selinux/releases/tag/v2.218.0 - Related: #2176055 [2:2.215.0-1] - update to https://github.com/containers/container-selinux/releases/tag/v2.215.0 - Related: #2176055 [2:2.213.0-2] - add watch statement removal from container.te - Related: #2176055 [2:2.213.0-1] - update to https://github.com/containers/container-selinux/releases/tag/v2.213.0 - Related: #2176055 [2:2.211.1-1] - update to https://github.com/containers/container-selinux/releases/tag/v2.211.1 - Related: #2176055 criu [3.18-4] - switch to egg-info on 8.9 - Related: #2176055 [3.18-3] - remove --progress-bar option - Related: #2176055 [3.18-2] - update to 3.18 - Related: #2176055 [3.17-1] - update to 3.17 - Resolves: #2175794 [3.15-2] - add gating tests - Related: #1971718 [3.15-1] - add -devel and -libs subpackages - Resolves: #1971718 [3.12-9] - Added additional fixup patches for the socket labelling [3.12-8] - Patch for socket labelling has changed upstream [3.12-4] - Applied patch to correctly restore socket()s [3.12-3] - Correctly exclude libs and devel for RHEL [3.12-2] - Updated to official 3.12 [3.12-0.1] - Updated to 3.12 (pre-release) - Create libs subpackage - Build against SELinux (Fedora and RHEL8) - Build against libbsd (Fedora) [ 3.11-2] - Updated to 3.11 - Removed upstreamed patches - Added patch for gcc-9 [3.10-7] - Fix 'criu check --feature link_nsid' with more than 10 interfaces (#1652442) [3.10-6] - Make sure no iptables rules are left after restore (#1652471) [3.10-5] - Added Recommends: tar It is necessary when checkpointing containers with a tmpfs [3.10-4] - Add patch to fix errors with read-only runc [3.10-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild [3.10-2] - Disable annobin as it seems to break CRIU [3.10-1] - Update to 3.10 (#1599710) - Switch to python3 [3.9-2] - Simplify ExclusiveArch now that there is no more F26 [3.9-1] - Update to 3.9 [3.8.1-1] - Update to 3.8.1 [3.8-2] - Bump release for COPR [3.8-1] - Update to 3.8 [3.7-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [3.7-4] - Switch to %ldconfig_scriptlets [3.7-3] - Fix python/python2 dependencies accross all branches [3.7-2] - Cleanup spec file conditionals [3.7-1] - Update to 3.7 [3.6-2] - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) [3.6-1] - Update to 3.6 [3.5-5] - Added patch to fix build on Fedora rawhide aarch64 [3.5-4] - Upgrade imported manpages to 3.5 [3.5-3] - Fix ExclusiveArch on RHEL [3.5-2] - Merge RHEL and Fedora spec file [3.5-1] - Update to 3.5 (#1496614) [3.4-1] - Update to 3.4 (#1483774) - Removed upstreamed patches - Added s390x (#1475719) [3.3-5] - Python 2 binary package renamed to python2-criu See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 [3.3-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild [3.3-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [3.3-2] - Added patches to handle changes in glibc [3.3-1] - Update to 3.3 [3.2.1-2] - Added patches to handle unified hierarchy and new glibc [3.2.1-1] - Update to 3.2.1-1 [3.1-2] - Rebuild for protobuf 3.3.1 [3.1-1] - Update to 3.1 [3.0-1] - Update to 3.0 [2.12-1] - Update to 2.12 [2.11.1-1] - Update to 2.11.1 [2.11-1] - Update to 2.11 [2.10-4] - Added patch to fix build on ppc64le [2.10-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [2.10-2] - Rebuild for protobuf 3.2.0 [2.10-1] - Update to 2.10 [2.9-1] - Update to 2.9 - Added crit manpage to crit subpackage [2.8-2] - Rebuild for protobuf 3.1.0 [2.8-1] - Update to 2.8 - Dropped 'mount_resolve_path()' patch [2.7-2] - Added upstream patch to fix #1381351 ('criu: mount_resolve_path(): criu killed by SIGSEGV') [2.7-1] - Update to 2.7 [2.6-1] - Update to 2.6 [2.5-1] - Update to 2.5 [2.4-2] - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages [2.4-1] - Update to 2.4 [2.3-1] - Update to 2.3 - Copy man-page from Fedora 24 for RHEL [2.2-1] - Update to 2.2 [2.1-2] - Remove crtools symbolic link [2.1-1] - Update to 2.1 [2.0-2] - Merge changes from Fedora [2.0-1] - Update to 2.0 [1.8-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [1.8-1] - Update to 1.8 [1.7.2-1] - Update to 1.7.2 [1.7-1] - Update to 1.7 [1.6.1-3] - Build only for power64le [1.6.1-2] - Build for aarch64 and power64 [1.6.1-1] - Update to 1.6.1 - Merge changes for RHEL packaging [1.6-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [1.6-1.1] - adapt to RHEL7 [1.6-1] - Update to 1.6 [1.5.2-2] - Require protobuf-python and python-ipaddr for python-criu [1.5.2] - Update to 1.5.2 [1.5.1-2] - Create python-criu and crit subpackages [1.5.1] - Update to 1.5.1 [1.4-1] - Update to 1.4 [1.3.1-1] - Update to 1.3.1 (#1142896) [1.3-1] - Update to 1.3 - Dropped all upstreamed patches - included pkgconfig file in -devel [1.2-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild [1.2-4] - Include inttypes.h for PRI helpers [1.2-3] - Rebuilt for https://bugzilla.redhat.com/show_bug.cgi?id=1126751 [1.2-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild [1.2-1] - Update to 1.2 - Dropped all upstreamed patches [1.1-4] - Create -devel subpackage [1.0-3] - Fix the epoch of crtools [1.0-2] - Rename crtools to criu #1034677 [1.0-1] - Update to 1.0 [0.8-1] - Update to 0.8 [0.7-1] - Update to 0.7 [0.6-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild [0.6-3] - Delete all kind of -fstack-protector gcc options [0.6-3] - Added arm macro to ExclusiveArch [0.6-2] - fix building on ARM - fix null pointer dereference [0.6-1] - updated to 0.6 - upstream moved binaries to sbin - using upstream's make install [0.5-1] - updated to 0.5 [0.4-1] - updated to 0.4 [0.3-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild [0.3-3] - added ExclusiveArch blocker bug [0.3-2] - improved Summary and Description [0.3-1] - updated to 0.3 - fix building Documentation/ [0.2-2] - remove macros like %{__mkdir_p} and %{__install} - add comment why it is only x86_64 [0.2-1] - initial release crun [1.8.7-1] - update to https://github.com/containers/crun/releases/tag/1.8.7 - Related: #2176055 [1.8.6-1] - update to https://github.com/containers/crun/releases/tag/1.8.6 - Related: #2176055 [1.8.5-1] - update to https://github.com/containers/crun/releases/tag/1.8.5 - Related: #2176055 [1.8.4-1] - update to https://github.com/containers/crun/releases/tag/1.8.4 - Related: #2176055 [1.8.3-2] - fix could not find symbol criu_set_lsm_mount_context in libcriu.so - Resolves: #2183041 [1.8.3-1] - update to https://github.com/containers/crun/releases/tag/1.8.3 - Related: #2176055 [1.8.2-1] - update to https://github.com/containers/crun/releases/tag/1.8.2 - Related: #2176055 [1.8.1-2] - add BR: criu-devel - Related: #2176055 [1.8.1-1] - update to https://github.com/containers/crun/releases/tag/1.8.1 - Related: #2176055 [1.7.2-1] - update to https://github.com/containers/crun/releases/tag/1.7.2 - Related: #2123641 [1.7.1-1] - update to https://github.com/containers/crun/releases/tag/1.7.1 - Related: #2123641 [1.7-1] - update to https://github.com/containers/crun/releases/tag/1.7 - Related: #2123641 [1.6-1] - update to https://github.com/containers/crun/releases/tag/1.6 - Related: #2123641 [1.5-1] - update to https://github.com/containers/crun/releases/tag/1.5 - Related: #2061390 [1.4.5-2] - BuildRequires: /usr/bin/go-md2man - Related: #2061390 [1.4.5-1] - update to https://github.com/containers/crun/releases/tag/1.4.5 - Related: #2061390 [1.4.4-1] - update to https://github.com/containers/crun/releases/tag/1.4.4 - Related: #2061390 [1.4.3-1] - update to https://github.com/containers/crun/releases/tag/1.4.3 - Related: #2061390 [1.4.2-1] - update to https://github.com/containers/crun/releases/tag/1.4.2 - Related: #2001445 [1.4.1-1] - update to https://github.com/containers/crun/releases/tag/1.4.1 - Related: #2001445 [1.4-1] - update to https://github.com/containers/crun/releases/tag/1.4 - Related: #2001445 [1.3-1] - update to https://github.com/containers/crun/releases/tag/1.3 - Related: #2001445 [1.2-1] - update to https://github.com/containers/crun/releases/tag/1.2 - Related: #2001445 [1.1-1] - update to https://github.com/containers/crun/releases/tag/1.1 - Related: #2001445 [1.0-1] - update to https://github.com/containers/crun/releases/tag/1.0 - Related: #1934415 [0.21-3] - remove BR: criu-devel and leave it just for RHEL9 - Related: #1934415 [0.21-2] - do not use versioned provide - BR: criu-devel - Related: #1934415 [0.21-1] - update to https://github.com/containers/crun/releases/tag/0.21 - Related: #1934415 [0.20.1-1] - update to https://github.com/containers/crun/releases/tag/0.20.1 - Related: #1934415 [0.20-1] - update to https://github.com/containers/crun/releases/tag/0.20 - Related: #1934415 [0.19.1-1] - update to https://github.com/containers/crun/releases/tag/0.19.1 - Related: #1934415 [0.19-2] - remove unused patch reference from spec - Related: #1934415 [0.19-1] - update to https://github.com/containers/crun/releases/tag/0.19 - Related: #1934415 [0.18-1] - allow to build without glibc-static (thanks to Giuseppe Scrivano) - Related: #1883490 [0.17-2] - reverting back to 0.17 as there's no glibc-static in RHEL - Related: #1883490 [0.18-1] - update to https://github.com/containers/crun/releases/tag/0.18 - Related: #1883490 [0.17-1] - update to https://github.com/containers/crun/releases/tag/0.17 - Related: #1883490 [0.16-2] - exclude i686 because of build failures - Related: #1883490 [0.16-1] - update to https://github.com/containers/crun/releases/tag/0.16 - Related: #1883490 [0.15.1-1] - update to https://github.com/containers/crun/releases/tag/0.15.1 - Related: #1883490 [0.15-2] - synchronize with stream-container-tools-rhel8 - Related: #1883490 [0.15-1] - synchronize with stream-container-tools-rhel8 - Related: #1883490 [0.14.1-2] - use proper CFLAGS - Related: #1821193 [0.14.1-1] - update to https://github.com/containers/crun/releases/tag/v0.14.1 - Related: #1821193 [0.14-1] - update to https://github.com/containers/crun/releases/tag/v0.14 - Related: #1821193 [0.13-1] - initial import fuse-overlayfs [1.12-1] - update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.12 - Related: #2176055 libslirp netavark [2:1.7.0-1] - update to https://github.com/containers/netavark/releases/tag/v1.7.0 - Related: #2176055 [2:1.6.0-1] - update to https://github.com/containers/netavark/releases/tag/v1.6.0 - Related: #2176055 [2:1.5.0-5] - fix --dns-add command is not functioning - Resolves: #2182897 [2:1.5.0-4] - exclude i686 - Related: #2123641 [2:1.5.0-3] - update build parameters - Related: #2123641 [2:1.5.0-2] - always stay offline during build - Related: #2123641 [2:1.5.0-1] - update to https://github.com/containers/netavark/releases/tag/v1.5.0 - Related: #2123641 [2:1.4.0-1] - update to https://github.com/containers/netavark/releases/tag/v1.4.0 - Related: #2123641 [2:1.3.0-1] - update to https://github.com/containers/netavark/releases/tag/v1.3.0 - Related: #2123641 [2:1.2.0-1] - update to https://github.com/containers/netavark/releases/tag/v1.2.0 - Resolves: #2116481 [2:1.1.0-6] - bump Epoch to preserve upgrade path - Related: #2061390 [1.1.0-5] - remove dependency on md2man - Related: #2061390 [1.1.0-4] - fix arches - Related: #2061390 [1.1.0-3] - add gating.yaml - Related: #2061390 [1.1.0-2] - require /usr/bin/go-md2man directly [1.1.0-1] - initial import - Related: #2061390 oci-seccomp-bpf-hook [1.2.9-1] - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.9 - Related: #2176055 [1.2.8-2] - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.8 - Related: #2176055 podman [3:4.6.1-4] - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel (https://github.com/containers/podman/commit/ea33dce) - Related: #2176055 [3:4.6.1-3] - add podmansh provides - Related: #2176055 [3:4.6.1-2] - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel (https://github.com/containers/podman/commit/1b2fadd) - Resolves: #2232127 [3:4.6.1-1] - update to https://github.com/containers/podman/releases/tag/v4.6.1 - Related: #2176055 [3:4.6.0-3] - build podman 4.6.0 off main branch for early testing of zstd compression - Related: #2176055 [3:4.6.0-2] - update license token to be SPDX compatible - Related: #2176055 [3:4.6.0-1] - update to latest content of https://github.com/containers/podman/releases/tag/4.6.0 (https://github.com/containers/podman/commit/38e6fab9664c6e59b66e73523b307a56130316ae) [3:4.6.0-0.3] - update to 4.6.0-rc2 - Related: #2176055 [3:4.6.0-0.2] - add missing Requires on podman-plugins - Resolves: #2220931 [3:4.6.0-0.1] - update to 4.6.0-rc1 - Related: #2176055 [3:4.5.1-5] - rebuild for following CVEs: CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400 - Resolves: #2179945 - Resolves: #2187315 - Resolves: #2187361 - Resolves: #2203678 - Resolves: #2207507 [3:4.5.1-4] - rebuild for following CVEs: CVE-2023-25173 CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400 - Resolves: #2175071 - Resolves: #2179950 - Resolves: #2187318 - Resolves: #2187366 - Resolves: #2203681 - Resolves: #2207512 [3:4.5.1-3] - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.6.1 - Related: #2176055 [3:4.5.1-2] - add missing BuildRequires - Related: #2176055 [3:4.5.1-1] - update to https://github.com/containers/podman/releases/tag/v4.5.1 - Related: #2176055 [3:4.4.1-19] - update to the latest content of https://github.com/containers/podman/tree/v4.4.1-rhel (https://github.com/containers/podman/commit/bcea446) - Related: #2176055 [3:4.4.1-18] - _user_tmpfilesdir definition is not part of systemd in 8.9 - Related: #2176055 [3:4.4.1-17] - add missing BR: systemd-rpm-macros - Related: #2176055 python-podman [4.6.0-1] - update to https://github.com/containers/podman-py/releases/tag/v4.6.0 - Related: #2176055 [4.5.1-1] - update to https://github.com/containers/podman-py/releases/tag/v4.5.1 - Related: #2176055 [4.5.0-1] - update to https://github.com/containers/podman-py/releases/tag/v4.5.0 - Related: #2176055 runc [1:1.1.9-1] - update to https://github.com/opencontainers/runc/releases/tag/v1.1.9 - Related: #2176055 [1:1.1.8-1] - update to https://github.com/opencontainers/runc/releases/tag/v1.1.8 - Related: #2176055 [1:1.1.7-2] - rebuild for following CVEs: CVE-2022-41724 - Resolves: #2179972 [1:1.1.7-1] - update to https://github.com/opencontainers/runc/releases/tag/v1.1.7 - Related: #2176055 [1:1.1.6-1] - update to https://github.com/opencontainers/runc/releases/tag/v1.1.6 - Related: #2176055 [1:1.1.5-1] - update to https://github.com/opencontainers/runc/releases/tag/v1.1.5 - Related: #2176055 [1:1.1.4-2] - update to https://github.com/opencontainers/runc/releases/tag/v1.1.4 - Related: #2176055 skopeo [2:1.13.3-1] - update to https://github.com/containers/skopeo/releases/tag/v1.13.3 - Related: #2176055 [2:1.13.2-1] - update to https://github.com/containers/skopeo/releases/tag/v1.13.2 - Related: #2176055 [2:1.13.1-1] - update to https://github.com/containers/skopeo/releases/tag/v1.13.1 - Related: #2176055 [2:1.13.0-1] - update to https://github.com/containers/skopeo/releases/tag/v1.13.0 - Related: #2176055 [2:1.12.0-2] - rebuild for following CVEs: CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400 - Resolves: #2179951 - Resolves: #2187319 - Resolves: #2187367 - Resolves: #2203682 - Resolves: #2207513 [2:1.12.0-1] - update to https://github.com/containers/skopeo/releases/tag/v1.12.0 - Related: #2176055 [2:1.11.3-0.2] - update to the latest content of https://github.com/containers/skopeo/tree/release-1.11 (https://github.com/containers/skopeo/commit/7e11ab4) - Related: #2176055 [2:1.11.3-0.1] - update to the latest content of https://github.com/containers/skopeo/tree/release-1.11 (https://github.com/containers/skopeo/commit/d79588e) - Related: #2176055 [2:1.11.2-0.4] - update to the latest content of https://github.com/containers/skopeo/tree/release-1.11 (https://github.com/containers/skopeo/commit/8191ef3) - Related: #2176055 [2:1.11.2-0.3] - fix build - Related: #2176055 [2:1.10.0-1] - update to https://github.com/containers/skopeo/releases/tag/v1.10.0 - Related: #2123641 [2:1.9.2-1] - update to https://github.com/containers/skopeo/releases/tag/v1.9.2 - Related: #2061390 [2:1.9.1-1] - update to https://github.com/containers/skopeo/releases/tag/v1.9.1 - Related: #2061390 [2:1.9.0-2] - update to skopeo-1.9.0 - thanks to Lokesh Mandvekar for fixing build issues - Related: #2061390 [2:1.8.0-2] - BuildRequires: /usr/bin/go-md2man - Related: #2061390 [2:1.8.0-1] - update to https://github.com/containers/skopeo/releases/tag/v1.8.0 - Related: #2061390 [2:1.7.0-2] - Related: #2061390 [2:1.7.0-1] - update to https://github.com/containers/skopeo/releases/tag/v1.7.0 - Related: #2061390 [2:1.6.1-1] - update to https://github.com/containers/skopeo/releases/tag/v1.6.1 - Related: #2001445 [2:1.6.0-1] - update to https://github.com/containers/skopeo/releases/tag/v1.6.0 - Related: #2001445 [2:1.5.2-1] - update to https://github.com/containers/skopeo/releases/tag/v1.5.2 - Related: #2001445 [2:1.5.1-1] - update to https://github.com/containers/skopeo/releases/tag/v1.5.1 - Related: #2001445 [2:1.5.0-2] - bump Epoch to preserve upgrade path - Related: #2001445 [1:1.5.0-1] - update to https://github.com/containers/skopeo/releases/tag/v1.5.0 - Related: #2001445 [1:1.5.1-0.3] - update to the latest content of https://github.com/containers/skopeo/tree/main (https://github.com/containers/skopeo/commit/9c9a9f3) - Related: #2001445 [1:1.5.1-0.2] - update to the latest content of https://github.com/containers/skopeo/tree/main (https://github.com/containers/skopeo/commit/116e75f) - Related: #2001445 [1:1.5.1-0.1] - update to the latest content of https://github.com/containers/skopeo/tree/main (https://github.com/containers/skopeo/commit/fc81803) - Related: #2001445 [1:1.4.1-0.12] - update to the latest content of https://github.com/containers/skopeo/tree/main (https://github.com/containers/skopeo/commit/ff88d3f) - Related: #2001445 [1:1.4.1-0.11] - update to the latest content of https://github.com/containers/skopeo/tree/main (https://github.com/containers/skopeo/commit/a95b0cc) - Related: #2001445 [1:1.4.1-0.10] - update to the latest content of https://github.com/containers/skopeo/tree/main (https://github.com/containers/skopeo/commit/53cf287) - Related: #2001445 [1:1.4.1-0.9] - update to the latest content of https://github.com/containers/skopeo/tree/main (https://github.com/containers/skopeo/commit/86fa758) - Related: #2001445 [1:1.4.1-0.8] - update to the latest content of https://github.com/containers/skopeo/tree/main (https://github.com/containers/skopeo/commit/4d3588e) - Related: #2001445 [1:1.4.1-0.7] - update to the latest content of https://github.com/containers/skopeo/tree/main (https://github.com/containers/skopeo/commit/25d3e7b) - Related: #2001445 [1:1.4.1-0.6] - update to the latest content of https://github.com/containers/skopeo/tree/main (https://github.com/containers/skopeo/commit/c5a5199) - Related: #2001445 [1:1.4.1-0.5] - update to the latest content of https://github.com/containers/skopeo/tree/main (https://github.com/containers/skopeo/commit/db1e814) - Related: #2001445 [1:1.4.1-0.4] - update to the latest content of https://github.com/containers/skopeo/tree/main (https://github.com/containers/skopeo/commit/31b8981) - Related: #2001445 [1:1.4.1-0.3] - update to the latest content of https://github.com/containers/skopeo/tree/main (https://github.com/containers/skopeo/commit/177443f) - Related: #2001445 [1:1.4.1-0.2] - update to the latest content of https://github.com/containers/skopeo/tree/main (https://github.com/containers/skopeo/commit/47b8082) - Related: #2001445 [1:1.4.2-0.1] - update to the latest content of https://github.com/containers/skopeo/tree/release-1.4 (https://github.com/containers/skopeo/commit/01e51ce) - Related: #1934415 [1:1.4.1-2] - update to the latest content of https://github.com/containers/skopeo/tree/release-1.4 (https://github.com/containers/skopeo/commit/130f32f) - Related: #1934415 [1:1.4.1-1] - update to v1.4.1 - Related: #1934415 [1:1.4.0-7] - update to the latest content of https://github.com/containers/skopeo/tree/release-1.4 (https://github.com/containers/skopeo/commit/ea32394) - Related: #1934415 [1:1.4.0-6] - carve away containers-common - it's now a separate package - Related: #1934415 [1:1.4.0-5] - be sure short-name-mode is permissive in RHEL8 - Related: #1934415 [1:1.4.0-4] - don't define short-name-mode in RHEL8 - Related: #1934415 [1:1.4.0-3] - re-add Requires: runc - Related: #1934415 [1:1.4.0-2] - update to 1.4.0 release and switch to the release-1.4 maint branch - Related: #1934415 [1:1.4.0-1] - update vendored components - ship /etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release only on non-RHEL and CentOS distros - Related: #1934415 [1:1.3.1-7] - switch to 'main' branch of podman - Related: #1934415 [1:1.3.1-6] - move unqualified-search-registries to [registries.search] - Resolves: #1977280 [1:1.3.1-5] - update shortnames from Pyxis - Related: #1934415 [1:1.3.1-4] - add direct runc dependency to avoid situation when runc is listed as default runtime but only crun is present in RHEL8 - Related: #1934415 [1:1.3.1-3] - update to the latest content of https://github.com/containers/skopeo/tree/release-1.3 (https://github.com/containers/skopeo/commit/038f70e) - Related: #1934415 [1:1.3.1-2] - use v3.2 branch for podman and update vendored branches - Related: #1934415 [1:1.3.1-1] - update to https://github.com/containers/skopeo/releases/tag/v1.3.1 - Related: #1934415 [1:1.3.0-5] - update shortname overrides - Related: #1952204 [1:1.3.0-4] - sync with Pyxis - use containers-mounts.conf.5.md from containers/common - Related: #1934415 [1:1.3.0-3] - update to new versions of vendored components - fail is there is an issue in communication with Pyxis API - understand devel branch in update.sh script - Related: #1934415 [1:1.3.0-2] - fix filelist with the new upstream release - Related: #1934415 [1:1.3.0-1] - update to https://github.com/containers/skopeo/releases/tag/v1.3.0 - Related: #1934415 [1:1.2.3-3] - update vendored components versions - sync shortnames with pyxis - Related: #1934415 [1:1.2.3-2] - assure runc is set as default runtime in RHEL8 - update shortnames from upstream - sync vendored component versions with upstream - Related: #1934415 [1:1.2.3-1] - update to skopeo-1.2.3 - sync with Fedora deps - fix typo in upstream Makefile - Related: #1934415 [1:1.2.2-6] - add update-vendored.sh, pyxis.sh and amend the shortname generation - Related: #1934415 [1:1.2.2-5] - require crun >= 0.19 and set it as default OCI runtime - add ensure() function to update.sh so that configuration statements can be easily amended/reviewed - Related: #1934415 [1:1.2.2-4] - use infra_image = 'registry.redhat.io/ubi8/pause' in containers.conf (unlike previous one ubi8/pause doesn't require authentication) - Related: #1934415 [1:1.2.2-3] - use infra_image = 'registry.redhat.io/rhel8/pause' in contiainers.conf - add update-vendored.sh script which will always assure we ship documentation/configs for versions vendored in podman, buildah and skopeo - Related: #1934415 [1:1.2.2-2] - use rhel-shortnames only from trusted registries - sync with config files from current versions of vendored projects - Resolves: #1933775 - Resolves: #1933776 [1:1.2.2-1] - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2 (https://github.com/containers/skopeo/commit/e72dd9c) - Related: #1883490 [1:1.2.1-14] - rename shortnames.conf to 000-shortnames.conf to assure evaluation order - Related: #1883490 [1:1.2.1-13] - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2 (https://github.com/containers/skopeo/commit/3abb778) - Related: #1883490 [1:1.2.1-12] - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2 (https://github.com/containers/skopeo/commit/b4210c0) - Resolves: #1914884 [1:1.2.1-11] - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2 (https://github.com/containers/skopeo/commit/6c0e35a) - Related: #1883490 [1:1.2.1-10] - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2 (https://github.com/containers/skopeo/commit/a05ddb8) - Related: #1883490 [1:1.2.1-9] - define 8.4.0 branch for podman (v3.0) - remove redundant source file - Related: #1883490 [1:1.2.1-8] - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2 (https://github.com/containers/skopeo/commit/2e90a8a) - Related: #1883490 [1:1.2.1-7] - convert subscription-manager from weak dep to a hint - Related: #1883490 [1:1.2.1-6] - fix rhel-shortnames.conf generation (avoid duplicates and records with invalid URL) - Related: #1883490 [1:1.2.1-5] - assure 'NET_RAW' is always defined - support rhel-shortnames.conf with generated shortname/registry aliases - Related: #1883490 [1:1.2.1-4] - add 'NET_RAW' default capability - Related: #1883490 [1:1.2.1-3] - ship preconfigured /etc/containers/registries.d/ files with containers-common - Related: #1883490 [1:1.2.1-2] - add shortnames from https://github.com/containers/shortnames - Related: #1883490 [1:1.2.1-1] - update vendored component versions - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2 (https://github.com/containers/skopeo/commit/2e90a8a) - Related: #1883490 [1:1.2.0-6] - gating tests fixes and bump podman branch - Related: #1883490 [1:1.2.0-5] - still use arch exclude as the go_arches macro is broken for 8.4 - Related: #1883490 [1:1.2.0-4] - unify vendored branches - add validation script - Related: #1883490 [1:1.2.0-3] - simplify spec file - use short commit ID in tarball name - Related: #1883490 [1:1.2.0-2] - synchronize with stream-container-tools-rhel8 - Related: #1883490 [1:1.2.0-1] - synchronize with stream-container-tools-rhel8 - Related: #1883490 [1:1.1.1-3] - propagate proper CFLAGS to CGO_CFLAGS to assure code hardening and optimization - Related: #1821193 [1:1.1.1-2] - drop applied patches - Related: #1821193 [1:1.1.1-1] - update to https://github.com/containers/skopeo/releases/tag/v1.1.1 - Related: #1821193 [1:1.1.0-3] - fix broken gating tests: docker unexpectedly removed htpasswd from their 'registry:2' image, so we now use htpasswd from httpd-tools on host. [1:1.1.0-2] - fix 'CVE-2020-14040 skopeo: golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash [rhel-8]' - Resolves: #1854719 [1:1.1.0-1] - update to https://github.com/containers/skopeo/releases/tag/v1.1.0 - Related: #1821193 [1:1.0.0-2] - exclude i686 arch - Related: #1821193 [1:1.0.0-1] - update to https://github.com/containers/skopeo/releases/tag/v1.0.0 - Related: #1821193 [1:0.2.0-6] - synchronize containter-tools 8.3.0 with 8.2.1 - Related: #1821193 [1:0.1.41-1] - update to 0.1.41 - Related: #1821193 [1:0.1.40-10] - modify registries.conf default configuration to be more secure by default - Resolves: #1810053 [1:0.1.40-9] - Fix CVE-2020-1702. - Resolves: #1801922 [1:0.1.40-8] - change the search order of registries and remove quay.io (#1784267) [1:0.1.40-7] - compile in FIPS mode - Related: RHELPLAN-25139 [1:0.1.40-6] - be sure to use golang >= 1.12.12-4 - Related: RHELPLAN-25139 [1:0.1.40-5] - fix file list - Related: RHELPLAN-25139 [1:0.1.40-4] - fix symlinks in /usr/share/rhel/secrets and make subscription-manager soft dependency to make them work - Related: RHELPLAN-25139 [1:0.1.40-3] - rebuild because of CVE-2019-9512 and CVE-2019-9514 - Resolves: #1772132, #1772137 [1:0.1.40-2] - comment out mountopt option in order to fix gating tests see bug 1769769 - Related: RHELPLAN-25139 [1:0.1.40-1] - update to 0.1.40 - Related: RHELPLAN-25139 [1:0.1.37-5] - Fix CVE-2019-10214 (#1734651). [1:0.1.37-4] - fix permissions of rhel/secrets Resolves: #1691543 [1:0.1.37-3] - Resolves: #1719994 - add registry.access.redhat.com to registries.conf [1:0.1.37-2] - Resolves: #1721247 - enable fips mode [1:0.1.37-1] - Resolves: #1720654 - rebase to v0.1.37 [1:0.1.36-1.git6307635] - built upstream tag v0.1.36, including system tests [1:0.1.32-4.git1715c90] - Fixes @openshift/machine-config-operator#669 - install /etc/containers/oci/hooks.d and /etc/containers/certs.d [1:0.1.32-3.git1715c90] - rebase [1:0.1.32-2.git1715c90] - re-enable debuginfo [1:0.1.31-12.gitb0b750d] - go tools not in scl anymore [1:0.1.31-11.gitb0b750d] - Resolves: #1615609 - built upstream tag v0.1.31 [1:0.1.31-10.git0144aa8] - Resolves: #1616069 - correct order of registries [1:0.1.31-9.git0144aa8] - Resolves: #1615609 - rebuild with gobuild tag 'no_openssl' [1:0.1.31-8.git0144aa8] - Resolves: #1614934 - containers-common soft dep on slirp4netns and fuse-overlayfs [1:0.1.31-7.git0144aa8] - build with %gobuild - use scl-ized go-toolset as dep - disable i686 builds temporarily because of go-toolset issues [1:0.1.31-6.git0144aa8] - add statx to seccomp.json to containers-config - add seccomp.json to containers-config [1:0.1.31-4.git0144aa8] - Resolves: #1597629 - handle dependency issue for skopeo-containers - rename skopeo-containers to containers-common as in Fedora [1:0.1.31-3.git0144aa8] - Resolves: #1583762 - btrfs dep removal needs exclude_graphdriver_btrfs buildtag [1:0.1.31-2.git0144aa8] - correct bz in previous changelog [1:0.1.31-1.git0144aa8] - Resolves: #1580938 - resolve FTBFS - Resolves: #1583762 - remove dependency on btrfs-progs-devel - bump to v0.1.31 (from master) - built commit ca3bff6 - use go-toolset deps for rhel8 [0.1.29-5.git7add6fc] - Fix small typo in registries.conf [0.1.29-4.git] - Add policy.json.5 [0.1.29-3.git] - Add registries.conf [0.1.29-2.git] - Add registries.conf man page [0.1.29-1.git] - bump to 0.1.29-1 - Updated containers/image docker-archive generates docker legacy compatible images Do not create subdirectories for layers with no configs Ensure the layer IDs in legacy docker/tarfile metadata are unique docker-archive: repeated layers are symlinked in the tar file sysregistries: remove all trailing slashes Improve docker/* error messages Fix failure to make auth directory Create a new slice in Schema1.UpdateLayerInfos Drop unused storageImageDestination.{image,systemContext} Load a *storage.Image only once in storageImageSource Support gzip for docker-archive files Remove .tar extension from blob and config file names ostree, src: support copy of compressed layers ostree: re-pull layer if it misses uncompressed_digest|uncompressed_size image: fix docker schema v1 -> OCI conversion Add /etc/containers/certs.d as default certs directory [0.1.28-2.git0270e56] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [0.1.28-1.git] - Vendor in fixed libraries in containers/image and containers/storage [0.1.27-1.git] - Fix Conflicts to Obsoletes - Add better docs to man pages. - Use credentials from authfile for skopeo commands - Support storage='' in /etc/containers/storage.conf - Add global --override-arch and --override-os options [0.1.25-2.git2e8377a7] - Add manifest type conversion to skopeo copy - User can select from 3 manifest types: oci, v2s1, or v2s2 - e.g skopeo copy --format v2s1 --compress-blobs docker-archive:alp.tar dir:my-directory [0.1.25-2.git7fd6f66b] - Force storage.conf to default to overlay [0.1.25-1.git7fd6f66b] - Fix CVE in tar-split - copy: add shared blob directory support for OCI sources/destinations - Aligning Docker version between containers/image and skopeo - Update image-tools, and remove the duplicate Sirupsen/logrus vendor - makefile: use -buildmode=pie [0.1.24-8.git28d4e08a] - Add /usr/share/containers/mounts.conf [0.1.24-7.git28d4e08a] - Bug fixes - Update to release [0.1.24-6.dev.git28d4e08] - skopeo-containers conflicts with docker-rhsubscription <= 2:1.13.1-31 [0.1.24-5.dev.git28d4e08] - Add rhel subscription secrets data to skopeo-containers [0.1.24-4.dev.git28d4e08] - Update container/storage.conf and containers-storage.conf man page - Default override to true so it is consistent with RHEL. [0.1.24-3.dev.git28d4e08] - built commit 28d4e08 [0.1.24-2.dev.git875dd2e] - built commit 875dd2e - Resolves: gh#416 [0.1.24-1.dev.gita41cd0] - bump to 0.1.24-dev - correct a prior bogus date - fix macro in comment warning [0.1.23-6.dev.git1bbd87] - Change name of storage.conf.5 man page to containers-storage.conf.5, since it conflicts with inn package - Also remove default to 'overalay' in the configuration, since we should - allow containers storage to pick the best default for the platform. [0.1.23-5.git1bbd87f] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild [0.1.23-4.git1bbd87f] - Rebuild with binutils fix for ppc64le (#1475636) [0.1.23-3.git1bbd87f] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [0.1.23-2.dev.git1bbd87] - Fix storage.conf man page to be storage.conf.5.gz so that it works. [0.1.23-1.dev.git1bbd87] - Support for OCI V1.0 Images - Update to image-spec v1.0.0 and revendor - Fixes for authentication [0.1.22-2.dev.git5d24b67] - Epoch: 1 for CentOS as CentOS Extras' build already has epoch set to 1 [0.1.22-1.dev.git5d24b67] - Give more useful help when explaining usage - Also specify container-storage as a valid transport - Remove docker reference wherever possible - vendor in ostree fixes [0.1.21-1.dev.git0b73154] - Add support for storage.conf and storage-config.5.md from github container storage package - Bump to the latest version of skopeo - vendor.conf: add ostree-go - it is used by containers/image for pulling images to the OSTree storage. - fail early when image os does not match host os - Improve documentation on what to do with containers/image failures in test-skopeo - We now have the docker-archive: transport - Integration tests with built registries also exist - Support /etc/docker/certs.d - update image-spec to v1.0.0-rc6 [0.1.20-1.dev.git0224d8c] - BZ #1380078 - New release [0.1.19-2.dev.git0224d8c] - No golang support for ppc64. Adding exclude arch. BZ #1445490 [0.1.19-1.dev.git0224d8c] - bump to v0.1.19-dev - built commit 0224d8c [0.1.17-3.dev.git2b3af4a] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [0.1.17-2.dev.git2b3af4a] - Rebuild for gpgme 1.18 [0.1.17-1.dev.git2b3af4a] - bump to 0.1.17-dev [0.1.14-6.git550a480] - Fix BZ#1391932 [0.1.14-5.git550a480] - Conflicts with atomic in skopeo-containers [0.1.14-4.git550a480] - built skopeo-containers [0.1.14-3.gitd830391] - built mtrmac/integrate-all-the-things commit d830391 [0.1.14-2.git362bfc5] - built commit 362bfc5 [0.1.14-1.gitffe92ed] - build origin/master commit ffe92ed [0.1.13-6] - https://fedoraproject.org/wiki/Changes/golang1.7 [0.1.13-5] - include go-srpm-macros and compiler(go-compiler) in fedora conditionals - define %gobuild if not already - add patch to build with older version of golang [0.1.13-4] - update to v0.1.12 [0.1.12-3] - fix go build source path [0.1.12-2] - update to v0.1.12 [0.1.11-1] - update to v0.1.11 [0.1.10-1] - update to v0.1.10 - change runcom -> projectatomic [0.1.9-1] - update to v0.1.9 [0.1.8-1] - update to v0.1.8 [0.1.4-2] - https://fedoraproject.org/wiki/Changes/golang1.6 [0.1.4] - First package for Fedora slirp4netns [1.2.1-1] - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.1 - Related: #2176055 [1.2.0-3] - BuildRequires: /usr/bin/go-md2man - Related: #2176055 udica MODERATE Copyright 2023 Oracle, Inc. CVE-2023-3978 CVE-2023-24540 CVE-2022-41723 CVE-2023-24538 CVE-2023-25173 CVE-2023-27561 CVE-2022-3064 CVE-2023-24536 CVE-2023-25809 CVE-2023-29406 CVE-2022-41724 CVE-2023-24537 CVE-2023-28642 CVE-2023-29400 CVE-2023-24534 CVE-2023-24539 CVE-2022-41725 cpe:/a:oracle:linux:8:9:appstream_base cpe:/a:oracle:linux:8::appstream Oracle Linux 8 cjose [0.6.1-4] - CVE-2023-37464 cjose: AES GCM decryption uses the Tag length from the actual Authentication Tag provided in the JWE Resolves: rhbz#2223308 mod_auth_openidc [2.4.9.4-5] Related: rhbz#2141850 - fix cjose version dependency [2.4.9.4-4] Resolves: rhbz#2141850 - auth_openidc.conf mode 0640 by default [2.4.9.4-3] - Resolves: rhbz#2184144 - CVE-2023-28625 NULL pointer dereference when OIDCStripCookies is set and a crafted Cookie header is supplied [2.4.9.4-2] - Resolves: rhbz#2153659 - CVE-2022-23527 - Open Redirect in oidc_validate_redirect_url() using tab character MODERATE Copyright 2023 Oracle, Inc. CVE-2022-23527 CVE-2023-28625 cpe:/a:oracle:linux:8:9:appstream_base cpe:/a:oracle:linux:8::appstream Oracle Linux 8 [23.1.1-10.0.1] - Added missing services in rhel/systemd/cloud-init.service [Orabug: 32183938] - Add IPv6 IMDS and dhcp6 support for Oracle Datasource [Orabug: 35470783] - Increase retry value and add timeout for OCI [Orabug: 35329883] - Fix log file permissions [Orabug: 35302985] - Update detection logic for OL distros in config template [Orabug: 34845400] - Added missing services in cloud-init.service.tmpl for sshd [Orabug: 32183938] - Forward port applicable cloud-init 18.4-2.0.3 changes to cloud-init-18-5 [Orabug: 30435672] - limit permissions [Orabug: 31352433] - Changes to ignore all enslaved interfaces [Orabug: 30092148] - Fix swap file size allocation logic to allocate maxsize [Orabug: 29952349] - Make Oracle datasource detect dracut based config files [Orabug: 29956753] - add modified version of enable-ec2_utils-to-stop-retrying-to-get-ec2-metadata.patch: 1. Enable ec2_utils.py having a way to stop retrying to get ec2 metadata 2. Apply stop retrying to get ec2 metadata to helper/openstack.py MetadataReader Resolves: Oracle-Bug:41660 (Bugzilla) - added OL to list of known distros [23.1.1-10] - Resolves: bz#2233047 ([RHEL 8.9] Inform user when cloud-init generated config files are left during uninstalling) [23.1.1-9] - ci-NM-renderer-set-default-IPv6-addr-gen-mode-for-all-i.patch [bz#2229460] - Resolves: bz#2229460 ([rhel-8.9] [RFE] Configure 'ipv6.addr-gen-mode=eui64' as default in NetworkManager) [23.1.1-8] - ci-DS-VMware-modify-a-few-log-level-4284.patch [bz#2223810] - Resolves: bz#2223810 ([cloud-init] [RHEL8.9]There are warning logs if dev has more than one IPV6 address on ESXi) [23.1.1-7] - ci-logging-keep-current-file-mode-of-log-file-if-its-st.patch [bz#2222501] - Resolves: bz#2222501 (Don't change log permissions if they are already more restrictive [rhel-8]) [23.1.1-6] - ci-Revert-Manual-revert-Use-Network-Manager-and-Netplan.patch [bz#2219528] - ci-Revert-Revert-Add-native-NetworkManager-support-1224.patch [bz#2219528] - ci-nm-generate-ipv6-stateful-dhcp-config-at-par-with-sy.patch [bz#2219528] - ci-network_manager-add-a-method-for-ipv6-static-IP-conf.patch [bz#2219528] - ci-net-sysconfig-enable-sysconfig-renderer-if-network-m.patch [bz#2219528] - ci-network-manager-Set-higher-autoconnect-priority-for-.patch [bz#2219528] - ci-Set-default-renderer-as-sysconfig-for-centos-rhel-41.patch [bz#2219528] - Resolves: bz#2219528 ([RHEL8] Support configuring network by NM keyfiles) [23.1.1-5] - ci-Add-warning-during-upgrade-from-an-old-version-with-.patch [bz#2210012] - Resolves: bz#2210012 ([cloud-init] System didn't generate ssh host keys and lost ssh connection after cloud-init removed them with updated cloud-init package.) [23.1.1-3] - ci-Don-t-change-permissions-of-netrules-target-2076.patch [bz#2182947] - ci-Make-user-vendor-data-sensitive-and-remove-log-permi.patch [bz#2190081] - Resolves: bz#2182947 (Request to backport 'Don't change permissions of netrules target (#2076)') - Resolves: bz#2190081 (CVE-2023-1786 cloud-init: sensitive data could be exposed in logs [rhel-8]) [23.1.1-2] - ci-rhel-make-sure-previous-hostname-file-ends-with-a-ne.patch [bz#2182407] - Resolves: bz#2182407 (cloud-init strips new line from '/etc/hostname' when processing '/var/lib/cloud/data/previous-hostname') [23.1.1-1] - limit-permissions-on-def_log_file.patch - Resolves bz#1424612 - include-NOZEROCONF-yes-in-etc-sysconfig-network.patch - Resolves bz#1653131 - Rebase to 23.1.1 [bz#2172821] - Resolves: bz#2172821 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-1786 cpe:/a:oracle:linux:8:9:appstream_base cpe:/a:oracle:linux:8::appstream Oracle Linux 8 [1.3.0-8] - Rebuild for gating test [1.3.0-7] - Applied patch for for CVE-2022-48468 (#2186678) MODERATE Copyright 2023 Oracle, Inc. CVE-2022-48468 cpe:/a:oracle:linux:8:9:appstream_base cpe:/a:oracle:linux:8::appstream Oracle Linux 8 [5.15.3-2] - Fix uninitialized variable usage in m_unitsPerEm (CVE-2023-32573) Resolves: bz#2208141 LOW Copyright 2023 Oracle, Inc. CVE-2023-32573 cpe:/a:oracle:linux:8:9:appstream_base cpe:/a:oracle:linux:8::appstream Oracle Linux 8 [5.15.3-5] - Fix infinite loops in QXmlStreamReader (CVE-2023-38197) Resolves: bz#2222770 [5.15.3-4] - Don't allow remote attacker to bypass security restrictions caused by flaw in certificate validation (CVE-2023-34410) (version #2) Resolves: bz#2212753 [5.15.3-3] - Don't allow remote attacker to bypass security restrictions caused by flaw in certificate validation (CVE-2023-34410) Resolves: bz#2212753 [5.15.3-2] - Fix specific overflow in qtextlayout - Fix incorrect parsing of the strict-transport-security (HSTS) header - Fix buffer over-read via a crafted reply from a DNS server Resolves: bz#2209491 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-34410 CVE-2023-33285 CVE-2023-37369 CVE-2023-38197 cpe:/a:oracle:linux:8:9:appstream_base cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 8 [9.2.10-7] - resolve RHEL-12649 - resolve CVE-2023-39325 CVE-2023-44487 rapid stream resets can cause excessive work - testing is turned off due to test failures caused by testing date mismatch [9.2.10-6] - Add /usr/share/grafana to systemd-sysusers --replace [9.2.10-5] - resolve CVE-2023-3128 grafana: account takeover possible when using Azure AD OAuth [9.2.10-4] - bumps exporter-toolkit to v0.7.3, sanitize-url@npm to 6.0.2, skip problematic s390 tests. [9.2.10-3] - Use systemd-sysusers --replace [9.2.10-2] - Use systemd-sysusers instead of sysusers_create_compat, which is not available in RHEL-8 [9.2.10-1] - Update to 9.2.10 [7.5.15-4] - resolve CVE-2022-39229 grafana: using email as a username can block other users from signing in - resolve CVE-2022-27664 golang: net/http: handle server errors after sending GOAWAY - resolve CVE-2022-41715 golang: regexp/syntax: limit memory used by parsing regexps - resolve CVE-2022-2880 golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters - run integration tests in check phase - update FIPS patch with latest changes in Go packaging [7.5.15-3] - resolve CVE-2022-1962 golang: go/parser: stack exhaustion in all Parse* functions - resolve CVE-2022-1705 golang: net/http: improper sanitization of Transfer-Encoding header - resolve CVE-2022-32148 golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working - resolve CVE-2022-30631 golang: compress/gzip: stack exhaustion in Reader.Read - resolve CVE-2022-30630 golang: io/fs: stack exhaustion in Glob - resolve CVE-2022-30632 golang: path/filepath: stack exhaustion in Glob - resolve CVE-2022-30635 golang: encoding/gob: stack exhaustion in Decoder.Decode - resolve CVE-2022-28131 golang: encoding/xml: stack exhaustion in Decoder.Skip - resolve CVE-2022-30633 golang: encoding/xml: stack exhaustion in Unmarshal [7.5.15-2] - resolve CVE-2022-31107 grafana: OAuth account takeover [7.5.15-1] - update to 7.5.15 tagged upstream community sources, see CHANGELOG - resolve CVE-2022-21673 grafana: Forward OAuth Identity Token can allow users to access some data sources - resolve CVE-2022-21702 grafana: XSS vulnerability in data source handling - resolve CVE-2022-21703 grafana: CSRF vulnerability can lead to privilege escalation - resolve CVE-2022-21713 grafana: IDOR vulnerability can lead to information disclosure - resolve CVE-2021-23648 sanitize-url: XSS - resolve CVE-2022-21698 prometheus/client_golang: Denial of service using InstrumentHandlerCounter - declare Node.js dependencies of subpackages - make vendor and webpack tarballs reproducible [7.5.11-2] - resolve CVE-2021-44716 golang: net/http: limit growth of header canonicalization cache - resolve CVE-2021-43813 grafana: directory traversal vulnerability for *.md files [7.5.11-1] - update to 7.5.11 tagged upstream community sources, see CHANGELOG - resolve CVE-2021-39226 [7.5.10-1] - update to 7.5.10 tagged upstream community sources, see CHANGELOG [7.5.9-3] - rebuild to resolve CVE-2021-34558 [7.5.9-2] - remove unused dependency property-information - always include FIPS patch in SRPM [7.5.9-1] - update to 7.5.9 tagged upstream community sources, see CHANGELOG [7.5.8-1] - update to 7.5.8 tagged upstream community sources, see CHANGELOG - remove unused dependencies selfsigned, http-signature and gofpdf [7.5.7-2] - remove unused cryptographic implementations - use cryptographic functions from OpenSSL if FIPS mode is enabled [7.5.7-1] - update to 7.5.7 tagged upstream community sources, see CHANGELOG [7.3.6-2] - change working dir to in grafana-cli wrapper (fixes Red Hat BZ #1916083) - add pcp-redis-datasource to allow_loading_unsigned_plugins config option [7.3.6-1] - update to 7.3.6 tagged upstream community sources, see CHANGELOG - remove dependency on SAML (not supported in the open source version of Grafana) [7.3.4-1] - update to 7.3.4 tagged upstream community sources, see CHANGELOG - bundle golang dependencies - optionally bundle node.js dependencies and build and test frontend as part of the specfile - merge all datasources into main grafana package - change default provisioning path to /etc/grafana/provisioning - resolve https://bugzilla.redhat.com/show_bug.cgi?id=1843170 [6.7.4-3] - apply patch for CVE-2020-13430 also to sources, not only to compiled webpack [6.7.4-2] - security fix for CVE-2020-13430 [6.7.4-1] - update to 6.7.4 tagged upstream community sources, see CHANGELOG - security fix for CVE-2020-13379 [6.7.3-1] - update to 6.7.3 tagged upstream community sources, see CHANGELOG - add scripts to list Go dependencies and bundled npmjs dependencies - set Grafana version in Grafana UI and grafana-cli --version - declare README.md as documentation of datasource plugins - create grafana.db on first installation (fixes RH BZ #1805472) - change permissions of /var/lib/grafana to 750 (CVE-2020-12458) - change permissions of /var/lib/grafana/grafana.db to 640 and user/group grafana:grafana (CVE-2020-12458) - change permissions of grafana.ini and ldap.toml to 640 (CVE-2020-12459) [6.6.2-1] - added patch0 to set the version string correctly - removed patch 004-xerrors.patch, it's now upstream - added several patches for golang vendored vrs build dep differences - added patch to move grafana-cli binary to libexec dir - update to 6.6.2 tagged upstream community sources, see CHANGELOG [6.3.6-1] - add weak depenency on grafana-pcp - add patch to mute shellcheck SC1090 for grafana-cli - update to 6.3.6 upstream community sources, see CHANGELOG [6.3.5-1] - drop uaparser patch now it's upstream - add xerrors patch, see https://github.com/golang/go/issues/32246 - use vendor sources on rawhide until modules are fully supported - update to latest upstream community sources, see CHANGELOG [6.3.4-1] - include fix for CVE-2019-15043 - add patch for uaparser on 32bit systems - update to latest upstream community sources, see CHANGELOG [6.2.5-1] - update to latest upstream community sources, see CHANGELOG [6.2.2-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild [6.2.2-1] - split out some datasource plugins to sub-packages - update to latest upstream community sources, see CHANGELOG [6.2.1-1] - update to latest upstream community sources, see CHANGELOG [6.2.0-1] - update to latest upstream community sources - drop a couple of patches [6.1.6-2] - add conditional unbundle_vendor_sources macro [6.1.6-1] - update to latest upstream stable release 6.1.6, see CHANGELOG - includes jQuery 3.4.0 security update [6.1.4-1] - update to latest upstream stable release 6.1.4, see CHANGELOG - use gobuild and gochecks macros, eliminate arch symlinks - re-enable grafana-debugsource package - fix GRAFANA_GROUP typo - fix more modes for brp-mangle-shebangs - vendor source unbundling now done in prep after patches - remove all rhel and fedora conditional guff [6.1.3-1] - update to latest upstream stable release 6.1.3, see CHANGELOG - unbundle all vendor sources, replace with BuildRequires, see the long list of blocker BZs linked to BZ#1670656 - BuildRequires go-plugin >= v1.0.0 for grpc_broker (thanks eclipseo) - tweak make_webpack to no longer use grunt, switch to prod build - add ExclusiveArch lua script (thanks quantum.analyst) - move db directory and plugins to /var/lib/grafana - split out into 6 patches, ready for upstream PRs - add check to run go tests for gating checks [6.1.0-1] - update to latest upstream stable release 6.1.0, see CHANGELOG [6.0.2-1] - bump to latest upstream stable release 6.0.2-1 - unbundle almost all remaining vendor code, see linked blockers in BZ#1670656 [6.0.1-3] - bump to latest upstream stable release 6.0.1-1 [6.0.1-2] - unbundle and add BuildRequires for golang-github-rainycape-unidecode-devel [6.0.1-1] - update to v6.0.1 upstream sources, tweak distro config, re-do patch - simplify make_webpack.sh script (Elliott Sales de Andrade) - vendor/github.com/go-ldap is now gone, so don't unbundle it [5.4.3-11] - tweak after latest feedback, bump to 5.4.3-11 (BZ 1670656) - build debuginfo package again - unbundle BuildRequires for golang-github-hashicorp-version-devel - remove some unneeded development files - remove macros from changelog and other rpmlint tweaks [5.4.3-10] - tweak spec for available and unavailable (bundled) golang packages [5.4.3-9] - Remove extraneous slash (cosmetic) - Create directories just before moving stuff in them - Truncate long lines - Group all golang stuff - Simplify BuildRequires/bundled Provides - Sort BuildRequires/bundled Provides - Fix bundled go packages Provides [5.4.3-8] - add BuildRequires (and unbundle) vendor sources available in Fedora - declare Provides for remaining (bundled) vendor go sources - do not attempt to unbundle anything on RHEL < 7 or Fedora < 28 [5.4.3-7] - further refinement for spec doc section from Xavier Bachelot - disable debug_package to avoid empty debugsourcefiles.list [5.4.3-6] - further refinement following review by Xavier Bachelot [5.4.3-5] - further refinement following review by Xavier Bachelot [5.4.3-4] - further spec updates after packaging review - reworked post-install scriplets [5.4.3-3] - tweak FHS patch, update spec after packaging review [5.4.3-2] - add patch to be standard FHS compliant, remove phantomjs - update to v5.4.3 upstream community sources [5.4.2-1] - update to v5.4.2 upstream community sources [5.3.1-1] - update to v5.3.1 upstream community sources [5.2.5-1] - native RPM spec build with current tagged v5.2.5 sources MODERATE Copyright 2023 Oracle, Inc. CVE-2023-3128 cpe:/a:oracle:linux:8:9:appstream_base cpe:/a:oracle:linux:8::appstream Oracle Linux 8 [0.99.9-2] - Address CVE-2020-12762 Resolves: rhbz#2203171 MODERATE Copyright 2023 Oracle, Inc. CVE-2020-12762 cpe:/a:oracle:linux:8:9:appstream_base cpe:/a:oracle:linux:8::distro_builder cpe:/a:oracle:linux:8::appstream Oracle Linux 8 hivex libguestfs [1.44.0-9.0.2] - libguestfs.spec: Add btrfs-progs RPM to appliance [Orabug: 35634755] [1.44.0-9.0.1] - Replace upstream references from description tag - Config supermin to use host yum.conf in ol8 [Orabug: 29319324] - Set DISTRO_ORACLE_LINUX correspeonding to ol [1:1.44.0-9] - Fix CVE-2022-2211 Denial of Service in --key parameter resolves: rhbz#2101280 [1:1.44.0-8] - Obsolete old libguestfs-benchmarking subpackage resolves: rhbz#2091597 [1:1.44.0-7] - Disable 5-level page tables when using -cpu max resolves: rhbz#2084566 related: rhbz#2075424 [1:1.44.0-6] - Backport support for -cpu max to allow RHEL 9 guests to be modified resolves: rhbz#2075424 [1:1.44.0-5] - Fix libguestfs failure with qemu 6.2, libvirt 7.10 resolves: rhbz#2035177 libguestfs-winsupport [8.9-1] - Rebase to ntfs-3g 2022.10.3 - Fixes: CVE-2022-40284 - resolves: rhbz#2236372 [8.8-1] - Rebase to ntfs-3g 2022.5.17 - Fixes: CVE-2021-46790, CVE-2022-30783, CVE-2022-30784, CVE-2022-30785, CVE-2022-30786, CVE-2022-30787, CVE-2022-30788, CVE-2022-30789 resolves: rhbz#2127240 rhbz#2127248 (also: 2127233 2127234 2127241 2127249 2127255 2127256 2127262 2127263) [8.6-1] - Rebase to ntfs-3g 2021.8.22 - Fixes: CVE-2021-33285, CVE-2021-33286, CVE-2021-33287, CVE-2021-33289, CVE-2021-35266, CVE-2021-35267, CVE-2021-35268, CVE-2021-35269, CVE-2021-39251, CVE-2021-39252, CVE-2021-39253, CVE-2021-39254 resolves: rhbz#2004490 [8.2-1.el8] - Resolves: bz#2000225 (Rebase virt:rhel module:stream based on AV-8.6) [8.2] - Resolves: bz#1810193 (Upgrade components in virt:rhel module:stream for RHEL-8.3 release) [8.0-4] - Rebuild all virt packages to fix RHEL's upgrade path - Resolves: rhbz#1695587 (Ensure modular RPM upgrade path) [8.0-3] - Fix for CVE-2019-9755 (heap-based buffer overflow leads to local root privilege escalation) resolves: rhbz#1698503 [8.0-2] - Fix for ntfsclone crash (RHBZ#1601146). [8.0-1] - Rebase to 2017.3.23. - Remove patches which are now upstream. - Resynch with Fedora package. - Enable all architectures for RHEL 8. [7.2-2] - Fix for handling guest filenames with invalid or incomplete multibyte or wide characters resolves: rhbz#1301593 [7.2-1] - Rebase and rebuild for RHEL 7.2 resolves: rhbz#1240278 [7.1-6] - Bump version and rebuild. related: rhbz#1221583 [7.1-5] - Enable aarch64 architecture. resolves: rhbz#1221583 [7.1-4] - Enable debuginfo support and stripping. resolves: rhbz#1100319 [7.1-3] - Add patches from Fedora package which add fstrim support. resolves: rhbz#1100319 [7.1-2] - New package for RHEL 7.1 - Rebase to ntfs-3g 2014.2.15 resolves: rhbz#1100319 - Change the package so it works with supermin5. - Remove dependency on external FUSE. [7.0-2] - Resync against Rawhide package (ntfs-3g 2013.1.13). - Drop HAL file since HAL is dead. resolves: rhbz#819939 [7.0-1] - New package for RHEL 7 resolves: rhbz#819939 - Resync against Rawhide package. [1.0-7] - Disable debuginfo package. resolves: RHBZ#691555. [1.0-6] - Require libguestfs 1.7.17 (newer version in RHEL 6.1). - Require febootstrap-supermin-helper instead of febootstrap resolves: RHBZ#670299. [1.0-5] - Make sure intermediate lib* directories are created in hostfiles (RHBZ#603429) [1.0-4] - Requires fuse-libs (RHBZ#599300). [1.0-3] - ExclusiveArch x86_64. [1.0-2] - Package Windows support for libguestfs. libiscsi libnbd [1.6.0-5.el8] - Fix CVE-2022-0485: Fail nbdcopy if NBD read or write fails resolves: rhbz#2045718 [1.6.0-4.el8] - Resolves: bz#2000225 (Rebase virt:rhel module:stream based on AV-8.6) [1.2.2] - Resolves: bz#1844296 (Upgrade components in virt:rhel module:stream for RHEL-8.3 release) [1.2.2-1] - New stable release 1.2.2. [1.2.1-1] - New stable release 1.2.1. [1.2.0-1] - New stable release 1.2.0. [1.0.3-1] - New upstream version 1.0.3. - Contains fix for remote code execution vulnerability. - Add new libnbd-security(3) man page. [1.0.2-1] - New upstream version 1.0.2. - Remove patches which are upstream. - Contains fix for NBD Protocol Downgrade Attack (CVE-2019-14842). - Fix previous commit message. [1.0.1-2] - Add upstream patch to fix nbdsh (for nbdkit tests). - Fix interop tests on slow machines. [1.0.1-1] - New stable version 1.0.1. [1.0.0-1] - New upstream version 1.0.0. [0.9.9-2] - Rebuilt for Python 3.8 [0.9.9-1] - New upstream version 0.9.9. [0.9.8-4] - Fix nbdkit dependencies so we're actually running the tests. - Add glib2-devel BR so we build the glib main loop example. - Add upstream patch to fix test error: nbd_connect_unix: getlogin: No such device or address - Fix test failure on 32 bit. [0.9.8-3] - Bump and rebuild to fix releng brokenness. https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/2LIDI33G3IEIPYSCCIP6WWKNHY7XZJGQ/ [0.9.8-2] - Rebuilt for Python 3.8 [0.9.8-1] - New upstream version 0.9.8. - Package the new nbd_*(3) man pages. [0.9.7-1] - New upstream version 0.9.7. - Add libnbd-ocaml(3) man page. [0.9.6-2] - Add all upstream patches since 0.9.6 was released. - Package the ocaml bindings into a subpackage. [0.9.6-1] - New upstream verison 0.9.6. [0.1.9-1] - New upstream version 0.1.9. [0.1.8-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild [0.1.8-1] - New upstream version 0.1.8. [0.1.7-1] - New upstream version 0.1.7. [0.1.6-1] - New upstream version 0.1.6. [0.1.5-1] - New upstream version 0.1.5. [0.1.4-1] - New upstream version 0.1.4. [0.1.2-2] - Enable libxml2 for NBD URI support. [0.1.2-1] - New upstream version 0.1.2. [0.1.1-1] - Fix license in man pages and examples. - Add nbdsh(1) man page. - Include the signature and keyring even if validation is disabled. - Update devel subpackage license. - Fix old FSF address in Python tests. - Filter Python provides. - Remove executable permission on the tar.gz.sig file. - Initial release. libtpms libvirt-dbus [1.3.0-2.el8] - Resolves: bz#2000225 (Rebase virt:rhel module:stream based on AV-8.6) [1.3.0] - Resolves: bz#1810193 (Upgrade components in virt:rhel module:stream for RHEL-8.3 release) [1.2.0-3] - Rebuild all virt packages to fix RHEL's upgrade path - Resolves: rhbz#1695587 (Ensure modular RPM upgrade path) [1.2.0-2] - util: fix virtDBusUtilDecodeUUID (rhbz#1647823) [1.2.0-1] - Rebased to libvirt-dbus-1.2.0 (rhbz#1630196) [1.0.0-1] - Rebase from Fedora libvirt [8.0.0-22.0.1] - Set SOURCE_DATE_EPOCH from changelog [Orabug: 32019554] - Add runtime deps for pkg librbd1 >= 1:10.2.5 (Keshav Sharma) [8.0.0-22] - lib: Set up cpuset controller for restrictive numatune (rhbz#2223464) [8.0.0-21] - nodedev: update transient mdevs (rhbz#2143160) [8.0.0-20] - qemu: monitor: Drop old monitor fields from 'struct _qemuMonitorMessage' (rhbz#2170472) - qemu: Make 'struct _qemuMonitorMessage' private (rhbz#2170472) - qemu: monitor: Move declaration of struct _qemuMonitor to qemu_monitor_priv.h (rhbz#2170472) - qemu: qemuBlockGetNamedNodeData: Remove pointless error path (rhbz#2170472) - qemu: monitor: Store whether 'query-named-block-nodes' supports 'flat' parameter (rhbz#2170472) - qemuMonitorJSONBlockStatsUpdateCapacityBlockdev: Use 'flat' mode of query-named-block-nodes (rhbz#2170472) - qemu: relax shared memory check for vhostuser daemons (rhbz#2177701) - virpci: Resolve leak in virPCIVirtualFunctionList cleanup (CVE-2023-2700) - node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap() (CVE-2023-2700) libvirt-python nbdkit netcf perl-Sys-Virt qemu-kvm [6.2.0-40.el8_9.1] - kvm-io-remove-io-watch-if-TLS-channel-is-closed-during-h.patch [RHEL-7339] - Resolves: RHEL-7339 (CVE-2023-3354 virt:rhel/qemu-kvm: QEMU: VNC: improper I/O watch removal in TLS handshake can lead to remote unauthenticated denial of service [rhel-8.9.0]) [6.2.0-40.el8_9] - kvm-acpi-fix-acpi_index-migration.patch [RHEL-2186] - kvm-RHEL-Enable-x-not-migrate-acpi-index-for-all-pre-RHE.patch [RHEL-2186] - Resolves: RHEL-2186 ([RHEL8][pc machine type] Migration failed with pc machine type between rhe8.8 and rhel 8.9) [6.2.0-39] - kvm-vhost-vdpa-do-not-cleanup-the-vdpa-vhost-net-structu.patch [bz#2215786] - Resolves: bz#2215786 (CVE-2023-3301 virt:rhel/qemu-kvm: QEMU: net: triggerable assertion due to race condition in hot-unplug [rhel-8]) [6.2.0-38] - kvm-qapi-i386-sev-Change-the-reduced-phys-bits-value-fro.patch [bz#2214840] - kvm-qemu-options.hx-Update-the-reduced-phys-bits-documen.patch [bz#2214840] - kvm-i386-sev-Update-checks-and-information-related-to-re.patch [bz#2214840] - kvm-i386-cpu-Update-how-the-EBX-register-of-CPUID-0x8000.patch [bz#2214840] - kvm-target-i386-kvm-Fix-disabling-MPX-on-cpu-host-with-M.patch [bz#2223947] - Resolves: bz#2214840 ([AMDSERVER 8.9 Bug] Qemu SEV reduced-phys-bits fixes) - Resolves: bz#2223947 ([RHEL8.9] qemu core dump with '-cpu host,mpx=off' on Cascadelake host) [6.2.0-37] - kvm-util-iov-Make-qiov_slice-public.patch [bz#2141964] - kvm-block-Collapse-padded-I-O-vecs-exceeding-IOV_MAX.patch [bz#2141964] - kvm-util-iov-Remove-qemu_iovec_init_extended.patch [bz#2141964] - kvm-iotests-iov-padding-New-test.patch [bz#2141964] - kvm-block-Fix-pad_request-s-request-restriction.patch [bz#2141964] - Resolves: bz#2141964 (Guest hit EXT4-fs error on host 4K disk when repeatedly hot-plug/unplug running IO disk) [6.2.0-36] - kvm-memory-prevent-dma-reentracy-issues.patch [bz#1999236] - kvm-async-Add-an-optional-reentrancy-guard-to-the-BH-API.patch [bz#1999236] - kvm-checkpatch-add-qemu_bh_new-aio_bh_new-checks.patch [bz#1999236] - kvm-hw-replace-most-qemu_bh_new-calls-with-qemu_bh_new_g.patch [bz#1999236] - kvm-lsi53c895a-disable-reentrancy-detection-for-script-R.patch [bz#1999236] - kvm-bcm2835_property-disable-reentrancy-detection-for-io.patch [bz#1999236] - kvm-raven-disable-reentrancy-detection-for-iomem.patch [bz#1999236] - kvm-apic-disable-reentrancy-detection-for-apic-msi.patch [bz#1999236] - kvm-async-avoid-use-after-free-on-re-entrancy-guard.patch [bz#1999236] - kvm-memory-stricter-checks-prior-to-unsetting-engaged_in.patch [bz#1999236] - kvm-lsi53c895a-disable-reentrancy-detection-for-MMIO-reg.patch [bz#1999236] - kvm-hw-scsi-lsi53c895a-Fix-reentrancy-issues-in-the-LSI-.patch [bz#1999236] - kvm-target-i386-add-support-for-FLUSH_L1D-feature.patch [bz#2216203] - kvm-target-i386-add-support-for-FB_CLEAR-feature.patch [bz#2216203] - kvm-migration-Disable-postcopy-multifd-migration.patch [bz#2169733] - Resolves: bz#1999236 (CVE-2021-3750 virt:rhel/qemu-kvm: QEMU: hcd-ehci: DMA reentrancy issue leads to use-after-free [rhel-8]) - Resolves: bz#2216203 ([qemu-kvm]VM reports vulnerabilty to mmio_stale_data on patched host with microcode) - Resolves: bz#2169733 (Qemu on destination host crashed if migrate with postcopy and multifd enabled) [6.2.0-35] - kvm-virtiofsd-Add-basic-support-for-FUSE_SYNCFS-request.patch [bz#2196880] - kvm-s390-kvm-adjust-diag318-resets-to-retain-data.patch [bz#2169308 bz#2209605] - kvm-target-s390x-Fix-SLDA-sign-bit-index.patch [bz#2169308 bz#2209605] - kvm-target-s390x-Fix-SRDA-CC-calculation.patch [bz#2169308 bz#2209605] - kvm-target-s390x-Fix-cc_calc_sla_64-missing-overflows.patch [bz#2169308 bz#2209605] - kvm-target-s390x-Fix-shifting-32-bit-values-for-more-tha.patch [bz#2169308 bz#2209605] - kvm-s390x-sigp-Reorder-the-SIGP-STOP-code.patch [bz#2169308 bz#2209605] - kvm-s390x-tcg-Fix-BRASL-with-a-large-negative-offset.patch [bz#2169308 bz#2209605] - kvm-s390x-tcg-Fix-BRCL-with-a-large-negative-offset.patch [bz#2169308 bz#2209605] - kvm-target-s390x-Fix-determination-of-overflow-condition.patch [bz#2169308 bz#2209605] - kvm-target-s390x-Fix-determination-of-overflow-cond.patch [bz#2169308 bz#2209605] - kvm-s390x-follow-qdev-tree-to-detect-SCSI-device-on-a-CC.patch [bz#2169308 bz#2209605] - kvm-target-s390x-Fix-the-accumulation-of-ccm-in-op_icm.patch [bz#2169308 bz#2209605] - kvm-target-s390x-Fix-writeback-to-v1-in-helper_vstl.patch [bz#2169308 bz#2209605] - kvm-target-s390x-fix-handling-of-zeroes-in-vfmin-vfmax.patch [bz#2169308 bz#2209605] - kvm-target-s390x-Fix-CLFIT-and-CLGIT-immediate-size.patch [bz#2169308 bz#2209605] - kvm-s390x-tcg-Fix-opcode-for-lzrf.patch [bz#2169308 bz#2209605] - kvm-target-s390x-Fix-emulation-of-the-VISTR-instruction.patch [bz#2169308 bz#2209605] - kvm-s390x-css-revert-SCSW-ctrl-flag-bits-on-error.patch [bz#2169308 bz#2209605] - kvm-target-s390x-tcg-Fix-and-improve-the-SACF-instructio.patch [bz#2169308 bz#2209605] - kvm-target-s390x-tcg-mem_helper-Test-the-right-bits-in-p.patch [bz#2169308 bz#2209605] - kvm-pc-bios-Add-support-for-List-Directed-IPL-from-ECKD-.patch [bz#2169308 bz#2209605] - Resolves: bz#2196880 ([virtiofs] Backport FUSE_SYNCFS support) - Resolves: bz#2169308 (Backport latest s390x-related fixes from upstream QEMU for qemu-kvm in RHEL 8.9) - Resolves: bz#2209605 ([IBM 8.9 FEAT] KVM: ECKD List Directed IPL - virtio (qemu)) [6.2.0-34] - kvm-migration-Handle-block-device-inactivation-failures-.patch [bz#2177957] - kvm-migration-Minor-control-flow-simplification.patch [bz#2177957] - kvm-migration-Attempt-disk-reactivation-in-more-failure-.patch [bz#2177957] - kvm-nbd-server-push-pending-frames-after-sending-reply.patch [bz#2035712] - kvm-nbd-server-Request-TCP_NODELAY.patch [bz#2035712] - Resolves: bz#2177957 (Qemu core dump if cut off nfs storage during migration) - Resolves: bz#2035712 ([qemu] Booting from Guest Image over NBD with TLS Is Slow) seabios sgabios supermin [5.2.1-2.0.1.el8] - Rebuild [Orabug: 35720304] [5.2.1-2.el8] - Supermin should ignore +debug kernels resolves: rhbz#2051332 - Add copy-patches script. [5.2.1-1.el8] - Resolves: bz#2000225 (Rebase virt:rhel module:stream based on AV-8.6) [5.1.19] - Resolves: bz#1810193 (Upgrade components in virt:rhel module:stream for RHEL-8.3 release) [5.1.19-9] - Rebuild all virt packages to fix RHEL's upgrade path - Resolves: rhbz#1695587 (Ensure modular RPM upgrade path) [5.1.19-8] - Pass CFLAGS & LDFLAGS to final supermin link resolves: rhbz#1624175 [5.1.19-7] - Rebuild for OCaml 4.07.0. [5.1.19-6] - Drop dietlibc in RHEL 8 resolves: rhbz#1588067 [5.1.19-5] - Bump release and rebuild. [5.1.19-4] - Reenable hardened build [5.1.19-3] - Fix bytes/string problems. [5.1.19-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [5.1.19-1] - New upstream version 5.1.19. - Remove all patches, now upstream. [5.1.18-5] - Rebuilt for RPM soname bump [5.1.18-4] - Fix supermin crash with truncated vmlinuz file (RHBZ#1477758). - Include all upstream patches since 5.1.18. [5.1.18-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild [5.1.18-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [5.1.18-1] - New upstream release 5.1.18. - Fixes problem with creating incorrect symlinks (RHBZ#1470157). [5.1.17-5] - Enable dietlibc on aarch64 and POWER. [5.1.17-4] - Drop dependency on hawkey and versioned dependencies on dnf. [5.1.17-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [5.1.17-2] - Rebuild for OCaml 4.04.0. [5.1.17-1] - New upstream release 5.1.17. - Check signature on the tarball before unpacking it. - Remove patches, all upstream. [5.1.16-6] - Switch to dietlibc on s390x [5.1.16-5] - Do not break the binary on interpreted builds (#1375213) [5.1.16-4] - Add all upstream patches since 5.1.16 was released. [5.1.16-3] - Add upstream patch for DAX / vNVDIMM support. [5.1.16-2] - New upstream version 5.1.16. - Drop all patches since they are upstream. - Depend on systemd-udev to work around RHBZ#1331012. [5.1.15-2] - Add all upstream patches since 5.1.15 was released. - These should improve boot performance and initrd size. [5.1.15-1] - New upstream version 5.1.15. - Remove all patches, since they are now included in this version. - Enable dietlibc, remove glibc-static, xz-static, zlib-static. [5.1.14-4] - Add more patches since 5.1.14. [5.1.14-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [5.1.14-2] - Add all patches since 5.1.14. [5.1.14-1] - New upstream version 5.1.14. - Remove all patches - now upstream. [5.1.13-4] - Pull in all upstream patches since 5.1.13. - Choose providers better (RHBZ#1266918). - Use autopatch. - Explicitly depend on pod2html. [5.1.13-3] - Bump version to rebuild against new RPM in Rawhide. [5.1.13-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [5.1.13-1] - New upstream version 5.1.13. - Remove patch, now upstream. [5.1.12-11] - Prefer 'dnf download' over 'yumdownloader' (again). - BR grubby for the tests to work. [5.1.12-9] - Revert back to yumdownloader (RHBZ#1186948). [5.1.12-8] - Prefer 'dnf download' over 'yumdownloader'. [5.1.12-7] - Disable hardened build again. See RHBZ#1202091 RHBZ#1204162. [5.1.12-6] - Enable hardening flags by building the static 'init' specially before the main build. - Use _smp_mflags. [5.1.12-4] - Add a -devel subpackage containing automated RPM dependency generator for supermin appliances. [5.1.12-2] - Disable hardened build as it breaks building the static 'init' binary. [5.1.12-1] - New upstream version 5.1.12. - Includes ARM fix: lpae kernels can now be booted (RHBZ#1199733). [5.1.11-2] - Rebuild for xz-5.2.0 in Rawhide (RHBZ#1179252). [5.1.11-1] - New upstream version 5.1.11. [5.1.10-2] - Update to upstream commit d78c898c7e2bc5f12cbebef98b95a7908d9120f1. - BR rpm-devel, since it is now used instead of invoking rpm. - BR automake and autoconf, and run autoreconf (configure.ac is modified by the patches). [5.1.10-1] - New upstream version 5.1.10. - Remove patch which is now included upstream. [5.1.9-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild [5.1.9-2] - Add upstream patch to avoid endless loop in Rawhide. [5.1.9-1] - New upstream version 5.1.9. - Remove patches which are now upstream. [5.1.8-9] - Add Requires findutils (RHBZ#1113029). [5.1.8-8] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild [5.1.8-7] - Add patch to fix RPM handler when filenames may contain spaces. [5.1.8-4] - Skip execstack test on Fedora 20 (ARM only). [5.1.8-3] - BR xz-static & xz-devel packages, to support xz-compressed kernel modules. [5.1.8-1] - New upstream version 5.1.8. - Remove patches which are now upstream. [5.1.7-3] - Add upstream patch which removes need to run execstack (RHBZ#1093261). [5.1.7-2] - Add patch to fix quoting around mke2fs parameter (RHBZ#1084960). [5.1.7-1] - New upstream version 5.1.7. - Remove ppc64p7 patch which is now upstream. [5.1.6-5] - Requires tar, which is not installed in an @Core installation. [5.1.6-4] - Add upstream patch to fix supermin on ppc64p7. [5.1.6-3] - New upstream version 5.1.6. - Fix tests. [5.1.5-2] - Disable execstack on aarch64. It comes from prelink which does not exist on aarch64. [5.1.5-1] - New upstream version 5.1.5. [5.1.3-1] - New upstream version 5.1.3. [5.1.2-1] - New upstream version 5.1.2. - Fixes a serious bug in --build mode. [5.1.1-1] - New upstream version 5.1.1. - Remove patch which is now upstream. [5.1.0-3] - Add BR yum-utils (for yumdownloader). - Add upstream patch which stops duplicate packages appearing. [5.1.0-2] - New upstream version 5.1.0. - Note this is effectively a rewrite, and is not completely compatible. - There is no separate 'supermin-helper' subpackage any more. - Requires rpm instead of yum. [4.1.6-2] - New upstream version 4.1.6. - Should fix all autotools brokenness. - Man pages are now all in section 1. - Remove patch which is now upstream. - +BR /usr/bin/execstack (from prelink). [4.1.5-5] - Rerun autoreconf to fix autotools brokenness. [4.1.5-4] - Why was prelink required? Remove it. [4.1.5-3] - correct Obsoletes version for febootstrap and febootstrap-supermin-helper [4.1.5-2] - (For ARM) Don't crash if SUPERMIN_DTB is set and --dtb not specified. [4.1.5-1] - New upstream version 4.1.5. - Has (optionally) a new command line syntax. - Supports device trees for ARM. [4.1.4-1] - New upstream version 4.1.4. - Supports compressed cpio image files, experimentally. [4.1.3-1] - New upstream version 4.1.3. - Remove patch which is now upstream. - Add examples directory to documentation. [4.1.2-2] - Include upstream patch to get correct directory setgid/sticky bits in the appliance. [4.1.2-1] - New upstream version 4.1.2. - Remove patch which is now upstream. [4.1.1-2] - Add upstream patch to ignore ghost non-regular files. - This fixes builds on Fedora 20 because the filesystem package has been changed so /var/lock and /var/run are marked as ghost. [4.1.1-1] - New upstream version 4.1.1. - The program has been renamed 'supermin' from 'febootstrap'. - Obsolete, but don't Provide because supermin is not a compatible replacement. - Use '_isa' to specify architecture of supermin-helper subpackage. [1:3.21-2] - Add upstream patch to drop supplemental groups (RHBZ#902476). - Remove 'Group:' RPM headers which are no longer necessary. - Remove some commented-out requirements. [1:3.21-1] - New upstream version 3.21. [1:3.20-1] - New upstream version 3.20. [1:3.19-2] - Work around brokenness in yum (RHBZ#850913). - Remove defattr, no longer required. [1:3.19-1] - New upstream version 3.19. [3.18-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild [3.18-1] - New upstream version 3.18. - This adds support for EPEL 5. [3.17-1] - New upstream version 3.17. [3.16-1] - New upstream version 3.16. [3.15-1] - New upstream version 3.15. - This version includes root=<device> support, needed for libguestfs with virtio-scsi. - Remove upstream patch. [3.14-6] - For RHEL 7 only, add ExclusiveArch x86-64. [3.14-5] - Bundled gnulib (RHBZ#821752). [3.14-4] - Add back explicit dependencies for external programs. [3.14-3] - Drop ExclusiveArch as it's supported on all primary & secondary arches - Cleanup spec and deps [3.14-2] - New upstream version 3.14. - Add upstream patch to fix RHBZ#808421. [3.13-4] - e2fsprogs moved /sbin/mke2fs to /usr/sbin (thanks Eric Sandeen). [3.13-2] - Missing BR zlib-static. [3.13-1] - New upstream version 3.13. - Remove upstream patch which is included in this version. [3.12-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild [3.12-4] - Depend on latest e2fsprogs (RHBZ#771310). [3.12-2] - Include upstream patch to work around Python stupidity. [3.12-1] - New upstream version 3.12. - Remove upstream patch which is included in this version. [3.11-2] - Add upstream patch to fix febootstrap on non-Debian. [3.11-1] - New upstream version 3.11. [3.10-1] - New upstream version 3.10. [3.9-1] - New upstream version 3.9. [3.8-1] - New upstream version 3.8. [3.7-1] - New upstream version 3.7. [3.6-1] - New upstream version 3.6. - This version no longer needs external insmod.static. [3.5-1] - New upstream version 3.5. - Remove patch which is now upstream. [3.4-2] - Don't fail if objects are created in a symlinked dir (RHBZ#698089). [3.4-1] - New upstream version 3.4. - febootstrap-supermin-helper Obsoletes older versions of febootstrap. [3.3-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild [3.3-4] - Split package into febootstrap (for building) and febootstrap-supermin-helper (for running). Note that febootstrap depends on febootstrap-supermin-helper, but you can install febootstrap-supermin-helper on its own. [3.3-3] - Clear executable stack flag on febootstrap-supermin-helper. [3.3-2] - add the ocaml's ExclusiveArch [3.3-1] - New upstream version 3.3. [3.2-1] - New upstream version 3.2. - Remove upstream patches. [3.1-5] - Previous fix for RHBZ#654638 didn't work, fix it correctly. [3.1-4] - Properly ignore .*.hmac files (accidental reopening of RHBZ#654638). [3.1-3] - Uses yumdownloader at runtime, so require yum-utils. [3.1-2] - New upstream version 3.1. - BR insmod.static. [3.0-2] - New upstream version 3.0 (note this is incompatible with 2.x). - Fix upstream URLs. - fakeroot, fakechroot no longer required. - insmod.static is required at runtime (missing dependency from earlier). - The only programs are 'febootstrap' and 'febootstrap-supermin-helper'. - BR ocaml, ocaml-findlib-devel. - No examples are provided with this version of febootstrap. [2.11-1] - New upstream version 2.11. - Fixes 'ext2fs_mkdir .. No free space in directory' bug which affects libguestfs on rawhide. [2.10-1] - New upstream version 2.10. - Adds -u and -g options to febootstrap-supermin-helper which are required by virt-v2v. [2.9-1] - New upstream version 2.9. - Fixes directory ordering problem in febootstrap-supermin-helper. [2.8-1] - New upstream version 2.8. [2.8-0.2] - New pre-release version of 2.8. + Note this is based on 2.7 + mailing list patches. - New BRs on mke2fs, libext2fs, glibc-static. [2.7-2] - New upstream version 2.7. - febootstrap-supermin-helper shell script rewritten in C for speed. - This package contains C code so it is no longer 'noarch'. - MAKEDEV isn't required. [2.6-1] - New upstream release 2.6. - Recheck package in rpmlint. [2.5-2] - New upstream release 2.5. - Remove BR upx (not needed by upstream). - Two more scripts / manpages. [2.4-1] - New upstream release 2.4. [2.3-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild [2.3-1] - New upstream release 2.3. [2.2-1] - New upstream release 2.2. [2.0-1] - New upstream release 2.0. [1.9-1] - New upstream release 1.9. [1.8-1] - New upstream release 1.8. [1.7-1] - New upstream release 1.7. [1.5-3] - Configure script has (unnecessary) BuildRequires on fakeroot, fakechroot, yum. [1.5-2] - Initial build for Fedora. swtpm virt-v2v MODERATE Copyright 2023 Oracle, Inc. CVE-2021-3750 CVE-2023-3301 cpe:/a:oracle:linux:8:9:appstream_base cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 8 [11.7.3-11.0.1] - add mpstat -H option to also display physically hotplugged vCPUs [Orabug: 34683071] [11.7.3-11] - fix the arithmetic overflow in allocate_structures() that is still possible on some 32 bit systems (CVE-2023-33204) [11.7.3-10] - Fix incorrect CPU usage on ALL CPU field for iowait in mpstat (#2178863) MODERATE Copyright 2023 Oracle, Inc. CVE-2023-33204 cpe:/a:oracle:linux:8:9:appstream_base cpe:/a:oracle:linux:8::appstream Oracle Linux 8 [1:2.6.2-17] - Resolves: #2211412 - XRA dissector infinite loop [1:2.6.2-16] - Resolves: #2210866 - VMS TCPIPtrace file parser crash - Resolves: #2210867 - NetScaler file parser crash - Resolves: #2210869 - RTPS dissector crash MODERATE Copyright 2023 Oracle, Inc. CVE-2023-2856 CVE-2023-2858 CVE-2023-0666 CVE-2023-2952 cpe:/a:oracle:linux:8:9:appstream_base cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 8 [13.11-1] - Rebase to 13.11 Resolves: #2171369 LOW Copyright 2023 Oracle, Inc. CVE-2022-41862 cpe:/a:oracle:linux:8:9:appstream_base cpe:/a:oracle:linux:8::appstream Oracle Linux 8 [7-8] - Set correct user/group (tang/tang) in tangd-keygen Resolves: rhbz#2188743 [7-7] - Fix race condition when creating/rotating keys Resolves: rhbz#2182410 Resolves: CVE-2023-1672 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-1672 cpe:/a:oracle:linux:8:9:appstream_base cpe:/a:oracle:linux:8::appstream Oracle Linux 8 [3.11.5-1] - Rebase to 3.11.5 - Security fixes for CVE-2023-40217 and CVE-2023-41105 Resolves: RHEL-3047, RHEL-3267 [3.11.4-4] - Add the import_all_modules_py3_11.py file for the python3.11-rpm-macros subpackage Resolves: rhbz#2207631 [3.11.4-3] - Fix symlink handling in the fix for CVE-2023-24329 Resolves: rhbz#263261 [3.11.4-2] - Security fix for CVE-2007-4559 Resolves: rhbz#263261 [3.11.4-1] - Update to 3.11.4 - Security fix for CVE-2023-24329 Resolves: rhbz#2173917 MODERATE Copyright 2023 Oracle, Inc. CVE-2007-4559 CVE-2023-41105 cpe:/a:oracle:linux:8:9:appstream_base cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 8 rubygem-abrt [0.3.0-4] - Execute test suite unconditionally. - Upload correct sources. [0.3.0-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [0.3.0-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [0.3.0-1] - Update to abrt 0.3.0. [0.2.0-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [0.2.0-1] - Update to abrt 0.2.0. [0.1.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [0.1.1-1] - Update to abrt 0.1.1. [0.0.6-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [0.0.6-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild [0.0.6-1] - Update to abrt 0.0.6. [0.0.5-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild [0.0.5-2] - Disable tests for EL builds. [0.0.5-1] - Update to abrt 0.0.5. [0.0.3-3] - Rebuild for https://fedoraproject.org/wiki/Features/Ruby_2.0.0 [0.0.3-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild [0.0.3-1] - Update to abrt 0.0.3. [0.0.2-1] - Initial package rubygem-bson rubygem-bundler rubygem-mongo [2.5.1-2] - Disable tests to fix FTBFS by dropped MongoDB module. Resolves: rhbz#1710863 [2.5.1-1] - Update to mongo 2.5.1. [2.5.0-1] - Update to mongo 2.5.0. [2.4.3-2] - Escape macros in %changelog [2.4.3-1] - Update to mongo 2.4.3. [2.4.1-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [2.4.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [2.4.1-1] - Update to mongo 2.4.1. [2.4.0-1] - Update to mongo 2.4.0. [2.3.0-1] - Update to mongo 2.3.0. [1.10.2-5] - Disable tests until mongodb becomes stable in rawhide again. [1.10.2-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [1.10.2-2] - Fix tests [1.10.2-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [1.10.2-1] - Update to mongo 1.10.2. [1.9.2-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild [1.9.2-1] - Update to mongo 1.9.2. - Enabled test suite. [1.6.4-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild [1.6.4-4] - Fix to make it build/install on F19+ [1.6.4-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild [1.6.4-2] - Fixed doc - removed more BuildRequires that are not required [1.6.4-1] - Updated to latest version - Removed BuildRequires that are not needed [1.4.0-7] - Fixed checks. Only run checks that do not require a running mongodb server [1.4.0-6] - Changed .gemspec and Rakefile to not be doc - Added checks [1.4.0-5] - Fixed rubygem(bson) requires [1.4.0-4] - Updated to meet new fedora rubygem guidelines [1.4.0-3] - Changed group to Development/Languages - Changed the global variables - Seperated the doc and test into the doc rpm [1.4.0-2] - Added %{?dist} to version [1.4.0-1] - Initial package rubygem-mysql2 rubygem-pg [1.0.0-3] - Fix FTBFS with PostgreSQL 10.6 and above. ruby [2.5.9-111] - Fix HTTP response splitting in CGI. Resolves: CVE-2021-33621 - Fix Buffer overrun in String-to-Float conversion. Resolves: CVE-2022-28739 - Fix ReDoS vulnerability in URI. Resolves: CVE-2023-28755 - Fix ReDoS vulnerability in Time. Resolves: CVE-2023-28756 [2.5.9-111] - Fix rdoc parsing of nil text tokens. Resolves: rhbz#2210326 [2.5.9-110] - Fix FTBFS due to an incompatible load directive. - Fix a fiddle import test on an optimized glibc on Power 9. - Fix by adding length limit option for methods that parses date strings. Resolves: CVE-2021-41817 - CGI::Cookie.parse no longer decodes cookie names to prevent spoofing security prefixes in cookie names. Resolves: CVE-2021-41819 [2.5.9-109] - Properly fix command injection vulnerability in Rdoc. Related: CVE-2021-31799 [2.5.9-108] - Fix command injection vulnerability in RDoc. Resolves: CVE-2021-31799 - Fix StartTLS stripping vulnerability in Net::IMAP Resolves: CVE-2021-32066 - Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host. Resolves: CVE-2021-31810 [2.5.9-107] - Update to Ruby 2.5.9. * Remove Patch20: ruby-2.6.0-rdoc-6.0.1-fix-template-typo.patch; subsumed Resolves: rhbz#1757844 - Resolv::DNS: timeouts if multiple IPv6 name servers are given and address contains leading zero Resolves: rhbz#1950308 [2.5.5-106] - Remove file with non-commercial license from did_you_mean gem. Resolves: rhbz#1846113 [2.5.5-105] - Use ffi_closure_alloc to avoid segmentation fault by libffi on aarch64. Resolves: rhbz#1727832 - Properly support %prerelease in %gemspec_ macros. Related: rhbz#1688758 - Fix rdoc gzipped javascript pages are not the same across multilib. Resolves: rhbz#1719647 [2.5.5-104] - Update to Ruby 2.5.5. * Remove Patch25: ruby-2.6.0-Update-for-tzdata-2018f.patch; subsumed * Remove Patch11: ruby-2.6.0-Try-to-update-cert.patch; subsumed * Remove Patch19: ruby-2.6.0-net-http-net-ftp-fix-session-resumption-with -TLS-1.3.patch; subsumed Resolves: rhbz#1688758 - Don't ship .stp files when SystemTap support is disabled. Related: rhbz#1657915 - Fix CovScan issues. Resolves: rhbz#1628592 [2.5.3-103] - Refresh expired certificates to fix FTBFS. [2.5.3-102] - Fix Tokyo TZ tests. [2.5.3-101] - Update to Ruby 2.5.3. Resolves: rhbz#1643092 [2.5.1-100] - Properly harden package using -fstack-protector-strong. * ruby-2.6.0-configure-fstack-protector-strong.patch Resolves: rhbz#1624168 [2.5.1-99] - Additional OpenSSL 1.1.1 fixes. * ruby-2.6.0-fix-test-failure-with-TLS-1.3-maint.patch * ruby-2.6.0-config-support-include-directive.patch * ruby-2.6.0-use-larger-keys-for-SSL-tests.patch Related: rhbz#1616213 [2.5.1-99] - Fix generated rdoc template issues. * ruby-2.6.0-rdoc-6.0.1-fix-template-typo.patch Resolves: rhbz#1612026 [2.5.1-97] - Fix TLS 1.3 issues. * ruby-2.6.0-fix-test-failure-with-TLS-1.3.patch * ruby-2.6.0-net-http-net-ftp-fix-session-resumption-with-TLS-1.3.patch Related: rhbz#1616213 [2.5.1-96] - turn off tests - Related: bug#1614611 [2.5.1-96] - Rebuild with fixed binutils [2.5.1-95] - Rebuild for new binutils [2.5.1-94] - Disable some test failing with OpenSSL 1.1.1. [2.5.1-94] - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild [2.5.1-93] - Add macros to edit files lists in .gemspec (gemspec_add_file and gemspec_remove_file). [2.5.1-93] - Make %gemspec_{add,remove}_dep modify .gemspec provided by %setup macro. [2.5.1-92] - Conflict requirement needs to generate dependency. - Stop using --with-setjmp-type=setjmp on aarch64 (rhbz#1545239). [2.5.1-92] - Update to Ruby 2.5.1. [2.5.0-91] - Don't force libraries used to build Ruby to its dependencies. - Re-enable GMP dependency. [2.5.0-90] - Drop GMP dependency. [2.5.0-89] - Rebuild with new LDFLAGS from redhat-rpm-config - Use --with-setjmp-type=setjmp on aarch64 to work around gcc issue (#1545239) [2.5.0-89] - Fix: Multiple vulnerabilities in RubyGems https://bugzilla.redhat.com/show_bug.cgi?id=1547431 https://www.ruby-lang.org/en/news/2018/02/17/multiple-vulnerabilities-in-rubygems/ [2.5.0-89] - Drop obsolete ldconfig scriptlets. - Add GMP dependency. - Use 'with' operator in RPM dependency generator. - Add conflicts RPM generator. - Fix thread_safe test suite segfaults. - Fix invalid licenses. [2.5.0-89] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [2.5.0-88] - Rebuilt for switch to libxcrypt [2.5.0-87] - Fix segfaults during generating of documentation. [2.5.0-86] - Upgrade to Ruby 2.5.0. [2.4.2-86] - Add macro to remove rubypick dependency. - Improve 'with' conditional statement as inline. [2.4.2-85] - Add macros to remove systemtap, git and cmake dependencies. [2.4.2-84] - Update to Ruby 2.4.2. [2.4.1-84] - Drop ruby-devel dependency on rubypick, which is pulled in transtitively. [2.4.1-83] - Fix 'IOError: stream closed' errors affecting Puma. - Temporary disable checksec on PPC64LE (rhbz#1479302). [2.4.1-82] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild [2.4.1-81] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [2.4.1-80] - OpenSSL 1.1.0f-3 disables some weak ciphers. Adjust the package to pass the tests suite. [2.4.1-79] - Update to Ruby 2.4.1. [2.4.0-78] - Fix OpenSSL symlinks. [2.4.0-77] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [2.4.0-76] - Fix GCC 7.x compatibility (rhbz#1417590). - Use standardized multilib solution (rhbz#1412274). [2.4.0-75] - Apply patch fixing rubygem-mongo build failures. [2.4.0-74] - Rebuild again for f26-ruby24 sidetag [2.4.0-73] - Rebuild for readline 7.x [2.4.0-72] - Link files into directory to avoid dir => symlink isues. [2.4.0-71] - Add rubygem-io-console dependency for rubygem-rdoc. [2.4.0-70] - Upgrade to Ruby 2.4.0. - Move gemified xmlrpc into subpackage. - Move gemified openssl into subpackage. - Tk is removed from stdlib. - Extend 'gem_' macros for pre-release version support. [2.3.3-61] - Update to Ruby 2.3.3. - Exclude json.rb from ruby-libs (rhbz#1397370). [2.3.2-60] - Update to Ruby 2.3.2. [2.3.1-59] - Continue to use OpenSSL 1.0 for the moment. - Add gemspec_add_dep and gemspec_remove_dep macros. - Harden package. [2.3.1-58] - Workaround 'an invalid stdio handle' error on PPC (rhbz#1361037). [2.3.1-57] - Make symlinks for json gem. [2.3.1-56] - Requires rubygem(json) for rubygem-rdoc (rhbz#1325022). [2.3.1-55] - Update to Ruby 2.3.1. [2.3.0-54] - Add rubypick and rubygems requires to ruby-devel to deal with BuildRequires [2.3.0-53] - Backport trunk@53455 to make ruby-qt build [2.3.0-52] - Explicitly require RDoc, since weak dependencies are ignored by default. [2.3.0-51] - Load RubyGems prior ABRT hook to properly rescue RubyGems exceptions. [2.3.0-50] - Upgrade to Ruby 2.3.0. - Move gemified net-telnet into subpackage. - Add did_you_mean subpackage. - Add virtual provides for CCAN copylibs. - Use weak dependencies. [2.3.0-0.7.preview2] - Add systemtap tests. [2.2.4-47] - Update to Ruby 2.2.4. [2.2.3-46] - Fix ABRT hook autoloading. [2.2.3-45] - Add support for MIPS architecture to config.h [2.2.3-44] - Update to Ruby 2.2.3. [2.2.2-43] - Fix for 'dh key too small' error of OpenSSL 1.0.2+. [2.2.2-42] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [2.2.2-41] - Fix the git BR following the git package split. [2.2.2-40] - Fix upgrade path (rubygem-io-console's version was recently bumped in F21 and makes the higher release to win). [2.2.2-11] - Bump release because of gems [2.2.2-1] - Update to Ruby 2.2.2 [2.2.1-10] - Fix libruby.so versions in SystemTap scripts (rhbz#1202232). [2.2.1-9] - Update to Ruby 2.2.1. [2.2.0-8] - Rebuilt for Fedora 23 Change https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code [2.2.0-7] - Fix directory ownership. [2.2.0-6] - Initialize all load paths in operating_system.rb. [2.2.0-5] - Make operating_system.rb more robust. - Add RubyGems stub headers for bundled gems. [2.2.0-4] - Add missing rubygem-test-unit dependency on rubygem-power_assert. [2.2.0-3] - Bump release to avoid EVR issue on rubygem-test-unit [2.2.0-1] - Upgrade to Ruby 2.2.0. - Explicitly list RubyGems directories to avoid accidentaly packaged content. - Split test-unit and power_assert gems into separate sub-packages. - Drop libdb dependency in favor of gdbm. [2.1.5-26] - Disbable sse2 on i668 (bug #1101811) [2.1.5-25] - Update to Ruby 2.1.5. [2.1.4-24] - Update to Ruby 2.1.4. - Include only vendor directories, not their content (rhbz#1114071). - Fix 'invalid regex' warning for non-rubygem packages (rhbz#1154067). - Use load macro introduced in RPM 4.12. * Mon Aug 18 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild [2.1.2-23] - Fix FTBFS - Specify tcl/tk 8.6 - Add upstream patch to build with libffi 3.1 * Sun Jun 08 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild * Wed May 21 2014 Jaroslav Skarvada <jskarvad@redhat.com> - Rebuilt for https://fedoraproject.org/wiki/Changes/f21tcl86 [2.1.2-21] - Update to Ruby 2.1.2 [2.1.1-20] - Remove useless exclude (rhbz#1065897). - Extract load macro into external file and include it. - Kill bundled certificates. [2.1.1-19] - Correctly expand in some Makefiles, e.g. eruby. [2.1.1-18] - Update to Ruby 2.1.1. - Revert regression of Hash#reject. [2.1.0-19] - Add RPM dependency generators for RubyGems. [2.1.0-19] - Don't link cert.pem explicitely [2.1.0-18] - Don't generate documentation on unexpected places. - Detect if rubygems are running under rpmbuild and install gem binary extensions into appropriate place. - Add support for ppc64le arch (rhbz#1053263). - Re-enable some test cases, which are passing now with Kernel 3.12.8+. - Backport fix for floating point issues on i686. [2.1.0-17] - Upgrade to Ruby 2.1.0. - Move RPM macros into /usr/lib/rpm/macros.d directory. - Allow MD5 in OpenSSL for tests. [2.0.0.247-15] - Move Psych symlinks to vendor dir, to prevent F18 -> F19 upgrade issues (rhbz#988490). [2.0.0.247-14] - Add forgotten psych.rb link into rubygem-psych to fix 'private method load' called for Psych:Moduler' error (rhbz#979133). [2.0.0.247-13] - Fixes multilib conlicts of .gemspec files. - Make symlinks for psych gem to ruby stdlib dirs (rhbz#979133). - Use system-wide cert.pem. [2.0.0.247-12] - Fix RubyGems search paths when building gems with native extension (rhbz#979133). [2.0.0.247-11] - Fix RubyGems version. [2.0.0.247-10] - Better support for build without configuration (rhbz#977941). [2.0.0.247-9] - Update to Ruby 2.0.0-p247 (rhbz#979605). - Fix CVE-2013-4073. - Fix for wrong makefiles created by mkmf (rhbz#921650). - Add support for ABRT autoloading. [2.0.0.195-8] - Update to Ruby 2.0.0-p195 (rhbz#917374). - Fix object taint bypassing in DL and Fiddle (CVE-2013-2065). - Fix build against OpenSSL with enabled ECC curves. - Add aarch64 support (rhbz#926463). [2.0.0.0-7] - Macro definition moved into macros.ruby and macros.rubygems files. - Added filtering macros. - Filter automatically generated provides of private libraries (rhbz#947408). [2.0.0.0-6] - Fix RbConfig::CONFIG['exec_prefix'] returns empty string (rhbz#924851). [2.0.0.0-5] - Make Ruby buildable without rubypick. - Prevent random test failures. [2.0.0.0-4] - Don't mark rpm config file as %config (fpc#259) [2.0.0.0-3] - Avoid 'method redefined;' warnings due to modified operating_system.rb. - Fix strange paths created during build of binary gems. [2.0.0.0-2] - Prevent squash of %gem_install with following line. [2.0.0.0-1] - Update to Ruby 2.0.0-p0. - Change %{ruby_extdir} to %{ruby_extdir_mri} in preparation for better JRuby support. [2.0.0.0-0.3.r39387] - Move test-unit.gemspec to -libs subpackage for now because rubygems 2.0.0 does not create this [2.0.0.0-0.2.r39387] - Fix issues with wrong value of Rubygem's shebang introduced in r39267. [2.0.0.0-0.1.r39387] - Upgrade to Ruby 2.0.0 (r39387). - Introduce %gem_install macro. - Build against libdb instead of libdb4 (rhbz#894022). - Move native extensions from exts to ruby directory. - Enable most of the PPC test suite. - Change ruby(abi) -> ruby(release). - Rename ruby executable to ruby-mri, to be prepared for RubyPick. - Add ruby(runtime_executable) virtual provide, which is later used by RubyPick. - RDoc now depends on JSON. - Try to make -doc subpackage noarch again, since the new RDoc should resolve the arch dependent issues (https://github.com/rdoc/rdoc/issues/71). - Enable SystemTap support. - Add TapSet for Ruby. - Split Psych into rubygem-psych subpackage. [1.9.3.385-28] - Update to 1.9.3 p385 [1.9.3.374-27] - Update to 1.9.3 p374 - Fix provided variables in pkgconfig (bug 789532: Vit Ondruch <vondruch@redhat.com>) [1.9.3.362-26] - Provide non-versioned pkgconfig file (bug 789532) - Use db5 on F-19 (bug 894022) [1.9.3.362-25] - Backport fix for the upstream PR7629, save the proc made from the given block (bug 895173) [1.9.3.362-24] - Update to 1.9.3.362 [1.9.3.327-23] - Skipping test_parse.rb (fails on ARM at line 787) - http://bugs.ruby-lang.org/issues/6899 [1.9.3.327-23] - Skip test_str_crypt (on rawhide) for now (upstream bug 7312) [1.9.3.327-22] - Ignore some network related tests [1.9.3.327-21] - Update to 1.9.3.327 - Fix Hash-flooding DoS vulnerability on MurmurHash function (CVE-2012-5371) [1.9.3.286-19] - Update to 1.9.3 p286 - Don't create files when NUL-containing path name is passed (bug 865940, CVE-2012-4522) [1.9.3.194-18] - Patch from trunk for CVE-2012-4464, CVE-2012-4466 [1.9.3.194-17] - Split documentation into -doc subpackage (rhbz#854418). [1.9.3.194-16] - Revert the dependency of ruby-libs on rubygems (rhbz#845011, rhbz#847482). [1.9.3.194-15] - ruby-libs must require rubygems (rhbz#845011). [1.9.3.194-14] - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild [1.9.3.194-13] - Make the bigdecimal gem a runtime dependency of Ruby. [1.9.3.194-12] - Make symlinks for bigdecimal and io-console gems to ruby stdlib dirs (RHBZ 829209). [1.9.3.194-11] - Fix license to contain Public Domain. - macros.ruby now contains unexpanded macros. [1.9.3.194-10.1] - Bump release [1.9.3.194-1] - Update to Ruby 1.9.3-p194. [1.9.3.125-3] - disable check on ppc(64), RH bugzilla 803698 [1.9.3.125-2] - Temporarily disable make check on ARM until it's fixed upstream. Tracked in RHBZ 789410 [1.9.3.125-1] - Upgrade to Ruby 1.9.3-p125. [1.9.3.0-7] - Make mkmf.rb verbose by default [1.9.3.0-6] - Relax dependencies to allow external updates of bundled gems. [1.9.3.0-5] - Initial release of Ruby 1.9.3. - Add rubygems dependency on io-console for user interactions. - Gems license clarification. [1.9.3.0-4] - Bundled gems moved into dedicated directories and subpackages. - Create and own RubyGems directories for binary extensions. - Fix build with GCC 4.7. [1.9.3.0-3] - Fix RHEL build. - Fixed directory ownership. - Verose build output. [1.9.3.0-2] - Install RubyGems outside of Ruby directory structure. - RubyGems has not its own -devel subpackage. - Enhanced macros.ruby and macros.rubygems. - All tests are green now (bkabrda). [1.9.3.0-1] - Initial package [1.8.7.357-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild [1.8.7.357-1] - Update to 1.8.7p357 - Randomize hash on process startup (CVE-2011-4815, bug 750564) [1.8.7.352-2] - dont normalise arm cpus to arm - there is something weird about how ruby choses where to put bits [1.8.7.352-3] - F-17: kill gdbm support for now due to licensing compatibility issue [1.8.7.352-2] - F-17: rebuild against new gdbm [1.8.7.352-1] - Update to 1.8.7 p352 - CVE-2011-2686 is fixed in this version (bug 722415) - Update ext/tk to the latest git - Remove duplicate path entry (bug 718695) [1.8.7.334-4] - Once fix FTBFS (bug 716021) [1.8.7.334-3] - normalise arm cpus to arm [1.8.7.334-2] - Own %{_normalized_cpu}-%{_target_os} directory (bug 708816) [1.8.7.334-1] - Update to 1.8.7 p334 [1.8.7.330-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild [1.8.7.330-2] - nomalise the 32 bit sparc archs to sparc [1.8.7.330-1] - Update to 1.8.7 p330 - ext/tk updated to the newest header [1.8.7.302-2] - Avoid multilib conflict on -libs subpackage (bug 649174) [1.8.7.302-1] - Update to 1.8.7.302 - CVE-2010-0541 (bug 587731) is fixed in this version - Update ext/tk to the latest head [1.8.7.299-5] - More cleanup of spec file, expecially for rpmlint issue - build ri files in %build [1.8.7.299-4] - Cleanup spec file - Make -irb, -rdoc subpackage noarch - Make dependencies between arch-dependent subpackages isa specific - Improve sample documentation gathering [1.8.7.299-3] - updated packaged based on feedback (from mtasaka) - added comments to all patches / sources - obsoleted ruby-mode, as it's now provided by the emacs package itself - readded missing documentation - various small compatability/regression fixes [1.8.7.299-2] - readded bits to pull tk package from upstream source branch - removed unecessary .tk.old dir - renamed macros which may cause confusion, removed unused ones [1.8.7.299-1] - integrate more of jmeyering's and mtaska's feedback - removed emacs bits that are now shipped with the emacs package - various patch and spec cleanup - rebased to ruby 1.8.7 patch 299, removed patches no longer needed: ruby-1.8.7-openssl-1.0.patch, ruby-1.8.7-rb_gc_guard_ptr-optimization.patch [1.8.7.249-5] - Various fixes [1.8.7.249-4] - Fixed incorrect paths in 1.8.7 rpm [1.8.7.249-3] - Integrated Jim Meyering's feedback and changes in to: - remove trailing blanks - placate rpmlint - ruby_* definitions: do not use trailing slashes in directory names - _normalized_cpu: simplify definition [1.8.7.249-2] - Integrate mtasaka's feedback and changes - patch101 ruby_1_8_7-rb_gc_guard_ptr-optimization.patch [1.8.7.249-1] - Initial Ruby 1.8.7 specfile [1.8.6.399-5] - Retry for bug 559158, Simplify the OpenSSL::Digest class pull more change commits from ruby_1_8 branch [1.8.6.399-4] - Patch36 (ruby-1.8.x-RHASH_SIZE-rb_hash_lookup-def.patch) also backport rb_hash_lookup definition (bug 592936) [1.8.6.399-3] - ruby-1.8.x-null-class-must-be-Qnil.patch (bug 530407) - Recreate some patches using upstream svn when available, and add some comments for patches [1.8.6.399-2] - tcltk: Give up using potentially unmaintained ruby_1_8_6 branch and instead completely replace with ruby_1_8 branch head (at this time, using rev 27738) (seems to fix 560053, 590503) - Fix Japanese encoding strings under ruby-tcltk/ext/tk/sample/ [1.8.6.399-1] - Update to 1.8.6 p 399 (bug 579675) - Patch to fix gc bug causing open4 crash (bug 580993) [1.8.6.388-9] - F-14: rebuild against new gdbm * Thu Jan 28 2010 Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - Once revert the previous change (patch34) [1.8.6.388-8] - Backport openssl/digest functions providing digest and hexdigest functions directly in OpenSSL::Digest.methods - Make sure that Red Hat people version their changelog entries - This is actually release #1, but now needs to be release #7 [1.8.6.388-1] - Add conditional for RHEL. [1.8.6.383-6] - CVE-2009-4492 ruby WEBrick log escape sequence (bug 554485) [1.8.6.383-5] - Change mkmf.rb to use LIBRUBYARG_SHARED so that have_library() works without libruby-static.a (bug 428384) - And move libruby-static.a to -static subpackage [1.8.6.383-4] - Use bison to regenerate parse.c to keep the original format of error messages (bug 530275 comment 4) [1.8.6.383-3] - Patch so that irb saves its history (bug 518584, ruby issue 1556) [1.8.6.383-2] - Update to 1.8.6 patchlevel 383 (bug 520063) [1.8.6.369-5] - Much better idea for Patch31 provided by Akira TAGOH <tagoh@redhat.com> [1.8.6.369-4] - Fix the search path of ri command for ri manuals installed with gem (bug 528787) [1.8.6.369-3] - Rebuild against new openssl [1.8.6.369-2] - Make sure that readline.so is linked against readline 5 because Ruby is under GPLv2 [1.8.6.369-1] - New patchlevel fixing CVE-2009-1904 - Fix directory on ARM (#506233, Kedar Sovani) [1.8.6.368-1] - New upstream release (p368) [1.8.6.287-8] - Merge Review fix (#226381) [1.8.6.287-7] - Fix regression in CVE-2008-3790 (#485383) [1.8.6.287-6] - Again use -O2 optimization level - i586 should search i386-linux directory (on <= F-11) [1.8.6.287-5] - Rebuild for gcc4.4 [1.8.6.287-3] - CVE-2008-5189: CGI header injection. [1.8.6.287-2] - CVE-2008-3790: DoS vulnerability in the REXML module. [1.8.6.287-1] - New upstream release. - Security fixes. - CVE-2008-3655: Ruby does not properly restrict access to critical variables and methods at various safe levels. - CVE-2008-3656: DoS vulnerability in WEBrick. - CVE-2008-3657: Lack of taintness check in dl. - CVE-2008-1447: DNS spoofing vulnerability in resolv.rb. - CVE-2008-3443: Memory allocation failure in Ruby regex engine. - Remove the unnecessary backported patches. [1.8.6.230-5] - rebuild against db4-4.7 [1.8.6.230-4] - Backported from upstream SVN to fix a segfault issue with Array#fill. [1.8.6.230-3] - Backported from upstream SVN to fix a segfault issue. (#452825) - Backported from upstream SVN to fix an integer overflow in rb_ary_fill. [1.8.6.230-2] - Fix a segfault issue. (#452810) [1.8.6.230-1] - New upstream release. - Security fixes. (#452295) - CVE-2008-1891: WEBrick CGI source disclosure. - CVE-2008-2662: Integer overflow in rb_str_buf_append(). - CVE-2008-2663: Integer overflow in rb_ary_store(). - CVE-2008-2664: Unsafe use of alloca in rb_str_format(). - CVE-2008-2725: Integer overflow in rb_ary_splice(). - CVE-2008-2726: Integer overflow in rb_ary_splice(). - ruby-1.8.6.111-CVE-2007-5162.patch: removed. - Build ruby-mode package for all archtectures. [1.8.6.114-1] - Security fix for CVE-2008-1145. - Improve a spec file. (#226381) - Correct License tag. - Fix a timestamp issue. - Own a arch-specific directory. [1.8.6.111-9] - Autorebuild for GCC 4.3 [1.8.6.111-8] - Rebuild for gcc-4.3. [1.8.6.111-7] - Revert the change of libruby-static.a. (#428384) [1.8.6.111-6] - Fix an unnecessary replacement for shebang. (#426835) [1.8.6.111-5] - Rebuild. [1.8.6.111-4] - Clean up again. [1.8.6.111-3] - Clean up the spec file. - Remove ruby-man-1.4.6 stuff. this is entirely the out-dated document. this could be replaced by ri. - Disable the static library building. [1.8.6.111-2] - Rebuild for openssl bump * Wed Oct 31 2007 Akira TAGOH <tagoh@redhat.com> - Fix the dead link. [1.8.6.111-1] - New upstream release. - ruby-1.8.6.111-CVE-2007-5162.patch: Update a bit with backporting the changes at trunk to enable the fix without any modifications on the users' scripts. Note that Net::HTTP#enable_post_connection_check isn't available anymore. If you want to disable this post-check, you should give OpenSSL::SSL::VERIFY_NONE to Net::HTTP#verify_mode= instead of. [1.8.6.110-2] - Enable pthread support for ppc too. (#201452) - Fix unexpected dependencies appears in ruby-libs. (#253325) [1.8.6.110-1] - New upstream release. - ruby-r12567.patch: removed. - ruby-1.8.6-CVE-2007-5162.patch: security fix for Net::HTTP that is insufficient verification of SSL certificate. [1.8.6.36-4] - Rebuild * Fri Aug 10 2007 Akira TAGOH <tagoh@redhat.com> - Update License tag. [1.8.6.36-3] - ruby-r12567.patch: backport patch from upstream svn to get rid of the unnecessary declarations. (#245446) [1.8.6.36-2] - New upstream release. - Fix Etc::getgrgid to get the correct gid as requested. (#236647) [1.8.6-2] - Fix search path breakage. (#234029) [1.8.6-1] - New upstream release. - clean up a spec file. [1.8.5.12-2] - Rebuild [1.8.5.12-1] - New upstream release. [1.8.5.2-1] - security fix release. [1.8.5-4] - security fix release. - ruby-1.8.5-cgi-CVE-2006-5467.patch: fix a CGI multipart parsing bug that causes the denial of service. (#212396) [1.8.5-3] - rebuilt for unwind info generation, broken in gcc-4.1.1-21 [1.8.5-2] - fixed rbconfig.rb to refer to DESTDIR for sitearchdir. (#207311) [1.8.5-1] - New upstream release. - removed the unnecessary patches: - ruby-1.8.4-no-eaccess.patch - ruby-1.8.4-64bit-pack.patch - ruby-1.8.4-fix-insecure-dir-operation.patch - ruby-1.8.4-fix-insecure-regexp-modification.patch - ruby-1.8.4-fix-alias-safe-level.patch - build with --enable-pthread except on ppc. - ruby-1.8.5-hash-memory-leak.patch: backported from CVS to fix a memory leak on Hash. [ruby-talk:211233] [1.8.4-12] - owns sitearchdir. (#201208) [1.8.4-11] - security fixes [CVE-2006-3694] - ruby-1.8.4-fix-insecure-dir-operation.patch: - ruby-1.8.4-fix-insecure-regexp-modification.patch: fixed the insecure operations in the certain safe-level restrictions. (#199538) - ruby-1.8.4-fix-alias-safe-level.patch: fixed to not bypass the certain safe-level restrictions. (#199543) [1.8.4-10.fc6.1] - rebuild [1.8.4-10] - fixed the wrong file list again. moved tcltk library into ruby-tcltk. (#195872) [1.8.4-8] - ruby-deprecated-sitelib-search-path.patch: correct the order of search path. [1.8.4-7] - exclude ppc64 to make ruby-mode package. right now emacs.ppc64 isn't provided and buildsys became much stricter. - ruby-deprecated-sitelib-search-path.patch: applied to add more search path for backward compatiblity. - added byacc to BuildReq. (#194161) [1.8.4-6] - ruby-deprecated-search-path.patch: added the deprecated installation paths to the search path for the backward compatibility. - added a Provides: ruby(abi) to ruby-libs. - ruby-1.8.4-64bit-pack.patch: backport patch from upstream to fix unpack('l') not working on 64bit arch and integer overflow on template 'w'. (#189350) - updated License tag to be more comfortable, and with a pointer to get more details, like Python package does. (#179933) - clean up. * Wed Apr 19 2006 Akira TAGOH <tagoh@redhat.com> - ruby-rubyprefix.patch: moved all arch-independent modules under /usr/lib/ruby and keep arch-dependent modules under /usr/lib64/ruby for 64bit archs. so 'rubylibdir', 'sitelibdir' and 'sitedir' in Config::CONFIG points to the kind of /usr/lib/ruby now. (#184199) [1.8.4-4] - correct sitelibdir. (#184198) [1.8.4-3.2] - bump again for double-long bug on ppc(64) [1.8.4-3.1] - rebuilt for new gcc4.1 snapshot and glibc changes [1.8.4-3] - ruby-1.8.4-no-eaccess.patch: backported from ruby CVS to avoid conflict between newer glibc. (#179835) [1.8.4-2] - ruby-tcltk-multilib.patch: fixed a typo. [1.8.4-1] - New upstream release. - fixed a missing return statement. (#140833) - fixed an use of uninitialized variable. (#144890) [1.8.4-0.4.preview2] - updates to 1.8.4-preview2. - renamed the packages to ruby-* (#175765) - irb -> ruby-irb - rdoc -> ruby-rdoc - ri -> ruby-ri - added tcl-devel and tk-devel into BuildRequires. * Fri Dec 09 2005 Jesse Keating <jkeating@redhat.com> - rebuilt [1.8.4-0.3.preview1] - rebuilt against the latest openssl. [1.8.4-0.2.preview1] - build-deps libX11-devel instead of xorg-x11-devel. [1.8.4-0.1.preview1] - New upstream release. - ruby-1.8.2-strscan-memset.patch: removed because it's no longer needed. [1.8.3-4] - moved the documents from ruby-libs to ruby-docs, which contains the arch specific thing and to be multilib support. (#168826) [1.8.3-3] - fixed the wrong file list. the external library for tcl/tk was included in ruby-libs unexpectedly. [1.8.3-2] - ruby-multilib.patch: added another chunk for multilib. (#169127) [1.8.3-1] - New upstream release. - Build-Requires xorg-x11-devel instead of XFree86-devel. - ruby-multilib.patch: applied for only 64-bit archs. - ruby-1.8.2-xmlrpc-CAN-2005-1992.patch: removed. it has already been in upstream. [1.8.2-9] - ruby-1.8.2-xmlrpc-CAN-2005-1992.patch: fixed the arbitrary command execution on XMLRPC server. (#161096) [1.8.2-8] - ruby-1.8.2-tcltk-multilib.patch: applied to get tcltklib.so built. (#160194) [1.8.2-7] - ruby-1.8.2-deadcode.patch: removed the dead code from the source. (#146108) - make sure that all documentation files in ruby-docs are the world- readable. (#147279) [1.8.2-6] - ruby-1.8.2-strscan-memset.patch: fixed an wrong usage of memset(3). [1.8.2-5] - rebuilt [1.8.2-4] - fixed the wrong generation of file manifest. (#146055) - spec file clean up. [1.8.2-3] - separated out to rdoc package. - make the dependency of irb for rdoc. (#144708) [1.8.2-2] - Rebuilt for new readline. [1.8.2-1] - New upstream release. - ruby-1.8.1-ia64-stack-limit.patch: removed - it's no longer needed. - ruby-1.8.1-cgi_session_perms.patch: likewise. - ruby-1.8.1-cgi-dos.patch: likewise. - generated Ruby interactive documentation - senarated package. it's now provided as ri package. (#141806) [1.8.1-10] - rebuild against db-4.3.21. [1.8.1-9] - ruby-1.8.1-cgi-dos.patch: security fix [CAN-2004-0983] - ruby-1.8.1-cgi_session_perms.patch: security fix [CAN-2004-0755] [1.8.1-8] - added openssl-devel and db4-devel into BuildRequires (#137479) [1.8.1-7] - require emacs-common instead of emacs. [1.8.1-4] - updated the documentation. * Tue Jun 15 2004 Elliot Lee <sopwith@redhat.com> - rebuilt * Tue Mar 02 2004 Elliot Lee <sopwith@redhat.com> - rebuilt * Fri Feb 13 2004 Elliot Lee <sopwith@redhat.com> - rebuilt [1.8.1-1] - New upstream release. - don't use any optimization for ia64 to avoid the build failure. - ruby-1.8.1-ia64-stack-limit.patch: applied to fix SystemStackError when the optimization is disabled. [1.8.0-3] - rebuild against db-4.2.52. [1.8.0-2] - rebuild against db-4.2.42. [1.8.0-1] - New upstream release. [1.6.8-9.1] - rebuilt [1.6.8-9] - ruby-1.6.8-castnode.patch: handling the nodes with correct cast. use this patch now instead of ruby-1.6.8-fix-x86_64.patch. [1.6.8-8] - rebuilt [1.6.8-7] - fix the gcc warnings. (#82192) - ruby-1.6.8-fix-x86_64.patch: correct a patch. NOTE: DON'T USE THIS PATCH FOR BIG ENDIAN ARCHITECTURE. - ruby-1.6.7-long2int.patch: removed. * Wed Jun 04 2003 Elliot Lee <sopwith@redhat.com> - rebuilt [1.6.8-5] - rebuild against ucs4 tcltk * Wed Jan 22 2003 Tim Powers <timp@redhat.com> - rebuilt [1.6.8-3] - ruby-1.6.8-multilib.patch: applied to fix the search path issue on x86_64 [1.6.8-2] - ruby-1.6.8-require.patch: applied to fix the search bug in require. - don't apply long2int patch to s390 and s390x. it doesn't work. [1.6.8-1] - New upstream release. - removed some patches. it's no longer needed. - ruby-1.6.7-100.patch - ruby-1.6.7-101.patch - ruby-1.6.7-102.patch - ruby-1.6.7-103.patch - 801_extmk.rb-shellwords.patch - 801_mkmf.rb-shellwords.patch - 804_parse.y-new-bison.patch - 805_uri-bugfix.patch - ruby-1.6.6-900_XXX_strtod.patch - ruby-1.6.7-sux0rs.patch - ruby-1.6.7-libobj.patch [1.6.7-14] - rebuild to update tcltk deps [1.6.7-13] - Remove ExcludeArch: x86_64 - Fix x86_64 ruby with long2int.patch (ruby was assuming that sizeof(long) == sizeof(int). The patch does not fix the source of the problem, just makes it a non-issue.) - _smp_mflags [1.6.7-12] - rebuild to fix broken tcltk deps [1.6.7-11] - use %configure macro instead of configure script. - use the latest config.{sub,guess}. - get archname from rbconfig.rb for %dir - applied some patches from Debian: - 801_extmk.rb-shellwords.patch: use Shellwords - 801_mkmf.rb-shellwords.patch: mkmf.rb creates bad Makefile. the Makefile links libruby.a to the target. - 803_sample-fix-shbang.patch: all sample codes should be s|/usr/local/bin|/usr/bin|g - 804_parse.y-new-bison.patch: fix syntax warning. - 805_uri-bugfix.patch: uri.rb could not handle correctly broken mailto-uri. - add ExcludeArch x86_64 temporarily to fix Bug#74581. Right now ruby can't be built on x86_64. [1.6.7-10] - moved sitedir to /usr/lib/ruby/site_ruby again according as our perl and python. - ruby-1.6.7-resolv1.patch, ruby-1.6.7-resolv2.patch: applied to fix 'Too many open files - '/etc/resolv.conf'' issue. (Bug#64830) [1.6.7-9] - add the owned directory. [1.6.7-8] - fix typo. [1.6.7-7] - removed the ruby-mode-xemacs because it's merged to the xemacs sumo. * Fri Jun 21 2002 Tim Powers <timp@redhat.com> - automated rebuild [1.6.7-5] - fix the stripped binary. - use the appropriate macros. * Sun May 26 2002 Tim Powers <timp@redhat.com> - automated rebuild [1.6.7-3] - ruby-1.6.7-libobj.patch: applied to fix autoconf2.53 error. [1.6.7-2] - ruby-man-1.4.6-jp.tar.bz2: removed. - ruby-refm-rdp-1.4.7-ja-html.tar.bz2: uses it instead of. - ruby-1.6.7-500-marshal-proc.patch, ruby-1.6.7-501-class-var.patch: removed. - ruby-1.6.7-100.patch: applied a bug fix patch. (ruby-dev#16274: patch for 'wm state') (PR#206ja: SEGV handle EXIT) - ruby-1.6.7-101.patch: applied a bug fix patch. (ruby-list#34313: singleton should not be Marshal.dump'ed) (ruby-dev#16411: block local var) - ruby-1.6.7-102.patch: applied a bug fix patch. (handling multibyte chars is partially broken) - ruby-1.6.7-103.patch: applied a bug fix patch. (ruby-dev#16462: preserve reference for GC, but link should be cut) [1.6.7-1] - New upstream release. - ruby-1.6.6-100.patch, ruby-1.6.6-501-ruby-mode.patch: removed. these patches no longer should be needed. - ruby-1.6.7-500-marshal-proc.patch: applied a fix patch. (ruby-dev#16178: Marshal::dump should call Proc#call.) - ruby-1.6.7-501-class-var.patch: applied a fix patch. (ruby-talk#35157: class vars broken in 1.6.7) [1.6.6-5] - Disable alpha because nothing is xemacs for alpha now. [1.6.6-3] - Fixed the duplicate files. [1.6.6-2] - Fixed the missing %defattr [1.6.6-1] - New upstream release. - Applied bug fix patches: - ruby-1.6.6-501-ruby-mode.patch: ruby-talk#30479: disables font-lock coloring. - ruby-1.6.6-100.patch: ruby-talk#30203: Ruby 1.6.6 bug and fix ruby-list#33047: regex bug PR#230: problem with -d in 1.6.6 - Added ruby-mode and ruby-mode-xemacs packages. - Ruby works fine for ia64. so re-enable to build with ia64. (probably it should be worked for alpha) * Wed Jan 09 2002 Tim Powers <timp@redhat.com> - automated rebuild [1.6.4-2] - Remove Japanese description and summaries; they belong in specspo and break rpm - Clean up specfile - Mark language specific files (README.jp) as such - bzip2 sources - rename the libruby package to ruby-libs for consistency - Exclude ia64 (doesn't build - the code doesn't seem to be 64-bit clean [has been excluded on alpha forever]) [1.6.4-1] - rebuild for Red Hat 7.2 * Mon Jun 04 2001 akira yamada <akira@vinelinux.org> - upgrade to nwe upstream version 1.6.4. * Mon Apr 02 2001 akira yamada <akira@vinelinux.org> - applied patch: - fixed method cache bug. etc. (Patch103, Patch104) * Tue Mar 27 2001 akira yamada <akira@vinelinux.org> - applied patch: - fixed marshal for bignum bug. - fixed scope of constant variables bug. * Tue Mar 20 2001 akira yamada <akira@vinelinux.org> - upgraded to new upstream version 1.6.3. * Fri Feb 09 2001 akira yamada <akira@vinelinux.org> - fixed bad group for libruby. - Applied patch: upgraded to cvs version (2001-02-08): fixed minor bugs. * Thu Jan 18 2001 akira yamada <akira@vinelinux.org> - Applied patch: upgraded to cvs version (2001-01-15): fixed minor bugs(e.g. ruby makes extention librares too large...). * Wed Jan 10 2001 akira yamada <akira@vinelinux.org> - Applied patch: upgraded to cvs version (2001-01-09): fixed minor bugs. * Sat Dec 30 2000 akira yamada <akira@vinelinux.org> - Applied bug fix patch. * Mon Dec 25 2000 akira yamada <akira@vinelinux.org> - Updated to new upstream version 1.6.2. * Fri Dec 22 2000 akira yamada <akira@vinelinux.org> - Removed ruby_cvs.2000122019.patch, added ruby_cvs.2000122215.patch (upgraded ruby to latest cvs version, 1.6.2-preview4). * Wed Dec 20 2000 akira yamada <akira@vinelinux.org> - Removed ruby_cvs.2000121413.patch, added ruby_cvs.2000122019.patch (upgraded ruby to latest cvs version). - new package: libruby * Thu Dec 14 2000 akira yamada <akira@vinelinux.org> - Removed ruby_cvs.2000101901.patch, added ruby_cvs.2000121413.patch (upgraded ruby to latest cvs version). - Removed ruby-dev.11262.patch, ruby-dev.11265.patch, and ruby-dev.11268.patch (included into above patch). [1.6.1-0vl9] - build on gcc-2.95.3 * Thu Oct 19 2000 akira yamada <akira@vinelinux.org> - Added ruby-dev.11268.patch. * Thu Oct 19 2000 akira yamada <akira@vinelinux.org> - Removed ruby_cvs.2000101117.patch and added ruby_cvs.2000101901.patch (upgraded ruby to latest cvs version). - Added ruby-dev.11262.patch. - Added ruby-dev.11265.patch. * Wed Oct 11 2000 akira yamada <akira@vinelinux.org> - Removed ruby_cvs.2000100313.patch and added ruby_cvs.2000101117.patch (upgraded ruby to latest cvs version). * Mon Oct 09 2000 akira yamada <akira@vinelinux.org> - Removed ruby_cvs.2000100313.patch and added ruby_cvs.2000100313.patch (upgraded ruby to latest cvs version). * Tue Oct 03 2000 akira yamada <akira@vinelinux.org> - Removed ruby_cvs.2000100218.patch and added ruby_cvs.2000100313.patch (upgraded ruby to latest cvs version). * Mon Oct 02 2000 akira yamada <akira@vinelinux.org> - Removed ruby_cvs.2000092718.patch and added ruby_cvs.2000100218.patch (upgraded ruby to latest cvs version). * Wed Sep 27 2000 akira yamada <akira@vinelinux.org> - Updated to upstream version 1.6.1. - Removed ruby_cvs.2000082901.patch and added ruby_cvs.2000092718.patch (upgraded ruby to latest cvs version). * Tue Aug 29 2000 akira yamada <akira@redhat.com> - Updated to version 1.4.6. - removed ruby-dev.10123.patch(included into ruby-1.4.6). - Added ruby_cvs.2000082901.patch(upgraded ruby to latest cvs version). * Tue Jun 27 2000 akira yamada <akira@redhat.com> - Updated manuals to version 1.4.5. * Sun Jun 25 2000 akira yamada <akira@redhat.com> - Added ruby-dev.10123.patch. * Sat Jun 24 2000 akira yamada <akira@redhat.com> - Updated to version 1.4.5. - Removed ruby_cvs.2000062401.patch(included into ruby-1.4.5). * Thu Jun 22 2000 akira yamada <akira@redhat.com> - Updated to version 1.4.4(06/22/2000 CVS). - Removed ruby-dev.10054.patch(included into ruby_cvs.patch). * Thu Jun 22 2000 akira yamada <akira@redhat.com> - Renamed to ruby_cvs20000620.patch from ruby_cvs.patch. * Tue Jun 20 2000 akira yamada <akira@redhat.com> - Updated to version 1.4.4(06/20/2000 CVS). - Removed ruby-list.23190.patch(included into ruby_cvs.patch). - Added ruby-dev.10054.patch. * Thu Jun 15 2000 akira yamada <akira@redhat.com> - Updated to version 1.4.4(06/12/2000 CVS). - Added manuals and FAQs. - Split into ruby, ruby-devel, ruby-tcltk, ruby-docs, irb. * Tue Jun 13 2000 Mitsuo Hamada <mhamada@redhat.com> - Updated to version 1.4.4 * Wed Dec 08 1999 Atsushi Yamagata <yamagata@plathome.co.jp> - Updated to version 1.4.3 * Mon Sep 20 1999 Atsushi Yamagata <yamagata@plathome.co.jp> - Updated to version 1.4.2 (Sep 18) * Fri Sep 17 1999 Atsushi Yamagata <yamagata@plathome.co.jp> - Updated to version 1.4.2 * Tue Aug 17 1999 Atsushi Yamagata <yamagata@plathome.co.jp> - Updated to version 1.4.0 * Fri Jul 23 1999 Atsushi Yamagata <yamagata@plathome.co.jp> - 2nd release - Updated to version 1.2.6(15 Jul 1999) - striped %{prefix}/bin/ruby * Mon Jun 28 1999 Atsushi Yamagata <yamagata@plathome.co.jp> - Updated to version 1.2.6(21 Jun 1999) * Wed Apr 14 1999 Atsushi Yamagata <yamagata@plathome.co.jp> - Updated to version 1.2.5 * Fri Apr 09 1999 Atsushi Yamagata <yamagata@plathome.co.jp> - Updated to version 1.2.4 * Fri Dec 25 1998 Toru Hoshina <hoshina@best.com> - Version up to 1.2 stable. * Fri Nov 27 1998 Toru Hoshina <hoshina@best.com> - Version up to 1.1c9. * Thu Nov 19 1998 Toru Hoshina <hoshina@best.com> - Version up to 1.1c8, however it appear short life :-P * Fri Nov 13 1998 Toru Hoshina <hoshina@best.com> - Version up. * Tue Sep 22 1998 Toru Hoshina <hoshina@best.com> - To make a libruby.so. * Mon Sep 21 1998 Toru Hoshina <hoshina@best.com> - Modified SPEC in order to install libruby.a so that it should be used by another ruby entention. - 2nd release. * Mon Mar 09 1998 Shoichi OZAWA <shoch@jsdi.or.jp> - Added a powerPC arch part. Thanks, MURATA Nobuhiro <nob@makioka.y-min.or.jp> MODERATE Copyright 2023 Oracle, Inc. CVE-2023-28756 CVE-2022-28739 CVE-2021-33621 CVE-2023-28755 cpe:/a:oracle:linux:8:9:appstream_base cpe:/a:oracle:linux:8::appstream Oracle Linux 8 [1.6.8-6] - CVE fix for: CVE-2023-3138 Resolve: rhbz#2213762 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-3138 cpe:/a:oracle:linux:8:9:appstream_base cpe:/a:oracle:linux:8::appstream Oracle Linux 8 mod_wsgi [4.7.1-7] - Bump release for rebuild Resolves: rhbz#2213595 [4.7.1-6] - Remove rpath Resolves: rhbz#2213837 numpy [1.19.4-3] - Adjusted the postun scriptlets to enable upgrading to RHEL 9 - Resolves: rhbz#1933055 [1.19.4-2] - Convert from Fedora to the python39 module in RHEL8 - Resolves: rhbz#1877430 [1:1.19.4-1] - 1.19.4 [1:1.19.3-1] - 1.19.3 [1:1.19.2-2] - Make test suite work in FIPS (140-2) Mode [1:1.19.2-1] - 1.19.2 [1:1.19.1-3] - https://fedoraproject.org/wiki/Changes/FlexiBLAS_as_BLAS/LAPACK_manager [1:1.19.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild [1:1.19.1-1] - 1.19.1 [1:1.19.0-2] - Assume old-style numpy provides from python2-numpy [1:1.19.0-1] - 1.19.0 final. [1:1.19.0-0.rc2] - 1.19.0 rc2 [1:1.18.4-3] - Rebuilt for Python 3.9 [1:1.18.4-2] - Own __pycache__ dir, 1833392 [1:1.18.4-1] - 1.18.4 [1:1.18.3-1] - 1.18.3 [1:1.18.2-1] - 1.18.2 [1:1.18.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild [1:1.18.1-1] - 1.18.1 [1:1.18.0-1] - 1.18.0 [1:1.17.4-2] - Backport patch for s390x failures - Enable non-broken tests on ppc64le [1:1.17.4-1] - 1.17.4 [1:1.17.3-1] - 1.17.3 [1:1.17.2-1] - 1.17.2 [1:1.17.1-1] - 1.17.1 [1:1.17.0-3] - Rebuilt for Python 3.8 [1:1.17.0-2] - Reintroduce libnpymath.a (#1735674) [1:1.17.0-1] - 1.17.0, split out Python 2. [1:1.16.4-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild [1:1.16.4-2] - Avoid hardcoding /usr prefix [1:1.16.4-1] - 1.16.4 [1:1.16.3-2] - Build only with openblasp (bugz#1709161) [1:1.16.3-1] - 1.16.3. [1:1.16.2-1] - 1.16.2. [1:1.16.1-1] - 1.16.1. [1:1.16.0-1] - 1.16.0. [1:1.15.1-2] - Switch to pytest for running tests during check - Stop ignoring failures when running tests - Set PATH in check so that f2py tests work - Update docs to match release - Remove outdated workaround from rhbz#849713 [1:1.15.1-1] - Update to latest version [1:1.15.0-2] - Fix broken build on s390x - Remove bytecode produced by pytest - Re-enable tests on s390x [1:1.15.0-1] - 1.15.0 [1:1.14.5-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild [1:1.14.5-2] - Rebuilt for Python 3.7 [1:1.14.5-1] - 1.14.5 [1:1.14.3-1] - 1.14.3 [1:1.14.2-1] - 1.14.2 [1:1.14.1-1] - 1.14.1 [1:1.14.0-0.rc1.1] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [1:1.14.0-0.rc1] - 1.14.0 rc1 [1:1.13.3-5] - Fix ambiguous Python 2 dependency declarations (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) [1:1.13.3-4] - Split out doc subpackage. [1:1.13.3-3] - Cleanup spec file conditionals [1:1.13.3-2] - set proper environment variables for openblas [1:1.13.3-1] - 1.13.3 [1:1.13.2-1] - 1.13.2 [1:1.13.1-4] - Use openblas where available, BZ 1472318. [1:1.13.1-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild [1:1.13.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [1:1.13.1-1] - 1.13.1 final [1:1.13.0-1] - 1.13.0 final [1:1.13.0-0.rc2] - 1.13.0 rc2 [1:1.13.0-0.rc1] - 1.13.0 rc1 [1:1.12.1-1] - 1.12.1 [1:1.12.0-1] - Update to 1.12.0, build with gcc 7.0. [1:1.11.2-2] - Rebuild for Python 3.6 [1:1.11.2-1] - Update to 1.11.2 final [1:1.11.2-0.rc1] - Update to 1.11.2rc1, BZ 1340440. [1:1.11.1-2] - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages [1:1.11.1-1] - Update to 1.11.1 final [1:1.11.1-0.rc1] - Update to 1.11.1rc1, BZ 1340440. [1:1.11.0-4] - Update to 1.11.0 final [1:1.11.0-3.rc2] - Update to 1.11.0rc2 [1:1.11.0-2.b3] - Bump Release. 1b2 is higher than 0b3 [1:1.11.0-0.b3] - Update to 1.11.0b2, BZ 1306249. [1:1.11.0-1b2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [1:1.11.0-0.b2] - Update to 1.11.0b2, BZ 1303387. [1:1.11.0-020161016.cc2b04git] - Update to git snapshot (due to build issue) after 1.11.0b1, BZ 1301943. [1:1.10.4-1] - Update to 1.10.4, BZ 1296509. [1:1.10.2-1] - Update to 1.10.2, BZ 1291674. [1:1.10.2-0.2.rc2] - Update to 1.10.2rc1, BZ 1289550. [1:1.10.2-0.1.rc1] - Update to 1.10.2rc1 - Drop opt-flags patch applied upstream [1:1.10.1-6] - Add provides to satisfy numpy%{_isa} requires in other packages [1:1.10.1-5] - Re-add provides f2py [1:1.10.1-4] - Fix obsoletes / provides for numpy -> python2-numpy rename [1:1.10.1-3] - Remove fortran flags or arm would build with -march=x86-64 [1:1.10.1-2] - Provide python2-* packages - Run tests with verbose=2 [1:1.10.1-1] - Update to 1.10.1, BZ 1271022. [1:1.10.0-2] - Rebuilt for Python3.5 rebuild [1:1.10.0-1] - Update to 1.10.0 final. [1:1.10.0-0.b1] - Update to 1.10.0b1, BZ 1252641. [1:1.9.2-3] - Add python2-numpy provides (bug #1249423) - Spec cleanup [1:1.9.2-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [1:1.9.2-1] - Update to 1.9.2 [1:1.9.1-2] - Add upstream patch to fix xerbla linkage (bug #1172834) [1:1.9.1-1] - Update to 1.9.1, BZ 1160273. [1:1.9.0-1] - Update to 1.9.0 [1:1.9.0-0.1.rc1] - Update to 1.9.0rc1 [1:1.8.2-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild [1:1.8.2-1] - Update to 1.8.2 [1:1.8.1-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild [1:1.8.1-3] - Rebuild for Python 3.4 [1:1.8.1-2] - Fixing FTBFS on ppc64le (#1078354) [1:1.8.1-1] - Update to 1.8.1 [1:1.8.0-5] - Fix __pycache__ ownership (bug #1072467) [1:1.8.0-4] - Fix CVE-2014-1858, CVE-2014-1859: #1062009, #1062359 [1:1.8.0-3] - Ship doc module (bug #1034357) [1:1.8.0-2] - Move f2py documentation to f2py package (bug #1027394) [1:1.8.0-1] - Update to 1.8.0 final [1:1.8.0-0.7.rc2] - Update to 1.8.0rc2 - Create clean site.cfg - Use serial atlas [1:1.8.0-0.6.b2] - Add [atlas] to site.cfg for new atlas library names [1:1.8.0-0.5.b2] - Update site.cfg for new atlas library names [1:1.8.0-0.4.b2] - rebuild for atlas 3.10 [1:1.8.0-0.3.b2] - Fix libdir path in site.cfg, BZ 1006242. [1:1.8.0-0.2.b2] - Update to 1.8.0b2 [1:1.8.0-0.1.b1] - Update to 1.8.0b1 - Drop f2py patch applied upstream [1:1.7.1-5] - URL Fix, BZ 1001337 [1:1.7.1-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild [1:1.7.1-3] - Fix rpmlint warnings - Update License - Apply patch: change shebang of f2py to use binary directly [1:1.7.1-2] - Specfile cleanup (bug #969854) [1:1.7.1-1] - Update to 1.7.1 [1:1.7.0-1] - Update to 1.7.0 final [1:1.7.0-0.5.rc1] - Update to 1.7.0rc1 [1:1.7.0-0.4.b2] - Update to 1.7.0b2 - Drop patches applied upstream [1:1.7.0-0.3.b1] - Add patch from github pull 371 to fix python 3.3 pickle issue - Remove cython .c source regeneration - fails now [1:1.7.0-0.2.b1] - add workaround for rhbz#849713 (fixes FTBFS) [1:1.7.0-0.1.b1] - Update to 1.7.0b1 - Rebase python 3.3 patchs to current git master - Drop patches applied upstream [1:1.6.2-5] - rework patches for 3.3 to more directly reflect upstream's commits - re-enable test suite on python 3 - forcibly regenerate Cython .c source to avoid import issues on Python 3.3 [1:1.6.2-4] - rebuild for https://fedoraproject.org/wiki/Features/Python_3.3 - needs unicode patch [1:1.6.2-3] - remove rhel logic from with_python3 conditional [1:1.6.2-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild [1:1.6.2-1] - Update to 1.6.2 final [1:1.6.2rc1-0.1] - Update to 1.6.2rc1 [1:1.6.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild [1:1.6.1-1] - Update to 1.6.1 [1:1.6.0-2] - Bump and rebuild for BZ 712251. [1:1.6.0-1] - Update to 1.6.0 final [1:1.6.0-0.2.b2] - Update to 1.6.0b2 - Drop import patch fixed upstream [1:1.6.0-0.1.b1] - Update to 1.6.0b1 - Build python3 module with python3 - Add patch from upstream to fix build time import error [1:1.5.1-1] - Update to 1.5.1 final [1:1.5.1-0.4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild [1:1.5.1-0.3] - fix the AttributeError during tests - fix build on s390(x) [1:1.5.1-0.2] - rebuild for newer python3 [1:1.5.1-0.1] - update to 1.5.1rc1 - add python3 subpackage - some spec-cleanups [1:1.4.1-6] - actually add the patch this time [1:1.4.1-5] - fix segfault within %check on 2.7 (patch 2) [1:1.4.1-4] - Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild [1.4.1-3] - ignore the 'Ticket #1299 second test' failure on s390(x) [1.4.1-2] - source commit fix [1.4.1-1] - New upstream release. Include backported doublefree patch [1.3.0-8] - Moved distutils back to the main package, BZ 572820. [1.3.0-7] - Reverted to 1.3.0 after upstream pulled 1.4.0, BZ 579065. [1.4.0-5] - Linking /usr/include/numpy to .h files, BZ 185079. [1.4.0-4] - Re-enabling atlas BR, dropping lapack Requires. [1.4.0-3] - Since the previous didn't work, Requiring lapack. [1.4.0-2] - Temporarily dropping atlas BR to work around 562577. [1.4.0-1] - 1.4.0. - Dropped ARM patch, ARM support added upstream. [1.3.0-6.fa1] - Add ARM support [1.3.0-6] - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild [1.3.0-5] - Fixed atlas BR, BZ 505376. [1.3.0-4] - EVR bump for pygame chainbuild. [1.3.0-3] - Moved linalg, fft back to main package. [1.3.0-2] - Split out f2py into subpackage, thanks Peter Robinson pbrobinson@gmail.com. [1.3.0-1] - Update to latest upstream. - Fixed Source0 URL. [1.3.0-0.rc1] - Update to latest upstream. [1.2.1-3] - Require python-devel, BZ 488464. [1.2.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild [1.2.1-1] - Update to 1.2.1. [1.2.0-2] - Rebuild for Python 2.6 [1.2.0-1] - New upstream release, added python-nose BR. BZ 465999. - Using atlas blas, not blas-devel. BZ 461472. [1.1.1-1] - New upstream release [1.1.0-1] - New upstream release [1.0.4-1] - New upstream release [1.0.3.1-2] - Add python egg to %files on f9+ [1.0.3.1-1] - New upstream release [1.0.3-1] - New upstream release [1.0.2-2] - Drop BR: atlas-devel, since it just provides binary-compat blas and lapack libs. Atlas can still be optionally used at runtime. (Note: this is all per the atlas maintainer). [1.0.2-1] - New upstream release [1.0.1-4] - Update gfortran patch to recognize latest gfortran f95 support - Resolves rhbz#236444 [1.0.1-3] - Fix up cpuinfo bug (#229753). Upstream bug/change: http://projects.scipy.org/scipy/scipy/ticket/349 [1.0.1-2] - Per discussion w/Jose Matos, Obsolete/Provide f2py, as the stand-alone one is no longer supported/maintained upstream [1.0.1-1] - New upstream release [1.0-2] - Rebuild for python 2.5 [1.0-1] - New upstream release [0.9.8-1] - New upstream release [0.9.6-1] - Upstream update [0.9.5-1] - Upstream update [0.9.4-2] - Rebuild for Fedora Extras 5 [0.9.4-1] - Initial RPM release - Added gfortran patch from Neal Becker python39 [3.9.18-1] - Update to 3.9.18 - Security fix for CVE-2023-40217 Resolves: RHEL-3238 [3.9.17-2] - Fix symlink handling in the fix for CVE-2023-24329 Resolves: rhbz#263261 [3.9.17-1] - Rebase to 3.9.17 - Security fix for CVE-2023-24329 Resolves: rhbz#2173917 [3.9.16-3] - Strip the LTO bytecode from python.o Resolves: rhbz#2213527 [3.9.16-2] - Add filters for tarfile extraction (CVE-2007-4559, PEP-706) Resolves: rhbz#263261 python3x-pip [20.2.4-8] - Use tarfile.data_filter for extracting (CVE-2007-4559, PEP-721, PEP-706) Resolves: RHBZ#2218275 [20.2.4-7] - Remove bundled windows executables - Resolves: rhbz#2006790 [20.2.4-6] - Adjusted the postun scriptlets to enable upgrading to RHEL 9 - Resolves: rhbz#1933055 [20.2.4-5] - Fix for CVE-2021-33503 Catastrophic backtracking in URL authority parser Resolves: rhbz#1968074 [20.2.4-4] - Fix for CVE-2021-3572 - pip incorrectly handled unicode separators in git references Resolves: rhbz#1962856 [20.2.4-3] - Convert from Fedora to the python39 module in RHEL8 - Resolves: rhbz#1877430 [20.2.4-2] - Disable tests and documentation in Fedora ELN (and RHEL) [20.2.4-1] - Update to 20.2.4 (#1889112) [20.2.2-1] - Update to 20.2.2 (#1838553) [20.1.1-7] - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild [20.1.1-6] - Do not emit a warning about root privileges when --root is used [20.1.1-5] - Update bundled provides to match 20.1.1 [20.1.1-4] - Deselect tests incompatible with the latest virtualenv [20.1.1-3] - Rebuilt for Python 3.9 [20.1.1-2] - Bootstrap for Python 3.9 [20.1.1-1] - Update to 20.1.1 [20.1-1] - Update to 20.1 [20.1~b1-1] - Update to 20.1~b1 [20.0.2-4] - Only recommend setuptools, don't require them [20.0.2-3] - Allow setting to /u03/tmp/ksharma/OL89/errata/prod/02-db/... during pip wheel (#1806625) [20.0.2-2] - Don't warn the user about pip._internal.main() entrypoint to fix ensurepip [20.0.2-1] - Update to 20.0.2 (#1793456) [19.3.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild [19.3.1-1] - Update to 19.3.1 (#1761508) - Drop upstreamed patch that fixed expected output in test to not break with alpha/beta/rc Python versions [19.2.3-2] - Make /usr/bin/pip(3) work with user-installed pip 19.3+ (#1767212) [19.2.3-1] - Update to 19.2.3 (#1742230) - Drop patch that should strip path prefixes from RECORD files, the paths are relative [19.1.1-8] - Remove python2-pip - Make pip bootstrap itself, rather than with an extra bootstrap RPM build [19.1.1-7] - Rebuilt for Python 3.8 [19.1.1-6] - Bootstrap for Python 3.8 [19.1.1-5] - Bootstrap for Python 3.8 [19.1.1-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild [19.1.1-3] - Recommend libcrypt.so.1 for manylinux1 compatibility - Make /usr/bin/pip Python 3 [19.1.1-2] - Fix root warning when pip is invoked via python -m pip - Remove a redundant second WARNING prefix form the abovementioned warning [19.1.1-1] - Update to 19.1.1 (#1706995) [19.1-1] - Update to 19.1 (#1702525) [19.0.3-1] - Update to 19.0.3 (#1679277) [19.0.2-1] - Update to 19.0.2 (#1668492) [18.1-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild [18.1-2] - Use the system level root certificate instead of the one bundled in certifi [18.1-1] - Update to 18.1 (#1652089) [18.0-4] - Prevent removing of the system packages installed under /usr/lib when pip install -U is executed. Original patch by Michal Cyprian. Resolves: rhbz#1550368. [18.0-3] - Create python-pip-wheel package with the wheel [18.0-2] - Remove redundant 'Unicode'' from License [18.0-7] - Update to 18.0 [9.0.3-6] - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild [9.0.3-5] - Rebuilt for Python 3.7 [9.0.3-4] - Bootstrap for Python 3.7 [9.0.3-3] - Bootstrap for Python 3.7 [9.0.3-2] - Allow to import pip10's main from pip9's /usr/bin/pip - Do not show the 'new version of pip' warning outside of venv Resolves: rhbz#1569488 Resolves: rhbz#1571650 Resolves: rhbz#1573755 [9.0.3-1] - Update to 9.0.3 [9.0.1-16] - Include built HTML documentation (in the new -doc subpackage) and man page [9.0.1-15] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [9.0.1-14] - Reintroduce the ipaddress module in the python3 subpackage. [9.0.1-13] - Add virtual provides for the bundled libraries. (rhbz#1096912) [9.0.1-12] - Switch macros to bcond's and make Python 2 optional to facilitate building the Python 2 and Python 3 modules [9.0.1-11] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [9.0.1-10] - Modernized package descriptions Resolves: rhbz#1452568 [9.0.1-9] - Fix typo in the sudo pip warning [9.0.1-8] - Patch 1 update: No sudo pip warning in venv or virtualenv [9.0.1-7] - Patch 1 update: Customize the warning with the proper version of the pip command [9.0.1-6] - Added patch 1: Emit a warning when running with root privileges [9.0.1-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [9.0.1-4] - Provide symlinks to executables to comply with Fedora guidelines for Python Resolves: rhbz#1406922 [9.0.1-3] - Rebuild for Python 3.6 with wheel [9.0.1-2] - Rebuild for Python 3.6 without wheel [9.0.1-1] - Update to 9.0.1 [8.1.2-5] - Enable EPEL Python 3 builds - Use new python macros - Cleanup spec [8.1.2-4] - Updated the test sources [8.1.2-3] - Moved python-pip into the python2-pip subpackage - Added the python_provide macro [8.1.2-2] - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages [8.1.2-1] - Update to 8.1.2 - Moved to a new PyPI URL format - Updated the prefix-stripping patch because of upstream changes in pip/wheel.py [8.0.2-1] - Update to 8.0.2 [7.1.0-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [7.1.0-3] - Rebuilt for Python3.5 rebuild - With wheel set to 1 [7.1.0-2] - Rebuilt for Python3.5 rebuild [7.1.0-1] - Update to 7.1.0 [7.0.3-3] - Install bash completion - Ship LICENSE.txt as %license where available [7.0.3-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [7.0.3-1] - Update to 7.0.3 [6.0.8-1] - Update to 6.0.8 [1.5.6-5] - Only enable tests on Fedora. [1.5.6-4] - Add tests - Add patch skipping tests requiring Internet access [1.5.6-3] - Added patch for local dos with predictable temp dictionary names (http://seclists.org/oss-sec/2014/q4/655) [1.5.6-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild [1.5.6-1] - Update to 1.5.6 [1.5.4-4] - Rebuild as wheel for Python 3.4 [1.5.4-3] - Disable build_wheel [1.5.4-2] - Rebuild as wheel for Python 3.4 [1.5.4-1] - Updated to 1.5.4 [1.4.1-1] - Removed patch for CVE 2013-2099 as it has been included in the upstream 1.4.1 release - Updated version to 1.4.1 [1.3.1-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild [1.3.1-4] - Fix for CVE 2013-2099 [1.3.1-3] - undo python2 executable rename to python-pip. fixes #958377 - fix summary to match upstream [1.3.1-2] - Fix main package Summary, it's for Python 2, not 3 (#877401) [1.3.1-1] - Update to 1.3.1, fix for CVE-2013-1888. [1.2.1-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild [1.2.1-2] - Fixing files for python3-pip [1.2.1-1] - Update to upstream 1.2.1 - Change binary from pip-python to python-pip (RHBZ#855495) - Add alias from python-pip to pip-python, to be removed at a later date [1.1.0-1] - Update to upstream 1.1.0 [1.0.2-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild [1.0.2-1] - update to 1.0.2 and added python3 subpackage [0.8.3-1] - update to 0.8.3 and project home page [0.8.2-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild [0.8.2-1] - update to 0.8.2 of pip [0.8-1] - update to 0.8 of pip [0.7.2-5] - Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild [0.7.2-1] - update to 0.7.2 of pip [0.7.1-1] - update to 0.7.1 of pip [0.6.1.4] - fix dependency issue [0.6.1-2] - fix spec file [0.6.1-1] - upgrade to 0.6.1 of pip [0.4-1] - Initial package python3x-setuptools [50.3.2-4] - Adjusted the postun scriptlets to enable upgrading to RHEL 9 - Resolves: rhbz#1933055 [50.3.2-3] - Convert from Fedora to the python39 module in RHEL8 - Resolves: rhbz#1877430 [50.3.2-2] - Disable tests in Fedora ELN (and RHEL) [50.3.2-1] - Update to 50.3.2 (#1889093) [50.1.0-1] - Update to 50.1.0 (#1873889) [49.6.0-1] - Update to 49.6.0 (#1862791) [49.1.3-1] - Update to 49.1.3 (#1853597) - https://setuptools.readthedocs.io/en/latest/history.html#v49-1-3 [47.3.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild [47.3.1-1] - Update to 47.3.1 (#1847049) - https://setuptools.readthedocs.io/en/latest/history.html#v47-3-1 [47.1.1-1] - Update to 47.1.1 (#1841123) - https://setuptools.readthedocs.io/en/latest/history.html#v47-1-1 [46.4.0-4] - Rebuilt for Python 3.9 [46.4.0-3] - Bootstrap for Python 3.9 [46.4.0-2] - Bootstrap for Python 3.9 [46.4.0-1] - Update to 46.4.0 (#1835411) - https://setuptools.readthedocs.io/en/latest/history.html#v46-4-0 [46.2.0-1] - Update to 46.2.0 (#1833826) - https://setuptools.readthedocs.io/en/latest/history.html#v46-2-0 [46.1.3-1] - Upgrade to 46.1.3 (#1817189) - https://setuptools.readthedocs.io/en/latest/history.html#v46-1-3 [46.0.0-1] - Upgrade to 46.0.0 (#1811340) - https://setuptools.readthedocs.io/en/latest/history.html#v46-0-0 [45.2.0-1] - Upgrade to 45.2.0 (#1775943) - https://setuptools.readthedocs.io/en/latest/history.html#v45-2-0 - No longer supports Python 2 [41.6.0-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild [41.6.0-1] - Upgrade to 41.6.0 (#1758945). - https://setuptools.readthedocs.io/en/latest/history.html#v41-6-0 - Disabled a failing upstream test: https://github.com/pypa/setuptools/issues/1896 [41.2.0-1] - Upgrade to 41.2.0 (#1742718). - https://setuptools.readthedocs.io/en/latest/history.html#v41-2-0 [41.0.1-9] - Move python2-setuptools to a separate package [41.0.1-8] - Rebuilt for Python 3.8 [41.0.1-7] - Bootstrap for Python 3.8 [41.0.1-6] - Provide pythonXdist(setuptools) when bootstrapping [41.0.1-5] - Bootstrap for Python 3.8 [41.0.1-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild [41.0.1-3] - Make /usr/bin/easy_install Python 3 - Drop obsoleted Obsoletes [41.0.1-2] - Remove optional test dependencies for Python 2 - Skip test_virtualenv on Python 2 [41.0.1-1] - Update to 41.0.1 (#1695846) - https://github.com/pypa/setuptools/blob/v41.0.1/CHANGES.rst [40.8.0-1] - Update to 40.8.0 (#1672756) - https://github.com/pypa/setuptools/blob/v40.8.0/CHANGES.rst [40.7.3-1] - Hotfix update to 40.7.3 (#1672084) - https://github.com/pypa/setuptools/blob/v40.7.3/CHANGES.rst [40.7.2-1] - Hotfix update to 40.7.2 (#1671608) - https://github.com/pypa/setuptools/blob/v40.7.2/CHANGES.rst [40.7.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild [40.7.1-1] - Hotfix update to 40.7.1 (#1670243) - https://github.com/pypa/setuptools/blob/v40.7.1/CHANGES.rst [40.7.0-1] - Update to 40.7.0 (#1669876) - https://github.com/pypa/setuptools/blob/v40.7.0/CHANGES.rst [40.4.3-1] - Update to 40.4.3 to fix dire DeprecationWarnings (#1627071) - List vendored libraries - https://github.com/pypa/setuptools/blob/v40.4.3/CHANGES.rst [40.4.1-1] - Update to 40.4.1 (#1599307). - https://github.com/pypa/setuptools/blob/v40.4.1/CHANGES.rst [39.2.0-7] - Add a subpackage with wheels - Remove the python3 bcond - Remove macros for RHEL 6 [39.2.0-6] - Create /usr/local/lib/pythonX.Y when needed (#1576924) [39.2.0-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild [39.2.0-4] - Rebuilt for Python 3.7 [39.2.0-3] - Bootstrap for Python 3.7 [39.2.0-2] - Bootstrap for Python 3.7 [39.2.0-1] - update to 39.2.0 Fixes bug #1572889 [39.0.1-1] - update to 39.0.1 Fixes bug #1531527 [38.4.0-4] - Skip test_virtualenv due to broken executable detection [38.4.0-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [38.4.0-2] - Update conditional [38.4.0-1] - update to 38.4.0 Fixes bug #1531527 [38.2.5-1] - update to 38.2.5 Fixes bug #1528968 [37.0.0-1] - Update to 37.0.0 (fixes #1474126) - Removed not needed pip3 patch (upstream included different version of fix) [36.5.0-1] - Update to 36.5.0 (related to #1474126) [36.2.0-8] - Remove the platform-python subpackage [36.2.0-7] - Re-enable tests to finish bootstrapping the platform-python stack (https://fedoraproject.org/wiki/Changes/Platform_Python_Stack) [36.2.0-6] - Add the platform-python subpackage - Disable tests so platform-python stack can be bootstrapped (https://fedoraproject.org/wiki/Changes/Platform_Python_Stack) [36.2.0-5] - Add Patch 0 that fixes a test suite failure on Python 3 in absence of the Python 2 version of pip - Move docs to their proper place [36.2.0-4] - Switch macros to bcond's and make Python 2 optional to facilitate building the Python 2 and Python 3 modules. [36.2.0-3] - Revert 'Add --executable option to easy_install command' This enhancement is currently not needed and it can possibly collide with pip --editableoption [36.2.0-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [36.2.0-1] - update to 36.2.0. Fixes bug #1470908 [36.0.1-1] - update to 36.0.1. Fixes bug #1458093 [35.0.2-1] - update to 35.0.2. Fixes bug #1446622 [35.0.1-1] - Update to 35.0.1. Fixes bug #1440388 [34.3.2-1] - Update to 34.3.2. Fixes bug #1428818 [34.3.0-1] - Update to 34.3.0. Fixes bug #1426463 [34.2.0-2] - Add --executable option to easy_install command [34.2.0-1] - Update to 34.2.0. Fixes bug #1421676 [34.1.1-1] - Update to 34.1.1. Fixes bug #1412268 - Fix License tag. Fixes bug #1412268 - Add Requires for fomerly bundled projects: six, packaging appdirs [32.3.1-2] - Use python macros in build and install sections [32.3.1-1] - Update to 32.3.1. Fixes bug #1409091 [32.3.0-1] - Update to 32.3.0. Fixes bug #1408564 [32.2.0-1] - Update to 32.2.0. Fixes bug #1400310 [30.4.0-2] - Enable tests [30.4.0-1] - Update to 30.4.0. Fixes bug #1400310 [28.8.0-3] - Rebuild for Python 3.6 with wheel - Disable tests [28.8.0-2] - Rebuild for Python 3.6 without wheel [28.8.0-1] - Update to 28.8.1. Fixes bug #1392722 [28.7.1-1] - Update to 28.7.1. Fixes bug #1389917 [28.6.1-1] - Update to 28.6.1. Fixes bug #1387071 [28.6.0-1] - Update to 28.6.0. Fixes bug #1385655 [28.3.0-1] - Update to 28.3.0. Fixes bug #1382971 [28.2.0-1] - Update to 28.2.0. Fixes bug #1381099 [28.1.0-1] - Update to 28.1.0. Fixes bug #1381066 [28.0.0-1] - Update to 28.0.0. Fixes bug #1380073 [27.3.0-1] - Update to 27.3.0. Fixes bug #1378067 [27.2.0-1] - Update to 27.2.0. Fixes bug #1376298 [27.1.2-1] - Update to 27.1.2. Fixes bug #1370777 [26.0.0-1] - Update to 26.0.0. Fixes bug #1370777 [25.1.6-1] - Update to 25.1.6. Fixes bug #1362325 [25.1.1-1] - Update to 25.1.1. Fixes bug #1361465 [25.1.0-1] - Update to 25.1.0 [25.0.0-1] - Update to 25.0.0 [24.2.0-1] - Update to 24.2.0. Fixes bug #1352734 [24.0.1-2] - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages [24.0.1-1] - Update to 24.0.1. Fixes bug #1352532 [23.0.0-1] - Update to 23.0.0. Fixes bug #1346542 [22.0.5-1] - Update to 22.0.5. Fixes bug #1342706 [20.0.0-1] - Upgrade to 22.0.0 * Tue May 31 2016 Nils Philippsen <nils@redhat.com> - fix source URL [21.2.2-1] - Update to 21.2.2. Fixes bug #1332357 [20.10.1-1] - Update to 20.10.1. Fixes bug #1330375 [20.9.0-1] - Update to 20.9.0. Fixes bug #1327827 [20.8.1-1] - Update to 20.8.1. Fixes bug #1325910 [20.6.7-1] - Update to 20.6.7. Fixes bug #1322836 [20.4-1] - Update to 20.4. Fixes bug #1319366 [20.3-1] - Update to 20.3. Fixes bug #1311967 [20.2.2-1] - Update to 20.2.2. Fixes bug #1311967 [20.1.1-1] - Update to 20.1.1. Fixes bug #130719 [20.1-1] - Update to 20.1. Fixes bug #1307000 [20.0-1] - Update to 20.0. Fixes bug #1305394 [19.7-1] - Update to 19.7. Fixes bug #1304563 [19.6.2-2] - Fix python3 package file ownership [19.6.2-1] - Update to 19.6.2. Fixes bug #1303397 [19.6-1] - Update to 19.6. [19.5-1] - Update to 19.5. Fixes bug #1301313 [19.4-1] - Update to 19.4. Fixes bug #1299288 [19.2-2] - Cleanup spec from python3-setuptools review [19.2-1] - Update to 19.2. Fixes bug #1296755 [19.1.1-1] - Update to 19.1.1. Fixes bug #1292658 [18.8.1-1] - Update to 18.8.1. Fixes bug #1291678 [18.8-1] - Update to 18.8. Fixes bug #1290942 [18.7.1-1] - Update to 18.7.1. Fixes bug #1287372 [18.6.1-1] - Update to 18.6.1. Fixes bug #1270578 [18.5-3] - Try to disable zip_safe bug #1271776 - Add python2 subpackage [18.5-2] - Add patch so it is possible to set test_args variable [18.5-1] - Update to 18.5. Fixes bug #1270578 [18.4-1] - Update to 18.4. Fixes bug #1270578 - Build with wheel and check phase [18.3.2-2] - Python3.5 rebuild: rebuild without wheel and check phase [18.3.2-1] - Update to 18.3.2. Fixes bug #1264902 [18.3.1-1] - Update to 18.3.1. Fixes bug #1256188 [18.1-1] - Update to 18.1. Fixes bug #1249436 [18.0.1-2] - Explicitely provide python2-setuptools [18.0.1-1] - Update to 18.0.1 [17.1.1-3] - Drop no longer needed Requires/BuildRequires on python-backports-ssl_match_hostname - Fixes bug #1231325 [17.1.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [17.1.1-1] - Update to 17.1.1. Fixes bug 1229507 [17.1-1] - Update to 17.1. Fixes bug 1229066 [17.0-1] - Update to 17 [16.0-1] - Update to 16 [15.2-1] - new version [15.0-1] - new version [14.3.1-1] - new version [14.3.1-1] - new version [14.3-1] - new version [14.2-1] - new version [14.1.1-1] - new version [13.0.2-1] - new version [12.4-1] - new version [12.3-1] - new version [12.0.3-1] - Update to 12.0.3 [11.3.1-2] - Huge spec cleanup - Make spec buildable on all Fedoras and RHEL 6 and 7 - Make tests actually run [11.3.1-1] - Update to 11.3.1. Fixes bugs: #1179393 and #1178817 [11.0-1] - Update to 11.0. Fixes bug #1178421 [8.2.1-1] - Update to 8.2.1. Fixes bug #1175229 [7.0-1] - Latest upstream. Fixes bug #1154590. [6.1-1] - Latest upstream. Fixes bug #1152130. [6.0.2-2] - Modernized python2 macros. - Inlined locale environment variables in the %check section. - Remove bundled egg-info and .exes. [6.0.2-1] - Update to 6.0.2 [6.0.1-1] - Update to 6.0.1. Fixes bug #1044444 [2.0-8] - Remove the python-setuptools-devel Virtual Provides as per this Fedora 21 Change: http://fedoraproject.org/wiki/Changes/Remove_Python-setuptools-devel [2.0-7] - And another bug in sdist [2.0-6] - Fix a bug in the sdist command [2.0-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild [2.0-4] - Rebuild as wheel for Python 3.4 [2.0-3] - Rebuilt for tag f21-python [2.0-2] - Add a switch to build setuptools as wheel [2.0-1] - Update to new upstream release with a few things removed from the API: Changelog: https://pypi.python.org/pypi/setuptools#id139 [1.4-1] - Update to 1.4 that gives easy_install pypi credential handling [1.3.1-1] - Minor upstream update to reign in overzealous warnings [1.3-1] - Upstream update that pulls in our security patches [1.1.7-1] - Update to newer upstream release that has our patch to the unittests - Fix for http://bugs.python.org/issue17997#msg194950 which affects us since setuptools copies that code. Changed to use python-backports-ssl_match_hostname so that future issues can be fixed in that package. [1.1.6-1] - Update to newer upstream release. Some minor incompatibilities listed but they should affect few, if any consumers. [0.9.6-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild [0.9.6-1] - Upstream update -- just fixes python-2.4 compat [0.9.5-1] - Update to 0.9.5 - package_index can handle hashes other than md5 - Fix security vulnerability in SSL certificate validation - https://bugzilla.redhat.com/show_bug.cgi?id=963260 [0.8-1] - Update to upstream 0.8 release. Codebase now runs on anything from python-2.4 to python-3.3 without having to be translated by 2to3. [0.7.7-1] - Update to 0.7.7 upstream release [0.7.2-2] - Update to the setuptools-0.7 branch that merges distribute and setuptools [0.6.36-1] - Update to upstream 0.6.36. Many bugfixes [0.6.28-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild [0.6.28-3] - rebuild for https://fedoraproject.org/wiki/Features/Python_3.3 [0.6.28-2] - remove rhel logic from with_python3 conditional [0.6.28-1] - New upstream release: - python-3.3 fixes - honor umask when setuptools is used to install other modules [0.6.27-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild [0.6.27-2] - Fix easy_install.py having a python3 shebang in the python2 package [0.6.27-1] - Upstream bugfix [0.6.24-2] - Upstream bugfix [0.6.24-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild [0.6.24-1] - Upstream bugfix - Compile the win32 launcher binary using mingw [0.6.21-1] - Upstream bugfix release [0.6.19-1] - Upstream bugfix release [0.6.14-7] - Switch to patch that I got in to upstream [0.6.14-6] - Fix build on python-3.2 [0.6.14-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild [0.6.14-4] - rebuild with python3.2 http://lists.fedoraproject.org/pipermail/devel/2010-August/141368.html [0.6.14-3] - Update description to mention this is distribute [0.6.14-2] - bump for building against python 2.7 [0.6.14-1] - update to new version - all patches are upsteam [0.6.13-7] - generalize path of easy_install-2.6 and -3.1 to -2.* and -3.* [0.6.13-6] - Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild [0.6.13-5] - Upstream patch for compatibility problem with setuptools - Minor spec cleanups - Provide python-distribute for those who see an import distribute and need to get the proper package. [0.6.13-4] - Fix race condition in unittests under the python-2.6.x on F-14. [0.6.13-3] - Fix few more buildroot macros [0.6.13-2] - Include data that's needed for running tests [0.6.13-1] - Update to upstream 0.6.13 - Minor specfile formatting fixes [0.6.10-3] - First build with python3 support enabled. [0.6.10-2] - Really disable the python3 portion [0.6.10-1] - Update the python3 portions but disable for now. - Update to 0.6.10 - Remove %pre scriptlet as the file has a different name than the old package's directory [0.6.9-4] - Fix install to make /usr/bin/easy_install the py2 version - Don't need python3-tools since the library is now in the python3 package - Few other changes to cleanup style [0.6.9-2] - add python3 subpackage [0.6.9-1] - New upstream bugfix release. [0.6.8-2] - Test rebuild [0.6.8-1] - Update to 0.6.8. - Fix directory => file transition when updating from setuptools-0.6c9. [0.6.7-2] - Fix duplicate inclusion of files. - Only Obsolete old versions of python-setuptools-devel [0.6.7-1] - Move easy_install back into the main package as the needed files have been moved from python-devel to the main python package. - Update to 0.6.7 bugfix. [0.6.6-1] - Upstream bugfix release. [0.6.4-1] - First build from the distribute codebase -- distribute-0.6.4. - Remove svn patch as upstream has chosen to go with an easier change for now. [0.6c9-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild [0.6c9-4] - Apply SVN-1.6 versioning patch (rhbz #511021) [0.6c9-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild python3x-six python-cffi python-chardet python-cryptography python-idna python-lxml python-ply python-psutil [5.8.0-4] - Convert from Fedora to the python39 module in RHEL8 - Resolves: rhbz#1877430 [5.8.0-3] - Disable test_leak_mem test. [5.8.0-2] - Disable test_sensors_temperatures test. [5.8.0-1] - Update to 5.8.0. Fixes rhbz#1909321 - Re-enable tests (skipping 2 that fail in mock). [5.7.3-1] - Update to 5.7.3 (rhbz#1857187) [5.7.2-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild [5.7.2-1] - Update to 5.7.2 [5.6.7-3] - Add BR on setuptools for all package combinations [5.6.7-2] - Rebuilt for Python 3.9 [5.6.7-1] - Update to 5.6.7. Fixes bug 1768362. [5.6.3-6] - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild [5.6.3-5] - Add python2-setuptools to BuildRequires to fix egg info. Fixes bug #1750362 [5.6.3-4] - Reduce unused build dependencies [5.6.3-3] - Rebuilt for Python 3.8 [5.6.3-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild [5.6.3-1] - Update to 5.6.3 Fixes bug #1567102 [5.5.1-1] - Update to 5.5.1 (Resolves #1567102) [5.4.3-7] - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild [5.4.3-6] - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild [5.4.3-5] - Rebuilt for Python 3.7 [5.4.3-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [5.4.3-3] - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) [5.4.3-2] - Disable tests entirely. [5.4.3-1] - 5.4.3 [5.2.2-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild [5.2.2-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [5.2.2-1] - Update to 5.2.2. Fixes bug #1441010 [5.2.1-1] - Update to 5.2.1. Fixes bug #1418489 [5.1.3-1] - Update to 5.1.3. Fixes bug #1418489 [5.0.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [5.0.1-1] - Update to 5.0.1. Fixes bug #1389579 - Disable failing test while upstream looks at it. [5.0.0-1] - Update to 5.0.0. Fixes bug #1389579 [4.4.0-1] - Update to 4.4.0. Fixes bug #1387942 [4.3.1-1] - Update to 4.3.1. Fixes bug #1372500 [4.3.0-2] - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages [4.3.0-1] - Update to 4.3.0 [3.2.1-6] - Use modern provides filter - Update URL - Use %python3_pkgversion for EPEL7 compat [3.2.1-5] - fix endian issue on s390x/ppc64 [3.2.1-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [3.2.1-3] - Rebuilt for https://fedoraproject.org/wiki/Changes/python3.5 [3.2.1-2] - Add Obsoletes for old package [3.2.1-1] - Update to 3.2.1 - Update to latest Python guidelines (https://fedorahosted.org/fpc/ticket/281) [3.1.1-2] - Restore *.so files - Enable tests [3.1.1-1] - Update to 3.1.1 [2.2.0-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [2.2.0-1] - new version [2.1.3-1] - Update to 2.1.3 [1.2.1-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild [1.2.1-4] - fix license handling [1.2.1-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild [1.2.1-2] - Rebuilt for https://fedoraproject.org/wiki/Changes/Python_3.4 [1.2.1-1] - Update to 1.2.1 [1.0.1-1] - Update to 1.0.1 [0.7.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild [0.7.1-1] - Update to 0.7.1 [0.6.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild [0.6.1-1] - Update to 0.6.1 [0.5.1-3] - rebuild for https://fedoraproject.org/wiki/Features/Python_3.3 [0.5.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild [0.5.1-1] - Update to 0.5.1 [0.4.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild [0.4.1-1] - Update to 0.4.1 [0.4.0-1] - Update to 0.4.0 [0.3.0-1] - Update to 0.3.0 [0.2.1-1] - Update to 0.2.1 - Spec cleanup [0.2.0-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild [0.2.0-1] - Update to 0.2.0 [0.1.3-5] - rebuild with python3.2 http://lists.fedoraproject.org/pipermail/devel/2010-August/141368.html [0.1.3-4] - bump, because previous build nvr already existed in F-14 [0.1.3-3] - Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild [0.1.3-2] - Add missing popd in %build [0.1.3-1] - Update to 0.1.3 - Remove useless call to 2to3 and corresponding BuildRequires python2-tools (this version supports Python 3) [0.1.2-4] - Change python-utils BuildRequires for python2-utils [0.1.2-3] - Add python3 subpackage [0.1.2-2] - Drop no-shebang patch for a sed command - Drop test suite from %doc tag [0.1.2-1] - Initial RPM release python-psycopg2 python-pycparser python-PyMySQL python-pysocks python-requests [2.25.0-3] - Security fix for CVE-2023-32681 Resolves: rhbz#2209469 python-toml python-urllib3 [1.25.10-4] - Fix for CVE-2021-33503 Catastrophic backtracking in URL authority parser Resolves: rhbz#1968074 [1.25.10-3] - Convert from Fedora to the python39 module in RHEL8 - Resolves: rhbz#1877430 [1.25.10-2] - Update RECENT_DATE dynamically [1.25.10-1] - Update to 1.25.10. Fixed bug #1824900 [1.25.8-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild [1.25.8-3] - Rebuilt for Python 3.9 [1.25.8-2] - Bootstrap for Python 3.9 [1.25.8-1] - Latest upstream rhbz#1771186 [1.25.7-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild [1.25.7-2] - Subpackage python2-urllib3 has been removed See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal [1.25.6-1] - Update to v1.25.6 [1.25.3-7] - Rebuilt for Python 3.8.0rc1 (#1748018) [1.25.3-6] - Rebuilt for Python 3.8 [1.25.3-5] - Bootstrap for Python 3.8 [1.25.3-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild [1.25.3-3] - Set RECENT_DATE not to be older than 2 years (#1727796) [1.25.3-2] - Drop the Python 2 tests since Tornado is going away [1.25.3-1] - Update to 1.25.3 [1.24.1-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild [1.24.1-2] - Adjust unbundling of ssl_match_hostname [1.24.1-1] - Update to v1.24.1 [1.23-4] - Removed unneeded dependency python[23]-psutil [1.23-3] - Rebuilt for Python 3.7 [1.23-2] - Bootstrap for Python 3.7 [1.23-1] - Update to the latest upstream release (rhbz 1586072) [1.22-10] - Backport patch to support Python 3.7 (rhbz 1584112) [1.22-9] - Do not lowercase hostnames with custom-protocol (rhbz 1567862) - upstream: https://github.com/urllib3/urllib3/issues/1267 [1.22-8] - Drop the dependency on idna and cryptography (rhbz 1567862) [1.22-7] - Drop the dependency on PyOpenSSL, it's not needed (rhbz 1567862) [1.22-6] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [1.22-5] - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) [1.22-4] - Fix FTBFS - Move RECENT_DATE to 2017-06-30 [1.22-3] - Symlink the Python 3 bytecode for six (rbhz 1519147) [1.22-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [1.22-1] - Update to 1.22 (#1473293) [1.21.1-1] - Update to 1.21.1 (#1445280) [1.20-1] - Update to 1.20 (#1414775) [1.19.1-2] - Rebuild for Python 3.6 [1.19.1-1] - Update to 1.19.1 - Clean up the specfile to only support Fedora 26 [1.16-3] - Rebuild now that python-requests is ready to update. [1.16-2] - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages [1.16-1] - Update to 1.16 [1.15.1-3] - Create python2 subpackage to comply with guidelines. [1.15.1-2] - Remove broken symlinks to unbundled python3-six files https://bugzilla.redhat.com/show_bug.cgi?id=1295015 [1.15.1-1] - Removed patch for ipv6 support, now applied upstream. - Latest version. - New dep on pysocks. [1.13.1-3] - Apply patch from upstream to fix ipv6. [1.13.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [1.13.1-1] - new version [1.13-1] - new version [1.12-1] - new version [1.10.4-7] - Rebuilt for Python3.5 rebuild [1.10.4-6] - Sync from PyPI instead of a git checkout. [1.10.4-5.20150503gita91975b] - Drop requirement on python-backports-ssl_match_hostname on F22 and newer. [1.10.4-4.20150503gita91975b] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [1.10.4-3.20150503gita91975b] - Apply pyopenssl injection for an outdated cpython as per upstream advice https://urllib3.readthedocs.org/en/latest/security.html#insecureplatformwarning https://urllib3.readthedocs.org/en/latest/security.html#pyopenssl [1.10.4-2.20150503gita91975b] - Specify symlinks for six.py{c,o}, fixing rhbz #1222142. [1.10.4-1.20150503gita91975b] - Latest release for python-requests-2.7.0 [1.10.3-2.20150429git585983a] - Grab a git snapshot to get around this chunked encoding failure. [1.10.3-1] - new version [1.10.2-1] - new version [1.10.1-1] - new version [1.10.1-1] - new version [1.10-2] - Copy in a shim for ssl_match_hostname on python3. [1.10-1] - Latest upstream 1.10, for python-requests-2.5.0. - Re-do unbundling without patch, with symlinks. - Modernize python2 macros. - Remove the with_dummyserver tests which fail only sometimes. [1.9.1-1] - Latest upstream, 1.9.1 for latest python-requests. [1.8.2-4] - fix license handling [1.8.2-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild [1.8.2-2] - Rebuilt for https://fedoraproject.org/wiki/Changes/Python_3.4 [1.8.2-1] - Update to latest upstream version [1.7.1-2] - Update patch to find ca_certs in the correct location. [1.7.1-1] - Latest upstream with support for a new timeout class and py3.4. [1.7-3] - Bump release again, just to push an unpaired update. [1.7-2] - Bump release to pair an update with python-requests. [1.7-1] - Update to latest upstream. - Removed the accept-header proxy patch which is included in upstream now. - Removed py2.6 compat patch which is included in upstream now. [1.5-7] - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild [1.5-6] - Fix Requires of python-ordereddict to only apply to RHEL [1.5-5] - Unbundling finished! [1.5-4] - Upstream patch to fix Accept header when behind a proxy. - Reorganize patch numbers to more clearly distinguish them. [1.5-3] - Renamed patches to python-urllib3-* - Fixed ssl check patch to use the correct cert path for Fedora. - Included dependency on ca-certificates - Cosmetic indentation changes to the .spec file. [1.5-2] - python3-tornado BR and run all unittests on python3 [1.5-1] - Initial fedora build. python-wheel [1:0.35.1-4] - Adjusted the postun scriptlets to enable upgrading to RHEL 9 - Resolves: rhbz#1933055 [1:0.35.1-3] - Add back Epoch 1 to the package version because the original version with the epoch was available in CentOS Stream for a few days - Resolves: rhbz#1877430 [1:0.35.1-2] - Convert from Fedora to the python39 module in RHEL8 - Resolves: rhbz#1877430 [1:0.35.1-1] - Update to 0.35.1 - Fixes: rhbz#1868821 [1:0.34.2-1] - Update to 0.34.2 - Drops Python 3.4 support - Fixes: rhbz#1795134 PyYAML scipy [1.5.4-5] - Skip some tests that fail on the ppc64le builders - Resolves: rhbz#2217858 [1.5.4-4] - Remove RPATH from certain shared object files - Resolves: rhbz#2222715 [1.5.4-3] - Specify LDFLAGS explicitly - Force preprocessing of Fortran sources to make annobin record proper flags - Resolves: rhbz#1778983 rhbz#1877430 [1.5.4-2] - Convert from Fedora to the python39 module in RHEL8 - Resolves: rhbz#1877430 [1.5.4-1] - New upstream release 1.5.4 - Increase test timeout, 300 seconds is not always enough for test_logpdf_overflow on s390x resolves: #1894887 [1.5.3-1] - New upstream release 1.5.3 resolves: #1889132 [1.5.2-2] - Skip one more test expected to fail on 32-bit architectures [1.5.2-1] - New upstream release 1.5.2 resolves: #1853871 and 1840077 [1.5.0-4] - https://fedoraproject.org/wiki/Changes/FlexiBLAS_as_BLAS/LAPACK_manager [1.5.0-3] - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild [1.5.0-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild [1.5.0-1] - Update to latest version [1.4.1-2] - Rebuilt for Python 3.9 [1.4.1-1] - Update to 1.4.1 (bz#1771154) - Workaround FTBFS with gcc 10 (bz#1800078) [1.3.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild [1.3.1-1] - Update to 1.3.1 (#1674101) - Drop Python 2 packages (not supported by SciPy >= 1.3) - Backported upstream patch for cKDTree (fixes FTBFS) [1.2.1-8] - Rebuilt for Python 3.8.0rc1 (#1748018) [1.2.1-7] - Rebuilt for Python 3.8 [1.2.1-6] - Remove build dependency on python2-pytest-xdist and python2-pytest-timeout - Enable parallel tests in Python 3 %check - Use macros for Python interpreter in tests [1.2.1-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild [1.2.1-4] - Fix FTBFS with Py3.8 (#1606315) [1.2.1-3] - Build only against openblasp (bugz#1709161) [1.2.1-2] - Do not create *-PYTEST.pyc files [1.2.1-1] - Update to 1.2.1 - Drop scipy2-doc [1.2.0-1] - Update to 1.2.0 [1.1.0-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild [1.1.0-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild [1.1.0-2] - Don't ignore the tests results but rather have a tolerance rate - Skip test_decomp on ppc64le as it currently segfaults [1.1.0-1] - Update to 1.1.0 (#1560265, #1594355) [1.0.0-8] - Rebuilt for Python 3.7 [1.0.0-7] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [1.0.0-6] - Link with -lm to build with new stricter Fedora flags https://bugzilla.redhat.com/show_bug.cgi?id=1541416 [1.0.0-5] - rebuilt for GCC 8.x (gfortran soname bump) [1.0.0-4] - Disable tests on s390x [1.0.0-3] - New subpackages with HTML documentation [1.0.0-2] - Use openblas where available https://fedoraproject.org/wiki/Changes/OpenBLAS_as_default_BLAS - Remove ppc64 hackery for OpenBLAS - Don't run tests in parallel as pytest crashes - Don't run test_denormals as it tends to stuck [1.0.0-1] - update to 1.0.0 and use pytest instead of nose - use timeout during parallel %check [0.19.1-5] - Use openblas where available (except ppc64), to use same as numpy (BZ 1472318) [0.19.1-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild [0.19.1-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [0.19.1-2] - Rebuild due to bug in RPM (RHBZ #1468476) [0.19.1-1] - new version [0.19.0-1] - new version [0.18.0-3] - Rebuild for libgfortran.so.3 [0.18.0-2] - Rebuild for Python 3.6 [0.18.0-1] - 0.18.0 - %check: make non-fatal as temporary workaround for scipy build on arm [0.17.0-2] - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages * Tue May 31 2016 Nils Philippsen <nils@redhat.com> - fix source URL [0.17.0-1] - Update to 0.17.0 - Drop ctypes patch applied upstream [0.16.1-7] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [0.16.1-6] - Add provides to satisfy scipy%{_isa} requires in other packages [0.16.1-5] - Revert 'Discard results of testsuite on %{arm} for now' [0.16.1-4] - Discard results of testsuite on %{arm} for now Segfaults on non-aligned memory test (expected for arm) [0.16.1-3] - Add patch to fix ctypes test - Move requires to correct python2 subpackage - Add FFLAGS also in %install [0.16.1-2] - Rebuilt for https://fedoraproject.org/wiki/Changes/python3.5 [0.16.1-1] - Update to 0.16.1 [0.16.0-1] - Update to 0.16.0 - Use python_provide macro [0.15.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [0.15.1-1] - Update to 0.15.1 [0.14.1-1] - Update to 0.14.1 [0.14.0-5] - Rebuild for rpm bug 1131892 [0.14.0-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild [0.14.0-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild [0.14-2] - Rebuild with Python 3.4 [0.14-1] - Update to 0.14 - Do not use system python-six (bug #1046817) [0.13.3-2] - use python2 macros everywhere (Requested by Han Boetes) [0.13.3-1] - Update to 0.13.3 [0.13.2-1] - Update to 0.13.2 [0.13.1-2] - rebuild (suitesparse) [0.13.1-1] - Update to 0.13.1 [0.13.0-2] - Update to 0.13.0 final [0.13.0-0.4.rc1] - Update to 0.13.0rc1 [0.13.0-0.3.b1] - rebuilt with atlas 3.10 [0.13.0-0.2.b1] - Unbundle python-six (bug #1005350) [0.13.0-0.1.b1] - Update to 0.13.0b1 - Drop patches applied upstream - Fixup changelog and summary [0.12.0-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild [0.12.0-4] - Fix rpmlint warnings - License update - Add patch to use build_dir argument in build_extension [0.12.0-3] - Remove old ufsparse references, use suitesparse - Spec cleanup [0.12.0-2] - Add patch to fix segfaul in test of sgeqrf [0.12.0-1] - Update to 0.12.0 final - No longer remove weave from python3 build [0.12.0-0.1.b1] - Update to 0.12.0b1 - Drop upstreamed linalg patch [0.11.0-4] - Add patch from upstream to fix python3.3 issues in linalg routines [0.11.0-3] - Disable python3 tests for now [0.11.0-2] - Add requires python3-numpy, python3-f2py for python3-scipy (bug 863755) [0.11.0-1] - Update to 0.11.0 final [0.11.0-0.1.rc2] - Update to 0.11.0rc2 [0.10.1-4] - Rebuild for python 3.3 [0.10.1-3] - remove rhel logic from with_python3 conditional [0.10.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild [0.10.1-1] - Update to 0.10.1 [0.10.0-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild [0.10.0-1] - Update to 0.10.0 [0.9.0-2] - little cosmetic changes - filter provides in python_sitearch * Fri Sep 02 2011 Andrew McNabb <amcnabb@mcnabbs.org> - add python3 subpackage [0.9.0-1] - Update to 0.9.0 - Drop all stsci sources and patches, dropped from upstream - Drop gcc and py27 patches fixed upstream - Add %check section to run tests [0.7.2-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild [0.7.2-3] - Fix scipy build on python-2.7 [0.7.2-2] - Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild [0.7.2-1] - New upstream release [0.7.1-3] - Bump for rebuild against numpy 1.3 [0.7.1-2] - Bump for rebuild against numpy 1.4.0 [0.7.1-1] - Update to 0.7.1. [0.7.0-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild [0.7.0-4] - Fix for gcc34 weave blitz bug #505379 [0.7.0-3] - Add f2py requires to prepared for numpy packaging split [0.7.0-2] - Patch for stsci image function syntax fix. [0.7.0-1] - Update to final 0.7 release [0.7.0-0.3.b1] - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild [0.7.0-0.2.b1] - Rebuild for atlas-3.8.2 [0.7.0-0.1.b1] - Update to latest beta which lists python 2.6 support [0.6.0-8] - Rebuild for Python 2.6 [0.6.0-7] - fix the stsci fix [0.6.0-6] - include missing setup files for stsci module [0.6.0-5] - Autorebuild for GCC 4.3 [0.6.0-4] - fix for egg-info file creation [0.6.0-3] - include_dirs changes for ufsparse change in development [0.6.0-2] - Fix licensing to match Fedora packaging guidance - Remove unnecessary library deps [0.6.0-1] - update to new upstream source - update Summary, License, Url, and description - added extra dependencies - remove symlink since Lib has been renamed scipy [0.5.2.1-1] - Update to new upstream source [0.5.2-3] - fix licensing tag and bump for buildid rebuild [0.5.2-2.2] - go back to using gfortran now that numpy is patched [0.5.2-2.1] - minor correction for f77 usage [0.5.2-2] - revert to f77 due to issue with numpy in development [0.5.2-1.1] - remove arch specific optimizations [0.5.2-1] - Update for new upstream release [0.5.1-5] - Bump for rebuild against python 2.5 in devel tree [0.5.1-4] - Minor adjustments to specfile for packaging guidelines. - Changed buildrequires fftw version 3 from fftw2 [0.5.1-2] - Updated spec for FE Packaging Guidelines and for upstream version 0.5.1 [0.4.8-4] - Add BuildRequires gcc-c++ - Add python-devel - Add libstdc++ [0.4.8-3] - Add BuildRequires gcc-gfortran [0.4.8-3] - Add BuildRequires numpy [0.4.8-2] - Fix BuildRoot - Add BuildRequires, Requires - Test remove d1mach patch - Fix defattr - Add changelog - Removed Prefix, Vendor - Fix Source0 Cython pybind11 pytest python3x-pyparsing python-attrs python-iniconfig python-more-itertools python-packaging python-pluggy python-py python-wcwidth MODERATE Copyright 2023 Oracle, Inc. CVE-2007-4559 CVE-2023-32681 cpe:/a:oracle:linux:8:9:appstream_base cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 8 [1.10.8-1] - Rebase to 1.10.8 (#2222103) - Fix CVE-2023-28100 and CVE-2023-28101 (#2180311) MODERATE Copyright 2023 Oracle, Inc. CVE-2023-28100 CVE-2023-28101 cpe:/a:oracle:linux:8:9:appstream_base cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 8 babel [2.5.1-10] - Fix CVE-2021-20095 Resolves: rhbz#1955615 [2.5.1-9] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 [2.5.1-8] - Fix unversioned requires/buildrequires - Resolves: rhbz#1628242 [2.5.1-7] - Remove unversioned binaries - Resolves: rhbz#1613343 [2.5.1-6] - Make possible to disable python3 subpackage [2.5.1-5] - Remove dependency on an exotic testing package python-freezegun which we don't have capacity to ship in RHEL8 - Run tests in pytest (as declared in BuildRequires) instead of unittest [2.5.1-4] - Build the documentation always using the Python 3 version Sphinx [2.5.1-3] - Require the python36-devel package when building for the python36 module [2.5.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [2.5.1-1] - update to upstream version 2.5.1 [2.3.4-7] - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) [2.3.4-6] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [2.3.4-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [2.3.4-4] - Finish bootstrapping for Python 3.6 [2.3.4-3] - Rebuild for Python 3.6 - Add 'bootstrap' conditions [2.3.4-2] - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages * Tue May 31 2016 Nils Philippsen <nils@redhat.com> - fix source URL [2.3.4-1] - version 2.3.4 - always build Python3 subpackages - remove obsolete packaging constructs - update to current Python packaging guidelines - build docs non-destructively - tag license file as %license - use %python_provide macro only if present - update remove-pytz-version patch - fix build dependencies - set TZ in %check [1.3-12] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [1.3-11] - Rebuilt for https://fedoraproject.org/wiki/Changes/python3.5 [1.3-10] - Also make sure that the babel package that has pybabel depends on the correct packages (python2 packages on F23 or less and python3 packages on F24 and greater.) [1.3-9] - Install the python3 version of pybabel on Fedora 24+ to match with Fedora's default python version [1.3-8] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [1.3-7] - Remove pytz version requirement in egginfo as it confuses newer setuptools [1.3-6] - Change python-setuptools-devel BR into python-setuptools [1.3-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild [1.3-4] - Rebuilt for https://fedoraproject.org/wiki/Changes/Python_3.4 [1.3-3] - fix dependencies (#1083470) [1.3-2] - enable python3 subpackage [1.3-1] - update to Babel 1.3 - disabled %check as it tries to download the CLDR [0.9.6-9] - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild [0.9.6-8] - split documentation off to a separate subpackage [0.9.6-7] - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild [0.9.6-6] - run tests in %check - add pytz build requirement for tests [0.9.6-5] - rebuild for https://fedoraproject.org/wiki/Features/Python_3.3 [0.9.6-4] - disable building of non-functional python3 subpackage (#761583) [0.9.6-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild [0.9.6-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild [0.9.6-1] - version 0.9.6: * Backport r493-494: documentation typo fixes. * Make the CLDR import script work with Python 2.7. * Fix various typos. * Fixed Python 2.3 compatibility (ticket #146, #233). * Sort output of list-locales. * Make the POT-Creation-Date of the catalog being updated equal to POT-Creation-Date of the template used to update (ticket #148). * Use a more explicit error message if no option or argument (command) is passed to pybabel (ticket #81). * Keep the PO-Revision-Date if it is not the default value (ticket #148). * Make --no-wrap work by reworking --width's default and mimic xgettext's behaviour of always wrapping comments (ticket #145). * Fixed negative offset handling of Catalog._set_mime_headers (ticket #165). * Add --project and --version options for commandline (ticket #173). * Add a __ne__() method to the Local class. * Explicitly sort instead of using sorted() and don't assume ordering (Python 2.3 and Jython compatibility). * Removed ValueError raising for string formatting message checkers if the string does not contain any string formattings (ticket #150). * Fix Serbian plural forms (ticket #213). * Small speed improvement in format_date() (ticket #216). * Fix number formatting for locales where CLDR specifies alt or draft items (ticket #217) * Fix bad check in format_time (ticket #257, reported with patch and tests by jomae) * Fix so frontend.CommandLineInterface.run does not accumulate logging handlers (#227, reported with initial patch by dfraser) * Fix exception if environment contains an invalid locale setting (#200) - install python2 rather than python3 executable (#710880) [0.9.5-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild [0.9.5-3] - Add python3 subpackage [0.9.5-2] - Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild [0.9.5-1] - This release contains a small number of bugfixes over the 0.9.4 - release. - - What's New: - ----------- - * Fixed the case where messages containing square brackets would break - with an unpack error - * Fuzzy matching regarding plurals should *NOT* be checked against - len(message.id) because this is always 2, instead, it's should be - checked against catalog.num_plurals (ticket #212). [0.9.4-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild [0.9.4-4] - Added missing requires to python-setuptools for pkg_resources [0.9.4-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild [0.9.4-2] - Rebuild for Python 2.6 [0.9.4-1] - Update to 0.9.4 [0.9.3-1] - Update to 0.9.3 [0.9.1-1] - Update to 0.9.1 [0.9-2] - BR python-setuptools-devel [0.9-1] - Update to 0.9 [0.8.1-1] - Update to 0.8.1 - Remove upstreamed patch. [0.8-3] - Replace patch with one that actually applies. [0.8-2] - Apply upstream patch to rename command line script to 'pybabel' - BZ#246208 [0.8-1] - First version for Fedora Cython [0.28.1-7] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 [0.28.1-6] - Replace GCC's attribute optimize('Os') by the better supported and similar (cold). - Resolves: rhbz#1658621 [0.28.1-5] - Remove unversioned provides - Resolves: rhbz#1628242 [0.28.1-4] - Remove unversioned binaries from python2 subpackage - Resolves: rhbz#1613343 [0.28.1-3] - First version for python27 module numpy [1:1.14.2-16] - Fix include path - Related: rhbz#1907601 [1:1.14.2-15] - Fix %check - Related: rhbz#1907601 [1:1.14.2-14] - Use macros rather than hardcoded paths - Resolves: rhbz#1907601 [1:1.14.2-13] - Fix CVE-2019-6446 - Resolves: rhbz#1668829 [1.14.2-12] - Set proper build flags for https://fedoraproject.org/wiki/Changes/Python_Extension_Flags - Resolves: rhbz#1715036 [1.14.2-11] - Fix broken float128 on all arches except x86_64 - Resolves: rhbz#1688709 [1.14.2-10] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 [1:1.14.2-9] - Remove unversioned provides - Resolves: rhbz#1628242 [1:1.14.2-8] - Fix unversioned requires/buildrequires - Resolves: rhbz#1628242 [1:1.14.2-7] - Bring symlink f2py2 back for symlink modules - Resolves: rhbz#1615727 [1:1.14.2-6] - Remove unversioned binaries from python2 subpackage - Resolves: rhbz#1613343 [1:1.14.2-5] - Switch python3 coditions to bcond [1:1.14.2-4] - Use python2 macros instead of unversioned python macros [1:1.14.2-3] - Change the shebang of f2py to the versioned /usr/bin/python2 [1:1.14.2-2] - Fix incorrect Python version guess when building on Platform-Python [1:1.14.2-1] - 1.14.2 [1:1.14.1-1] - 1.14.1 [1:1.14.0-0.rc1.1] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [1:1.14.0-0.rc1] - 1.14.0 rc1 [1:1.13.3-5] - Fix ambiguous Python 2 dependency declarations (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) [1:1.13.3-4] - Split out doc subpackage. [1:1.13.3-3] - Cleanup spec file conditionals [1:1.13.3-2] - set proper environment variables for openblas [1:1.13.3-1] - 1.13.3 [1:1.13.2-1] - 1.13.2 [1:1.13.1-4] - Use openblas where available, BZ 1472318. [1:1.13.1-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild [1:1.13.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [1:1.13.1-1] - 1.13.1 final [1:1.13.0-1] - 1.13.0 final [1:1.13.0-0.rc2] - 1.13.0 rc2 [1:1.13.0-0.rc1] - 1.13.0 rc1 [1:1.12.1-1] - 1.12.1 [1:1.12.0-1] - Update to 1.12.0, build with gcc 7.0. [1:1.11.2-2] - Rebuild for Python 3.6 [1:1.11.2-1] - Update to 1.11.2 final [1:1.11.2-0.rc1] - Update to 1.11.2rc1, BZ 1340440. [1:1.11.1-2] - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages [1:1.11.1-1] - Update to 1.11.1 final [1:1.11.1-0.rc1] - Update to 1.11.1rc1, BZ 1340440. [1:1.11.0-4] - Update to 1.11.0 final [1:1.11.0-3.rc2] - Update to 1.11.0rc2 [1:1.11.0-2.b3] - Bump Release. 1b2 is higher than 0b3 [1:1.11.0-0.b3] - Update to 1.11.0b2, BZ 1306249. [1:1.11.0-1b2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [1:1.11.0-0.b2] - Update to 1.11.0b2, BZ 1303387. [1:1.11.0-020161016.cc2b04git] - Update to git snapshot (due to build issue) after 1.11.0b1, BZ 1301943. [1:1.10.4-1] - Update to 1.10.4, BZ 1296509. [1:1.10.2-1] - Update to 1.10.2, BZ 1291674. [1:1.10.2-0.2.rc2] - Update to 1.10.2rc1, BZ 1289550. [1:1.10.2-0.1.rc1] - Update to 1.10.2rc1 - Drop opt-flags patch applied upstream [1:1.10.1-6] - Add provides to satisfy numpy%{_isa} requires in other packages [1:1.10.1-5] - Re-add provides f2py [1:1.10.1-4] - Fix obsoletes / provides for numpy -> python2-numpy rename [1:1.10.1-3] - Remove fortran flags or arm would build with -march=x86-64 [1:1.10.1-2] - Provide python2-* packages - Run tests with verbose=2 [1:1.10.1-1] - Update to 1.10.1, BZ 1271022. [1:1.10.0-2] - Rebuilt for Python3.5 rebuild [1:1.10.0-1] - Update to 1.10.0 final. [1:1.10.0-0.b1] - Update to 1.10.0b1, BZ 1252641. [1:1.9.2-3] - Add python2-numpy provides (bug #1249423) - Spec cleanup [1:1.9.2-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [1:1.9.2-1] - Update to 1.9.2 [1:1.9.1-2] - Add upstream patch to fix xerbla linkage (bug #1172834) [1:1.9.1-1] - Update to 1.9.1, BZ 1160273. [1:1.9.0-1] - Update to 1.9.0 [1:1.9.0-0.1.rc1] - Update to 1.9.0rc1 [1:1.8.2-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild [1:1.8.2-1] - Update to 1.8.2 [1:1.8.1-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild [1:1.8.1-3] - Rebuild for Python 3.4 [1:1.8.1-2] - Fixing FTBFS on ppc64le (#1078354) [1:1.8.1-1] - Update to 1.8.1 [1:1.8.0-5] - Fix __pycache__ ownership (bug #1072467) [1:1.8.0-4] - Fix CVE-2014-1858, CVE-2014-1859: #1062009, #1062359 [1:1.8.0-3] - Ship doc module (bug #1034357) [1:1.8.0-2] - Move f2py documentation to f2py package (bug #1027394) [1:1.8.0-1] - Update to 1.8.0 final [1:1.8.0-0.7.rc2] - Update to 1.8.0rc2 - Create clean site.cfg - Use serial atlas [1:1.8.0-0.6.b2] - Add [atlas] to site.cfg for new atlas library names [1:1.8.0-0.5.b2] - Update site.cfg for new atlas library names [1:1.8.0-0.4.b2] - rebuild for atlas 3.10 [1:1.8.0-0.3.b2] - Fix libdir path in site.cfg, BZ 1006242. [1:1.8.0-0.2.b2] - Update to 1.8.0b2 [1:1.8.0-0.1.b1] - Update to 1.8.0b1 - Drop f2py patch applied upstream [1:1.7.1-5] - URL Fix, BZ 1001337 [1:1.7.1-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild [1:1.7.1-3] - Fix rpmlint warnings - Update License - Apply patch: change shebang of f2py to use binary directly [1:1.7.1-2] - Specfile cleanup (bug #969854) [1:1.7.1-1] - Update to 1.7.1 [1:1.7.0-1] - Update to 1.7.0 final [1:1.7.0-0.5.rc1] - Update to 1.7.0rc1 [1:1.7.0-0.4.b2] - Update to 1.7.0b2 - Drop patches applied upstream [1:1.7.0-0.3.b1] - Add patch from github pull 371 to fix python 3.3 pickle issue - Remove cython .c source regeneration - fails now [1:1.7.0-0.2.b1] - add workaround for rhbz#849713 (fixes FTBFS) [1:1.7.0-0.1.b1] - Update to 1.7.0b1 - Rebase python 3.3 patchs to current git master - Drop patches applied upstream [1:1.6.2-5] - rework patches for 3.3 to more directly reflect upstream's commits - re-enable test suite on python 3 - forcibly regenerate Cython .c source to avoid import issues on Python 3.3 [1:1.6.2-4] - rebuild for https://fedoraproject.org/wiki/Features/Python_3.3 - needs unicode patch [1:1.6.2-3] - remove rhel logic from with_python3 conditional [1:1.6.2-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild [1:1.6.2-1] - Update to 1.6.2 final [1:1.6.2rc1-0.1] - Update to 1.6.2rc1 [1:1.6.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild [1:1.6.1-1] - Update to 1.6.1 [1:1.6.0-2] - Bump and rebuild for BZ 712251. [1:1.6.0-1] - Update to 1.6.0 final [1:1.6.0-0.2.b2] - Update to 1.6.0b2 - Drop import patch fixed upstream [1:1.6.0-0.1.b1] - Update to 1.6.0b1 - Build python3 module with python3 - Add patch from upstream to fix build time import error [1:1.5.1-1] - Update to 1.5.1 final [1:1.5.1-0.4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild [1:1.5.1-0.3] - fix the AttributeError during tests - fix build on s390(x) [1:1.5.1-0.2] - rebuild for newer python3 [1:1.5.1-0.1] - update to 1.5.1rc1 - add python3 subpackage - some spec-cleanups [1:1.4.1-6] - actually add the patch this time [1:1.4.1-5] - fix segfault within %check on 2.7 (patch 2) [1:1.4.1-4] - Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild [1.4.1-3] - ignore the 'Ticket #1299 second test' failure on s390(x) [1.4.1-2] - source commit fix [1.4.1-1] - New upstream release. Include backported doublefree patch [1.3.0-8] - Moved distutils back to the main package, BZ 572820. [1.3.0-7] - Reverted to 1.3.0 after upstream pulled 1.4.0, BZ 579065. [1.4.0-5] - Linking /usr/include/numpy to .h files, BZ 185079. [1.4.0-4] - Re-enabling atlas BR, dropping lapack Requires. [1.4.0-3] - Since the previous didn't work, Requiring lapack. [1.4.0-2] - Temporarily dropping atlas BR to work around 562577. [1.4.0-1] - 1.4.0. - Dropped ARM patch, ARM support added upstream. [1.3.0-6.fa1] - Add ARM support [1.3.0-6] - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild [1.3.0-5] - Fixed atlas BR, BZ 505376. [1.3.0-4] - EVR bump for pygame chainbuild. [1.3.0-3] - Moved linalg, fft back to main package. [1.3.0-2] - Split out f2py into subpackage, thanks Peter Robinson pbrobinson@gmail.com. [1.3.0-1] - Update to latest upstream. - Fixed Source0 URL. [1.3.0-0.rc1] - Update to latest upstream. [1.2.1-3] - Require python-devel, BZ 488464. [1.2.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild [1.2.1-1] - Update to 1.2.1. [1.2.0-2] - Rebuild for Python 2.6 [1.2.0-1] - New upstream release, added python-nose BR. BZ 465999. - Using atlas blas, not blas-devel. BZ 461472. [1.1.1-1] - New upstream release [1.1.0-1] - New upstream release [1.0.4-1] - New upstream release [1.0.3.1-2] - Add python egg to %files on f9+ [1.0.3.1-1] - New upstream release [1.0.3-1] - New upstream release [1.0.2-2] - Drop BR: atlas-devel, since it just provides binary-compat blas and lapack libs. Atlas can still be optionally used at runtime. (Note: this is all per the atlas maintainer). [1.0.2-1] - New upstream release [1.0.1-4] - Update gfortran patch to recognize latest gfortran f95 support - Resolves rhbz#236444 [1.0.1-3] - Fix up cpuinfo bug (#229753). Upstream bug/change: http://projects.scipy.org/scipy/scipy/ticket/349 [1.0.1-2] - Per discussion w/Jose Matos, Obsolete/Provide f2py, as the stand-alone one is no longer supported/maintained upstream [1.0.1-1] - New upstream release [1.0-2] - Rebuild for python 2.5 [1.0-1] - New upstream release [0.9.8-1] - New upstream release [0.9.6-1] - Upstream update [0.9.5-1] - Upstream update [0.9.4-2] - Rebuild for Fedora Extras 5 [0.9.4-1] - Initial RPM release - Added gfortran patch from Neal Becker pytest python2-pip python2 [2.7.18-15.0.1] - Add Oracle Linux distribution in platform.py [Orabug: 20812544] [2.7.18-15] - Security fix for CVE-2023-40217 Resolves: RHEL-9621 [2.7.18-14] - Security fix for CVE-2023-24329 Resolves: rhbz#2173917 python2-rpm-macros python2-setuptools python2-six python-attrs python-backports python-backports-ssl_match_hostname python-chardet [3.0.4-10] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 [3.0.4-9] - Remove unversioned binaries from python2 subpackage - Resolves: rhbz#1613343 [3.0.4-8] - Switch python3 conditions to bcond [3.0.4-7] - First version for python27 module python-coverage [4.5.1-5] - Fix the license identifier - Resolves: rhbz#2213306 [4.5.1-4] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 [4.5.1-3] - Remove unversioned binaries from python2 subpackage - Resolves: rhbz#1613343 [4.5.1-2] - Make possible to disable python3 subpackage [4.5.1-1] - update to 4.5.1 [4.5-1] - update to 4.5 [4.4.2-1] - update to 4.4.2 [4.4.1-6] - Use better Obsoletes for platform-python [4.4.1-5] - Remove platform-python subpackage - Cleanup spec [4.4.1-4] - Add platform-python subpackage [4.4.1-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild [4.4.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [4.4.1-1] - update to 4.4.1 [4.4-1] - update to 4.4 [4.3.3-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [4.3.3-1] - update to 4.3.3 [4.3.1-1] - update to 4.3.1 [4.2-2] - Rebuild for Python 3.6 [4.2-1] - 4.2 final [4.2-0.2.b1] - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages [4.2-0.1.b1] - update to 4.2b1 [4.1-1] - update to 4.1 [4.1-0.5.b3] - update to 4.1b3 [4.1-0.4.b2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [4.1-0.3.b2] - update to 4.1b2 [4.1-0.2.b1] - Fix and install license - Cleanup and modernize spec - Note bundled jquery libraries [4.1-0.1.b1] - update to 4.1b1 [4.0.3-1] - update to 4.0.3 [4.0.2-2] - Rebuilt for https://fedoraproject.org/wiki/Changes/python3.5 [4.0.2-1] - update to 4.0.2 [4.0.1-1] - update to 4.0.1 [4.0-1] - update to 4.0 final [4.0-0.13.b3] - Rebuilt for Python3.5 rebuild [4.0-0.12.b3] - update to 4.0b3 [4.0-0.11.b2] - update to 4.0b2 [4.0-0.10.b1] - update to 4.0b1 [4.0-0.9.a6] - add missing Provides: python2-coverage [4.0-0.8.a6] - update to 4.0a6 [4.0-0.7.a5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [4.0-0.6.a5] - No longer run 2to3 on the python3 sources. [4.0-0.5.a5] - unicode fixup [4.0-0.4.a5] - update to 4.0a5 [4.0-0.3.a3] - update to 4.0a3 [4.0-0.2.a2] - update to 4.0a2 [4.0-0.1.a] - Update to 4.0a1 [3.7.1-1] - Update to 3.7.1 (#1043090) [3.7-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild [3.7-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild [3.7-2] - Rebuild for Python 3.4 [3.7-1] - update to 3.7 - fix macros for current guidelines - rename binary (with compat symlinks) [3.6-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild [3.6-1] - update to 3.6 final [3.6-0.3.b3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild [3.6-0.3.b3] - update to 3.6beta3 [3.6-0.1.b1] - update to 3.6beta1 - patch0 merged into upstream [3.5.3-2] - Patch from upstream for traceback when people use this with python2 and python3 in the same directory [3.5.3-1] - update to 3.5.3 [3.5.2-0.4.b1] - rebuild for https://fedoraproject.org/wiki/Features/Python_3.3 [3.5.2-0.3.b1] - remove rhel logic from with_python3 conditional [3.5.2-0.2.b1] - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild [3.5.2-0.1.b1] - update to 3.5.2b1 [3.5.1-0.2.b1] - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild [3.5.1-0.1.b1] - update to 3.5.1b1 [3.5-0.1.b1] - update to 3.5b1 [3.4-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild [3.4-2] - rebuild for newer python3 [3.4-1] - Update to 3.4 (#631751) [3.3.1-4] - Rebuild against Python 3.2 [3.3.1-3] - Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild [3.3.1-2] - Fix license tag, permissions, and filtering extraneous provides [3.3.1-1] - Update to 3.3.1 [3.2-3] - add python 3 subpackage (#536948) [3.2-2] - Require python-setuptools (#556290) [3.2-1] - update to 3.2 [3.1-1] - Update to 3.1 [3.0.1-1] - update to 3.0.1 [2.85-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild [2.85-2] - fix install invocation [2.85-1] - Initial package for Fedora python-dns python-docs [2.7.16-2] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 [2.7.16-1] - Update to 2.7.16 Resolves: rhbz#1680967 [2.7.15-3] - Modify for prebuilding and deploying on RHEL8 - Rename the info page to python2 - Resolves: rhbz#1656048 [2.7.15-2] - Modify for building on RHEL8 - Disable the tests, because the linkchecker package isn't available in RHEL8 - Resolves: rhbz#1656048 [2.7.15-1] - Update to 2.7.15 [2.7.14-5] - Only recommend the python2 package [2.7.14-4] - Remove Obsoletes tag from when python was renamed to python2 (Fedora 25 was last) [2.7.14-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [2.7.14-2] - Fix ambiguous Python 2 dependencies declarations (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) [2.7.14-1] - Update to 2.7.14 [2.7.13-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [2.7.13-3] - Change fixed Obsoletes version with a dynamic one (rhbz#1457336) [2.7.13-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [2.7.13-1] - Update to 2.7.13 - Rename package to python2-docs [2.7.12-2] - Remove unversioned Obsoletes. [2.7.12-1] - Update to 2.7.12. [2.7.11-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [2.7.11-1] - Update to 2.7.11 [2.7.10-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [2.7.10-1] - Update to 2.7.10 [2.7.9-1] - Update to 2.7.9 [2.7.8-1] - Update to 2.7.8 [2.7.7-1] - Update to 2.7.7 [2.7.6-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild [2.7.6-1] - Updated to v2.7.6 [2.7.5-6] - Used _pkgdocdir instead of _docdir [2.7.5-5] - Small tweaks of Suvayu's patch [2.7.5-4] - Enable Texinfo builder, add subpackage with python info pages [2.7.5-3] - Spec cleanup [2.7.5-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild [2.7.5-1] - Version 2.7.5. [2.7.4-1] - Version 2.7.4. [2.7.3-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild [2.7.3-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild [2.7.3-2] - make link checking optional, to avoid needing to pull in linkchecker and its dependencies (rbhz#823930) [2.7.3-1] - 2.7.3 [2.7.2-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild [2.7.2-2] - fix broken link to 'Global Module Index', and add a %check, verifying the absence of broken links (rhbz#670493) [2.7.2-1] - 2.7.2 [2.7.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild [2.7.1-1] - 2.7.1 [2.7-1] - Update to 2.7 [2.6.5-1] - move to 2.6.5: http://www.python.org/download/releases/2.6.5/ [2.6.4-3] - fix %description (bug #559710) [2.6.4-2] - update sources for 2.6.4 [2.6.4-1] - move to 2.6.4 - drop build requirement on python-jinja; python-sphinx requires python-jinja2 (bug 532135) [2.6.2-1] - Move to 2.6.2 like python itself. [2.6-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild [2.6-4] - Fix import error (#511647) [2.6-3] - Spec file cleanup (#226341) [2.6-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild [2.6-1] - Update to 2.6 [2.5.2-1] - Move to 2.5.2 like python itself. [2.5.1-3] - fix license tag [2.5.1-2] - mkdir a build root to keep recent rpm/mock happy. [2.5.1-1] - update to 2.5.1 [2.5-1] - update to 2.5 [2.4.4-1] - update to 2.4.4 [2.4.3-1.1] - rebuild [2.4.3-1] - updated to 2.4.3 * Fri Dec 09 2005 Jesse Keating <jkeating@redhat.com> - rebuilt [2.4.2-1] - updated to 2.4.2 [2.4.1-1] - updated to 2.4.1 [2.4-102] - changed package to noarch [2.4-100] - split the doc building step into a separate source rpm python-docutils python-funcsigs python-idna [2.5-7] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 [2.5-6] - Switch python3 coditions to bcond [2.5-5] - First version for python27 module python-ipaddress python-jinja2 [2.10-9] - Fix CVE-2020-28493: ReDOS vulnerability due to the sub-pattern Resolves: rhbz#1928707 [2.10-8] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 [2.10-7] - Fix conditions [2.10-6] - Specfile cleanup and fixes [2.10-5] - Disable Python 2 build by default [2.10-4] - Allow build with Python 2 [2.10-3] - Remove docs from Python 2 package - Remove dependency on python2-babel and python2-sphinx [2.10-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [2.10-1] - Update to 2.10. - Use %bcond. - Move BRs to their respective subpackages. [2.9.6-4] - Really cleanup spec file conditionals [2.9.6-3] - Cleanup spec file conditionals [2.9.6-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [2.9.6-1] - Update to 2.9.6. [2.9.5-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [2.9.5-1] - Update to 2.9.5. [2.9.4-1] - Update to 2.9.4. [2.8.1-1] - Update to 2.8.1. [2.8-8] - Rebuild for Python 3.6 [2.8-7] - Ship python2-jinja2 (bug #1378519) - Modernize spec [2.8-6] - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages [2.8-5] - Do not call py.test, there are currently no tests in the tarball. [2.8-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [2.8-3] - Rebuilt for Python3.5 rebuild [2.8-2] - Apply updates Python packaging guidelines. - Mark LICENSE with %license. [2.8-1] - Upstream 2.8 [2.7.3-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [2.7.3-2] - Add Requires python(3)-setuptools (bug #1168774) [2.7.3-1] - Update to 2.7.3. - Reenable docs. [2.7.2-2] - Bootstrap (without docs) build for Python 3.4 [2.7.2-1] - Update to 2.7.2. - Update python3 conditional. [2.7.1-1] - Update to 2.7.1. [2.7-1] - Update to 2.7 - spec cleanup [2.6-6] - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild [2.6-5] - rebuild for https://fedoraproject.org/wiki/Features/Python_3.3 [2.6-4] - remove rhel logic from with_python3 conditional [2.6-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild [2.6-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild [2.6-1] - Update to 2.6. [2.5.5-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild [2.5.5-3] - Re-enable html doc generation. - Remove conditional for F-12 and below. - Do not silently fail the testsuite for with py3k. [2.5.5-2] - Move python3 runtime requirements to python3 subpackage [2.5.5-1] - Update to 2.5.5. [2.5.2-4] - Revert to previous behavior: fail the build on failed test. - Rebuild for Python 3.2. [2.5.2-3] - %ifnarch doesn't work on noarch package so don't fail the build on failed tests [2.5.2-2] - disable the testsuite on s390(x) [2.5.2-1] - Update to upstream version 2.5.2. - Package depends on python-markupsafe and is noarch now. [2.5-4] - add explicit build-requirement on python-setuptools - fix doc disablement for python3 subpackage [2.5-3] - support disabling documentation in the build to break a circular build-time dependency with python-sphinx; disable docs for now [2.5-2] - Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild [2.5-1] - Update to upstream version 2.5. - Create python3 subpackage. - Minor specfile fixes. - Add examples directory. - Thanks to Gareth Armstrong for additional hints. [2.4.1-1] - Update to 2.4.1. [2.4-1] - Update to 2.4. [2.3.1-1] - Update to 2.3.1. - Docs are built using Sphinx now. - Run the testsuite. [2.2.1-1] - Update to 2.2.1, mainly a bugfix release. - Remove patch no longer needed. - Remove conditional for FC-8. - Compilation of speedup module has to be explicitly requested now. [2.1.1-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild [2.1.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild [2.1.1-1] - Update to 2.1.1 (bugfix release). [2.1-1] - Update to 2.1, which fixes a number of bugs. See http://jinja.pocoo.org/2/documentation/changelog#version-2-1. [2.0-3] - Rebuild for Python 2.6 [2.0-2] - Use rpm buildroot macro instead of RPM_BUILD_ROOT. [2.0-1] - Upstream released 2.0. [2.0-0.1.rc1] - Modified specfile from the existing python-jinja package. python-lxml [4.2.3-6] - Security fix for CVE-2021-43818 Resolves: rhbz#2032569 [4.2.3-5] - Security fix for CVE-2021-28957 Resolves: rhbz#1941534 [4.2.3-4] - Security fix for CVE-2020-27783: mXSS due to the use of improper parser Resolves: rhbz#1901633 [4.2.3-3] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 [4.2.3-2] - Conditionalize the python3 subpackage - Resolves: rhbz#1638698 [4.2.3-1] - New upstream release 4.2.3 [4.1.1-3] - Conditionalize the python2 subpackage [4.1.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [4.1.1-1] - Update to 4.1.1 [4.0.0-2] - Conditionally allow building without Cython [4.0.0-1] - Update to 4.0.0 [3.8.0-1] - Update to 3.8.0. Fixes bug #1458529 [3.7.2-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild [3.7.2-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [3.7.2-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [3.7.2-1] - Update to 3.7.2 [3.7.1-1] - Update to 3.7.1 [3.7.0-2] - Rebuild for Python 3.6 [3.7.0-1] - Update to 3.7.0 [3.6.4-1] - Update to 3.6.4 [3.4.4-5] - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages [3.4.4-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [3.4.4-3] - fix conditional [3.4.4-2] - Rebuilt for Python3.5 rebuild [3.4.4-1] - Update to 3.4.4 - Use %license, cleanup spec [3.3.6-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [3.3.6-1] - 3.3.6 (2014-08-28) - ================== - - Bugs fixed - ---------- - - * Prevent tree cycle creation when adding Elements as siblings. - - * LP#1361948: crash when deallocating Element siblings without parent. - - * LP#1354652: crash when traversing internally loaded documents in XSLT - extension functions. * Sun Aug 17 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild [3.3.5-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild [3.3.5-2] - Rebuilt for https://fedoraproject.org/wiki/Changes/Python_3.4 [3.3.5-1] - 3.3.5 (2014-04-18) - ================== - - Bugs fixed - ---------- - - * HTML cleaning could fail to strip javascript links that mix control - characters into the link scheme. [3.3.4-1] - 3.3.4 (2014-04-03) - ================== - - Features added - -------------- - - * Source line numbers above 65535 are available on Elements when - using libxml2 2.9 or later. - - Bugs fixed - ---------- - - * lxml.html.fragment_fromstring() failed for bytes input in Py3. [3.3.3-4] - Fix macro definition [3.3.3-3] - Add python3-cssselect to correct package [3.3.3-3] - python3-cssselect is not available on F19 [3.3.3-2] - BZ#1075070 add requires and buildrequires for cssselect [3.3.3-1] - 3.3.3 (2014-03-04) - ================== - - Bugs fixed - ---------- - - * LP#1287118: Crash when using Element subtypes with __slots__. - - Other changes - ------------- - - * The internal classes _LogEntry and _Attrib can no longer be - subclassed from Python code. [3.3.2-2] - Add check section #1075070 [3.3.2-1] - 3.3.2 (2014-02-26) - ================== - - Bugs fixed - ---------- - - * The properties resolvers and version, as well as the methods - set_element_class_lookup() and makeelement(), were lost from - iterparse objects. - - * LP#1222132: instances of XMLSchema, Schematron and RelaxNG - did not clear their local error_log before running a validation. - - * LP#1238500: lxml.doctestcompare mixed up 'expected' and 'actual' in - attribute values. - - * Some file I/O tests were failing in MS-Windows due to incorrect temp - file usage. Initial patch by Gabi Davar. - - * LP#910014: duplicate IDs in a document were not reported by DTD - validation. - - * LP#1185332: tostring(method='html') did not use HTML serialisation - semantics for trailing tail text. Initial patch by Sylvain Viollon. - - * LP#1281139: .attrib value of Comments lost its mutation methods - in 3.3.0. Even though it is empty and immutable, it should still - provide the same interface as that returned for Elements. [3.3.2-1] - 3.3.1 (2014-02-12) - ================== - - Bugs fixed - ---------- - - * LP#1014290: HTML documents parsed with parser.feed() failed to find - elements during tag iteration. - - * LP#1273709: Building in PyPy failed due to missing support for - PyUnicode_Compare() and PyByteArray_*() in PyPy's C-API. - - * LP#1274413: Compilation in MSVC failed due to missing 'stdint.h' standard - header file. - - * LP#1274118: iterparse() failed to parse BOM prefixed files. [3.3.0-2] - Update Cython requirement to >= 0.20 [3.3.0-1] - 3.3.0 (2014-01-26) - ================== - - Features added - -------------- - - Bugs fixed - ---------- - - * The heuristic that distinguishes file paths from URLs was tightened - to produce less false negatives. - - Other changes - ------------- - - - 3.3.0beta5 (2014-01-18) - ======================= - - Features added - -------------- - - * The PEP 393 unicode parsing support gained a fallback for wchar strings - which might still be somewhat common on Windows systems. - - Bugs fixed - ---------- - - * Several error handling problems were fixed throughout the code base that - could previously lead to exceptions being silently swallowed or not - properly reported. - - * The C-API function appendChild() is now deprecated as it does not - propagate exceptions (its return type is void). The new function - appendChildToElement() was added as a safe replacement. - - * Passing a string into fromstringlist() raises an exception instead of - parsing the string character by character. - - Other changes - ------------- - - * Document cleanup code was simplified using the new GC features in - Cython 0.20. - - - 3.3.0beta4 (2014-01-12) - ======================= - - Features added - -------------- - - Bugs fixed - ---------- - - * The (empty) value returned by the attrib property of Entity and - Comment objects was mutable. - - * Element class lookup wasn't available for the new pull parsers or when - using a custom parser target. - - * Setting Element attributes on instantiation with both the attrib - argument and keyword arguments could modify the mapping passed as - attrib. - - * LP#1266171: DTDs instantiated from internal/external subsets (i.e. - through the docinfo property) lost their attribute declarations. - - Other changes - ------------- - - * Built with Cython 0.20pre (gitrev 012ae82eb) to prepare support for - Python 3.4. - - - 3.3.0beta3 (2014-01-02) - ======================= - - Features added - -------------- - - * Unicode string parsing was optimised for Python 3.3 (PEP 393). - - Bugs fixed - ---------- - - * HTML parsing of Unicode strings could misdecode the input on some - platforms. - - * Crash in xmlfile() when closing open elements out of order in an error - case. - - Other changes - ------------- - - - 3.3.0beta2 (2013-12-20) - ======================= - - Features added - -------------- - - * iterparse() supports the recover option. - - Bugs fixed - ---------- - - * Crash in iterparse() for HTML parsing. - - * Crash in target parsing with attributes. - - Other changes - ------------- - - * The safety check in the read-only tree implementation (e.g. used by - PythonElementClassLookup) raises a more appropriate - ReferenceError for illegal access after tree disposal instead of - an AssertionError. This should only impact test code that - specifically checks the original behaviour. - - - 3.3.0beta1 (2013-12-12) - ======================= - - Features added - -------------- - - * New option handle_failures in make_links_absolute() and - resolve_base_href() (lxml.html) that enables ignoring or - discarding links that fail to parse as URLs. - - * New parser classes XMLPullParser and HTMLPullParser for - incremental parsing, as implemented for ElementTree in Python 3.4. - - * iterparse() enables recovery mode by default for HTML parsing - (html=True). - - Bugs fixed - ---------- - - * LP#1255132: crash when trying to run validation over non-Element (e.g. - comment or PI). - - * Error messages in the log and in exception messages that originated - from libxml2 could accidentally be picked up from preceding warnings - instead of the actual error. - - * The ElementMaker in lxml.objectify did not accept a dict as - argument for adding attributes to the element it's building. This - works as in lxml.builder now. - - * LP#1228881: repr(XSLTAccessControl) failed in Python 3. - - * Raise ValueError when trying to append an Element to itself or - to one of its own descendants, instead of running into an infinite - loop. - - * LP#1206077: htmldiff discarded whitespace from the output. - - * Compressed plain-text serialisation to file-like objects was broken. - - * lxml.html.formfill: Fix textarea form filling. - The textarea used to be cleared before the new content was set, - which removed the name attribute. - - Other changes - ------------- - - * Some basic API classes use freelists internally for faster - instantiation. This can speed up some iterparse() scenarios, - for example. - - * iterparse() was rewritten to use the new *PullParser - classes internally instead of being a parser itself. [3.2.4-1] - 3.2.4 (2013-11-07) - ================== - - Bugs fixed - ---------- - - * Memory leak when creating an XPath evaluator in a thread. - - * LP#1228881: repr(XSLTAccessControl) failed in Python 3. - - * Raise ValueError when trying to append an Element to itself or - to one of its own descendants. - - * LP#1206077: htmldiff discarded whitespace from the output. - - * Compressed plain-text serialisation to file-like objects was broken. [3.2.3-2] - Add requirement for on python-cssselect for the python2 version [3.2.3-1] - and here's a version 3.2.3. The last release accidentally lost the ability - to work on Python 2.4. There are no other changes over 3.2.2. - - 3.2.2 (2013-07-28) - ================== - - Features added - -------------- - - Bugs fixed - ---------- - - * LP#1185701: spurious XMLSyntaxError after finishing iterparse(). - - * Crash in lxml.objectify during xsi annotation. - - Other changes - ------------- - - * Return values of user provided element class lookup methods are now - validated against the type of the XML node they represent to prevent - API class mismatches. [3.2.1-1] - 3.2.1 (2013-05-11) - ================== - - Features added - -------------- - - * The methods apply_templates() and process_children() of XSLT - extension elements have gained two new boolean options elements_only - and remove_blank_text that discard either all strings or - whitespace-only strings from the result list. - - Bugs fixed - ---------- - - * When moving Elements to another tree, the namespace cleanup mechanism - no longer drops namespace prefixes from attributes for which it finds - a default namespace declaration, to prevent them from appearing as - unnamespaced attributes after serialisation. - - * Returning non-type objects from a custom class lookup method could lead - to a crash. - - * Instantiating and using subtypes of Comments and ProcessingInstructions - crashed. [3.2.0-1] - 3.2.0 (2013-04-28) - ================== - - Features added - -------------- - - Bugs fixed - ---------- - - * LP#690319: Leading whitespace could change the behaviour of the string - parsing functions in lxml.html. - - * LP#599318: The string parsing functions in lxml.html are more robust - in the face of uncommon HTML content like framesets or missing body tags. - Patch by Stefan Seelmann. - - * LP#712941: I/O errors while trying to access files with paths that - contain non-ASCII characters could raise UnicodeDecodeError instead - of properly reporting the IOError. - - * LP#673205: Parsing from in-memory strings disabled network access in the - default parser and made subsequent attempts to parse from a URL fail. - - * LP#971754: lxml.html.clean appends 'nofollow' to 'rel' attributes instead - of overwriting the current value. - - * LP#715687: lxml.html.clean no longer discards scripts that are explicitly - allowed by the user provided whitelist. Patch by Christine Koppelt. - - 3.1.2 (2013-04-12) - ================== - - Bugs fixed - ---------- - - * LP#1136509: Passing attributes through the namespace-unaware API of - the sax bridge (i.e. the handler.startElement() method) failed - with a TypeError. Patch by Mike Bayer. - - * LP#1123074: Fix serialisation error in XSLT output when converting - the result tree to a Unicode string. - - * GH#105: Replace illegal usage of xmlBufLength() in libxml2 2.9.0 - by properly exported API function xmlBufUse(). - - 3.1.1 (2013-03-29) - ================== - - Features added - -------------- - - Bugs fixed - ---------- - - * LP#1160386: Write access to lxml.html.FormElement.fields raised - an AttributeError in Py3. - - * Illegal memory access during cleanup in incremental xmlfile writer. - - Other changes - ------------- - - * The externally useless class lxml.etree._BaseParser was removed - from the module dict. [3.1.0-1] - 3.1.0 (2013-02-10) - ================== - - Features added - -------------- - - * GH#89: lxml.html.clean allows overriding the set of attributes that it - considers 'safe'. Patch by Francis Devereux. - - Bugs fixed - ---------- - - * LP#1104370: copy.copy(el.attrib) raised an exception. It now returns - a copy of the attributes as a plain Python dict. - - * GH#95: When used with namespace prefixes, the el.find*() methods - always used the first namespace mapping that was provided for each - path expression instead of using the one that was actually passed - in for the current run. - - * LP#1092521, GH#91: Fix undefined C symbol in Python runtimes compiled - without threading support. Patch by Ulrich Seidl. - - Other changes - ------------- - - - 3.1beta1 (2012-12-21) - ===================== - - Features added - -------------- - - * New build-time option --with-unicode-strings for Python 2 that - makes the API always return Unicode strings for names and text - instead of byte strings for plain ASCII content. - - * New incremental XML file writing API etree.xmlfile(). - - * E factory in lxml.objectify is callable to simplify the creation of - tags with non-identifier names without having to resort to getattr(). - - Bugs fixed - ---------- - - * When starting from a non-namespaced element in lxml.objectify, searching - for a child without explicitly specifying a namespace incorrectly found - namespaced elements with the requested local name, instead of restricting - the search to non-namespaced children. - - * GH#85: Deprecation warnings were fixed for Python 3.x. - - * GH#33: lxml.html.fromstring() failed to accept bytes input in Py3. - - * LP#1080792: Static build of libxml2 2.9.0 failed due to missing file. - - Other changes - ------------- - - * The externally useless class _ObjectifyElementMakerCaller was - removed from the module API of lxml.objectify. - - * LP#1075622: lxml.builder is faster for adding text to elements with - many children. Patch by Anders Hammarquist. [3.0.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild [3.0.1-1] - 3.0.1 (2012-10-14) - Bugs fixed - - * LP#1065924: Element proxies could disappear during garbage collection - in PyPy without proper cleanup. - * GH#71: Failure to work with libxml2 2.6.x. - * LP#1065139: static MacOS-X build failed in Py3. [3.0-1] - 3.0 (2012-10-08) - ================ - - Features added - -------------- - - Bugs fixed - ---------- - - * End-of-file handling was incorrect in iterparse() when reading from - a low-level C file stream and failed in libxml2 2.9.0 due to its - improved consistency checks. - - Other changes - ------------- - - * The build no longer uses Cython by default unless the generated C files - are missing. To use Cython, pass the option '--with-cython'. To ignore - the fatal build error when Cython is required but not available (e.g. to - run special setup.py commands that do not actually run a build), pass - '--without-cython'. - - - 3.0beta1 (2012-09-26) - ===================== - - Features added - -------------- - - * Python level access to (optional) libxml2 memory debugging features - to simplify debugging of memory leaks etc. - - Bugs fixed - ---------- - - * Fix a memory leak in XPath by switching to Cython 0.17.1. - - * Some tests were adapted to work with PyPy. - - Other changes - ------------- - - * The code was adapted to work with the upcoming libxml2 2.9.0 release. - - - 3.0alpha2 (2012-08-23) - ====================== - - Features added - -------------- - - * The .iter() method of elements now accepts tag arguments like '{*}name' - to search for elements with a given local name in any namespace. With - this addition, all combinations of wildcards now work as expected: - '{ns}name', '{}name', '{*}name', '{ns}*', '{}*' and '{*}*'. Note that - 'name' is equivalent to '{}name', but '*' is '{*}*'. The same change - applies to the .getiterator(), .itersiblings(), .iterancestors(), - .iterdescendants(), .iterchildren() and .itertext() methods, the - strip_attributes(), strip_elements() and strip_tags() functions as well - as the iterparse() function. - - * C14N allows specifying the inclusive prefixes to be promoted to - top-level during exclusive serialisation. - - Bugs fixed - ---------- - - * Passing long Unicode strings into the feed() parser interface failed to - read the entire string. - - Other changes - ------------- - - - 3.0alpha1 (2012-07-31) - ====================== - - Features added - -------------- - - * Initial support for building in PyPy (through cpyext). - - * DTD objects gained an API that allows read access to their - declarations. - - * xpathgrep.py gained support for parsing line-by-line (e.g. - from grep output) and for surrounding the output with a new root - tag. - - * E-factory in lxml.builder accepts subtypes of known data - types (such as string subtypes) when building elements around them. - - * Tree iteration and iterparse() with a selective tag - argument supports passing a set of tags. Tree nodes will be - returned by the iterators if they match any of the tags. - - Bugs fixed - ---------- - - * The .find*() methods in lxml.objectify no longer use XPath - internally, which makes them faster in many cases (especially when - short circuiting after a single or couple of elements) and fixes - some behavioural differences compared to lxml.etree. Note that - this means that they no longer support arbitrary XPath expressions - but only the subset that the ElementPath language supports. - The previous implementation was also redundant with the normal - XPath support, which can be used as a replacement. - - * el.find('*') could accidentally return a comment or processing - instruction that happened to be in the wrong spot. (Same for the - other .find*() methods.) - - * The error logging is less intrusive and avoids a global setup where - possible. - - * Fixed undefined names in html5lib parser. - - * xpathgrep.py did not work in Python 3. - - * Element.attrib.update() did not accept an attrib of - another Element as parameter. - - * For subtypes of ElementBase that make the .text or .tail - properties immutable (as in objectify, for example), inserting text - when creating Elements through the E-Factory feature of the class - constructor would fail with an exception, stating that the text - cannot be modified. - - Other changes - -------------- - - * The code base was overhauled to properly use 'const' where the API - of libxml2 and libxslt requests it. This also has an impact on the - public C-API of lxml itself, as defined in etreepublic.pxd, as - well as the provided declarations in the lxml/includes/ directory. - Code that uses these declarations may have to be adapted. On the - plus side, this fixes several C compiler warnings, also for user - code, thus making it easier to spot real problems again. - - * The functionality of 'lxml.cssselect' was moved into a separate PyPI - package called 'cssselect'. To continue using it, you must install - that package separately. The 'lxml.cssselect' module is still - available and provides the same interface, provided the 'cssselect' - package can be imported at runtime. - - * Element attributes passed in as an attrib dict or as keyword - arguments are now sorted by (namespaced) name before being created - to make their order predictable for serialisation and iteration. - Note that adding or deleting attributes afterwards does not take - that order into account, i.e. setting a new attribute appends it - after the existing ones. - - * Several classes that are for internal use only were removed - from the lxml.etree module dict: - _InputDocument, _ResolverRegistry, _ResolverContext, _BaseContext, - _ExsltRegExp, _IterparseContext, _TempStore, _ExceptionContext, - __ContentOnlyElement, _AttribIterator, _NamespaceRegistry, - _ClassNamespaceRegistry, _FunctionNamespaceRegistry, - _XPathFunctionNamespaceRegistry, _ParserDictionaryContext, - _FileReaderContext, _ParserContext, _PythonSaxParserTarget, - _TargetParserContext, _ReadOnlyProxy, _ReadOnlyPIProxy, - _ReadOnlyEntityProxy, _ReadOnlyElementProxy, _OpaqueNodeWrapper, - _OpaqueDocumentWrapper, _ModifyContentOnlyProxy, - _ModifyContentOnlyPIProxy, _ModifyContentOnlyEntityProxy, - _AppendOnlyElementProxy, _SaxParserContext, _FilelikeWriter, - _ParserSchemaValidationContext, _XPathContext, - _XSLTResolverContext, _XSLTContext, _XSLTQuotedStringParam - - * Several internal classes can no longer be inherited from: - _InputDocument, _ResolverRegistry, _ExsltRegExp, _ElementUnicodeResult, - _IterparseContext, _TempStore, _AttribIterator, _ClassNamespaceRegistry, - _XPathFunctionNamespaceRegistry, _ParserDictionaryContext, - _FileReaderContext, _PythonSaxParserTarget, _TargetParserContext, - _ReadOnlyPIProxy, _ReadOnlyEntityProxy, _OpaqueDocumentWrapper, - _ModifyContentOnlyPIProxy, _ModifyContentOnlyEntityProxy, - _AppendOnlyElementProxy, _FilelikeWriter, _ParserSchemaValidationContext, - _XPathContext, _XSLTResolverContext, _XSLTContext, - _XSLTQuotedStringParam, _XSLTResultTree, _XSLTProcessingInstruction [2.3.5-1] - Bugs fixed - - * Crash when merging text nodes in element.remove(). - * Crash in sax/target parser when reporting empty doctype. [2.3.4-1] - Bugs fixed - - * Crash when building an nsmap (Element property) with empty namespace - URIs. - * Crash due to race condition when errors (or user messages) occur during - threaded XSLT processing (or compilation). - * XSLT stylesheet compilation could ignore compilation errors. [2.3.3-4] - rebuild for https://fedoraproject.org/wiki/Features/Python_3.3 [2.3.3-3] - remove rhel logic from with_python3 conditional [2.3.3-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild [2.3.3-1] - 2.3.3 (2012-01-04) - Features added - - * lxml.html.tostring() gained new serialisation options with_tail and - doctype. - - Bugs fixed - - * Fixed a crash when using iterparse() for HTML parsing and requesting - start events. - * Fixed parsing of more selectors in cssselect. Whitespace before pseudo- - elements and pseudo-classes is significant as it is a descendant - combinator. 'E :pseudo' should parse the same as 'E *:pseudo', not - 'E:pseudo'. Patch by Simon Sapin. - * lxml.html.diff no longer raises an exception when hitting 'img' tags - without 'src' attribute. [2.3.2-1] - 2.3.2 (2011-11-11) - Features added - - * lxml.objectify.deannotate() has a new boolean option - cleanup_namespaces to remove the objectify namespace declarations - (and generally clean up the namespace declarations) after removing - the type annotations. - * lxml.objectify gained its own SubElement() function as a copy of - etree.SubElement to avoid an otherwise redundant import of - lxml.etree on the user side. - - Bugs fixed - - * Fixed the 'descendant' bug in cssselect a second time (after a first - fix in lxml 2.3.1). The previous change resulted in a serious - performance regression for the XPath based evaluation of the - translated expression. Note that this breaks the usage of some - of the generated XPath expressions as XSLT location paths that - previously worked in 2.3.1. - * Fixed parsing of some selectors in cssselect. Whitespace after - combinators '>', '+' and '~' is now correctly ignored. Previously - it was parsed as a descendant combinator. For example, 'div> .foo' - was parsed the same as 'div>* .foo' instead of 'div>.foo'. Patch by - Simon Sapin. [2.3.1-1] - Features added - -------------- - - * New option kill_tags in lxml.html.clean to remove specific - tags and their content (i.e. their whole subtree). - - * pi.get() and pi.attrib on processing instructions to parse - pseudo-attributes from the text content of processing instructions. - - * lxml.get_include() returns a list of include paths that can be - used to compile external C code against lxml.etree. This is - specifically required for statically linked lxml builds when code - needs to compile against the exact same header file versions as lxml - itself. - - * Resolver.resolve_file() takes an additional option - close_file that configures if the file(-like) object will be - closed after reading or not. By default, the file will be closed, - as the user is not expected to keep a reference to it. - - Bugs fixed - ---------- - - * HTML cleaning didn't remove 'data:' links. - - * The html5lib parser integration now uses the 'official' - implementation in html5lib itself, which makes it work with newer - releases of the library. - - * In lxml.sax, endElementNS() could incorrectly reject a plain - tag name when the corresponding start event inferred the same plain - tag name to be in the default namespace. - - * When an open file-like object is passed into parse() or - iterparse(), the parser will no longer close it after use. This - reverts a change in lxml 2.3 where all files would be closed. It is - the users responsibility to properly close the file(-like) object, - also in error cases. - - * Assertion error in lxml.html.cleaner when discarding top-level elements. - - * In lxml.cssselect, use the xpath 'A//B' (short for - 'A/descendant-or-self::node()/B') instead of 'A/descendant::B' for the - css descendant selector ('A B'). This makes a few edge cases to be - consistent with the selector behavior in WebKit and Firefox, and makes - more css expressions valid location paths (for use in xsl:template - match). - - [tags no longer show up in the - collected form values. - - [values to/from a multiple select form - field properly selects them and unselects them. - - Other changes - -------------- - - * Static builds can specify the download directory with the - --download-dir option. [2.3-1] - 2.3 (2011-02-06) - ================ - - Features added - -------------- - - * When looking for children, lxml.objectify takes '{}tag' as - meaning an empty namespace, as opposed to the parent namespace. - - Bugs fixed - ---------- - - * When finished reading from a file-like object, the parser - immediately calls its .close() method. - - * When finished parsing, iterparse() immediately closes the input - file. - - * Work-around for libxml2 bug that can leave the HTML parser in a - non-functional state after parsing a severly broken document (fixed - in libxml2 2.7.8). - - * marque tag in HTML cleanup code is correctly named marquee. - - Other changes - -------------- - - * Some public functions in the Cython-level C-API have more explicit - return types. - - 2.3beta1 (2010-09-06) - ===================== - - Features added - -------------- - - Bugs fixed - ---------- - - * Crash in newer libxml2 versions when moving elements between - documents that had attributes on replaced XInclude nodes. - - * XMLID() function was missing the optional parser and - base_url parameters. - - * Searching for wildcard tags in iterparse() was broken in Py3. - - * lxml.html.open_in_browser() didn't work in Python 3 due to the - use of os.tempnam. It now takes an optional 'encoding' parameter. - - Other changes - -------------- - - 2.3alpha2 (2010-07-24) - ====================== - - Features added - -------------- - - Bugs fixed - ---------- - - * Crash in XSLT when generating text-only result documents with a - stylesheet created in a different thread. - - Other changes - -------------- - - * repr() of Element objects shows the hex ID with leading 0x - (following ElementTree 1.3). - - 2.3alpha1 (2010-06-19) - ====================== - - Features added - -------------- - - * Keyword argument namespaces in lxml.cssselect.CSSSelector() - to pass a prefix-to-namespace mapping for the selector. - - * New function lxml.etree.register_namespace(prefix, uri) that - globally registers a namespace prefix for a namespace that newly - created Elements in that namespace will use automatically. Follows - ElementTree 1.3. - - * Support 'unicode' string name as encoding parameter in - tostring(), following ElementTree 1.3. - - * Support 'c14n' serialisation method in ElementTree.write() and - tostring(), following ElementTree 1.3. - - * The ElementPath expression syntax (el.find*()) was extended to - match the upcoming ElementTree 1.3 that will ship in the standard - library of Python 3.2/2.7. This includes extended support for - predicates as well as namespace prefixes (as known from XPath). - - * During regular XPath evaluation, various ESXLT functions are - available within their namespace when using libxslt 1.1.26 or later. - - * Support passing a readily configured logger instance into - PyErrorLog, instead of a logger name. - - * On serialisation, the new doctype parameter can be used to - override the DOCTYPE (internal subset) of the document. - - * New parameter output_parent to XSLTExtension.apply_templates() - to append the resulting content directly to an output element. - - * XSLTExtension.process_children() to process the content of the - XSLT extension element itself. - - * ISO-Schematron support based on the de-facto Schematron reference - 'skeleton implementation'. - - * XSLT objects now take XPath object as __call__ stylesheet - parameters. - - * Enable path caching in ElementPath (el.find*()) to avoid parsing - overhead. - - * Setting the value of a namespaced attribute always uses a prefixed - namespace instead of the default namespace even if both declare the - same namespace URI. This avoids serialisation problems when an - attribute from a default namespace is set on an element from a - different namespace. - - * XSLT extension elements: support for XSLT context nodes other than - elements: document root, comments, processing instructions. - - * Support for strings (in addition to Elements) in node-sets returned - by extension functions. - - * Forms that lack an action attribute default to the base URL of - the document on submit. - - * XPath attribute result strings have an attrname property. - - * Namespace URIs get validated against RFC 3986 at the API level - (required by the XML namespace specification). - - * Target parsers show their target object in the .target property - (compatible with ElementTree). - - Bugs fixed - ---------- - - * API is hardened against invalid proxy instances to prevent crashes - due to incorrectly instantiated Element instances. - - * Prevent crash when instantiating CommentBase and friends. - - * Export ElementTree compatible XML parser class as - XMLTreeBuilder, as it is called in ET 1.2. - - * ObjectifiedDataElements in lxml.objectify were not hashable. They - now use the hash value of the underlying Python value (string, - number, etc.) to which they compare equal. - - * Parsing broken fragments in lxml.html could fail if the fragment - contained an orphaned closing '</div>' tag. - - * Using XSLT extension elements around the root of the output document - crashed. - - * lxml.cssselect did not distinguish between x[attr='val'] and - x [attr='val'] (with a space). The latter now matches the - attribute independent of the element. - - * Rewriting multiple links inside of HTML text content could end up - replacing unrelated content as replacements could impact the - reported position of subsequent matches. Modifications are now - simplified by letting the iterlinks() generator in lxml.html - return links in reversed order if they appear inside the same text - node. Thus, replacements and link-internal modifications no longer - change the position of links reported afterwards. - - * The .value attribute of textarea elements in lxml.html did - not represent the complete raw value (including child tags etc.). It - now serialises the complete content on read and replaces the - complete content by a string on write. - - * Target parser didn't call .close() on the target object if - parsing failed. Now it is guaranteed that .close() will be - called after parsing, regardless of the outcome. - - Other changes - ------------- - - * Official support for Python 3.1.2 and later. - - * Static MS Windows builds can now download their dependencies - themselves. - - * Element.attrib no longer uses a cyclic reference back to its - Element object. It therefore no longer requires the garbage - collector to clean up. - - * Static builds include libiconv, in addition to libxml2 and libxslt. [2.2.8-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild [2.2.8-3] - rebuild for newer python3 [2.2.8-2] - Rebuild for newer libxml2 [2.2.8-1] - 2.2.8 (2010-09-02) - Bugs fixed - - * Crash in newer libxml2 versions when moving elements between - documents that had attributes on replaced XInclude nodes. - * Import fix for urljoin in Python 3.1+. [2.2.7-3] - Don't byte-compile files during install because setup.py doesn't properly byte compile for Python version 3.2 [2.2.7-2] - Rebuild for Python 3.2 [2.2.7-1] - 2.2.7 (2010-07-24) - Bugs fixed - - * Crash in XSLT when generating text-only result documents with a stylesheet created in a different thread. [2.2.6-4] - actually add the patch this time [2.2.6-3] - workaround for 2to3 issue (patch 0; bug 600036) [2.2.6-2] - Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild [2.2.6-1] - 2.2.6 (2010-03-02) - - Bugs fixed - - * Fixed several Python 3 regressions by building with Cython 0.11.3. [2.2.5-1] - 2.2.5 (2010-02-28) - - Features added - - * Support for running XSLT extension elements on the input root node - (e.g. in a template matching on '/'). - - Bugs fixed - - * Crash in XPath evaluation when reading smart strings from a document - other than the original context document. - * Support recent versions of html5lib by not requiring its XHTMLParser - in htmlparser.py anymore. - * Manually instantiating the custom element classes in lxml.objectify - could crash. - * Invalid XML text characters were not rejected by the API when they - appeared in unicode strings directly after non-ASCII characters. - * lxml.html.open_http_urllib() did not work in Python 3. - * The functions strip_tags() and strip_elements() in lxml.etree did - not remove all occurrences of a tag in all cases. - * Crash in XSLT extension elements when the XSLT context node is not - an element. [2.2.4-2] - update to current python3 guidelines - be more explicit in %files - use %global and not %define - create docs subpackage - add stripping 3-byte Byte Order Marker from src/lxml/tests/test_errors.py to get 2to3 to work (dmalcolm) - fixes FTBFS (#564674) [2.2.4-1] - Update to 2.2.4 - Enable Python 3 subpackage [2.2.3-3] - F-13's python build chain must be a little different... [2.2.3-2] - Add option to build a Python 3 subpackage, original patch by David Malcolm [2.2.3-1] - 2.2.3 (2009-10-30) - Bugs fixed - - * The resolve_entities option did not work in the incremental feed - parser. - * Looking up and deleting attributes without a namespace could hit a - namespaced attribute of the same name instead. - * Late errors during calls to SubElement() (e.g. attribute related - ones) could leave a partially initialised element in the tree. - * Modifying trees that contain parsed entity references could result - in an infinite loop. - * ObjectifiedElement.__setattr__ created an empty-string child element - when the attribute value was rejected as a non-unicode/non-ascii - string - * Syntax errors in lxml.cssselect could result in misleading error - messages. - * Invalid syntax in CSS expressions could lead to an infinite loop in - the parser of lxml.cssselect. - * CSS special character escapes were not properly handled in - lxml.cssselect. - * CSS Unicode escapes were not properly decoded in lxml.cssselect. - * Select options in HTML forms that had no explicit value attribute - were not handled correctly. The HTML standard dictates that their - value is defined by their text content. This is now supported by - lxml.html. - * XPath raised a TypeError when finding CDATA sections. This is now - fully supported. - * Calling help(lxml.objectify) didn't work at the prompt. - * The ElementMaker in lxml.objectify no longer defines the default - namespaces when annotation is disabled. - * Feed parser failed to honour the 'recover' option on parse errors. - * Diverting the error logging to Python's logging system was broken. [2.2.2-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild [2.2.2-1] - 2.2.2 (2009-06-21) - Features added - - * New helper functions strip_attributes(), strip_elements(), - strip_tags() in lxml.etree to remove attributes/subtrees/tags - from a subtree. - - Bugs fixed - - * Namespace cleanup on subtree insertions could result in missing - namespace declarations (and potentially crashes) if the element - defining a namespace was deleted and the namespace was not used - by the top element of the inserted subtree but only in deeper - subtrees. - * Raising an exception from a parser target callback didn't always - terminate the parser. - * Only {true, false, 1, 0} are accepted as the lexical representation - for BoolElement ({True, False, T, F, t, f} not any more), restoring - lxml <= 2.0 behaviour. [2.2.1-1] - 2.2.1 (2009-06-02) - Features added - - * Injecting default attributes into a document during XML Schema - validation (also at parse time). - * Pass huge_tree parser option to disable parser security restrictions - imposed by libxml2 2.7. - - Bugs fixed - - * The script for statically building libxml2 and libxslt didn't work - in Py3. - * XMLSchema() also passes invalid schema documents on to libxml2 for - parsing (which could lead to a crash before release 2.6.24). [2.2-1] - 2.2 (2009-03-21) - Features added - - * Support for standalone flag in XML declaration through - tree.docinfo.standalone and by passing standalone=True/False on - serialisation. - - Bugs fixed - - * Crash when parsing an XML Schema with external imports from a - filename. [2.2-0.8.beta4] - 2.2beta4 (2009-02-27) - Features added - - * Support strings and instantiable Element classes as child arguments - to the constructor of custom Element classes. - * GZip compression support for serialisation to files and file-like - objects. - - Bugs fixed - - * Deep-copying an ElementTree copied neither its sibling PIs and - comments nor its internal/external DTD subsets. - * Soupparser failed on broken attributes without values. - * Crash in XSLT when overwriting an already defined attribute using - xsl:attribute. - * Crash bug in exception handling code under Python 3. This was due to - a problem in Cython, not lxml itself. - * lxml.html.FormElement._name() failed for non top-level forms. - * TAG special attribute in constructor of custom Element classes was - evaluated incorrectly. - - Other changes - - * Official support for Python 3.0.1. - * Element.findtext() now returns an empty string instead of None for - Elements without text content. [2.2-0.7.beta3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild [2.2-0.6.beta3] - 2.2beta3 (2009-02-17) - Features added - - * XSLT.strparam() class method to wrap quoted string parameters that - require escaping. - - Bugs fixed - - * Memory leak in XPath evaluators. - * Crash when parsing indented XML in one thread and merging it with - other documents parsed in another thread. - * Setting the base attribute in lxml.objectify from a unicode string - failed. - * Fixes following changes in Python 3.0.1. - * Minor fixes for Python 3. - - Other changes - - * The global error log (which is copied into the exception log) is now - local to a thread, which fixes some race conditions. - * More robust error handling on serialisation. [2.2-0.5.beta2] - 2.2beta2 (2009-01-25) - Bugs fixed - - * Potential memory leak on exception handling. This was due to a - problem in Cython, not lxml itself. - * iter_links (and related link-rewriting functions) in lxml.html would - interpret CSS like url('link') incorrectly (treating the quotation - marks as part of the link). - * Failing import on systems that have an io module. [2.2-0.4.beta1] - 2.2beta1 (2008-12-12) - Features added - - * Allow lxml.html.diff.htmldiff to accept Element objects, - not just HTML strings. - - Bugs fixed - - * Crash when using an XPath evaluator in multiple threads. - * Fixed missing whitespace before Link:... in lxml.html.diff. - - Other changes - - * Export lxml.html.parse. [2.2-0.3.alpha1] - Rebuild for Python 2.6 [2.2-0.2.alpha1] - Don't forget to upload the sources! [2.2-0.1.alpha1] - 2.2alpha1 (2008-11-23) - Features added - - * Support for XSLT result tree fragments in XPath/XSLT extension - functions. - * QName objects have new properties namespace and localname. - * New options for exclusive C14N and C14N without comments. - * Instantiating a custom Element classes creates a new Element. - - Bugs fixed - - * XSLT didn't inherit the parse options of the input document. - * 0-bytes could slip through the API when used inside of Unicode - strings. - * With lxml.html.clean.autolink, links with balanced parenthesis, that - end in a parenthesis, will be linked in their entirety (typical with - Wikipedia links). [2.1.3-1] - 2.1.3 (2008-11-17) - Bugs fixed - - * Ref-count leaks when lxml enters a try-except statement while an - outside exception lives in sys.exc_*(). This was due to a problem - in Cython, not lxml itself. - * Parser Unicode decoding errors could get swallowed by other - exceptions. - * Name/import errors in some Python modules. - * Internal DTD subsets that did not specify a system or public ID - were not serialised and did not appear in the docinfo property - of ElementTrees. - * Fix a pre-Py3k warning when parsing from a gzip file in Py2.6. - * Test suite fixes for libxml2 2.7. - * Resolver.resolve_string() did not work for non-ASCII byte strings. - * Resolver.resolve_file() was broken. - * Overriding the parser encoding didn't work for many encodings. [2.1.2-1] - 2.1.2 (2008-09-05) - Features added - - * lxml.etree now tries to find the absolute path name of files when - parsing from a file-like object. This helps custom resolvers when - resolving relative URLs, as lixbml2 can prepend them with the path of - the source document. - - Bugs fixed - - * Memory problem when passing documents between threads. - * Target parser did not honour the recover option and raised an exception - instead of calling .close() on the target. [2.1.1-1] - Update to 2.1.1 [2.0.7-1] - Update to 2.0.7 - Update download URL [2.0.6-1] - Update to 2.0.6 [2.0.5-1] - Update to 2.0.5 [2.0.3-1] - Update to 2.0.3 [2.0.2-1] - Update to 2.0.2 [2.0.1-1] - Update to 2.0.1 [1.3.6-2] - Autorebuild for GCC 4.3 [1.3.6-1] - Update to 1.3.6. [1.3.5-1] - Update to 1.3.5. [1.3.4-1] - Update to 1.3.4. [1.3.3-3] - Rebuild for selinux ppc32 issue. [1.3.3-2] - BR python-setuptools-devel [1.3.3-1] - Update to 1.3.3 [1.1.2-1] - Update to 1.1.2 [1.0.3-3] - Rebuild for new Python [1.0.3-2] - Rebuild for FC6 [1.0.3-1] - Update to new upstream version [1.0.2-2] - Include, don't ghost .pyo files per new guidelines [1.0.2-1] - Update to new upstream release [1.0.1-1] - Update to new upstream release [1.0-1] - Update to new upstream 1.0 release [0.9.1-3] - Add python-setuptools to BuildRequires - Use dist tag [0.9.1-2] - Fix summary and description [0.9.1-1] - update the new upstream version - remove Pyrex build req [0.8-1] - Initial package python-markupsafe [0.23-19] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 [0.23-18] - Make possible to disable python3 subpackage - Disable debugsource package [0.23-17] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [0.23-16] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild [0.23-15] - Clean up spec file [0.23-14] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [0.23-13] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [0.23-12] - Rebuild for Python 3.6 [0.23-11] - Ship python2-markupsafe - Modernize spec [0.23-10] - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages [0.23-9] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [0.23-8] - Rebuilt for Python3.5 rebuild [0.23-7] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [0.23-6] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild [0.23-5] - Replace the python-setuptools-devel BR with python-setuptools [0.23-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild [0.23-3] - Really rebuild for Python 3.4 [0.23-2] - Rebuild for Python 3.4 [0.23-1] - Update to 0.23 [0.18-1] - Update to 0.18 (#678537) [0.11-9] - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild [0.11-8] - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild [0.11-7] - rebuild for https://fedoraproject.org/wiki/Features/Python_3.3 [0.11-6] - remove rhel logic from with_python3 conditional [0.11-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild [0.11-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild [0.11-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild [0.11-2] - rebuild for newer python3 [0.11-1] - Update to 0.11 [0.9.2-5] - rebuild with python3.2 http://lists.fedoraproject.org/pipermail/devel/2010-August/141368.html [0.9.2-4] - Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild [0.9.2-3] - Fix missing setuptools BuildRequires. [0.9.2-2] - Fixed sitearch and python3 definitions to work better with older Fedora/RHEL. [0.9.2-1] - Initial version. python-mock python-nose python-pluggy python-psycopg2 [2.7.5-8] - Added patch for support pq_get_result_async() - Resolves: #1909674 [2.7.5-7] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 [2.7.5-6] - Use the fully versioned binaries during build - Related: rhbz#1619153 [2.7.5-5] - Require python2-psycopg2 instead of python-psycopg2 from the python2-psycopg2-debug subpackage - Resolves: rhbz#1628242 [2.7.5-4] - re-enable testsuite [2.7.5-3] - Disable failing tests [2.7.5-2] - BuildRequire also python36-rpm-macros as part of the python36 module build [2.7.5-1] - sync with fedora rawhide [2.7.4-5] - Let the doc subpackage be standalone installable [2.7.4-4] - Make requires on python36-devel/debug dependant on a python36_module bcond [2.7.4-3] - Revert switching Python 3 subpackages to the python3X- prefix - Switch only the requires for python3-devel/debug to the python36-prefix: the rest of the packages in the python36 collection will have the python3 prefix to be unified with the Python 3 packages for Platform-Python [2.7.4-2] - Switch the Python 3 subpackages to the python3X- prefix using the 3 macro [2.7.4-1] - rebase to latest upstream release, per release notes: http://initd.org/psycopg/articles/2018/02/08/psycopg-274-released/ [2.7.3.2-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [2.7.3.2-2] - treat python3/python2 equally [2.7.3.2-1] - update to 2.7.3.2, per release notes: http://initd.org/psycopg/articles/2017/10/24/psycopg-2732-released/ [2.7.3.1-1] - http://initd.org/psycopg/articles/2017/08/26/psycopg-2731-released/ [2.7.3-1] - rebase to latest upstream release, per release notes: http://initd.org/psycopg/articles/2017/07/24/psycopg-273-released/ [2.7.2-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild [2.7.2-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [2.7.2-1] - rebase to latest upstream release, per release notes: http://initd.org/psycopg/articles/2017/07/22/psycopg-272-released/ [2.7.1-1] - rebase to latest upstream release, per release notes: http://initd.org/psycopg/articles/2017/03/01/psycopg-271-released/ - fix testsuite [2.7-1] - rebase to latest upstream release, per release notes: http://initd.org/psycopg/articles/2017/03/01/psycopg-27-released/ - enable testsuite during build, and package it [2.6.2-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [2.6.2-3] - Rebuild for Python 3.6 [2.6.2-2] - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages [2.6.2-1] - rebase (rhbz#1353545), per release notes http://initd.org/psycopg/articles/2016/07/07/psycopg-262-released/ [2.6.1-6] - provide python2-psycopg2 (rhbz#1306025) - cleanup obsoleted packaging stuff [2.6.1-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [2.6.1-4] - again bump for new Python 3.5, not build previously? - fix rpmlint issues - no pyo files with python 3.5 * Tue Nov 10 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - Rebuilt for https://fedoraproject.org/wiki/Changes/python3.5 [2.6.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [2.6.1-1] - Update to 2.6.1 [2.6-1] - Update to 2.6, per changes described at: http://www.psycopg.org/psycopg/articles/2015/02/09/psycopg-26-and-255-released/ [2.5.4-1] - Update to 2.5.4, per changes described at: http://www.psycopg.org/psycopg/articles/2014/08/30/psycopg-254-released [2.5.3-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild [2.5.3-1] - rebase to most recent upstream version, per release notes: http://www.psycopg.org/psycopg/articles/2014/05/13/psycopg-253-released/ [2.5.2-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild [2.5.2-2] - Rebuilt for https://fedoraproject.org/wiki/Changes/Python_3.4 [2.5.2-1] - Update to 2.5.2, per changes described at: http://www.psycopg.org/psycopg/articles/2014/01/07/psycopg-252-released [2.5.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild [2.5.1-1] - rebase to 2.5.1 [2.5-1] - Update to 2.5, per changes described at: http://www.psycopg.org/psycopg/articles/2013/04/07/psycopg-25-released/ [2.4.5-7] - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild [2.4.5-6] - rebuild for https://fedoraproject.org/wiki/Features/Python_3.3 [2.4.5-5] - generalize python 3 fileglobbing to work with both Python 3.2 and 3.3 [2.4.5-4] - replace 'python3.2dmu' with 'python3-debug'; with_python3 fixes [2.4.5-3] - add with_python3 conditional [2.4.5-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild [2.4.5-1] - Update to 2.4.5 [2.4.4-1] - Update to 2.4.4 - More specfile neatnik-ism [2.4.2-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild [2.4.2-2] - Fix mistaken %dir marking on python3 files, per Dan Horak [2.4.2-1] - Update to 2.4.2 Related: #711095 - Some neatnik specfile cleanups [2.4-0.beta2] - 2.4.0-beta2 - add python 2 debug, python3 (optimized) and python3-debug subpackages [2.3.2-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild [2.3.2-1] - Update to 2.3.2 - Clean up a few rpmlint warnings [2.2.2-3] - Fix incorrect (and invalid) License: tag. [2.2.2-2] - Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild [2.2.2-1] - Update to 2.2.2 [2.2.1-1] - Update to 2.2.1 - Improve description for 2.2 features. - Changelog for 2.2.0 is: http://initd.org/pub/software/psycopg/ChangeLog-2.2 [2.0.14-1] - Update to 2.0.14 - Update license (upstream switched to LGPL3) [2.0.13-2] - Fix rpmlint complaints: remove unneeded explicit Requires:, use Conflicts: instead of bogus Obsoletes: to indicate lack of zope subpackage [2.0.13-1] - Update to 2.0.13 [2.0.12-1] - Update to 2.0.12 [2.0.11-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild [2.0.11-1] - Update to 2.0.11 [2.0.10-1] - Update to 2.0.10 [2.0.9-1] - Update to 2.0.9 [2.0.8-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild [2.0.8-2] - Rebuild for Python 2.6 [2.0.8-1] - Update to 2.0.8 [2.0.8-1] - Update to 2.0.8 [2.0.7-3] - Rebuild for Python 2.6 [2.0.7-2] - fix license tags [2.0.7-1] - Update to 2.0.7 [2.0.6-4.1] - Autorebuild for GCC 4.3 [2.0.6-3.1] - Rebuilt against PostgreSQL 8.3 [2.0.6-3] - Rebuild for rawhide changes [2.0.6-2] - Rebuild for selinux ppc32 issue. [2.0.6-1] - Update to 2.0.6 [2.0.5.1-8] - Disabled zope package temporarily. [2.0.5.1-7] - Rebuilt [2.0.5.1-5] - Bumped up spec version [2.0.5.1-4] - Rebuilt for PostgreSQL 8.2.0 [2.0.5.1-3] - Rebuilt [2.0.5.1-2] - Remove ghost'ing, per Python Packaging Guidelines [2.0.5.1-1] - Update to 2.0.5.1 [2.0.3-3] - Fixed zope package dependencies and macro definition, per bugzilla review (#199784) - Fixed zope package directory ownership, per bugzilla review (#199784) - Fixed cp usage for zope subpackage, per bugzilla review (#199784) [2.0.3-2] - Fixed 64 bit builds - Fixed license - Added Zope subpackage - Fixed typo in doc description - Added macro for zope subpackage dir [2.0.3-1] - Update to 2.0.3 - Fixed spec file, per bugzilla review (#199784) [2.0.2-3] - Removed python dependency, per bugzilla review. (#199784) - Changed doc package group, per bugzilla review. (#199784) - Replaced dos2unix with sed, per guidelines and bugzilla review (#199784) - Fix changelog dates [2.0.2-2] - Added dos2unix to buildrequires - removed python related part from package name [2.0.2-1] - Fix rpmlint errors, including dos2unix solution - Re-engineered spec file * Mon Jan 23 2006 - Devrim GUNDUZ <devrim@commandprompt.com> - First 2.0.X build * Mon Jan 23 2006 - Devrim GUNDUZ <devrim@commandprompt.com> - Update to 1.2.21 * Tue Dec 06 2005 - Devrim GUNDUZ <devrim@commandprompt.com> - Initial release for 1.1.20 python-pygments python-pymongo python-PyMySQL [0.8.0-10] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 [0.8.0-9] - Make possible to disable python3 subpackage [0.8.0-8] - BuildRequire also python36-rpm-macros as part of the python36 module build [0.8.0-7] - Add a bcond for python2 [0.8.0-6] - Make requires on python36-devel dependant on a python36_module bcond [0.8.0-5] - Hardcode requires on python36-devel for the python36 module. This will have to be modified when python37 is added. [0.8.0-4] - make spec file compatible with epel7 - remove conditionals and always build for Python 3 [0.8.0-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [0.8.0-2] - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) [0.8.0-1] - Update to 0.8.0 [0.7.11-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [0.7.11-1] - Update to 0.7.11 [0.7.10-1] - Update to 0.7.10 [0.7.9-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [0.7.9-3] - Rebuild for Python 3.6 [0.7.9-2] - cherrypick commit 755dfdc upstream to allow bind before connect Related: rhbz#1378008 [0.7.9-1] - Update to 0.7.9 [0.6.7-6] - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages [0.6.7-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [0.6.7-4] - Correct installation problems due to Requires: mariadb [0.6.7-3] - Rebuilt for python 3.5 [0.6.7-2] - Drop unnecessary mariadb requirement - Add python3 conditionals in order to rebuild it in EL7 [0.6.7-1] - Update to 0.6.7 [0.6.6-4] - Use %license in %files [0.6.6-3] - Move python2 package in its own subpackage - Add provides [0.6.6-2] - Add Provides: python2-PyMySQL - Remove usage of %py3dir [0.6.6-1] - Update to 0.6.6 [0.6.2-1] - Initial packaging python-py python-pysocks [1.6.8-6] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 [1.6.8-5] - Stop providing the unversioned name python-SocksiPy - Resolves: rhbz#1628242 [1.6.8-4] - Make possible to disable python3 subpackage [1.6.8-3] - First version for python27 module python-pytest-mock python-requests [2.20.0-4] - Security fix for CVE-2023-32681 Resolves: rhbz#2209469 [2.20.0-3] - Properly handle default ports when stripping the authorization header Resolves: rhbz#1762422 [2.20.0-2] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 [2.20.0-1] - Update to v2.20.0 for CVE-2018-18074. [2.19.1-5] - Make possible to disable python3 subpackage [2.19.1-4] - First version for python27 module [2.19.1-3] - Allow build with Python 2 [2.19.1-2] - Remove the python-pytest-cov dependency [2.19.1-1] - Update to v2.19.1 (rhbz 1591531) [2.19.0-1] - Update to v2.19.0 (rhbz 1590508) [2.18.4-6] - Skip all tests needing httpbin: httpbin has too many dependencies to be shipped in RHEL just for build-time package tests [2.18.4-5] - BR idna, or the tests fail to start [2.18.4-4] - Stop injecting PyOpenSSL (rhbz 1567862) [2.18.4-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [2.18.4-2] - Fix ambiguous Python 2 dependency declarations (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) [2.18.4-1] - Update to 2.18.4 [2.18.2-1] - Update to 2.18.2 [2.18.1-2] - Drop the dependency on certifi in setup.py [2.18.1-1] - Update to 2.18.1 (#1449432) - Remove tests that require non-local network (#1450608) [2.14.2-1] - Update to 2.14.2 (#1449432) - Switch to autosetup to apply patches [2.13.0-2] - Don't run tests when building as a module [2.13.0-1] - Update to 2.13.0 (#1418138) [2.12.4-3] - Include and enable tests (now python-pytest-httpbin is packaged) [2.12.4-2] - Rebuild for Python 3.6 again. [2.12.4-1] - Update to 2.12.4. Fixes #1404680 [2.12.3-2] - Rebuild for Python 3.6 [2.12.3-1] - Update to 2.12.3. Fixes #1400601 [2.12.2-1] - Update to 2.12.2 [2.12.1-2] - Backport #3713. Fixes #1397149 [2.12.1-1] - Update to 2.12.1. Fixes #1395469 - Unbundle idna, a new upstream dependency [2.11.1-1] - Update to 2.11.1. Fixes #1370814 [2.11.0-1] - Update to 2.11.0. Fixes #1365332 [2.10.0-4] - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages [2.10.0-3] - Update python2 packaging. [2.10.0-2] - Fix python2 subpackage to comply with guidelines. [2.9.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [2.9.1-1] - new version [2.9.0-1] - new version [2.8.1-1] - Latest upstream. - Bump hard dep on urllib3 to 1.12. [2.7.0-8] - Rebuilt for Python3.5 rebuild [2.7.0-7] - Tell setuptools about what version of urllib3 we're unbundling for https://github.com/kennethreitz/requests/issues/2816 [2.7.0-6] - Replace the provides macro with a plain provides field for now until we can re-organize this package into two different subpackages. [2.7.0-5] - Remove 'provides: python2-requests' from the python3 subpackage, obviously. [2.7.0-4] - Employ %python_provides macro to provide python2-requests. [2.7.0-3] - Lock down the python-urllib3 version to the specific version we unbundled. https://bugzilla.redhat.com/show_bug.cgi?id=1253823 [2.7.0-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [2.7.0-1] - new version [2.6.2-1] - new version [2.6.1-1] - new version [2.6.0-1] - new version - Remove patch for CVE-2015-2296, now included in the upstream release. [2.5.3-2] - Backport fix for CVE-2015-2296. [2.5.3-1] - new version [2.5.1-1] - new version [2.5.0-3] - Pin python-urllib3 requirement at 1.10. - Fix requirement pinning syntax. [2.5.0-2] - Do the most basic of tests in the check section. [2.5.0-1] - Latest upstream, 2.5.0 for #1171068 [2.4.3-1] - Latest upstream, 2.4.3 for #1136283 [2.3.0-4] - Re-do unbundling by symlinking system libs into the requests/packages/ dir. [2.3.0-3] - fix license handling [2.3.0-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild [2.3.0-1] - Latest upstream [2.0.0-2] - Rebuilt for https://fedoraproject.org/wiki/Changes/Python_3.4 [2.0.0-1] - Latest upstream. - Add doc macro to the python3 files section. - Require python-urllib3 greater than or at 1.7.1. [1.2.3-5] - fix versioned dep on python-urllib3 [1.2.3-4] - Explicitly versioned the requirements on python-urllib3. [1.2.3-3] - Release bump for a coupled update with python-urllib3. [1.2.3-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild [1.2.3-1] - Latest upstream. - Fixed bogus date in changelog. [1.1.0-4] - Correct a rhel conditional on python-ordereddict [1.1.0-3] - Unbundled python-urllib3. Using system python-urllib3 now. - Conditionally include python-ordereddict for el6. [1.1.0-2] - Unbundled python-charade/chardet. Using system python-chardet now. - Removed deprecated comments and actions against oauthlib unbundling. Those are no longer necessary in 1.1.0. - Added links to bz tickets over Patch declarations. [1.1.0-1] - Latest upstream. - Relicense to ASL 2.0 with upstream. - Removed cookie handling patch (fixed in upstream tarball). - Updated cert unbundling patch to match upstream. - Added check section, but left it commented out for koji. [0.14.1-4] - Let brp_python_bytecompile run again, take care of the non-python{2,3} modules by removing them from the python{,3}-requests package that they did not belong in. - Use the certificates in the ca-certificates package instead of the bundled one + https://bugzilla.redhat.com/show_bug.cgi?id=904614 - Fix a problem with cookie handling + https://bugzilla.redhat.com/show_bug.cgi?id=906924 [ 0.14.1-1] - Updated to latest upstream release [0.13.1-1] - Updated to latest upstream release 0.13.1 - Use system provided ca-certificates - No more async requests use grrequests https://github.com/kennethreitz/grequests - Remove gevent as it is no longer required by requests [0.11.1-1] - Updated to upstream release 0.11.1 [0.10.6-3] - Support building package for EL6 [0.10.6-2] - +python3-requests pkg [0.10.6-1] - Updated to new upstream version [0.9.3-1] - Updated to new upstream version 0.9.3 - Include python-gevent as a dependency for requests.async - Clean up shebangs in requests/setup.py,test_requests.py and test_requests_ext.py [0.8.2-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild [0.8.2-1] - New upstream version - keep alive support - complete removal of cookiejar and urllib2 [0.7.6-1] - Updated to new upstream release 0.7.6 [0.6.6-1] - Updated to version 0.6.6 [0.6.1-1] - Updated to version 0.6.1 [0.6.0-1] - Updated to latest version 0.6.0 [0.5.1-2] - Remove OPT_FLAGS from build section since it is a noarch package - Fix use of mixed tabs and space - Remove extra space around the word cumbersome in description [0.5.1-1] - Initial package python-setuptools_scm python-sqlalchemy python-urllib3 [1.24.2-3] - Update RECENT_DATE dynamically Related: rhbz#1883890 rhbz#1761380 [1.24.2-2] - Security fix for CVE-2020-26137 Resolves: rhbz#1883890 [1.24.2-1] - Rebased to 1.24.2 to fix CVE-2019-11324 - Added patches for CVE-2019-11236 (AKA CVE-2019-9740) - Resolves: rhbz#1706765 rhbz#1706762 [1.23-7] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 [1.23-6] - Make possible to disable python3 subpackage [1.23-5] - First version for python27 module python-virtualenv python-wheel [1:0.31.1-3] - Adjusted the postun scriptlets to enable upgrading to RHEL 9 - Resolves: rhbz#1933055 [1:0.31.1-2] - Removed wheel's own implementation of crypto due to FIPS concerns Resolves: rhbz#1731526 [1:0.31.1-1] - Update to 0.31.1 Resolves: rhbz#1671681 [1:0.30.0-14] - Create python{2,3}-wheel-wheel packages with the wheel of wheel Resolves: rhbz#1659550 [1:0.30.0-13] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 [1:0.30.0-12] - Fix alternatives - post and postun sections only with python3 - Resolves: rhbz#1633534 [1:0.30.0-11] - Fix update of alternatives for wheel-3 - Resolves: rhbz#1633534 [1:0.30.0-10] - Add alternatives for wheel-3 - Resolves: rhbz#1633534 [1:0.30.0-9] - Remove python3 executables without full version suffix - Resolves: rhbz#1615727 [1:0.30.0-8] - Different BR for python36 module build - Resolves: rhbz#1615727 [1:0.30.0-7] - Remove unversioned binaries from python2 subpackage - Resolves: rhbz#1613343 [1:0.30.0-6] - Disable tests (enable bootstrap) - Build Python 3 version in python27 module [1:0.30.0-5] - This package might be built with the non-modular python2 package from RHEL8 buildroot and thus we need to enable it [1:0.30.0-4] - Also remove test dependency on python3-jsonschema [1:0.30.0-3] - Remove test dependency on python2-jsonschema https://bugzilla.redhat.com/show_bug.cgi?id=1584189 [1:0.30.0-2] - Remove build-time (test) dependency on python-keyring [1:0.30.0-1] - Update to 0.30.0 [0.30.0a0-9] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [0.30.0a0-8] - Switch macros to bcond's and make Python 2 optional to facilitate building the Python 2 and Python 3 modules [0.30.0a0-7] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [0.30.0a0-6] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [0.30.0a0-5] - Enable tests [0.30.0a0-4] - Rebuild for Python 3.6 without tests [0.30.0a0-3] - Add bootstrap method [0.30.0a0-2] - Use the python_provide macro [0.30.0a0-1] - Update to 0.30.0a0 - Added patch to remove keyrings.alt dependency [0.29.0-1] - Update to 0.29.0 - Cleanups and fixes [0.26.0-3] - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages [0.26.0-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [0.26.0-1] - Update to 0.26.0 - Rebuilt for Python3.5 rebuild [0.24.0-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [0.24.0-3] - Make spec buildable in EPEL 6, too. - Remove additional sources added to upstream tarball. [0.24.0-2] - Make python3 conditional (switched off for RHEL-7; fixes #1131111). [0.24.0-1] - Update to 0.24.0 - Remove patches merged upstream [0.22.0-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild [0.22.0-3] - Another rebuild with python 3.4 [0.22.0-2] - Rebuild with python 3.4 [0.22.0-1] - Initial package. pytz [2017.2-13] - Fix FTBFS with newest tzdata Resolves: rhbz#2217852 [2017.2-12] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 [2017-2-11] - Remove unversioned provides - Resolves: rhbz#1628242 [2017.2-10] - Fix unversioned requires/buildrequires - Resolves: rhbz#1628242 [2017.2-9] - Switch python3 coditions to bcond [2017.2-8] - Change the shebang to a versioned Python executable [2017.2-7] - Switch __python for __python2 macro. [2017.2-6] - remove test_tzinfo.PicklingTest.testRoundtrip which fails with our system-wide timezone database (#1497572) [2017.2-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [2017.2-4] - Cleanup spec file conditionals [2017.2-3] - Python 2 binary package renamed to python2-pytz See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 [2017.2-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [2017.2-1] - Update to 2017.2 [2016.10-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [2016.10-3] - Enable tests [2016.10-2] - Rebuild for Python 3.6 - Disable python3 tests for now [2016.10-1] - Update to 2016.10 [2016.7-1] - Update to 2016.7 [2016.6.1-1] - Update to 2016.6.1 (RHBZ #1356337) - Fix Source0 URL to override a change in PyPI URLs (see https://bitbucket.org/pypa/pypi/issues/438/) [2016.4-3] - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages [2016.4-1] - Use proper PYTHONPATH with python3 test - Use %license - Drop BuildRoot and %clean [2016.4-1] - Update to 2016.4 (RHBZ #1265036) [2015.7-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [2015.7-2] - Rebuilt for Python3.5 rebuild [2015.7-1] - Update to 2015.7 [2015.4-1] - Update to 2015.4 (bug #1161236) - Do not ship zoneinfo with python3 package (bug #1251554) - Run tests [2012d-8] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [2012d-7] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild [2012d-6] - Rebuilt for https://fedoraproject.org/wiki/Changes/Python_3.4 [2012d-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild [2012d-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild [2012d-3] - remove rhel logic from with_python3 conditional [2012d-2] - Use system zoneinfo, BZ 857266. [2012d-1] - Latest upstream, python3 support, BZ 851226. [2010h-6] - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild [2010h-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild [2010h-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild [2010h-3] - Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild [2010h-2] - Define => global [2010h-1] - Update to current version, BZ 573252. [2009i-7] - Corrected Source0 URL, BZ 560168. [2008i-6] - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild [2008i-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild [2008i-4] - Rebuild for Python 2.6 [2008i-3] - Apply patch correctly. [2008i-2] - Updated tzdata patch from Petr Machata bug 471014 [2008i-1] - Update to latest, now using timezone files provided by tzdata package [2006p-3] - Fix for egg-info file creation [2006p-2] - Bump for rebuild against python 2.5 and change BR to python-devel accordingly [2006p-1] - Update to 2006p [2006g-1] - Update to 2006g [2005r-2] - Rebuild for gcc/glibc changes [2005r-1] - Update to 2005r [2005m-1] - Update to 2005m [2005i-2] - Remove -O1 from install command [2005i-1] - Initial Fedora Extras package PyYAML [3.12-16] - Bumping due to problems with modular RPM upgrade path - Resolves: rhbz#1695587 [3.12-15] - Remove unversioned provides - Resolves: rhbz#1628242 [3.12-14] - Remove unversioned provides - Resolves: rhbz#1628242 [3.12-13] - Fix unversioned requires/buildrequires - Resolves: rhbz#1628242 [3.12-12] - Switch python3 coditions to bcond [3.12-11] - Use python2 macros instead of unversioned python macros [3.12-10] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [3.12-9] - Fix ambiguous Python 2 dependency declarations (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) [3.12-8] - Cleanup spec file conditionals [3.12-7] - Add Provides for the old name without %_isa [3.12-6] - Python 2 binary package renamed to python2-pyyaml See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 [3.12-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild [3.12-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [3.12-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [3.12-2] - Rebuild for Python 3.6 [3.12-1] - New upstream release 3.12 (RHBZ#1371150) [3.11-13] - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages [3.11-12] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [3.11-11] - Add provides for python3-yaml (RHBZ#1288807) [3.11-10] - Rebuilt for Python3.5 rebuild [3.11-9] - Add provides for python2-yaml (RHBZ#1241678) [3.11-8] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [3.11-7] - Add patch for CVE-2014-9130 (bug 1204829) [3.11-6] - fixed typecast issues using debian patch(int->size_t)(BZ#1140189) - spec file cleanup [3.11-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild [3.11-4] - fix license handling [3.11-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild [3.11-2] - Rebuilt for https://fedoraproject.org/wiki/Changes/Python_3.4 [3.11-1] - New upstream release 3.11 (BZ#1081521) [3.10-9] - Add check section and run test suite [3.10-8] - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild [3.10-7] - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild [3.10-6] - rebuild for https://fedoraproject.org/wiki/Features/Python_3.3 [3.10-5] - remove rhel logic from with_python3 conditional [3.10-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild [3.10-3] - Add Provides for python-yaml (BZ#740390) [3.10-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild [3.10-1] - New upstream release 3.10 [3.09-8] - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild [3.09-7] - Add support to build for python 3 [3.09-6] - Bump release number for upgrade path [3.09-3] - Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild [3.09-1] - New upstream release 3.09 [3.08-6] - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild [3.08-5] - Minor tweaks to spec file aligning with latest Fedora packaging guidelines - Enforce inclusion of libyaml in build with --with-libyaml option to setup.py - Deliver to %{python_sitearch} instead of %{python_sitelib} due to _yaml.so - Thanks to Gareth Armstrong <gareth.armstrong@hp.com> [3.08-4] - Correction, change libyaml to libyaml-devel in BuildRequires [3.08-3] - Add libyaml to BuildRequires [3.08-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild [3.08-1] - New upstream release [3.06-2] - Rebuild for Python 2.6 [3.06-1] - New upstream release [3.05-2] - Remove explicit dependency on python >= 2.3 - Remove executable on example script in docs [3.05-1] - Initial packaging for Fedora scipy [1.0.0-22] - Remove RPATH from certain shared object files - Resolves: rhbz#2213056 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-32681 cpe:/a:oracle:linux:8:9:appstream_base cpe:/a:oracle:linux:8::appstream Oracle Linux 8 [2.79-31] - Do not create and search --local and --address=/x/# domains (#2233542) [2.79-30] - Make create logfile writeable by root (#2156789) [2.79-29] - Fix also dynamically set resolvers over dbus (#2186481) [2.79-28] - Correct possible crashes when server=/example.net/# is used (#2186481) [2.79-27] - Limit offered EDNS0 size to 1232 (CVE-2023-28450) MODERATE Copyright 2023 Oracle, Inc. CVE-2023-28450 cpe:/a:oracle:linux:8:9:appstream_base cpe:/a:oracle:linux:8::appstream Oracle Linux 8 babel Cython mod_wsgi [4.6.8-5] - Remove rpath Resolves: rhbz#2213836 [4.6.8-4] - Core dumped upon file upload >= 1GB Resolves: rhbz#2125171 [4.6.8-3] - Exclude unsupported i686 arch (rhbz#1779142) [4.6.8-2] - Adjusted for Python 3.8 module in RHEL 8 [4.6.8-1] - update to 4.6.8 (#1721376) [4.6.6-6] - try again to drop Python 2 [4.6.6-5] - drop python2 build [4.6.6-4] - Rebuilt for Python 3.8.0rc1 (#1748018) [4.6.6-3] - Rebuilt for Python 3.8 [4.6.6-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild [4.6.6-1] - update to 4.6.6 (rhbz#1718151) [4.6.5-1] - update to 4.6.5 [4.6.4-4] - only build docs with Python 3 - fix build on Fedora>30 and RHEL 7 [4.6.4-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild [4.6.4-2] - Run Python 3 build in a subdir, so module isn't linked against both libpython 2 and libpython 3 (rhbz#1609491) [4.6.4-1] - update to 4.6.4 (rhbz#1560329) [4.6.2-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild [4.6.2-4] - Rebuilt for Python 3.7 [4.6.2-3] - use sphinx-build-3 if python2 support is disabled [4.6.2-2] - Update conditionals. - Make preperations for non-python2 builds [4.6.2-1] - update to 4.6.2 (rhbz#1514768) - add gcc BR [4.5.20-4] - restrict module DSO symbol exports [4.5.20-3] - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) [4.5.20-2] - Python 2 binary package renamed to python2-mod_wsgi See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 [4.5.20-1] - update to 4.5.20 [4.5.15-5] - include mod_wsgi Python package and mod_wsgi-express script [4.5.15-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild [4.5.15-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [4.5.15-2] - Rebuild due to bug in RPM (RHBZ #1468476) [4.5.15-1] - update to 4.5.15 (#1431893) [4.5.13-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [4.5.13-1] - Update to 4.5.13 [4.5.9-2] - Rebuild for Python 3.6 [4.5.9-1] - upgrade to 4.5.9 (rhbz#1180445) [4.4.8-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [4.4.8-3] - Rebuilt for https://fedoraproject.org/wiki/Changes/python3.5 [4.4.8-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [4.4.8-1] - Upstream to 4.4.8. - This version includes the fix for the segfault described in RHBZ#1178851. [4.4.3-1] - update to new upstream version 4.4.3 (#1176914) [4.4.1-1] - update to new upstream version 4.4.1 (#1170994) [4.3.2-1] - update to new upstream version 4.3.2 (#1104526) [3.5-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild [3.5-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild [3.5-1] - Update to 3.5 to fix CVE-2014-0240 (#1101863) - Remove all of the patches, which have been applied upstream - Update source URL for new the GitHub upstream [3.4-14] - rebuild for Python 3.4 [3.4.13] - do not use conflicts between mod_wsgi packages (rhbz#1087943) [3.4-12] - fix _httpd_mmn expansion in absence of httpd-devel [3.4-11] - added python3 subpackage (thanks to Jakub Dornak), rhbz#1035876 [3.4-10] - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild [3.4-9] - modernize spec file (thanks to rcollet) [3.4-8] - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild [3.4-7] - compile with -fno-strict-aliasing to workaround Python bug http://www.python.org/dev/peps/pep-3123/ [3.4-6] - use _httpd_moddir macro [3.4-5] - spec file cleanups [3.4-4] - enable PR_SET_DUMPABLE in daemon process to enable core dumps [3.4-3] - use a NULL c->sbh pointer with httpd 2.4 (possible fix for #867276) - add logging for unexpected daemon process loss [3.4-2] - also use RPM_LD_FLAGS for build bz. #867137 [3.4-1] - update to upstream release 3.4 [3.3-7] - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild [3.3-6] - add possible fix for daemon mode crash (#831701) [3.3-5] - move wsgi.conf to conf.modules.d [3.3-4] - rebuild for httpd 2.4 [3.3-3] - prepare for httpd 2.4.x [3.3-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild [3.3-1] - update to 3.3 [3.2-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild [3.2-2] - Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild [3.2-1] - update to 3.2 [3.1-2] - removed conflicts as it violates fedora packaging policy [3.1-1] - update to 3.1 - add explicit enable-shared - add conflicts mod_python < 3.3.1 [2.5-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild [2.5-1] - Update to 2.5 [2.3-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild [2.3-2] - Rebuild for Python 2.6 [2.3-1] - Update to 2.3 [2.1-2] - Remove requires on httpd-devel [2.1-1] - Update to 2.1 [1.3-4] - Build against the shared python lib. [1.3-3] - Autorebuild for GCC 4.3 [1.3-2] - Require httpd [1.3-1] - Update to 1.3 [1.0-1] - Initial packaging for Fedora numpy [1.17.3-7] - Skip TestCond.test_nan - Resolves: rhbz#2217862 python38 [3.8.17-2] - Fix symlink handling in the fix for CVE-2023-24329 Resolves: rhbz#263261 [3.8.17-1] - Update to 3.8.17 - Security fix for CVE-2023-24329 - Add filters for tarfile extraction (CVE-2007-4559, PEP-706) Resolves: rhbz#2173917, rhbz#263261 [3.8.16-2] - Strip the LTO bytecode from python.o Resolves: rhbz#2213526 python3x-pip python3x-setuptools python3x-six [1.12.0-10] - Rebuild from a new component name [1.12.0-9] - Exclude unsupported i686 arch [1.12.0-8] - Adjusted for Python 3.8 module in RHEL 8 [1.12.0-7] - Rebuilt for Python 3.8.0rc1 (#1748018) [1.12.0-6] - Reduce Python 2 build dependencies [1.12.0-5] - Rebuilt for Python 3.8 [1.12.0-4] - Bootstrap for Python 3.8 [1.12.0-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild [1.12.0-1] - Update to 1.12.0 [1.11.0-7] - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild [1.11.0-6] - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild [1.11.0-5] - Rebuilt for Python 3.7 [1.11.0-4] - Bootstrap for Python 3.7 [1.11.0-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [1.11.0-2] - Removed and obsoleted the platform-python subpackage [1.11.0-1] - Update to 1.11.0 [1.10.0-11] - Added the platform-python subpackage [1.10.0-10] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [1.10.0-9] - Fix unversioned Python BuildRequires [1.10.0-8] - Rebuild as wheel [1.10.0-7] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [1.10.0-6] - Enable tests [1.10.0-5] - Rebuild for Python 3.6 - Disable python3 tests [1.10.0-4] - Modernize spec more - Depend on system-python(abi) - Cleanups [1.10.0-3] - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages [1.10.0-2] - Modernize spec - Fix python3 package file ownership [1.10.0-1] - Update to 1.10.0 [1.9.0-4] - Rebuilt for Python3.5 rebuild [1.9.0-3] - Added python2-six provide to python-six [1.9.0-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [1.9.0-1] - Upstream 1.9.0 - Packaging cleanups [1.8.0-1] - upgrade to 1.8.0 (rhbz#1105861) [1.7.3-2] - fix license handling [1.7.3-1] - Latest upstream [1.6.1-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild [1.6.1-2] - Rebuild for Python 3.4 [1.6.1-1] - upgrade to 1.6.1 (rhbz#1076578) [1.5.2-1] - upgrade to 1.5.2 (rhbz#1048819) [1.4.1-1] - 1.4.1 [1.3.0-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild [1.3.0-1] - 1.3.0 [1.2.0-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild [1.2.0-1] - 1.2.0 (rhbz#852658) - add %check section [1.1.0-4] - rebuild for https://fedoraproject.org/wiki/Features/Python_3.3 [1.1.0-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild [1.1.0-2] - Conditionalized python3-six, allowing an el6 build. [1.1.0-1] - 1.1.0 [1.0.0-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild [1.0.0-1] - initial packaging python-asn1crypto python-cffi [1.13.2-3] - Exclude unsupported i686 arch [1.13.2-2] - Adjusted for Python 3.8 module in RHEL 8 [1.13.2-1] - Update to 1.13.2 (#1768219) [1.13.1-1] - Update to 1.13.1 (#1763767) [1.13.0-1] - Update to 1.13.0 (#1761757) [1.12.3-5] - Subpackage python2-cffi has been removed See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal [1.12.3-4] - Rebuilt for Python 3.8.0rc1 (#1748018) [1.12.3-3] - Reduce Python 2 build dependencies [1.12.3-2] - Rebuilt for Python 3.8 [1.12.3-1] - Update to 1.12.3 (#1701577) - https://cffi.readthedocs.io/en/latest/whatsnew.html#v1-12-3 [1.12.2-2] - Remove unused build dependency on Cython - Remove duplicate build dependency on pytest [1.12.2-1] - Update to 1.12.2 (#1677888) [1.11.5-7] - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild [1.11.5-6] - Fix FTBFS (#1605627) [1.11.5-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild [1.11.5-4] - Rebuilt for Python 3.7 [1.11.5-3] - Disable tests to fix mock-only FTBFS. [1.11.5-2] - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) [1.11.2-1] - New release 1.11.5 [1.11.2-3] - Escape macros in %changelog [1.11.2-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [1.11.2-1] - New release 1.11.0 - Fix %check [1.11.0-2] - Cleanup spec file conditionals [1.11.0-1] - New release 1.11.0 [1.10.0-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild [1.10.0-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [1.10.0-1] - New release 1.10.0 [1.9.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [1.9.1-1] - Update to latest upstream 1.9.1 [1.8.3-4] - Modernize spec [1.8.3-3] - Rebuild for Python 3.6 - Disable test dependencies [1.8.3-2] - Re-disable check [1.8.3-1] - Update to 1.8.3 - Reenable check [1.8.2-1] - Update to 1.8.2 [1.7.0-3] - Record installed files [1.7.0-2] - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages [1.7.0-1] - Update to 1.7.0 [1.6.0-3] - Switch Source0 to using pypi.io [1.6.0-2] - Update Source0 URL to account for pypi change [1.6.0-1] - Update to 1.6.0 (#1329203) [1.5.2-1] - Update to 1.5.2 (#1299272) [1.5.0-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [1.5.0-1] - Update to 1.5.0 (#1299272) [1.4.2-2] - Move python-cffi => python2-cffi [1.4.2-1] - Update to 1.4.2 (#1293504) [1.4.1-1] - Update to latest upstream release [1.3.1-1] - Update to latest upstream release [1.1.2-4] - Rebuilt for Python3.5 rebuild [1.1.2-3] - Modernize spec file - add missing source [1.1.2-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [1.1.2-2] - Update to 1.1.2 - Fix license [0.8.6-1] - Update to latest upstream. - No python3 in el7. [0.8.1-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild [0.8.1-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild [0.8.1-2] - Rebuilt for https://fedoraproject.org/wiki/Changes/Python_3.4 [0.8.1-1] - Update to latest upstream. [0.6-5] - Add Requires of python{,3}-pycparser. [0.6-4] - Fix broken conditionals in spec (missing question marks), needed for el6. [0.6-3] - Add Python3 support. [0.6-2] - Better URL, and use version macro in Source0. [0.6-1] - initial version python-chardet python-cryptography [2.8-3] - Exclude unsupported i686 arch [2.8-2] - Adjusted for Python 3.8 module in RHEL 8 [2.8-1] - Update to 2.8 - Resolves: rhbz#1762779 [2.7-3] - Skip unit tests that fail with OpenSSL 1.1.1.d - Resolves: rhbz#1761194 - Fix and simplify Python 3 packaging [2.7-2] - Drop Python 2 package - Resolves: rhbz#1761081 [2.7-1] - Update to 2.7 (#1715680). [2.6.1-3] - Rebuilt for Python 3.8 [2.6.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild [2.6.1-1] - New upstream release 2.6.1, resolves RHBZ#1683691 [2.5-1] - Updated to 2.5. [2.3-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild [2.3-2] - Use TLSv1.2 in test as workaround for RHBZ#1615143 [2.3-1] - New upstream release 2.3 - Fix AEAD tag truncation bug, RHBZ#1602752 [2.2.1-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild [2.2.1-2] - Rebuilt for Python 3.7 [2.2.1-1] - New upstream release 2.2.1 [2.1.4-1] - New upstream release 2.1.4 [2.1.3-4] - Build requires gcc [2.1.3-3] - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) [2.1.3-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild python-idna [2.8-6] - Exclude unsupported i686 arch [2.8-5] - Adjusted for Python 3.8 module in RHEL 8 [2.8-4] - Rebuilt for Python 3.8.0rc1 (#1748018) [2.8-3] - Rebuilt for Python 3.8 [2.8-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild [2.8-1] - Update to v2.8 - Drop python version conditionals [2.7-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild [2.7-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild [2.7-2] - Rebuilt for Python 3.7 [2.7-1] - Update to v2.7 (rhbz 1589803) [2.5-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [2.5-3] - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) [2.5-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [2.5-1] - Update to version 2.5 [2.4-1] - Update to version 2.4 [2.3-1] - Resolves bugzilla 1427499 Update to 2.3 for IDNAError bugfix and memory improvement [2.2-1] - Update to version 2.2 (#1406757) [2.1-3] - Rebuild for Python 3.6 [2.1-2] - Ship python2-idna - Enable python3 for EPEL - Modernize spec * Mon Oct 17 2016 tom.prince@ualberta.net - 2.1-1 - Bump version. [2.0-4] - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages [2.0-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [2.0-2] - Rebuilt for Python3.5 rebuild [2.0-1] - Update to 2.0 which is required by python-cryptography [1.0-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild * Wed Dec 31 2014 tom.prince@ualberta.net - 1.0-1 - Bump version. * Mon Oct 27 2014 tom.prince@ualberta.net - 0.8-3 - Update licences. * Sat Jul 12 2014 tom.prince@ualberta.net - 0.8-2 - Be more specfic about .egg-info directories. - Use python2-devel * Sat Jul 12 2014 tom.prince@ualberta.net - 0.8-1 - Initial package. python-jinja2 python-lxml [4.4.1-7] - Security fix for CVE-2021-43818 Resolves: rhbz#2032569 [4.4.1-6] - Security fix for CVE-2021-28957 Resolves: rhbz#1941534 [4.4.1-5] - Security fix for CVE-2020-27783: mXSS due to the use of improper parser Resolves: rhbz#1901633 [4.4.1-4] - Exclude unsupported i686 arch [4.4.1-3] - Adjusted for Python 3.8 module in RHEL 8 [4.4.1-2] - Generate C files using py3 Cython [4.4.1-1] - Update to 4.4.1 [4.4.0-2] - Rebuilt for Python 3.8 [4.4.0-1] - Update to 4.4.0 [4.2.5-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild [4.2.5-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild [4.2.5-1] - Update to 4.2.5 [4.2.4-1] - Update to 4.2.4 [4.2.3-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild [4.2.3-1] - Update to 4.2.3 [4.2.1-2] - Rebuilt for Python 3.7 [4.2.1-1] - Update to 4.2.1 [4.1.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [4.1.1-1] - Update to 4.1.1 [4.0.0-2] - Conditionally allow building without Cython [4.0.0-1] - Update to 4.0.0 [3.8.0-1] - Update to 3.8.0. Fixes bug #1458529 [3.7.2-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild [3.7.2-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [3.7.2-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [3.7.2-1] - Update to 3.7.2 [3.7.1-1] - Update to 3.7.1 [3.7.0-2] - Rebuild for Python 3.6 [3.7.0-1] - Update to 3.7.0 [3.6.4-1] - Update to 3.6.4 [3.4.4-5] - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages [3.4.4-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [3.4.4-3] - fix conditional [3.4.4-2] - Rebuilt for Python3.5 rebuild [3.4.4-1] - Update to 3.4.4 - Use %license, cleanup spec [3.3.6-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [3.3.6-1] - 3.3.6 (2014-08-28) - ================== - - Bugs fixed - ---------- - - * Prevent tree cycle creation when adding Elements as siblings. - - * LP#1361948: crash when deallocating Element siblings without parent. - - * LP#1354652: crash when traversing internally loaded documents in XSLT - extension functions. * Sun Aug 17 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild [3.3.5-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild [3.3.5-2] - Rebuilt for https://fedoraproject.org/wiki/Changes/Python_3.4 [3.3.5-1] - 3.3.5 (2014-04-18) - ================== - - Bugs fixed - ---------- - - * HTML cleaning could fail to strip javascript links that mix control - characters into the link scheme. [3.3.4-1] - 3.3.4 (2014-04-03) - ================== - - Features added - -------------- - - * Source line numbers above 65535 are available on Elements when - using libxml2 2.9 or later. - - Bugs fixed - ---------- - - * lxml.html.fragment_fromstring() failed for bytes input in Py3. [3.3.3-4] - Fix macro definition [3.3.3-3] - Add python3-cssselect to correct package [3.3.3-3] - python3-cssselect is not available on F19 [3.3.3-2] - BZ#1075070 add requires and buildrequires for cssselect [3.3.3-1] - 3.3.3 (2014-03-04) - ================== - - Bugs fixed - ---------- - - * LP#1287118: Crash when using Element subtypes with __slots__. - - Other changes - ------------- - - * The internal classes _LogEntry and _Attrib can no longer be - subclassed from Python code. [3.3.2-2] - Add check section #1075070 [3.3.2-1] - 3.3.2 (2014-02-26) - ================== - - Bugs fixed - ---------- - - * The properties resolvers and version, as well as the methods - set_element_class_lookup() and makeelement(), were lost from - iterparse objects. - - * LP#1222132: instances of XMLSchema, Schematron and RelaxNG - did not clear their local error_log before running a validation. - - * LP#1238500: lxml.doctestcompare mixed up 'expected' and 'actual' in - attribute values. - - * Some file I/O tests were failing in MS-Windows due to incorrect temp - file usage. Initial patch by Gabi Davar. - - * LP#910014: duplicate IDs in a document were not reported by DTD - validation. - - * LP#1185332: tostring(method='html') did not use HTML serialisation - semantics for trailing tail text. Initial patch by Sylvain Viollon. - - * LP#1281139: .attrib value of Comments lost its mutation methods - in 3.3.0. Even though it is empty and immutable, it should still - provide the same interface as that returned for Elements. [3.3.2-1] - 3.3.1 (2014-02-12) - ================== - - Bugs fixed - ---------- - - * LP#1014290: HTML documents parsed with parser.feed() failed to find - elements during tag iteration. - - * LP#1273709: Building in PyPy failed due to missing support for - PyUnicode_Compare() and PyByteArray_*() in PyPy's C-API. - - * LP#1274413: Compilation in MSVC failed due to missing 'stdint.h' standard - header file. - - * LP#1274118: iterparse() failed to parse BOM prefixed files. [3.3.0-2] - Update Cython requirement to >= 0.20 [3.3.0-1] - 3.3.0 (2014-01-26) - ================== - - Features added - -------------- - - Bugs fixed - ---------- - - * The heuristic that distinguishes file paths from URLs was tightened - to produce less false negatives. - - Other changes - ------------- - - - 3.3.0beta5 (2014-01-18) - ======================= - - Features added - -------------- - - * The PEP 393 unicode parsing support gained a fallback for wchar strings - which might still be somewhat common on Windows systems. - - Bugs fixed - ---------- - - * Several error handling problems were fixed throughout the code base that - could previously lead to exceptions being silently swallowed or not - properly reported. - - * The C-API function appendChild() is now deprecated as it does not - propagate exceptions (its return type is void). The new function - appendChildToElement() was added as a safe replacement. - - * Passing a string into fromstringlist() raises an exception instead of - parsing the string character by character. - - Other changes - ------------- - - * Document cleanup code was simplified using the new GC features in - Cython 0.20. - - - 3.3.0beta4 (2014-01-12) - ======================= - - Features added - -------------- - - Bugs fixed - ---------- - - * The (empty) value returned by the attrib property of Entity and - Comment objects was mutable. - - * Element class lookup wasn't available for the new pull parsers or when - using a custom parser target. - - * Setting Element attributes on instantiation with both the attrib - argument and keyword arguments could modify the mapping passed as - attrib. - - * LP#1266171: DTDs instantiated from internal/external subsets (i.e. - through the docinfo property) lost their attribute declarations. - - Other changes - ------------- - - * Built with Cython 0.20pre (gitrev 012ae82eb) to prepare support for - Python 3.4. - - - 3.3.0beta3 (2014-01-02) - ======================= - - Features added - -------------- - - * Unicode string parsing was optimised for Python 3.3 (PEP 393). - - Bugs fixed - ---------- - - * HTML parsing of Unicode strings could misdecode the input on some - platforms. - - * Crash in xmlfile() when closing open elements out of order in an error - case. - - Other changes - ------------- - - - 3.3.0beta2 (2013-12-20) - ======================= - - Features added - -------------- - - * iterparse() supports the recover option. - - Bugs fixed - ---------- - - * Crash in iterparse() for HTML parsing. - - * Crash in target parsing with attributes. - - Other changes - ------------- - - * The safety check in the read-only tree implementation (e.g. used by - PythonElementClassLookup) raises a more appropriate - ReferenceError for illegal access after tree disposal instead of - an AssertionError. This should only impact test code that - specifically checks the original behaviour. - - - 3.3.0beta1 (2013-12-12) - ======================= - - Features added - -------------- - - * New option handle_failures in make_links_absolute() and - resolve_base_href() (lxml.html) that enables ignoring or - discarding links that fail to parse as URLs. - - * New parser classes XMLPullParser and HTMLPullParser for - incremental parsing, as implemented for ElementTree in Python 3.4. - - * iterparse() enables recovery mode by default for HTML parsing - (html=True). - - Bugs fixed - ---------- - - * LP#1255132: crash when trying to run validation over non-Element (e.g. - comment or PI). - - * Error messages in the log and in exception messages that originated - from libxml2 could accidentally be picked up from preceding warnings - instead of the actual error. - - * The ElementMaker in lxml.objectify did not accept a dict as - argument for adding attributes to the element it's building. This - works as in lxml.builder now. - - * LP#1228881: repr(XSLTAccessControl) failed in Python 3. - - * Raise ValueError when trying to append an Element to itself or - to one of its own descendants, instead of running into an infinite - loop. - - * LP#1206077: htmldiff discarded whitespace from the output. - - * Compressed plain-text serialisation to file-like objects was broken. - - * lxml.html.formfill: Fix textarea form filling. - The textarea used to be cleared before the new content was set, - which removed the name attribute. - - Other changes - ------------- - - * Some basic API classes use freelists internally for faster - instantiation. This can speed up some iterparse() scenarios, - for example. - - * iterparse() was rewritten to use the new *PullParser - classes internally instead of being a parser itself. [3.2.4-1] - 3.2.4 (2013-11-07) - ================== - - Bugs fixed - ---------- - - * Memory leak when creating an XPath evaluator in a thread. - - * LP#1228881: repr(XSLTAccessControl) failed in Python 3. - - * Raise ValueError when trying to append an Element to itself or - to one of its own descendants. - - * LP#1206077: htmldiff discarded whitespace from the output. - - * Compressed plain-text serialisation to file-like objects was broken. [3.2.3-2] - Add requirement for on python-cssselect for the python2 version [3.2.3-1] - and here's a version 3.2.3. The last release accidentally lost the ability - to work on Python 2.4. There are no other changes over 3.2.2. - - 3.2.2 (2013-07-28) - ================== - - Features added - -------------- - - Bugs fixed - ---------- - - * LP#1185701: spurious XMLSyntaxError after finishing iterparse(). - - * Crash in lxml.objectify during xsi annotation. - - Other changes - ------------- - - * Return values of user provided element class lookup methods are now - validated against the type of the XML node they represent to prevent - API class mismatches. [3.2.1-1] - 3.2.1 (2013-05-11) - ================== - - Features added - -------------- - - * The methods apply_templates() and process_children() of XSLT - extension elements have gained two new boolean options elements_only - and remove_blank_text that discard either all strings or - whitespace-only strings from the result list. - - Bugs fixed - ---------- - - * When moving Elements to another tree, the namespace cleanup mechanism - no longer drops namespace prefixes from attributes for which it finds - a default namespace declaration, to prevent them from appearing as - unnamespaced attributes after serialisation. - - * Returning non-type objects from a custom class lookup method could lead - to a crash. - - * Instantiating and using subtypes of Comments and ProcessingInstructions - crashed. [3.2.0-1] - 3.2.0 (2013-04-28) - ================== - - Features added - -------------- - - Bugs fixed - ---------- - - * LP#690319: Leading whitespace could change the behaviour of the string - parsing functions in lxml.html. - - * LP#599318: The string parsing functions in lxml.html are more robust - in the face of uncommon HTML content like framesets or missing body tags. - Patch by Stefan Seelmann. - - * LP#712941: I/O errors while trying to access files with paths that - contain non-ASCII characters could raise UnicodeDecodeError instead - of properly reporting the IOError. - - * LP#673205: Parsing from in-memory strings disabled network access in the - default parser and made subsequent attempts to parse from a URL fail. - - * LP#971754: lxml.html.clean appends 'nofollow' to 'rel' attributes instead - of overwriting the current value. - - * LP#715687: lxml.html.clean no longer discards scripts that are explicitly - allowed by the user provided whitelist. Patch by Christine Koppelt. - - 3.1.2 (2013-04-12) - ================== - - Bugs fixed - ---------- - - * LP#1136509: Passing attributes through the namespace-unaware API of - the sax bridge (i.e. the handler.startElement() method) failed - with a TypeError. Patch by Mike Bayer. - - * LP#1123074: Fix serialisation error in XSLT output when converting - the result tree to a Unicode string. - - * GH#105: Replace illegal usage of xmlBufLength() in libxml2 2.9.0 - by properly exported API function xmlBufUse(). - - 3.1.1 (2013-03-29) - ================== - - Features added - -------------- - - Bugs fixed - ---------- - - * LP#1160386: Write access to lxml.html.FormElement.fields raised - an AttributeError in Py3. - - * Illegal memory access during cleanup in incremental xmlfile writer. - - Other changes - ------------- - - * The externally useless class lxml.etree._BaseParser was removed - from the module dict. [3.1.0-1] - 3.1.0 (2013-02-10) - ================== - - Features added - -------------- - - * GH#89: lxml.html.clean allows overriding the set of attributes that it - considers 'safe'. Patch by Francis Devereux. - - Bugs fixed - ---------- - - * LP#1104370: copy.copy(el.attrib) raised an exception. It now returns - a copy of the attributes as a plain Python dict. - - * GH#95: When used with namespace prefixes, the el.find*() methods - always used the first namespace mapping that was provided for each - path expression instead of using the one that was actually passed - in for the current run. - - * LP#1092521, GH#91: Fix undefined C symbol in Python runtimes compiled - without threading support. Patch by Ulrich Seidl. - - Other changes - ------------- - - - 3.1beta1 (2012-12-21) - ===================== - - Features added - -------------- - - * New build-time option --with-unicode-strings for Python 2 that - makes the API always return Unicode strings for names and text - instead of byte strings for plain ASCII content. - - * New incremental XML file writing API etree.xmlfile(). - - * E factory in lxml.objectify is callable to simplify the creation of - tags with non-identifier names without having to resort to getattr(). - - Bugs fixed - ---------- - - * When starting from a non-namespaced element in lxml.objectify, searching - for a child without explicitly specifying a namespace incorrectly found - namespaced elements with the requested local name, instead of restricting - the search to non-namespaced children. - - * GH#85: Deprecation warnings were fixed for Python 3.x. - - * GH#33: lxml.html.fromstring() failed to accept bytes input in Py3. - - * LP#1080792: Static build of libxml2 2.9.0 failed due to missing file. - - Other changes - ------------- - - * The externally useless class _ObjectifyElementMakerCaller was - removed from the module API of lxml.objectify. - - * LP#1075622: lxml.builder is faster for adding text to elements with - many children. Patch by Anders Hammarquist. [3.0.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild [3.0.1-1] - 3.0.1 (2012-10-14) - Bugs fixed - - * LP#1065924: Element proxies could disappear during garbage collection - in PyPy without proper cleanup. - * GH#71: Failure to work with libxml2 2.6.x. - * LP#1065139: static MacOS-X build failed in Py3. [3.0-1] - 3.0 (2012-10-08) - ================ - - Features added - -------------- - - Bugs fixed - ---------- - - * End-of-file handling was incorrect in iterparse() when reading from - a low-level C file stream and failed in libxml2 2.9.0 due to its - improved consistency checks. - - Other changes - ------------- - - * The build no longer uses Cython by default unless the generated C files - are missing. To use Cython, pass the option '--with-cython'. To ignore - the fatal build error when Cython is required but not available (e.g. to - run special setup.py commands that do not actually run a build), pass - '--without-cython'. - - - 3.0beta1 (2012-09-26) - ===================== - - Features added - -------------- - - * Python level access to (optional) libxml2 memory debugging features - to simplify debugging of memory leaks etc. - - Bugs fixed - ---------- - - * Fix a memory leak in XPath by switching to Cython 0.17.1. - - * Some tests were adapted to work with PyPy. - - Other changes - ------------- - - * The code was adapted to work with the upcoming libxml2 2.9.0 release. - - - 3.0alpha2 (2012-08-23) - ====================== - - Features added - -------------- - - * The .iter() method of elements now accepts tag arguments like '{*}name' - to search for elements with a given local name in any namespace. With - this addition, all combinations of wildcards now work as expected: - '{ns}name', '{}name', '{*}name', '{ns}*', '{}*' and '{*}*'. Note that - 'name' is equivalent to '{}name', but '*' is '{*}*'. The same change - applies to the .getiterator(), .itersiblings(), .iterancestors(), - .iterdescendants(), .iterchildren() and .itertext() methods, the - strip_attributes(), strip_elements() and strip_tags() functions as well - as the iterparse() function. - - * C14N allows specifying the inclusive prefixes to be promoted to - top-level during exclusive serialisation. - - Bugs fixed - ---------- - - * Passing long Unicode strings into the feed() parser interface failed to - read the entire string. - - Other changes - ------------- - - - 3.0alpha1 (2012-07-31) - ====================== - - Features added - -------------- - - * Initial support for building in PyPy (through cpyext). - - * DTD objects gained an API that allows read access to their - declarations. - - * xpathgrep.py gained support for parsing line-by-line (e.g. - from grep output) and for surrounding the output with a new root - tag. - - * E-factory in lxml.builder accepts subtypes of known data - types (such as string subtypes) when building elements around them. - - * Tree iteration and iterparse() with a selective tag - argument supports passing a set of tags. Tree nodes will be - returned by the iterators if they match any of the tags. - - Bugs fixed - ---------- - - * The .find*() methods in lxml.objectify no longer use XPath - internally, which makes them faster in many cases (especially when - short circuiting after a single or couple of elements) and fixes - some behavioural differences compared to lxml.etree. Note that - this means that they no longer support arbitrary XPath expressions - but only the subset that the ElementPath language supports. - The previous implementation was also redundant with the normal - XPath support, which can be used as a replacement. - - * el.find('*') could accidentally return a comment or processing - instruction that happened to be in the wrong spot. (Same for the - other .find*() methods.) - - * The error logging is less intrusive and avoids a global setup where - possible. - - * Fixed undefined names in html5lib parser. - - * xpathgrep.py did not work in Python 3. - - * Element.attrib.update() did not accept an attrib of - another Element as parameter. - - * For subtypes of ElementBase that make the .text or .tail - properties immutable (as in objectify, for example), inserting text - when creating Elements through the E-Factory feature of the class - constructor would fail with an exception, stating that the text - cannot be modified. - - Other changes - -------------- - - * The code base was overhauled to properly use 'const' where the API - of libxml2 and libxslt requests it. This also has an impact on the - public C-API of lxml itself, as defined in etreepublic.pxd, as - well as the provided declarations in the lxml/includes/ directory. - Code that uses these declarations may have to be adapted. On the - plus side, this fixes several C compiler warnings, also for user - code, thus making it easier to spot real problems again. - - * The functionality of 'lxml.cssselect' was moved into a separate PyPI - package called 'cssselect'. To continue using it, you must install - that package separately. The 'lxml.cssselect' module is still - available and provides the same interface, provided the 'cssselect' - package can be imported at runtime. - - * Element attributes passed in as an attrib dict or as keyword - arguments are now sorted by (namespaced) name before being created - to make their order predictable for serialisation and iteration. - Note that adding or deleting attributes afterwards does not take - that order into account, i.e. setting a new attribute appends it - after the existing ones. - - * Several classes that are for internal use only were removed - from the lxml.etree module dict: - _InputDocument, _ResolverRegistry, _ResolverContext, _BaseContext, - _ExsltRegExp, _IterparseContext, _TempStore, _ExceptionContext, - __ContentOnlyElement, _AttribIterator, _NamespaceRegistry, - _ClassNamespaceRegistry, _FunctionNamespaceRegistry, - _XPathFunctionNamespaceRegistry, _ParserDictionaryContext, - _FileReaderContext, _ParserContext, _PythonSaxParserTarget, - _TargetParserContext, _ReadOnlyProxy, _ReadOnlyPIProxy, - _ReadOnlyEntityProxy, _ReadOnlyElementProxy, _OpaqueNodeWrapper, - _OpaqueDocumentWrapper, _ModifyContentOnlyProxy, - _ModifyContentOnlyPIProxy, _ModifyContentOnlyEntityProxy, - _AppendOnlyElementProxy, _SaxParserContext, _FilelikeWriter, - _ParserSchemaValidationContext, _XPathContext, - _XSLTResolverContext, _XSLTContext, _XSLTQuotedStringParam - - * Several internal classes can no longer be inherited from: - _InputDocument, _ResolverRegistry, _ExsltRegExp, _ElementUnicodeResult, - _IterparseContext, _TempStore, _AttribIterator, _ClassNamespaceRegistry, - _XPathFunctionNamespaceRegistry, _ParserDictionaryContext, - _FileReaderContext, _PythonSaxParserTarget, _TargetParserContext, - _ReadOnlyPIProxy, _ReadOnlyEntityProxy, _OpaqueDocumentWrapper, - _ModifyContentOnlyPIProxy, _ModifyContentOnlyEntityProxy, - _AppendOnlyElementProxy, _FilelikeWriter, _ParserSchemaValidationContext, - _XPathContext, _XSLTResolverContext, _XSLTContext, - _XSLTQuotedStringParam, _XSLTResultTree, _XSLTProcessingInstruction [2.3.5-1] - Bugs fixed - - * Crash when merging text nodes in element.remove(). - * Crash in sax/target parser when reporting empty doctype. [2.3.4-1] - Bugs fixed - - * Crash when building an nsmap (Element property) with empty namespace - URIs. - * Crash due to race condition when errors (or user messages) occur during - threaded XSLT processing (or compilation). - * XSLT stylesheet compilation could ignore compilation errors. [2.3.3-4] - rebuild for https://fedoraproject.org/wiki/Features/Python_3.3 [2.3.3-3] - remove rhel logic from with_python3 conditional [2.3.3-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild [2.3.3-1] - 2.3.3 (2012-01-04) - Features added - - * lxml.html.tostring() gained new serialisation options with_tail and - doctype. - - Bugs fixed - - * Fixed a crash when using iterparse() for HTML parsing and requesting - start events. - * Fixed parsing of more selectors in cssselect. Whitespace before pseudo- - elements and pseudo-classes is significant as it is a descendant - combinator. 'E :pseudo' should parse the same as 'E *:pseudo', not - 'E:pseudo'. Patch by Simon Sapin. - * lxml.html.diff no longer raises an exception when hitting 'img' tags - without 'src' attribute. [2.3.2-1] - 2.3.2 (2011-11-11) - Features added - - * lxml.objectify.deannotate() has a new boolean option - cleanup_namespaces to remove the objectify namespace declarations - (and generally clean up the namespace declarations) after removing - the type annotations. - * lxml.objectify gained its own SubElement() function as a copy of - etree.SubElement to avoid an otherwise redundant import of - lxml.etree on the user side. - - Bugs fixed - - * Fixed the 'descendant' bug in cssselect a second time (after a first - fix in lxml 2.3.1). The previous change resulted in a serious - performance regression for the XPath based evaluation of the - translated expression. Note that this breaks the usage of some - of the generated XPath expressions as XSLT location paths that - previously worked in 2.3.1. - * Fixed parsing of some selectors in cssselect. Whitespace after - combinators '>', '+' and '~' is now correctly ignored. Previously - it was parsed as a descendant combinator. For example, 'div> .foo' - was parsed the same as 'div>* .foo' instead of 'div>.foo'. Patch by - Simon Sapin. [2.3.1-1] - Features added - -------------- - - * New option kill_tags in lxml.html.clean to remove specific - tags and their content (i.e. their whole subtree). - - * pi.get() and pi.attrib on processing instructions to parse - pseudo-attributes from the text content of processing instructions. - - * lxml.get_include() returns a list of include paths that can be - used to compile external C code against lxml.etree. This is - specifically required for statically linked lxml builds when code - needs to compile against the exact same header file versions as lxml - itself. - - * Resolver.resolve_file() takes an additional option - close_file that configures if the file(-like) object will be - closed after reading or not. By default, the file will be closed, - as the user is not expected to keep a reference to it. - - Bugs fixed - ---------- - - * HTML cleaning didn't remove 'data:' links. - - * The html5lib parser integration now uses the 'official' - implementation in html5lib itself, which makes it work with newer - releases of the library. - - * In lxml.sax, endElementNS() could incorrectly reject a plain - tag name when the corresponding start event inferred the same plain - tag name to be in the default namespace. - - * When an open file-like object is passed into parse() or - iterparse(), the parser will no longer close it after use. This - reverts a change in lxml 2.3 where all files would be closed. It is - the users responsibility to properly close the file(-like) object, - also in error cases. - - * Assertion error in lxml.html.cleaner when discarding top-level elements. - - * In lxml.cssselect, use the xpath 'A//B' (short for - 'A/descendant-or-self::node()/B') instead of 'A/descendant::B' for the - css descendant selector ('A B'). This makes a few edge cases to be - consistent with the selector behavior in WebKit and Firefox, and makes - more css expressions valid location paths (for use in xsl:template - match). - - [tags no longer show up in the - collected form values. - - [values to/from a multiple select form - field properly selects them and unselects them. - - Other changes - -------------- - - * Static builds can specify the download directory with the - --download-dir option. [2.3-1] - 2.3 (2011-02-06) - ================ - - Features added - -------------- - - * When looking for children, lxml.objectify takes '{}tag' as - meaning an empty namespace, as opposed to the parent namespace. - - Bugs fixed - ---------- - - * When finished reading from a file-like object, the parser - immediately calls its .close() method. - - * When finished parsing, iterparse() immediately closes the input - file. - - * Work-around for libxml2 bug that can leave the HTML parser in a - non-functional state after parsing a severly broken document (fixed - in libxml2 2.7.8). - - * marque tag in HTML cleanup code is correctly named marquee. - - Other changes - -------------- - - * Some public functions in the Cython-level C-API have more explicit - return types. - - 2.3beta1 (2010-09-06) - ===================== - - Features added - -------------- - - Bugs fixed - ---------- - - * Crash in newer libxml2 versions when moving elements between - documents that had attributes on replaced XInclude nodes. - - * XMLID() function was missing the optional parser and - base_url parameters. - - * Searching for wildcard tags in iterparse() was broken in Py3. - - * lxml.html.open_in_browser() didn't work in Python 3 due to the - use of os.tempnam. It now takes an optional 'encoding' parameter. - - Other changes - -------------- - - 2.3alpha2 (2010-07-24) - ====================== - - Features added - -------------- - - Bugs fixed - ---------- - - * Crash in XSLT when generating text-only result documents with a - stylesheet created in a different thread. - - Other changes - -------------- - - * repr() of Element objects shows the hex ID with leading 0x - (following ElementTree 1.3). - - 2.3alpha1 (2010-06-19) - ====================== - - Features added - -------------- - - * Keyword argument namespaces in lxml.cssselect.CSSSelector() - to pass a prefix-to-namespace mapping for the selector. - - * New function lxml.etree.register_namespace(prefix, uri) that - globally registers a namespace prefix for a namespace that newly - created Elements in that namespace will use automatically. Follows - ElementTree 1.3. - - * Support 'unicode' string name as encoding parameter in - tostring(), following ElementTree 1.3. - - * Support 'c14n' serialisation method in ElementTree.write() and - tostring(), following ElementTree 1.3. - - * The ElementPath expression syntax (el.find*()) was extended to - match the upcoming ElementTree 1.3 that will ship in the standard - library of Python 3.2/2.7. This includes extended support for - predicates as well as namespace prefixes (as known from XPath). - - * During regular XPath evaluation, various ESXLT functions are - available within their namespace when using libxslt 1.1.26 or later. - - * Support passing a readily configured logger instance into - PyErrorLog, instead of a logger name. - - * On serialisation, the new doctype parameter can be used to - override the DOCTYPE (internal subset) of the document. - - * New parameter output_parent to XSLTExtension.apply_templates() - to append the resulting content directly to an output element. - - * XSLTExtension.process_children() to process the content of the - XSLT extension element itself. - - * ISO-Schematron support based on the de-facto Schematron reference - 'skeleton implementation'. - - * XSLT objects now take XPath object as __call__ stylesheet - parameters. - - * Enable path caching in ElementPath (el.find*()) to avoid parsing - overhead. - - * Setting the value of a namespaced attribute always uses a prefixed - namespace instead of the default namespace even if both declare the - same namespace URI. This avoids serialisation problems when an - attribute from a default namespace is set on an element from a - different namespace. - - * XSLT extension elements: support for XSLT context nodes other than - elements: document root, comments, processing instructions. - - * Support for strings (in addition to Elements) in node-sets returned - by extension functions. - - * Forms that lack an action attribute default to the base URL of - the document on submit. - - * XPath attribute result strings have an attrname property. - - * Namespace URIs get validated against RFC 3986 at the API level - (required by the XML namespace specification). - - * Target parsers show their target object in the .target property - (compatible with ElementTree). - - Bugs fixed - ---------- - - * API is hardened against invalid proxy instances to prevent crashes - due to incorrectly instantiated Element instances. - - * Prevent crash when instantiating CommentBase and friends. - - * Export ElementTree compatible XML parser class as - XMLTreeBuilder, as it is called in ET 1.2. - - * ObjectifiedDataElements in lxml.objectify were not hashable. They - now use the hash value of the underlying Python value (string, - number, etc.) to which they compare equal. - - * Parsing broken fragments in lxml.html could fail if the fragment - contained an orphaned closing '</div>' tag. - - * Using XSLT extension elements around the root of the output document - crashed. - - * lxml.cssselect did not distinguish between x[attr='val'] and - x [attr='val'] (with a space). The latter now matches the - attribute independent of the element. - - * Rewriting multiple links inside of HTML text content could end up - replacing unrelated content as replacements could impact the - reported position of subsequent matches. Modifications are now - simplified by letting the iterlinks() generator in lxml.html - return links in reversed order if they appear inside the same text - node. Thus, replacements and link-internal modifications no longer - change the position of links reported afterwards. - - * The .value attribute of textarea elements in lxml.html did - not represent the complete raw value (including child tags etc.). It - now serialises the complete content on read and replaces the - complete content by a string on write. - - * Target parser didn't call .close() on the target object if - parsing failed. Now it is guaranteed that .close() will be - called after parsing, regardless of the outcome. - - Other changes - ------------- - - * Official support for Python 3.1.2 and later. - - * Static MS Windows builds can now download their dependencies - themselves. - - * Element.attrib no longer uses a cyclic reference back to its - Element object. It therefore no longer requires the garbage - collector to clean up. - - * Static builds include libiconv, in addition to libxml2 and libxslt. [2.2.8-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild [2.2.8-3] - rebuild for newer python3 [2.2.8-2] - Rebuild for newer libxml2 [2.2.8-1] - 2.2.8 (2010-09-02) - Bugs fixed - - * Crash in newer libxml2 versions when moving elements between - documents that had attributes on replaced XInclude nodes. - * Import fix for urljoin in Python 3.1+. [2.2.7-3] - Don't byte-compile files during install because setup.py doesn't properly byte compile for Python version 3.2 [2.2.7-2] - Rebuild for Python 3.2 [2.2.7-1] - 2.2.7 (2010-07-24) - Bugs fixed - - * Crash in XSLT when generating text-only result documents with a stylesheet created in a different thread. [2.2.6-4] - actually add the patch this time [2.2.6-3] - workaround for 2to3 issue (patch 0; bug 600036) [2.2.6-2] - Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild [2.2.6-1] - 2.2.6 (2010-03-02) - - Bugs fixed - - * Fixed several Python 3 regressions by building with Cython 0.11.3. [2.2.5-1] - 2.2.5 (2010-02-28) - - Features added - - * Support for running XSLT extension elements on the input root node - (e.g. in a template matching on '/'). - - Bugs fixed - - * Crash in XPath evaluation when reading smart strings from a document - other than the original context document. - * Support recent versions of html5lib by not requiring its XHTMLParser - in htmlparser.py anymore. - * Manually instantiating the custom element classes in lxml.objectify - could crash. - * Invalid XML text characters were not rejected by the API when they - appeared in unicode strings directly after non-ASCII characters. - * lxml.html.open_http_urllib() did not work in Python 3. - * The functions strip_tags() and strip_elements() in lxml.etree did - not remove all occurrences of a tag in all cases. - * Crash in XSLT extension elements when the XSLT context node is not - an element. [2.2.4-2] - update to current python3 guidelines - be more explicit in %files - use %global and not %define - create docs subpackage - add stripping 3-byte Byte Order Marker from src/lxml/tests/test_errors.py to get 2to3 to work (dmalcolm) - fixes FTBFS (#564674) [2.2.4-1] - Update to 2.2.4 - Enable Python 3 subpackage [2.2.3-3] - F-13's python build chain must be a little different... [2.2.3-2] - Add option to build a Python 3 subpackage, original patch by David Malcolm [2.2.3-1] - 2.2.3 (2009-10-30) - Bugs fixed - - * The resolve_entities option did not work in the incremental feed - parser. - * Looking up and deleting attributes without a namespace could hit a - namespaced attribute of the same name instead. - * Late errors during calls to SubElement() (e.g. attribute related - ones) could leave a partially initialised element in the tree. - * Modifying trees that contain parsed entity references could result - in an infinite loop. - * ObjectifiedElement.__setattr__ created an empty-string child element - when the attribute value was rejected as a non-unicode/non-ascii - string - * Syntax errors in lxml.cssselect could result in misleading error - messages. - * Invalid syntax in CSS expressions could lead to an infinite loop in - the parser of lxml.cssselect. - * CSS special character escapes were not properly handled in - lxml.cssselect. - * CSS Unicode escapes were not properly decoded in lxml.cssselect. - * Select options in HTML forms that had no explicit value attribute - were not handled correctly. The HTML standard dictates that their - value is defined by their text content. This is now supported by - lxml.html. - * XPath raised a TypeError when finding CDATA sections. This is now - fully supported. - * Calling help(lxml.objectify) didn't work at the prompt. - * The ElementMaker in lxml.objectify no longer defines the default - namespaces when annotation is disabled. - * Feed parser failed to honour the 'recover' option on parse errors. - * Diverting the error logging to Python's logging system was broken. [2.2.2-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild [2.2.2-1] - 2.2.2 (2009-06-21) - Features added - - * New helper functions strip_attributes(), strip_elements(), - strip_tags() in lxml.etree to remove attributes/subtrees/tags - from a subtree. - - Bugs fixed - - * Namespace cleanup on subtree insertions could result in missing - namespace declarations (and potentially crashes) if the element - defining a namespace was deleted and the namespace was not used - by the top element of the inserted subtree but only in deeper - subtrees. - * Raising an exception from a parser target callback didn't always - terminate the parser. - * Only {true, false, 1, 0} are accepted as the lexical representation - for BoolElement ({True, False, T, F, t, f} not any more), restoring - lxml <= 2.0 behaviour. [2.2.1-1] - 2.2.1 (2009-06-02) - Features added - - * Injecting default attributes into a document during XML Schema - validation (also at parse time). - * Pass huge_tree parser option to disable parser security restrictions - imposed by libxml2 2.7. - - Bugs fixed - - * The script for statically building libxml2 and libxslt didn't work - in Py3. - * XMLSchema() also passes invalid schema documents on to libxml2 for - parsing (which could lead to a crash before release 2.6.24). [2.2-1] - 2.2 (2009-03-21) - Features added - - * Support for standalone flag in XML declaration through - tree.docinfo.standalone and by passing standalone=True/False on - serialisation. - - Bugs fixed - - * Crash when parsing an XML Schema with external imports from a - filename. [2.2-0.8.beta4] - 2.2beta4 (2009-02-27) - Features added - - * Support strings and instantiable Element classes as child arguments - to the constructor of custom Element classes. - * GZip compression support for serialisation to files and file-like - objects. - - Bugs fixed - - * Deep-copying an ElementTree copied neither its sibling PIs and - comments nor its internal/external DTD subsets. - * Soupparser failed on broken attributes without values. - * Crash in XSLT when overwriting an already defined attribute using - xsl:attribute. - * Crash bug in exception handling code under Python 3. This was due to - a problem in Cython, not lxml itself. - * lxml.html.FormElement._name() failed for non top-level forms. - * TAG special attribute in constructor of custom Element classes was - evaluated incorrectly. - - Other changes - - * Official support for Python 3.0.1. - * Element.findtext() now returns an empty string instead of None for - Elements without text content. [2.2-0.7.beta3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild [2.2-0.6.beta3] - 2.2beta3 (2009-02-17) - Features added - - * XSLT.strparam() class method to wrap quoted string parameters that - require escaping. - - Bugs fixed - - * Memory leak in XPath evaluators. - * Crash when parsing indented XML in one thread and merging it with - other documents parsed in another thread. - * Setting the base attribute in lxml.objectify from a unicode string - failed. - * Fixes following changes in Python 3.0.1. - * Minor fixes for Python 3. - - Other changes - - * The global error log (which is copied into the exception log) is now - local to a thread, which fixes some race conditions. - * More robust error handling on serialisation. [2.2-0.5.beta2] - 2.2beta2 (2009-01-25) - Bugs fixed - - * Potential memory leak on exception handling. This was due to a - problem in Cython, not lxml itself. - * iter_links (and related link-rewriting functions) in lxml.html would - interpret CSS like url('link') incorrectly (treating the quotation - marks as part of the link). - * Failing import on systems that have an io module. [2.2-0.4.beta1] - 2.2beta1 (2008-12-12) - Features added - - * Allow lxml.html.diff.htmldiff to accept Element objects, - not just HTML strings. - - Bugs fixed - - * Crash when using an XPath evaluator in multiple threads. - * Fixed missing whitespace before Link:... in lxml.html.diff. - - Other changes - - * Export lxml.html.parse. [2.2-0.3.alpha1] - Rebuild for Python 2.6 [2.2-0.2.alpha1] - Don't forget to upload the sources! [2.2-0.1.alpha1] - 2.2alpha1 (2008-11-23) - Features added - - * Support for XSLT result tree fragments in XPath/XSLT extension - functions. - * QName objects have new properties namespace and localname. - * New options for exclusive C14N and C14N without comments. - * Instantiating a custom Element classes creates a new Element. - - Bugs fixed - - * XSLT didn't inherit the parse options of the input document. - * 0-bytes could slip through the API when used inside of Unicode - strings. - * With lxml.html.clean.autolink, links with balanced parenthesis, that - end in a parenthesis, will be linked in their entirety (typical with - Wikipedia links). [2.1.3-1] - 2.1.3 (2008-11-17) - Bugs fixed - - * Ref-count leaks when lxml enters a try-except statement while an - outside exception lives in sys.exc_*(). This was due to a problem - in Cython, not lxml itself. - * Parser Unicode decoding errors could get swallowed by other - exceptions. - * Name/import errors in some Python modules. - * Internal DTD subsets that did not specify a system or public ID - were not serialised and did not appear in the docinfo property - of ElementTrees. - * Fix a pre-Py3k warning when parsing from a gzip file in Py2.6. - * Test suite fixes for libxml2 2.7. - * Resolver.resolve_string() did not work for non-ASCII byte strings. - * Resolver.resolve_file() was broken. - * Overriding the parser encoding didn't work for many encodings. [2.1.2-1] - 2.1.2 (2008-09-05) - Features added - - * lxml.etree now tries to find the absolute path name of files when - parsing from a file-like object. This helps custom resolvers when - resolving relative URLs, as lixbml2 can prepend them with the path of - the source document. - - Bugs fixed - - * Memory problem when passing documents between threads. - * Target parser did not honour the recover option and raised an exception - instead of calling .close() on the target. [2.1.1-1] - Update to 2.1.1 [2.0.7-1] - Update to 2.0.7 - Update download URL [2.0.6-1] - Update to 2.0.6 [2.0.5-1] - Update to 2.0.5 [2.0.3-1] - Update to 2.0.3 [2.0.2-1] - Update to 2.0.2 [2.0.1-1] - Update to 2.0.1 [1.3.6-2] - Autorebuild for GCC 4.3 [1.3.6-1] - Update to 1.3.6. [1.3.5-1] - Update to 1.3.5. [1.3.4-1] - Update to 1.3.4. [1.3.3-3] - Rebuild for selinux ppc32 issue. [1.3.3-2] - BR python-setuptools-devel [1.3.3-1] - Update to 1.3.3 [1.1.2-1] - Update to 1.1.2 [1.0.3-3] - Rebuild for new Python [1.0.3-2] - Rebuild for FC6 [1.0.3-1] - Update to new upstream version [1.0.2-2] - Include, don't ghost .pyo files per new guidelines [1.0.2-1] - Update to new upstream release [1.0.1-1] - Update to new upstream release [1.0-1] - Update to new upstream 1.0 release [0.9.1-3] - Add python-setuptools to BuildRequires - Use dist tag [0.9.1-2] - Fix summary and description [0.9.1-1] - update the new upstream version - remove Pyrex build req [0.8-1] - Initial package python-markupsafe python-ply python-psutil python-psycopg2 [2.8.4-4] - Exclude unsupported i686 arch [2.8.4-3] - Fix shebang mangling - Don't ship the debug module, it is not needed and was not shipped in RHEL8 either [2.8.4-2] - Adjusted for Python 3.8 module in RHEL 8 [2.8.4-1] - New upstream version 2.8.4 - bcond check renamed to bcond tests [2.8.3-2] - Package python2-psycopg2 removed on Fedora 32+ (rhbz#1761216) [2.8.3-1] - Update to 2.8.3 [2.7.7-5] - Package python2-psycopg2-debug removed on Fedora 32+ (rhbz#1747670) [2.7.7-4] - Rebuilt for Python 3.8 [2.7.7-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild [2.7.7-2] - Fixes for 3.8.0a4 rebuild Resolves: 1693641 [2.7.7-1] - update to the latest upstream release [2.7.5-6] - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild [2.7.5-5] - prepare --without=debugrpms option (rhbz#1635166) - get the python2 packages back for a while (rhbz#1634973) [2.7.5-4] - drop python2* on f30+ (rhbz#1634973) - use proper compiler/linker flags (rhbz#1631713) - correct the (build)requires [2.7.5-3] - standalone installable doc subpackage [2.7.5-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild [2.7.5-2] - Rebuilt for Python 3.7 [2.7.5-1] - rebase to latest upstream release, per release notes: http://initd.org/psycopg/articles/2018/06/17/psycopg-275-released/ [2.7.4-5] - Rebuilt for Python 3.7 [2.7.4-4] - fix for python 3.7, by mhroncok [2.7.4-3] - depend on postgresql-test-rpm-macros [2.7.4-2] - re-enable testsuite [2.7.4-1] - rebase to latest upstream release, per release notes: http://initd.org/psycopg/articles/2018/02/08/psycopg-274-released/ [2.7.3.2-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [2.7.3.2-2] - treat python3/python2 equally [2.7.3.2-1] - update to 2.7.3.2, per release notes: http://initd.org/psycopg/articles/2017/10/24/psycopg-2732-released/ [2.7.3.1-1] - http://initd.org/psycopg/articles/2017/08/26/psycopg-2731-released/ [2.7.3-1] - rebase to latest upstream release, per release notes: http://initd.org/psycopg/articles/2017/07/24/psycopg-273-released/ [2.7.2-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild [2.7.2-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [2.7.2-1] - rebase to latest upstream release, per release notes: http://initd.org/psycopg/articles/2017/07/22/psycopg-272-released/ [2.7.1-1] - rebase to latest upstream release, per release notes: http://initd.org/psycopg/articles/2017/03/01/psycopg-271-released/ - fix testsuite [2.7-1] - rebase to latest upstream release, per release notes: http://initd.org/psycopg/articles/2017/03/01/psycopg-27-released/ - enable testsuite during build, and package it [2.6.2-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [2.6.2-3] - Rebuild for Python 3.6 [2.6.2-2] - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages [2.6.2-1] - rebase (rhbz#1353545), per release notes http://initd.org/psycopg/articles/2016/07/07/psycopg-262-released/ [2.6.1-6] - provide python2-psycopg2 (rhbz#1306025) - cleanup obsoleted packaging stuff [2.6.1-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [2.6.1-4] - again bump for new Python 3.5, not build previously? - fix rpmlint issues - no pyo files with python 3.5 * Tue Nov 10 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - Rebuilt for https://fedoraproject.org/wiki/Changes/python3.5 [2.6.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [2.6.1-1] - Update to 2.6.1 [2.6-1] - Update to 2.6, per changes described at: http://www.psycopg.org/psycopg/articles/2015/02/09/psycopg-26-and-255-released/ [2.5.4-1] - Update to 2.5.4, per changes described at: http://www.psycopg.org/psycopg/articles/2014/08/30/psycopg-254-released [2.5.3-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild [2.5.3-1] - rebase to most recent upstream version, per release notes: http://www.psycopg.org/psycopg/articles/2014/05/13/psycopg-253-released/ [2.5.2-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild [2.5.2-2] - Rebuilt for https://fedoraproject.org/wiki/Changes/Python_3.4 [2.5.2-1] - Update to 2.5.2, per changes described at: http://www.psycopg.org/psycopg/articles/2014/01/07/psycopg-252-released [2.5.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild [2.5.1-1] - rebase to 2.5.1 [2.5-1] - Update to 2.5, per changes described at: http://www.psycopg.org/psycopg/articles/2013/04/07/psycopg-25-released/ [2.4.5-7] - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild [2.4.5-6] - rebuild for https://fedoraproject.org/wiki/Features/Python_3.3 [2.4.5-5] - generalize python 3 fileglobbing to work with both Python 3.2 and 3.3 [2.4.5-4] - replace 'python3.2dmu' with 'python3-debug'; with_python3 fixes [2.4.5-3] - add with_python3 conditional [2.4.5-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild [2.4.5-1] - Update to 2.4.5 [2.4.4-1] - Update to 2.4.4 - More specfile neatnik-ism [2.4.2-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild [2.4.2-2] - Fix mistaken %dir marking on python3 files, per Dan Horak [2.4.2-1] - Update to 2.4.2 Related: #711095 - Some neatnik specfile cleanups [2.4-0.beta2] - 2.4.0-beta2 - add python 2 debug, python3 (optimized) and python3-debug subpackages [2.3.2-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild [2.3.2-1] - Update to 2.3.2 - Clean up a few rpmlint warnings [2.2.2-3] - Fix incorrect (and invalid) License: tag. [2.2.2-2] - Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild [2.2.2-1] - Update to 2.2.2 [2.2.1-1] - Update to 2.2.1 - Improve description for 2.2 features. - Changelog for 2.2.0 is: http://initd.org/pub/software/psycopg/ChangeLog-2.2 [2.0.14-1] - Update to 2.0.14 - Update license (upstream switched to LGPL3) [2.0.13-2] - Fix rpmlint complaints: remove unneeded explicit Requires:, use Conflicts: instead of bogus Obsoletes: to indicate lack of zope subpackage [2.0.13-1] - Update to 2.0.13 [2.0.12-1] - Update to 2.0.12 [2.0.11-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild [2.0.11-1] - Update to 2.0.11 [2.0.10-1] - Update to 2.0.10 [2.0.9-1] - Update to 2.0.9 [2.0.8-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild [2.0.8-2] - Rebuild for Python 2.6 [2.0.8-1] - Update to 2.0.8 [2.0.8-1] - Update to 2.0.8 [2.0.7-3] - Rebuild for Python 2.6 [2.0.7-2] - fix license tags [2.0.7-1] - Update to 2.0.7 [2.0.6-4.1] - Autorebuild for GCC 4.3 [2.0.6-3.1] - Rebuilt against PostgreSQL 8.3 [2.0.6-3] - Rebuild for rawhide changes [2.0.6-2] - Rebuild for selinux ppc32 issue. [2.0.6-1] - Update to 2.0.6 [2.0.5.1-8] - Disabled zope package temporarily. [2.0.5.1-7] - Rebuilt [2.0.5.1-5] - Bumped up spec version [2.0.5.1-4] - Rebuilt for PostgreSQL 8.2.0 [2.0.5.1-3] - Rebuilt [2.0.5.1-2] - Remove ghost'ing, per Python Packaging Guidelines [2.0.5.1-1] - Update to 2.0.5.1 [2.0.3-3] - Fixed zope package dependencies and macro definition, per bugzilla review (#199784) - Fixed zope package directory ownership, per bugzilla review (#199784) - Fixed cp usage for zope subpackage, per bugzilla review (#199784) [2.0.3-2] - Fixed 64 bit builds - Fixed license - Added Zope subpackage - Fixed typo in doc description - Added macro for zope subpackage dir [2.0.3-1] - Update to 2.0.3 - Fixed spec file, per bugzilla review (#199784) [2.0.2-3] - Removed python dependency, per bugzilla review. (#199784) - Changed doc package group, per bugzilla review. (#199784) - Replaced dos2unix with sed, per guidelines and bugzilla review (#199784) - Fix changelog dates [2.0.2-2] - Added dos2unix to buildrequires - removed python related part from package name [2.0.2-1] - Fix rpmlint errors, including dos2unix solution - Re-engineered spec file * Mon Jan 23 2006 - Devrim GUNDUZ <devrim@commandprompt.com> - First 2.0.X build * Mon Jan 23 2006 - Devrim GUNDUZ <devrim@commandprompt.com> - Update to 1.2.21 * Tue Dec 06 2005 - Devrim GUNDUZ <devrim@commandprompt.com> - Initial release for 1.1.20 python-pycparser [2.19-3] - Exclude unsupported i686 arch [2.19-2] - Adjusted for Python 3.8 module in RHEL 8 [2.19-1] - New usptream version 2.19 [2.14-23] - Subpackage python2-ply has been removed See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal [2.14-22] - Rebuilt for Python 3.8.0rc1 (#1748018) [2.14-21] - Rebuilt for Python 3.8 [2.14-20] - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild [2.14-19] - Avoid invalid unicode escape sequences in Py3.8 [2.14-18] - Add build dependency on cpp for unit tests - Add dependency on python-ply version to prevent 'yacc table file version is out of date' - Fixes RHBZ#1668230 [2.14-17] - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild [2.14-16] - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild [2.14-15] - Rebuilt for Python 3.7 [2.14-14] - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) [2.14-13] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [2.14-12] - Cleanup spec file conditionals [2.14-11] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [2.14-10] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [2.14-9] - Ship python2-pycparser - Modernize spec [2.14-8] - Rebuild for Python 3.6 [2.14-7] - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages [2.14-6] - rebuild to update yacctab.py [2.14-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [2.14-4] - Rebuilt for Python3.5 rebuild [2.14-3] - Rebuild alongside python-ply 3.6 [2.14-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [2.14-1] - Update to 2.14 [2.10-1] - Update to latest upstream. [2.09.1-9] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild [2.09.1-8] - Rebuilt for https://fedoraproject.org/wiki/Changes/Python_3.4 [2.09.1-7] - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild [2.09.1-6] - Added Python 3 support. [2.09.1-5] - Renumbered Fedora-specific Patch1 to Patch100 - Added new Patch1 to fix table generation when the build system already has a python-pycparser package installed. - Submitted Patch0 and Patch1 as upstream issues. - Added comments about patches. [2.09.1-4] - Upstream repository is now on github. - Fix rpmlint strange-permission complaint. - Rename patches, Source1 to all start with pycparser-{version}, to simplify updating patches for future upstream releases. [2.09.1-3] - Run _build_tables.py to build the lextab.py and yacctab.py; otherwise they have to be regenerated at runtime for no benefit. [2.09.1-2] - remove the embedded ply code [2.09.1-1] - upstream 2.09.1 python-PyMySQL [0.10.1-1] - Rebase to 0.10 version to add support for MariaDB ed25519 authentication mechanism [0.9.3-3] - Exclude unsupported i686 arch [0.9.3-2] - Adjusted for Python 3.8 module in RHEL 8 [0.9.3-1] - New upstream version 0.9.3 [0.9.2-7] - Rebuilt for Python 3.8.0rc1 (#1748018) [0.9.2-6] - Rebuilt for Python 3.8 [0.9.2-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild [0.9.2-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild [0.9.2-3] - Remove Python 2 subpackage. [0.9.2-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild [0.9.2-1] - Update to 0.9.2 [0.9.1-1] - Update to 0.9.1 [0.9.0-2] - Rebuilt for Python 3.7 [0.9.0-1] - Update to 0.9.0 [0.8.1-2] - Rebuilt for Python 3.7 [0.8.1-1] - Update to 0.8.1 [0.8.0-5] - Rename python3 subpackage to python34 [0.8.0-4] - make spec file compatible with epel7 - remove conditionals and always build for Python 3 [0.8.0-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [0.8.0-2] - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) [0.8.0-1] - Update to 0.8.0 [0.7.11-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [0.7.11-1] - Update to 0.7.11 [0.7.10-1] - Update to 0.7.10 [0.7.9-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [0.7.9-3] - Rebuild for Python 3.6 [0.7.9-2] - cherrypick commit 755dfdc upstream to allow bind before connect Related: rhbz#1378008 [0.7.9-1] - Update to 0.7.9 [0.6.7-6] - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages [0.6.7-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [0.6.7-4] - Correct installation problems due to Requires: mariadb [0.6.7-3] - Rebuilt for python 3.5 [0.6.7-2] - Drop unnecessary mariadb requirement - Add python3 conditionals in order to rebuild it in EL7 [0.6.7-1] - Update to 0.6.7 [0.6.6-4] - Use %license in %files [0.6.6-3] - Move python2 package in its own subpackage - Add provides [0.6.6-2] - Add Provides: python2-PyMySQL - Remove usage of %py3dir [0.6.6-1] - Update to 0.6.6 [0.6.2-1] - Initial packaging python-pysocks python-requests [2.22.0-10] - Security fix for CVE-2023-32681 Resolves: rhbz#2209469 [2.22.0-9] - Exclude unsupported i686 arch [2.22.0-8] - Adjusted for Python 3.8 module in RHEL 8 [2.22.0-7] - Remove the python2 subpackage (rhbz#1761787) [2.22.0-6] - Python 2: Remove tests and test dependencies [2.22.0-5] - Rebuilt for Python 3.8 [2.22.0-4] - Bootstrap for Python 3.8 [2.22.0-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild [2.22.0-2] - Add minimum requirement for chardet and urllib3 [2.22.0-1] - Update to v2.22.0 [2.21.0-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild [2.21.0-1] - Update to v2.21.0 - Don't rely on certifi being patched properly to use the system CA bundle [2.20.0-2] - No pytest-httpbin for Python 2 [2.20.0-1] - Update to v2.20.0 [2.19.1-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild [2.19.1-2] - Rebuilt for Python 3.7 [2.19.1-1] - Update to v2.19.1 (rhbz 1591531) [2.19.0-2] - Bootstrap for Python 3.7 [2.19.0-1] - Update to v2.19.0 (rhbz 1590508) [2.18.4-6] - Don't print runtime warning about urllib3 v1.23 (rhbz 1589306) [2.18.4-5] - Allow urllib3 v1.23 (rhbz 1586311) [2.18.4-4] - Stop injecting PyOpenSSL (rhbz 1567862) [2.18.4-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [2.18.4-2] - Fix ambiguous Python 2 dependency declarations (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) [2.18.4-1] - Update to 2.18.4 [2.18.2-1] - Update to 2.18.2 [2.18.1-2] - Drop the dependency on certifi in setup.py [2.18.1-1] - Update to 2.18.1 (#1449432) - Remove tests that require non-local network (#1450608) [2.14.2-1] - Update to 2.14.2 (#1449432) - Switch to autosetup to apply patches [2.13.0-2] - Don't run tests when building as a module [2.13.0-1] - Update to 2.13.0 (#1418138) [2.12.4-3] - Include and enable tests (now python-pytest-httpbin is packaged) [2.12.4-2] - Rebuild for Python 3.6 again. [2.12.4-1] - Update to 2.12.4. Fixes #1404680 [2.12.3-2] - Rebuild for Python 3.6 [2.12.3-1] - Update to 2.12.3. Fixes #1400601 [2.12.2-1] - Update to 2.12.2 [2.12.1-2] - Backport #3713. Fixes #1397149 [2.12.1-1] - Update to 2.12.1. Fixes #1395469 - Unbundle idna, a new upstream dependency [2.11.1-1] - Update to 2.11.1. Fixes #1370814 [2.11.0-1] - Update to 2.11.0. Fixes #1365332 [2.10.0-4] - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages [2.10.0-3] - Update python2 packaging. [2.10.0-2] - Fix python2 subpackage to comply with guidelines. [2.9.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [2.9.1-1] - new version [2.9.0-1] - new version [2.8.1-1] - Latest upstream. - Bump hard dep on urllib3 to 1.12. [2.7.0-8] - Rebuilt for Python3.5 rebuild [2.7.0-7] - Tell setuptools about what version of urllib3 we're unbundling for https://github.com/kennethreitz/requests/issues/2816 [2.7.0-6] - Replace the provides macro with a plain provides field for now until we can re-organize this package into two different subpackages. [2.7.0-5] - Remove 'provides: python2-requests' from the python3 subpackage, obviously. [2.7.0-4] - Employ %python_provides macro to provide python2-requests. [2.7.0-3] - Lock down the python-urllib3 version to the specific version we unbundled. https://bugzilla.redhat.com/show_bug.cgi?id=1253823 [2.7.0-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [2.7.0-1] - new version [2.6.2-1] - new version [2.6.1-1] - new version [2.6.0-1] - new version - Remove patch for CVE-2015-2296, now included in the upstream release. [2.5.3-2] - Backport fix for CVE-2015-2296. [2.5.3-1] - new version [2.5.1-1] - new version [2.5.0-3] - Pin python-urllib3 requirement at 1.10. - Fix requirement pinning syntax. [2.5.0-2] - Do the most basic of tests in the check section. [2.5.0-1] - Latest upstream, 2.5.0 for #1171068 [2.4.3-1] - Latest upstream, 2.4.3 for #1136283 [2.3.0-4] - Re-do unbundling by symlinking system libs into the requests/packages/ dir. [2.3.0-3] - fix license handling [2.3.0-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild [2.3.0-1] - Latest upstream [2.0.0-2] - Rebuilt for https://fedoraproject.org/wiki/Changes/Python_3.4 [2.0.0-1] - Latest upstream. - Add doc macro to the python3 files section. - Require python-urllib3 greater than or at 1.7.1. [1.2.3-5] - fix versioned dep on python-urllib3 [1.2.3-4] - Explicitly versioned the requirements on python-urllib3. [1.2.3-3] - Release bump for a coupled update with python-urllib3. [1.2.3-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild [1.2.3-1] - Latest upstream. - Fixed bogus date in changelog. [1.1.0-4] - Correct a rhel conditional on python-ordereddict [1.1.0-3] - Unbundled python-urllib3. Using system python-urllib3 now. - Conditionally include python-ordereddict for el6. [1.1.0-2] - Unbundled python-charade/chardet. Using system python-chardet now. - Removed deprecated comments and actions against oauthlib unbundling. Those are no longer necessary in 1.1.0. - Added links to bz tickets over Patch declarations. [1.1.0-1] - Latest upstream. - Relicense to ASL 2.0 with upstream. - Removed cookie handling patch (fixed in upstream tarball). - Updated cert unbundling patch to match upstream. - Added check section, but left it commented out for koji. [0.14.1-4] - Let brp_python_bytecompile run again, take care of the non-python{2,3} modules by removing them from the python{,3}-requests package that they did not belong in. - Use the certificates in the ca-certificates package instead of the bundled one + https://bugzilla.redhat.com/show_bug.cgi?id=904614 - Fix a problem with cookie handling + https://bugzilla.redhat.com/show_bug.cgi?id=906924 [ 0.14.1-1] - Updated to latest upstream release [0.13.1-1] - Updated to latest upstream release 0.13.1 - Use system provided ca-certificates - No more async requests use grrequests https://github.com/kennethreitz/grequests - Remove gevent as it is no longer required by requests [0.11.1-1] - Updated to upstream release 0.11.1 [0.10.6-3] - Support building package for EL6 [0.10.6-2] - +python3-requests pkg [0.10.6-1] - Updated to new upstream version [0.9.3-1] - Updated to new upstream version 0.9.3 - Include python-gevent as a dependency for requests.async - Clean up shebangs in requests/setup.py,test_requests.py and test_requests_ext.py [0.8.2-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild [0.8.2-1] - New upstream version - keep alive support - complete removal of cookiejar and urllib2 [0.7.6-1] - Updated to new upstream release 0.7.6 [0.6.6-1] - Updated to version 0.6.6 [0.6.1-1] - Updated to version 0.6.1 [0.6.0-1] - Updated to latest version 0.6.0 [0.5.1-2] - Remove OPT_FLAGS from build section since it is a noarch package - Fix use of mixed tabs and space - Remove extra space around the word cumbersome in description [0.5.1-1] - Initial package python-urllib3 python-wheel pytz [2019.3-4] - Fix FTBFS with newest tzdata Resolves: rhbz#2217853 PyYAML scipy [1.3.1-5] - Remove RPATH from certain shared object files - Resolves: rhbz#2222717 [1.3.1-4] - Exclude unsupported i686 arch [1.3.1-3] - Specify LDFLAGS explicitly - Force preprocessing of Fortran sources to make annobin record proper flags - Resolves: rhbz#1778983 [1.3.1-2] - Adjusted for Python 3.8 module in RHEL 8 [1.3.1-1] - Update to 1.3.1 (#1674101) - Drop Python 2 packages (not supported by SciPy >= 1.3) - Backported upstream patch for cKDTree (fixes FTBFS) [1.2.1-8] - Rebuilt for Python 3.8.0rc1 (#1748018) [1.2.1-7] - Rebuilt for Python 3.8 [1.2.1-6] - Remove build dependency on python2-pytest-xdist and python2-pytest-timeout - Enable parallel tests in Python 3 %check - Use macros for Python interpreter in tests [1.2.1-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild [1.2.1-4] - Fix FTBFS with Py3.8 (#1606315) [1.2.1-3] - Build only against openblasp (bugz#1709161) [1.2.1-2] - Do not create *-PYTEST.pyc files [1.2.1-1] - Update to 1.2.1 - Drop scipy2-doc [1.2.0-1] - Update to 1.2.0 [1.1.0-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild [1.1.0-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild [1.1.0-2] - Don't ignore the tests results but rather have a tolerance rate - Skip test_decomp on ppc64le as it currently segfaults [1.1.0-1] - Update to 1.1.0 (#1560265, #1594355) [1.0.0-8] - Rebuilt for Python 3.7 [1.0.0-7] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [1.0.0-6] - Link with -lm to build with new stricter Fedora flags https://bugzilla.redhat.com/show_bug.cgi?id=1541416 [1.0.0-5] - rebuilt for GCC 8.x (gfortran soname bump) [1.0.0-4] - Disable tests on s390x [1.0.0-3] - New subpackages with HTML documentation [1.0.0-2] - Use openblas where available https://fedoraproject.org/wiki/Changes/OpenBLAS_as_default_BLAS - Remove ppc64 hackery for OpenBLAS - Don't run tests in parallel as pytest crashes - Don't run test_denormals as it tends to stuck [1.0.0-1] - update to 1.0.0 and use pytest instead of nose - use timeout during parallel %check [0.19.1-5] - Use openblas where available (except ppc64), to use same as numpy (BZ 1472318) [0.19.1-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild [0.19.1-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [0.19.1-2] - Rebuild due to bug in RPM (RHBZ #1468476) [0.19.1-1] - new version [0.19.0-1] - new version [0.18.0-3] - Rebuild for libgfortran.so.3 [0.18.0-2] - Rebuild for Python 3.6 [0.18.0-1] - 0.18.0 - %check: make non-fatal as temporary workaround for scipy build on arm [0.17.0-2] - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages * Tue May 31 2016 Nils Philippsen <nils@redhat.com> - fix source URL [0.17.0-1] - Update to 0.17.0 - Drop ctypes patch applied upstream [0.16.1-7] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [0.16.1-6] - Add provides to satisfy scipy%{_isa} requires in other packages [0.16.1-5] - Revert 'Discard results of testsuite on %{arm} for now' [0.16.1-4] - Discard results of testsuite on %{arm} for now Segfaults on non-aligned memory test (expected for arm) [0.16.1-3] - Add patch to fix ctypes test - Move requires to correct python2 subpackage - Add FFLAGS also in %install [0.16.1-2] - Rebuilt for https://fedoraproject.org/wiki/Changes/python3.5 [0.16.1-1] - Update to 0.16.1 [0.16.0-1] - Update to 0.16.0 - Use python_provide macro [0.15.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [0.15.1-1] - Update to 0.15.1 [0.14.1-1] - Update to 0.14.1 [0.14.0-5] - Rebuild for rpm bug 1131892 [0.14.0-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild [0.14.0-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild [0.14-2] - Rebuild with Python 3.4 [0.14-1] - Update to 0.14 - Do not use system python-six (bug #1046817) [0.13.3-2] - use python2 macros everywhere (Requested by Han Boetes) [0.13.3-1] - Update to 0.13.3 [0.13.2-1] - Update to 0.13.2 [0.13.1-2] - rebuild (suitesparse) [0.13.1-1] - Update to 0.13.1 [0.13.0-2] - Update to 0.13.0 final [0.13.0-0.4.rc1] - Update to 0.13.0rc1 [0.13.0-0.3.b1] - rebuilt with atlas 3.10 [0.13.0-0.2.b1] - Unbundle python-six (bug #1005350) [0.13.0-0.1.b1] - Update to 0.13.0b1 - Drop patches applied upstream - Fixup changelog and summary [0.12.0-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild [0.12.0-4] - Fix rpmlint warnings - License update - Add patch to use build_dir argument in build_extension [0.12.0-3] - Remove old ufsparse references, use suitesparse - Spec cleanup [0.12.0-2] - Add patch to fix segfaul in test of sgeqrf [0.12.0-1] - Update to 0.12.0 final - No longer remove weave from python3 build [0.12.0-0.1.b1] - Update to 0.12.0b1 - Drop upstreamed linalg patch [0.11.0-4] - Add patch from upstream to fix python3.3 issues in linalg routines [0.11.0-3] - Disable python3 tests for now [0.11.0-2] - Add requires python3-numpy, python3-f2py for python3-scipy (bug 863755) [0.11.0-1] - Update to 0.11.0 final [0.11.0-0.1.rc2] - Update to 0.11.0rc2 [0.10.1-4] - Rebuild for python 3.3 [0.10.1-3] - remove rhel logic from with_python3 conditional [0.10.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild [0.10.1-1] - Update to 0.10.1 [0.10.0-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild [0.10.0-1] - Update to 0.10.0 [0.9.0-2] - little cosmetic changes - filter provides in python_sitearch * Fri Sep 02 2011 Andrew McNabb <amcnabb@mcnabbs.org> - add python3 subpackage [0.9.0-1] - Update to 0.9.0 - Drop all stsci sources and patches, dropped from upstream - Drop gcc and py27 patches fixed upstream - Add %check section to run tests [0.7.2-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild [0.7.2-3] - Fix scipy build on python-2.7 [0.7.2-2] - Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild [0.7.2-1] - New upstream release [0.7.1-3] - Bump for rebuild against numpy 1.3 [0.7.1-2] - Bump for rebuild against numpy 1.4.0 [0.7.1-1] - Update to 0.7.1. [0.7.0-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild [0.7.0-4] - Fix for gcc34 weave blitz bug #505379 [0.7.0-3] - Add f2py requires to prepared for numpy packaging split [0.7.0-2] - Patch for stsci image function syntax fix. [0.7.0-1] - Update to final 0.7 release [0.7.0-0.3.b1] - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild [0.7.0-0.2.b1] - Rebuild for atlas-3.8.2 [0.7.0-0.1.b1] - Update to latest beta which lists python 2.6 support [0.6.0-8] - Rebuild for Python 2.6 [0.6.0-7] - fix the stsci fix [0.6.0-6] - include missing setup files for stsci module [0.6.0-5] - Autorebuild for GCC 4.3 [0.6.0-4] - fix for egg-info file creation [0.6.0-3] - include_dirs changes for ufsparse change in development [0.6.0-2] - Fix licensing to match Fedora packaging guidance - Remove unnecessary library deps [0.6.0-1] - update to new upstream source - update Summary, License, Url, and description - added extra dependencies - remove symlink since Lib has been renamed scipy [0.5.2.1-1] - Update to new upstream source [0.5.2-3] - fix licensing tag and bump for buildid rebuild [0.5.2-2.2] - go back to using gfortran now that numpy is patched [0.5.2-2.1] - minor correction for f77 usage [0.5.2-2] - revert to f77 due to issue with numpy in development [0.5.2-1.1] - remove arch specific optimizations [0.5.2-1] - Update for new upstream release [0.5.1-5] - Bump for rebuild against python 2.5 in devel tree [0.5.1-4] - Minor adjustments to specfile for packaging guidelines. - Changed buildrequires fftw version 3 from fftw2 [0.5.1-2] - Updated spec for FE Packaging Guidelines and for upstream version 0.5.1 [0.4.8-4] - Add BuildRequires gcc-c++ - Add python-devel - Add libstdc++ [0.4.8-3] - Add BuildRequires gcc-gfortran [0.4.8-3] - Add BuildRequires numpy [0.4.8-2] - Fix BuildRoot - Add BuildRequires, Requires - Test remove d1mach patch - Fix defattr - Add changelog - Removed Prefix, Vendor - Fix Source0 pytest [4.6.6-3] - Exclude unsupported i686 arch [4.6.6-2] - Adjusted for Python 3.8 module in RHEL 8 [4.6.6-1] - Update to 4.6.6. [4.6.5-4] - Rebuilt for Python 3.8.0rc1 (#1748018) [4.6.5-3] - Rebuilt for Python 3.8 [4.6.5-2] - Bootstrap for Python 3.8 [4.6.5-1] - Update to 4.6.5. - Add missing BR on make. [4.6.4-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild [4.6.4-2] - Fix a bad conflict [4.6.4-1] - Update to 4.6.4, move python2-pytest to its own source package - Make /usr/bin/pytest and /usr/bin/py.test Python 3 [4.4.1-2] - Remove optional test dependencies for Python 2 entirely [4.4.1-1] - Update to 4.4.1 (see PR#9). - Remove test dependencies on python2-hypothesis and python2-twisted (see PR#10). [4.3.1-1] - Update to 4.3.1 [4.3.0-1] - Update to 4.3.0 and fix FTBFS (#1671167, #1687384) [3.9.3-3] - Enable python dependency generator [3.9.3-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild [3.9.3-1] - Update to 3.9.3. [3.9.2-1] - Update to 3.9.2. [3.9.1-1] - Update to 3.9.1. [3.8.2-3] - Add python2-pathlib2 runtime requirement (rhbz#1639718). [3.8.2-2] - versionize pluggy dependencies [3.8.2-1] - Update to 3.8.2. [3.6.4-1] - Update to 3.6.4. [3.6.3-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild [3.6.3-1] - Update to 3.6.3. [3.6.2-3] - Enable timeout [3.6.2-2] - Rebuilt for Python 3.7 (without timeout) [3.6.2-1] - Update to 3.6.2. [3.6.1-3] - Rebuilt for Python 3.7 [3.6.1-2] - Bootstrap for Python 3.7 [3.6.1-1] - Update to 3.6.1. [3.6.0-1] - Update to 3.6.0 (#1581692) - Require and BuildRequire atomicwrites [3.5.1-1] - Update to 3.5.1. - Build the documentation with Python3. - Update requirements. [3.4.2-2] - Add Requires for required modules [3.4.2-1] - Update to 3.4.2 [3.2.3-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [3.2.3-3] - Use better Obsoletes for platform-python [3.2.3-2] - Remove platform-python subpackage - Cleanup conditionals [3.2.3-1] - Update to 3.2.3. [3.2.2-1] - Update to 3.2.2. - Move BRs to their respective subpackages. - Enable the platform-python subpackage only on F27+. [3.2.1-3] - Rebuilt for rhbz#1484607 [3.2.1-2] - Add subpackage for platform-python (https://fedoraproject.org/wiki/Changes/Platform_Python_Stack) [3.2.1-1] - Update to 3.2.1. [3.2.0-1] - 3.2.0. [3.1.3-1] - Update to 3.1.3. - Update BRs. [3.1.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [3.1.1-1] - Update to 3.1.1. - Add BR on setuptools_scm. [3.0.7-1] - Update to 3.0.7. [3.0.6-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [3.0.6-1] - Update to 3.0.6. - Drop patch applied upstream. [3.0.5-2] - Rebuild for Python 3.6 [3.0.5-1] - Update to 3.0.5. [3.0.4-1] - Update to 3.0.4. [3.0.3-1] - Update to 3.0.3. - Update requirements. [2.9.2-2] - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages [2.9.2-1] - Update to 2.9.2. * Tue May 31 2016 Nils Philippsen <nils@redhat.com> - fix source URL [2.9.1-1] - Update to 2.9.1. - Packaging updates. [2.8.7-2] - Use new python macros - Fix python3 package file ownership [2.8.7-1] - Update to 2.8.7. [2.8.6-1] - Update to 2.8.6. [2.8.5-1] - Update to 2.8.5 [2.8.2-3] - Re-enable pexpect in tests [2.8.2-2] - Rebuilt for https://fedoraproject.org/wiki/Changes/python3.5 [2.8.2-1] - Update to 2.8.2. [2.7.3-2] - Rebuilt for Python3.5 rebuild [2.7.3-1] - Update to 2.7.3. - Provide additional symlinks to the pytest executables (rhbz#1249891). [2.7.2-2] - Provide python2-pytest, use python_provide macro [2.7.2-1] - Update to 2.7.2. - Small fixes. [2.7.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [2.7.1-1] - Update to 2.7.1. [2.7.0-1] - Update to 2.7.0. - Apply updated Python packaging guidelines. - Mark LICENSE with %license. [2.6.4-1] - Update to 2.6.4. [2.6.3-1] - Update to 2.6.3. [2.6.1-1] - Update to 2.6.1. [2.6.0-1] - Update to 2.6.0. [2.5.2-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild [2.5.2-2] - Redbuild for python 3.4 [2.5.2-1] - Update to 2.5.2. [2.4.2-2] - Only run tests from the 'testing' subdir in %check. [2.4.2-1] - Update to 2.4.2. - Add buildroot's bindir to PATH while running the testsuite. [2.3.5-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild [2.3.5-3] - Disable tests using pexpect for now, fails on F19. [2.3.5-2] - Use python-sphinx for rhel > 6 (rhbz#973318). - Update BR to use python-pexpect instead of pexpect. [2.3.5-1] - Update to 2.3.5. - Docutils needed now to build README.html. - Add some BR optionally used by the testsuite. [2.3.4-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild [2.3.4-1] - Update to 2.3.4. [2.3.2-1] - Update to 2.3.2. [2.3.1-1] - Update to 2.3.1. - Re-enable some tests, ignore others. - Docs are available in English and Japanese now. [2.2.4-4] - Add conditional for sphinx on rhel. - Remove rhel logic from with_python3 conditional. - Disable failing tests for Python3. [2.2.4-3] - rebuild for https://fedoraproject.org/wiki/Features/Python_3.3 [2.2.4-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild [2.2.4-1] - Update to 2.2.4. [2.2.3-1] - Update to 2.2.3. [2.2.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild [2.2.1-1] - Update to 2.2.1. [2.2.0-1] - Update to 2.2.0. [2.1.3-1] - Update to 2.1.3. [2.1.2-1] - Update to 2.1.2. [2.1.1-2] - Fix: python3 dependencies. [2.1.1-1] - Update to 2.1.1. [2.1.0-2] - Update Requires and BuildRequires tags. [2.1.0-1] - Update to 2.1.0. [2.0.3-1] - Update to 2.0.3. [2.0.2-1] - Update to 2.0.2. [2.0.0-1] - New package. python3x-pyparsing [2.4.5-3] - Exclude unsupported i686 arch [2.4.5-2] - Adjusted for Python 3.8 module in RHEL 8 [2.4.5-1] - Update to 2.4.5 (#1768725) - Drop Python2 subpackage (#1770564) [2.4.2-1] - Update to latest version (#1742167) [2.4.0-6] - Reduce Python 2 build time dependencies [2.4.0-5] - Rebuilt for Python 3.8 [2.4.0-4] - Bootstrap for Python 3.8 [2.4.0-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild [2.4.0-1] - Update to 2.4.0 [2.3.1-1] - Update to 2.3.1 [2.3.0-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild [2.3.0-1] - Update to 2.3.0 [2.2.0-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild [2.2.0-2] - Rebuilt for Python 3.7 [2.2.0-1] - Update to 2.2.0 [2.1.10-7] - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) [2.1.10-6] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [2.1.10-5] - Remove the empty pyparsing package, provide and obsolete it from python2-pyparsing [2.1.10-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [2.1.10-3] - Rebuild as wheel [2.1.10-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [2.1.10-1] - update to 2.1.10 - do not own __pycache__ [2.1.5-3] - Rebuild for Python 3.6 - Add missing BuildRequires for python-setuptools [2.1.5-2] - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages [2.1.5-1] - update to 2.1.5 [2.1.3-1] - update to 2.1.3 [2.1.1-1] - update to 2.1.1 [2.1.0-2] - fix typo in provides for the python3 subpackage [2.1.0-1] - update to 2.1.0 - add a python2 subpackage preserving the upgrade path [2.0.7-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [2.0.7-1] - 2.0.7 [2.0.6-1] - 2.0.6 - Some clean up [2.0.3-3] - Rebuilt for Python3.5 rebuild [2.0.3-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [2.0.3-1] - update to 2.0.3 - include the whole documentation set [2.0.1-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild [2.0.1-2] - Rebuilt for https://fedoraproject.org/wiki/Changes/Python_3.4 [2.0.1-1] - 2.0.1 [1.5.6-9] - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild [1.5.6-8] - add patch to correct typo in exception handling [1.5.6-7] - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild [1.5.6-6] - rebuild for https://fedoraproject.org/wiki/Features/Python_3.3 [1.5.6-5] - remove rhel logic from with_python3 conditional [1.5.6-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild [1.5.6-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild [1.5.6-2] - fix __pycache__ conditional on RHEL [1.5.6-1] - New upstream version. [1.5.5-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild [1.5.5-1] - 1.5.5 - use buildroot macro - fix wrong file end of line encoding - convert files to utf-8 - doc subpackage - python3 subpackage - rpmlint clean [1.5.0-7] - Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild [1.5.0-6] - include egginfo on EL >= 6 [1.5.0-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild [1.5.0-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild [1.5.0-3] - Rebuild for Python 2.6 [1.5.0-2] - respun (now with the right sources) [1.5.0-1] - new upstream release. [1.4.11-1] - New upstream version, add egg-info for F9+. [1.4.7-1] - New upstream version. [1.4.6-1] - New upstream version. [1.4.4-1] - New upstream version. [1.4.3-1] - New version. [1.3-1] - Initial RPM release python-atomicwrites python-attrs [19.3.0-3] - Exclude unsupported i686 arch [19.3.0-2] - Adjusted for Python 3.8 module in RHEL 8 [19.3.0-1] - New upstream version 19.3.0 (#1761701) - Python 2 subpackage has been removed (#1773236) [19.1.0-6] - Drop Python 2 optional build dependencies [19.1.0-5] - Rebuilt for Python 3.8.0rc1 (#1748018) [19.1.0-4] - Rebuilt for Python 3.8 [19.1.0-3] - Bootstrap for Python 3.8 [19.1.0-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild [19.1.0-1] - Updated to latest upstream. [18.2.0-1] - Updated to latest upstream. [17.4.0-8] - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild [17.4.0-7] - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild [17.4.0-6] - Rebuilt for Python 3.7 [17.4.0-5] - Bootstrap for Python 3.7 [17.4.0-4] - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) [17.4.0-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [17.4.0-2] - Added BuildRequires for python<n>-six. [17.4.0-1] - Updated to latest upstream. [16.3.0-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [16.3.0-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [16.3.0-1] - Updated to latest upstream. [16.1.0-3] - Enable tests [16.1.0-2] - Rebuild for Python 3.6 - Disable python3 tests for now [16.1.0-1] - Updated to latest upstream. - Removed patch, no longer necessary. - Removed 'with python3' conditionals. [16.0.0-6] - Build for Python 3.4 in EPEL7. [16.0.0-5] - Updated based on Fedora package review (#1366878). - Fix check section, though tests can not be run for EPEL7. - Add patch to skip two tests with keyword collisions. [16.0.0-4] - Fix python2 BuildRequires. [16.0.0-3] - Updated based on Fedora package review (#1366878). [16.0.0-2] - Updated based on Fedora package review (#1366878). [16.0.0-1] - Initial version. python-more-itertools [7.2.0-5] - Exclude unsupported i686 arch [7.2.0-4] - Adjusted for Python 3.8 module in RHEL 8 - Resolves: rhbz#1772818 [7.2.0-3] - Rebuilt for Python 3.8.0rc1 (#1748018) [7.2.0-2] - Rebuilt for Python 3.8 [7.2.0-1] - Update to 7.2.0. [7.0.0-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild * Tue May 21 2019 aarem AT fedoraproject DOT org - 7.0.0-1 - Update to 7.0.0 - Drop python-2 * Sun Apr 01 2018 aarem AT fedoraproject DOT org - 4.1.0-1 - rebuit for 4.1.0 using Thomas Moschny modification to spec file [4.1.0-1] - Update to 4.1.0. - Do not do package tests. [2.3-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [2.3-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [2.3-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [2.3-2] - Rebuild for Python 3.6 * Wed Nov 09 2016 aarem AT fedoraproject DOT org - 2.3-1 - update to 2.3 * Fri Oct 14 2016 aarem AT fedoraproject DOT org - 2.2-4 - fixed missing sum in line 9 of spec file, per BZ #138195 * Sat Oct 08 2016 aarem AT fedoraproject DOT org - 2.2-3 - renamed spec file to match package as per BZ #1381029 -fixed bug (incorrect python3_provides) as per BZ #1381029 - use common macro for description as per suggestion in BZ #1381029 * Wed Oct 05 2016 aarem AT fedoraproject DOT org - 2.2-2 - separated python and python3 cases as per BZ #1381029 * Sun Oct 02 2016 aarem AT fedoraproject DOT org - 2.2-1 - initial packaging of 2.2 version python-packaging [19.2-3] - Exclude unsupported i686 arch [19.2-2] - Adjusted for Python 3.8 module in RHEL 8 [19.2-1] - New upstream version 19.2 (bz#1742388) [19.0-6] - Remove Python 2 subpackage - Make spec fedora-specific [19.0-5] - Reduce Python 2 build time dependencies [19.0-4] - Rebuilt for Python 3.8 [19.0-3] - Bootstrap for Python 3.8 [19.0-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild [19.0-1] - New upstream version [17.1-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild [17.1-1] - Update to 17.1 [16.8-11] - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild [16.8-10] - Rebuilt for Python 3.7 [16.8-9] - Bootstrap for Python 3.7 [16.8-8] - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) [16.8-7] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [16.8-6] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [16.8-5] - Epel7 compatible spec/package [16.8-4] - Rebuild as wheel [16.8-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [16.8-2] - Rebuild for Python 3.6 [16.8-1] - New upstream version [16.7-1] - Initial package. python-pluggy [0.13.0-3] - Exclude unsupported i686 arch [0.13.0-2] - Adjusted for Python 3.8 module in RHEL 8 [0.13.0-1] - Update to 0.13.0 (#1750961) [0.12.0-5] - Rebuilt for Python 3.8.0rc1 (#1748018) [0.12.0-4] - Rebuilt for Python 3.8 [0.12.0-3] - Bootstrap for Python 3.8 [0.12.0-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild [0.12.0-1] - Update to 0.12.0 (#1714369) - Move python2-pluggy to a separate package [0.11.0-1] - Update to 0.11.0. [0.9.0-1] - Update to 0.9.0 (#1680414) [0.8.1-1] - Update to 0.8.1. [0.8.0-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild [0.8.0-1] - Update to 0.8.0. [0.7.1-1] - Update to 0.7.1. - Update BRs. - Use source URL to released archive containing pluggy/_version.py. [0.6.0-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild [0.6.0-4] - Rebuilt for Python 3.7 [0.6.0-3] - Bootstrap for Python 3.7 [0.6.0-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [0.6.0-1] - update to 0.6.0 - requirement renames to meet python2 names [0.3.1-10] - fix conditional [0.3.1-9] - Python 2 binary package renamed to python2-pluggy See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3 [0.3.1-8] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [0.3.1-7] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [0.3.1-6] - Rebuild for Python 3.6 [0.3.1-5] - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages [0.3.1-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [0.3.1-3] - make tests pass again on Python 3.5 [0.3.1-2] - Rebuilt for https://fedoraproject.org/wiki/Changes/python3.5 [0.3.1-1] - update to 0.3.1 [0.3.0-3] - fix python3 builds [0.3.0-2] - add python2_sitelib macros and BR to setuptools (rhbz#1254484) [0.3.0-1] - version based on the inital proposal of Adam Young python-py [1.8.0-8] - Exclude unsupported i686 arch [1.8.0-7] - Adjusted for Python 3.8 module in RHEL 8 [1.8.0-6] - Rebuilt for Python 3.8.0rc1 (#1748018) [1.8.0-5] - Rebuilt for Python 3.8 [1.8.0-4] - Bootstrap for Python 3.8 [1.8.0-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild [1.8.0-1] - Update to 1.8.0. - Update spec file. [1.7.0-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild [1.7.0-2] - Drop explicit locale setting for python3, use C.UTF-8 for python2 See https://fedoraproject.org/wiki/Changes/Remove_glibc-langpacks-all_from_buildroot [1.7.0-1] - Update to 1.7.0. [1.5.4-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild [1.5.4-2] - Rebuilt for Python 3.7 [1.5.4-1] - Update to 1.5.4. - Add BR on setuptools_scm. [1.5.3-3] - Rebuilt for Python 3.7 [1.5.3-2] - Bootstrap for Python 3.7 [1.5.3-1] - Update to 1.5.3. [1.5.2-3] - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) [1.5.2-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [1.5.2-1] - Update to 1.5.2. [1.5.1-1] - Update to 1.5.1. - Update list of vendored packages. - Fix HTML doc path. [1.4.34-8] - Restore earlier structure of the spec file, also fixing previously introduced problems. [1.4.34-7] - Use better Obsoletes for platform-python [1.4.34-6] - Remove platform-python subpackage [1.4.34-5] - Cleanup spec file conditionals [1.4.34-4] - Switch with_docs and run_test macros to bcond_without docs, tests [1.4.34-3] - Added the platform-python subpackage [1.4.34-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [1.4.34-1] - Update to 1.4.34. [1.4.33-1] - Update to 1.4.33. [1.4.32-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [1.4.32-2] - Enable tests for Fedora<26. [1.4.32-1] - Update to 1.4.32. [1.4.31-5] - Rebuild for Python 3.6 - Disable tests [1.4.31-4] - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages [1.4.31-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [1.4.31-2] - Re-enable checks and docs. [1.4.31-1] - Update to 1.4.31. - Follow updated Python packaging guidelines. - Add Provides tag for bundled apipkg. [1.4.30-3] - Rebuilt for Python3.5 rebuild - With check and docs [1.4.30-2] - Rebuilt for Python3.5 rebuild without check and docs [1.4.30-1] - Update to 1.4.30. [1.4.29-1] - Update to 1.4.29. [1.4.28-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [1.4.28-1] - Update to 1.4.28. - Modernize spec file. - Apply updates Python packaging guidelines. - Mark LICENSE with %license. [1.4.26-2] - Re-enable doc building and testsuite. [1.4.26-1] - Update to 1.4.26. [1.4.25-2] - Re-enable doc building and testsuite. [1.4.25-1] - Update to 1.4.25. [1.4.23-1] - Update to 1.4.23. [1.4.22-2] - Re-enable doc building and testsuite. [1.4.22-1] - Update to 1.4.22. [1.4.21-1] - Update to 1.4.21. [1.4.20-3.1] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild [1.4.20-2.1] - rebuild for python 3.4 disable tests for circular deps [1.4.20-2] - Re-enable doc building and testsuite. [1.4.20-1] - Update to 1.4.20. [1.4.18-1] - Update to 1.4.18. [1.4.17-2] - Only run tests from the 'testing' subdir in %check. [1.4.17-1] - Update to 1.4.17. [1.4.16-1] - Update to 1.4.16. [1.4.15-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild [1.4.15-1] - Update to 1.4.15. - Disable failing Subversion checks for now. [1.4.14-2] - Use python-sphinx for rhel > 6 (rhbz#973321). - Update URL. - Fix changelog entry with an incorrect date (rhbz#973325). [1.4.14-1] - Update to 1.4.14. [1.4.13-1] - Update to 1.4.13. [1.4.12-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild [1.4.12-1] - Update to 1.4.12. [1.4.11-1] - Update to 1.4.11. [1.4.10-2] - Re-enable doc building and testsuite. - Minor testsuite fixes. [1.4.10-1] - Update to 1.4.10. [1.4.9-8] - Re-enable doc building and testsuite. [1.4.9-7] - Add conditional for sphinx on rhel. - Remove rhel logic from with_python3 conditional. [1.4.9-6] - Re-enable doc building and testsuite. [1.4.9-5] - Temporarily disable docs and testsuite. [1.4.9-4] - rebuild for https://fedoraproject.org/wiki/Features/Python_3.3 [1.4.9-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild [1.4.9-2] - Re-enable doc building and testsuite. [1.4.9-1] - Update to 1.4.9. [1.4.8-2] - Re-enable doc building and testsuite. [1.4.8-1] - Update to 1.4.8. [1.4.7-2] - Re-enable doc building and testsuite. [1.4.7-1] - Update to 1.4.7. [1.4.6-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild [1.4.6-2] - Re-enable doc building and testsuite. [1.4.6-1] - Update to 1.4.6. - Remove %prerelease macro. - Temporarily disable docs and testsuite. [1.4.5-4] - Rebuilt for glibc bug#747377 [1.4.5-3] - Fix: python3 dependencies. [1.4.5-2] - Re-enable doc building and testsuite. [1.4.5-1] - Update to 1.4.5. [1.4.4-2] - Re-enable doc building and testsuite. [1.4.4-1] - Update to 1.4.4. - Upstream provides a .zip archive only. - pytest and pycmd are separate packages now. - Disable building html docs und the testsuite to break the circular build dependency with pytest. - Update summary and description. - Remove BRs no longer needed. - Create a Python 3 subpackage. [1.3.4-2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild [1.3.4-1] - Update to 1.3.4 [1.3.3-2] - Add dependency on python-setuptools (see bz 626808). [1.3.3-1] - Update to 1.3.3. [1.3.2-2] - Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild [1.3.2-1] - Update to 1.3.2. - Do cleanups already in %prep to avoid inconsistent mtimes between source files and bytecode. [1.3.1-1] - Update to 1.3.1. [1.3.0-1] - Update to 1.3.0. - Remove some backup (.orig) files. [1.2.1-1] - Update to 1.2.1. [1.2.0-1] - Update to 1.2.0. - Adjust summary and %description. - Use %global instead of %define. [1.1.1-1] - Update to 1.1.1. [1.1.0-1] - Update to 1.1.0. Upstream reorganized the package's structure and cleaned up the install process, so the specfile could be greatly simplified. - Dropped licenses for files no longer present from the License tag. [1.0.2-1] - Update to 1.0.2. - One failing test is no longer part of the testsuite, thus needs not to be skipped anymore. - Some developer docs are missing this time in upstream's tarfile, so cannot be moved to %{_docdir} [1.0.0-1] - Update to 1.0.0. - Re-enable SVN tests in %check. [1.0.0-1.b8] - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild [1.0.0-0.b8] - Update to 1.0.0b8. - Remove patches applied upstream. - Greenlets have been removed upstream. So, package is noarch and - installs to %{python_sitelib} again - %ifarch sections have been removed. - Don't remove files used by the testsuite for now. - Add dependency on python-pygments, pylint and pexpect (for the testsuite). [0.9.2-7] - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild [0.9.2-6] - Use system doctest module again, as this wasn't the real cause of the test failure. Instead, remove the failing test for now. [0.9.2-5] - Add patch from trunk fixing a subversion 1.5 problem (pylib issue66). - Don't replace doctest compat module (pylib issue67). [0.9.2-4] - Use dummy_greenlet on ppc and ppc64. [0.9.2-3] - Replace compat modules by stubs using the system modules instead. - Add patch from trunk fixing a timing issue in the tests. [0.9.2-2] - Update license information. - Fix the tests. [0.9.2-1] - Update to 0.9.2. - Upstream now uses setuptools and installs to %{python_sitearch}. - Remove %{srcname} macro. - More detailed information about licenses. [0.9.1-1] - New package. python-wcwidth [0.1.7-16] - Exclude unsupported i686 arch [0.1.7-15] - Adjusted for Python 3.8 module in RHEL 8 [0.1.7-14] - Rebuilt for Python 3.8.0rc1 (#1748018) - Resolves: rhbz#1772819 [0.1.7-13] - Rebuilt for Python 3.8 [0.1.7-12] - Bootstrap for Python 3.8 [0.1.7-11] - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild [0.1.7-10] - Subpackage python2-wcwidth has been removed See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal [0.1.7-9] - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild [0.1.7-8] - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild [0.1.7-7] - Rebuilt for Python 3.7 [0.1.7-6] - Update Python 2 dependency declarations to new packaging standards (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3) [0.1.7-5] - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild [0.1.7-4] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [0.1.7-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [0.1.7-2] - Rebuild for Python 3.6 [0.1.7-1] - Update to 0.1.7 [0.1.6-4] - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages [0.1.6-3] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [0.1.6-2] - Provide python-wcwidth for EL6 [0.1.6-1] - Update to new upstream - Remove external LICENSE thanks to the new version [0.1.5-2] - Remove shabang from file that was not executable [0.1.5-1] - Initial package. MODERATE Copyright 2023 Oracle, Inc. CVE-2023-32681 CVE-2007-4559 cpe:/a:oracle:linux:8:9:appstream_base cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 8 [4.12-2.0.1] - Add libreswan-oracle.patch to detect Oracle Linux distro [4.12-2] - Resolves: rhbz#2234731 authby=rsasig fails in FIPS policy [4.12-1] - Update to 4.12 to fix CVE-2023-38710, CVE-2023-38711, CVE-2023-38712 - Resolves: rhbz#2215955 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-38712 CVE-2023-38710 CVE-2023-38711 cpe:/a:oracle:linux:8:9:appstream_base cpe:/a:oracle:linux:8::appstream Oracle Linux 8 [9.27-11] - fix for CVE-2023-4042 - Resolves: rhbz#2228153 [9.27-10] - fix for CVE-2023-38559 - Resolves: rhbz#2224371 [9.27-9] - fix for CVE-2023-28879 - Resolves: rhbz#2188297 [9.27-8] - fix embedding of CIDFonts - Resolves: rhbz#2169890 [9.27-7] - fix bbox device calculating bounding box incorrectly - Resolves: rhbz#2176327 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-38559 CVE-2023-4042 CVE-2023-28879 cpe:/a:oracle:linux:8:9:appstream_base cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 8 [2.40.5-1] - Upgrade to 2.40.5. Also, disable JIT Resolves: #2176269 Resolves: #2185742 Resolves: #2209728 Resolves: #2209745 Resolves: #2218649 Resolves: #2218651 Resolves: #2224611 [2.38.5-1.4] - Add patch for CVE-2023-28204 Resolves: #2209744 - Add patch for CVE-2023-32373 Resolves: #2209727 [2.38.5-1.3] - Restore libwpe and wpebackend-fdo dependencies Related: #2185741 (sort of) [2.38.5-1.2] - Disable libwpe and wpebackend-fdo dependencies Related: #2185741 (sort of) [2.38.5-1.1] - Add patch for CVE-2023-28205 Resolves: #2185741 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-38611 CVE-2023-32393 CVE-2023-40451 CVE-2023-39434 CVE-2023-38599 CVE-2023-27932 CVE-2023-38592 CVE-2023-28198 CVE-2023-38595 CVE-2023-38597 CVE-2023-38600 CVE-2023-38133 CVE-2023-40397 CVE-2023-27954 CVE-2022-32885 CVE-2023-32370 CVE-2023-38572 CVE-2023-38594 cpe:/a:oracle:linux:8:9:appstream_base cpe:/a:oracle:linux:8::appstream Oracle Linux 8 [2.1.0-12] - fix CVE-2023-33460 - Resolves: #2221252 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-33460 cpe:/a:oracle:linux:8:9:appstream_base cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 8 [1:9.0.62-27] - Related: RHEL-12543 - Bump release number [1:9.0.62-16] - Resolves: RHEL-12543 HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) - Remove JDK subpackges which are unused [1:9.0.62-14] - Related: RHEL-2330 Bump release number [1:9.0.62-13] - Resolves: RHEL-2330 Revert the fix for pki-servlet-engine [1:9.0.62-12] - Related: #2184135 Declare file conflicts [1:9.0.62-11] - Resolves: #2184135 Fix bug introduced in initial commit [1:9.0.62-10] - Resolves: #2210630 CVE-2023-28709 tomcat - Resolves: #2181448 CVE-2023-28708 tomcat: not including the secure attribute causes information disclosure [1:9.0.62-9] - Resolves: #2184135 Add Obsoletes to tomcat package [1:9.0.62-8] - Resolves: #2189676 Missing Tomcat POM files in RHEL 8.9 [1:9.0.62-7] - Related: #2173874 Tomcat installs older java even though newer java is installed - Bump release number [1:9.0.62-6] - Resolves: #2173874 Tomcat installs older java even though newer java is installed - Sync with rhel-8.8.0 branch MODERATE Copyright 2023 Oracle, Inc. CVE-2023-28708 CVE-2023-24998 CVE-2023-28709 cpe:/a:oracle:linux:8:9:appstream_base cpe:/a:oracle:linux:8::appstream Oracle Linux 8 [4.18.0-513.5.1_9.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3 - Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652] - Drop not needed patch [4.18.0-513.5.1_9] - redhat: list Z-Jiras in the changelog before Y-Jiras (Herton R. Krzesinski) - Revert 'mm, meminit: recalculate pcpu batch and high limits after init completes' (Chris von Recklinghausen) [RHEL-8539] - Revert 'mm,memory_hotplug: factor out adjusting present pages into adjust_present_page_count()' (Chris von Recklinghausen) [RHEL-8539] - Revert 'mm/page_alloc: move free_the_page' (Chris von Recklinghausen) [RHEL-8539] - Revert 'mm/page_alloc: allow high-order pages to be stored on the per-cpu lists' (Chris von Recklinghausen) [RHEL-8539] - Revert 'mm/page_alloc: fetch the correct pcp buddy during bulk free' (Chris von Recklinghausen) [RHEL-8539] - Revert 'mm/page_alloc: track range of active PCP lists during bulk free' (Chris von Recklinghausen) [RHEL-8539] - Revert 'mm/page_alloc: simplify how many pages are selected per pcp list during bulk free' (Chris von Recklinghausen) [RHEL-8539] - Revert 'mm/page_alloc: drain the requested list first during bulk free' (Chris von Recklinghausen) [RHEL-8539] - Revert 'mm/page_alloc: free pages in a single pass during bulk free' (Chris von Recklinghausen) [RHEL-8539] - Revert 'mm/page_alloc: do not prefetch buddies during bulk free' (Chris von Recklinghausen) [RHEL-8539] - Revert 'mm/page_alloc: check high-order pages for corruption during PCP operations' (Chris von Recklinghausen) [RHEL-8539] - Revert 'mm/page_alloc: fix incorrect PGFREE and PGALLOC for high-order page' (Chris von Recklinghausen) [RHEL-8539] [4.18.0-513.4.1_9] - Revert 'cnic: Use the bitmap API to allocate bitmaps' (Chris Leech) [RHEL-1950] - Revert 'cnic: don't pass bogus GFP_ flags to dma_alloc_coherent' (Chris Leech) [RHEL-1950] - scsi: lpfc: Prevent use-after-free during rmmod with mapped NVMe rports (Paul Ely) [RHEL-2602] - scsi: lpfc: Early return after marking final NLP_DROPPED flag in dev_loss_tmo (Paul Ely) [RHEL-2602] - gfs2: Add quota_change type (Bob Peterson) [2224075] [4.18.0-513.3.1_9] - drm/amd/display: fix the white screen issue when >= 64GB DRAM (Mika Penttila) [2231934] - gfs2: conversion deadlock do_promote bypass (Bob Peterson) [2225228] - gfs2: do_promote cleanup (Andreas Gruenbacher) [2225228] - gfs2: Make use of list_is_first (Andreas Gruenbacher) [2225228] [4.18.0-513.2.1_9] - x86/cpu: Enable STIBP on AMD if Automatic IBRS is enabled (Waiman Long) [2227916] - Documentation/hw-vuln: Document the interaction between IBRS and STIBP (Waiman Long) [2227916] - x86/CPU/AMD: Make sure EFER[AIBRSE] is set (Waiman Long) [2227916] - fs: don't audit the capability check in simple_xattr_list() (Andrey Albershteyn) [RHEL-863] [4.18.0-513.1.1_9] - thunderbolt: Fix Thunderbolt 3 display flickering issue on 2nd hot plug onwards (Desnes Nunes) [2233974] - mm/userfaultfd: don't consider uffd-wp bit of writable migration entries (Rafael Aquini) [2231554] - mm/userfaultfd: fix uffd-wp handling for THP migration entries (Rafael Aquini) [2231554] - mm/userfaultfd: fix uffd-wp special cases for fork() (Rafael Aquini) [2231554] - mm/thp: simplify copying of huge zero page pmd when fork (Rafael Aquini) [2231554] [4.18.0-513] - redhat/configs: enable CONFIG_INET_DIAG_DESTROY (Andrea Claudi) [2230213] - net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225202] {CVE-2023-3609} - cifs: fix bogus cifs_mount error handling in RHEL8 (Jeffrey Layton) [2215018] - KVM: nVMX: add missing consistency checks for CR0 and CR4 (Ricardo Robaina) [2190257] {CVE-2023-30456} - netfilter: snat: evict closing tcp entries on reply tuple collision (Florian Westphal) [2196717] - tun: avoid double free in tun_free_netdev (Jon Maloy) [2156366 2156371] {CVE-2022-4744} - net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225103] {CVE-2023-3776} - net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225196] {CVE-2023-3611} - net/sched: sch_qfq: reintroduce lmax bound check for MTU (Davide Caratti) [2225196] - net/sched: sch_qfq: refactor parsing of netlink parameters (Davide Caratti) [2225196] - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2225512] {CVE-2023-4128} - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2225512] {CVE-2023-4128} - net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2225512] {CVE-2023-4128} - scsi: lpfc: Remove reftag check in DIF paths (Paul Ely) [2229152] - scsi: lpfc: Modify when a node should be put in device recovery mode during RSCN (Paul Ely) [2229152] - scsi: lpfc: Make fabric zone discovery more robust when handling unsolicited LOGO (Paul Ely) [2229152] - scsi: lpfc: Set Establish Image Pair service parameter only for Target Functions (Paul Ely) [2229152] - scsi: lpfc: Revise ndlp kref handling for dev_loss_tmo_callbk and lpfc_drop_node (Paul Ely) [2229152] - scsi: lpfc: Qualify ndlp discovery state when processing RSCN (Paul Ely) [2229152] - gfs2: Fix freeze consistency check in gfs2_trans_add_meta (Andreas Gruenbacher) [2095340] - gfs2: gfs2_freeze_lock_shared cleanup (Andreas Gruenbacher) [2095340] - gfs2: Replace sd_freeze_state with SDF_FROZEN flag (Andreas Gruenbacher) [2095340] - gfs2: Rework freeze / thaw logic (Andreas Gruenbacher) [2095340] - gfs2: Rename SDF_{FS_FROZEN => FREEZE_INITIATOR} (Andreas Gruenbacher) [2095340] - gfs2: Reconfiguring frozen filesystem already rejected (Andreas Gruenbacher) [2095340] - gfs2: Rename gfs2_freeze_lock{ => _shared } (Andreas Gruenbacher) [2095340] - gfs2: Rename the {freeze,thaw}_super callbacks (Andreas Gruenbacher) [2095340] - gfs2: Rename remaining 'transaction' glock references (Andreas Gruenbacher) [2095340] - gfs2: init system threads before freeze lock (Bob Peterson) [2095340] - net: mana: Use the correct WQE count for ringing RQ doorbell (Bandan Das) [2222573] - net: mana: Batch ringing RX queue doorbell on receiving packets (Bandan Das) [2222573] - net: mana: Add support for vlan tagging (Bandan Das) [2222573] - net: mana: Fix perf regression: remove rx_cqes, tx_cqes counters (Bandan Das) [2222573] - net: mana: Check if netdev/napi_alloc_frag returns single page (Bandan Das) [2222573] - net: mana: Rename mana_refill_rxoob and remove some empty lines (Bandan Das) [2222573] - net: mana: Add support for jumbo frame (Bandan Das) [2222573] - net: mana: Enable RX path to handle various MTU sizes (Bandan Das) [2222573] - net: mana: Refactor RX buffer allocation code to prepare for various MTU (Bandan Das) [2222573] - net: mana: Use napi_build_skb in RX path (Bandan Das) [2222573] - net: mana: Remove redundant pci_clear_master (Bandan Das) [2222573] - net: mana: Add new MANA VF performance counters for easier troubleshooting (Bandan Das) [2222573] - ice: Fix NULL pointer deref during VF reset (Petr Oros) [2227743] - x86/kasan: Populate shadow for shared chunk of the CPU entry area (Rafael Aquini) [2232451] - x86/kasan: Add helpers to align shadow addresses up and down (Rafael Aquini) [2232451] - x86/kasan: Rename local CPU_ENTRY_AREA variables to shorten names (Rafael Aquini) [2232451] - x86/mm: Populate KASAN shadow for entire per-CPU range of CPU entry area (Rafael Aquini) [2232451] - x86/mm: Recompute physical address for every page of per-CPU CEA mapping (Rafael Aquini) [2232451] [4.18.0-512] - dm cache policy smq: ensure IO doesn't prevent cleaner policy progress (Benjamin Marzinski) [2227951] - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221046] {CVE-2023-35001} - scsi: storvsc: Remove errant duplicate code (Cathy Avery) [2211725] - scsi: storvsc: Limit max_sectors for virtual Fibre Channel devices (Cathy Avery) [2211725] - redhat/configs: Enable CONFIG_AMPERE_ERRATUM_AC03_CPU_38 (Shaoqin Huang) [2219725] - arm64: errata: Mitigate Ampere1 erratum AC03_CPU_38 at stage-2 (Shaoqin Huang) [2219725] - KVM: arm64: Correctly handle page aging notifiers for unaligned memslot (Shaoqin Huang) [2219725] - KVM: arm64: timers: Fix resource leaks in kvm_timer_hyp_init() (Shaoqin Huang) [2219725] - KVM: arm64: vgic-v4: Make the doorbell request robust w.r.t preemption (Shaoqin Huang) [2219725] - KVM: arm64: Don't miss pending interrupts for suspended vCPU (Shaoqin Huang) [2219725] - KVM: arm64: Move vGIC v4 handling for WFI out arch callback hook (Shaoqin Huang) [2219725] - KVM: arm64: PMU: Don't overwrite PMUSERENR with vcpu loaded (Shaoqin Huang) [2219725] - KVM: arm64: PMU: Restore the host's PMUSERENR_EL0 (Shaoqin Huang) [2219725] - KVM: arm64: Restore mdcr_el2 from vcpu (Shaoqin Huang) [2219725] - kvm: arm64: Remove __hyp_this_cpu_read (Shaoqin Huang) [2219725] - wifi: rtw88: unlock on error path in rtw_ops_add_interface() (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: check only affected links (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: send time sync only if needed (Inigo Huguet) [2196823] - wifi: clean up erroneously introduced file (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: Handle return value for iwl_mvm_sta_init (Inigo Huguet) [2196823] - wifi: rtw88: delete timer and free skb queue when unloading (Inigo Huguet) [2196823] - wifi: cfg80211: Fix return value in scan logic (Inigo Huguet) [2196823] - Revert 'wifi: ath11k: Enable threaded NAPI' (Inigo Huguet) [2196823] - wifi: cfg80211: fix receiving mesh packets without RFC1042 header (Inigo Huguet) [2196823] - wifi: mt76: mt7921e: fix init command fail with enabled device (Inigo Huguet) [2196823] - wifi: ath9k: convert msecs to jiffies where needed (Inigo Huguet) [2196823] - wifi: ath11k: Add missing check for ioremap (Inigo Huguet) [2196823] - wifi: ath11k: fix memory leak in WMI firmware stats (Inigo Huguet) [2196823] - wifi: ath9k: Fix possible stall on ath9k_txq_list_has_key() (Inigo Huguet) [2196823] - wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: avoid baid size integer overflow (Inigo Huguet) [2196823] - wifi: rtw88: process VO packets without workqueue to avoid PTK rekey failed (Inigo Huguet) [2196823] - wifi: rtw88: Fix action frame transmission fail before association (Inigo Huguet) [2196823] - wifi: iwlwifi: add a few rate index validity checks (Inigo Huguet) [2196823] - wifi: iwlwifi: Validate slots_num before allocating memory (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: Validate tid is in valid range before using it (Inigo Huguet) [2196823] - wifi: iwlwifi: pcie: fix NULL pointer dereference in iwl_pcie_irq_rx_msix_handler() (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: check link during TX (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: add a NULL pointer check (Inigo Huguet) [2196823] - wifi: iwlwifi: pull from TXQs with softirqs disabled (Inigo Huguet) [2196823] - wifi: iwlwifi: Correctly indicate support for VHT TX STBC (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: Add NULL check before dereferencing the pointer (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: fix potential array out of bounds access (Inigo Huguet) [2196823] - wifi: rtw88: add missing unwind goto for __rtw_download_firmware() (Inigo Huguet) [2196823] - wifi: iwlwifi: disable RX STBC when a device doesn't support it (Inigo Huguet) [2196823] - wifi: iwlwifi: don't silently ignore missing suspend or resume ops (Inigo Huguet) [2196823] - wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx (Inigo Huguet) [2196823] - wifi: ath9k: fix AR9003 mac hardware hang check register offset calculation (Inigo Huguet) [2196823] - wifi: rtw89: pci: fix interrupt enable mask for HALT C2H of RTL8851B (Inigo Huguet) [2196823] - wifi: rtw89: fix rtw89_read_chip_ver() for RTL8852B and RTL8851B (Inigo Huguet) [2196823] - wifi: rtw88: fix incorrect error codes in rtw_debugfs_set_* (Inigo Huguet) [2196823] - wifi: rtw88: fix incorrect error codes in rtw_debugfs_copy_from_user (Inigo Huguet) [2196823] - wifi: iwlwifi: pcie: Handle SO-F device for PCI id 0x7AF0 (Inigo Huguet) [2196823] - config: wifi: debug configs for brcm80211 (Inigo Huguet) [2196823] - config: wifi: set RTL8821CS, RTL8822BS and RTL8822CS as disabled (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: spin_lock_bh() to fix lockdep regression (Inigo Huguet) [2196823] - wifi: mac80211: fragment per STA profile correctly (Inigo Huguet) [2196823] - wifi: mac80211: Use active_links instead of valid_links in Tx (Inigo Huguet) [2196823] - wifi: cfg80211: remove links only on AP (Inigo Huguet) [2196823] - wifi: mac80211: take lock before setting vif links (Inigo Huguet) [2196823] - wifi: cfg80211: fix link del callback to call correct handler (Inigo Huguet) [2196823] - wifi: mac80211: fix link activation settings order (Inigo Huguet) [2196823] - wifi: cfg80211: fix double lock bug in reg_wdev_chan_valid() (Inigo Huguet) [2196823] - wifi: cfg80211: fix locking in regulatory disconnect (Inigo Huguet) [2196823] - wifi: cfg80211: fix locking in sched scan stop work (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: Fix -Warray-bounds bug in iwl_mvm_wait_d3_notif() (Inigo Huguet) [2196823] - wifi: mac80211: fix switch count in EMA beacons (Inigo Huguet) [2196823] - wifi: mac80211: don't translate beacon/presp addrs (Inigo Huguet) [2196823] - wifi: mac80211: mlme: fix non-inheritence element (Inigo Huguet) [2196823] - wifi: cfg80211: reject bad AP MLD address (Inigo Huguet) [2196823] - wifi: mac80211: use correct iftype HE cap (Inigo Huguet) [2196823] - wifi: mt76: mt7996: fix possible NULL pointer dereference in mt7996_mac_write_txwi() (Inigo Huguet) [2196823] - wifi: rtw89: remove redundant check of entering LPS (Inigo Huguet) [2196823] - wifi: rtw89: correct PS calculation for SUPPORTS_DYNAMIC_PS (Inigo Huguet) [2196823] - wifi: rtw88: correct PS calculation for SUPPORTS_DYNAMIC_PS (Inigo Huguet) [2196823] - wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll (Inigo Huguet) [2196823] - wifi: b43: fix incorrect __packed annotation (Inigo Huguet) [2196823] - wifi: rtw88: sdio: Always use two consecutive bytes for word operations (Inigo Huguet) [2196823] - mac80211_hwsim: fix memory leak in hwsim_new_radio_nl (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: Add locking to the rate read flow (Inigo Huguet) [2196823] - wifi: iwlwifi: Don't use valid_links to iterate sta links (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: don't trust firmware n_channels (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: fix OEM's name in the tas approved list (Inigo Huguet) [2196823] - wifi: iwlwifi: fix OEM's name in the ppag approved list (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: fix initialization of a return value (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: fix access to fw_id_to_mac_id (Inigo Huguet) [2196823] - wifi: iwlwifi: fw: fix DBGI dump (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: fix number of concurrent link checks (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: fix cancel_delayed_work_sync() deadlock (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: don't double-init spinlock (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: always free dup_data (Inigo Huguet) [2196823] - wifi: mac80211: recalc chanctx mindef before assigning (Inigo Huguet) [2196823] - wifi: mac80211: consider reserved chanctx for mindef (Inigo Huguet) [2196823] - wifi: mac80211: simplify chanctx allocation (Inigo Huguet) [2196823] - wifi: mac80211: Abort running color change when stopping the AP (Inigo Huguet) [2196823] - wifi: mac80211: fix min center freq offset tracing (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: rfi: disable RFI feature (Inigo Huguet) [2196823] - wifi: mac80211: Fix puncturing bitmap handling in __ieee80211_csa_finalize() (Inigo Huguet) [2196823] - wifi: mac80211: fortify the spinlock against deadlock by interrupt (Inigo Huguet) [2196823] - wifi: cfg80211: Drop entries with invalid BSSIDs in RNR (Inigo Huguet) [2196823] - wifi: rtl8xxxu: fix authentication timeout due to incorrect RCR value (Inigo Huguet) [2196823] - wifi: brcmfmac: Check for probe() id argument being NULL (Inigo Huguet) [2196823] - wifi: rtw88: correct qsel_to_ep[] type as int (Inigo Huguet) [2196823] - wifi: rtw88: use work to update rate to avoid RCU warning (Inigo Huguet) [2196823] - wifi: rtw89: 8852b: adjust quota to avoid SER L1 caused by access null page (Inigo Huguet) [2196823] - wifi: mt76: connac: fix stats->tx_bytes calculation (Inigo Huguet) [2196823] - wifi: mt76: mt7996: fix endianness of MT_TXD6_TX_RATE (Inigo Huguet) [2196823] - wifi: rtw88: Update spelling in main.h (Inigo Huguet) [2196823] - wifi: rtl8xxxu: Simplify setting the initial gain (Inigo Huguet) [2196823] - wifi: rtl8xxxu: Add rtl8xxxu_write{8,16,32}_{set,clear} (Inigo Huguet) [2196823] - wifi: rtl8xxxu: Don't print the vendor/product/serial (Inigo Huguet) [2196823] - wifi: rtw88: Fix memory leak in rtw88_usb (Inigo Huguet) [2196823] - wifi: rtw88: call rtw8821c_switch_rf_set() according to chip variant (Inigo Huguet) [2196823] - wifi: rtw88: set pkg_type correctly for specific rtw8821c variants (Inigo Huguet) [2196823] - wifi: rtw88: rtw8821c: Fix rfe_option field width (Inigo Huguet) [2196823] - wifi: rtw88: usb: fix priority queue to endpoint mapping (Inigo Huguet) [2196823] - wifi: rtw88: 8822c: add iface combination (Inigo Huguet) [2196823] - wifi: rtw88: handle station mode concurrent scan with AP mode (Inigo Huguet) [2196823] - wifi: rtw88: prevent scan abort with other VIFs (Inigo Huguet) [2196823] - wifi: rtw88: refine reserved page flow for AP mode (Inigo Huguet) [2196823] - wifi: rtw88: disallow PS during AP mode (Inigo Huguet) [2196823] - wifi: rtw88: 8822c: extend reserved page number (Inigo Huguet) [2196823] - wifi: rtw88: add port switch for AP mode (Inigo Huguet) [2196823] - wifi: rtw88: add bitmap for dynamic port settings (Inigo Huguet) [2196823] - wifi: rtw89: mac: use regular int as return type of DLE buffer request (Inigo Huguet) [2196823] - wifi: mac80211: remove return value check of debugfs_create_dir() (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: fix RFKILL report when driver is going down (Inigo Huguet) [2196823] - wifi: iwlwifi: mei: re-ask for ownership after it was taken by CSME (Inigo Huguet) [2196823] - wifi: iwlwifi: mei: make mei filtered scan more aggressive (Inigo Huguet) [2196823] - wifi: iwlwifi: modify scan request and results when in link protection (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: enable support for MLO APIs (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: prefer RCU_INIT_POINTER() (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: fix potential memory leak (Inigo Huguet) [2196823] - wifi: iwlwifi: fw: fix argument to efi.get_variable (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: fix MIC removal confusion (Inigo Huguet) [2196823] - wifi: iwlwifi: fw: fix memory leak in debugfs (Inigo Huguet) [2196823] - wifi: iwlwifi: Update support for b0 version (Inigo Huguet) [2196823] - wifi: ath11k: Remove disabling of 80+80 and 160 MHz (Inigo Huguet) [2196823] - wifi: ath11k: Fix SKB corruption in REO destination ring (Inigo Huguet) [2196823] - wifi: ath11k: Fix incorrect update of radiotap fields (Inigo Huguet) [2196823] - wifi: ath11k: fix tx status reporting in encap offload mode (Inigo Huguet) [2196823] - wifi: ath11k: add peer mac information in failure cases (Inigo Huguet) [2196823] - wifi: ath11k: Prevent REO cmd failures (Inigo Huguet) [2196823] - wifi: ath11k: fix double free of peer rx_tid during reo cmd failure (Inigo Huguet) [2196823] - wifi: mt76: mt7996: fill txd by host driver (Inigo Huguet) [2196823] - wifi: mt76: set NL80211_EXT_FEATURE_CAN_REPLACE_PTK0 on supported drivers (Inigo Huguet) [2196823] - wifi: mt76: dma: use napi_build_skb (Inigo Huguet) [2196823] - wifi: mt76: mt7615: increase eeprom size for mt7663 (Inigo Huguet) [2196823] - wifi: mt76: mt7996: enable mesh HW amsdu/de-amsdu support (Inigo Huguet) [2196823] - wifi: mt76: mt7996: enable configured beacon tx rate (Inigo Huguet) [2196823] - wifi: mt76: mt7996: enable BSS_CHANGED_MCAST_RATE support (Inigo Huguet) [2196823] - wifi: mt76: mt7996: enable BSS_CHANGED_BASIC_RATES support (Inigo Huguet) [2196823] - wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace (Inigo Huguet) [2196823] - wifi: mac80211: remove ieee80211_tx_status_8023 (Inigo Huguet) [2196823] - wifi: iwlwifi: bump FW API to 78 for AX devices (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: check firmware response size (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: add MLO support to SF - use sta pointer (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: configure TLC on link activation (Inigo Huguet) [2196823] - wifi: iwlwifi: fix iwl_mvm_max_amsdu_size() for MLO (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: remove RS rate init update argument (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: initialize per-link STA ratescale data (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: rs-fw: properly access sband->iftype_data (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: only clients can be 20MHz-only (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: fix iwl_mvm_sta_rc_update for MLO (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: remove per-STA MFP setting (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: allow NL80211_EXT_FEATURE_SCAN_MIN_PREQ_CONTENT (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: use BSSID when building probe requests (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: update mac id management (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: adopt the latest firmware API (Inigo Huguet) [2196823] - wifi: mt76: connac: add nss calculation into mt76_connac2_mac_tx_rate_val() (Inigo Huguet) [2196823] - wifi: mt76: connac: fix txd multicast rate setting (Inigo Huguet) [2196823] - wifi: mt76: mt7921e: stop chip reset worker in unregister hook (Inigo Huguet) [2196823] - wifi: mt76: mt7921e: improve reliability of dma reset (Inigo Huguet) [2196823] - wifi: mt76: mt7921: fix missing unwind goto in mt7921u_probe (Inigo Huguet) [2196823] - mt76: mt7921: fix kernel panic by accessing unallocated eeprom.data (Inigo Huguet) [2196823] - wifi: mt76: move mcu_uni_event and mcu_reg_event in common code (Inigo Huguet) [2196823] - wifi: mt76: mt7996: enable coredump support (Inigo Huguet) [2196823] - wifi: mt76: mt7996: add full system reset knobs into debugfs (Inigo Huguet) [2196823] - wifi: mt76: mt7996: enable full system reset support (Inigo Huguet) [2196823] - wifi: mt76: mt7921: enable p2p support (Inigo Huguet) [2196823] - wifi: mt76: mt7921: Replace fake flex-arrays with flexible-array members (Inigo Huguet) [2196823] - wifi: mt76: Replace zero-length array with flexible-array member (Inigo Huguet) [2196823] - wifi: mt76: mt7921: add Netgear AXE3000 (A8000) support (Inigo Huguet) [2196823] - wifi: mt76: mt7915: drop redundant prefix of mt7915_txpower_puts() (Inigo Huguet) [2196823] - wifi: mt76: fix 6GHz high channel not be scanned (Inigo Huguet) [2196823] - wifi: mt76: mt7921e: fix probe timeout after reboot (Inigo Huguet) [2196823] - wifi: mt76: move shared mac definitions in mt76_connac2_mac.h (Inigo Huguet) [2196823] - wifi: mt76: mt7921: get rid of eeprom.h (Inigo Huguet) [2196823] - wifi: mt76: add mt76_connac_gen_ppe_thresh utility routine (Inigo Huguet) [2196823] - wifi: mt76: get rid of unused sta_ps callbacks (Inigo Huguet) [2196823] - wifi: mt76: add mt76_connac_irq_enable utility routine (Inigo Huguet) [2196823] - wifi: mt76: move irq_tasklet in mt76_dev struct (Inigo Huguet) [2196823] - wifi: mt76: mt7921e: Set memory space enable in PCI_COMMAND if unset (Inigo Huguet) [2196823] - wifi: mt76: mt7921: use driver flags rather than mac80211 flags to mcu (Inigo Huguet) [2196823] - wifi: mt76: mt7921: introduce mt7921_get_mac80211_ops utility routine (Inigo Huguet) [2196823] - wifi: mt76: mt7996: fix eeprom tx path bitfields (Inigo Huguet) [2196823] - wifi: mt76: mt7996: remove mt7996_mcu_set_pm() (Inigo Huguet) [2196823] - wifi: mt76: mt7996: init mpdu density cap (Inigo Huguet) [2196823] - wifi: mt76: mt7996: fix pointer calculation in ie countdown event (Inigo Huguet) [2196823] - wifi: mt76: mt7996: remove unused eeprom band selection (Inigo Huguet) [2196823] - wifi: mt76: mt7996: let non-bufferable MMPDUs use correct hw queue (Inigo Huguet) [2196823] - wifi: mt76: mt7996: add eht rx rate support (Inigo Huguet) [2196823] - wifi: mt76: mt7996: remove mt7996_mcu_beacon_check_caps() (Inigo Huguet) [2196823] - wifi: mt76: mt7915: remove mt7915_mcu_beacon_check_caps() (Inigo Huguet) [2196823] - wifi: mt76: connac: refresh tx session timer for WED device (Inigo Huguet) [2196823] - wifi: mt76: add missing locking to protect against concurrent rx/status calls (Inigo Huguet) [2196823] - wifi: mt76: handle failure of vzalloc in mt7615_coredump_work (Inigo Huguet) [2196823] - wifi: mt76: drop the incorrect scatter and gather frame (Inigo Huguet) [2196823] - wifi: mt76: mt7915: rework init flow in mt7915_thermal_init() (Inigo Huguet) [2196823] - wifi: mt76: mt7915: add dev->hif2 support for mt7916 WED device (Inigo Huguet) [2196823] - wifi: mt76: mt7915: expose device tree match table (Inigo Huguet) [2196823] - wifi: mt76: dynamic channel bandwidth changes in AP mode (Inigo Huguet) [2196823] - wifi: mt76: mt7996: fix radiotap bitfield (Inigo Huguet) [2196823] - wifi: mt76: mt7915: unlock on error in mt7915_thermal_temp_store() (Inigo Huguet) [2196823] - wifi: mt76: mt7996: Remove unneeded semicolon (Inigo Huguet) [2196823] - wifi: mt76: mt7921: fix PCI DMA hang after reboot (Inigo Huguet) [2196823] - wifi: mt76: mt7921: fix wrong command to set STA channel (Inigo Huguet) [2196823] - wifi: mt76: remove redundent MCU_UNI_CMD_* definitions (Inigo Huguet) [2196823] - wifi: ath9k: fix per-packet TX-power cap for TPC (Inigo Huguet) [2196823] - wifi: ath11k: fix undefined behavior with __fls in dp (Inigo Huguet) [2196823] - wifi: ath11k: Ignore frags from uninitialized peer in dp. (Inigo Huguet) [2196823] - wifi: ath11k: print a warning when crypto_alloc_shash() fails (Inigo Huguet) [2196823] - wifi: ath11k: pci: Add more MODULE_FIRMWARE() entries (Inigo Huguet) [2196823] - wifi: ath11k: enable SAR support on WCN6750 (Inigo Huguet) [2196823] - wifi: ath11k: Disable Spectral scan upon removing interface (Inigo Huguet) [2196823] - wifi: rtw89: add support of concurrent mode (Inigo Huguet) [2196823] - wifi: rtw89: Disallow power save with multiple stations (Inigo Huguet) [2196823] - wifi: rtw89: update statistics to FW for fine-tuning performance (Inigo Huguet) [2196823] - wifi: rtw89: use struct instead of macros to set H2C command of hardware scan (Inigo Huguet) [2196823] - wifi: rtw89: refine scan function after chanctx (Inigo Huguet) [2196823] - wifi: rtw89: prohibit enter IPS during HW scan (Inigo Huguet) [2196823] - wifi: rtw89: coex: send more hardware module info to firmware for 8851B (Inigo Huguet) [2196823] - wifi: rtw89: coex: Update function to get BT RSSI and hardware counter (Inigo Huguet) [2196823] - wifi: rtw89: coex: Add path control register to monitor list (Inigo Huguet) [2196823] - wifi: rtw89: coex: Enable Wi-Fi RX gain control for free run solution (Inigo Huguet) [2196823] - wifi: rtw89: fix power save function in WoWLAN mode (Inigo Huguet) [2196823] - wifi: rtw89: support WoWLAN mode for 8852be (Inigo Huguet) [2196823] - wifi: iwlwifi: move debug buffer allocation failure to info verbosity (Inigo Huguet) [2196823] - wifi: iwlwifi: make the loop for card preparation effective (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: allow number of beacons from FW (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: implement key link switching (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: implement BAID link switching (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: track station mask for BAIDs (Inigo Huguet) [2196823] - wifi: iwlwifi: bump FW API to 77 for AX devices (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: use correct sta mask to remove queue (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: avoid iterating over an un-initialized list (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: factor out iwl_mvm_sta_fw_id_mask() (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: properly implement HE AP support (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: Fix _iwl_mvm_get_scan_type() (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: fix getting lowest TX rate for MLO (Inigo Huguet) [2196823] - wifi: iwlwifi: call napi_synchronize() before freeing rx/tx queues (Inigo Huguet) [2196823] - wifi: iwlwifi: nvm-parse: add full BW UL MU-MIMO support (Inigo Huguet) [2196823] - wifi: rtl8xxxu: Support devices with 5-6 out endpoints (Inigo Huguet) [2196823] - wifi: rtl8xxxu: Clean up some messy ifs (Inigo Huguet) [2196823] - wifi: brcmfmac: add Cypress 43439 SDIO ids (Inigo Huguet) [2196823] - wifi: rtw89: fix crash due to null pointer of sta in AP mode (Inigo Huguet) [2196823] - wifi: rtw89: correct 5 MHz mask setting (Inigo Huguet) [2196823] - wifi: rtw89: 8851b: add tables for RFK (Inigo Huguet) [2196823] - wifi: rtw89: 8851b: add BB and RF tables (2 of 2) (Inigo Huguet) [2196823] - wifi: rtw89: 8851b: add BB and RF tables (1 of 2) (Inigo Huguet) [2196823] - wifi: rtw89: pci: update PCI related settings to support 8851B (Inigo Huguet) [2196823] - wifi: rtw89: mac: update MAC settings to support 8851b (Inigo Huguet) [2196823] - wifi: rtw89: 8851b: fix TX path to path A for one RF path chip (Inigo Huguet) [2196823] - wifi: rtw89: read version of analog hardware (Inigo Huguet) [2196823] - wifi: rtw89: use hardware CFO to improve performance (Inigo Huguet) [2196823] - wifi: rtw89: support parameter tables by RFE type (Inigo Huguet) [2196823] - wifi: rtw89: fix authentication fail during scan (Inigo Huguet) [2196823] - wifi: rtw89: add flag check for power state (Inigo Huguet) [2196823] - wifi: rtw89: add ieee80211::remain_on_channel ops (Inigo Huguet) [2196823] - wifi: rtw89: add function to wait for completion of TX skbs (Inigo Huguet) [2196823] - wifi: rtw89: 8852c: add beacon filter and CQM support (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: tx: remove misleading if statement (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: Fix setting the rate for non station cases (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: validate station properly in flush (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: set STA mask for keys in MLO (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: fix ptk_pn memory leak (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: make iwl_mvm_mac_ctxt_send_beacon() static (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: track AP STA pointer and use it for MFP (Inigo Huguet) [2196823] - wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf (Inigo Huguet) [2196823] - wifi: iwlwifi: fw: move memset before early return (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: initialize seq variable (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: Fix spelling mistake 'Gerenal' -> 'General' (Inigo Huguet) [2196823] - wifi: iwlwifi: Fix spelling mistake 'upto' -> 'up to' (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: enable new MLD FW API (Inigo Huguet) [2196823] - wifi: iwlwifi: add a new PCI device ID for BZ device (Inigo Huguet) [2196823] - wifi: iwlwifi: Add RF Step Type for BZ device (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: scan legacy bands and UHB channels with same antenna (Inigo Huguet) [2196823] - wifi: iwlwifi: yoyo: Fix possible division by zero (Inigo Huguet) [2196823] - wifi: iwlwifi: yoyo: skip dump correctly on hw error (Inigo Huguet) [2196823] - wifi: iwlwifi: pcie: fix possible NULL pointer dereference (Inigo Huguet) [2196823] - wifi: iwlwifi: Fix the duplicate dump name (Inigo Huguet) [2196823] - wifi: iwlwifi: pcie: work around ROM bug on AX210 integrated (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: add DSM_FUNC_ENABLE_6E value to debugfs (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: cleanup beacon_inject_active during hw restart (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: support wowlan info notification version 2 (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: make HLTK configuration for PASN station optional (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: request limiting to 8 MSDUs per A-MSDU (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: fix shift-out-of-bounds (Inigo Huguet) [2196823] - wifi: iwlwifi: acpi: support modules with high antenna gain (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: don't drop unencrypted MCAST frames (Inigo Huguet) [2196823] - wifi: iwlwifi: dbg: print pc register data once fw dump occurred (Inigo Huguet) [2196823] - wifi: mac80211: add flush_sta method (Inigo Huguet) [2196823] - wifi: mac80211: flush queues on STA removal (Inigo Huguet) [2196823] - wifi: ieee80211: correctly mark FTM frames non-bufferable (Inigo Huguet) [2196823] - wifi: ieee80211: clean up public action codes (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: don't set CHECKSUM_COMPLETE for unsupported protocols (Inigo Huguet) [2196823] - wifi: iwlwifi: trans: don't trigger d3 interrupt twice (Inigo Huguet) [2196823] - wifi: iwlwifi: Update configurations for Bnj-a0 and specific rf devices (Inigo Huguet) [2196823] - wifi: iwlwifi: Update init sequence if tx diversity supported (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: move function sequence (Inigo Huguet) [2196823] - wifi: iwlwifi: nvm: Update HE capabilities on 6GHz band for EHT device (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: refactor TX csum mode check (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: fix A-MSDU checks (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: enable bz hw checksum from c step (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: use OFDM rate if IEEE80211_TX_CTL_NO_CCK_RATE is set (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: convert TID to FW value on queue remove (Inigo Huguet) [2196823] - wifi: iwlwifi: Update configuration for SO,SOF MAC and HR RF (Inigo Huguet) [2196823] - wifi: iwlwifi: add a validity check of queue_id in iwl_txq_reclaim (Inigo Huguet) [2196823] - wifi: iwlwifi: nvm-parse: enable 160/320 MHz for AP mode (Inigo Huguet) [2196823] - wifi: iwlwifi: debug: fix crash in __iwl_err() (Inigo Huguet) [2196823] - wifi: rtw88: Add support for the SDIO based RTL8821CS chipset (Inigo Huguet) [2196823] - wifi: rtw88: Add support for the SDIO based RTL8822CS chipset (Inigo Huguet) [2196823] - wifi: rtw88: Add support for the SDIO based RTL8822BS chipset (Inigo Huguet) [2196823] - wifi: rtw88: main: Reserve 8 bytes of extra TX headroom for SDIO cards (Inigo Huguet) [2196823] - wifi: rtw88: main: Add the {cpwm,rpwm}_addr for SDIO based chipsets (Inigo Huguet) [2196823] - wifi: rtw88: mac: Support SDIO specific bits in the power on sequence (Inigo Huguet) [2196823] - wifi: rtw88: sdio: Add HCI implementation for SDIO based chipsets (Inigo Huguet) [2196823] - wifi: rtw88: Clear RTW_FLAG_POWERON early in rtw_mac_power_switch() (Inigo Huguet) [2196823] - wifi: ath12k: Remove redundant pci_clear_master (Inigo Huguet) [2196823] - wifi: ath10k: Remove redundant pci_clear_master (Inigo Huguet) [2196823] - wifi: ath11k: Remove redundant pci_clear_master (Inigo Huguet) [2196823] - wifi: ath11k: Send 11d scan start before WMI_START_SCAN_CMDID (Inigo Huguet) [2196823] - wifi: ath11k: fix writing to unintended memory region (Inigo Huguet) [2196823] - wifi: ath11k: Fix invalid management rx frame length issue (Inigo Huguet) [2196823] - wifi: ath11k: fix rssi station dump not updated in QCN9074 (Inigo Huguet) [2196823] - wifi: ath11k: Configure the FTM responder role using firmware capability flag (Inigo Huguet) [2196823] - wifi: ath11k: Optimize 6 GHz scan time (Inigo Huguet) [2196823] - wifi: mac80211: set EHT support flag in AP mode (Inigo Huguet) [2196823] - wifi: mac80211_hwsim: fix potential NULL deref in hwsim_pmsr_report_nl() (Inigo Huguet) [2196823] - wifi: iwlwifi: fix duplicate entry in iwl_dev_info_table (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: fix the order of TIMING_MEASUREMENT notifications (Inigo Huguet) [2196823] - bus: mhi: host: Use mhi_tryset_pm_state() for setting fw error state (Inigo Huguet) [2196823] - bus: mhi: host: Remove duplicate ee check for syserr (Inigo Huguet) [2196823] - bus: mhi: host: Avoid ringing EV DB if there are no elements to process (Inigo Huguet) [2196823] - net: rfkill-gpio: Add explicit include for of.h (Inigo Huguet) [2196823] - net: qrtr: correct types of trace event parameters (Inigo Huguet) [2196823] - wifi: rt2x00: Fix memory leak when handling surveys (Inigo Huguet) [2196823] - wifi: b43legacy: Remove the unused function prev_slot() (Inigo Huguet) [2196823] - wifi: rtw89: Remove redundant pci_clear_master (Inigo Huguet) [2196823] - wifi: rtw89: fix potential race condition between napi_init and napi_enable (Inigo Huguet) [2196823] - wifi: rtw89: config EDCCA threshold during scan to prevent TX failed (Inigo Huguet) [2196823] - wifi: rtw89: fix incorrect channel info during scan due to ppdu_sts filtering (Inigo Huguet) [2196823] - wifi: rtw89: remove superfluous H2C of join_info (Inigo Huguet) [2196823] - wifi: rtw89: set data lowest rate according to AP supported rate (Inigo Huguet) [2196823] - wifi: rtw89: add counters of register-based H2C/C2H (Inigo Huguet) [2196823] - wifi: rtw89: coex: Update Wi-Fi Bluetooth coexistence version to 7.0.1 (Inigo Huguet) [2196823] - wifi: rtw89: coex: Add report control v5 variation (Inigo Huguet) [2196823] - wifi: rtw89: coex: Update RTL8852B LNA2 hardware parameter (Inigo Huguet) [2196823] - wifi: rtw89: coex: Not to enable firmware report when WiFi is power saving (Inigo Huguet) [2196823] - wifi: rtw89: coex: Add LPS protocol radio state for RTL8852B (Inigo Huguet) [2196823] - bus: mhi: pci_generic: Add Foxconn T99W510 (Inigo Huguet) [2196823] - bus: mhi: host: Use ERANGE for BHIOFF/BHIEOFF range check (Inigo Huguet) [2196823] - bus: mhi: host: Range check CHDBOFF and ERDBOFF (Inigo Huguet) [2196823] - wifi: mwifiex: remove unused evt_buf variable (Inigo Huguet) [2196823] - wifi: brcmsmac: ampdu: remove unused suc_mpdu variable (Inigo Huguet) [2196823] - wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg() (Inigo Huguet) [2196823] - wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg() (Inigo Huguet) [2196823] - wifi: brcmsmac: remove unused has_5g variable (Inigo Huguet) [2196823] - wifi: b43legacy: remove unused freq_r3A_value function (Inigo Huguet) [2196823] - wifi: rtlwifi: Replace fake flex-array with flex-array member (Inigo Huguet) [2196823] - wifi: rtw88: Remove redundant pci_clear_master (Inigo Huguet) [2196823] - wifi: rndis_wlan: Replace fake flex-array with flexible-array member (Inigo Huguet) [2196823] - wifi: rndis_wlan: clean up a type issue (Inigo Huguet) [2196823] - wifi: rtw88: remove unused rtw_pci_get_tx_desc function (Inigo Huguet) [2196823] - wifi: rsi: Slightly simplify rsi_set_channel() (Inigo Huguet) [2196823] - wifi: ipw2x00: remove unused _ipw_read16 function (Inigo Huguet) [2196823] - wifi: mac80211: enable EHT mesh support (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: correctly use link in iwl_mvm_sta_del() (Inigo Huguet) [2196823] - wifi: iwlwifi: separate AP link management queues (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: free probe_resp_data later (Inigo Huguet) [2196823] - wifi: iwlwifi: bump FW API to 75 for AX devices (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: move max_agg_bufsize into host TLC lq_sta (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: send full STA during HW restart (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: rework active links counting (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: update mac config when assigning chanctx (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: use the correct link queue (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: clean up mac_id vs. link_id in MLD sta (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: fix station link data leak (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: initialize max_rc_amsdu_len per-link (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: use appropriate link for rate selection (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: use the new lockdep-checking macros (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: remove chanctx WARN_ON (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: avoid sending MAC context for idle (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: remove only link-specific AP keys (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: skip inactive links (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: adjust iwl_mvm_scan_respect_p2p_go_iter() for MLO (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: rxmq: report link ID to mac80211 (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: use bcast/mcast link station id (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: translate management frame address (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: implement mac80211 callback change_sta_links (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: use the link sta address (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: adjust rs init to MLO (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: adjust radar detection to MLO (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: adjust iwl_mvm_sec_key_remove_ap to MLO (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: make a few warnings only trigger once (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: coex: start handling multiple links (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: rs-fw: don't crash on missing channel (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: use STA link address (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: skip MEI update for MLO (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: fix narrow RU check for MLO (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: make some HW flags conditional (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: implement link change ops (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: adjust some cleanup functions to MLO (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: refactor iwl_mvm_mac_sta_state_common() (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: update iwl_mvm_tx_reclaim() for MLO (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: adjust to MLO assign/unassign/switch_vif_chanctx() (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: add fw link id allocation (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: adjust internal stations to MLO (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: replace bss_info_changed() with vif_cfg/link_info_changed() (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: add link_conf parameter for add/remove/change link (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: don't check dtim_period in new API (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: adjust SMPS for MLO (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: add set_hw_timestamp to mld ops (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: add link to firmware earlier (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: adjust some PS and PM methods to MLD (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: adjust mld_mac_ctxt_/beacon_changed() for MLO (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: adjust smart fifo configuration to MLO (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: align to the LINK cmd update in the FW (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: always use the sta->addr as the peers addr (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: modify link instead of removing it during csa (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: fix crash on queue removal for MLD API too (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: fix 'modify_mask' value in the link cmd. (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: add all missing ops to iwl_mvm_mld_ops (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: add support for post_channel_switch in MLD mode (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: unite sta_modify_disable_tx flows (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: add cancel/remain_on_channel for MLD mode (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: refactor iwl_mvm_roc() (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: add some new MLD ops (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: add sta handling flows for MLD mode (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: add an indication that the new MLD API is used (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: sta preparation for MLO (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: vif preparation for MLO (Inigo Huguet) [2196823] - wifi: nl80211: support advertising S1G capabilities (Inigo Huguet) [2196823] - wifi: mac80211: S1G capabilities information element in probe request (Inigo Huguet) [2196823] - mac80211: minstrel_ht: remove unused n_supported variable (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: Use 64-bit division helper in iwl_mvm_get_crosstimestamp_fw() (Inigo Huguet) [2196823] - wifi: carl9170: Replace fake flex-array with flexible-array member (Inigo Huguet) [2196823] - wifi: carl9170: Fix multiple -Warray-bounds warnings (Inigo Huguet) [2196823] - wifi: ath10k: remove unused ath10k_get_ring_byte function (Inigo Huguet) [2196823] - wifi: ath12k: incorrect channel survey dump (Inigo Huguet) [2196823] - wifi: ath12k: fix incorrect handling of AMSDU frames (Inigo Huguet) [2196823] - wifi: ath12k: fix packets are sent in native wifi mode while we set raw mode (Inigo Huguet) [2196823] - wifi: ath12k: fill peer meta data during reo_reinject (Inigo Huguet) [2196823] - mac80211_hwsim: add PMSR report support via virtio (Inigo Huguet) [2196823] - mac80211_hwsim: add PMSR abort support via virtio (Inigo Huguet) [2196823] - mac80211_hwsim: add PMSR request support via virtio (Inigo Huguet) [2196823] - wifi: nl80211: make nl80211_send_chandef non-static (Inigo Huguet) [2196823] - mac80211_hwsim: add PMSR capability support (Inigo Huguet) [2196823] - mac80211: support RNR for EMA AP (Inigo Huguet) [2196823] - cfg80211: support RNR for EMA AP (Inigo Huguet) [2196823] - wifi: mac80211: use bullet list for amsdu_mesh_control formats list (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: fix NULL deref in iwl_mvm_mld_disable_txq (Inigo Huguet) [2196823] - wifi: mac80211_hwsim: EMA support (Inigo Huguet) [2196823] - wifi: mac80211_hwsim: Multiple BSSID support (Inigo Huguet) [2196823] - wifi: mac80211_hwsim: move beacon transmission to a separate function (Inigo Huguet) [2196823] - wifi: mac80211: generate EMA beacons in AP mode (Inigo Huguet) [2196823] - wifi: nl80211: Update the documentation of NL80211_SCAN_FLAG_COLOCATED_6GHZ (Inigo Huguet) [2196823] - wifi: mac80211: implement support for yet another mesh A-MSDU format (Inigo Huguet) [2196823] - wifi: mac80211: add mesh fast-rx support (Inigo Huguet) [2196823] - wifi: mac80211: use mesh header cache to speed up mesh forwarding (Inigo Huguet) [2196823] - wifi: mac80211: mesh fast xmit support (Inigo Huguet) [2196823] - wifi: mac80211: fix race in mesh sequence number assignment (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: Add debugfs to get TAS status (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: support enabling and disabling HW timestamping (Inigo Huguet) [2196823] - wifi: iwlwifi: Update configurations for Bnj device (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: refactor iwl_mvm_add_sta(), iwl_mvm_rm_sta() (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: remove not needed initializations (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: refactor iwl_mvm_sta_send_to_fw() (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: refactor iwl_mvm_sta (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: refactor iwl_mvm_cfg_he_sta() (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: Don't send MAC CTXT cmd after deauthorization (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: add stop_ap() and leave_ibss() callbacks for MLD mode (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: add start_ap() and join_ibss() callbacks for MLD mode (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: select ptp cross timestamp from multiple reads (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: implement PHC clock adjustments (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: enable TX beacon protection (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: add support for timing measurement (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: report hardware timestamps in RX/TX status (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: read synced time from firmware if supported (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: add support for PTP HW clock (PHC) (Inigo Huguet) [2196823] - wifi: ath12k: Enable IMPS for WCN7850 (Inigo Huguet) [2196823] - wifi: ath12k: Identify DFS channel when sending scan channel list command (Inigo Huguet) [2196823] - wifi: ath12k: fix firmware assert during channel switch for peer sta (Inigo Huguet) [2196823] - wifi: ath12k: fix memory leak in ath12k_qmi_driver_event_work() (Inigo Huguet) [2196823] - wifi: ath11k: fix BUFFER_DONE read on monitor ring rx buffer (Inigo Huguet) [2196823] - wifi: rtl8xxxu: Support new chip RTL8710BU aka RTL8188GU (Inigo Huguet) [2196823] - wifi: rtl8xxxu: RTL8192EU always needs full init (Inigo Huguet) [2196823] - wifi: iwlwifi: Avoid disabling GCC specific flag with clang (Inigo Huguet) [2196823] - wifi: iwlwifi: suppress printf warnings in tracing (Inigo Huguet) [2196823] - wifi: iwlwifi: fw: pnvm: fix uefi reduced TX power loading (Inigo Huguet) [2196823] - wifi: iwlwifi: Update configurations for Bnj and Bz devices (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: rs: print BAD_RATE for invalid HT/VHT index (Inigo Huguet) [2196823] - wifi: iwlwifi: Replace space with tabs as code indent (Inigo Huguet) [2196823] - wifi: iwlwifi: Add required space before open '(' (Inigo Huguet) [2196823] - wifi: iwlwifi: Remove prohibited spaces (Inigo Huguet) [2196823] - wifi: iwlwifi: fix typos in comment (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: remove setting of 'sta' parameter (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: add an unassign_vif_chanctx() callback for MLD mode (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: refactor __iwl_mvm_unassign_vif_chanctx() (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: add an assign_vif_chanctx() callback for MLD mode (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: refactor __iwl_mvm_assign_vif_chanctx() (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: Add a remove_interface() callback for mld mode (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: Add an add_interface() callback for mld mode (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: add support for the new STA related commands (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: add support for the new LINK command (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: add support for the new MAC CTXT command (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: Refactor MAC_CONTEXT_CMD sending flow (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: Refactor STA_HE_CTXT_CMD sending flow (Inigo Huguet) [2196823] - wifi: iwlwifi: yoyo: Add driver defined dump file name (Inigo Huguet) [2196823] - wifi: iwlwifi: yoyo: Add new tlv for dump file name extension (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: avoid sta lookup in queue alloc (Inigo Huguet) [2196823] - wifi: ath11k: fix deinitialization of firmware resources (Inigo Huguet) [2196823] - wifi: ath11k: Replace fake flex-array with flexible-array member (Inigo Huguet) [2196823] - wifi: ath12k: Add missing unwind goto in ath12k_pci_probe() (Inigo Huguet) [2196823] - net: Use of_property_present() for testing DT property presence (Inigo Huguet) [2196823] - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() (Inigo Huguet) [2196823] {CVE-2023-1380} - wifi: rtw88: fix memory leak in rtw_usb_probe() (Inigo Huguet) [2196823] - wifi: rtw89: coex: Add v5 firmware cycle status report (Inigo Huguet) [2196823] - wifi: rtw89: coex: Add v2 Bluetooth scan info (Inigo Huguet) [2196823] - wifi: rtw89: coex: Fix wrong structure assignment at null data report (Inigo Huguet) [2196823] - wifi: rtw89: coex: Add register monitor report v2 format (Inigo Huguet) [2196823] - wifi: rtw89: coex: Add traffic TX/RX info and its H2C (Inigo Huguet) [2196823] - wifi: rtw89: coex: Add WiFi role info v2 (Inigo Huguet) [2196823] - wifi: rtw89: coex: Add more error_map and counter to log (Inigo Huguet) [2196823] - wifi: rtl8xxxu: use module_usb_driver (Inigo Huguet) [2196823] - wifi: rtw89: release RX standby timer of beamformee CSI to save power (Inigo Huguet) [2196823] - wifi: rtl8xxxu: mark Edimax EW-7811Un V2 as tested (Inigo Huguet) [2196823] - wifi: brcmfmac: Use ISO3166 country code and rev 0 as fallback on 4356 (Inigo Huguet) [2196823] - wifi: move raycs, wl3501 and rndis_wlan to legacy directory (Inigo Huguet) [2196823] - wifi: move mac80211_hwsim and virt_wifi to virtual directory (Inigo Huguet) [2196823] - wifi: ath11k: add debug prints in regulatory WMI event processing (Inigo Huguet) [2196823] - wifi: ath11k: add support to parse new WMI event for 6 GHz (Inigo Huguet) [2196823] - wifi: ath11k: use proper regulatory reference for bands (Inigo Huguet) [2196823] - bus: mhi: host: pci_generic: Revert 'Add a secondary AT port to Telit FN990' (Inigo Huguet) [2196823] - bus: mhi: host: pci_generic: Drop redundant pci_enable_pcie_error_reporting() (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: fix EOF bit reporting (Inigo Huguet) [2196823] - wifi: iwlwifi: Do not include radiotap EHT user info if not needed (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: add EHT RU allocation to radiotap (Inigo Huguet) [2196823] - wifi: iwlwifi: Update logs for yoyo reset sw changes (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: clean up duplicated defines (Inigo Huguet) [2196823] - wifi: iwlwifi: rs-fw: break out for unsupported bandwidth (Inigo Huguet) [2196823] - wifi: iwlwifi: Add support for B step of BnJ-Fm4 (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: make flush code a bit clearer (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: avoid UB shift of snif_queue (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: add primary 80 known for EHT radiotap (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: parse FW frame metadata for EHT sniffer mode (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: decode USIG_B1_B7 RU to nl80211 RU width (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: rename define to generic name (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: allow Microsoft to use TAS (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: add all EHT based on data0 info from HW (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: add EHT radiotap info based on rate_n_flags (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: add an helper function radiotap TLVs (Inigo Huguet) [2196823] - wifi: radiotap: separate vendor TLV into header/content (Inigo Huguet) [2196823] - bus: mhi: ep: Demote unsupported channel error log to debug (Inigo Huguet) [2196823] - bus: mhi: host: Remove mhi_poll() API (Inigo Huguet) [2196823] - wifi: iwlwifi: reduce verbosity of some logging events (Inigo Huguet) [2196823] - wifi: iwlwifi: Adding the code to get RF name for MsP device (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: mark mac header with no data frames (Inigo Huguet) [2196823] - wifi: iwlwifi: mvm: add LSIG info to radio tap info in EHT (Inigo Huguet) [2196823] - wifi: nl80211: Add support for randomizing TA of auth and deauth frames (Inigo Huguet) [2196823] - wifi: mac80211: add LDPC related flags in ieee80211_bss_conf (Inigo Huguet) [2196823] - wifi: mac80211: add EHT MU-MIMO related flags in ieee80211_bss_conf (Inigo Huguet) [2196823] - wifi: mac80211: introduce ieee80211_refresh_tx_agg_session_timer() (Inigo Huguet) [2196823] - wifi: mac80211: add support for driver adding radiotap TLVs (Inigo Huguet) [2196823] - wifi: radiotap: Add EHT radiotap definitions (Inigo Huguet) [2196823] - wifi: mac80211: fix ieee80211_link_set_associated() type (Inigo Huguet) [2196823] - wifi: mac80211: simplify reasoning about EHT capa handling (Inigo Huguet) [2196823] - wifi: mac80211: mlme: remove pointless sta check (Inigo Huguet) [2196823] - wifi: mac80211_hwsim: Indicate support for NL80211_EXT_FEATURE_SCAN_MIN_PREQ_CONTENT (Inigo Huguet) [2196823] - wifi: mac80211: add netdev per-link debugfs data and driver hook (Inigo Huguet) [2196823] - wifi: mac80211: remove SMPS from AP debugfs (Inigo Huguet) [2196823] - wifi: mac80211: add pointer from bss_conf to vif (Inigo Huguet) [2196823] - wifi: mac80211: warn only once on AP probe (Inigo Huguet) [2196823] - wifi: cfg80211/mac80211: report link ID on control port RX (Inigo Huguet) [2196823] - wifi: mac80211: add support for set_hw_timestamp command (Inigo Huguet) [2196823] - wifi: nl80211: add a command to enable/disable HW timestamping (Inigo Huguet) [2196823] - wifi: wireless: cleanup unused function parameters (Inigo Huguet) [2196823] - wifi: wireless: correct primary channel validation on 6 GHz (Inigo Huguet) [2196823] - wifi: wireless: return primary channel regardless of DUP (Inigo Huguet) [2196823] - wifi: mac80211: allow beacon protection HW offload (Inigo Huguet) [2196823] - wifi: mac80211: check key taint for beacon protection (Inigo Huguet) [2196823] - wifi: mac80211: clear all bits that relate rtap fields on skb (Inigo Huguet) [2196823] - wifi: mac80211: adjust scan cancel comment/check (Inigo Huguet) [2196823] - wifi: nl80211: Update the documentation of NL80211_SCAN_FLAG_COLOCATED_6GHZ (Inigo Huguet) [2196823] - gpiolib: split linux/gpio/driver.h out of linux/gpio.h (Inigo Huguet) [2196823] - wifi: rtlwifi: rtl8192se: Remove some unused variables (Inigo Huguet) [2196823] - wifi: rtw88: mac: Return the original error from rtw_mac_power_switch() (Inigo Huguet) [2196823] - wifi: rtw88: mac: Return the original error from rtw_pwr_seq_parser() (Inigo Huguet) [2196823] - wifi: brcmfmac: pcie: Add 4359C0 firmware definition (Inigo Huguet) [2196823] - wifi: rtw89: fix SER L1 might stop entering LPS issue (Inigo Huguet) [2196823] - wifi: ath11k: Add tx ack signal support for management packets (Inigo Huguet) [2196823] - wifi: brcmfmac: pcie: Add BCM4378B3 support (Inigo Huguet) [2196823] - wifi: brcmfmac: common: Add support for external calibration blobs (Inigo Huguet) [2196823] - wifi: brcmfmac: pcie: Load and provide TxCap blobs (Inigo Huguet) [2196823] - wifi: brcmfmac: common: Add support for downloading TxCap blobs (Inigo Huguet) [2196823] - wifi: brcmfmac: pcie: Add IDs/properties for BCM4387 (Inigo Huguet) [2196823] - wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex (Inigo Huguet) [2196823] - wifi: brcmfmac: cfg80211: Add support for PMKID_V3 operations (Inigo Huguet) [2196823] - wifi: brcmfmac: feature: Add support for setting feats based on WLC version (Inigo Huguet) [2196823] - wifi: brcmfmac: cfg80211: Add support for scan params v2 (Inigo Huguet) [2196823] - wifi: brcmfmac: chip: Handle 1024-unit sizes for TCM blocks (Inigo Huguet) [2196823] - wifi: brcmfmac: chip: Only disable D11 cores; handle an arbitrary number (Inigo Huguet) [2196823] - wifi: ath11k: generate rx and tx mcs maps for supported HE mcs (Inigo Huguet) [2196823] - wifi: ath11k: move HE MCS mapper to a separate function (Inigo Huguet) [2196823] - wifi: ath11k: push MU-MIMO params from hostapd to hardware (Inigo Huguet) [2196823] - wifi: ath11k: modify accessor macros to match index size (Inigo Huguet) [2196823] - wifi: ath6kl: reduce WARN to dev_dbg() in callback (Inigo Huguet) [2196823] - wifi: brcmfmac: support CQM RSSI notification with older firmware (Inigo Huguet) [2196823] - wifi: brcmfmac: pcie: Provide a buffer of random bytes to the device (Inigo Huguet) [2196823] - wifi: brcmfmac: acpi: Add support for fetching Apple ACPI properties (Inigo Huguet) [2196823] - wifi: ath12k: remove memset with byte count of 278528 (Inigo Huguet) [2196823] - wifi: wcn36xx: Slightly optimize PREPARE_HAL_BUF() (Inigo Huguet) [2196823] - wifi: rtw89: refine FW feature judgement on packet drop (Inigo Huguet) [2196823] - wifi: rtw89: 8852b: enable hw_scan support (Inigo Huguet) [2196823] - wifi: rtw89: 8852b: add channel encoding for hw_scan (Inigo Huguet) [2196823] - wifi: rtw89: adjust channel encoding to common function (Inigo Huguet) [2196823] - wifi: rtw89: fw: configure CRASH_TRIGGER feature for 8852B (Inigo Huguet) [2196823] - wifi: rtw89: add tx_wake notify for 8852B (Inigo Huguet) [2196823] - wifi: rtw88: rtw8822c: Implement RTL8822CS (SDIO) efuse parsing (Inigo Huguet) [2196823] - wifi: rtw88: rtw8822b: Implement RTL8822BS (SDIO) efuse parsing (Inigo Huguet) [2196823] - wifi: rtw88: rtw8821c: Implement RTL8821CS (SDIO) efuse parsing (Inigo Huguet) [2196823] - wifi: rtw88: mac: Add SDIO HCI support in the TX/page table setup (Inigo Huguet) [2196823] - wifi: rtw88: mac: Add support for the SDIO HCI in rtw_pwr_seq_parser() (Inigo Huguet) [2196823] - wifi: rtl8xxxu: Remove always true condition in rtl8xxxu_print_chipinfo (Inigo Huguet) [2196823] - wifi: rtw89: add RNR support for 6 GHz scan (Inigo Huguet) [2196823] - wifi: rtlwifi: rtl8192de: Remove the unused variable bcnfunc_enable (Inigo Huguet) [2196823] - wifi: rtl8xxxu: 8188e: parse single one element of RA report for station mode (Inigo Huguet) [2196823] - wifi: rtlwifi: rtl8192ce: fix dealing empty EEPROM values (Inigo Huguet) [2196823] - wifi: ath11k: fix SAC bug on peer addition with sta band migration (Inigo Huguet) [2196823] - wifi: ath10k: Remove redundant assignment to changed_flags (Inigo Huguet) [2196823] - wifi: ath10k: snoc: enable threaded napi on WCN3990 (Inigo Huguet) [2196823] - wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list() (Inigo Huguet) [2196823] - wifi: ath5k: Use platform_get_irq() to get the interrupt (Inigo Huguet) [2196823] - wifi: ath11k: Use platform_get_irq() to get the interrupt (Inigo Huguet) [2196823] - wifi: ath12k: PCI ops for wakeup/release MHI (Inigo Huguet) [2196823] - wifi: ath12k: Handle lock during peer_id find (Inigo Huguet) [2196823] - wifi: ath9k: hif_usb: fix memory leak of remain_skbs (Inigo Huguet) [2196823] - wifi: ath11k: fix return value check in ath11k_ahb_probe() (Inigo Huguet) [2196823] - wifi: ath12k: use kfree_skb() instead of kfree() (Inigo Huguet) [2196823] - wifi: ath: Silence memcpy run-time false positive warning (Inigo Huguet) [2196823] - wifi: ath10k: Remove the unused function shadow_dst_wr_ind_addr() and ath10k_ce_error_intr_enable() (Inigo Huguet) [2196823] - wifi: ath12k: dp_mon: clean up some inconsistent indentings (Inigo Huguet) [2196823] - wifi: ath12k: dp_mon: Fix unsigned comparison with less than zero (Inigo Huguet) [2196823] - wifi: ath12k: Fix spelling mistakes in warning messages and comments (Inigo Huguet) [2196823] - wifi: ath6kl: minor fix for allocation size (Inigo Huguet) [2196823] - wifi: ath11k: Set ext passive scan flag to adjust passive scan start time (Inigo Huguet) [2196823] [4.18.0-511] - xfrm: add NULL check in xfrm_update_ae_params (Daniel Mendes) [2218948] {CVE-2023-3772} - scsi: storvsc: Fix handling of virtual Fibre Channel timeouts (Cathy Avery) [1986067] - netfilter: xt_owner: Add supplementary groups option (Phil Sutter) [2136194] - netfilter: nf_tables: can't schedule in nft_chain_validate (Florian Westphal) [2230460] - drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues (Karol Herbst) [2229989] - net: deprecate PF_KEY (Sabrina Dubroca) [RHEL-1257] - KVM: SEV: remove ghcb variable declarations (Vitaly Kuznetsov) [2213807] - KVM: SEV: only access GHCB fields once (Vitaly Kuznetsov) [2213807] {CVE-2023-4155} - KVM: SEV: snapshot the GHCB before accessing it (Vitaly Kuznetsov) [2213807] {CVE-2023-4155} - Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229884] {CVE-2022-40982} - KVM: Add GDS_NO support to KVM (Waiman Long) [2229884] {CVE-2022-40982} - x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229884] {CVE-2022-40982} - x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229884] {CVE-2022-40982} - x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229884] {CVE-2022-40982} - x86/bugs: Use sysfs_emit() (Waiman Long) [2229884] - Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229884] - docs/kernel-parameters: Update descriptions for 'mitigations=' param with retbleed (Waiman Long) [2229884] - arm64: correct the effect of mitigations off on kpti (Waiman Long) [2229884] - x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229884] - usb: typec: ucsi: Mark dGPUs as DEVICE scope (Desnes Nunes) [2222463] - i2c: nvidia-gpu: Remove ccgx,firmware-build property (Desnes Nunes) [2222463] - usb: typec: ucsi_ccg: Add OF support (Desnes Nunes) [2222463] - usb: typec: ucsi/ucsi_ccg: Convert to i2c's .probe_new() (Desnes Nunes) [2222463] - i2c: nvidia-gpu: Add ACPI property to align with device-tree (Desnes Nunes) [2222463] - dt-bindings: usb: Add Cypress cypd4226 Type-C controller (Desnes Nunes) [2222463] - i2c: designware-pci: Switch to use i2c_new_ccgx_ucsi() (Desnes Nunes) [2222463] - i2c: nvidia-gpu: Convert to use dev_err_probe() (Desnes Nunes) [2222463] - i2c: nvidia-gpu: Use temporary variable for struct device (Desnes Nunes) [2222463] - i2c: nvidia-gpu: Switch to use i2c_new_ccgx_ucsi() (Desnes Nunes) [2222463] - i2c: Remove support for dangling device properties (Desnes Nunes) [2222463] - i2c: nvidia-gpu: Constify the software node (Desnes Nunes) [2222463] - i2c: nvidia-gpu: Use PTR_ERR_OR_ZERO() to simplify code (Desnes Nunes) [2222463] - i2c: nvidia-gpu: convert to use i2c_new_client_device() (Desnes Nunes) [2222463] - i2c: Add support for software nodes (Desnes Nunes) [2222463] - i2c: Introduce common module to instantiate CCGx UCSI (Desnes Nunes) [2222463] - power: supply: Fix logic checking if system is running from battery (Desnes Nunes) [2222463] - redhat: support virtio-mem on x86-64 as tech-preview (David Hildenbrand) [2229123] - virtio/virtio_mem: handle a possible NULL as a memcpy parameter (David Hildenbrand) [2229123] - virtio-mem: support VIRTIO_MEM_F_UNPLUGGED_INACCESSIBLE (David Hildenbrand) [2229123] - virtio-mem: disallow mapping virtio-mem memory via /dev/mem (David Hildenbrand) [2229123] - kernel/resource: disallow access to exclusive system RAM regions (David Hildenbrand) [2229123] - kernel/resource: clean up and optimize iomem_is_exclusive() (David Hildenbrand) [2229123] - virtio-mem: kdump mode to sanitize /proc/vmcore access (David Hildenbrand) [2229123] - virtio-mem: factor out hotplug specifics from virtio_mem_remove() into virtio_mem_deinit_hotplug() (David Hildenbrand) [2229123] - virtio-mem: factor out hotplug specifics from virtio_mem_probe() into virtio_mem_init_hotplug() (David Hildenbrand) [2229123] - virtio-mem: factor out hotplug specifics from virtio_mem_init() into virtio_mem_init_hotplug() (David Hildenbrand) [2229123] - proc/vmcore: fix possible deadlock on concurrent mmap and read (David Hildenbrand) [2229123] - proc/vmcore: don't fake reading zeroes on surprise vmcore_cb unregistration (David Hildenbrand) [2229123] - proc/vmcore: fix clearing user buffer by properly using clear_user() (David Hildenbrand) [2229123] - proc/vmcore: convert oldmem_pfn_is_ram callback to more generic vmcore callbacks (David Hildenbrand) [2229123] - proc/vmcore: let pfn_is_ram() return a bool (David Hildenbrand) [2229123] - x86/xen: print a warning when HVMOP_get_mem_type fails (David Hildenbrand) [2229123] - x86/xen: simplify xen_oldmem_pfn_is_ram() (David Hildenbrand) [2229123] - x86/xen: update xen_oldmem_pfn_is_ram() documentation (David Hildenbrand) [2229123] - virtio-mem: fix sleeping in RCU read side section in virtio_mem_online_page_cb() (David Hildenbrand) [2229123] - virtio-mem: prioritize unplug from ZONE_MOVABLE in Big Block Mode (David Hildenbrand) [2229123] - virtio-mem: simplify high-level unplug handling in Big Block Mode (David Hildenbrand) [2229123] - virtio-mem: prioritize unplug from ZONE_MOVABLE in Sub Block Mode (David Hildenbrand) [2229123] - virtio-mem: simplify high-level unplug handling in Sub Block Mode (David Hildenbrand) [2229123] - virtio-mem: simplify high-level plug handling in Sub Block Mode (David Hildenbrand) [2229123] - virtio-mem: use page_zonenum() in virtio_mem_fake_offline() (David Hildenbrand) [2229123] - virtio-mem: don't read big block size in Sub Block Mode (David Hildenbrand) [2229123] - fs/proc/kcore: use page_offline_(freeze|thaw) (David Hildenbrand) [2229123] - virtio-mem: use page_offline_(start|end) when setting PageOffline() (David Hildenbrand) [2229123] - mm: introduce page_offline_(begin|end|freeze|thaw) to synchronize setting PageOffline() (David Hildenbrand) [2229123] - fs/proc/kcore: don't read offline sections, logically offline pages and hwpoisoned pages (David Hildenbrand) [2229123] - fs/proc/kcore: pfn_is_ram check only applies to KCORE_RAM (David Hildenbrand) [2229123] - fs/proc/kcore: drop KCORE_REMAP and KCORE_OTHER (David Hildenbrand) [2229123] - proc/kcore: Remove unused kclist_add_remap() (David Hildenbrand) [2229123] - x86/gart: Exclude GART aperture from kcore (David Hildenbrand) [2229123] - kernel/resource: remove first_lvl / siblings_only logic (David Hildenbrand) [2229123] - kernel/resource: make walk_mem_res() find all busy IORESOURCE_MEM resources (David Hildenbrand) [2229123] - kernel/resource: make walk_system_ram_res() find all busy IORESOURCE_SYSTEM_RAM resources (David Hildenbrand) [2229123] - kernel/resource.c: fix kernel-doc markups (David Hildenbrand) [2229123] - resource: avoid unnecessary lookups in find_next_iomem_res() (David Hildenbrand) [2229123] - resource: fix locking in find_next_iomem_res() (David Hildenbrand) [2229123] - virtio-mem: check against mhp_get_pluggable_range() which memory we can hotplug (David Hildenbrand) [2229123] - virtio-mem: Assign boolean values to a bool variable (David Hildenbrand) [2229123] - mm/memory_hotplug: MEMHP_MERGE_RESOURCE -> MHP_MERGE_RESOURCE (David Hildenbrand) [2229123] - virtio-mem: Big Block Mode (BBM) - safe memory hotunplug (David Hildenbrand) [2229123] - virtio-mem: Big Block Mode (BBM) - basic memory hotunplug (David Hildenbrand) [2229123] - mm/memory_hotplug: extend offline_and_remove_memory() to handle more than one memory block (David Hildenbrand) [2229123] - virtio-mem: allow to force Big Block Mode (BBM) and set the big block size (David Hildenbrand) [2229123] - virtio-mem: Big Block Mode (BBM) memory hotplug (David Hildenbrand) [2229123] - virtio-mem: factor out adding/removing memory from Linux (David Hildenbrand) [2229123] - virtio-mem: memory notifier callbacks are specific to Sub Block Mode (SBM) (David Hildenbrand) [2229123] - virito-mem: existing (un)plug functions are specific to Sub Block Mode (SBM) (David Hildenbrand) [2229123] - virtio-mem: memory block ids are specific to Sub Block Mode (SBM) (David Hildenbrand) [2229123] - virtio-mem: nb_sb_per_mb and subblock_size are specific to Sub Block Mode (SBM) (David Hildenbrand) [2229123] - virito-mem: subblock states are specific to Sub Block Mode (SBM) (David Hildenbrand) [2229123] - virtio-mem: memory block states are specific to Sub Block Mode (SBM) (David Hildenbrand) [2229123] - virito-mem: document Sub Block Mode (SBM) (David Hildenbrand) [2229123] - virtio-mem: generalize handling when memory is getting onlined deferred (David Hildenbrand) [2229123] - virtio-mem: don't always trigger the workqueue when offlining memory (David Hildenbrand) [2229123] - virtio-mem: drop last_mb_id (David Hildenbrand) [2229123] - virtio-mem: generalize virtio_mem_overlaps_range() (David Hildenbrand) [2229123] - virtio-mem: generalize virtio_mem_owned_mb() (David Hildenbrand) [2229123] - virtio-mem: generalize check for added memory (David Hildenbrand) [2229123] - virtio-mem: retry fake-offlining via alloc_contig_range() on ZONE_MOVABLE (David Hildenbrand) [2229123] - virtio-mem: factor out handling of fake-offline pages in memory notifier (David Hildenbrand) [2229123] - virtio-mem: factor out fake-offlining into virtio_mem_fake_offline() (David Hildenbrand) [2229123] - virtio-mem: print debug messages from virtio_mem_send_*_request() (David Hildenbrand) [2229123] - virtio-mem: factor out calculation of the bit number within the subblock bitmap (David Hildenbrand) [2229123] - virtio-mem: use 'unsigned long' for nr_pages when fake onlining/offlining (David Hildenbrand) [2229123] - virtio-mem: drop rc2 in virtio_mem_mb_plug_and_add() (David Hildenbrand) [2229123] - virtio-mem: simplify MAX_ORDER - 1 / pageblock_order handling (David Hildenbrand) [2229123] - virtio-mem: more precise calculation in virtio_mem_mb_state_prepare_next_mb() (David Hildenbrand) [2229123] - virtio-mem: determine nid only once using memory_add_physaddr_to_nid() (David Hildenbrand) [2229123] - MAINTAINERS: add URL for virtio-mem (David Hildenbrand) [2229123] - virtio-mem: Constify mem_id_table (David Hildenbrand) [2229123] - kernel/resource: make iomem_resource implicit in release_mem_region_adjustable() (David Hildenbrand) [2229123] - virtio-mem: try to merge system ram resources (David Hildenbrand) [2229123] - mm/memory_hotplug: MEMHP_MERGE_RESOURCE to specify merging of System RAM resources (David Hildenbrand) [2229123] - mm/memory_hotplug: prepare passing flags to add_memory() and friends (David Hildenbrand) [2229123] - mm/memory_hotplug: guard more declarations by CONFIG_MEMORY_HOTPLUG (David Hildenbrand) [2229123] - include/linux/memory_hotplug.h: move definitions of {set,clear}_zone_contiguous (David Hildenbrand) [2229123] - kernel/resource: make release_mem_region_adjustable() never fail (David Hildenbrand) [2229123] - virtio-mem: don't special-case ZONE_MOVABLE (David Hildenbrand) [2229123] - virtio_mem: convert to LE accessors (David Hildenbrand) [2229123] - virtio_mem: correct tags for config space fields (David Hildenbrand) [2229123] - virtio-mem: Fix build error due to improper use 'select' (David Hildenbrand) [2229123] - virtio-mem: add memory via add_memory_driver_managed() (David Hildenbrand) [2229123] - virtio-mem: silence a static checker warning (David Hildenbrand) [2229123] - virtio_mem: convert device block size into 64bit (David Hildenbrand) [2229123] - virtio-mem: drop unnecessary initialization (David Hildenbrand) [2229123] - virtio-mem: Don't rely on implicit compiler padding for requests (David Hildenbrand) [2229123] - virtio-mem: Try to unplug the complete online memory block first (David Hildenbrand) [2229123] - virtio-mem: Use -ETXTBSY as error code if the device is busy (David Hildenbrand) [2229123] - virtio-mem: Unplug subblocks right-to-left (David Hildenbrand) [2229123] - virtio-mem: Drop manual check for already present memory (David Hildenbrand) [2229123] - virtio-mem: Add parent resource for all added 'System RAM' (David Hildenbrand) [2229123] - virtio-mem: Better retry handling (David Hildenbrand) [2229123] - virtio-mem: Offline and remove completely unplugged memory blocks (David Hildenbrand) [2229123] - mm/memory_hotplug: Introduce offline_and_remove_memory() (David Hildenbrand) [2229123] - virtio-mem: Allow to offline partially unplugged memory blocks (David Hildenbrand) [2229123] - virtio-mem: Paravirtualized memory hotunplug part 2 (David Hildenbrand) [2229123] - virtio-mem: Paravirtualized memory hotunplug part 1 (David Hildenbrand) [2229123] - virtio-mem: Allow to specify an ACPI PXM as nid (David Hildenbrand) [2229123] - MAINTAINERS: Add myself as virtio-mem maintainer (David Hildenbrand) [2229123] - virtio-mem: Paravirtualized memory hotplug (David Hildenbrand) [2229123] - Revert 'drm/amd/display: edp do not add non-edid timings' (Jocelyn Falempe) [RHEL-845] - Revert 'drm/amd/display: reallocate DET for dual displays with high pixel rate ratio' (Jocelyn Falempe) [RHEL-845] - drm/client: Fix memory leak in drm_client_modeset_probe (Jocelyn Falempe) [RHEL-845] - drm/client: Fix memory leak in drm_client_target_cloned (Jocelyn Falempe) [RHEL-845] - drm/atomic: Fix potential use-after-free in nonblocking commits (Jocelyn Falempe) [RHEL-845] - drm/amd/pm: conditionally disable pcie lane/speed switching for SMU13 (Jocelyn Falempe) [RHEL-845] - drm/amd/pm: share the code around SMU13 pcie parameters update (Jocelyn Falempe) [RHEL-845] - drm/ttm: Don't leak a resource on swapout move error (Jocelyn Falempe) [RHEL-845] - drm/amdgpu: avoid restore process run into dead loop. (Jocelyn Falempe) [RHEL-845] - drm/amd/display: Correct DMUB_FW_VERSION macro (Jocelyn Falempe) [RHEL-845] - drm/amd/display: Fix 128b132b link loss handling (Jocelyn Falempe) [RHEL-845] - drm/amd/display: add a NULL pointer check (Jocelyn Falempe) [RHEL-845] - drm/amd: Disable PSR-SU on Parade 0803 TCON (Jocelyn Falempe) [RHEL-845] - drm/amdgpu: fix clearing mappings for BOs that are always valid in VM (Jocelyn Falempe) [RHEL-845] - drm/amd/display: disable seamless boot if force_odm_combine is enabled (Jocelyn Falempe) [RHEL-845] - drm/amd/display: Remove Phantom Pipe Check When Calculating K1 and K2 (Jocelyn Falempe) [RHEL-845] - drm/amd/display: fix seamless odm transitions (Jocelyn Falempe) [RHEL-845] - drm/dp_mst: Clear MSG_RDY flag before sending new message (Jocelyn Falempe) [RHEL-845] - drm/atomic: Allow vblank-enabled + self-refresh 'disable' (Jocelyn Falempe) [RHEL-845] - drm/amd/display: perform a bounds check before filling dirty rectangles (Jocelyn Falempe) [RHEL-845] - drm/nouveau: bring back blit subchannel for pre nv50 GPUs (Jocelyn Falempe) [RHEL-845] - drm/nouveau/disp/g94: enable HDMI (Jocelyn Falempe) [RHEL-845] - drm/nouveau/disp: fix HDMI on gt215+ (Jocelyn Falempe) [RHEL-845] - drm/i915: Fix one wrong caching mode enum usage (Jocelyn Falempe) [RHEL-845] - drm/i915: Don't preserve dpll_hw_state for slave crtc in Bigjoiner (Jocelyn Falempe) [RHEL-845] - drm/panel: simple: Add Powertip PH800480T013 drm_display_mode flags (Jocelyn Falempe) [RHEL-845] - drm/bridge: ti-sn65dsi86: Fix auxiliary bus lifetime (Jocelyn Falempe) [RHEL-845] - drm/panel: simple: Add connector_type for innolux_at043tn24 (Jocelyn Falempe) [RHEL-845] - drm/nouveau/acr: Abort loading ACR if no firmware was found (Jocelyn Falempe) [RHEL-845] - drm/amdgpu: add RAS POISON interrupt funcs for jpeg_v4_0 (Jocelyn Falempe) [RHEL-845] - drm/amdgpu: add RAS POISON interrupt funcs for jpeg_v2_6 (Jocelyn Falempe) [RHEL-845] - drm/amdgpu: separate ras irq from jpeg instance irq for UVD_POISON (Jocelyn Falempe) [RHEL-845] - drm/amdgpu: Move jpeg ras block init to ras sw_init (Jocelyn Falempe) [RHEL-845] - drm/amdgpu: add RAS POISON interrupt funcs for vcn_v4_0 (Jocelyn Falempe) [RHEL-845] - drm/amdgpu: add RAS POISON interrupt funcs for vcn_v2_6 (Jocelyn Falempe) [RHEL-845] - drm/amdgpu: separate ras irq from vcn instance irq for UVD_POISON (Jocelyn Falempe) [RHEL-845] - drm/amdgpu: Move vcn ras block init to ras sw_init (Jocelyn Falempe) [RHEL-845] - drm/amdgpu: Fix usage of UMC fill record in RAS (Jocelyn Falempe) [RHEL-845] - drm/amdgpu: Fix memcpy() in sienna_cichlid_append_powerplay_table function. (Jocelyn Falempe) [RHEL-845] - amdgpu: validate offset_in_bo of drm_amdgpu_gem_va (Jocelyn Falempe) [RHEL-845] - drm/radeon: fix possible division-by-zero errors (Jocelyn Falempe) [RHEL-845] - drm/amd/display: Fix artifacting on eDP panels when engaging freesync video mode (Jocelyn Falempe) [RHEL-845] - drm/amdkfd: Fix potential deallocation of previously deallocated memory. (Jocelyn Falempe) [RHEL-845] - drm/amd/display: Fix a test dml32_rq_dlg_get_rq_reg() (Jocelyn Falempe) [RHEL-845] - drm/amd/display: Fix a test CalculatePrefetchSchedule() (Jocelyn Falempe) [RHEL-845] - drm/panel: simple: fix active size for Ampire AM-480272H3TMQW-T01H (Jocelyn Falempe) [RHEL-845] - drm/bridge: ti-sn65dsi83: Fix enable/disable flow to meet spec (Jocelyn Falempe) [RHEL-845] - drm/bridge: anx7625: Prevent endless probe loop (Jocelyn Falempe) [RHEL-845] - drm/nouveau: dispnv50: fix missing-prototypes warning (Jocelyn Falempe) [RHEL-845] - drm/bridge: tc358767: Switch to devm MIPI-DSI helpers (Jocelyn Falempe) [RHEL-845] - drm/vkms: Fix RGB565 pixel conversion (Jocelyn Falempe) [RHEL-845] - drm: Add fixed-point helper to get rounded integer values (Jocelyn Falempe) [RHEL-845] - drm/vkms: isolate pixel conversion functionality (Jocelyn Falempe) [RHEL-845] - drm/panel: sharp-ls043t1le01: adjust mode settings (Jocelyn Falempe) [RHEL-845] - drm/vram-helper: fix function names in vram helper doc (Jocelyn Falempe) [RHEL-845] - drm/bridge: tc358768: fix THS_TRAILCNT computation (Jocelyn Falempe) [RHEL-845] - drm/bridge: tc358768: fix TXTAGOCNT computation (Jocelyn Falempe) [RHEL-845] - drm/bridge: tc358768: fix THS_ZEROCNT computation (Jocelyn Falempe) [RHEL-845] - drm/bridge: tc358768: fix TCLK_TRAILCNT computation (Jocelyn Falempe) [RHEL-845] - drm/bridge: tc358768: Add atomic_get_input_bus_fmts() implementation (Jocelyn Falempe) [RHEL-845] - drm/bridge: tc358768: fix TCLK_ZEROCNT computation (Jocelyn Falempe) [RHEL-845] - drm/bridge: tc358768: fix PLL target frequency (Jocelyn Falempe) [RHEL-845] - drm/bridge: tc358768: fix PLL parameters computation (Jocelyn Falempe) [RHEL-845] - drm/bridge: tc358768: always enable HS video mode (Jocelyn Falempe) [RHEL-845] - drm/bridge: ti-sn65dsi83: Fix enable error path (Jocelyn Falempe) [RHEL-845] - drm/bridge: it6505: Move a variable assignment behind a null pointer check in receive_timing_debugfs_show() (Jocelyn Falempe) [RHEL-845] - drm/i915/guc/slpc: Provide sysfs for efficient freq (Jocelyn Falempe) [RHEL-845] - drm/i915/guc: More debug print updates - GuC SLPC (Jocelyn Falempe) [RHEL-845] - drm/amd/display: Explicitly specify update type per plane info change (Jocelyn Falempe) [RHEL-845] - radeon: avoid double free in ci_dpm_init() (Jocelyn Falempe) [RHEL-845] - drm/amd/display: fix is_timing_changed() prototype (Jocelyn Falempe) [RHEL-845] - drm/amd/display: Add logging for display MALL refresh setting (Jocelyn Falempe) [RHEL-845] - drm: use mgr->dev in drm_dbg_kms in drm_dp_add_payload_part2 (Jocelyn Falempe) [RHEL-845] - drm/amd/display: Ensure vmin and vmax adjust for DCE (Jocelyn Falempe) [RHEL-845] - drm/amdgpu: Validate VM ioctl flags. (Jocelyn Falempe) [RHEL-845] - drm/amd/display: Do not update DRR while BW optimizations pending (Jocelyn Falempe) [RHEL-845] - drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl (Jocelyn Falempe) [RHEL-845] - udmabuf: revert 'Add support for mapping hugepages (v4)' (Jocelyn Falempe) [RHEL-845] - drm/amd/display: fix the system hang while disable PSR (Jocelyn Falempe) [RHEL-845] - drm/amd/display: Add wrapper to call planes and stream update (Jocelyn Falempe) [RHEL-845] - drm/amd/display: Use dc_update_planes_and_stream (Jocelyn Falempe) [RHEL-845] - drm/nouveau: add nv_encoder pointer check for NULL (Jocelyn Falempe) [RHEL-845] - drm/nouveau/dp: check for NULL nv_connector->native_mode (Jocelyn Falempe) [RHEL-845] - drm/bridge: ti-sn65dsi86: Avoid possible buffer overflow (Jocelyn Falempe) [RHEL-845] - drm/nouveau: don't detect DSM for non-NVIDIA device (Jocelyn Falempe) [RHEL-845] - drm/amdgpu: Modify indirect buffer packages for resubmission (Jocelyn Falempe) [RHEL-845] - drm/amdgpu: Implement gfx9 patch functions for resubmission (Jocelyn Falempe) [RHEL-845] - drm/amdgpu: Program gds backup address as zero if no gds allocated (Jocelyn Falempe) [RHEL-845] - drm/amdgpu: Reset CP_VMID_PREEMPT after trailing fence signaled (Jocelyn Falempe) [RHEL-845] - drm/amdgpu: add missing radeon secondary PCI ID (Jocelyn Falempe) [RHEL-845] - drm/amd/pm: workaround for compute workload type on some skus (Jocelyn Falempe) [RHEL-845] - drm/amd: Tighten permissions on VBIOS flashing attributes (Jocelyn Falempe) [RHEL-845] - drm/amd: Make sure image is written to trigger VBIOS image update flow (Jocelyn Falempe) [RHEL-845] - drm/amd/display: edp do not add non-edid timings (Jocelyn Falempe) [RHEL-845] - drm/amd/display: limit DPIA link rate to HBR3 (Jocelyn Falempe) [RHEL-845] - drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1 (Jocelyn Falempe) [RHEL-845] - Revert 'drm/amdgpu: remove TOPDOWN flags when allocating VRAM in large bar system' (Jocelyn Falempe) [RHEL-845] - drm:amd:amdgpu: Fix missing buffer object unlock in failure path (Jocelyn Falempe) [RHEL-845] - drm: panel-orientation-quirks: Change Air's quirk to support Air Plus (Jocelyn Falempe) [RHEL-845] - drm/amd/display: add ODM case when looking for first split pipe (Jocelyn Falempe) [RHEL-845] - drm/amd/display: Reduce sdp bw after urgent to 90% (Jocelyn Falempe) [RHEL-845] - drm/amd/pm: Fix power context allocation in SMU13 (Jocelyn Falempe) [RHEL-845] - drm/amd: Disallow s0ix without BIOS support again (Jocelyn Falempe) [RHEL-845] - drm/amdgpu: change reserved vram info print (Jocelyn Falempe) [RHEL-845] - drm/amdgpu: fix xclk freq on CHIP_STONEY (Jocelyn Falempe) [RHEL-845] - drm/amd/pm: conditionally disable pcie lane switching for some sienna_cichlid SKUs (Jocelyn Falempe) [RHEL-845] - drm/i915/gt: Use the correct error value when kernel_context() fails (Jocelyn Falempe) [RHEL-845] - drm/amdgpu: fix Null pointer dereference error in amdgpu_device_recover_vram (Jocelyn Falempe) [RHEL-845] - drm/i915/selftests: Add some missing error propagation (Jocelyn Falempe) [RHEL-845] - drm/i915: Use 18 fast wake AUX sync len (Jocelyn Falempe) [RHEL-845] - drm/i915: Explain the magic numbers for AUX SYNC/precharge length (Jocelyn Falempe) [RHEL-845] - drm/amd/pm: reverse mclk and fclk clocks levels for renoir (Jocelyn Falempe) [RHEL-845] - drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp (Jocelyn Falempe) [RHEL-845] - drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5 (Jocelyn Falempe) [RHEL-845] - drm/amd/pm: resolve reboot exception for si oland (Jocelyn Falempe) [RHEL-845] - drm/amd/pm: reverse mclk and fclk clocks levels for vangogh (Jocelyn Falempe) [RHEL-845] - drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4 (Jocelyn Falempe) [RHEL-845] - drm/amdgpu: enable tmz by default for GC 11.0.1 (Jocelyn Falempe) [RHEL-845] - drm/amd/display: Only wait for blank completion if OTG active (Jocelyn Falempe) [RHEL-845] - drm/amdgpu: skip disabling fence driver src_irqs when device is unplugged (Jocelyn Falempe) [RHEL-845] - drm/amdgpu: set gfx9 onwards APU atomics support to be true (Jocelyn Falempe) [RHEL-845] - drm/amdgpu/nv: update VCN 3 max HEVC encoding resolution (Jocelyn Falempe) [RHEL-845] - drm/ast: Fix ARM compatibility (Jocelyn Falempe) [RHEL-845] - drm/amdgpu: Use the default reset when loading or reloading the driver (Jocelyn Falempe) [RHEL-845] - drm/amd/display: fix memleak in aconnector->timing_requested (Jocelyn Falempe) [RHEL-845] - drm/amdgpu: release gpu full access after 'amdgpu_device_ip_late_init' (Jocelyn Falempe) [RHEL-845] - drm/i915: Fix PIPEDMC disabling for a bigjoiner configuration (Jocelyn Falempe) [RHEL-845] - drm/i915: Disable DPLLs before disconnecting the TC PHY (Jocelyn Falempe) [RHEL-845] - drm/i915: Move shared DPLL disabling into CRTC disable hook (Jocelyn Falempe) [RHEL-845] - drm: fix drmm_mutex_init() (Jocelyn Falempe) [RHEL-845] - drm/amd/amdgpu: limit one queue per gang (Jocelyn Falempe) [RHEL-845] - drm/amd/pm: Fix output of pp_od_clk_voltage (Jocelyn Falempe) [RHEL-845] - drm/amd/pm: add missing NotifyPowerSource message mapping for SMU13.0.7 (Jocelyn Falempe) [RHEL-845] - drm/amdgpu: don't enable secure display on incompatible platforms (Jocelyn Falempe) [RHEL-845] - drm/radeon: reintroduce radeon_dp_work_func content (Jocelyn Falempe) [RHEL-845] - drm/amd/display: Have Payload Properly Created After Resume (Jocelyn Falempe) [RHEL-845] - drm/amdgpu: reserve the old gc_11_0_*_mes.bin (Jocelyn Falempe) [RHEL-845] - drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (Jocelyn Falempe) [RHEL-845] - drm/amdgpu/gfx11: update gpu_clock_counter logic (Jocelyn Falempe) [RHEL-845] - drm/amdgpu: refine get gpu clock counter method (Jocelyn Falempe) [RHEL-845] - drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11 as well (Jocelyn Falempe) [RHEL-845] - drm/amdgpu/gfx10: Disable gfxoff before disabling powergating. (Jocelyn Falempe) [RHEL-845] - drm/amdgpu/gmc11: implement get_vbios_fb_size() (Jocelyn Falempe) [RHEL-845] - drm/amd/pm: fix possible power mode mismatch between driver and PMFW (Jocelyn Falempe) [RHEL-845] - drm/amdgpu: Enable IH retry CAM on GFX9 (Jocelyn Falempe) [RHEL-845] - drm/amdgpu: Fix sdma v4 sw fini error (Jocelyn Falempe) [RHEL-845] - drm/amd: Fix an out of bounds error in BIOS parser (Jocelyn Falempe) [RHEL-845] - drm/amd/display: Correct DML calculation to follow HW SPEC (Jocelyn Falempe) [RHEL-845] - drm/amd/display: fixed dcn30+ underflow issue (Jocelyn Falempe) [RHEL-845] - drm/amd/display: reallocate DET for dual displays with high pixel rate ratio (Jocelyn Falempe) [RHEL-845] - drm/amd/display: Use DC_LOG_DC in the trasform pixel function (Jocelyn Falempe) [RHEL-845] - drm/amd/display: Enable HostVM based on rIOMMU active (Jocelyn Falempe) [RHEL-845] - drm/amd/display: enable DPG when disabling plane for phantom pipe (Jocelyn Falempe) [RHEL-845] - drm/amd/display: Correct DML calculation to align HW formula (Jocelyn Falempe) [RHEL-845] - drm/amd/display: populate subvp cmd info only for the top pipe (Jocelyn Falempe) [RHEL-845] - drm/displayid: add displayid_get_header() and check bounds better (Jocelyn Falempe) [RHEL-845] - drm/i915: taint kernel when force probing unsupported devices (Jocelyn Falempe) [RHEL-845] - drm/i915/dp: prevent potential div-by-zero (Jocelyn Falempe) [RHEL-845] - drm/i915: Fix NULL ptr deref by checking new_crtc_state (Jocelyn Falempe) [RHEL-845] - drm/i915/guc: Don't capture Gen8 regs on Xe devices (Jocelyn Falempe) [RHEL-845] - drm/sched: Check scheduler work queue before calling timeout handling (Jocelyn Falempe) [RHEL-845] - drm/mipi-dsi: Set the fwnode for mipi_dsi_device (Jocelyn Falempe) [RHEL-845] - drm/nouveau/disp: More DP_RECEIVER_CAP_SIZE array fixes (Jocelyn Falempe) [RHEL-845] - drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (Jocelyn Falempe) [RHEL-845] - drm/fbdev-generic: prohibit potential out-of-bounds access (Jocelyn Falempe) [RHEL-845] [4.18.0-510] - x86/show_trace_log_lvl: Ensure stack pointer is aligned, again (Oleg Nesterov) [2188093] - ahci: Add support for Dell S140 and later controllers (Tomas Henzl) [2222879] - s390/time: steer clocksource on STP syncs for CLOCK_MONOTONIC (Tobias Huschle) [2177649] - memstick: r592: Fix UAF bug in r592_remove due to race condition (Wander Lairson Costa) [2215906] {CVE-2023-35825} - scsi: zfcp: Defer fc_rport blocking until after ADISC response (Tobias Huschle) [2230241] - RDMA/efa: Add EFA 0xefa2 PCI ID (Izabela Bakollari) [2170086] - RDMA/efa: Support CQ receive entries with source GID (Izabela Bakollari) [2170086] - Revert 'isystem: ship and use stdarg.h' (Jocelyn Falempe) [2229185] (Jocelyn Falempe) [2229185] - x86/mm: Do not shuffle CPU entry areas without KASLR (Rafael Aquini) [2165931] {CVE-2023-0597} - x86/mm: Randomize per-cpu entry area (Rafael Aquini) [2165931] {CVE-2023-0597} - x86/kasan: Map shadow for percpu pages on demand (Rafael Aquini) [2165931] {CVE-2023-0597} - x86/pti/32: Calculate the various PTI cpu_entry_area sizes correctly, make the CPU_ENTRY_AREA_PAGES assert precise (Rafael Aquini) [2165931] {CVE-2023-0597} [4.18.0-509] - cifs: fix for following DFS links where sharename is the same as prepath (Ronnie Sahlberg) [2130474] - crypto: rng - Fix lock imbalance in crypto_del_rng (Herbert Xu) [2229700] - ibmvnic: Do not reset dql stats on NON_FATAL err (Mamatha Inamdar) [2227904] - mptcp: Correct the sock::sk_lock.owned lockdep annotations (Felix Maurer) [2228890] - gpio: name PCA953x gpio chips after device name (Steve Best) [2226775] - scsi: storvsc: Handle SRB status value 0x30 (Cathy Avery) [2218133] - netfilter: nft_set_pipapo: fix improper element removal (Phil Sutter) [2225276] {CVE-2023-4004} - macvlan: add forgotten nla_policy for IFLA_MACVLAN_BC_CUTOFF (Xin Long) [2226791] - tcp: Reduce chance of collisions in inet6_hashfn(). (Felix Maurer) [2176119] {CVE-2023-1206} - ipv6: fix locking issues with loops over idev->addr_list (Jiri Benc) [2123305] - relayfs: fix out-of-bounds access in relay_file_read (Bill O'Donnell) [2215510] {CVE-2023-3268} - kernel/relay.c: fix read_pos error when multiple readers (Bill O'Donnell) [2215510] - seq_buf: Make trace_seq_putmem_hex() support data longer than 8 (Ricardo Robaina) [2212208] {CVE-2023-28772} - seq_buf: Fix overflow in seq_buf_putmem_hex() (Ricardo Robaina) [2212208] {CVE-2023-28772} - tools/power/x86/intel-speed-select: Support more than 8 sockets. (Frank Ramsay) [2212508] - platform/x86: ISST: Remove 8 socket limit (Frank Ramsay) [2212508] - media: saa7134: fix use after free bug in saa7134_finidev due to race condition (Wander Lairson Costa) [2215902] {CVE-2023-35823} - Bluetooth: btmtksdio: fix possible FW initialization failure (David Marlin) [2142489 2144730 2145097] - Bluetooth: btmtksdio: fix the reset takes too long (David Marlin) [2142489 2144730 2145097] - Bluetooth: btmtksdio: mask out interrupt status (David Marlin) [2142489 2144730 2145097] - Bluetooth: btusb: Add support for Foxconn QCA 0xe0d0 (David Marlin) [2142489 2144730 2145097] - Bluetooth: btusb: Add two more Bluetooth parts for WCN6855 (David Marlin) [2142489 2144730 2145097] - Bluetooth: btusb: Add protocol for MediaTek bluetooth devices(MT7922) (David Marlin) [2142489 2144730 2145097] - Bluetooth: btusb: Add support for Foxconn MT7922A (David Marlin) [2142489 2144730 2145097] - Bluetooth: btmtksdio: Fix kernel oops when sdio suspend. (David Marlin) [2142489 2144730 2145097] - Enable MTK BT Support for RHEL (David Marlin) [2142489 2144730 2145097] - Bluetooth: btusb: Add a new PID/VID 13d3/3567 for MT7921 (David Marlin) [2142489 2144730 2145097] - Bluetooth: mt7921s: support bluetooth reset mechanism (David Marlin) [2142489 2144730 2145097] - Bluetooth: mt7921s: fix btmtksdio_[drv|fw]_pmctrl() (David Marlin) [2142489 2144730 2145097] - Bluetooth: btmtksdio: refactor btmtksdio_runtime_[suspend|resume]() (David Marlin) [2142489 2144730 2145097] - Bluetooth: mt7921s: fix bus hang with wrong privilege (David Marlin) [2142489 2144730 2145097] - Bluetooth: mt7921s: fix firmware coredump retrieve (David Marlin) [2142489 2144730 2145097] - Bluetooth: mt7921s: Enable SCO over I2S (David Marlin) [2142489 2144730 2145097] - Bluetooth: mt7921s: Support wake on bluetooth (David Marlin) [2142489 2144730 2145097] - Bluetooth: btmtksdio: rename btsdio_mtk_reg_read (David Marlin) [2142489 2144730 2145097] - Bluetooth: btmtksdio: enable AOSP extension for MT7921 (David Marlin) [2142489 2144730 2145097] - Bluetooth: btmtksdio: enable msft opcode (David Marlin) [2142489 2144730 2145097] - Bluetooth: btmtksdio: fix resume failure (David Marlin) [2142489 2144730 2145097] - Bluetooth: btmtksdio: handle runtime pm only when sdio_func is available (David Marlin) [2142489 2144730 2145097] - Bluetooth: btmtksdio: drop the unnecessary variable created (David Marlin) [2142489 2144730 2145097] - Bluetooth: btmtksdio: add support of processing firmware coredump and log (David Marlin) [2142489 2144730 2145097] - Bluetooth: btmtksdio: add MT7921s Bluetooth support (David Marlin) [2142489 2144730 2145097] - Bluetooth: btmtksdio: transmit packet according to status TX_EMPTY (David Marlin) [2142489 2144730 2145097] - Bluetooth: btmtksdio: use register CRPLR to read packet length (David Marlin) [2142489 2144730 2145097] - Bluetooth: btmtksdio: update register CSDIOCSR operation (David Marlin) [2142489 2144730 2145097] - Bluetooth: btmtksdio: move interrupt service to work (David Marlin) [2142489 2144730 2145097] - Bluetooth: btmtksdio: explicitly set WHISR as write-1-clear (David Marlin) [2142489 2144730 2145097] - Bluetooth: btmtksdio: add .set_bdaddr support (David Marlin) [2142489 2144730 2145097] - Bluetooth: btmtksido: rely on BT_MTK module (David Marlin) [2142489 2144730 2145097] - Bluetooth: mediatek: add BT_MTK module (David Marlin) [2142489 2144730 2145097] - Bluetooth: btusb: Support public address configuration for MediaTek Chip. (David Marlin) [2142489 2144730 2145097] - Bluetooth: btusb: Support Bluetooth Reset for Mediatek Chip(MT7921) (David Marlin) [2142489 2144730 2145097] - Bluetooth: btusb: Add support for Foxconn Mediatek Chip (David Marlin) [2142489 2144730 2145097] - Bluetooth: btusb: fix blacklist_table context (David Marlin) [2142489 2144730 2145097] [4.18.0-508] - HID: betop: check shape of output reports (Desnes Nunes) [2212164] {CVE-2023-1073} - media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb() (Desnes Nunes) [2153575] {CVE-2022-45887} - selinux: make labeled NFS work when mounted before policy load (Juraj Marcin) [1753646] - Revert 'xfs: expose the blockgc workqueue knobs publicly' (Bill O'Donnell) [2223260] - media: dm1105: Fix use after free bug in dm1105_remove due to race condition (Dean Nelson) [2215904] {CVE-2023-35824} - media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() (Dean Nelson) [2213142] {CVE-2023-31084} - drm/ast: report connection status on Display Port. (Jocelyn Falempe) [2189645] - drm/ast: Add BMC virtual connector (Jocelyn Falempe) [2189645] - x86/cpu/amd: Add a Zenbleed fix (Waiman Long) [2226832] {CVE-2023-20593} - x86/cpu/amd: Move the errata checking functionality up (Waiman Long) [2226832] {CVE-2023-20593} - x86/amd: Cache debug register values in percpu variables (Waiman Long) [2226832] {CVE-2023-20593} - x86/cpu: Restore AMD's DE_CFG MSR after resume (Waiman Long) [2226832] {CVE-2023-20593} - x86/sev: Change snp_guest_issue_request()'s fw_err argument (John Allen) [2216284] - virt/coco/sev-guest: Double-buffer messages (John Allen) [2216284] - virt/coco/sev-guest: Add throttling awareness (John Allen) [2216284] - virt/coco/sev-guest: Convert the sw_exit_info_2 checking to a switch-case (John Allen) [2216284] - virt/coco/sev-guest: Do some code style cleanups (John Allen) [2216284] - virt/coco/sev-guest: Carve out the request issuing logic into a helper (John Allen) [2216284] - virt/coco/sev-guest: Remove the disable_vmpck label in handle_guest_request() (John Allen) [2216284] - virt/coco/sev-guest: Simplify extended guest request handling (John Allen) [2216284] - virt/coco/sev-guest: Check SEV_SNP attribute at probe time (John Allen) [2216284] - virt/sev-guest: Return -EIO if certificate buffer is not large enough (John Allen) [2216284] - x86/sev: Mark snp_abort() noreturn (John Allen) [2216284] - s390/uv: Update query for secret-UVCs (Cedric Le Goater) [2111749] - s390/uv: replace scnprintf with sysfs_emit (Cedric Le Goater) [2111749] - s390: Add attestation query information (Cedric Le Goater) [2111749] - s390/uvdevice: Add 'Lock Secret Store' UVC (Cedric Le Goater) [2111749] - s390/uvdevice: Add 'List Secrets' UVC (Cedric Le Goater) [2111749] - s390/uvdevice: Add 'Add Secret' UVC (Cedric Le Goater) [2111749] - s390/uvdevice: Add info IOCTL (Cedric Le Goater) [2111749] - s390/uv: Always export uv_info (Cedric Le Goater) [2111749] - s390/kasan: support protvirt with 4-level paging (Cedric Le Goater) [2111749] - s390/protvirt: support ultravisor without secure storage limit (Cedric Le Goater) [2111749] - s390/protvirt: parse prot_virt option in the decompressor (Cedric Le Goater) [2111749] - s390/mm: avoid trimming to MAX_ORDER (Cedric Le Goater) [2111749] - net/mlx5e: TC, CT: Offload ct clear only once (Amir Tzin) [2159233] - net/mlx5: DR, Fix wrong action data allocation in decap action (Amir Tzin) [2159233] - net/mlx5: DR, Support SW created encap actions for FW table (Amir Tzin) [2159233] - net/mlx5e: TC, Cleanup ct resources for nic flow (Amir Tzin) [2159233] - net/mlx5e: TC, Add null pointer check for hardware miss support (Amir Tzin) [2159233] - RDMA/mlx5: Fix affinity assignment (Amir Tzin) [2159233] - RDMA/mlx5: Create an indirect flow table for steering anchor (Amir Tzin) [2159233] - RDMA/mlx5: Initiate dropless RQ for RAW Ethernet functions (Amir Tzin) [2159233] - net/mlx5: DR, Add missing mutex init/destroy in pattern manager (Amir Tzin) [2117777] - net/mlx5: Read embedded cpu after init bit cleared (Amir Tzin) [2159233] - net/mlx5e: Fix error handling in mlx5e_refresh_tirs (Amir Tzin) [2159233] - net/mlx5e: Don't attach netdev profile while handling internal error (Amir Tzin) [2159233] - net/mlx5: Fix post parse infra to only parse every action once (Amir Tzin) [2159233] - net/mlx5: fw_tracer, Fix event handling (Amir Tzin) [2159233] - net/mlx5: SF, Drain health before removing device (Amir Tzin) [2159233] - net/mlx5e: Consider internal buffers size in port buffer calculations (Amir Tzin) [2159233] - net/mlx5e: Prevent encap offload when neigh update is running (Amir Tzin) [2159233] - net/mlx5e: Extract remaining tunnel encap code to dedicated file (Amir Tzin) [2159233] - net/mlx5e: TC, Remove sample and ct limitation (Amir Tzin) [2159233] - net/mlx5e: TC, Remove mirror and ct limitation (Amir Tzin) [2159233] - net/mlx5e: TC, Remove tuple rewrite and ct limitation (Amir Tzin) [2159233] - net/mlx5e: TC, Remove multiple ct actions limitation (Amir Tzin) [2159233] - net/mlx5e: TC, Remove special handling of CT action (Amir Tzin) [2159233] - net/mlx5e: TC, Remove CT action reordering (Amir Tzin) [2159233] - net/mlx5e: CT: Use per action stats (Amir Tzin) [2159233] - net/mlx5e: TC, Move main flow attribute cleanup to helper func (Amir Tzin) [2159233] - net/mlx5e: TC, Remove unused vf_tun variable (Amir Tzin) [2159233] - net/mlx5e: Set default can_offload action (Amir Tzin) [2159233] - net/mlx5: Devcom, serialize devcom registration (Amir Tzin) [2159233] - net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device (Amir Tzin) [2159233] - net/mlx5e: Fix SQ wake logic in ptp napi_poll context (Amir Tzin) [2159233] - net/mlx5e: Fix deadlock in tc route query code (Amir Tzin) [2159233] - net/mlx5: Fix error message when failing to allocate device memory (Amir Tzin) [2159233] - net/mlx5e: Use correct encap attribute during invalidation (Amir Tzin) [2159233] - net/mlx5: DR, Check force-loopback RC QP capability independently from RoCE (Amir Tzin) [2159233] - net/mlx5: DR, Fix crc32 calculation to work on big-endian (BE) CPUs (Amir Tzin) [2159233] - net/mlx5: Handle pairing of E-switch via uplink un/load APIs (Amir Tzin) [2159233] - net/mlx5: Collect command failures data only for known commands (Amir Tzin) [2159233] - net/mlx5e: do as little as possible in napi poll when budget is 0 (Amir Tzin) [2159233] - net/mlx5: Use recovery timeout on sync reset flow (Amir Tzin) [2159233] - net/mlx5: DR, Add memory statistics for domain object (Amir Tzin) [2117777] - net/mlx5: DR, Add more info in domain dbg dump (Amir Tzin) [2117777] - net/mlx5: DR, Calculate sync threshold of each pool according to its type (Amir Tzin) [2117777] - net/mlx5: DR, Fix dumping of legacy modify_hdr in debug dump (Amir Tzin) [2117777] - net/mlx5: DR, Enable patterns and arguments for supporting devices (Amir Tzin) [2117777] - net/mlx5: DR, Add support for the pattern/arg parameters in debug dump (Amir Tzin) [2117777] - net/mlx5: DR, Modify header action of size 1 optimization (Amir Tzin) [2117777] - net/mlx5: DR, Support decap L3 action using pattern / arg mechanism (Amir Tzin) [2117777] - net/mlx5: DR, Apply new accelerated modify action and decapl3 (Amir Tzin) [2117777] - net/mlx5: DR, Add modify header argument pointer to actions attributes (Amir Tzin) [2117777] - net/mlx5: DR, Add modify header arg pool mechanism (Amir Tzin) [2117777] - net/mlx5: DR, Fix QP continuous allocation (Amir Tzin) [2117777] - net/mlx5: DR, Read ICM memory into dedicated buffer (Amir Tzin) [2117777] - net/mlx5: DR, Add support for writing modify header argument (Amir Tzin) [2117777] - net/mlx5: DR, Add create/destroy for modify-header-argument general object (Amir Tzin) [2117777] - net/mlx5: DR, Check for modify_header_argument device capabilities (Amir Tzin) [2117777] - net/mlx5: DR, Split chunk allocation to HW-dependent ways (Amir Tzin) [2117777] - net/mlx5: DR, Add cache for modify header pattern (Amir Tzin) [2117777] - net/mlx5: DR, Move ACTION_CACHE_LINE_SIZE macro to header (Amir Tzin) [2117777] - net/mlx5: DR, Add modify-header-pattern ICM pool (Amir Tzin) [2117777] - net/mlx5: DR, Prepare sending new WQE type (Amir Tzin) [2117777] - net/mlx5: Add new WQE for updating flow table (Amir Tzin) [2117777] - net/mlx5: Add mlx5_ifc bits for modify header argument (Amir Tzin) [2117777] - net/mlx5: DR, Set counter ID on the last STE for STEv1 TX (Amir Tzin) [2117777] - net/mlx5e: TC, Remove redundant parse_attr argument (Amir Tzin) [2165908] - net/mlx5e: Use a simpler comparison for uplink rep (Amir Tzin) [2165908] - net/mlx5: Lag, Add single RDMA device in multiport mode (Amir Tzin) [2165908] - net/mlx5: Lag, set different uplink vport metadata in multiport eswitch mode (Amir Tzin) [2165908] - net/mlx5: E-Switch, rename bond update function to be reused (Amir Tzin) [2165908] - net/mlx5e: TC, Add peer flow in mpesw mode (Amir Tzin) [2165908] - net/mlx5: Lag, Control MultiPort E-Switch single FDB mode (Amir Tzin) [2165908] - net/mlx5e: Add devlink fdb_large_groups parameter (Add missing Documentation) (Amir Tzin) [2165908] - SUNRPC: Fix READ_PLUS crasher (Benjamin Coddington) [2218539] - SUNRPC: Remove pointer type casts from xdr_get_next_encode_buffer() (Benjamin Coddington) [2218539] - SUNRPC: Clean up xdr_get_next_encode_buffer() (Benjamin Coddington) [2218539] - NFSv4.1: freeze the session table upon receiving NFS4ERR_BADSESSION (Benjamin Coddington) [2218539] - NFSv4.2: fix wrong shrinker_id (Benjamin Coddington) [2218539] - svcrdma: Prevent page release when nothing was received (Benjamin Coddington) [2218539] - SUNRPC: Fix UAF in svc_tcp_listen_data_ready() (Benjamin Coddington) [2218539] - nfsd: fix double fget() bug in __write_ports_addfd() (Benjamin Coddington) [2218539] - SUNRPC: Fix trace_svc_register() call site (Benjamin Coddington) [2218539] - SUNRPC: remove the maximum number of retries in call_bind_status (Benjamin Coddington) [2218539] - NFSv4.1: Always send a RECLAIM_COMPLETE after establishing lease (Benjamin Coddington) [2218539] - NFSD: callback request does not use correct credential for AUTH_SYS (Benjamin Coddington) [2218539] - sunrpc: only free unix grouplist after RCU settles (Benjamin Coddington) [2218539] - nfsd: call op_release, even when op_func returns an error (Benjamin Coddington) [2218539] - NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL (Benjamin Coddington) [2218539] - SUNRPC: fix shutdown of NFS TCP client socket (Benjamin Coddington) [2218539] - NFSv4: Fix hangs when recovering open state after a server reboot (Benjamin Coddington) [2218539] - NFSD: Protect against filesystem freezing (Benjamin Coddington) [2218539] - nfsd: fix race to check ls_layouts (Benjamin Coddington) [2218539] - nfs4trace: fix state manager flag printing (Benjamin Coddington) [2218539] - SUNRPC: ensure the matching upcall is in-flight upon downcall (Benjamin Coddington) [2218539] - nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure (Benjamin Coddington) [2218539] - SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails (Benjamin Coddington) [2218539] - NFSv4.x: Fail client initialisation if state manager thread can't run (Benjamin Coddington) [2218539] - SUNRPC: Fix missing release socket in rpc_sockname() (Benjamin Coddington) [2218539] - xprtrdma: Fix regbuf data not freed in rpcrdma_req_create() (Benjamin Coddington) [2218539] - NFSD: Finish converting the NFSv3 GETACL result encoder (Benjamin Coddington) [2218539] - NFSD: Finish converting the NFSv2 GETACL result encoder (Benjamin Coddington) [2218539] - SUNRPC: Return true/false (not 1/0) from bool functions (Benjamin Coddington) [2218539] - NFS: Fix an Oops in nfs_d_automount() (Benjamin Coddington) [2218539] - NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn (Benjamin Coddington) [2218539] - NFSv4: Fix a credential leak in _nfs4_discover_trunking() (Benjamin Coddington) [2218539] - NFSv4.2: Fix initialisation of struct nfs4_label (Benjamin Coddington) [2218539] - NFSv4.2: Fix a memory stomp in decode_attr_security_label (Benjamin Coddington) [2218539] - NFSv4.2: Always decode the security label (Benjamin Coddington) [2218539] - NFSv4.2: Clear FATTR4_WORD2_SECURITY_LABEL when done decoding (Benjamin Coddington) [2218539] - nfs4: Fix kmemleak when allocate slot failed (Benjamin Coddington) [2218539] - NFSv4.2: Fixup CLONE dest file size for zero-length count (Benjamin Coddington) [2218539] - SUNRPC: Fix null-ptr-deref when xps sysfs alloc failed (Benjamin Coddington) [2218539] - NFSv4.1: We must always send RECLAIM_COMPLETE after a reboot (Benjamin Coddington) [2218539] - NFSv4.1: Handle RECLAIM_COMPLETE trunking errors (Benjamin Coddington) [2218539] - NFSv4: Fix a potential state reclaim deadlock (Benjamin Coddington) [2218539] - NFSv4/pNFS: Always return layout stats on layout return for flexfiles (Benjamin Coddington) [2218539] - NFSD: Fix handling of oversized NFSv4 COMPOUND requests (Benjamin Coddington) [2218539] - nfsd: Fix a memory leak in an error handling path (Benjamin Coddington) [2218539] - Revert 'SUNRPC: Remove unreachable error condition' (Benjamin Coddington) [2218539] - NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0 (Benjamin Coddington) [2218539] - SUNRPC: RPC level errors should set task->tk_rpc_status (Benjamin Coddington) [2218539] - NFS: Fix another fsync() issue after a server reboot (Benjamin Coddington) [2218539] - net/sunrpc: fix potential memory leaks in rpc_sysfs_xprt_state_change() (Benjamin Coddington) [2218539] - SUNRPC: Fix xdr_encode_bool() (Benjamin Coddington) [2218539] - SUNRPC: Reinitialise the backchannel request buffers before reuse (Benjamin Coddington) [2218539] - NFSv4.1: RECLAIM_COMPLETE must handle EACCES (Benjamin Coddington) [2218539] - sunrpc: fix expiry of auth creds (Benjamin Coddington) [2218539] - pNFS/flexfiles: Report RDMA connection errors to the server (Benjamin Coddington) [2218539] - Revert 'pNFS: nfs3_set_ds_client should set NFS_CS_NOPING' (Benjamin Coddington) [2218539] - SUNRPC: Fix the calculation of xdr->end in xdr_get_next_encode_buffer() (Benjamin Coddington) [2218539] - pNFS: Avoid a live lock condition in pnfs_update_layout() (Benjamin Coddington) [2218539] - pNFS: Don't keep retrying if the server replied NFS4ERR_LAYOUTUNAVAILABLE (Benjamin Coddington) [2218539] - SUNRPC: Trap RDMA segment overflows (Benjamin Coddington) [2218539] - nfsd: Fix null-ptr-deref in nfsd_fill_super() (Benjamin Coddington) [2218539] - NFS: Further fixes to the writeback error handling (Benjamin Coddington) [2218539] - NFS: clean up a needless assignment in nfs_file_write() (Benjamin Coddington) [2218539] - NFS: remove redundant code in nfs_file_write() (Benjamin Coddington) [2218539] - NFS: Add support for eager writes (Benjamin Coddington) [2218539] - NFS: 'flags' field should be unsigned in struct nfs_server (Benjamin Coddington) [2218539] - NFSv4/pNFS: Do not fail I/O when we fail to allocate the pNFS layout (Benjamin Coddington) [2218539] - NFS: Memory allocation failures are not server fatal errors (Benjamin Coddington) [2218539] - SUNRPC: Ensure that the gssproxy client can start in a connected state (Benjamin Coddington) [2218539] - Revert 'SUNRPC: Ensure gss-proxy connects on setup' (Benjamin Coddington) [2218539] - SUNRPC: Ensure gss-proxy connects on setup (Benjamin Coddington) [2218539] - NFSv4: Don't invalidate inode attributes on delegation return (Benjamin Coddington) [2218539] - SUNRPC: svc_tcp_sendmsg() should handle errors from xdr_alloc_bvec() (Benjamin Coddington) [2218539] - SUNRPC: Handle low memory situations in call_status() (Benjamin Coddington) [2218539] - SUNRPC: Handle ENOMEM in call_transmit_status() (Benjamin Coddington) [2218539] - SUNRPC: Fix the svc_deferred_event trace class (Benjamin Coddington) [2218539] - NFSv4: fix open failure with O_ACCMODE flag (Benjamin Coddington) [2218539] - NFSv4/pNFS: Fix another issue with a list iterator pointing to the head (Benjamin Coddington) [2218539] - NFSv4.1: Fix uninitialised variable in devicenotify (Benjamin Coddington) [2218539] - NFSv4.1: don't retry BIND_CONN_TO_SESSION on session error (Benjamin Coddington) [2218539] - NFS: remove unneeded check in decode_devicenotify_args() (Benjamin Coddington) [2218539] - NFS: NFSv2/v3 clients should never be setting NFS_CAP_XATTR (Benjamin Coddington) [2218539] - NFS: Do not report writeback errors in nfs_getattr() (Benjamin Coddington) [2218539] - NFS: Remove an incorrect revalidation in nfs4_update_changeattr_locked() (Benjamin Coddington) [2218539] - nfsd: nfsd4_setclientid_confirm mistakenly expires confirmed client. (Benjamin Coddington) [2218539] - SUNRPC: Fix sockaddr handling in svcsock_accept_class trace points (Benjamin Coddington) [2218539] - SUNRPC: Fix sockaddr handling in the svc_xprt_create_error trace point (Benjamin Coddington) [2218539] - NFSD: Fix zero-length NFSv3 WRITEs (Benjamin Coddington) [2218539] - NFS: Ensure the server has an up to date ctime before renaming (Benjamin Coddington) [2218539] - NFS: Ensure the server has an up to date ctime before hardlinking (Benjamin Coddington) [2218539] [4.18.0-507] - Revert 'NFSv4: Retry LOCK on OLD_STATEID during delegation return' (Benjamin Coddington) [2217658] - powerpc/pseries/vas: Hold mmap_mutex after mmap lock during window close (Mamatha Inamdar) [2224883] - KVM: x86/mmu: Fix race condition in direct_page_fault (Jon Maloy) [2179929] {CVE-2022-45869} - x86/speculation: Allow enabling STIBP with legacy IBRS (Ricardo Robaina) [2187268] {CVE-2023-1998} - ACPI: sleep: Avoid breaking S3 wakeup due to might_sleep() (Mark Langsdorf) [2215625] - locking/semaphore: Add might_sleep() to down_*() family (Mark Langsdorf) [2215625] - perf stat: Support hybrid --topdown option (Michael Petlan) [2088833] - i40e: Wait for pending VF reset in VF set callbacks (Ivan Vecera) [2203921] - i40e: Add helper for VF inited state check with timeout (Ivan Vecera) [2203921] - tracing: Have filter accept 'common_cpu' to be consistent (Jerome Marchand) [2210711] - tracing/histogram: Fix sorting on old 'cpu' value (Jerome Marchand) [2210711] - tracing: Dump stacktrace trigger to the corresponding instance (Jerome Marchand) [2210711] - tracing/histogram: Rename 'cpu' to 'common_cpu' (Jerome Marchand) [2210711] - docs: histogram.txt: convert it to ReST file format (Jerome Marchand) [2210711] - bonding: add software tx timestamping support (Hangbin Liu) [2181339] - bonding: fix missed rcu protection (Hangbin Liu) [2181339] - bonding: use rcu_dereference_rtnl when get bonding active slave (Hangbin Liu) [2181339] - Bonding: return HWTSTAMP_FLAG_BONDED_PHC_INDEX to notify user space (Hangbin Liu) [2181339] - Bonding: force user to add HWTSTAMP_FLAG_BONDED_PHC_INDEX when get/set HWTSTAMP (Hangbin Liu) [2181339] - bond: pass get_ts_info and SIOC[SG]HWTSTAMP ioctl to active device (Hangbin Liu) [2181339] - mm/page_alloc: fix incorrect PGFREE and PGALLOC for high-order page (Chris von Recklinghausen) [2100592] - mm/page_alloc: check high-order pages for corruption during PCP operations (Chris von Recklinghausen) [2100592] - mm/page_alloc: do not prefetch buddies during bulk free (Chris von Recklinghausen) [2100592] - mm/page_alloc: free pages in a single pass during bulk free (Chris von Recklinghausen) [2100592] - mm/page_alloc: drain the requested list first during bulk free (Chris von Recklinghausen) [2100592] - mm/page_alloc: simplify how many pages are selected per pcp list during bulk free (Chris von Recklinghausen) [2100592] - mm/page_alloc: track range of active PCP lists during bulk free (Chris von Recklinghausen) [2100592] - mm/page_alloc: fetch the correct pcp buddy during bulk free (Chris von Recklinghausen) [2100592] - mm/page_alloc: allow high-order pages to be stored on the per-cpu lists (Chris von Recklinghausen) [2100592] - mm/page_alloc: move free_the_page (Chris von Recklinghausen) [2100592] - mm,memory_hotplug: factor out adjusting present pages into adjust_present_page_count() (Chris von Recklinghausen) [2100592] - mm, meminit: recalculate pcpu batch and high limits after init completes (Chris von Recklinghausen) [2100592] - compiler_attributes.h: Add kABI workaround (Waiman Long) [2215801] - linux/compiler-clang.h: define HAVE_BUILTIN_BSWAP* (Waiman Long) [2215801] - compiler.h: fix barrier_data() on clang (Waiman Long) [2215801] - compiler_types.h: Add __no_sanitize_{address,undefined} to noinstr (Waiman Long) [2215801] - x86, kcsan: Add __no_kcsan to noinstr (Waiman Long) [2215801] - kcsan: Add __no_kcsan function attribute (Waiman Long) [2215801] - kcsan: Reorganize compiler.h (Waiman Long) [2215801] - include/linux/compiler*.h: fix OPTIMIZER_HIDE_VAR (Waiman Long) [2215801] - include/linux/compiler_types.h: don't pollute userspace with macro definitions (Waiman Long) [2215801] - include/linux/compiler*.h: define asm_volatile_goto (Waiman Long) [2215801] - Compiler Attributes: use feature checks instead of version checks (Waiman Long) [2215801] - Compiler Attributes: remove unneeded sparse (__CHECKER__) tests (Waiman Long) [2215801] - Compiler Attributes: homogenize __must_be_array (Waiman Long) [2215801] - Compiler Attributes: remove unneeded tests (Waiman Long) [2215801] - Compiler Attributes: always use the extra-underscores syntax (Waiman Long) [2215801] - Compiler Attributes: remove unused attributes (Waiman Long) [2215801] - Compiler Attributes: naked can be shared (Waiman Long) [2215801] - Compiler Attributes: naked was fixed in gcc 4.6 (Waiman Long) [2215801] - include/linux/compiler*.h: make compiler-*.h mutually exclusive (Waiman Long) [2215801] - Raise the minimum required gcc version to 4.6 (Waiman Long) [2215801] - deprecate the '__deprecated' attribute warnings entirely and for good (Waiman Long) [2215801] [4.18.0-506] - libceph: harden msgr2.1 frame segment length checks (Ilya Dryomov) [2222256] - netfilter: nf_conntrack_netlink: need to hold rcu readlock when doing l4proto lookup (Florian Westphal) [2188230] - net/mlx5: Expose steering dropped packets counter (Amir Tzin) [2223198] - net/mlx5: Expose vnic diagnostic counters for eswitch managed vports (Amir Tzin) [2223198] - igbvf: add PCI reset handler functions (Corinna Vinschen) [2153365] - igbvf: Regard vf reset nack as success (Corinna Vinschen) [2153365] - intel/igbvf: free irq on the error path in igbvf_request_msix() (Corinna Vinschen) [2153365] - Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} (Ricardo Robaina) [2139617] {CVE-2022-3640} - Bluetooth: L2CAP: Fix build errors in some archs (Ricardo Robaina) [2139617] {CVE-2022-3640} - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression (Ricardo Robaina) [2139617] {CVE-2022-3640} - Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del() (Ricardo Robaina) [2139617] {CVE-2022-3640} - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put (Ricardo Robaina) [2139617] {CVE-2022-3640} - iavf: fix reset task race with iavf_remove() (Petr Oros) [2223604] - iavf: fix a deadlock caused by rtnl and driver's lock circular dependencies (Petr Oros) [2223604] - Revert 'iavf: Do not restart Tx queues after reset task failure' (Petr Oros) [2223604] - Revert 'iavf: Detach device during reset task' (Petr Oros) [2223604] - iavf: Wait for reset in callbacks which trigger it (Petr Oros) [2223604] - iavf: use internal state to free traffic IRQs (Petr Oros) [2223604] - iavf: Fix out-of-bounds when setting channels on remove (Petr Oros) [2223604] - iavf: Fix use-after-free in free_netdev (Petr Oros) [2223604] - iavf: make functions static where possible (Petr Oros) [2223604] - iavf: fix err handling for MAC replace (Petr Oros) [2223604] - iavf: remove some unused functions and pointless wrappers (Petr Oros) [2223604] - iavf: remove mask from iavf_irq_enable_queues() (Petr Oros) [2223604] - iavf: send VLAN offloading caps once after VFR (Petr Oros) [2223604] - cpufreq: Fix parameter in parse_perf_domain() (Mark Langsdorf) [2181273] - cpufreq: intel_pstate: remove MODULE_LICENSE in non-modules (Mark Langsdorf) [2181273] - cpufreq: intel_pstate: Adjust balance_performance EPP for Sapphire Rapids (Mark Langsdorf) [2181273] - cpufreq: Make kobj_type structure constant (Mark Langsdorf) [2181273] - driver core: make kobj_type constant. (Mark Langsdorf) [2181273] - cpufreq: Make cpufreq_unregister_driver() return void (Mark Langsdorf) [2181273] - drivers/cpufreq: Remove 'select SRCU' (Mark Langsdorf) [2181273] - cpufreq: intel_pstate: Drop ACPI _PSS states table patching (Mark Langsdorf) [2181273] - cpufreq: stats: Convert to use sysfs_emit_at() API (Mark Langsdorf) [2181273] - cpufreq: Init completion before kobject_init_and_add() (Mark Langsdorf) [2181273] - cpufreq: intel_pstate: Allow EPP 0x80 setting by the firmware (Mark Langsdorf) [2181273] - cpufreq: ACPI: Use str_enabled_disabled() helper (Mark Langsdorf) [2181273] - cpufreq: Generalize of_perf_domain_get_sharing_cpumask phandle format (Mark Langsdorf) [2181273] - cpufreq: Add of_perf_domain_get_sharing_cpumask (Mark Langsdorf) [2181273] - cpufreq: intel_pstate: Read all MSRs on the target CPU (Mark Langsdorf) [2181273] - ACPI: CPPC: Add ACPI disabled check to acpi_cpc_valid() (Mark Langsdorf) [2181273] [4.18.0-505] - gfs2: Don't deref jdesc in evict (Bob Peterson) [2214356] {CVE-2023-3212} - md/raid5: Don't do accounting for non-align read io (Nigel Croxon) [2183033] - powerpc: Don't select HAVE_IRQ_EXIT_ON_IRQ_STACK (Mamatha Inamdar) [2218348] - NFSv4.1: freeze the session table upon receiving NFS4ERR_BADSESSION (Benjamin Coddington) [2217963] - proc: Use PIDTYPE_TGID in next_tgid (Brian Foster) [2047252] - netfilter: nf_tables: unbind non-anonymous set if rule construction fails (Phil Sutter) [2214963] {CVE-2023-3390} - netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain (Phil Sutter) [2214963] {CVE-2023-3390} - netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE (Phil Sutter) [2214963] {CVE-2023-3390} - fanotify,audit: Allow audit to use the full permission event response (Richard Guy Briggs) [2055328] - fanotify: define struct members to hold response decision context (Richard Guy Briggs) [2055328] - fanotify: Ensure consistent variable type for response (Richard Guy Briggs) [2055328] - RDMA/mlx4: Prevent shift wrapping in set_user_sq_size() (Amir Tzin) [2166019] - RDMA/mlx: Calling qp event handler in workqueue context (mlx4 hunks only) (Amir Tzin) [2166019] - net/mlx4: small optimization in mlx4_en_xmit() (Amir Tzin) [2166019] - net/mlx4: rename two constants (Amir Tzin) [2166019] - RDMA/mlx4: Remove NULL check before dev_{put, hold} (Amir Tzin) [2166019] - ptp: mlx4: convert to .adjfine and adjust_by_scaled_ppm (Amir Tzin) [2166019] - mlx4: Do type_clear() for devlink ports when type_set() was called previously (Amir Tzin) [2166019] - cgroup: Reorganize css_set_lock and kernfs path processing (Waiman Long) [2193485] - cgroup: Fix build failure when CONFIG_SHRINKER_DEBUG (Waiman Long) [2193485] - cgroup: fix missing cpus_read_{lock,unlock}() in cgroup_transfer_tasks() (Waiman Long) [2193485] - cgroup: Make cgroup_get_from_id() prettier (Waiman Long) [2193485] - cgroup: remove obsolete comment on cgroup_on_dfl() (Waiman Long) [2193485] - cgroup/cpuset: Wake up cpuset_attach_wq tasks in cpuset_cancel_attach() (Waiman Long) [2193485] - kselftests: cgroup: update kmem test precision tolerance (Waiman Long) [2193485] - cgroup/cpuset: Improve cpuset_css_alloc() description (Waiman Long) [2193485] - selftests: cgroup: fix unsigned comparison with less than zero (Waiman Long) [2193485] - device_cgroup: Roll back to original exceptions after copy failure (Waiman Long) [2193485] - cgroup/cpuset: use hotplug_memory_notifier() directly (Waiman Long) [2193485] - mm: memcontrol: don't allocate cgroup swap arrays when memcg is disabled (Waiman Long) [2193485] - cgroup: cgroup_get_from_id() must check the looked-up kn is a directory (Waiman Long) [2193485] - sched/psi: Don't create cgroup PSI files when psi_disabled (Waiman Long) [2193485] - cgroup: Homogenize cgroup_get_from_id() return value (Waiman Long) [2193485] - cgroup: cgroup: Honor caller's cgroup NS when resolving cgroup id (Waiman Long) [2193485] - cgroup: Honor caller's cgroup NS when resolving path (Waiman Long) [2193485] - mm: memcontrol: introduce mem_cgroup_ino() and mem_cgroup_get_from_ino() (Waiman Long) [2193485] - cgroup: Use separate src/dst nodes when preloading css_sets for migration (Waiman Long) [2193485] - cgroup.c: add helper __cset_cgroup_from_root to cleanup duplicated codes (Waiman Long) [2193485] - cgroup/rstat: check updated_next only for root (Waiman Long) [2193485] - cgroup: rstat: explicitly put loop variant in while (Waiman Long) [2193485] - cgroup: return early if it is already on preloaded list (Waiman Long) [2193485] - cgroup: Trace event cgroup id fields should be u64 (Waiman Long) [2193485] - cgroup: fix a typo in comment (Waiman Long) [2193485] - hugetlb_cgroup: remove unused hugetlb_cgroup_from_counter macro (Waiman Long) [2193485] - cgroup: Make rebind_subsystems() disable v2 controllers all at once (Waiman Long) [2193485] - cgroup: Avoid compiler warnings with no subsystems (Waiman Long) [2193485] - cgroup: Fix kernel-doc (Waiman Long) [2193485] - kernfs: use 64bit inos if ino_t is 64bit (Waiman Long) [2193485] - kernfs: implement custom exportfs ops and fid type (Waiman Long) [2193485] - kernfs: combine ino/id lookup functions into kernfs_find_and_get_node_by_id() (Waiman Long) [2193485] - kernfs: kernfs_find_and_get_node_by_ino() should only look up activated nodes (Waiman Long) [2193485] - kernfs: use dumber locking for kernfs_find_and_get_node_by_ino() (Waiman Long) [2193485] - kernfs: fix ino wrap-around detection (Waiman Long) [2193485] - ice: prevent NULL pointer deref during reload (Petr Oros) [2153356] - ice: Unregister netdev and devlink_port only once (Petr Oros) [2153356] - ice: Fix ice module unload (Petr Oros) [2153356] - ice: Fix tx queue rate limit when TCs are configured (Petr Oros) [2153356] - ice: Fix max_rate check while configuring TX rate limits (Petr Oros) [2153356] - ice: Fix XDP memory leak when NIC is brought up and down (Petr Oros) [2153356] - ice: remove comment about not supporting driver reinit (Petr Oros) [2153356] - ice: block LAN in case of VF to VF offload (Petr Oros) [2153356] - ice: Fix stats after PF reset (Petr Oros) [2153356] - ice: Reset FDIR counter in FDIR init stage (Petr Oros) [2153356] - ice: fix wrong fallback logic for FDIR (Petr Oros) [2153356] - ice: add profile conflict check for AVF FDIR (Petr Oros) [2153356] - ice: Fix ice_cfg_rdma_fltr() to only update relevant fields (Petr Oros) [2153356] - ice: remove filters only if VSI is deleted (Petr Oros) [2153356] - ice: check if VF exists before mode check (Petr Oros) [2153356] - ice: xsk: disable txq irq before flushing hw (Petr Oros) [2153356] - ice: avoid bonding causing auxiliary plug/unplug under RTNL lock (Petr Oros) [2153356] - ethernet: ice: avoid gcc-9 integer overflow warning (Petr Oros) [2153356] - ice: don't ignore return codes in VSI related code (Petr Oros) [2153356] - ice: Fix DSCP PFC TLV creation (Petr Oros) [2153356] - ice: copy last block omitted in ice_get_module_eeprom() (Petr Oros) [2153356] - ice: properly alloc ICE_VSI_LB (Petr Oros) [2153356] - ice: xsk: Fix cleaning of XDP_TX frames (Petr Oros) [2153356] - ice: Mention CEE DCBX in code comment (Petr Oros) [2153356] - ice: Change ice_vsi_realloc_stat_arrays() to void (Petr Oros) [2153356] - ice: Add GPIO pin support for E823 products (Petr Oros) [2153356] - ice: switch: fix potential memleak in ice_add_adv_recipe() (Petr Oros) [2153356] - ice: Fix off by one in ice_tc_forward_to_queue() (Petr Oros) [2153356] - ice: Fix disabling Rx VLAN filtering with port VLAN enabled (Petr Oros) [2153356] - ice: fix out-of-bounds KASAN warning in virtchnl (Petr Oros) [2153356] - ice: Do not use WQ_MEM_RECLAIM flag for workqueue (Petr Oros) [2153356] - ice: remove unnecessary virtchnl_ether_addr struct use (Petr Oros) [2153356] - ice: introduce .irq_close VF operation (Petr Oros) [2153356] - ice: introduce clear_reset_state operation (Petr Oros) [2153356] - ice: convert vf_ops .vsi_rebuild to .create_vsi (Petr Oros) [2153356] - ice: introduce ice_vf_init_host_cfg function (Petr Oros) [2153356] - ice: add a function to initialize vf entry (Petr Oros) [2153356] - ice: Pull common tasks into ice_vf_post_vsi_rebuild (Petr Oros) [2153356] - ice: move ice_vf_vsi_release into ice_vf_lib.c (Petr Oros) [2153356] - ice: move vsi_type assignment from ice_vsi_alloc to ice_vsi_cfg (Petr Oros) [2153356] - ice: refactor VSI setup to use parameter structure (Petr Oros) [2153356] - ice: drop unnecessary VF parameter from several VSI functions (Petr Oros) [2153356] - ice: fix function comment referring to ice_vsi_alloc (Petr Oros) [2153356] - ice: Add more usage of existing function ice_get_vf_vsi(vf) (Petr Oros) [2153356] - ice: implement devlink reinit action (Petr Oros) [2153356] - ice: update VSI instead of init in some case (Petr Oros) [2153356] - ice: move VSI delete outside deconfig (Petr Oros) [2153356] - ice: sync netdev filters after clearing VSI (Petr Oros) [2153356] - ice: split probe into smaller functions (Petr Oros) [2153356] - ice: stop hard coding the ICE_VSI_CTRL location (Petr Oros) [2153356] - ice: split ice_vsi_setup into smaller functions (Petr Oros) [2153356] - ice: cleanup in VSI config/deconfig code (Petr Oros) [2153356] - ice: alloc id for RDMA using xa_array (Petr Oros) [2153356] - ice: move RDMA init to ice_idc.c (Petr Oros) [2153356] - ice: Prevent set_channel from changing queues while RDMA active (Petr Oros) [2153356] - ice: Remove redundant pci_enable_pcie_error_reporting() (Petr Oros) [2153356] - ice: move devlink port creation/deletion (Petr Oros) [2153356] - ice: Remove excess space (Petr Oros) [2153356] - ice: Introduce local var for readability (Petr Oros) [2153356] - ice: Match parameter name for ice_cfg_phy_fc() (Petr Oros) [2153356] - ice: Explicitly return 0 (Petr Oros) [2153356] - ice: Reduce scope of variables (Petr Oros) [2153356] - ice: Move support DDP code out of ice_flex_pipe.c (Petr Oros) [2153356] - ice: Remove cppcheck suppressions (Petr Oros) [2153356] - ice: combine cases in ice_ksettings_find_adv_link_speed() (Petr Oros) [2153356] - ice: Add support for 100G KR2/CR2/SR2 link reporting (Petr Oros) [2153356] - ice: add missing checks for PF vsi type (Petr Oros) [2153356] - ice: remove redundant non-null check in ice_setup_pf_sw() (Petr Oros) [2153356] - ice: restrict PTP HW clock freq adjustments to 100, 000, 000 PPB (Petr Oros) [2153356] - ice: Support drop action (Petr Oros) [2153356] - ice: Handle LLDP MIB Pending change (Petr Oros) [2153356] - ice: Add 'Execute Pending LLDP MIB' Admin Queue command (Petr Oros) [2153356] - ice: xsk: do not use xdp_return_frame() on tx_buf->raw_buf (Petr Oros) [2153356] ... IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-31436 CVE-2023-1989 CVE-2023-4208 CVE-2023-31084 CVE-2023-4732 CVE-2023-4155 CVE-2022-3594 CVE-2023-0458 CVE-2023-4207 CVE-2022-40982 CVE-2023-1074 CVE-2023-1075 CVE-2023-1855 CVE-2023-1998 CVE-2022-40133 CVE-2023-23455 CVE-2023-26545 CVE-2022-45869 CVE-2023-1079 CVE-2023-2513 CVE-2023-3141 CVE-2023-3268 CVE-2022-3640 CVE-2023-3611 CVE-2021-43975 CVE-2022-4744 CVE-2022-38457 CVE-2022-42895 CVE-2023-0597 CVE-2023-3212 CVE-2023-3609 CVE-2023-35823 CVE-2023-1118 CVE-2023-1252 CVE-2022-28388 CVE-2022-45887 CVE-2023-0590 CVE-2023-1206 CVE-2023-1382 CVE-2023-4132 CVE-2023-28772 CVE-2023-30456 CVE-2023-33203 CVE-2023-33951 CVE-2023-35824 CVE-2023-1073 CVE-2023-3161 CVE-2023-3772 CVE-2023-4128 CVE-2023-4206 CVE-2023-28328 CVE-2023-33952 CVE-2023-35825 cpe:/o:oracle:linux:8::baseos_latest cpe:/o:oracle:linux:8:9:baseos_base cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 8 [1:26.1-11] - Bump version MODERATE Copyright 2023 Oracle, Inc. CVE-2022-48339 CVE-2022-48337 cpe:/a:oracle:linux:8:9:appstream_base cpe:/o:oracle:linux:8::baseos_latest cpe:/a:oracle:linux:8::appstream cpe:/o:oracle:linux:8:9:baseos_base Oracle Linux 8 [1:0.9.59-3] - Add cve-2023-27371.patch Related: rhbz#2174639 CVE-2023-27371 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-27371 cpe:/o:oracle:linux:8::baseos_latest cpe:/o:oracle:linux:8:9:baseos_base cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 8 [3.2.1-6] - Fix CVE-2023-23931: Don't allow update_into to mutate immutable objects, resolves rhbz#2172404 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-23931 cpe:/o:oracle:linux:8::baseos_latest cpe:/o:oracle:linux:8:9:baseos_base Oracle Linux 8 [20230516-999.27.git6c9e0ed5.el8] - Update firmware for qat_4xxx devices (Orabug: 35811008) MODERATE Copyright 2023 Oracle, Inc. CVE-2023-20569 cpe:/o:oracle:linux:8::baseos_latest cpe:/o:oracle:linux:8:9:baseos_base cpe:/o:oracle:linux:8:8:baseos_patch cpe:/a:oracle:exadata_dbserver:23.1.8.0.0::ol8 Oracle Linux 8 [2:4.6-19] - gpasswd: fix password leak. Resolves: #2215947 [2:4.6-18] - Update patch to close label to reset libselinux state. Resolves: #1984740 - useradd: check if subid range exists for user. Resolves: #2012929 - find_new_[gu]id: Skip over IDs that are reserved for legacy reasons. Resolves: #1994269 LOW Copyright 2023 Oracle, Inc. CVE-2023-4641 cpe:/o:oracle:linux:8::baseos_latest cpe:/o:oracle:linux:8:9:baseos_base cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 8 [1.13.0-8] - Resolves: rhbz#2209517 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-8.9.0] [1.13.0-7] - Resolves: rhbz#2170867 - c-ares: buffer overflow in config_sortlist() due to missing string length check [rhel-8] MODERATE Copyright 2023 Oracle, Inc. CVE-2022-4904 cpe:/o:oracle:linux:8::baseos_latest cpe:/o:oracle:linux:8:9:baseos_base Oracle Linux 8 evolution-mapi [3.28.3-8] - Related: #2190417 - Rebuild for samba rebase to 4.18.x openchange [2.3-32.0.1] - Use ldconfig_scriptlets [2.3-32] - Related: #2190417 (Rebuild for samba rebase to 4.18.x) samba [4.18.6-1] - related: rhbz#2190417 - Update to version 4.18.6 - resolves: rhbz#2232564 - Fix the rpc dsgetinfo command [4.18.5-0] - resolves: rhbz#2222894 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 [4.18.4-2] - resolves: rhbz#2222884 - Fix trust relationship between workstation and DC [4.18.4-1] - resolves: rhbz#2221594 - Fix broken symlink for libwbclient - resolves: rhbz#2221600 - Fix segfault of winbind child when listing users with winbind scan trusted domains = yes - resolves: rhbz#2175385 - Fix access of Samba share with veto files = /.*/ - resolves: rhbz#2218237 - Fix Python tarfile extraction to avoid a warning [4.18.4-0] - resolves: rhbz#2190417 - Update to version 4.18.4 [4.18.3-0] - resolves: rhbz#2190417 - Update to version 4.18.3 [4.18.2-2] - resolves: rhbz#2190417 - Rebuild to trigger distrobaker sync [4.18.2-1] - resolves: rhbz#2190417 - Add missing tests to fix osci.brew-build.tier0.functional [4.18.2-0] - resolves: rhbz#2190417 - Update to version 4.18.2 [4.17.5-2] - resolves: rhbz#2169339 - Fix winbind memory leak - resolves: rhbz#2152899 - Fix Samba shares not accessible issue [4.17.5-1] - resolves: rhbz#2167691 - Create package samba-tools [4.17.5-0] - related: rhbz#2132051 - Update to version 4.17.5 [4.17.4-1] - related: rhbz#2132051 - Create package dc-libs also for 'non-dc build' [4.17.4-0] - related: rhbz#2132051 - Update to version 4.17.4 - resolves: rhbz#2154370 - Fix CVE-2022-38023 - resolves: rhbz#2142331 - Fix %U include directive for share listing (netshareenum) - resolves: rhbz#2148943 - Fix Winbind to retrieve user groups from Active Directory [4.17.2-2] - Always add epoch to samba_depver to fix osci.brew-build.rpmdeplint.functional - related: rhbz#2132051 [4.17.2-1] - resolves: rhbz#2132051 - Update to version 4.17.2 - resolves: rhbz#2126174 - Fix CVE-2022-1615 - resolves: rhbz#2108487 - ctdb: Add dependency to samba-winbind-clients [4.16.4-2] - resolves: rhbz#2120956 - Do not require samba package in python3-samba [4.16.4-1] - Rebase to version 4.16.4 - resolves: rhbz#2108331 - Fix CVE-2022-32742 [4.16.3-0] - related: rhbz#2077468 - Rebase Samba to 4.16.3 - resolves: rhbz#2106672 - The pcap background queue process should not be stopped - resolves: rhbz#2106263 - Fix crash in rpcd_classic - resolves: rhbz#2100093 - Fix net ads info returns LDAP server and LDAP server name [4.16.2-1] - resolves: rhbz#2084162 - Fix printer displays only after 300 seconds timeout [4.16.2-0] - Fix rpminspect abidiff - related: rhbz#2077468 - Rebase Samba to 4.16.2 [4.16.1-0] - Update to Samba 4.16.1 - resolves: rhbz#2077468 Rebase Samba to the the latest 4.16.x release [4.15.5-8] - resolves: rhbz#2070522 - Fix UPNs handling in lookup_name*() calls [4.15.5-7] - resolves: rhbz#2076505 - PAM Kerberos authentication fails with a clock skew error [4.15.5-6] - resolves: rhbz#2059151 - Fix username map for unix groups - resolves: rhbz#2065212 - Fix 'create krb5 conf = yes when a KDC has a single IP address. [4.15.5-4] - resolves: rhbz#2057503 - Fix winbind kerberos ticket refresh [4.15.5-3] - related: rhbz#1979959 - Fix typo in testparm output [4.15.5-2] - resolves: rhbz#1979959 - Improve idmap autorid sanity checks and documentation [4.15.5-1] - resolves: #1995849 - [RFE] Change change password change prompt phrasing - resolves: #2029417 - virusfilter_vfs_openat: Not scanned: Directory or special file [4.15.5-0] - Update to Samba 4.15.5 - related: rhbz#2013596 - Rebase Samba to the the latest 4.15.x release - resolves: rhbz#2046127 - Fix CVE-2021-44141 - resolves: rhbz#2046153 - Fix CVE-2021-44142 - resolves: rhbz#2044404 - Printing no longer works on Windows 7 - resolves: rhbz#2043154 - Fix systemd notifications - resolves: rhbz#2049602 - Disable NTLMSSP for ldap client connections (e.g. libads) [4.15.4-0] - Update to Samba 4.15.4 - related: rhbz#2013596 - Rebase Samba to the the latest 4.15.x release - resolves: rhbz#2039153 - Fix CVE-2021-20316 - resolves: rhbz#1912549 - Winexe: Kerberos flag not invoking Kerberos Auth - resolves: rhbz#2039157 - Fix CVE-2021-43566 - resolves: rhbz#2038148 - Failed to authenticate users after upgrade samba package to release samba-4.14.5-7 - resolves: rhbz#2035528 - [smb] Segmentation fault when joining the domain - resolves: rhbz#2038796 - filename_convert_internal: open_pathref_fsp [xxx] failed: NT_STATUS_ACCESS_DENIED [4.15.3-1] - related: rhbz#2013596 - Rebase to version 4.15.3 - resolves: rhbz#2028029 - Fix possible null pointer dereference in winbind - resolves: rhbz#1912549 - Winexe: Kerberos Auth is respected via --use-kerberos=desired [4.15.2-2] - related: rhbz#2013596 - Remove unneeded lmdb dependency [4.15.2-1] - resolves: rhbz#2013596 - Rebase to version 4.15.2 - resolves: rhbz#1999294 - Remove noisy error message in winbindd - resolves: rhbz#1958881 - Don't require winbind being online for krb5 auth with one-way trusts - resolves: rhbz#2019461 - Fix deleting directories with dangling symlinks [4.14.5-14] - related: rbhz#2019674 - Fix CVE-2020-25717 - Fix running ktest (selftest) [4.14.5-13] - related: rbhz#2019674 - Fix CVE-2020-25717 - Add missing checks for IPA DC server role [4.14.5-12] - related: rbhz#2019674 - Fix regression with 'allow trusted domains = no' [4.14.5-11] - resolves: rhbz#2021425 - Add missing PAC buffer types to krb5pac.idl [4.14.4-3] - resolves: rhbz#2019662 - Fix CVE-2016-2124 - resolves: rhbz#2019668 - Fix CVE-2021-23192 - resolves: rbhz#2019674 - Fix CVE-2020-25717 [ 4.14.4-2] - related: rhbz#1980346 - Rebuild for libtalloc 0.11.0 [4.14.4-1] - resolves: rhbz#1974792 - Create a subpackage for vfs-io-uring - resolves: rhbz#1965397 - Raise log level for dfs ENOENT debug message [4.14.4-0] - related: rhbz#1944657 - Update to version 4.14.5 - resolves: rhbz#1969787 - Fix memory leak in RPC server - resolves: rhbz#1954974 - Validate smb.conf option for domain members with testparm - resolves: rhbz#1963298 - Fix smbd trying to delete files with wrong permissions - resolves: rhbz#1890008 - Update rpcclient manpage to list all available commands - resolves: rhbz#1857254 - Update smbcacls manpage to document inhertance flags [4.14.4-4] - related: rhbz#1944657 - Fix possible upgrade issues [4.14.4-2] - resolves: rhbz#1944657 - Update to version 4.14.4 - resolves: rhbz#1949445 - Fix CVE-2021-20254 - resolves: rhbz#1947945 - Fix libsmbldap.so.2 not being a symbolic link - resolves: rhbz#1908506 - Fix creating the gencache user directory - resolves: rhbz#1901029 - Build the vfs_io_uring module [4.13.3-3] - resolves: #1924615 - Fix a memcache bug when cache is full - resolves: #1924571 - Ensure that libwbclient has been updated before restarting services [4.13.3-2] - resolves: #1909647 - Fix winbind in trust scenarios with connection issues [4.13.3-1] - related: #1878109 - Rebase Samba to version 4.13.3 [4.13.2-5] - resolves: #1904174 - Fix ldap timeout with 'net ads join' [4.13.2-4] - resolves: #1902198 - Document weak crypto output of testparm [4.13.2-3] - resolves: #1899113 - Fix following dfs links with smb clients [4.13.2-2] - related: #1869702 - Fix spoolss crash - resolves: #1896736 - Fix name lookups of FreeIPA users - resolves: #1899113 - Fix DFS links [4.13.2-1] - resolves: #1878109 - Rebase Samba to version 4.13.2 - resolves: #1872833 - Add samba-winexe subpackage - resolves: #1891688 - Fix CVE-2020-14323 - resolves: #1892633 - Fix CVE-2020-14318 - resolves: #1892639 - Fix CVE-2020-14383 - resolves: #1879835 - Fix CVE-2020-1472 - resolves: #1888990 - Update smb.conf manpages to describe how to apply config changes. - resolves: #1869702 - Fix %U substitution for 'valid users' option - resolves: #1818038 - Improve FIPS compliance [4.12.3-12] - resolves: #1868558 - cannot create a directory in home over SMB2, mkdirat returns EBADF [4.12.3-11] - resolves: #1859277 - Allow a user to use gencache [4.12.3-10] - related: #1856315 - Fix net-ads-join with LDAP over TLS [4.12.3-9] - related: #1817557 - Move DECRPC mdssvc data files to correct package - resolves: #1856676 - Fix lookuprids in winbind [4.12.3-8] - resolves: #1856315 - Fix net-ads-join with LDAP over TLS [4.12.3-7] - resolves: #1855711 - Fix 'require_membership_of' documentation in pam_winbind manpage [4.12.3-6] - related: #1842844 - Fix TLS connections with GnuTLS [4.12.3-5] - resolves: #1823612 - Fix segfault in 'net ads dns gethostbyname' - resolves: #1792553 - Fix 'net ads join createcomputer=OU' [4.12.3-4] - resolves: #1850980 - Add 'additional dns hostname' to keytab - resolves: #1850981 - Add net-ads-join dnshostname=fqdn option [4.12.3-1] - resolves: #1666737 - Add a new smbc_readdirplus2() function to libsmbclient - resolves: #1842844 - Fix GnuTLS priority list for TLS connections [4.12.3-0] - resolves: #1817557 - Rebase to version 4.12.3 - resolves: #1813833 - Fix 'net ads join createupn=' [4.11.2-14] - Rebuild with krb5 1.18 - Resolves: #1817578 - support krb5 1.18 [4.11.2-13] - resolves: #1802182 - Fix join using netbios name [4.11.2-12] - related: #1781232 - Improve debug output of smbclient - resolves: #1794461 - Do not return bogus inode numbers in cli_qpathinfo2()/cli_qpathinfo3() for SMB1 - resolves: #1794442 - Fix segfault in smbd_do_qfilepathinfo() [4.11.2-11] - resolves: #1778130 - Remove usage of DES encryption types in krb5 [4.11.2-10] - resolves: #1790353 - Fix access check in DsRGetForestTrustInformation - resolves: #1791209 - Fix CVE-2019-14907 [4.11.2-9] - resolves: #1785134 - Fix libwbclient manual alternative settings [4.11.2-8] - resolves: #1781232 - Fix smbclient debug message [4.11.2-7] - related: #1637861 - Fix trust creation if weak crypto is disallowed [4.11.2-6] - resolves: #1637861 - Use GnuTLS for crypto [4.11.2-4] - related: #1754409 - Add patch to avoid overlinking with libnsl and libsocket - related: #1754409 - Fix permissions for pidl - related: #1754409 - Fix logrotate script - related: #1754409 - Add missing README files [4.11.2-3] - related: #1754409 - Fix pidl packaging [4.11.2-1] - resolves: #1754409 - Rebase to Samba version 4.11.2 - resolves: #1776312 - Winbind is not restarted on upgrade - resolves: #1764469 - Fix CVE-2019-10218 - resolves: #1746241 - Fix CVE-2019-10197 - resolves: #1710980 - Add support for KCM ccache in pam_winbind [4.10.4-101] - related: #1760824 - Removed additional issues with overlinking [4.10.4-100] - resolves: #1754575 - Avoid overlinking with librt and libpthread - resolves: #1755440 - Fix forest trusts enumeration - resolves: #1755445 - Fix CUPS username/password authentication with smbspool [4.10.4-1] - resolves: #1712378 - Fix smbspool CUPS backend - resolves: #1696612 - Fix 'net ads join -U admin@parentdomain' [4.10.4-0] - related: #1638001 - Rebase to Samba version 4.10.4 - resolves: #1597298 - Build Samba with python3 - resolves: #1658558 - Add 'net ads leave --keep-account' option - resolves: #1669004 - Fix systemd status notifications - resolves: #1672167 - Fix printing cache timeout in debug output - resolves: #1696525 - Fix CVE-2019-3880 [4.10.3-0] - related: #1638001 - Rebase to Samba version 4.10.3 [4.10.2-1] - related: #1638001 - Fix package upgrades [4.10.2-0] - resolves: #1638001 - Rebase Samba to version 4.10 [4.9.1-8] - resolves: #1663421 - Fix perl interpreter dependencies [4.9.1-7] - resolves: #1658690 - Add smbc_setOptionProtocols() - resolves: #1658678 - Fix spoolss client operations against Windows [4.9.1-6] - resolves: #1642092 - Harden [homes] share export - resolves: #1648846 - Fix out of bound array access in ctdb - resolves: #1657266 - Fix tmp directory creation in /run [4.9.1-5] - resolves: #1644327 - Segfault if wrong 'passdb backend' is configured - resolves: #1647959 - Segfault in the debug system with hardended build [4.9.1-4] - related: #1614232 - Fix some spec file issues detected by rpmdiff [4.9.1-3] - Temporarily remove smbtorture from samba-test due to Python 2 linkage - related: #1609661 - samba-test package cannot be installed due to unresolved dependencies [4.9.1-2] - related: #1614232 - Add CTDB examples with a config migration script [4.9.1-1] - resolves: #1614232 - Update to Samba 4.9.1 [4.9.0rc5-3] - related: #1614232 - Update to Samba 4.9.0rc5 - resolves: #1610909 - Re-enable glubsterfs vfs module - resolves: #1624170 - Build with -fstack-protectore-strong if available - resolves: #1602685 - Fixed issues found by covscan [4.9.0rc3-3] - related: #1614232 - Update to Samba 4.9.0rc3 - resolves: #1554753 - Fix CVE-2018-1050 - resolves: #1617912 - Fix CVE-2018-10858 - resolves: #1617913 - Fix CVE-2018-10918 - resolves: #1617914 - Fix CVE-2018-10919 - resolves: #1617915 - Fix CVE-2018-1139 - resolves: #1612522 - Manpage fixes [4.9.0rc2-2] - Update to Samba 4.9.0rc2 [4.9.0rc1-2] - Do not package Python 2 artefacts by default [4.9.0rc1-1] - Don't build dns and dsdb-related modules without AD DC [4.9.0rc1-0] - Update to Samba 4.9.0rc1 [4.8.3-2] - Use %{__python2}, not 'python', as the Python2 interpreter - Add workaround to allow building with Python 2 - Change unversioned python macros to python2 - Disable gluster temporarily [4.8.3-1] - Update to Samba 4.8.3 - Remove python(2|3)-subunit dependency [2:4.8.2-1.1] - Rebuilt for Python 3.7 [4.8.2-0] - Update to Samba 4.8.2 [4.8.1-1] - resolves: #1574177 - Fix smbspool command line argument handling [4.8.1-0] - Update to Samba 4.8.1 [4.8.0-7] - resolves: #1554754, #1554756 - Security fixes for CVE-2018-1050 CVE-2018-1057 - resolves: #1555112 - Update to Samba 4.8.0 [4.8.0rc4-6] - resolves: #1552652 - Fix usage of nc in ctdb tests and only recommned it [4.8.0rc4-5] - Update to Samba 4.8.0rc4 [4.8.0rc3-4] - Update to Samba 4.8.0rc3 [2:4.8.0-0.3.rc2.1] - Escape macros in %changelog [4.8.0rc2-3] - Update to Samba 4.8.0rc2 [2:4.8.0-0.2.rc1] - Explicitly BR: rpcsvc-proto-devel [2:4.8.0-0.1.rc1.1] - Rebuilt for switch to libxcrypt [4.8.0rc1-1] - Update to Samba 4.8.0rc1 [4.7.4-1] - resolves: #1508092 - Add missing dependency for tdbbackup [4.7.4-0] - Update to Samba 4.7.4 [4.7.3-3] - resolves: #1520163 - Link libaesni-intel-samba4.so with -z noexecstack [4.7.3-2] - Fix deamon startup with systemd [4.7.3-1] - Enable AES acceleration on Intel compatible CPUs by default [4.7.3-0] - Update to Samba 4.7.3 - resolves: #1515692 - Security fix for CVE-2017-14746 and CVE-2017-15275 [4.7.2-0] - resolves: #1513452 - Update to Samba 4.7.2 [4.7.1-2] - Fix release number [4.7.1-1] - Remove old crufty coreutils requires [4.7.1-0] - resolves: #1508871 - Update to Samba 4.7.1 [4.7.0-18] - Force samba-dc to use the same libldb version as LDB modules compiled - resolves: #1507420 - LDB / Samba module version mismatch [4.7.0-17] - Move dsdb libs to python2-samba-dc [4.7.0-16] - Create python[2|3]-samba-dc packages [4.7.0-15] - related: #1499140 - Fix several dependency issues - Fix building with MIT Kerberos 1.16 [4.7.0-14] - resolves: #1499140 - Move libdfs-server-ad to the correct subpackage [4.7.0-13] - Move /usr/lib{64,}/samba/libdsdb-garbage-collect-tombstones-samba4.so to samba-dc-libs - Rebuild in rawhide against new krb5 1.16 and docbook-xml [4.7.0-12] - Update to Samba 4.7.0 - resolves: #1493441 - Security fix for CVE-2017-12150 CVE-2017-12151 CVE-2017-12163 [4.7.0-0.11.rc6] - Update to Samba 4.7.0rc6 [4.7.0-0.11.rc5] - resolves: #1491137 - dcerpc/__init__.py is not packaged for py3 [4.7.0-0.10.rc5] - resolves: #1476175 - Create seperate package for bind_dlz module [4.7.0-0.9.rc5] - Update to Samba 4.7.0rc5 [4.7.0-0.9.rc3] - Add printadmin group for printer driver handling [2:4.7.0-0.8.rc3.2] - Rebuild with binutils fix for ppc64le (#1475636) [2:4.7.0-0.8.rc3.1] - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild [4.7.0-0.8.rc3] - resolves: #1301002 - Enable avahi support [4.7.0-0.7.rc3] - Update to Samba 4.7.0rc3 [4.7.0-0.7.rc1] - Rename samba-python to python2-samba - Update build requirement for libcephfs [4.7.0-0.6.rc1] - Use Python 2 explicitly for samba-tool and other Python-based tools - Install samba.service as it is required for the AD DC case [4.7.0-0.5.rc1] - Convert more rpc modules to python3 - Explicitly specify Python artifacts in the spec to be able to catch unpackaged ones - Split 'make test' Python code into separate python2-samba-test/python3-samba-test sub-packages - Remove embedded python2-dns version, require python{2,3}-dns instead [4.7.0-0.4.rc1] - Add python3 support - Fix %posttrans for libwbclient-devel [4.7.0-0.3.rc1] - Do not install conflicting file _ldb_text.py [4.7.0-0.2.rc1] - Fix requirement generation for shared libraries [4.7.0-0.1.rc1] - Build Samba with Active Directory support! [4.7.0-0.0.rc1] - Update to Samba 4.7.0rc1 [4.6.5-0] - Update to Samba 4.6.5 [2:4.6.4-1.1] - Perl 5.26 rebuild [4.6.4-1] - #resolves: #1451486 - Add source tarball comment [4.6.4-0] - Update to Samba 4.6.4 - resolves: #1455050 - Security fix for CVE-2017-7494 [4.6.3-0] - Update to Samba 4.6.3 [4.6.2-0] - Update to Samba 4.6.2 - related: #1435156 - Security fix for CVE-2017-2619 [4.6.1-0] - Update to Samba 4.6.1 - resolves: #1435156 - Security fix for CVE-2017-2619 [4.6.0-4] - Export arcfour_crypt_blob to Python as samba.crypto.arcfour_encrypt - Makes possible to run trust to AD in FreeIPA in FIPS mode [4.6.0-3] - auth/credentials: Always set the the realm if we set the principal from the ccache - resolves: #1430761 - credentials_crb5: use gss_acquire_cred for client-side GSSAPI use case [4.6.0-2] - resolves: #1430761 - credentials_krb5: use gss_acquire_cred for client-side GSSAPI use case [4.6.0-1] - Update to Samba 4.6.0 [4.6.0-0.3.rc4] - Update to Samba 4.6.0rc4 [4.6.0-0.1.rc3] - Update to Samba 4.6.0rc3 [4.6.0-0.1.rc2.1] - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild [4.6.0-0.1.rc2] - Update to Samba 4.6.0rc2 [4.6.0-0.1.rc1] - resolves: #1319098 - Add missing Requires for pre-required packages [4.6.0-0.1.rc1] - Update to Samba 4.6.0rc1 [4.5.3-0] - Update to Samba 4.5.3 - resolves: #1405984 - CVE-2016-2123,CVE-2016-2125 and CVE-2016-2126 [4.5.2-0] - Update to Samba 4.5.2 [-] - rebuild (libldb) [4.5.1-1] - Fix glfs_realpath allocation in vfs_glusterfs [4.5.1-0] - Update to Samba 4.5.1 [4.5.0-3] - resolves: 1375973 - Fix tevent incompatibility issue [4.5.0-2] - Fix smbspool alternatives handling during samba-client uninstall [4.5.0-1] - Update to Samba 4.5.0 [4.5.0rc3-0] - Update to Samba 4.5.0rc3 [4.5.0rc2-0] - Update to Samba 4.5.0rc2 [4.5.0rc1-0] - Update to Samba 4.5.0rc1 [2:4.4.5-1.1] - https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages [4.4.5-1] - Update to Samba 4.4.5 - resolves: #1353504 - CVE-2016-2119 [4.4.4-4] - resolves: #1348899 - Import of samba.ntacls fails [4.4.4-3] - resolves: #1337260 - Small fix to the example smb.conf file [4.4.4-2] - Fix resolving trusted domain users on domain member [4.4.4-1] - Update to Samba 4.4.4 - resolves: #1343529 [2:4.4.3-2] - Fix libsystemd patch (#1125086) so that it actually works [2:4.4.3-1.2] - Rebuild to drop libsystemd-daemon dependency (#1125086) [2:4.4.3-1.1] - Perl 5.24 rebuild [4.4.3-1] - Update to Samba 4.4.3 - resolves: #1332178 [4.4.2-1] - Update to Samba 4.4.2, fix badlock security bug - resolves: #1326453 - CVE-2015-5370 - resolves: #1326453 - CVE-2016-2110 - resolves: #1326453 - CVE-2016-2111 - resolves: #1326453 - CVE-2016-2112 - resolves: #1326453 - CVE-2016-2113 - resolves: #1326453 - CVE-2016-2114 - resolves: #1326453 - CVE-2016-2115 - resolves: #1326453 - CVE-2016-2118 [4.4.0-1] - Update to Samba 4.4.0 [4.4.0-0.8.rc5] - Update to Samba 4.4.0rc5 [4.4.0-0.7.rc4] - Update to Samba 4.4.0rc4 - resolves: #1315942 - CVE-2015-7560 Incorrect ACL get/set allowed on symlink path [4.4.0-0.6.rc3] - Update to Samba 4.4.0rc3 [4.4.0-0.5.rc2] - Activate multi channel support (switched off by default) [4.4.0-0.4.rc2] - More spec file fixes - resolves: #1306542 - scriptlet failure because of comments [4.4.0-0.3.rc2] - More spec file fixes [4.4.0-0.2.rc2] - More spec file fixes [4.4.0-0.1.rc2] - Update to Samba 4.4.0rc2 [2:4.4.0-0.1.rc1] - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild [4.4.0-0.0.rc1] - Update to Samba 4.4.0rc1 [4.3.4-1] - resolves: #1300038 - PANIC: Bad talloc magic value - wrong talloc version used/mixed [4.3.4-0] - resolves: #1261230 - Update to Samba 4.3.4 [4.3.3-0] - Update to Samba 4.3.3 - resolves: #1292069 - CVE-2015-3223 Remote DoS in Samba (AD) LDAP server - CVE-2015-5252 Insufficient symlink verification in smbd - CVE-2015-5296 Samba client requesting encryption vulnerable to downgrade attack - CVE-2015-5299 Missing access control check in shadow copy code - CVE-2015-7540 DoS to AD-DC due to insufficient checking of asn1 memory allocation [4.3.2-2] - revert dependencies to samba-common and -tools [4.3.2-1] - resolves: #1261230 - Update to Samba 4.3.2 [4.3.1-3] - resolves: #1282931 - Fix DCE/RPC bind nak parsing [4.3.1-2] - Fix dependencies to samba-common [4.3.1-1] - resolves: #1261230 - Update to Samba 4.3.1 [4.3.0-3] - Use separate lockdir [4.3.0-2] - resolves: #1270568 - Samba fails to start after update to 4.3.0 [4.3.0-1] - resolves: #1088911 - Update to Samba 4.3.0 [4.3.0-0.1rc4] - Update to Samba 4.3.0rc4 [4.3.0-0.1rc3] - Update to Samba 4.3.0rc3 [4.2.3-0] - resolves: #1088911 - Update to Samba 4.2.3 [4.2.2-1] - resolves: #1227911 - Enable tar support for smbclient - resolves: #1234908 - Own the /var/lib/samba directory - Enable hardened build [2:4.2.2-0.2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild [2:4.2.2-0.1] - Perl 5.22 rebuild [4.2.2-0] - Update to Samba 4.2.2 [4.2.1-8] - Fixes: #1219832: Samba 4.2 broke FreeIPA trusts to AD - Remove usage of deprecated API from gnutls [4.2.1-7] - Fix LSASD daemon - resolves: #1217346 - FreeIPA trusts to AD broken due to Samba 4.2 failure to run LSARPC pipe externally [4.2.1-6] - Remove samba-common-tools from samba-client package as it brings back Python 2.7 [4.2.1-5] - Require samba-common-tools in samba package - Require samba-common-tools in samba-client package - resolves: #1215631 - /usr/bin/net moved to samba-common-tools but the package is not required by samba [4.2.1-4] - Fix systemd library detection (incomplete patch upstream) [4.2.1-3] - resolves: #1214973 - Fix libwbclient alternatives link. [4.2.1-2] - Add vfs snapper module. [4.2.1-1] - Update to Samba 4.2.1 - resolves: #1213373 - Fix DEBUG macro issues in public headers [4.2.0-3] - resolves: #1207381 - Fix libsystemd detection. [4.2.0-2] - Fix the AD build. - Create samba-client-libs subpackage. - Fix multiarch issues by splitting the samba-common package. [4.2.0-1] - Update to Samba 4.2.0 [4.2.0-0.5.rc5] - Update to Samba 4.2.0rc5 [4.2.0-0.4.rc4] - Update to Samba 4.2.0rc4 - resolves: #1154600 - Install missing samba pam.d configuration file. [4.2.0-0.6.rc3] - Fix awk as a dependency (and require gawk) [4.2.0-0.5.rc3] - Add dependencies for ctdb. [4.2.0-0.4.rc3] - Apply the DEBUG patch [4.2.0-0.3.rc3] - Fix issues with conflicting DEBUG macros. [4.2.0-0.2.rc3] - Improve dependencies of vfs-glusterfs and vfs-cephfs. - Remove unused python_libdir. - Fix malformed changelog entries. [4.2.0-0.2.rc3] - Fix ctdb and libcephfs dependencies. [4.2.0-0.1.rc3] - Update to Samba 4.2.0rc3 + Samba provides ctdb packages now. [4.2.0-0.3.rc2] - resolves: #1174412 - Build VFS Ceph module. - resolves: #1169067 - Move libsamba-cluster-support.so to samba-libs package. - resolves: #1016122 - Move smbpasswd to samba-common package. [4.2.0-0.2.rc2] - Use alternatives for libwbclient. - Add cwrap to BuildRequires. [4.2.0-0.1.rc2] - Update to Samba 4.2.0rc2. [4.1.12-5] - resolves: #1033595 - Fix segfault in winbind. [4.1.12-1] - Update to Samba 4.1.12. [2:4.1.11-1.4] - Perl 5.20 mass [2:4.1.11-1.3] - Perl 5.20 rebuild [2:4.1.11-1.2] - Rebuilt for rpm dependency generator failure (#1131892) [0:4.1.11-1.1] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild [4.1.11-1] - Update to upstream Samba 4.1.11 release - resolves: #1126015 - Fix CVE-2014-3560 [4.1.9-3] - Update to Samba 4.1.9. - resolves: #1112251 - Fix CVE-2014-0244 and CVE-2014-3493. [4.1.8-3] - Update to Samba 4.1.8. - resolves: #1102528 - CVE-2014-0178. [2:4.1.6-3.1] - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild [4.1.6-3] - Add systemd integration to the service daemons. [4.1.6-2] - Created a samba-test-libs package. [4.1.6-1] - Fix CVE-2013-4496 and CVE-2013-6442. - Fix installation of pidl. [4.1.5-1] - Update to Samba 4.1.5. [4.1.4-1] - Update to Samba 4.1.4. [4.1.3-3] - resolves: #1042845 - Do not build with libbsd. [4.1.3-2] - resolves: #1019469 - Fix winbind debug message NULL pointer derreference. [4.1.3-1] - Update to Samba 4.1.3. - resolves: #1039454 - CVE-2013-4408. - resolves: #1039500 - CVE-2012-6150. [4.1.2-1] - Update to Samba 4.1.2. [4.1.1-3] - resolves: #948509 - Fix manpage correctness. [4.1.1-2] - related: #884169 - Fix strict aliasing warnings. [4.1.1-1] - resolves: #1024544 - Fix CVE-2013-4475. - Update to Samba 4.1.1. [4.1.0-5] - related: #884169 - Fix the upgrade path. [4.1.0-4] - related: #884169 - Add direct dependency to samba-libs in the glusterfs package. - resolves: #996567 - Fix userPrincipalName composition. - related: #884169 - Fix memset call with zero length in in ntdb. [4.1.0-3] - resolves: #1020329 - Build glusterfs VFS plguin. [4.1.0-2] - resolves: #1018856 - Fix installation of pam_winbind after upgrade. - related: #1010722 - Split out a samba-winbind-modules package. - related: #985609 [4.1.0-1] - related: #985609 - Update to Samba 4.1.0. [2:4.1.0-0.8] - related: #985609 - Update to Samba 4.1.0rc4. - resolves: #1010722 - Split out a samba-winbind-modules package. [2:4.1.0-0.7] - related: #985609 - Update to Samba 4.1.0rc3. - resolves: #1005422 - Add support for KEYRING ccache type in pam_winbindd. [2:4.1.0-0.6] - resolves: #717484 - Enable profiling data support. [2:4.1.0-0.5] - resolves: #996160 - Fix winbind with trusted domains. [2:4.1.0-0.4] - resolves: #996160 - Fix winbind nbt name lookup segfault. [2:4.1.0-0.3] - related: #985609 - Update to Samba 4.1.0rc2. [2:4.1.0-0.2.rc1.1] - Perl 5.18 rebuild [2:4.1.0-0.2] - resolves: #985985 - Fix file conflict between samba and wine. - resolves: #985107 - Add support for new default location for Kerberos credential caches. [2:4.1.0-0.1.rc1.1] - Perl 5.18 rebuild [2:4.1.0-0.1] - Update to Samba 4.1.0rc1. [2:4.0.7-2] - resolves: #972692 - Build with PIE and full RELRO. - resolves: #884169 - Add explicit dependencies suggested by rpmdiff. - resolves: #981033 - Local user's krb5cc deleted by winbind. - resolves: #984331 - Fix samba-common tmpfiles configuration file in wrong directory. [2:4.0.7-1] - Update to Samba 4.0.7. [2:4.0.6-3] - Add UPN enumeration to passdb internal API (bso #9779). [2:4.0.6-2] - resolves: #966130 - Fix build with MIT Kerberos. - List vfs modules in spec file. [2:4.0.6-1] - Update to Samba 4.0.6. - Remove SWAT. [2:4.0.5-1] - Update to Samba 4.0.5. - Add UPN enumeration to passdb internal API (bso #9779). - resolves: #928947 - samba-doc is obsolete now. - resolves: #948606 - LogRotate should be optional, and not a hard 'Requires'. [2:4.0.4-3] - resolves: #919405 - Fix and improve large_readx handling for broken clients. - resolves: #924525 - Don't use waf caching. [2:4.0.4-2] - resolves: #923765 - Improve packaging of README files. [2:4.0.4-1] - Update to Samba 4.0.4. [2:4.0.3-4] - resolves: #919333 - Create /run/samba too. [2:4.0.3-3] - Fix the cache dir to be /var/lib/samba to support upgrades. [2:4.0.3-2] - resolves: #907915 - libreplace.so => not found [2:4.0.3-1] - Update to Samba 4.0.3. - resolves: #907544 - Add unowned directory /usr/lib64/samba. - resolves: #906517 - Fix pidl code generation with gcc 4.8. - resolves: #908353 - Fix passdb backend ldapsam as module. [2:4.0.2-1] - Update to Samba 4.0.2. - Fixes CVE-2013-0213. - Fixes CVE-2013-0214. - resolves: #906002 - resolves: #905700 - resolves: #905704 - Fix conn->share_access which is reset between user switches. - resolves: #903806 - Add missing example and make sure we don't introduce perl dependencies. - resolves: #639470 [2:4.0.1-1] - Update to Samba 4.0.1. - Fixes CVE-2013-0172. [2:4.0.0-174] - Fix typo in winbind-krb-locator post uninstall script. [2:4.0.0-173] - Update to Samba 4.0.0. [2:4.0.0-171.rc6] - Fix typo in winbind-krb-locator post uninstall script. [2:4.0.0-170.rc6] - Update to Samba 4.0.0rc6. - Add /etc/pam.d/samba for swat to work correctly. - resolves #882700 [2:4.0.0-169.rc5] - Make sure ncacn_ip_tcp client code looks for NBT_NAME_SERVER name types. [2:4.0.0-168.rc5] - Reduce dependencies of samba-devel and create samba-test-devel package. [2:4.0.0-167.rc5] - Use workaround for winbind default domain only when set. - Build with old ctdb support. [2:4.0.0-166.rc5] - Update to Samba 4.0.0rc5. [2:4.0.0-165.rc4] - Fix library dependencies of libnetapi. [2:4.0.0-164.rc4] - resolves: #872818 - Fix perl dependencies. [2:4.0.0-163.rc4] - Update to Samba 4.0.0rc4. [2:4.0.0-162.rc3] - resolves: #870630 - Fix scriptlets interpeting a comment as argument. [2:4.0.0-161.rc3] - Add missing Requries for python modules. - Add NetworkManager dispatcher script for winbind. [2:4.0.0-160.rc3] - resolves: #867893 - Move /var/log/samba to samba-common package for winbind which requires it. [2:4.0.0-159.rc3] - Compile default auth methods into smbd. [2:4.0.0-158.rc3] - Move pam_winbind.conf and the manpages to the right package. [2:4.0.0-157.rc3] * resolves: #866959 - Build auth_builtin as static module. [2:4.0.0-156.rc3] - Update systemd Requires to reflect latest packaging guidelines. [2:4.0.0-155.rc3] - Add back the AES patches which didn't make it in rc3. [2:4.0.0-154.rc3] - Update to 4.0.0rc3. - resolves: #805562 - Unable to share print queues. - resolves: #863388 - Unable to reload smbd configuration with systemctl. [2:4.0.0-153.rc2] - Use alternatives to configure winbind_krb5_locator.so - Fix Requires for winbind. [2:4.0.0-152.rc2] - Add kerberos AES support. - Fix printing initialization. [2:4.0.0-151.rc2] - Update to 4.0.0rc2. [2:4.0.0-150.rc1] - Fix Obsoletes/Provides for update from samba4. - Bump release number to be bigger than samba4. [2:4.0.0-96.rc1] - Package smbprint again. [2:4.0.0-95.rc1] - Update to 4.0.0rc1. [2:3.6.7-94.2] - Update to 3.6.7 [2:3.6.6-93.2] - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild [2:3.6.6-93] - Fix printing tdb upgrade for 3.6.6 - resolves: #841609 [2:3.6.6-92] - Call ldconfig at libwbclient and -winbind-clients post(un)install time. - Fix empty localization files, use %find_lang to find and %lang-mark them. - Escape macros in %changelog. - Fix source tarball URL. [2:3.6.6-91] - Update to 3.6.6 [2:3.6.5-90] - Fix ldonfig. - Require systemd for samba-common package. - resolves: #829197 [2:3.6.5-89] - Fix usrmove paths. - resolves: #829197 [2:3.6.5-88] - Move tmpfiles.d config to common package as it is needed for smbd and winbind. - Make sure tmpfiles get created after installation. [2:3.6.5-87] - Correctly use system iniparser library [2:3.6.5-86] - Bump Epoch to fix a problem with a Samba4 update in testing. [1:3.6.5-85] - Security Release, fixes CVE-2012-2111 - resolves: #817551 [1:3.6.4-84] - Fix creation of /var/run/samba. - resolves: #751625 [1:3.6.4-83] - Avoid private krb5_locate_kdc usage - resolves: #754783 [1:3.6.4-82] - Update to 3.6.4 - Fixes CVE-2012-1182 [1:3.6.3-81] - Fix provides for of libwclient-devel for samba-winbind-devel. [1:3.6.3-80] - Add commented out 'max protocol' to the default config. [1:3.6.3-79] - Create a libwbclient package. - Replace winbind-devel with libwbclient-devel package. [1:3.6.3-78] - Update to 3.6.3 - Fixes CVE-2012-0817 [1:3.6.1-77.1] - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild [1:3.6.1-77] - Fix winbind cache upgrade. - resolves: #760137 [1:3.6.1-76] - Fix piddir to match with systemd files. - Fix crash bug in the debug system. - resolves: #754525 [1:3.6.1-75] - Fix systemd dependencies - resolves: #751397 [1:3.6.1-74] - Update to 3.6.1 [1:3.6.0-73] - Fix nmbd startup - resolves: #741630 [1:3.6.0-72] - convert to systemd - restore epoch from f15 [3.6.0-71] - Update to 3.6.0 final [3.6.0rc3-70] - Update to 3.6.0rc3 [3.6.0rc2-69] - Update to 3.6.0rc2 [3.6.0rc1-68] - Update to 3.6.0rc1 [3.6.0pre3-67] - Update to 3.6.0pre3 [3.6.0pre2-66] - Update to 3.6.0pre2 [3.6.0pre1-65] - Enable quota support [0:3.6.0-64pre1.1] - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild [3.6.0pre1-64] - Add %ghost entry for /var/run using tmpfs - resolves: #656685 [3.6.0pre1-63] - Put winbind krb5 locator plugin into a separate rpm - resolves: #627181 [3.6.0pre1-62] - Update to 3.6.0pre1 [3.5.4-61] - Update to 3.5.4 [3.5.3-60] - Update to 3.5.3 - Make sure nmb and smb initscripts return LSB compliant return codes - Fix winbind over ipv6 [3.5.2-59] - Update to 3.5.2 [3.5.1-58] - Security update to 3.5.1 - Fixes CVE-2010-0728 [3.5.0-57] - Remove cifs.upcall and mount.cifs entirely [3.5.0-56] - Update to 3.5.0 [3.5.0rc3-55] - Update to 3.5.0rc3 [3.5.0rc2-54] - Update to 3.5.0rc2 [3.5.0rc1-53] - separate out CIFS tools into cifs-utils package [3.5.0rc1-52] - Update to 3.5.0rc1 [3.5.0pre2-51] - Update to 3.5.0pre2 - Remove umount.cifs [3.4.3-49] - Various updates to inline documentation in default smb.conf file - resolves: #483703 [3.4.3-48] - Update to 3.4.3 [3.4.2-47] - Spec file cleanup - Fix sources upstream location - Remove conditionals to build talloc and tdb, now they are completely indepent packages in Fedora - Add defattr() where missing - Turn all tabs into 4 spaces - Remove unused migration script - Split winbind-clients out of main winbind package to avoid multilib to include huge packages for no good reason [3.4.2-0.46] - Update to 3.4.2 - Security Release, fixes CVE-2009-2813, CVE-2009-2948 and CVE-2009-2906 [3.4.1-0.45] - Use password-auth common PAM configuration instead of system-auth [3.4.1-0.44] - Update to 3.4.1 [3.4.0-0.43] - Fix cli_read() - resolves: #516165 [3.4.0-0.42] - Fix required talloc version number - resolves: #516086 [0:3.4.0-0.41.1] - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild [3.4.0-0.41] - Fix Bug #6551 (vuid and tid not set in sessionsetupX and tconX) - Specify required talloc and tdb version for BuildRequires [3.4.0-0.40] - Update to 3.4.0 [3.4.0rc1-0.39] - Update to 3.4.0rc1 [3.4.0pre2-0.38] - Update to 3.4.0pre2 [3.4.0pre1-0.37] - Update to 3.4.0pre1 [3.3.4-0.36] - Update to 3.3.4 [3.3.3-0.35] - Enable build of idmap_tdb2 for clustered setups [3.3.3-0.34] - Update to 3.3.3 [3.3.2-0.33] - Fix nmbd init script nmbd reload was causing smbd not nmbd to reload the configuration - Fix upstream bug 6224, nmbd was waiting 5+ minutes before running elections on startup, causing your own machine not to show up in the network for 5 minutes if it was the only client in that workgroup (fix committed upstream) [3.3.2-0.31] - Update to 3.3.2 - resolves: #489547 [3.3.1-0.30] - Add libcap-devel to requires list (resolves: #488559) [3.3.1-0.29] - Make the talloc and ldb packages optionsl and disable their build within the samba3 package, they are now built as part of the samba4 package until they will both be released as independent packages. [3.3.1-0.28] - Enable cluster support [3.3.1-0.27] - Update to 3.3.1 [3.3.0-0.26] - Rename ldb* tools to ldb3* to avoid conflicts with newer ldb releases [3.3.0-0.25] - Update to 3.3.0 final - Add upstream fix for ldap connections to AD (Bug #6073) - Remove bogus perl dependencies (resolves: #473051) [3.3.0-0rc1.24] - Update to 3.3.0rc1 [3.2.5-0.23] - Security Release, fixes CVE-2008-4314 [3.2.4-0.22] - Update to 3.2.4 - resolves: #456889 - move cifs.upcall to /usr/sbin [3.2.3-0.21] - Security fix for CVE-2008-3789 [3.2.2-0.20] - Update to 3.2.2 [3.2.1-0.19] - Add fix for CUPS problem, fixes bug #453951 [3.2.1-0.18] - Update to 3.2.1 [3.2.0-2.17] - Update to 3.2.0 final - resolves: #452622 [3.2.0-1.rc2.16] - Update to 3.2.0rc2 - resolves: #449522 - resolves: #448107 [3.2.0-1.rc1.15] - Fix security=server - resolves: #449038, #449039 [3.2.0-1.rc1.14] - Add fix for CVE-2008-1105 - resolves: #446724 [3.2.0-1.rc1.13] - Update to 3.2.0rc1 [3.2.0-1.pre3.12] - make it possible to print against Vista and XP SP3 as servers - resolves: #439154 [3.2.0-1.pre3.11] - Add 'net ads join createcomputer=ou1/ou2/ou3' fix (BZO #5465) [3.2.0-1.pre3.10] - Add smbclient fix (BZO #5452) [3.2.0-1.pre3.9] - Update to 3.2.0pre3 [3.2.0-1.pre2.8] - Add fixes for libsmbclient and support for r/o relocations [3.2.0-1.pre2.7] - Fix libnetconf, libnetapi and msrpc DSSETUP call [3.2.0-1.pre2.6] - Create separate packages for samba-winbind and samba-winbind-devel - Add cifs.spnego helper [3.2.0-1.pre2.3] - Update to 3.2.0pre2 - Add talloc and tdb lib and devel packages - Add domainjoin-gui package [3.2.0-0.pre1.3] - Try to fix GCC 4.3 build - Add --with-dnsupdate flag and also make sure other flags are required just to be sure the features are included without relying on autodetection to be successful [0:3.2.0-1.pre1.2] - Autorebuild for GCC 4.3 [3.2.0-0.pre1.2] - Rebuild for openldap bump [3.2.0-0.pre1.1.fc9] - 32/64bit padding fix (affects multilib installations) [3.2.0-0.pre1.fc9] - New major relase, minor switched from 0 to 2 - License change, the code is now GPLv3+ - Numerous improvements and bugfixes included - package libsmbsharemodes too - remove smbldap-tools as they are already packaged separately in Fedora - Fix bug 245506 [3.0.26a-1.fc8] - rebuild with AD DNS Update support [3.0.26a-0.fc8] - upgrade to the latest upstream realease - includes security fixes released today in 3.0.26 [3.0.25c-4.fc8] - add fix reported upstream for heavy idmap_ldap memleak [3.0.25c-3.fc8] - fix a few places were 'open' is used an interfere with the new glibc [3.0.25c-2.fc8] - remove old source - add patch to fix samba bugzilla 4772 [3.0.25c-0.fc8] - update to 3.0.25c [3.0.25b-3.fc8] - handle cases defined in #243766 [3.0.25b-2.fc8] - update to 3.0.25b - better error codes for init scripts: #244823 * Tue May 29 2007 Gunther Deschner <gdeschner@redhat.com> - fix pam_smbpass patch. * Fri May 25 2007 Simo Sorce <ssorce@redhat.com> - update to 3.0.25a as it contains many fixes - add a fix for pam_smbpass made by Gunther but committed upstream after 3.0.25a was cut. * Mon May 14 2007 Simo Sorce <ssorce@redhat.com> - final 3.0.25 - includes security fixes for CVE-2007-2444,CVE-2007-2446,CVE-2007-2447 * Mon Apr 30 2007 Gunther Deschner <gdeschner@redhat.com> - move to 3.0.25rc3 * Thu Apr 19 2007 Simo Sorce <ssorce@redhat.com> - fixes in the spec file - moved to 3.0.25rc1 - addedd patches (merged upstream so they will be removed in 3.0.25rc2) [3.0.24-12.fc7] - fixes in smb.conf - advice in smb.conf to put scripts in /var/lib/samba/scripts - create /var/lib/samba/scripts so that selinux can be happy - fix Vista problems with msdfs errors [3.0.24-11.fc7] - enable PAM and NSS dlopen checks during build - fix unresolved symbols in libnss_wins.so (bug #198230) [3.0.24-10.fc7] - set passdb backend = tdbsam as default in smb.conf - remove samba-docs dependency from swat, that was a mistake - put back COPYING and other files in samba-common - put examples in samba not in samba-docs - leave only stuff under docs/ in samba-doc [3.0.24-9.fc7] - integrate most of merge review proposed changes (bug #226387) - remove libsmbclient-devel-static and simply stop shipping the static version of smbclient as it seem this is deprecated and actively discouraged [3.0.24-8.fc7] - fix for bug #176649 * Mon Mar 26 2007 Simo Sorce <ssorce@redhat.com> - remove patch for bug 106483 as it introduces a new bug that prevents the use of a credentials file with the smbclient tar command - move the samba private dir from being the same as the config dir (/etc/samba) to /var/lib/samba/private [3.0.24-7.fc7] - make winbindd start earlier in the init process, at the same time ypbind is usually started as well - add a sepoarate init script for nmbd called nmb, we need to be able to restart nmbd without dropping al smbd connections unnecessarily * Fri Mar 23 2007 Simo Sorce <ssorce@redhat.com> - add samba.schema to /etc/openldap/schema * Thu Mar 22 2007 Florian La Roche <laroche@redhat.com> - adjust the Requires: for the scripts, add 'chkconfig --add smb' [3.0.24-6.fc7] - do not put comments inline on smb.conf options, they may be read as part of the value (for example log files names) [3.0.24-5.fc7] - actually use the correct samba.pamd file not the old samba.pamd.stack file - fix logifles and use upstream convention of log.* instead of our old *.log Winbindd creates its own log.* files anyway so we will be more consistent - install our own (enhanced) default smb.conf file - Fix pam_winbind acct_mgmt PAM result code (prevented local users from logging in). Fixed by Guenther. - move some files from samba to samba-common as they are used with winbindd as well [3.0.24-4.fc7] - fix arch macro which reported Vista to Samba clients. [3.0.24-3.fc7] - Directories reorg, tdb files must go to /var/lib, not to /var/cache, add migration script in %post common - Split out libsmbclient, devel and doc packages - Remove libmsrpc.[h|so] for now as they are not really usable - Remove kill -HUP from rotate, samba use -HUP for other things noit to reopen logs [3.0.24-2.fc7] - New upstream release - Fix packaging issue wrt idmap modules used only by smbd - Addedd Vista Patchset for compatibility with Windows Vista - Change default of 'msdfs root', it seem to cause problems with some applications and it has been proposed to change it for 3.0.25 upstream [3.0.23c-2] - New upstream release. [3.0.23b-2] - New upstream release. [3.0.23a-3] - Fix the -logfiles patch to close bz#199607 Samba compiled with wrong log path. bz#199206 smb.conf has incorrect log file path [3.0.23a-2] - Upgrade to new upstream 3.0.23a - include upstream samr_alias patch [3.0.23-2] - New upstream release. - Use modified filter-requires-samba.sh from packaging/RHEL/setup/ to get rid of bogus dependency on perl(Unicode::MapUTF8) - Update the -logfiles and -smb.conf patches to work with 3.0.23 [3.0.23-0.RC3] - New upstream RC release. - Update the -logfiles, and -passwd patches for 3.0.23rc3 - Include the change to smb.init from Bastien Nocera <bnocera@redhat.com>) to close bz#182560 Wrong retval for initscript when smbd is dead - Update this spec file to build with 3.0.23rc3 - Remove the -install.mount.smbfs patch, since we don't install mount.smbfs any more. [2.0.21c-3] - rebuilt with new gnutls [2.0.21c-2] - New upstream version. [3.0.21b-2] - New upstream version. - Since the rawhide kernel has dropped support for smbfs, remove smbmount and smbumount. Users should use mount.cifs instead. - Upgrade to 3.0.21b [0:3.0.20b-2.1.1] - bump again for double-long bug on ppc(64) * Fri Dec 09 2005 Jesse Keating <jkeating@redhat.com> - rebuilt [3.0.20b-2] - turn on -DLDAP_DEPRECATED to allow access to ldap functions that have been depricated in 2.3.11, but which don't have well-documented replacements (ldap_simple_bind_s(), for example). - Upgrade to 3.0.20b, which includes all the previous upstream patches. - Updated the -warnings patch for 3.0.20a. - Include --with-shared-modules=idmap_ad,idmap_rid to close bz#156810 --with-shared-modules=idmap_ad,idmap_rid - Include the new samba.pamd from Tomas Mraz (tmraz@redhat.com) to close bz#170259 pam_stack is deprecated [3.0.20-3] - epochs from deps, req exact release - rebuild against new openssl [3.0.20-2] - New upstream release Includes five upstream patches -bug3010_v1, -groupname_enumeration_v3, -regcreatekey_winxp_v1, -usrmgr_groups_v1, and -winbindd_v1 This obsoletes the -pie and -delim patches the -warning and -gcc4 patches are obsolete too The -man, -passwd, and -smbspool patches were updated to match 3.0.20pre1 Also, the -quoting patch was implemented differently upstream There is now a umount.cifs executable and manpage We run autogen.sh as part of the build phase The testprns command is now gone libsmbclient now has a man page - Include -bug106483 patch to close bz#106483 smbclient: -N negates the provided password, despite documentation - Added the -warnings patch to quiet some compiler warnings. - Removed many obsolete patches from CVS. [3.0.14a-2] - New upstream release. - the -64bit-timestamps, -clitar, -establish_trust, user_rights_v1, winbind_find_dc_v2 patches are now obsolete. [3.0.13-2] - New upstream release - add my -quoting patch, to fix swat with strings that contain html meta-characters, and to use correct quote characters in lists, closing bz#134310 - include the upstream winbindd_2k3sp1 patch - include the -smbclient patch. - include the -hang patch from upstream. * Thu Mar 24 2005 Florian La Roche <laroche@redhat.com> - add a 'exit 0' to the postun of the main samba package [3.0.11-5] - rebuild with openssl-0.9.7e [3.0.11-4] - Use the updated filter-requires-samba.sh file, so we don't accidentally pick up a dependency on perl(Crypt::SmbHash) [3.0.11-3] - add -gcc4 patch to compile with gcc 4. - remove the now obsolete -smbclient-kerberos.patch - Include four upstream patches from http://samba.org/~jerry/patches/post-3.0.11/ (Slightly modified the winbind_find_dc_v2 patch to apply easily with rpmbuild). [3.0.11-2] - include -smbspool patch to close bz#104136 [3.0.10-4] - Update the -man patch to fix ntlm_auth.1 too. - Move pam_smbpass.so to the -common package, so both the 32 and 64-bit versions will be installed on multiarch platforms. This closes bz#143617 - Added new -delim patch to fix mount.cifs so it can accept passwords with commas in them (via environment or credentials file) to close bz#144198 [3.0.10-3] - Rebuilt for new readline. [3.0.10-2] - New upstream release that closes CAN-2004-1154 bz#142544 - Include the -64bit patch from Nalin. This closes bz#142873 - Update the -logfiles patch to work with 3.0.10 - Create /var/run/winbindd and make it part of the -common rpm to close bz#142242 [3.0.9-2] - New upstream release. This obsoletes the -secret patch. Include my changetrustpw patch to make 'net ads changetrustpw' stop aborting. This closes #134694 - Remove obsolete triggers for ancient samba versions. - Move /var/log/samba to the -common rpm. This closes #76628 - Remove the hack needed to get around the bad docs files in the 3.0.8 tarball. - Change the comment in winbind.init to point at the correct pidfile. This closes #76641 [3.0.8-4] - fix unresolved symbols in libsmbclient which caused applications such as KDE's konqueror to fail when accessing smb:// URLs. #139894 [3.0.8-3.1] - Rescue the install.mount.smbfs patch from Juanjo Villaplana (villapla@si.uji.es) to prevent building the srpm from trashing your installed /usr/bin/smbmount [3.0.8-3] - Include the corrected docs tarball, and use it instead of the obsolete docs from the upstream 3.0.8 tarball. - Update the logfiles patch to work with the updated docs. [3.0.8-2] - New upstream version fixes CAN-2004-0930. This obsoletes the disable-sendfile, salt, signing-shortkey and fqdn patches. - Add my <fenlason@redhat.com> ugly non-ascii-domain patch. - Updated the pie patch for 3.0.8. - Updated the logfiles patch for 3.0.8. [3.0.8-0.pre2] - New upstream version - Add Nalin's signing-shortkey patch. [3.0.8-0.pre1.3] - disable the -salt patch, because it causes undefined references in libsmbclient that prevent gnome-vfs from building. [3.0.8-0.pre1.2] - Re-enable the x_fclose patch that was accidentally disabled in 3.0.8-0.pre1.1. This closes #135832 - include Nalin's -fqdn and -salt patches. [3.0.8-0.pre1.1] - Include disable-sendfile patch to default 'use sendfile' to 'no'. This closes #132779 * Wed Oct 06 2004 Jay Fenlason <fenlason@redhat.com> - Include patch from Steven Lawrance (slawrance@yahoo.com) that modifies smbmnt to work with 32-bit uids. [3.0.8-0.pre1] - new upstream release. This obsoletes the ldapsam_compat patches. [3.0.7-4] - Update docs section to not carryover the docs/manpages directory This moved many files from /usr/share/doc/samba-3.0.7/docs/* to /usr/share/doc/samba-3.0.7/* - Modify spec file as suggested by Rex Dieter (rdieter@math.unl.edu) to correctly create libsmbclient.so.0 and to use %_initrddir instead of rolling our own. This closes #132642 - Add patch to default 'use sendfile' to no, since sendfile appears to be broken - Add patch from Volker Lendecke <vl@samba.org> to help make ldapsam_compat work again. - Add patch from 'Vince Brimhall' <vbrimhall@novell.com> for ldapsam_compat These two patches close bugzilla #132169 [3.0.7-3] - Upgrade to 3.0.7, which fixes CAN-2004-0807 CAN-2004-0808 This obsoletes the 3.0.6-schema patch. - Update BuildRequires line to include openldap-devel openssl-devel and cups-devel [3.0.6-3] - New upstream version. - Include post 3.0.6 patch from 'Gerald (Jerry) Carter' <jerry@samba.org> to fix a duplicate in the LDAP schema. - Include 64-bit timestamp patch from Ravikumar (rkumar@hp.com) to allow correct timestamp handling on 64-bit platforms and fix #126109. - reenable the -pie patch. Samba is too widely used, and too vulnerable to potential security holes to disable an important security feature like -pie. The correct fix is to have the toolchain not create broken executables when programs compiled -pie are stripped. - Remove obsolete patches. - Modify this spec file to put libsmbclient.{a,so} in the right place on x86_64 machines. [3.0.5-3] - Removed '-pie' patch - 3.0.5 uses -fPIC/-PIC, and the combination - resulted in executables getting corrupt stacks, causing smbmnt to - get a SIGBUS in the mount() call (bug 127420). [3.0.5-2] - Upgrade to 3.0.5, which is a regression from 3.0.5pre1 for a security fix. - Include the 3.0.4-backport patch from the 3E branch. This restores some of the 3.0.5pre1 and 3.0.5rc1 functionality. [3.0.5-0.pre1.1] - Backport base64_decode patche to close CAN-2004-0500 - Backport hash patch to close CAN-2004-0686 - use_authtok patch from Nalin Dahyabhai <nalin@redhat.com> - smbclient-kerberos patch from Alexander Larsson <alexl@redhat.com> - passwd patch uses '*' instead of 'x' for 'hashed' passwords for accounts created by winbind. 'x' means 'password is in /etc/shadow' to brain-damaged pam_unix module. [3.0.5.0pre1.0] - New upstream version - use % { SOURCE1 } instead of a hardcoded path - include -winbind patch from Gerald (Jerry) Carter (jerry@samba.org) https://bugzilla.samba.org/show_bug.cgi?id=1315 to make winbindd work against Windows versions that do not have 128 bit encryption enabled. - Moved %{_bindir}/net to the -common package, so that folks who just want to use winbind, etc don't have to install -client in order to 'net join' their domain. - New upstream version obsoletes the patches added in 3.0.3-5 - Remove smbgetrc.5 man page, since we don't ship smbget. * Tue Jun 15 2004 Elliot Lee <sopwith@redhat.com> - rebuilt [3.0.3-5] - Patch to allow password changes from machines patched with Microsoft hotfix MS04-011. - Include patches for https://bugzilla.samba.org/show_bug.cgi?id=1302 and https://bugzilla.samba.org/show_bug.cgi?id=1309 [3.0.3-4] - Samba 3.0.3 released. [3.0.3-3.rc1] - New upstream version - updated spec file to make libsmbclient.so executable. This closes bugzilla #121356 [3.0.3-2.pre2] - New upstream version - Updated configure line to remove --with-fhs and to explicitly set all the directories that --with-fhs was setting. We were overriding most of them anyway. This closes #118598 [3.0.3-1.pre1] - New upstream version. - Updated -pie and -logfiles patches for 3.0.3pre1 - add krb5-devel to buildrequires, fixes #116560 - Add patch from Miloslav Trmac (mitr@volny.cz) to allow non-root to run 'service smb status'. This fixes #116559 * Tue Mar 02 2004 Elliot Lee <sopwith@redhat.com> - rebuilt [3.0.2a-1] - Upgrade to 3.0.2a [3.0.2-7] - fix ownership in -common package * Fri Feb 13 2004 Elliot Lee <sopwith@redhat.com> - rebuilt * Fri Feb 13 2004 Jay Fenlason <fenlason@redhat.com> - Change all requires lines to list an explicit epoch. Closes #102715 - Add an explicit Epoch so that %{epoch} is defined. [3.0.2-5] - New upstream version: 3.0.2 final includes security fix for #114995 (CAN-2004-0082) - Edit postun script for the -common package to restart winbind when appropriate. Fixes bugzilla #114051. [3.0.2-3rc2] - add %dir entries for %{_libdir}/samba and %{_libdir}/samba/charset - Upgrade to new upstream version - build mount.cifs for the new cifs filesystem in the 2.6 kernel. [3.0.2-1rc1] - Upgrade to new upstream version [3.0.1-1] - Update to 3.0.1 - Removed testparm patch as it's already merged - Removed Samba.7* man pages - Fixed .buildroot patch - Fixed .pie patch - Added new /usr/bin/tdbdump file [3.0.0-15] - New 3.0.0 final release - merge nmbd-netbiosname and testparm patches from 3E branch - updated the -logfiles patch to work against 3.0.0 - updated the pie patch - update the VERSION file during build - use make -j if avaliable - merge the winbindd_privileged change from 3E - merge the 'rm /usr/lib' patch that allows Samba to build on 64-bit platforms despite the broken Makefile * Mon Aug 18 2003 Jay Fenlason <fenlason@redhat.com> - Merge from samba-3E-branch after samba-3.0.0rc1 was released [3.0.0-3beta3] - Merge from 3.0.0-2beta3.3E - (Correct log file names (#100981).) - (Fix pidfile directory in samab.log) - (Remove obsolete samba-3.0.0beta2.tar.bz2.md5 file) - (Move libsmbclient to the -common package (#99449)) [2.2.8a-4] - rebuild * Wed Jun 04 2003 Elliot Lee <sopwith@redhat.com> - rebuilt [2.2.8a-2] - add libsmbclient.so for gnome-vfs-extras - Edit specfile to specify /var/run for pid files - Move /tmp/.winbindd/socket to /var/run/winbindd/socket * Wed May 14 2003 Florian La Roche <Florian.LaRoche@redhat.de> - add proper ldconfig calls [2.2.8a-1] - upgrade to 2.2.8a - remove old .md5 files - add 'pid directory = /var/run' to the smb.conf file. Fixes #88495 - Patch from jra@dp.samba.org to fix a delete-on-close regression [2.2.8-0] - Upgrade to 2.2.8 - removed commented out patches. - removed old patches and .md5 files from the repository. - remove duplicate /sbin/chkconfig --del winbind which causes warnings when removing samba. - Fixed minor bug in smbprint that causes it to fail when called with more than 10 parameters: the accounting file (and spool directory derived from it) were being set wrong due to missing {}. This closes bug #86473. - updated smb.conf patch, includes new defaults to close bug #84822. * Mon Feb 24 2003 Elliot Lee <sopwith@redhat.com> - rebuilt [2.2.7a-5] - remove swat.desktop file [2.2.7a-4] - relink libnss_wins.so with SHLD='%{__cc} -lnsl' to force libnss_wins.so to link with libnsl, avoiding unresolved symbol errors on functions in libnsl [2.2.7a-3] - edited spec file to put .so files in the correct directories on 64-bit platforms that have 32-bit compatability issues (sparc64, x86_64, etc). This fixes bugzilla #83782. - Added samba-2.2.7a-error.patch from twaugh. This fixes bugzilla #82454. * Wed Jan 22 2003 Tim Powers <timp@redhat.com> - rebuilt [2.2.7a-1] - Update to 2.2.7a - Change default printing system to CUPS - Turn on pam_smbpass - Turn on msdfs [2.2.7-5] - use internal dep generator. [2.2.7-4] - don't use rpms internal dep generator [2.2.7-3] - Fix missing doc files. - Fix multilib issues [2.2.7-2] - update to 2.2.7 - add patch for LFS in smbclient (<tcallawa@redhat.com>) [2.2.5-10] - logrotate fixes (#65007) [2.2.5-9] - /usr/lib was used in place of %{_libdir} in three locations (#72554) [2.2.5-8] - Initscript fix (#70720) [2.2.5-7] - Enable VFS support and compile the 'recycling' module (#69796) - more selective includes of the examples dir [2.2.5-6] - Fix the lpq parser for better handling of LPRng systems (#69352) [2.2.5-5] - desktop file fixes (#69505) [2.2.5-4] - Enable ACLs [2.2.5-3] - Make it not depend on Net::LDAP - those are doc files and examples * Fri Jun 21 2002 Tim Powers <timp@redhat.com> - automated rebuild [2.2.5-1] - 2.2.5 [2.2.4-5] - Move the post/preun of winbind into the -common subpackage, where the script is (#66128) [2.2.4-4] - Fix pidfile locations so it runs properly again (2.2.4 added a new directtive - #65007) * Thu May 23 2002 Tim Powers <timp@redhat.com> - automated rebuild [2.2.4-2] - Fix #64804 [2.2.4-1] - 2.2.4 - Removed some zero-length and CVS internal files - Make it build [2.2.3a-6] - Don't use /etc/samba.d in smbadduser, it should be /etc/samba [2.2.3a-5] - Add libsmbclient.a w/headerfile for KDE (#62202) [2.2.3a-4] - Make the logrotate script look the correct place for the pid files [2.2.3a-3] - include interfaces.o in pam_smbpass.so, which needs symbols from interfaces.o (patch posted to samba-list by Ilia Chipitsine) [2.2.3a-2] - Rebuild [2.2.3a-1] - 2.2.3a [2.2.3-1] - 2.2.3 [2.2.2-8] - New pam configuration file for samba [2.2.2-7] - Enable PAM session controll and password sync [2.2.2-6] - Move winbind files to samba-common. Add separate initscript for winbind - Fixes for winbind - protect global variables with mutex, use more secure getenv [2.2.2-5] - Teach smbadduser about 'getent passwd' - Fix more pid-file references - Add (conditional) winbindd startup to the initscript, configured in /etc/sysconfig/samba [2.2.2-4] - Fix pid-file reference in logrotate script - include pam and nss modules for winbind [2.2.2-3] - Add '--with-utmp' to configure options (#55372) - Include winbind, pam_smbpass.so, rpcclient and smbcacls - start using /var/cache/samba, we need to keep state and there is more than just locks involved [2.2.2-2] - add 'reload' to the usage string in the startup script [2.2.2-1] - 2.2.2 [2.2.1a-5] - Add patch from Jeremy Allison to fix IA64 alignment problems (#51497) * Mon Aug 13 2001 Trond Eivind Glomsrod <teg@redhat.com> - Don't include smbpasswd in samba, it's in samba-common (#51598) - Add a disabled 'obey pam restrictions' statement - it's not active, as we use encrypted passwords, but if the admin turns encrypted passwords off the choice is available. (#31351) * Wed Aug 08 2001 Trond Eivind Glomsrod <teg@redhat.com> - Use /var/cache/samba instead of /var/lock/samba - Remove 'domain controller' keyword from smb.conf, it's deprecated (from #13704) - Sync some examples with smb.conf.default - Fix password synchronization (#16987) * Fri Jul 20 2001 Trond Eivind Glomsrod <teg@redhat.com> - Tweaks of BuildRequires (#49581) * Wed Jul 11 2001 Trond Eivind Glomsrod <teg@redhat.com> - 2.2.1a bugfix release * Tue Jul 10 2001 Trond Eivind Glomsrod <teg@redhat.com> - 2.2.1, which should work better for XP * Sat Jun 23 2001 Trond Eivind Glomsrod <teg@redhat.com> - 2.2.0a security fix - Mark lograte and pam configuration files as noreplace * Fri Jun 22 2001 Trond Eivind Glomsrod <teg@redhat.com> - Add the /etc/samba directory to samba-common * Thu Jun 21 2001 Trond Eivind Glomsrod <teg@redhat.com> - Add improvements to the smb.conf as suggested in #16931 * Tue Jun 19 2001 Trond Eivind Glomsrod <teg@redhat.com> - (these changes are from the non-head version) - Don't include /usr/sbin/samba, it's the same as the initscript - unset TMPDIR, as samba can't write into a TMPDIR owned by root (#41193) - Add pidfile: lines for smbd and nmbd and a config: line in the initscript (#15343) - don't use make -j - explicitly include /usr/share/samba, not just the files in it * Tue Jun 19 2001 Bill Nottingham <notting@redhat.com> - mount.smb/mount.smbfs go in /sbin, *not* %{_sbindir} * Fri Jun 08 2001 Preston Brown <pbrown@redhat.com> - enable encypted passwords by default * Thu Jun 07 2001 Helge Deller <hdeller@redhat.de> - build as 2.2.0-1 release - skip the documentation-directories docbook, manpages and yodldocs - don't include *.sgml documentation in package - moved codepage-directory to /usr/share/samba/codepages - make it compile with glibc-2.2.3-10 and kernel-headers-2.4.2-2 * Mon May 21 2001 Helge Deller <hdeller@redhat.de> - updated to samba 2.2.0 - moved codepages to %{_datadir}/samba/codepages - use all available CPUs for building rpm packages - use %{_xxx} defines at most places in spec-file - 'License:' replaces 'Copyright:' - dropped excludearch sparc - de-activated japanese patches 100 and 200 for now (they need to be fixed and tested wth 2.2.0) - separated swat.desktop file from spec-file and added german translations - moved /etc/sysconfig/samba to a separate source-file - use htmlview instead of direct call to netscape in swat.desktop-file * Mon May 07 2001 Bill Nottingham <notting@redhat.com> - device-remove security fix again (<tridge@samba.org>) * Fri Apr 20 2001 Bill Nottingham <notting@redhat.com> - fix tempfile security problems, officially (<tridge@samba.org>) - update to 2.0.8 * Sun Apr 08 2001 Bill Nottingham <notting@redhat.com> - turn of SSL, kerberos * Thu Apr 05 2001 Bill Nottingham <notting@redhat.com> - fix tempfile security problems (patch from <Marcus.Meissner@caldera.de>) * Thu Mar 29 2001 Bill Nottingham <notting@redhat.com> - fix quota support, and quotas with the 2.4 kernel (#31362, #33915) * Mon Mar 26 2001 Nalin Dahyabhai <nalin@redhat.com> - tweak the PAM code some more to try to do a setcred() after initgroups() - pull in all of the optflags on i386 and sparc - don't explicitly enable Kerberos support -- it's only used for password checking, and if PAM is enabled it's a no-op anyway * Mon Mar 05 2001 Tim Waugh <twaugh@redhat.com> - exit successfully from preun script (bug #30644). * Fri Mar 02 2001 Nalin Dahyabhai <nalin@redhat.com> - rebuild in new environment * Wed Feb 14 2001 Bill Nottingham <notting@redhat.com> - updated japanese stuff (#27683) * Fri Feb 09 2001 Bill Nottingham <notting@redhat.com> - fix trigger (#26859) * Wed Feb 07 2001 Bill Nottingham <notting@redhat.com> - add i18n support, japanese patch (#26253) * Wed Feb 07 2001 Trond Eivind Glomsrod <teg@redhat.com> - i18n improvements in initscript (#26537) * Wed Jan 31 2001 Bill Nottingham <notting@redhat.com> - put smbpasswd in samba-common (#25429) * Wed Jan 24 2001 Bill Nottingham <notting@redhat.com> - new i18n stuff * Sun Jan 21 2001 Bill Nottingham <notting@redhat.com> - rebuild * Thu Jan 18 2001 Bill Nottingham <notting@redhat.com> - i18n-ize initscript - add a sysconfig file for daemon options (#23550) - clarify smbpasswd man page (#23370) - build with LFS support (#22388) - avoid extraneous pam error messages (#10666) - add Urban Widmark's bug fixes for smbmount (#19623) - fix setgid directory modes (#11911) - split swat into subpackage (#19706) * Wed Oct 25 2000 Nalin Dahyabhai <nalin@redhat.com> - set a default CA certificate path in smb.conf (#19010) - require openssl >= 0.9.5a-20 to make sure we have a ca-bundle.crt file * Mon Oct 16 2000 Bill Nottingham <notting@redhat.com> - fix swat only_from line (#18726, others) - fix attempt to write outside buildroot on install (#17943) * Mon Aug 14 2000 Bill Nottingham <notting@redhat.com> - add smbspool back in (#15827) - fix absolute symlinks (#16125) * Sun Aug 06 2000 Philipp Knirsch <pknirsch@redhat.com> - bugfix for smbadduser script (#15148) * Mon Jul 31 2000 Matt Wilson <msw@redhat.com> - patch configure.ing (patch11) to disable cups test - turn off swat by default * Fri Jul 28 2000 Bill Nottingham <notting@redhat.com> - fix condrestart stuff * Fri Jul 21 2000 Bill Nottingham <notting@redhat.com> - add copytruncate to logrotate file (#14360) - fix init script (#13708) * Sat Jul 15 2000 Bill Nottingham <notting@redhat.com> - move initscript back - remove 'Using Samba' book from %doc - move stuff to /etc/samba (#13708) - default configuration tweaks (#13704) - some logrotate tweaks * Wed Jul 12 2000 Prospector <bugzilla@redhat.com> - automatic rebuild * Tue Jul 11 2000 Bill Nottingham <notting@redhat.com> - fix logrotate script (#13698) * Thu Jul 06 2000 Bill Nottingham <notting@redhat.com> - fix initscripts req (prereq /etc/init.d) * Wed Jul 05 2000 Than Ngo <than@redhat.de> - add initdir macro to handle the initscript directory - add a new macro to handle /etc/pam.d/system-auth * Thu Jun 29 2000 Nalin Dahyabhai <nalin@redhat.com> - enable Kerberos 5 and SSL support - patch for duplicate profile.h headers * Thu Jun 29 2000 Bill Nottingham <notting@redhat.com> - fix init script * Tue Jun 27 2000 Bill Nottingham <notting@redhat.com> - rename samba logs (#11606) * Mon Jun 26 2000 Bill Nottingham <notting@redhat.com> - initscript munging * Fri Jun 16 2000 Bill Nottingham <notting@redhat.com> - configure the swat stuff usefully - re-integrate some specfile tweaks that got lost somewhere * Thu Jun 15 2000 Bill Nottingham <notting@redhat.com> - rebuild to get rid of cups dependency * Wed Jun 14 2000 Nalin Dahyabhai <nalin@redhat.com> - tweak logrotate configurations to use the PID file in /var/lock/samba * Sun Jun 11 2000 Bill Nottingham <notting@redhat.com> - rebuild in new environment * Thu Jun 01 2000 Nalin Dahyabhai <nalin@redhat.com> - change PAM setup to use system-auth * Mon May 08 2000 Bill Nottingham <notting@redhat.com> - fixes for ia64 * Sat May 06 2000 Bill Nottingham <notting@redhat.com> - switch to %configure * Wed Apr 26 2000 Nils Philippsen <nils@redhat.de> - version 2.0.7 * Sun Mar 26 2000 Florian La Roche <Florian.LaRoche@redhat.com> - simplify preun * Thu Mar 16 2000 Bill Nottingham <notting@redhat.com> - fix yp_get_default_domain in autoconf - only link against readline for smbclient - fix log rotation (#9909) * Fri Feb 25 2000 Bill Nottingham <notting@redhat.com> - fix trigger, again. * Mon Feb 07 2000 Bill Nottingham <notting@redhat.com> - fix trigger. * Fri Feb 04 2000 Bill Nottingham <notting@redhat.com> - turn on quota support * Mon Jan 31 2000 Cristian Gafton <gafton@redhat.com> - rebuild to fox dependencies - man pages are compressed * Fri Jan 21 2000 Bill Nottingham <notting@redhat.com> - munge post scripts slightly * Wed Jan 19 2000 Bill Nottingham <notting@redhat.com> - turn on mmap again. Wheee. - ship smbmount on alpha * Mon Dec 06 1999 Bill Nottingham <notting@redhat.com> - turn off mmap. ;) * Wed Dec 01 1999 Bill Nottingham <notting@redhat.com> - change /var/log/samba to 0700 - turn on mmap support * Thu Nov 11 1999 Bill Nottingham <notting@redhat.com> - update to 2.0.6 * Fri Oct 29 1999 Bill Nottingham <notting@redhat.com> - add a %defattr for -common * Tue Oct 05 1999 Bill Nottingham <notting@redhat.com> - shift some files into -client - remove /home/samba from package. * Tue Sep 28 1999 Bill Nottingham <notting@redhat.com> - initscript oopsie. killproc <name> -HUP, not other way around. * Sun Sep 26 1999 Bill Nottingham <notting@redhat.com> - script cleanups. Again. * Wed Sep 22 1999 Bill Nottingham <notting@redhat.com> - add a patch to fix dropped reconnection attempts * Mon Sep 06 1999 Jeff Johnson <jbj@redhat.com> - use cp rather than mv to preserve /etc/services perms (#4938 et al). - use mktemp to generate /etc/tmp.XXXXXX file name. - add prereqs on sed/mktemp/killall (need to move killall to /bin). - fix trigger syntax (i.e. 'samba < 1.9.18p7' not 'samba < samba-1.9.18p7') * Mon Aug 30 1999 Bill Nottingham <notting@redhat.com> - sed 's|nawk|gawk|' /usr/bin/convert_smbpasswd * Sat Aug 21 1999 Bill Nottingham <notting@redhat.com> - fix typo in mount.smb * Fri Aug 20 1999 Bill Nottingham <notting@redhat.com> - add a %trigger to work around (sort of) broken scripts in previous releases * Mon Aug 16 1999 Bill Nottingham <notting@redhat.com> - initscript munging * Mon Aug 09 1999 Bill Nottingham <notting@redhat.com> - add domain parsing to mount.smb * Fri Aug 06 1999 Bill Nottingham <notting@redhat.com> - add a -common package, shuffle files around. * Fri Jul 23 1999 Bill Nottingham <notting@redhat.com> - add a chmod in %postun so /etc/services & inetd.conf don't become unreadable * Wed Jul 21 1999 Bill Nottingham <notting@redhat.com> - update to 2.0.5 - fix mount.smb - smbmount options changed again......... - fix postun. oops. - update some stuff from the samba team's spec file. * Fri Jun 18 1999 Bill Nottingham <notting@redhat.com> - split off clients into separate package - don't run samba by default * Mon Jun 14 1999 Bill Nottingham <notting@redhat.com> - fix one problem with mount.smb script - fix smbpasswd on sparc with a really ugly kludge * Thu Jun 10 1999 Dale Lovelace <dale@redhat.com> - fixed logrotate script * Tue May 25 1999 Bill Nottingham <notting@redhat.com> - turn of 64-bit locking on 32-bit platforms * Thu May 20 1999 Bill Nottingham <notting@redhat.com> - so many releases, so little time - explicitly uncomment 'printing = bsd' in sample config * Tue May 18 1999 Bill Nottingham <notting@redhat.com> - update to 2.0.4a - fix mount.smb arg ordering * Fri Apr 16 1999 Bill Nottingham <notting@redhat.com> - go back to stop/start for restart (-HUP didn't work in testing) * Fri Mar 26 1999 Bill Nottingham <notting@redhat.com> - add a mount.smb to make smb mounting a little easier. - smb filesystems apparently don't work on alpha. Oops. * Thu Mar 25 1999 Bill Nottingham <notting@redhat.com> - always create codepages * Tue Mar 23 1999 Bill Nottingham <notting@redhat.com> - logrotate changes * Sun Mar 21 1999 Cristian Gafton <gafton@redhat.com> - auto rebuild in the new build environment (release 3) * Fri Mar 19 1999 Preston Brown <pbrown@redhat.com> - updated init script to use graceful restart (not stop/start) * Tue Mar 09 1999 Bill Nottingham <notting@redhat.com> - update to 2.0.3 * Thu Feb 18 1999 Bill Nottingham <notting@redhat.com> - update to 2.0.2 * Mon Feb 15 1999 Bill Nottingham <notting@redhat.com> - swat swat * Tue Feb 09 1999 Bill Nottingham <notting@redhat.com> - fix bash2 breakage in post script * Fri Feb 05 1999 Bill Nottingham <notting@redhat.com> - update to 2.0.0 * Mon Oct 12 1998 Cristian Gafton <gafton@redhat.com> - make sure all binaries are stripped * Thu Sep 17 1998 Jeff Johnson <jbj@redhat.com> - update to 1.9.18p10. - fix %triggerpostun. * Tue Jul 07 1998 Erik Troan <ewt@redhat.com> - updated postun triggerscript to check db_8.RHSA-2023-7139 - clear /etc/codepages from %preun instead of %postun * Mon Jun 08 1998 Erik Troan <ewt@redhat.com> - made the %postun script a tad less agressive; no reason to remove the logs or lock file (after all, if the lock file is still there, samba is still running) - the %postun and %preun should only exectute if this is the final removal - migrated %triggerpostun from Red Hat's samba package to work around packaging problems in some Red Hat samba releases * Sun Apr 26 1998 John H Terpstra <jht@samba.anu.edu.au> - minor tidy up in preparation for release of 1.9.18p5 - added findsmb utility from SGI package * Wed Mar 18 1998 John H Terpstra <jht@samba.anu.edu.au> - Updated version and codepage info. - Release to test name resolve order * Sat Jan 24 1998 John H Terpstra <jht@samba.anu.edu.au> - Many optimisations (some suggested by Manoj Kasichainula <manojk@io.com> - Use of chkconfig in place of individual symlinks to /etc/rc.d/init/smb - Compounded make line - Updated smb.init restart mechanism - Use compound mkdir -p line instead of individual calls to mkdir - Fixed smb.conf file path for log files - Fixed smb.conf file path for incoming smb print spool directory - Added a number of options to smb.conf file - Added smbadduser command (missed from all previous RPMs) - Doooh! - Added smbuser file and smb.conf file updates for username map MODERATE Copyright 2023 Oracle, Inc. CVE-2023-34968 CVE-2023-34967 CVE-2023-34966 CVE-2022-2127 cpe:/a:oracle:linux:8:9:appstream_base cpe:/a:oracle:linux:8::distro_builder cpe:/a:oracle:linux:8::appstream Oracle Linux 8 [0.9.0-4] - Resolves: #2215765, insecure credentials submission MODERATE Copyright 2023 Oracle, Inc. CVE-2023-35789 cpe:/o:oracle:linux:8::baseos_latest cpe:/o:oracle:linux:8:9:baseos_base cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 8 [3.6.8-56.0.1] - Add Oracle Linux distribution in platform.py [Orabug: 20812544] [3.6.8.openela.0] - Add openela to supported dists [3.6.8-56] - Security fix for CVE-2023-40217 Resolves: RHEL-3041 [3.6.8-55] - Fix symlink handling in the fix for CVE-2007-4559 Resolves: rhbz#263261 [3.6.8-54] - Bump release for rebuild Resolves: rhbz#2173917 [3.6.8-53] - Security fix for CVE-2023-24329 Resolves: rhbz#2173917 [3.6.8-52] - Add filters for tarfile extraction (CVE-2007-4559, PEP-706) Resolves: rhbz#263261 MODERATE Copyright 2023 Oracle, Inc. CVE-2007-4559 cpe:/a:oracle:linux:8:9:appstream_base cpe:/o:oracle:linux:8::baseos_latest cpe:/a:oracle:linux:8::appstream cpe:/o:oracle:linux:8:9:baseos_base Oracle Linux 8 [0.20.0-6] - Fix introduced issues tagged by coverity (RHEL-765) [0.20.0-5] - Avoid potential crash because of missing list terminator (#2196234) - Fix CVE-2023-2977: potential buffer overrun in pkcs15 cardos_have_verifyrc_package (#2211093) - Backport upstream changes regarding to reader removal (#2097048) LOW Copyright 2023 Oracle, Inc. CVE-2023-2977 cpe:/o:oracle:linux:8::baseos_latest cpe:/o:oracle:linux:8:9:baseos_base Oracle Linux 8 [1:2.2.6-54] - RHEL-2612 - cups pulls an unneeded dependency on python3 [1:2.2.6-53] - CVE-2023-32360 cups: Information leak through Cups-Get-Document operation [1:2.2.6-52] - 2217178 - Delays printing to lpd when reserved ports are exhausted - 2217283 - The command 'cancel -x <job>' does not remove job files - 2217955 - Enlarge backlog queue for listen() in cupsd - CVE-2023-34241 cups: use-after-free in cupsdAcceptClient() in scheduler/client.c - CVE-2023-32324 cups: heap buffer overflow may lead to DoS MODERATE Copyright 2023 Oracle, Inc. CVE-2023-32324 CVE-2023-34241 cpe:/a:oracle:linux:8:9:appstream_base cpe:/o:oracle:linux:8::baseos_latest cpe:/a:oracle:linux:8::appstream cpe:/o:oracle:linux:8:9:baseos_base Oracle Linux 8 [2.3.2-5] - Ensure layer number is in bounds Resolves: rhbz#2160302 Resolves: rhbz#2162611 LOW Copyright 2023 Oracle, Inc. CVE-2023-22745 cpe:/o:oracle:linux:8::baseos_latest cpe:/o:oracle:linux:8:9:baseos_base Oracle Linux 8 [0.074-2] - Changes the verify_SSL default parameter from 0 to 1 - CVE-2023-31486 - Resolves: rhbz#2228409 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-31486 cpe:/o:oracle:linux:8::baseos_latest cpe:/o:oracle:linux:8:9:baseos_base Oracle Linux 8 [9.0.3-23] - Use tarfile.data_filter for extracting (CVE-2007-4559, PEP-721, PEP-706) Resolves: RHBZ#2218241 MODERATE Copyright 2023 Oracle, Inc. CVE-2007-4559 cpe:/a:oracle:linux:8:9:appstream_base cpe:/o:oracle:linux:8::baseos_latest cpe:/a:oracle:linux:8::appstream cpe:/o:oracle:linux:8:9:baseos_base Oracle Linux 8 [32:9.11.36-11] - Prevent exahustion of memory from control channel (CVE-2023-3341) [32:9.11.36-10] - Prevent the cache going over the configured limit (CVE-2023-2828) [32:9.11.36-9] - Prevent flooding with UPDATE requests (CVE-2022-3094) - include upstream test for that change MODERATE Copyright 2023 Oracle, Inc. CVE-2022-3094 cpe:/a:oracle:linux:8:9:appstream_base cpe:/o:oracle:linux:8::baseos_latest cpe:/a:oracle:linux:8::appstream cpe:/o:oracle:linux:8:9:baseos_base Oracle Linux 8 [3.3.15-14.0.1] - ps: remove uptime integer conversion [Orabug: 35909165] - ps: improved three elapsed 'jiffies/tics' calculations [Orabug: 35909165] - Set TZ to avoid repeated stat('/etc/localtime') [Orabug: 32769816] [3.3.15-14] - CVE-2023-4016: ps: possible buffer overflow - Resolves: rhbz#2228503 LOW Copyright 2023 Oracle, Inc. CVE-2023-4016 cpe:/o:oracle:linux:8::baseos_latest cpe:/o:oracle:linux:8:9:baseos_base cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 8 [1.7.8-2.0.1] - Modify %prep to correctly apply downstream patches - Align sections to 512 bytes [Orabug: 35265981] - Use objcopy to build arm/aarch64 binaries if binutils 2.30-113.0.3 or newer [Orabug: 35265981] - Enabled signing for aarch64 [Orabug: 35265981] - Modify meson.build for fwupd-efi [Orabug: 35265981] - Update SBAT data to include Oracle [Oracle: 33072886] - Build with the updated Oracle certificate - Use oraclesecureboot301 as certdir [Orabug: 29881368] - Use new signing certificate (Alex Burmashev) [1.7.8-2] - Backport the Redfish security fixes which affect IDRAC. - Resolves: rhbz#2170950 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-3287 cpe:/o:oracle:linux:8::baseos_latest cpe:/o:oracle:linux:8:9:baseos_base cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 8 [0.7-21] - Fix CVE-2023-1981 (#2186688) MODERATE Copyright 2023 Oracle, Inc. CVE-2023-1981 cpe:/a:oracle:linux:8:9:appstream_base cpe:/o:oracle:linux:8::baseos_latest cpe:/a:oracle:linux:8::appstream cpe:/o:oracle:linux:8:9:baseos_base cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 8 buildah [1:1.24.6-7] - rebuild for CVE-2023-29406 - Related: #2176055 cockpit-podman conmon containernetworking-plugins containers-common container-selinux criu crun fuse-overlayfs libslirp oci-seccomp-bpf-hook podman [2:4.0.2-24] - rebuild for CVE-2023-29406 - Related: #2176055 python-podman runc skopeo [2:1.6.2-9] - rebuild because of CVE-2023-29406 - Resolves: #2236831 slirp4netns udica MODERATE Copyright 2023 Oracle, Inc. CVE-2023-29406 cpe:/a:oracle:linux:8::appstream Oracle Linux 8 nodejs [1:20.8.1-1] - Update node and nghttp - Add fips patch - Fixes CVE-2023-44487 (nghttp) - Fixes CVE-2023-45143, CVE-2023-39331, CVE-2023-39332, CVE-2023-38552, CVE-2023-39333 nodejs-nodemon nodejs-packaging IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-39332 CVE-2023-45143 CVE-2023-38552 CVE-2023-39333 CVE-2023-44487 CVE-2023-39331 cpe:/a:oracle:linux:8::appstream Oracle Linux 8 [1.13.0-9.1] - Resolves: RHEL-11931 - Buffer Underwrite in ares_inet_net_pton() [rhel-8.9.0.z] [1.13.0-9] - Resolves: rhbz#2238293 - CVE-2020-22217 c-ares: read-heap-buffer-overflow in ares_parse_soa_reply [rhel-8] [rhel-8.9.0.z] MODERATE Copyright 2023 Oracle, Inc. CVE-2020-22217 CVE-2023-31130 cpe:/o:oracle:linux:8::baseos_latest cpe:/o:oracle:linux:8:9:baseos_patch Oracle Linux 8 libecap squid [7:4.15-7.1] - Resolves: RHEL-14801 - squid: squid: Denial of Service in HTTP Digest Authentication - Resolves: RHEL-14776 - squid: squid: Request/Response smuggling in HTTP/1.1 and ICAP CRITICAL Copyright 2023 Oracle, Inc. CVE-2023-46847 CVE-2023-46846 cpe:/a:oracle:linux:8::appstream Oracle Linux 9 [8.0.100-2.0.1] - Update to .NET 8.0 [8.0.100~rc.2-0.1.0.1] - Add support for Oracle Linux [8.0.100~rc.2-0.1] - Update to .NET 8 RC 2 - Resolves: RHEL-13790 [8.0.100~rc.1-0.4] - Disable bootstrap - Related: RHEL-4074 [8.0.100~rc.1-0.3] - Add backported patches for additional s390x issues - Related: RHEL-4074 [8.0.100~rc.1-0.2] - Add patches to fix mono and arm64 issues - Include libmono-*.a files in the SDK - Fix CI configuration - Related: RHEL-4074 [8.0.100~rc.1-0.1] - Update to .NET SDK 8.0.100 RC 1 and Runtime 8.0.0 RC 1 - Resolves: RHEL-4074 [8.0.100~preview.7-0.2] - Add patch to work around TypeLoadException in Mono - Related: RHBZ#2224124 [8.0.100~preview.7-0.1] - Update to .NET SDK 8.0.100 Preview 7 and Runtime 8.0.0 Preview 7 [8.0.100~preview.6-0.2] - Remove lttng and other tracing-specific dependencies from the runtime package [8.0.100~preview.6-0.1] - Update to .NET SDK 8.0.100 Preview 6 and Runtime 8.0.0 Preview 6 [8.0.100~preview.5-0.2] - Fix release.json and sourcelink references [8.0.100~preview.5-0.1] - Update to .NET SDK 8.0.100 Preview 5 and Runtime 8.0.0 Preview 5 [8.0.100~preview.3-0.1] - Update to .NET SDK 8.0.100 Preview 3 and Runtime 8.0.0 Preview 3 [8.0.100~preview.2-0.1] - Update to .NET SDK 8.0.100 Preview 2 and Runtime 8.0.0 Preview 2 [8.0.100~preview.1-0.1] - Update to .NET SDK 8.0.100 Preview 1 and Runtime 8.0.0 Preview 1 [7.0.102-1] - Update to .NET SDK 7.0.102 and Runtime 7.0.2 [7.0.101-1] - Update to .NET SDK 7.0.101 and Runtime 7.0.1 [7.0.100-1] MODERATE Copyright 2023 Oracle, Inc. CVE-2023-36558 CVE-2023-36049 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 9 [7.0.114-1.0.1] - Update to .NET SDK 7.0.114 and Runtime 7.0.14 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-36049 CVE-2023-36558 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 8 [7.0.114-1.0.1] - Update to .NET SDK 7.0.114 and Runtime 7.0.14 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-36558 CVE-2023-36049 cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 9 [6.0.125-1.0.1] - Update to .NET SDK 6.0.125 and Runtime 6.0.25 - Add support for Oracle Linux MODERATE Copyright 2023 Oracle, Inc. CVE-2023-36558 CVE-2023-36049 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 8 [6.0.125-1.0.2] - Add strict BuildRequires on 6.0.125-1.0.1 [6.0.125-1.0.1] - Update to .NET SDK 6.0.125 and Runtime 6.0.25 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-36049 CVE-2023-36558 cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 8 [12.2.5-3.0.1.1] - Fix CVE-2023-34058 open-vm-tools: SAML token signature bypass - Fix CVE-2023-34059 open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-34058 CVE-2023-34059 cpe:/a:oracle:linux:8::appstream Oracle Linux 9 [12.2.5-3.0.1.2] - Address CVE-2023-34058 - BZ 2246963 - SAML token signature token bypass. - Address CVE-2023-34059 - BZ 2246962 - vmware-user-suid-wrapper IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-34058 CVE-2023-34059 cpe:/a:oracle:linux:9::appstream Oracle Linux 7 [11.0.5-3.0.1] - fix spaces in vmware udev rule for scsi devices [Orabug: 24461968] - Fix vmware udev rule in 99-vmware-scsi-timeout.rules file. [Orabug: 22815019] - Increase timeout for scsi devices on VMWare guests by adding a udev rule. - Created a new file 99-vmware-scsi-timeout.rules - Modified spec file to install this new file. [Orabug: 21819156] [11.0.5-3.el7_9.9] - ovt-Don-t-accept-tokens-with-unrelated-certs.patch [RHEL-14642] - ovt-File-descriptor-vulnerability-in-the-open-vm-tools-v.patch [RHEL-14676] - Resolves: RHEL-14642 (CVE-2023-34058 open-vm-tools: SAML token signature bypass [rhel-7.9.z]) - Resolves: RHEL-14676 (CVE-2023-34059 open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper [rhel-7.9.z]) [11.0.5-3.el7_9.8] - ovt-Provide-alternate-method-to-allow-expected-pre-froze.patch [bz#2226921] - Resolves: bz#2226921 ([RHEL7.9][ESXi]Latest version of open-vm-tools breaks VM backups) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-34058 CVE-2023-34059 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7:9:patch cpe:/a:oracle:linux:7::optional_latest Oracle Linux 7 [3.10.0-1160.105.1.0.1.OL7] - debug: lock down kgdb [Orabug: 34270798] {CVE-2022-21499} [3.10.0-1160.105.1.OL7] - Update Oracle Linux certificates (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was compiled into kernel (olkmod_signing_key.x509)(alexey.petrenko@oracle.com) - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and shim-x64 <= 15-2.0.9 - Update oracle(kernel-sig-key) value to match new certificate (Ilya Okomin) [3.10.0-1160.105.1] - net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228703] {CVE-2023-4128} [3.10.0-1160.104.1] - CI: Remove unused kpet_tree_family (Nikolai Kondrashov) - xen/x86: don't lose event interrupts (Vitaly Kuznetsov) [RHEL-1534] - Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229893] {CVE-2022-40982} - KVM: Add GDS_NO support to KVM (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229893] {CVE-2022-40982} - x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229893] {CVE-2022-40982} - Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229893] - docs/kernel-parameters: Update descriptions for 'mitigations=' param with retbleed (Waiman Long) [2229893] - x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229893] - x86: Sync Intel family names & cpu_vuln_blacklist[] with upstream (Waiman Long) [2229893] [3.10.0-1160.103.1] - net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Davide Caratti) [2225555] {CVE-2023-3611} - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (Davide Caratti) [2225555] - net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225639] {CVE-2023-3776} - redhat: fix to be able to build with rpm 4.19.0 (Denys Vlasenko) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-3776 CVE-2023-4206 CVE-2023-4128 CVE-2022-40982 CVE-2023-4208 CVE-2023-3611 CVE-2023-4207 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7:9:patch cpe:/a:oracle:linux:7::optional_latest Oracle Linux 7 [1.8.0-26.0.1] - Dropped xorg-CVE-2023-5367.patch [1.8.0-26] - Fix CVE-2023-5380 tigervnc: xorg-x11-server: Use-after-free bug in DestroyWindow Resolves: RHEL-15235 - Fix CVE-2023-5367 tigervnc: xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty Resolves: RHEL-15223 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-5367 CVE-2023-5380 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7::optional_latest cpe:/a:oracle:linux:7:9:patch Oracle Linux 9 [- 7:5.5-6.2] - Fix: squid: DoS against HTTP and HTTPS (CVE-2023-5824) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-5824 cpe:/a:oracle:linux:9::appstream Oracle Linux 8 [4.18.6-2.0.1] - resolves: RHEL-11937 Fix CVE-2023-3961 - smbd must check the pipename - resolves: RHEL-11937 Fix CVE-2023-4091 - SMB clients can truncate files - resolves: RHEL-11937 Fix CVE-2023-42669 - Remove rpcecho server MODERATE Copyright 2023 Oracle, Inc. CVE-2023-42669 CVE-2023-4091 CVE-2023-3961 cpe:/o:oracle:linux:8::baseos_latest cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::developer cpe:/o:oracle:linux:8:9:baseos_patch cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 8 [115.5.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [115.5.0-1] - Update to 115.5.0 build1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-6206 CVE-2023-6208 CVE-2023-6207 CVE-2023-6205 CVE-2023-6212 CVE-2023-6204 CVE-2023-6209 cpe:/a:oracle:linux:8::appstream Oracle Linux 9 [115.5.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js [115.5.0-1] - Update to 115.5.0 build1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-6205 CVE-2023-6206 CVE-2023-6212 CVE-2023-6209 CVE-2023-6207 CVE-2023-6204 CVE-2023-6208 cpe:/a:oracle:linux:9::appstream Oracle Linux 7 [115.5.0-1.0.1] - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js - Enabled aarch64 build [115.5.0-1] - Update to 115.5.0 build1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-6212 CVE-2023-6205 CVE-2023-6208 CVE-2023-6209 CVE-2023-6204 CVE-2023-6206 CVE-2023-6207 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7::optional_latest cpe:/a:oracle:linux:7:9:patch Oracle Linux 9 [115.5.0-1.0.1] - Update to 115.5.0 build1 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-6205 CVE-2023-6212 CVE-2023-6208 CVE-2023-6209 CVE-2023-6206 CVE-2023-6204 CVE-2023-6207 cpe:/a:oracle:linux:9::appstream Oracle Linux 8 [115.5.0-1.0.1] - Update to 115.5.0 build1 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-6205 CVE-2023-6209 CVE-2023-6207 CVE-2023-6212 CVE-2023-6206 CVE-2023-6204 CVE-2023-6208 cpe:/a:oracle:linux:8::appstream Oracle Linux 7 [115.5.0-1.0.1] - Remove upstream references [Orabug: 30143292] - Update distribution for Oracle Linux [Orabug: 30143292] - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file [115.5.0-1] - Update to 115.5.0 build1 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-6209 CVE-2023-6206 CVE-2023-6207 CVE-2023-6212 CVE-2023-6204 CVE-2023-6205 CVE-2023-6208 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7::optional_latest cpe:/a:oracle:linux:7:9:patch Oracle Linux 8 [4.18.0-513.9.1_9.OL8] - media: dvb-core: Fix use-after-free due to race at dvb_register_device() (Mauro Carvalho Chehab) {CVE-2022-45884} - cifs: Fix UAF in cifs_demultiplex_thread() (Zhang Xiaoxu) {CVE-2023-1192} - nvmet-tcp: Fix a possible UAF in queue intialization setup (Sagi Grimberg) {CVE-2023-5178} - net: tun: fix bugs for oversize packet when napi frags enabled (Ziyang Xuan) {CVE-2023-3812} - bpf: Fix incorrect verifier pruning due to missing register precision taints (Daniel Borkmann) (Andrii Nakryiko) {CVE-2023-2163} - media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 (Hyunwoo Kim) {CVE-2022-45919} - media: dvbdev: fix error logic at dvb_register_device() (Mauro Carvalho Chehab) - media: dvbdev: Fix memleak in dvb_register_device (Dinghao Liu) - media: dvb-core: Fix use-after-free due on race condition at dvb_net (Hyunwoo Kim} {CVE-2022-45886} [4.18.0-513.5.1_9.OL8] - Update Oracle Linux certificates (Kevin Lyons) - Disable signing for aarch64 (Ilya Okomin) - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list (olkmod_signing_key.pem) [Orabug: 29539237] - Update x509.genkey [Orabug: 24817676] - Conflict with shim-ia32 and shim-x64 <= 15.3-1.0.3 - Remove upstream reference during boot (Kevin Lyons) [Orabug: 34750652] - Drop not needed patch IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-2163 CVE-2023-3812 CVE-2022-45884 CVE-2023-1192 CVE-2022-45919 CVE-2022-45886 CVE-2023-5178 cpe:/o:oracle:linux:8::baseos_latest cpe:/o:oracle:linux:8:9:baseos_patch cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 8 pgaudit pg_repack postgres-decoderbufs postgresql [13.13-1.0.1] - Fixed postgresql port binding issue during bootup [Orabug: 35103668] [13.13-1] - Update to 13.13 - Fixes: CVE-2023-5868 CVE-2023-5869 CVE-2023-5870 CVE-2023-39417 - Resolves: RHEL-16085 RHEL-16123 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-5870 CVE-2023-39417 CVE-2023-5869 CVE-2023-5868 cpe:/a:oracle:linux:8::appstream Oracle Linux 8 libecap squid [7:4.15-7.3] - Fix squid: DoS against HTTP and HTTPS (CVE-2023-5824) [7:4.15-7.1] - Resolves: RHEL-14801 - squid: squid: Denial of Service in HTTP Digest Authentication - Resolves: RHEL-14776 - squid: squid: Request/Response smuggling in HTTP/1.1 and ICAP IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-5824 cpe:/a:oracle:linux:8::appstream Oracle Linux 9 [1.7.0-12] - fix integer bounds checking in apr_encode_* Resolves: RHEL-17123 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-24963 cpe:/a:oracle:linux:9::appstream Oracle Linux 9 [3.1.2-4] - Backport stricter seccomp jail Resolves: RHEL-12469 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-5557 cpe:/a:oracle:linux:9::appstream Oracle Linux 8 pgaudit pg_repack postgres-decoderbufs postgresql IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-5869 CVE-2023-5870 CVE-2023-39417 CVE-2023-5868 cpe:/a:oracle:linux:8::appstream Oracle Linux 9 [2.40.5-1.1] - Add patch for CVE-2023-42917 Resolves: rhbz#2253058 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-42917 cpe:/a:oracle:linux:9::appstream Oracle Linux 8 [2.40.5-1.1] - Add patch for CVE-2023-42917 Resolves: rhbz#2253058 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-42917 cpe:/a:oracle:linux:8::appstream Oracle Linux 8 [2.1.5-2.1] - Bump dist [2.1.5-2] - Backport stricter seccomp jail Resolves: RHEL-12466 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-5557 cpe:/a:oracle:linux:8::appstream Oracle Linux 7 [7.29.0-59.0.3.el7_9.2] - load CA certificates even with --insecure [Orabug: 32836997] - Fix TFTP small blocksize heap buffer overflow (https://curl.haxx.se/docs/CVE-2019-5482.html)[CVE-2019-5482][Orabug: 30568724] - Security Fixes [OraBug: 28939992] - CVE-2016-8615 cookie injection for other servers (https://curl.haxx.se/docs/CVE-2016-8615.html) - CVE-2016-8616 case insensitive password comparison (https://curl.haxx.se/docs/CVE-2016-8616.html) - CVE-2016-8617 OOB write via unchecked multiplication (https://curl.haxx.se/docs/CVE-2016-8617.html) - CVE-2016-8618 double-free in curl_maprintf (https://curl.haxx.se/docs/CVE-2016-8618.html) - CVE-2016-8619 double-free in krb5 code (https://curl.haxx.se/docs/CVE-2016-8619.html) - CVE-2016-8621 curl_getdate read out of bounds (https://curl.haxx.se/docs/CVE-2016-8621.html) - CVE-2016-8622 URL unescape heap overflow via integer truncation (https://curl.haxx.se/docs/CVE-2016-8622.html) - CVE-2016-8623 Use-after-free via shared cookies (https://curl.haxx.se/docs/CVE-2016-8623.html) - CVE-2016-8624 invalid URL parsing with # (https://curl.haxx.se/docs/CVE-2016-8624.html) - Drop 1001-tftp-Alloc-maximum-blksize-and-use-default-unless-OA.patch [7.29.0-59.el7_9.2] - fix HTTP proxy deny use after free (CVE-2022-43552) - rebuild certs with 2048-bit RSA keys LOW Copyright 2023 Oracle, Inc. CVE-2022-43552 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7::optional_latest cpe:/a:oracle:linux:7:9:patch Oracle Linux 9 [2.9.13-5] - Fix CVE-2023-39615 (RHEL-5180) MODERATE Copyright 2023 Oracle, Inc. CVE-2023-39615 cpe:/a:oracle:linux:9::appstream cpe:/o:oracle:linux:9:3:baseos_patch cpe:/o:oracle:linux:9::baseos_latest Oracle Linux 9 [5.14.0-362.13.1.el9_3.OL9] - x86/retpoline: Document some thunk handling aspects (Borislav Petkov) {CVE-2023-20569} - objtool: Fix return thunk patching in retpolines (Josh Poimboeuf) {CVE-2023-20569} - x86/srso: Remove unnecessary semicolon (Yang Li) {CVE-2023-20569} - x86/calldepth: Rename __x86_return_skl() to call_depth_return_thunk() (Josh Poimboeuf) {CVE-2023-20569} - x86/nospec: Refactor UNTRAIN_RET[_*] (Josh Poimboeuf) {CVE-2023-20569} - x86/rethunk: Use SYM_CODE_START[_LOCAL]_NOALIGN macros (Josh Poimboeuf) {CVE-2023-20569} - x86/srso: Disentangle rethunk-dependent options (Josh Poimboeuf) {CVE-2023-20569} - x86/srso: Move retbleed IBPB check into existing 'has_microcode' code block (Josh Poimboeuf) {CVE-2023-20569} - x86/bugs: Remove default case for fully switched enums (Josh Poimboeuf) {CVE-2023-20569} - x86/srso: Remove 'pred_cmd' label (Josh Poimboeuf) {CVE-2023-20569} - x86/srso: Unexport untraining functions (Josh Poimboeuf) {CVE-2023-20569} - x86/srso: Improve i-cache locality for alias mitigation (Josh Poimboeuf) {CVE-2023-20569} - x86/srso: Fix unret validation dependencies (Josh Poimboeuf) {CVE-2023-20569} - x86/srso: Fix vulnerability reporting for missing microcode (Josh Poimboeuf) {CVE-2023-20569} - x86/srso: Print mitigation for retbleed IBPB case (Josh Poimboeuf) {CVE-2023-20569} - x86/srso: Print actual mitigation if requested mitigation isn't possible (Josh Poimboeuf) [RHEL-8594] {CVE-2023-20569} - x86/srso: Fix SBPB enablement for (possible) future fixed HW (Josh Poimboeuf) {CVE-2023-20569} - x86,static_call: Fix static-call vs return-thunk (Peter Zijlstra) {CVE-2023-20569} - x86/alternatives: Remove faulty optimization (Josh Poimboeuf) {CVE-2023-20569} - x86/srso: Fix SBPB enablement for spec_rstack_overflow=off (Josh Poimboeuf) {CVE-2023-20569} - x86/srso: Don't probe microcode in a guest (Josh Poimboeuf) {CVE-2023-20569} - x86/srso: Set CPUID feature bits independently of bug or mitigation status (Josh Poimboeuf) {CVE-2023-20569} - x86/srso: Fix srso_show_state() side effect (Josh Poimboeuf) {CVE-2023-20569} - x86/cpu: Fix amd_check_microcode() declaration (Arnd Bergmann) {CVE-2023-20569} - x86/srso: Correct the mitigation status when SMT is disabled (Borislav Petkov) {CVE-2023-20569} - x86/static_call: Fix __static_call_fixup() (Peter Zijlstra) {CVE-2023-20569} - objtool/x86: Fixup frame-pointer vs rethunk (Peter Zijlstra) {CVE-2023-20569} - x86/srso: Explain the untraining sequences a bit more (Borislav Petkov) {CVE-2023-20569} - x86/cpu/kvm: Provide UNTRAIN_RET_VM (Peter Zijlstra) {CVE-2023-20569} - x86/cpu: Cleanup the untrain mess (Peter Zijlstra) {CVE-2023-20569} - x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (Peter Zijlstra) {CVE-2023-20569} - x86/cpu: Rename original retbleed methods (Peter Zijlstra) {CVE-2023-20569} - x86/cpu: Clean up SRSO return thunk mess (Peter Zijlstra) {CVE-2023-20569} - x86/alternative: Make custom return thunk unconditional (Peter Zijlstra) {CVE-2023-20569} - objtool/x86: Fix SRSO mess (Peter Zijlstra) {CVE-2023-20569} - x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (Peter Zijlstra) {CVE-2023-20569} - x86/cpu: Fix __x86_return_thunk symbol type (Peter Zijlstra) {CVE-2023-20569} - x86/retpoline,kprobes: Skip optprobe check for indirect jumps with retpolines and IBT (Petr Pavlu) {CVE-2023-20569} - x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (Petr Pavlu) {CVE-2023-20569} - x86/srso: Disable the mitigation on unaffected configurations (Borislav Petkov) {CVE-2023-20569} - x86/CPU/AMD: Fix the DIV(0) initial fix attempt (Borislav Petkov) {CVE-2023-20588} - x86/retpoline: Don't clobber RFLAGS during srso_safe_ret() (Sean Christopherson) {CVE-2023-20569} - x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 (Cristian Ciocaltea) {CVE-2023-20593} - driver core: cpu: Fix the fallback cpu_show_gds() name (Borislav Petkov) {CVE-2023-20569} - x86: Move gds_ucode_mitigated() declaration to header (Arnd Bergmann) {CVE-2023-20569} - x86/speculation: Add cpu_show_gds() prototype (Arnd Bergmann) {CVE-2023-20569} - driver core: cpu: Make cpu_show_not_affected() static (Borislav Petkov) {CVE-2023-20569} - x86/srso: Fix build breakage with the LLVM linker (Nick Desaulniers) {CVE-2023-20569} - Documentation/srso: Document IBPB aspect and fix formatting (Borislav Petkov) {CVE-2023-20569} - driver core: cpu: Unify redundant silly stubs (Borislav Petkov) {CVE-2023-20569} - Documentation/hw-vuln: Unify filename specification in index (Borislav Petkov) {CVE-2023-20569} - x86/CPU/AMD: Do not leak quotient data after a division by 0 (Borislav Petkov) {CVE-2023-20588} - x86/srso: Tie SBPB bit setting to microcode patch detection (Borislav Petkov) {CVE-2023-20569} - x86/srso: Add a forgotten NOENDBR annotation (Borislav Petkov) {CVE-2023-20569} - x86/srso: Fix return thunks in generated code (Josh Poimboeuf) {CVE-2023-20569} - x86/srso: Add IBPB on VMEXIT (Borislav Petkov) {CVE-2023-20569} - x86/srso: Add IBPB (Borislav Petkov) {CVE-2023-20569} - x86/srso: Add SRSO_NO support (Borislav Petkov) {CVE-2023-20569} - x86/srso: Add IBPB_BRTYPE support (Borislav Petkov) {CVE-2023-20569} - redhat/configs/x86: Enable CONFIG_CPU_SRSO (Borislav Petkov) {CVE-2023-20569} - x86/srso: Add a Speculative RAS Overflow mitigation (Borislav Petkov) {CVE-2023-20569} - x86/retbleed: Add __x86_return_thunk alignment checks (Borislav Petkov) {CVE-2023-20569} - x86/retbleed: Fix return thunk alignment (Borislav Petkov) {CVE-2023-20569} - x86/alternative: Optimize returns patching (Borislav Petkov) {CVE-2023-20569} - x86,objtool: Separate unret validation from unwind hints (Josh Poimboeuf) {CVE-2023-20569} - objtool: Add objtool_types.h (Josh Poimboeuf) {CVE-2023-20569} - objtool: Union instruction::{call_dest,jump_table} (Peter Zijlstra) {CVE-2023-20569} - x86/kprobes: Fix optprobe optimization check with CONFIG_RETHUNK (Peter Zijlstra) {CVE-2023-20569} - objtool: Fix SEGFAULT (Christophe Leroy) {CVE-2023-20569} - vmlinux.lds.h: add BOUNDED_SECTION* macros (Jim Cromie) {CVE-2023-20569} IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-5345 CVE-2023-20569 CVE-2023-1192 CVE-2023-45871 cpe:/a:oracle:linux:9::appstream cpe:/o:oracle:linux:9:3:baseos_patch cpe:/a:oracle:linux:9::codeready_builder cpe:/o:oracle:linux:9::baseos_latest Oracle Linux 9 [4.10.0-55.2] - python-certifi: Removal of e-Tugra root certificate (CVE-2023-37920) - python-urllib3: Cookie request header isn't stripped during cross-origin redirects (CVE-2023-43804) MODERATE Copyright 2023 Oracle, Inc. CVE-2023-43804 CVE-2023-37920 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::addons Oracle Linux 9 [0.40.0-6] - Backport fix for CVE-2022-44638 MODERATE Copyright 2023 Oracle, Inc. CVE-2022-44638 cpe:/a:oracle:linux:9::appstream Oracle Linux 9 [2:1.13.3-3] - Rebuild with golang 1.20.10 - Related: Jira:RHEL-2786 [2:1.13.3-2] - Rebuild with golang 1.21.3 - Related: Jira:RHEL-2786 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-29409 CVE-2023-39319 CVE-2023-39321 CVE-2023-39318 CVE-2023-39322 cpe:/a:oracle:linux:9::appstream Oracle Linux 9 [4:1.1.9-2] - Rebuild for CVEs: CVE-2023-39321 CVE-2023-39322 CVE-2023-29409 - Resolves: #2228743 - Resolves: #2237777 - Resolves: #2237778 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-39321 CVE-2023-29409 CVE-2023-39322 cpe:/a:oracle:linux:9::appstream Oracle Linux 9 [1.31.3-2.0.1] - Rebuild for CVEs: CVE-2023-39318 CVE-2023-39319 CVE-2023-39321 CVE-2023-39322 CVE-2023-29409 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-29409 CVE-2023-39318 CVE-2023-39322 CVE-2023-39319 CVE-2023-39321 cpe:/a:oracle:linux:9::appstream Oracle Linux 9 [2:4.6.1-7.0.1] - Rebuild for following CVEs: CVE-2023-39318 CVE-2023-39319 CVE-2023-39321 CVE-2023-39322 CVE-2023-29409 - Resolves: #2228743 - Resolves: #2237773 - Resolves: #2237776 - Resolves: #2237777 - Resolves: #2237778 [2:4.6.1-6.0.1] - Drop nmap-ncat requirement and skip ignore-socket test case [Orabug: 34117404] [2:4.6.1-6] - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel (https://github.com/containers/podman/commit/68e7ae0) - Related: Jira:RHEL-2112 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-39318 CVE-2023-29409 cpe:/a:oracle:linux:9::appstream Oracle Linux 9 [1:1.3.0-6] - rebuild for following CVEs: CVE-2023-29409 CVE-2023-39318 CVE-2023-39319 CVE-2023-39321 CVE-2023-39322 - Resolves: #2228743 - Resolves: #2237773 - Resolves: #2237776 - Resolves: #2237777 - Resolves: #2237778 [1:1.3.0-5] - fix path to dhcp service - Resolves: #RHEL-3140 MODERATE Copyright 2023 Oracle, Inc. CVE-2023-39318 CVE-2023-39319 CVE-2023-39321 CVE-2023-39322 CVE-2023-29409 cpe:/a:oracle:linux:9::appstream Oracle Linux 7 [9.2.24-9] - Backport fix for CVE-2023-5869 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-5869 cpe:/a:oracle:linux:7::latest cpe:/a:oracle:linux:7::optional_latest cpe:/a:oracle:linux:7:9:patch Oracle Linux 9 [13.13-1.0.1] - Update to 13.13 - Fixes CVE-2023-5868, CVE-2023-5869, CVE-2023-5870, and CVE-2023-39417 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-39417 CVE-2023-5868 CVE-2023-5869 CVE-2023-5870 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 9 pgaudit pg_repack postgres-decoderbufs postgresql [15.5-1] - update to 15.5 - Fixes CVE-2023-5868, CVE-2023-5869, CVE-2023-5870, CVE-2023-39417, and CVE-2023-39418 Resolves: RHEL-16100, RHEL-16124, RHEL-16139 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-5870 CVE-2023-5868 CVE-2023-5869 CVE-2023-39417 CVE-2023-39418 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9:3:appstream_base cpe:/a:oracle:linux:9:2:appstream_patch Oracle Linux 8 [10.23-3.0.1] - Resolves: CVE-2023-5869 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-5869 cpe:/a:oracle:linux:8::appstream Oracle Linux 9 [1.22.1-2] - Patch CVE-2023-44429: AV1 codec parser heap-based buffer overflow - Patch CVE-2023-44446: MXF demuxer use-after-free - Resolves: RHEL-17030, RHEL-17039 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-44446 CVE-2023-44429 cpe:/a:oracle:linux:9::appstream cpe:/a:oracle:linux:9::codeready_builder Oracle Linux 8 [0.7-21.1] - Fix CVE-2021-3468 (#1939614) - Fix CVE-2023-38469 (#2191687) - Fix CVE-2023-38470 (#2191694) - Fix CVE-2023-38471 (#2191690) - Fix CVE-2023-38472 (#2191692) - Fix CVE-2023-38473 (#2191691) MODERATE Copyright 2023 Oracle, Inc. CVE-2023-38469 CVE-2023-38472 CVE-2023-38470 CVE-2021-3468 CVE-2023-38471 CVE-2023-38473 cpe:/o:oracle:linux:8::baseos_latest cpe:/a:oracle:linux:8::appstream cpe:/o:oracle:linux:8:9:baseos_patch cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 8 [1.16.1-2] - Resolves MXF demuxer use-after-free vulnerability (CVE-2023-44446) IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-44446 cpe:/a:oracle:linux:8::appstream cpe:/a:oracle:linux:8::codeready_builder Oracle Linux 8 [0.20.0-7] - Fix file caching with different offsets (RHEL-4077) - Fix CVE-2023-40660: Potential PIN bypass - Fix CVE-2023-40661: Dynamic analyzers reports in pkcs15init - Fix CVE-2023-5992: Marvin: Side-channel leaks while stripping encryption PKCS#1.5 padding MODERATE Copyright 2023 Oracle, Inc. CVE-2023-40661 CVE-2023-40660 cpe:/o:oracle:linux:8::baseos_latest cpe:/o:oracle:linux:8:9:baseos_patch Oracle Linux 8 [1:1.1.1k-12] - Backport implicit rejection mechanism for RSA PKCS#1 v1.5 to RHEL-8 series (a proper fix for CVE-2020-25659) Resolves: RHEL-17696 [1:1.1.1k-11] - Fix CVE-2023-5678: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow Resolves: RHEL-16538 [1:1.1.1k-10] - Fix CVE-2023-3446: Excessive time spent checking DH keys and parameters Resolves: RHEL-14245 - Fix CVE-2023-3817: Excessive time spent checking DH q parameter value Resolves: RHEL-14239 LOW Copyright 2023 Oracle, Inc. CVE-2023-3446 CVE-2023-3817 CVE-2023-5678 cpe:/o:oracle:linux:8::baseos_latest cpe:/o:oracle:linux:8:9:baseos_patch Oracle Linux 9 [0.23.0-3] - Fix file caching with different offsets (RHEL-4079) - Fix CVE-2023-40660: Potential PIN bypass - Fix CVE-2023-40661: Dynamic analyzers reports in pkcs15init - Fix CVE-2023-4535: Out-of-bounds read in MyEID driver handling encryption using symmetric keys - Fix CVE-2023-5992: Side-channel leaks while stripping encryption PKCS#1.5 padding MODERATE Copyright 2023 Oracle, Inc. CVE-2023-40661 CVE-2023-40660 CVE-2023-4535 cpe:/o:oracle:linux:9:3:baseos_patch cpe:/o:oracle:linux:9::baseos_latest Oracle Linux 8 pgaudit [1.7.0-1] - Update to 1.7.0 - Support postgresql 15 - Related: #2128241 [1.5.0-1] - Update to version 1.5.0 Related: #1855776 pg_repack [1.4.8-1] - Update to version 1.4.8 - Postgresql 15 is supported - Related: #2128241 [1.4.6-4] - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 postgres-decoderbufs postgresql [15.5-1] - Update to upstream version 15.5 - Fixes: CVE-2023-5868 CVE-2023-5869 CVE-2023-5870 CVE-2023-39417 CVE-2023-39418 - Resolves: RHEL-16088 RHEL-16135 RHEL-16137 IMPORTANT Copyright 2023 Oracle, Inc. CVE-2023-5869 CVE-2023-39418 CVE-2023-5868 CVE-2023-5870 CVE-2023-39417 cpe:/a:oracle:linux:8::appstream