# changelog

author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.el8uek]
changelog:
  - RDMA/bnxt_re: Do not add user qps to flushlist (Selvin Xavier)  [Orabug: 31820672]  
  - RDMA/bnxt_re: Update maintainers for Broadcom rdma driver (Devesh Sharma)  [Orabug: 31820672]  
  - RDMA/bnxt_re: Change wr posting logic to accommodate variable wqes (Devesh Sharma)  [Orabug: 31820672]  
  - RDMA/bnxt_re: Add helper data structures (Devesh Sharma)  [Orabug: 31820672]  
  - RDMA/bnxt_re: Pull psn buffer dynamically based on prod (Devesh Sharma)  [Orabug: 31820672]  
  - RDMA/bnxt_re: introduce a function to allocate swq (Devesh Sharma)  [Orabug: 31820672]  
  - RDMA/bnxt_re: introduce wqe mode to select execution path (Devesh Sharma)  [Orabug: 31820672]  
  - RDMA/cm: Protect access to remote_sidr_table (Maor Gottlieb)  [Orabug: 31784883]  
  - RDMA/cm: Fix missing RDMA_CM_EVENT_REJECTED event after receiving REJ message (Leon Romanovsky)  [Orabug: 31784651]  
  - sample-trace-array: Fix sleeping function called from invalid context (Kefeng Wang)  [Orabug: 31712849]  
  - sample-trace-array: Remove trace_array 'sample-instance' (Kefeng Wang)  [Orabug: 31712849]  
  - tracing: Sample module to demonstrate kernel access to Ftrace instances. (Divya Indi)  [Orabug: 31712849]  
  - tracing: Adding new functions for kernel access to Ftrace instances (Aruna Ramakrishna)  [Orabug: 31712849]  
  - tracing: Adding NULL checks for trace_array descriptor pointer (Divya Indi)  [Orabug: 31712849]  
  - tracing: Verify if trace array exists before destroying it. (Divya Indi)  [Orabug: 31712849]  
  - tracing: Declare newly exported APIs in include/linux/trace.h (Divya Indi)  [Orabug: 31712849]  
  - sched/core: cleanup kABI for struct rq (chris hyser)  [Orabug: 31776423]  
  - Revert "scsi: qla2xxx: Disable T10-DIF feature with FC-NVMe during probe" (Quinn Tran)  [Orabug: 31798223]  
  - Revert "scsi: qla2xxx: Fix crash on qla2x00_mailbox_command" (Saurav Kashyap)  [Orabug: 31798223]  
  - scsi: qla2xxx: Fix null pointer access during disconnect from subsystem (Quinn Tran)  [Orabug: 31798223]  
  - scsi: qla2xxx: Check if FW supports MQ before enabling (Saurav Kashyap)  [Orabug: 31798223]  
  - scsi: qla2xxx: Fix WARN_ON in qla_nvme_register_hba (Arun Easi)  [Orabug: 31798223]  
  - scsi: qla2xxx: Allow ql2xextended_error_logging special value 1 to be set anytime (Arun Easi)  [Orabug: 31798223]  
  - scsi: qla2xxx: Reduce noisy debug message (Quinn Tran)  [Orabug: 31798223]  
  - scsi: qla2xxx: Fix login timeout (Quinn Tran)  [Orabug: 31798223]  
  - scsi: qla2xxx: Indicate correct supported speeds for Mezz card (Quinn Tran)  [Orabug: 31798223]  
  - scsi: qla2xxx: Flush I/O on zone disable (Quinn Tran)  [Orabug: 31798223]  
  - scsi: qla2xxx: Flush all sessions on zone disable (Quinn Tran)  [Orabug: 31798223]  
  - scsi: qla2xxx: Use MBX_TOV_SECONDS for mailbox command timeout values (Enzo Matsumiya)  [Orabug: 31798223]  
  - rename kABI whitelists to lockedlists (Dan Duval)  [Orabug: 31783145]  
  - x86/vmlinux: Restore "text" Program Header with dummy section (Kees Cook)  [Orabug: 31781680]  
  - bnxt: don't enable NAPI until rings are ready (Jakub Kicinski)  [Orabug: 31541567]  
  - bnxt_en: Setup default RSS map in all scenarios. (Michael Chan)  [Orabug: 31541567]  
  - bnxt_en: init RSS table for Minimal-Static VF reservation (Edwin Peer)  [Orabug: 31541567]  
  - bnxt_en: fix HWRM error when querying VF temperature (Edwin Peer)  [Orabug: 31541567]  
  - bnxt_en: Fix possible crash in bnxt_fw_reset_task(). (Michael Chan)  [Orabug: 31541567]  
  - bnxt_en: Fix PCI AER error recovery flow (Vasundhara Volam)  [Orabug: 31541567]  
  - bnxt_en: Fix ethtool -S statitics with XDP or TCs enabled. (Michael Chan)  [Orabug: 31541567]  
  - bnxt_en: Check for zero dir entries in NVRAM. (Vasundhara Volam)  [Orabug: 31541567]  
  - bnxt_en: Don't query FW when netif_running() is false. (Pavan Chebbi)  [Orabug: 31541567]  
  - bnxt_en: Remove superfluous memset() (Li Heng)  [Orabug: 31541567]  
  - bnxt_en: Add support for 'ethtool -d' (Vasundhara Volam)  [Orabug: 31541567]  
  - bnxt_en: Switch over to use the 64-bit software accumulated counters. (Michael Chan)  [Orabug: 31541567]  
  - bnxt_en: Accumulate all counters. (Michael Chan)  [Orabug: 31541567]  
  - bnxt_en: Retrieve hardware masks for port counters. (Michael Chan)  [Orabug: 31541567]  
  - bnxt_en: Retrieve hardware counter masks from firmware if available. (Michael Chan)  [Orabug: 31541567]  
  - bnxt_en: Allocate additional memory for all statistics blocks. (Michael Chan)  [Orabug: 31541567]  
  - bnxt_en: Refactor statistics code and structures. (Michael Chan)  [Orabug: 31541567]  
  - bnxt_en: Use macros to define port statistics size and offset. (Michael Chan)  [Orabug: 31541567]  
  - bnxt_en: Update firmware interface to 1.10.1.54. (Michael Chan)  [Orabug: 31541567]  
  - bnxt_en: Remove PCIe non-counters from ethtool statistics (Vasundhara Volam)  [Orabug: 31541567]  
  - bnxt_en: Init ethtool link settings after reading updated PHY configuration. (Vasundhara Volam)  [Orabug: 31541567]  
  - bnxt_en: Fix AER reset logic on 57500 chips. (Michael Chan)  [Orabug: 31541567]  
  - bnxt_en: Re-enable SRIOV during resume. (Michael Chan)  [Orabug: 31541567]  
  - bnxt_en: Simplify bnxt_resume(). (Michael Chan)  [Orabug: 31541567]  
  - bnxt_en: Fix return code to "flash_device". (Vasundhara Volam)  [Orabug: 31541567]  
  - bnxt_en: Call devlink_port_type_clear() in remove() (Vasundhara Volam)  [Orabug: 31541567]  
  - bnxt_en: Return -EAGAIN if fw command returns BUSY (Vasundhara Volam)  [Orabug: 31541567]  
  - bnxt_en: Register devlink irrespective of firmware spec version (Vasundhara Volam)  [Orabug: 31541567]  
  - bnxt_en: Refactor bnxt_dl_register() (Vasundhara Volam)  [Orabug: 31541567]  
  - bnxt_en: Improve bnxt_probe_phy(). (Michael Chan)  [Orabug: 31541567]  
  - rcu: Upgrade rcu_swap_protected() to rcu_replace_pointer() (Paul E. McKenney)  [Orabug: 31474973]  
  - nvme: explicitly update mpath disk capacity on revalidation (Anthony Iliopoulos)  [Orabug: 31474973]  
  - nvme: fix possible deadlock when I/O is blocked (Sagi Grimberg)  [Orabug: 31474973]  
  - nvmet: fail outstanding host posted AEN req (Chaitanya Kulkarni)  [Orabug: 31474973]  
  - nvmet: cleanups the loop in nvmet_async_events_process (David Milburn)  [Orabug: 31474973]  
  - nvme-fc: don't call nvme_cleanup_cmd() for AENs (Daniel Wagner)  [Orabug: 31474973]  
  - nvmet: fix memory leak when removing namespaces and controllers concurrently (Sagi Grimberg)  [Orabug: 31474973]  
  - nvme-pci: make sure write/poll_queues less or equal then cpu count (Weiping Zhang)  [Orabug: 31474973]  
  - nvme-fc: avoid gcc-10 zero-length-bounds warning (Arnd Bergmann)  [Orabug: 31474973]  
  - nvme-pci: avoid race between nvme_reap_pending_cqes() and nvme_poll() (Dongli Zhang)  [Orabug: 31474973]  
  - nvme-pci: dma read memory barrier for completions (Keith Busch)  [Orabug: 31474973]  
  - nvme-pci: fix "slimmer CQ head update" (Alexey Dobriyan)  [Orabug: 31474973]  
  - nvmet-rdma: fix double free of rdma queue (Israel Rukshin)  [Orabug: 31474973]  
  - nvmet-rdma: fix bonding failover possible NULL deref (Sagi Grimberg)  [Orabug: 31474973]  
  - nvmet: fix NULL dereference when removing a referral (Sagi Grimberg)  [Orabug: 31474973]  
  - nvme: inherit stable pages constraint in the mpath stack device (Sagi Grimberg)  [Orabug: 31474973]  
  - nvme-tcp: fix possible crash in recv error flow (Sagi Grimberg)  [Orabug: 31474973]  
  - nvme-tcp: don't poll a non-live queue (Sagi Grimberg)  [Orabug: 31474973]  
  - nvmet-fc: fix typo in comment (James Smart)  [Orabug: 31474973]  
  - nvme-rdma: Replace comma with a semicolon (Israel Rukshin)  [Orabug: 31474973]  
  - nvme-fcloop: fix deallocation of working context (James Smart)  [Orabug: 31474973]  
  - nvme: cleanup namespace identifier reporting in nvme_init_ns_head (Christoph Hellwig)  [Orabug: 31474973]  
  - nvme: rename __nvme_find_ns_head to nvme_find_ns_head (Christoph Hellwig)  [Orabug: 31474973]  
  - nvme-tcp: Add warning on state change failure at nvme_tcp_setup_ctrl (Israel Rukshin)  [Orabug: 31474973]  
  - nvme-rdma: Add warning on state change failure at nvme_rdma_setup_ctrl (Israel Rukshin)  [Orabug: 31474973]  
  - nvme: Fix controller creation races with teardown flow (Israel Rukshin)  [Orabug: 31474973]  
  - nvme: Make nvme_uninit_ctrl symmetric to nvme_init_ctrl (Israel Rukshin)  [Orabug: 31474973]  
  - nvme: Fix ctrl use-after-free during sysfs deletion (Israel Rukshin)  [Orabug: 31474973]  
  - nvme-pci: Re-order nvme_pci_free_ctrl (Israel Rukshin)  [Orabug: 31474973]  
  - nvme: Remove unused return code from nvme_delete_ctrl_sync (Israel Rukshin)  [Orabug: 31474973]  
  - nvme: Use nvme_state_terminal helper (Israel Rukshin)  [Orabug: 31474973]  
  - nvme: release ida resources (Max Gurtovoy)  [Orabug: 31474973]  
  - nvme: Add compat_ioctl handler for NVME_IOCTL_SUBMIT_IO (masahiro31.yamada@kioxia.com)  [Orabug: 31474973]  
  - nvmet-tcp: optimize tcp stack TX when data digest is used (Sagi Grimberg)  [Orabug: 31474973]  
  - nvme-fabrics: Use scnprintf() for avoiding potential buffer overflow (Takashi Iwai)  [Orabug: 31474973]  
  - nvme-multipath: do not reset on unknown status (John Meneghini)  [Orabug: 31474973]  
  - nvmet-rdma: allocate RW ctxs according to mdts (Max Gurtovoy)  [Orabug: 31474973]  
  - nvmet-rdma: Implement get_mdts controller op (Max Gurtovoy)  [Orabug: 31474973]  
  - nvmet: Add get_mdts op for controllers (Max Gurtovoy)  [Orabug: 31474973]  
  - nvme-pci: properly print controller address (Max Gurtovoy)  [Orabug: 31474973]  
  - nvme-tcp: break from io_work loop if recv failed (Sagi Grimberg)  [Orabug: 31474973]  
  - nvme-tcp: move send failure to nvme_tcp_try_send (Sagi Grimberg)  [Orabug: 31474973]  
  - nvme-tcp: optimize queue io_cpu assignment for multiple queue maps (Sagi Grimberg)  [Orabug: 31474973]  
  - nvme-pci: Simplify nvme_poll_irqdisable (Keith Busch)  [Orabug: 31474973]  
  - nvme-pci: Remove two-pass completions (Keith Busch)  [Orabug: 31474973]  
  - nvme-pci: Remove tag from process cq (Keith Busch)  [Orabug: 31474973]  
  - nvme-pci: slimmer CQ head update (Alexey Dobriyan)  [Orabug: 31474973]  
  - nvmet: check ncqr & nsqr for set-features cmd (Amit Engel)  [Orabug: 31474973]  
  - nvme: Check for readiness more quickly, to speed up boot time (Josh Triplett)  [Orabug: 31474973]  
  - nvme: log additional message for controller status (Rupesh Girase)  [Orabug: 31474973]  
  - nvme: code cleanup nvme_identify_ns_desc() (Chaitanya Kulkarni)  [Orabug: 31474973]  
  - nvme: Don't deter users from enabling hwmon support (Jean Delvare)  [Orabug: 31474973]  
  - nvme: expose hostid via sysfs for fabrics controllers (Sagi Grimberg)  [Orabug: 31474973]  
  - nvme: expose hostnqn via sysfs for fabrics controllers (Sagi Grimberg)  [Orabug: 31474973]  
  - nvmet-tcp: set SO_PRIORITY for accepted sockets (Wunderlich, Mark)  [Orabug: 31474973]  
  - nvme-tcp: Set SO_PRIORITY for all host sockets (Wunderlich, Mark)  [Orabug: 31474973]  
  - nvmet: check sscanf value for subsys serial attr (Chaitanya Kulkarni)  [Orabug: 31474973]  
  - nvmet: make ctrl model configurable (Mark Ruijter)  [Orabug: 31474973]  
  - nvmet: make ctrl-id configurable (Chaitanya Kulkarni)  [Orabug: 31474973]  
  - nvmet: configfs code cleanup (Chaitanya Kulkarni)  [Orabug: 31474973]  
  - nvme: remove unused return code from nvme_alloc_ns (Edmund Nadolski)  [Orabug: 31474973]  
  - scsi: lpfc: Update lpfc version to 12.8.0.3 (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix LUN loss after cable pull (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix validation of bsg reply lengths (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix retry of PRLI when status indicates its unsupported (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix oops when unloading driver while running mds diags (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix RSCN timeout due to incorrect gidft counter (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Add missing misc_deregister() for lpfc_init() (Jing Xiangfeng)  [Orabug: 31793335]  
  - scsi: lpfc: Fix no message shown for lpfc_hdw_queue out of range value (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix FCoE speed reporting (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix typo in comment for ULP (Ferruh Yigit)  [Orabug: 31793335]  
  - scsi: lpfc: Add description for lpfc_release_rpi()'s 'ndlpl param (Lee Jones)  [Orabug: 31793335]  
  - scsi: lpfc: Fix a bunch of kerneldoc misdemeanors (Lee Jones)  [Orabug: 31793335]  
  - scsi: lpfc: Add and rename a whole bunch of function parameter descriptions (Lee Jones)  [Orabug: 31793335]  
  - scsi: lpfc: Fix kerneldoc parameter formatting/misnaming/missing issues (Lee Jones)  [Orabug: 31793335]  
  - scsi: lpfc: Fix some function parameter descriptions (Lee Jones)  [Orabug: 31793335]  
  - scsi: lpfc: Ensure variable has the same stipulations as code using it (Lee Jones)  [Orabug: 31793335]  
  - scsi: lpfc: Fix-up formatting/docrot where appropriate (Lee Jones)  [Orabug: 31793335]  
  - scsi: lpfc: Provide description for lpfc_mem_alloc()'s 'align' param (Lee Jones)  [Orabug: 31793335]  
  - scsi: lpfc: Remove unused variable 'pg_addr' (Lee Jones)  [Orabug: 31793335]  
  - scsi: lpfc: NVMe remote port devloss_tmo from lldd (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Quieten some printks (Anton Blanchard)  [Orabug: 31793335]  
  - scsi: lpfc: Fix interrupt assignments when multiple vectors are supported on same CPU (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix inconsistent indenting (Colin Ian King)  [Orabug: 31793335]  
  - scsi: lpfc: Update lpfc version to 12.8.0.2 (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Add blk_io_poll support for latency improvment (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Add support to display if adapter dumps are available (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Allow applications to issue Common Set Features mailbox command (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix language in 0373 message to reflect non-error message (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix kdump hang on PPC (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix shost refcount mismatch when deleting vport (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix stack trace seen while setting rrq active (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix oops due to overrun when reading SLI3 data (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix NVMe rport deregister and registration during ADISC (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix missing MDS functionality (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix unused assignment in lpfc_sli4_bsg_link_diag_test (Dick Kennedy)  [Orabug: 31793335]  
  - lpfc_debugfs: get rid of pointless access_ok() (Al Viro)  [Orabug: 31793335]  
  - scsi: lpfc: Update lpfc version to 12.8.0.1 (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix MDS Diagnostic Enablement definition (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Fix noderef and address space warnings (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Remove unnecessary lockdep_assert_held calls (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Change default queue allocation for reduced memory consumption (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Remove re-binding of nvme rport during registration (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Maintain atomic consistency of queue_claimed flag (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: remove duplicate unloading checks (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Change default SCSI LUN QD to 64 (Dick Kennedy)  [Orabug: 31793335]  
  - scsi: lpfc: Update lpfc version to 12.8.0.0 (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Remove prototype FIPS/DSS options from SLI-3 (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Make debugfs ktime stats generic for NVME and SCSI (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Fix erroneous cpu limit of 128 on I/O statistics (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Fix update of wq consumer index in lpfc_sli4_wq_release (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Fix scsi host template for SLI3 vports (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Fix lpfc overwrite of sg_cnt field in nvmefc_tgt_fcp_req (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Fix lockdep error - register non-static key (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: fix spelling mistake "Notication" -> "Notification" (Colin Ian King)  [Orabug: 31793335]  
  - scsi: lpfc: add RDF registration and Link Integrity FPIN logging (James Smart)  [Orabug: 31793335]  
  - scsi: fc: Update Descriptor definition and add RDF and Link Integrity FPINs (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Copyright updates for 12.6.0.4 patches (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Update lpfc version to 12.6.0.4 (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Clean up hba max_lun_queue_depth checks (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Remove handler for obsolete ELS - Read Port Status (RPS) (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Fix coverity errors in fmdi attribute handling (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Fix compiler warning on frame size (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Fix release of hwq to clear the eq relationship (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Fix registration of ELS type support in fdmi (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Fix RQ buffer leakage when no IOCBs available (James Smart)  [Orabug: 31793335]  
  - scsi: lpfc: Make lpfc_defer_acc_rsp static (YueHaibing)  [Orabug: 31793335]  
  - Linux 5.4.61 (Greg Kroah-Hartman)   
  - KVM: arm64: Only reschedule if MMU_NOTIFIER_RANGE_BLOCKABLE is not set (Will Deacon)   
  - KVM: Pass MMU notifier range flags to kvm_unmap_hva_range() (Will Deacon)   
  - xen: don't reschedule in preemption off sections (Juergen Gross)   
  - mm/hugetlb: fix calculation of adjust_range_if_pmd_sharing_possible (Peter Xu)   
  - do_epoll_ctl(): clean the failure exits up a bit (Al Viro)   
  - epoll: Keep a reference on files added to the check list (Marc Zyngier)   
  - efi: add missed destroy_workqueue when efisubsys_init fails (Li Heng)   
  - powerpc/pseries: Do not initiate shutdown when system is running on UPS (Vasant Hegde)   
  - net: dsa: b53: check for timeout (Tom Rix)   
  - hv_netvsc: Fix the queue_mapping in netvsc_vf_xmit() (Haiyang Zhang)   
  - net: gemini: Fix missing free_netdev() in error path of gemini_ethernet_port_probe() (Wang Hai)   
  - net: ena: Prevent reset after device destruction (Shay Agroskin)   
  - bonding: fix active-backup failover for current ARP slave (Jiri Wiesner)   
  - ARM64: vdso32: Install vdso32 from vdso_install (Stephen Boyd)   
  - afs: Fix NULL deref in afs_dynroot_depopulate() (David Howells)   
  - RDMA/bnxt_re: Do not add user qps to flushlist (Selvin Xavier)   
  - Fix build error when CONFIG_ACPI is not set/enabled: (Randy Dunlap)   
  - efi: avoid error message when booting under Xen (Juergen Gross)   
  - kconfig: qconf: fix signal connection to invalid slots (Masahiro Yamada)   
  - kconfig: qconf: do not limit the pop-up menu to the first row (Masahiro Yamada)   
  - Revert "scsi: qla2xxx: Disable T10-DIF feature with FC-NVMe during probe" (Quinn Tran)   
  - kvm: x86: Toggling CR4.PKE does not load PDPTEs in PAE mode (Jim Mattson)   
  - kvm: x86: Toggling CR4.SMAP does not load PDPTEs in PAE mode (Jim Mattson)   
  - vfio/type1: Add proper error unwind for vfio_iommu_replay() (Alex Williamson)   
  - ASoC: intel: Fix memleak in sst_media_open (Dinghao Liu)   
  - ASoC: msm8916-wcd-analog: fix register Interrupt offset (Srinivas Kandagatla)   
  - s390/ptrace: fix storage key handling (Heiko Carstens)   
  - s390/runtime_instrumentation: fix storage key handling (Heiko Carstens)   
  - bonding: fix a potential double-unregister (Cong Wang)   
  - can: j1939: add rxtimer for multipacket broadcast session (Zhang Changzhong)   
  - can: j1939: abort multipacket broadcast session when timeout occurs (Zhang Changzhong)   
  - can: j1939: cancel rxtimer on multipacket broadcast session complete (Zhang Changzhong)   
  - can: j1939: fix support for multipacket broadcast message (Zhang Changzhong)   
  - bonding: show saner speed for broadcast mode (Jarod Wilson)   
  - net: fec: correct the error path for regulator disable in probe (Fugang Duan)   
  - i40e: Fix crash during removing i40e driver (Grzegorz Szczurek)   
  - i40e: Set RX_ONLY mode for unicast promiscuous on VLAN (Przemyslaw Patynowski)   
  - can: j1939: transport: add j1939_session_skb_find_by_offset() function (Oleksij Rempel)   
  - can: j1939: transport: j1939_simple_recv(): ignore local J1939 messages send not by J1939 stack (Oleksij Rempel)   
  - can: j1939: fix kernel-infoleak in j1939_sk_sock2sockaddr_can() (Eric Dumazet)   
  - bpf: sock_ops sk access may stomp registers when dst_reg = src_reg (John Fastabend)   
  - ASoC: q6routing: add dummy register read/write function (Srinivas Kandagatla)   
  - ASoC: q6afe-dai: mark all widgets registers as SND_SOC_NOPM (Srinivas Kandagatla)   
  - spi: stm32: fixes suspend/resume management (Amelie Delaunay)   
  - netfilter: nf_tables: nft_exthdr: the presence return value should be little-endian (Stephen Suryaputra)   
  - ext4: don't allow overlapping system zones (Jan Kara)   
  - ext4: fix potential negative array index in do_split() (Eric Sandeen)   
  - fs/signalfd.c: fix inconsistent return codes for signalfd4 (Helge Deller)   
  - alpha: fix annotation of io{read,write}{16,32}be() (Luc Van Oostenryck)   
  - xfs: Fix UBSAN null-ptr-deref in xfs_sysfs_init (Eiichi Tsukata)   
  - tools/testing/selftests/cgroup/cgroup_util.c: cg_read_strcmp: fix null pointer dereference (Gaurav Singh)   
  - media: camss: fix memory leaks on error handling paths in probe (Evgeny Novikov)   
  - virtio_ring: Avoid loop when vq is broken in virtqueue_poll (Mao Wenan)   
  - scsi: libfc: Free skb in fc_disc_gpn_id_resp() for valid cases (Javed Hasan)   
  - cpufreq: intel_pstate: Fix cpuinfo_max_freq when MSR_TURBO_RATIO_LIMIT is 0 (Srinivas Pandruvada)   
  - swiotlb-xen: use vmalloc_to_page on vmalloc virt addresses (Boris Ostrovsky)   
  - ceph: fix use-after-free for fsc->mdsc (Xiubo Li)   
  - jffs2: fix UAF problem (Zhe Li)   
  - drm/ttm: fix offset in VMAs with a pg_offs in ttm_bo_vm_access (Felix Kuehling)   
  - xfs: fix inode quota reservation checks (Darrick J. Wong)   
  - svcrdma: Fix another Receive buffer leak (Chuck Lever)   
  - m68knommu: fix overwriting of bits in ColdFire V3 cache control (Greg Ungerer)   
  - MIPS: Fix unable to reserve memory for Crash kernel (Jinyang He)   
  - Input: psmouse - add a newline when printing 'proto' by sysfs (Xiongfeng Wang)   
  - media: vpss: clean up resources in init (Evgeny Novikov)   
  - rtc: goldfish: Enable interrupt in set_alarm() when necessary (Huacai Chen)   
  - media: budget-core: Improve exception handling in budget_register() (Chuhong Yuan)   
  - scsi: target: tcmu: Fix crash in tcmu_flush_dcache_range on ARM (Bodo Stroesser)   
  - scsi: ufs: Add DELAY_BEFORE_LPM quirk for Micron devices (Stanley Chu)   
  - opp: Enable resources again if they were disabled earlier (Rajendra Nayak)   
  - kthread: Do not preempt current task if it is going to call schedule() (Liang Chen)   
  - drm/amd/display: fix pow() crashing when given base 0 (Krunoslav Kovac)   
  - drm/amd/display: Fix EDID parsing after resume from suspend (Stylon Wang)   
  - drm/amdgpu/display: use GFP_ATOMIC in dcn20_validate_bandwidth_internal (Daniel Kolesa)   
  - scsi: zfcp: Fix use-after-free in request timeout handlers (Steffen Maier)   
  - jbd2: add the missing unlock_buffer() in the error path of jbd2_write_superblock() (zhangyi (F))   
  - ext4: fix checking of directory entry validity for inline directories (Jan Kara)   
  - RDMA/hfi1: Correct an interlock issue for TID RDMA WRITE request (Kaike Wan)   
  - mm, page_alloc: fix core hung in free_pcppages_bulk() (Charan Teja Reddy)   
  - mm: include CMA pages in lowmem_reserve at boot (Doug Berger)   
  - uprobes: __replace_page() avoid BUG in munlock_vma_page() (Hugh Dickins)   
  - kernel/relay.c: fix memleak on destroy relay channel (Wei Yongjun)   
  - romfs: fix uninitialized memory leak in romfs_dev_read() (Jann Horn)   
  - spi: Prevent adding devices below an unregistering controller (Lukas Wunner)   
  - can: j1939: socket: j1939_sk_bind(): make sure ml_priv is allocated (Oleksij Rempel)   
  - can: j1939: transport: j1939_session_tx_dat(): fix use-after-free read in j1939_tp_txtimer() (Oleksij Rempel)   
  - ALSA: hda/realtek: Add quirk for Samsung Galaxy Book Ion (Mike Pozulp)   
  - ALSA: hda/realtek: Add quirk for Samsung Galaxy Flex Book (Mike Pozulp)   
  - btrfs: add wrapper for transaction abort predicate (David Sterba)   
  - btrfs: return EROFS for BTRFS_FS_STATE_ERROR cases (Josef Bacik)   
  - btrfs: don't show full path of bind mounts in subvol= (Josef Bacik)   
  - btrfs: export helpers for subvolume name/id resolution (Marcos Paulo de Souza)   
  - bcache: avoid nr_stripes overflow in bcache_device_init() (Coly Li)   
  - khugepaged: adjust VM_BUG_ON_MM() in __khugepaged_enter() (Hugh Dickins)   
  - khugepaged: khugepaged_test_exit() check mmget_still_valid() (Hugh Dickins)   
  - perf probe: Fix memory leakage when the probe point is not found (Masami Hiramatsu)   
  - gfs2: Never call gfs2_block_zero_range with an open transaction (Bob Peterson)   
  - gfs2: Improve mmap write vs. punch_hole consistency (Andreas Gruenbacher)   
  - drm/vgem: Replace opencoded version of drm_gem_dumb_map_offset() (Chris Wilson)   
  - kbuild: support LLVM=1 to switch the default tools to Clang/LLVM (Masahiro Yamada)   
  - kbuild: replace AS=clang with LLVM_IAS=1 (Masahiro Yamada)   
  - kbuild: remove AS variable (Masahiro Yamada)   
  - kbuild: remove PYTHON2 variable (Masahiro Yamada)   
  - x86/boot: kbuild: allow readelf executable to be specified (Dmitry Golovin)   
  - net: wan: wanxl: use $(M68KCC) instead of $(M68KAS) for rebuilding firmware (Masahiro Yamada)   
  - net: wan: wanxl: use allow to pass CROSS_COMPILE_M68k for rebuilding firmware (Masahiro Yamada)   
  - Documentation/llvm: fix the name of llvm-size (Fangrui Song)   
  - Documentation/llvm: add documentation on building w/ Clang/LLVM (Nick Desaulniers)


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.100.1.el8uek]
changelog:
  - nvme: multipath: round-robin: eliminate "fallback" variable (Martin Wilck)  [Orabug: 31821390]  
  - nvme: multipath: round-robin: fix single non-optimized path case (Martin Wilck)  [Orabug: 31821390]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.100.2.el8uek]
changelog:
  - net/packet: fix overflow in tpacket_rcv (Or Cohen)  [Orabug: 31866486]  {CVE-2020-14386} {CVE-2020-14386} 
  - iommu/amd: Use cmpxchg_double() when updating 128-bit IRTE (Suravee Suthikulpanit)  [Orabug: 31849529]  
  - uek-rpm: ol8: config-aarch64: add *_MEMORY_HOTPLUG (Mihai Carabas)  [Orabug: 31848212]  
  - block: better deal with the delayed not supported case in blk_cloned_rq_check_limits (Ritika Srivastava)  [Orabug: 31850340]  
  - block: Return blk_status_t instead of errno codes (Ritika Srivastava)  [Orabug: 31850340]  
  - kvm: ioapic: Restrict lazy EOI update to edge-triggered interrupts (Paolo Bonzini)  [Orabug: 31839184]  
  - virtio_vsock: Fix race condition in virtio_transport_recv_pkt (Jia He)  [Orabug: 31837274]  
  - net: virtio_vsock: Enhance connection semantics (Sebastien Boeuf)  [Orabug: 31837274]  
  - IB/mlx5: Expose RoCE accelerator counters (Avihai Horon)  [Orabug: 31840631]  
  - net/mlx5: Add RoCE accelerator counters (Leon Romanovsky)  [Orabug: 31840631]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.100.3.el8uek]
changelog:
  - xfs: fix boundary test in xfs_attr_shortform_verify (Eric Sandeen)  [Orabug: 31895364]  {CVE-2020-14385} 
  - btrfs: allow btrfs_truncate_block() to fallback to nocow for data space reservation (Qu Wenruo)  [Orabug: 31899351]  
  - btrfs: fix RWF_NOWAIT write not failling when we need to cow (Filipe Manana)  [Orabug: 31899351]  
  - btrfs: Ensure we trim ranges across block group boundary (Qu Wenruo)  [Orabug: 31899340]  
  - btrfs: volumes: Use more straightforward way to calculate map length (Qu Wenruo)  [Orabug: 31899340]  
  - Btrfs: send, fix emission of invalid clone operations within the same file (Filipe Manana)  [Orabug: 31899298]  
  - Btrfs: send, allow clone operations within the same file (Filipe Manana)  [Orabug: 31899298]  
  - mmc: sdhci: Silence MMC warnings (Maxime Ripard)  [Orabug: 31898202]  
  - bcm2835-dma: Add support for per-channel flags (Phil Elwell)  [Orabug: 31898202]  
  - mmc: sdhci-iproc: Fix vmmc regulators on iProc (Phil Elwell)  [Orabug: 31898202]  
  - scsi: core: Register sysfs for SCSI workqueue (Bob Liu)  [Orabug: 31894419]  
  - scsi: iscsi: Change iSCSI workqueue max_active back to 1 (Bob Liu)  [Orabug: 31894419]  
  - scsi: iscsi: Register sysfs for iscsi workqueue (Bob Liu)  [Orabug: 31894419]  
  - mm/hugetlb: fix a race between hugetlb sysctl handlers (Muchun Song)  [Orabug: 31884231]  {CVE-2020-25285} 
  - rbd: require global CAP_SYS_ADMIN for mapping and unmapping (Ilya Dryomov)  [Orabug: 31884150]  {CVE-2020-25284} 
  - padata: fix possible padata_works_lock deadlock (Daniel Jordan)  [Orabug: 31891481]  
  - KVM: x86: minor code refactor and comments fixup around dirty logging (Anthony Yznaga)  [Orabug: 31845163]  
  - KVM: x86: avoid unnecessary rmap walks when creating/moving slots (Anthony Yznaga)  [Orabug: 31845163]  
  - KVM: x86: remove unnecessary rmap walk of read-only memslots (Anthony Yznaga)  [Orabug: 31845163]  
  - scsi: mpt3sas: A small correction in _base_process_reply_queue (Tomas Henzl)  [Orabug: 31902837]  
  - scsi: mpt3sas: Fix sync irqs (Tomas Henzl)  [Orabug: 31902837]  
  - scsi: mpt3sas: Detect tampered Aero and Sea adapters (Sreekanth Reddy)  [Orabug: 31902837]  
  - scsi: mpt3sas: Don't call disable_irq from IRQ poll handler (Tomas Henzl)  [Orabug: 31902837]  
  - scsi: mpt3sas: Remove pci-dma-compat wrapper API (Suraj Upadhyay)  [Orabug: 31902837]  
  - scsi: mpt3sas: Remove superfluous memset() (Li Heng)  [Orabug: 31902837]  
  - scsi: mpt3sas: Update driver version to 35.100.00.00 (Suganath Prabu S)  [Orabug: 31902837]  
  - scsi: mpt3sas: Postprocessing of target and LUN reset (Suganath Prabu S)  [Orabug: 31902837]  
  - scsi: mpt3sas: Add functions to check if any cmd is outstanding on Target and LUN (Suganath Prabu S)  [Orabug: 31902837]  
  - scsi: mpt3sas: Rename and export interrupt mask/unmask functions (Suganath Prabu S)  [Orabug: 31902837]  
  - scsi: mpt3sas: Cancel the running work during host reset (Suganath Prabu S)  [Orabug: 31902837]  
  - scsi: mpt3sas: Dump system registers for debugging (Suganath Prabu S)  [Orabug: 31902837]  
  - scsi: mpt3sas: Memset config_cmds.reply buffer with zeros (Suganath Prabu S)  [Orabug: 31902837]  
  - scsi: mpt3sas: Fix kdoc comments format (Damien Le Moal)  [Orabug: 31902837]  
  - scsi: mpt3sas: Fix set but unused variable (Damien Le Moal)  [Orabug: 31902837]  
  - scsi: mpt3sas: Fix spelling mistake (Flavio Suligoi)  [Orabug: 31902837]


author: Somasundaram Krishnasamy <somasundaram.krishnasamy@oracle.com> [5.4.17-2036.100.4.el8uek]
changelog:
  - xfs: force writes to delalloc regions to unwritten (Darrick J. Wong)  [Orabug: 30787888]  
  - xfs: properly serialise fallocate against AIO+DIO (Dave Chinner)  [Orabug: 31366104]  
  - perf/x86/rapl: Add Ice Lake RAPL support (Thomas Tai)  [Orabug: 31766610]  
  - xfs: attach dquots and reserve quota blocks during unwritten conversion (Darrick J. Wong)  [Orabug: 31785972]  
  - netfilter: ctnetlink: add a range check for l3/l4 protonum (Will McVicker)  [Orabug: 31872853]  {CVE-2020-25211} 
  - net/rds: Extract dest qp num for displaying in rds-info (Praveen Kumar Kannoju)  [Orabug: 31880140]  
  - uek-rpm: streamline 4konly build (Dave Kleikamp)  [Orabug: 31891770]  
  - bnxt: correct warning: unused variable: 'rc' (John Donnelly)  [Orabug: 31907548]  
  - i40e: Correct warning: 'aq_ret' may be used uninitialized, (John Donnelly)  [Orabug: 31907631]  
  - uek-rpm: Add ovmapi.ko to uek6 nano_modules (Joe Jin)  [Orabug: 31908852]  
  - uek-rpm: config: Enable OVM API (Joe Jin)  [Orabug: 31908852]  
  - uek-rpm: Fix kernel-ueknano depmod warnings vhost_iotlb regmap-i2c (Vijayendra Suman)  [Orabug: 31916879]  
  - kprobes: Fix compiler warning for !CONFIG_KPROBES_ON_FTRACE (Muchun Song)  [Orabug: 31920526]  
  - scsi: page warning: 'page' may be used uninitialized. (John Donnelly)  [Orabug: 31920671]  
  - x86/speculation/taa: Add TAA_MITIGATION_IDLE mode (Patrick Colp)  [Orabug: 31921884]  
  - oracleasm: Access d_bdev before dropping inode (Stephen Brennan)  [Orabug: 31927355]  
  - iommu/amd: Restore IRTE.RemapEn bit for amd_iommu_activate_guest_mode (Suravee Suthikulpanit)  [Orabug: 31931368]  
  - iommu/amd: Fix potential @entry null deref (Joao Martins)  [Orabug: 31931368]  
  - iommu/amd: Restore IRTE.RemapEn bit after programming IRTE (Suravee Suthikulpanit)  [Orabug: 31931368]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.100.5.el8uek]
changelog:
  - uek-rpm: Fix integer test for 4k page size module signing (Dave Kleikamp)  [Orabug: 32021114]  
  - uek-rpm/kernel-uek.spec: Sign modules for 4k kernel (Vijay Kumar)  [Orabug: 32021114]  
  - hdlc_ppp: add range checks in ppp_cp_parse_cr() (Dan Carpenter)  [Orabug: 31989185]  {CVE-2020-25643} 
  - dm crypt: add flags to optionally bypass kcryptd workqueues (Ignat Korchagin)  [Orabug: 31998688]  
  - uek-rpm: Create initramfs at postinstall stage also. (Somasundaram Krishnasamy)  [Orabug: 32010302]  
  - geneve: add transport ports in route lookup for geneve (Mark Gray)  [Orabug: 32013938]  {CVE-2020-25645} 
  - nvmet: Disable keep-alive timer when kato is cleared to 0h (Amit Engel)  [Orabug: 31997181]  
  - KVM: nVMX: stop abusing need_vmcs12_to_shadow_sync for eVMCS mapping (Vitaly Kuznetsov)  [Orabug: 31986433]  
  - cpu/hotplug: avoid race between cpuset_hotplug_workfn and later hotplug (Daniel Jordan)  [Orabug: 31985221]  
  - uek-rpm: Update secure boot UEK signing certificates (Brian Maly)  [Orabug: 31979626]  
  - uek-rpm: Add old OL keys to the default .blacklist keyring (Eric Snowberg)  [Orabug: 31961115]  
  - certs: Add ability to preload revocation certs (Eric Snowberg)  [Orabug: 31961115]  
  - certs: Move load_system_certificate_list to a common function (Eric Snowberg)  [Orabug: 31961115]  
  - certs: Add EFI_CERT_X509_GUID support for dbx entries (Eric Snowberg)  [Orabug: 31961115]  {CVE-2020-26541} 
  - bcache: stop setting ->queuedata (Christoph Hellwig)  [Orabug: 30210051]  
  - bcache: pr_info() format clean up in bcache_device_init() (Coly Li)  [Orabug: 30210051]  
  - bcache: use delayed kworker fo asynchronous devices registration (Coly Li)  [Orabug: 30210051]  
  - bcache: check and adjust logical block size for backing devices (Mauricio Faria de Oliveira)  [Orabug: 30210051]  
  - bcache: configure the asynchronous registertion to be experimental (Coly Li)  [Orabug: 30210051]  
  - bcache: asynchronous devices registration (Coly Li)  [Orabug: 30210051]  
  - bcache: Convert pr_<level> uses to a more typical style (Joe Perches)  [Orabug: 30210051]  
  - bcache: remove redundant variables i and n (Colin Ian King)  [Orabug: 30210051]  
  - bcache: remove a duplicate ->make_request_fn assignment (Christoph Hellwig)  [Orabug: 30210051]  
  - bcache: pass the make_request methods to blk_queue_make_request (Christoph Hellwig)  [Orabug: 30210051]  
  - bcache: remove dupplicated declaration from btree.h (Coly Li)  [Orabug: 30210051]  
  - bcache: optimize barrier usage for atomic operations (Coly Li)  [Orabug: 30210051]  
  - bcache: optimize barrier usage for Rmw atomic bitops (Davidlohr Bueso)  [Orabug: 30210051]  
  - bcache: Use scnprintf() for avoiding potential buffer overflow (Takashi Iwai)  [Orabug: 30210051]  
  - bcache: make bch_sectors_dirty_init() to be multithreaded (Coly Li)  [Orabug: 30210051]  
  - bcache: make bch_btree_check() to be multithreaded (Coly Li)  [Orabug: 30210051]  
  - bcache: add bcache_ prefix to btree_root() and btree() macros (Coly Li)  [Orabug: 30210051]  
  - bcache: move macro btree() and btree_root() into btree.h (Coly Li)  [Orabug: 30210051]  
  - bcache: remove macro nr_to_fifo_front() (Coly Li)  [Orabug: 30210051]  
  - bcache: Revert "bcache: shrink btree node cache after bch_btree_check()" (Coly Li)  [Orabug: 30210051]  
  - bcache: check return value of prio_read() (Coly Li)  [Orabug: 30210051]  
  - bcache: reap from tail of c->btree_cache in bch_mca_scan() (Coly Li)  [Orabug: 30210051]  
  - bcache: reap c->btree_cache_freeable from the tail in bch_mca_scan() (Coly Li)  [Orabug: 30210051]  
  - bcache: remove member accessed from struct btree (Coly Li)  [Orabug: 30210051]  
  - bcache: add code comments for state->pool in __btree_sort() (Coly Li)  [Orabug: 30210051]  
  - bcache: use read_cache_page_gfp to read the superblock (Christoph Hellwig)  [Orabug: 30210051]  
  - bcache: store a pointer to the on-disk sb in the cache and cached_dev structures (Christoph Hellwig)  [Orabug: 30210051]  
  - bcache: return a pointer to the on-disk sb from read_super (Christoph Hellwig)  [Orabug: 30210051]  
  - bcache: transfer the sb_page reference to register_{bdev,cache} (Christoph Hellwig)  [Orabug: 30210051]  
  - bcache: use a separate data structure for the on-disk super block (Christoph Hellwig)  [Orabug: 30210051]  
  - bcache: don't export symbols (Christoph Hellwig)  [Orabug: 30210051]  
  - bcache: remove the extra cflags for request.o (Christoph Hellwig)  [Orabug: 30210051]  
  - bcache: add idle_max_writeback_rate sysfs interface (Coly Li)  [Orabug: 30210051]  
  - bcache: add code comments in bch_btree_leaf_dirty() (Coly Li)  [Orabug: 30210051]  
  - bcache: add code comment bch_keylist_pop() and bch_keylist_pop_front() (Coly Li)  [Orabug: 30210051]  
  - bcache: deleted code comments for dead code in bch_data_insert_keys() (Coly Li)  [Orabug: 30210051]  
  - bcache: add more accurate error messages in read_super() (Coly Li)  [Orabug: 30210051]  
  - bcache: fix a lost wake-up problem caused by mca_cannibalize_lock (Guoju Fang)  [Orabug: 30210051]  
  - mstflint_access: Update driver code to v4.15.0-1 from Github (Itay Avraham)  [Orabug: 31965669]  
  - rds/tcp: Enhance stats maintained by rds (Rao Shoaib)  [Orabug: 31933715]  
  - panic: move disabling iommu to after dump_stack() (John Donnelly)  [Orabug: 31916337]  
  - nbd_genl_status: null check for nla_nest_start (Navid Emamdoost)  [Orabug: 31972480]  {CVE-2019-16089} 
  - vgacon: remove software scrollback support (Linus Torvalds)  [Orabug: 31914650]  {CVE-2020-14390} 
  - fbcon: remove soft scrollback code (Linus Torvalds)  [Orabug: 31914650]  {CVE-2020-14390} 
  - net: ethernet: mlx4: Fix memory allocation in mlx4_buddy_init() (Shung-Hsi Yu)  [Orabug: 31907969]  
  - PCI: pciehp: Reduce noisiness on hot removal (Lukas Wunner)  [Orabug: 30512596]  
  - kdump: update Documentation about crashkernel (Chen Zhou)  [Orabug: 31554906]  
  - arm64: kdump: add memory for devices by DT property linux, usable-memory-range (Chen Zhou)  [Orabug: 31554906]  
  - kdump: add threshold for the required memory (Chen Zhou)  [Orabug: 31554906]  
  - arm64: kdump: reimplement crashkernel=X (Chen Zhou)  [Orabug: 31554906]  
  - arm64: kdump: introduce some macroes for crash kernel reservation (Chen Zhou)  [Orabug: 31554906]  
  - x86: kdump: move reserve_crashkernel[_low]() into crash_core.c (Chen Zhou)  [Orabug: 31554906]  
  - x86: kdump: use macro CRASH_ADDR_LOW_MAX in functions reserve_crashkernel[_low]() (Chen Zhou)  [Orabug: 31554906]  
  - x86: kdump: make the lower bound of crash kernel reservation consistent (Chen Zhou)  [Orabug: 31554906]  
  - x86: kdump: move CRASH_ALIGN to 2M (Chen Zhou)  [Orabug: 31554906]  
  - block: allow 'chunk_sectors' to be non-power-of-2 (Mike Snitzer)  [Orabug: 31827023]  
  - block: use lcm_not_zero() when stacking chunk_sectors (Mike Snitzer)  [Orabug: 31827023]  
  - dm: fix comment in dm_process_bio() (Mike Snitzer)  [Orabug: 31827023]  
  - dm: fix bio splitting and its bio completion order for regular IO (Mike Snitzer)  [Orabug: 31827023]  
  - block: allow for_each_bvec to support zero len bvec (Ming Lei)  [Orabug: 31955136]  {CVE-2020-25641}


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.100.6.1.el8uek]
changelog:
  - powercap: restrict energy meter to root access (Kanth Ghatraju)  [Orabug: 32040802]  {CVE-2020-8694} {CVE-2020-8695} 
  - KVM: ioapic: break infinite recursion on lazy EOI (Vitaly Kuznetsov)  [Orabug: 32066585]  {CVE-2020-27152} {CVE-2020-27152} 
  - x86/mitigations: Restore paranoid checks for int3 handling (Boris Ostrovsky)  [Orabug: 31999339]  
  - x86/jump_label: Patch one site at a time (Boris Ostrovsky)  [Orabug: 31999339]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.100.6.el8uek]
changelog:
  - KVM: ioapic: break infinite recursion on lazy EOI (Vitaly Kuznetsov)  [Orabug: 32066585]  {CVE-2020-27152} {CVE-2020-27152} 
  - x86/mitigations: Restore paranoid checks for int3 handling (Boris Ostrovsky)  [Orabug: 31999339]  
  - x86/jump_label: Patch one site at a time (Boris Ostrovsky)  [Orabug: 31999339]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.101.0.el8uek]
changelog:
  - hv_utils: drain the timesync packets on onchannelcallback (Vineeth Pillai)  [Orabug: 32152142]  
  - hv_utils: return error if host timesysnc update is stale (Vineeth Pillai)  [Orabug: 32152142]  
  - x86/cpu/intel: enable X86_FEATURE_NT_GOOD on Intel Icelakex (Ankur Arora)  [Orabug: 32143850]  
  - x86/cpu/amd: enable X86_FEATURE_NT_GOOD on AMD Zen (Ankur Arora)  [Orabug: 32143850]  
  - x86/cpu/intel: enable X86_FEATURE_NT_GOOD on Intel Broadwellx (Ankur Arora)  [Orabug: 32143850]  
  - mm, clear_huge_page: use clear_page_uncached() for gigantic pages (Ankur Arora)  [Orabug: 32143850]  
  - x86/clear_page: add clear_page_uncached() (Ankur Arora)  [Orabug: 32143850]  
  - x86/asm: add clear_page_nt() (Ankur Arora)  [Orabug: 32143850]  
  - perf bench: add memset_movnti() (Ankur Arora)  [Orabug: 32143850]  
  - x86/asm: add memset_movnti() (Ankur Arora)  [Orabug: 32143850]  
  - x86/cpuid: add X86_FEATURE_NT_GOOD (Ankur Arora)  [Orabug: 32143850]  
  - kernel: add panic_on_taint (Rafael Aquini)  [Orabug: 32137996]  
  - cifs: handle empty list of targets in cifs_reconnect() (Paulo Alcantara)  [Orabug: 32124750]  
  - cifs: get rid of unused parameter in reconn_setup_dfs_targets() (Paulo Alcantara)  [Orabug: 32124750]  
  - rds/ib: Fix: (rds: Deregister all FRWR mr with free_mr) (Manjunath Patil)  [Orabug: 32113472]  
  - net/rds: Force ARP flush upon RDMA_CM_EVENT_ADDR_CHANGE (Gerd Rausch)  [Orabug: 32095959]  
  - uek-rpm: aarch64: increase CONFIG_NODES_SHIFT from 3 to 6 (Dave Kleikamp)  [Orabug: 32075923]  
  - rds: Restore MR use-once semantics (Håkon Bugge)  [Orabug: 31990092] [Orabug: 32072247]  
  - rds: Fix incorrect cmsg status and use-after-free (Håkon Bugge)  [Orabug: 32003078] [Orabug: 32072245]  
  - rds: Force ordering of {set,clear}_bit operating on m_flags (Håkon Bugge)  [Orabug: 31505749] [Orabug: 32072228]  
  - rds: Do not send canceled operations to the transport layer (Håkon Bugge)  [Orabug: 31505749] [Orabug: 32072228]  
  - rds: Introduce rds_conn_to_path helper (Håkon Bugge)  [Orabug: 31505749] [Orabug: 32072228]  
  - Revert "RDS: Drop the connection as part of cancel to avoid hangs" (Håkon Bugge)  [Orabug: 31505749] [Orabug: 32072228]  
  - Revert "rds: fix warning in rds_send_drop_to()" (Håkon Bugge)  [Orabug: 31505749] [Orabug: 32072228]  
  - Revert "rds: Use correct conn when dropping connections due to cancel" (Håkon Bugge)  [Orabug: 31505749] [Orabug: 32072228]  
  - Revert "rds: prevent use-after-free of rds conn in rds_send_drop_to()" (Håkon Bugge)  [Orabug: 31505749] [Orabug: 32072228]  
  - Revert "rds: Use bitmap to designate dropped connections" (Håkon Bugge)  [Orabug: 31505749] [Orabug: 32072228]  
  - Revert "UEK6 compiler warning for /net/rds/send.c" (Håkon Bugge)  [Orabug: 31505749] [Orabug: 32072228]  
  - x86/mce/therm_throt: Undo thermal polling properly on CPU offline (Thomas Gleixner)  [Orabug: 32048971]  
  - x86/mce/therm_throt: Do not access uninitialized therm_work (Chuansheng Liu)  [Orabug: 32048971]  
  - x86/mce/therm_throt: Mark throttle_active_work() as __maybe_unused (Arnd Bergmann)  [Orabug: 32048971]  
  - x86/mce/therm_throt: Mask out read-only and reserved MSR bits (Srinivas Pandruvada)  [Orabug: 32048971]  
  - x86/mce/therm_throt: Optimize notifications of thermal throttle (Srinivas Pandruvada)  [Orabug: 32048971]  
  - ocfs2: fix remounting needed after setfacl command (Gang He)  [Orabug: 32042684]  
  - IB/mlx4: disable CQ time stamping (aru kolappan)  [Orabug: 32042517]  
  - net/rds: Refactor sendmsg ancillary data processing (Ka-Cheong Poon)  [Orabug: 32027845]  
  - Bluetooth: A2MP: Fix not initializing all members (Luiz Augusto von Dentz)  [Orabug: 32021285]  {CVE-2020-12352} 
  - ima: Use ima_hash_algo for collision detection in the measurement list (Roberto Sassu)  [Orabug: 31973040]  
  - ima: Calculate and extend PCR with digests in ima_template_entry (Roberto Sassu)  [Orabug: 31973040]  
  - ima: Allocate and initialize tfm for each PCR bank (Roberto Sassu)  [Orabug: 31973040]  
  - ima: Switch to dynamically allocated buffer for template digests (Roberto Sassu)  [Orabug: 31973040]  
  - ima: Store template digest directly in ima_template_entry (Roberto Sassu)  [Orabug: 31973040]  
  - scsi: lpfc: Fix initial FLOGI failure due to BBSCN not supported (James Smart)  [Orabug: 31598148]  
  - net/rds: Check for NULL rds_ibdev in rds_ib_rx() only if rds_ib_srq_enabled (Sharath Srinivasan)  [Orabug: 32113840]  
  - A/A Bonding: Increase number and interval of GARPs sent by rdmaip (Sharath Srinivasan)  [Orabug: 32095766]  
  - powercap: restrict energy meter to root access (Kanth Ghatraju)  [Orabug: 32040802]  {CVE-2020-8694} {CVE-2020-8695}


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.101.1.el8uek]
changelog:
  - uek-rpm: Enable Intel Speed Select Technology interface support (Somasundaram Krishnasamy)  [Orabug: 32161425]  
  - platform/x86: ISST: Increase timeout (Srinivas Pandruvada)  [Orabug: 32161425]  
  - platform/x86: ISST: Fix wrong unregister type (Srinivas Pandruvada)  [Orabug: 32161425]  
  - platform/x86: ISST: Allow additional core-power mailbox commands (Srinivas Pandruvada)  [Orabug: 32161425]  
  - IB/mlx4: Convert rej_tmout radix-tree to XArray (Håkon Bugge)  [Orabug: 32136895]  
  - IB/mlx4: Adjust delayed work when a dup is observed (Håkon Bugge)  [Orabug: 32136895]  
  - IB/mlx4: Add support for REJ due to timeout (Håkon Bugge)  [Orabug: 32136895]  
  - IB/mlx4: Fix starvation in paravirt mux/demux (Håkon Bugge)  [Orabug: 32136895]  
  - IB/mlx4: Separate tunnel and wire bufs parameters (Håkon Bugge)  [Orabug: 32136895]  
  - IB/mlx4: Add support for MRA (Håkon Bugge)  [Orabug: 32136895]  
  - IB/mlx4: Add and improve logging (Håkon Bugge)  [Orabug: 32136895]  
  - perf/core: Fix a memory leak in perf_event_parse_addr_filter() (kiyin(尹亮))  [Orabug: 32131172]  {CVE-2020-25704} 
  - vt: keyboard, extend func_buf_lock to readers (Jiri Slaby)  [Orabug: 32122948]  {CVE-2020-25656} {CVE-2020-25656} 
  - vt: keyboard, simplify vt_kdgkbsent (Jiri Slaby)  [Orabug: 32122948]  {CVE-2020-25656} 
  - tty: make FONTX ioctl use the tty pointer they were actually passed (Linus Torvalds)  [Orabug: 32122725]  {CVE-2020-25668} 
  - NFSv4.2: Fix NFS4ERR_STALE error when doing inter server copy (Dai Ngo)  [Orabug: 31879682]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.101.2.el8uek]
changelog:
  - vt: Disable KD_FONT_OP_COPY (Daniel Vetter)  [Orabug: 32187738]  {CVE-2020-28974} 
  - page_frag: Recover from memory pressure (Dongli Zhang)  [Orabug: 32177966]  
  - Fonts: Support FONT_EXTRA_WORDS macros for built-in fonts (Peilin Ye)  [Orabug: 32176254]  {CVE-2020-28915} 
  - fbdev, newport_con: Move FONT_EXTRA_WORDS macros into linux/font.h (Peilin Ye)  [Orabug: 32176254]  {CVE-2020-28915} 
  - ocfs2: initialize ip_next_orphan (Wengang Wang)  [Orabug: 32159053]  
  - net/rds: rds_ib_remove_one() accesses freed memory (Ka-Cheong Poon)  [Orabug: 32213896]  
  - hv_netvsc: make recording RSS hash depend on feature flag (Stephen Hemminger)  [Orabug: 32159973]  
  - hv_netvsc: record hardware hash in skb (Stephen Hemminger)  [Orabug: 32159973]  
  - RDMA/umem: Move to allocate SG table from pages (Maor Gottlieb)  [Orabug: 32005752]  
  - lib/scatterlist: Add support in dynamic allocation of SG table from pages (Maor Gottlieb)  [Orabug: 32005752]  
  - arm64:uek/config: Enable ZONE_DMA config (Vijay Kumar)  [Orabug: 31970521]  
  - Revert "arm64/dts: Serial console fix for RPi4" (Vijay Kumar)  [Orabug: 31970521]  
  - uek-rpm: aarch64: enable CONFIG_ACPI_APEI_EINJ (Dave Kleikamp)  [Orabug: 32182237]  
  - NFSD: fix missing refcount in nfsd4_copy by nfsd4_do_async_copy (Dai Ngo)  [Orabug: 32177992]  
  - NFSD: Fix use-after-free warning when doing inter-server copy (Dai Ngo)  [Orabug: 32177992]  
  - xen/events: block rogue events for some time (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673} 
  - xen/events: defer eoi in case of excessive number of events (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673} 
  - xen/events: use a common cpu hotplug hook for event channels (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673} 
  - xen/events: switch user event channels to lateeoi model (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673} 
  - xen/pciback: use lateeoi irq binding (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673} 
  - xen/pvcallsback: use lateeoi irq binding (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673} 
  - xen/scsiback: use lateeoi irq binding (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673} 
  - xen/netback: use lateeoi irq binding (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673} 
  - xen/blkback: use lateeoi irq binding (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673} 
  - xen/events: add a new "late EOI" evtchn framework (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673} 
  - xen/events: fix race in evtchn_fifo_unmask() (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673} 
  - xen/events: add a proper barrier to 2-level uevent unmasking (Juergen Gross)  [Orabug: 32177535]  {CVE-2020-27673} 
  - xen/events: avoid removing an event channel while handling it (Juergen Gross)  [Orabug: 32177543]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.102.0.el8uek]
changelog:
  - futex: Fix inode life-time issue (Peter Zijlstra)  [Orabug: 32233515]  {CVE-2020-14381} 
  - perf/core: Fix race in the perf_mmap_close() function (Jiri Olsa)  [Orabug: 32233352]  {CVE-2020-14351} 
  - intel_idle: Customize IceLake server support (Chen Yu)  [Orabug: 32218858]  
  - dm crypt: Allow unaligned bio buffer lengths for skcipher devices (Sudhakar Panneerselvam)  [Orabug: 32210418]  
  - vhost scsi: fix lun reset completion handling (Mike Christie)  [Orabug: 32167069]  
  - vhost scsi: Add support for LUN resets. (Mike Christie)  [Orabug: 32167069]  
  - vhost scsi: add lun parser helper (Mike Christie)  [Orabug: 32167069]  
  - vhost scsi: fix cmd completion race (Mike Christie)  [Orabug: 32167069]  
  - vhost scsi: alloc cmds per vq instead of session (Mike Christie)  [Orabug: 32167069]  
  - vhost: Create accessors for virtqueues private_data (Eugenio Pérez)  [Orabug: 32167069]  
  - vhost: add helper to check if a vq has been setup (Mike Christie)  [Orabug: 32167069]  
  - scsi: sd: Allow user to configure command retries (Mike Christie)  [Orabug: 32167069]  
  - scsi: core: Add limitless cmd retry support (Mike Christie)  [Orabug: 32167069]  
  - scsi: mpt3sas: Update driver version to 36.100.00.00 (Suganath Prabu S)  [Orabug: 32242279]  
  - scsi: mpt3sas: Handle trigger page after firmware update (Suganath Prabu S)  [Orabug: 32242279]  
  - scsi: mpt3sas: Add persistent MPI trigger page (Suganath Prabu S)  [Orabug: 32242279]  
  - scsi: mpt3sas: Add persistent SCSI sense trigger page (Suganath Prabu S)  [Orabug: 32242279]  
  - scsi: mpt3sas: Add persistent Event trigger page (Suganath Prabu S)  [Orabug: 32242279]  
  - scsi: mpt3sas: Add persistent Master trigger page (Suganath Prabu S)  [Orabug: 32242279]  
  - scsi: mpt3sas: Add persistent trigger pages support (Suganath Prabu S)  [Orabug: 32242279]  
  - scsi: mpt3sas: Sync time periodically between driver and firmware (Suganath Prabu S)  [Orabug: 32242279]  
  - scsi: mpt3sas: Bump driver version to 35.101.00.00 (Sreekanth Reddy)  [Orabug: 32242279]  
  - scsi: mpt3sas: Add module parameter multipath_on_hba (Sreekanth Reddy)  [Orabug: 32242279]  
  - scsi: mpt3sas: Handle vSES vphy object during HBA reset (Sreekanth Reddy)  [Orabug: 32242279]  
  - scsi: mpt3sas: Add bypass_dirty_port_flag parameter (Sreekanth Reddy)  [Orabug: 32242279]  
  - scsi: mpt3sas: Handling HBA vSES device (Sreekanth Reddy)  [Orabug: 32242279]  
  - scsi: mpt3sas: Set valid PhysicalPort in SMPPassThrough (Sreekanth Reddy)  [Orabug: 32242279]  
  - scsi: mpt3sas: Update hba_port objects after host reset (Sreekanth Reddy)  [Orabug: 32242279]  
  - scsi: mpt3sas: Get sas_device objects using device's rphy (Sreekanth Reddy)  [Orabug: 32242279]  
  - scsi: mpt3sas: Rename transport_del_phy_from_an_existing_port() (Sreekanth Reddy)  [Orabug: 32242279]  
  - scsi: mpt3sas: Get device objects using sas_address & portID (Sreekanth Reddy)  [Orabug: 32242279]  
  - scsi: mpt3sas: Update hba_port's sas_address & phy_mask (Sreekanth Reddy)  [Orabug: 32242279]  
  - scsi: mpt3sas: Rearrange _scsih_mark_responding_sas_device() (Sreekanth Reddy)  [Orabug: 32242279]  
  - scsi: mpt3sas: Allocate memory for hba_port objects (Sreekanth Reddy)  [Orabug: 32242279]  
  - scsi: mpt3sas: Define hba_port structure (Sreekanth Reddy)  [Orabug: 32242279]  
  - scsi: mpt3sas: Fix ioctl timeout (Suganath Prabu S)  [Orabug: 32242279]  
  - icmp: randomize the global rate limiter (Eric Dumazet)  [Orabug: 32227958]  {CVE-2020-25705} 
  - perf/x86/intel/uncore: Add box_offsets for free-running counters (Kan Liang)  [Orabug: 32020885]  
  - perf/x86/intel/uncore: Factor out __snr_uncore_mmio_init_box (Kan Liang)  [Orabug: 32020885]  
  - perf/x86/intel/uncore: Add Ice Lake server uncore support (Kan Liang)  [Orabug: 32020885]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.102.0.2.el8uek]
changelog:
  - xen-blkback: set ring->xenblkd to NULL after kthread_stop() (Pawel Wieczorkiewicz)  [Orabug: 32260252]  {CVE-2020-29569} 
  - xenbus/xenbus_backend: Disallow pending watch messages (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568} 
  - xen/xenbus: Count pending messages for each watch (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568} 
  - xen/xenbus/xen_bus_type: Support will_handle watch callback (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568} 
  - xen/xenbus: Add 'will_handle' callback support in xenbus_watch_path() (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568} 
  - xen/xenbus: Allow watches discard events before queueing (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568}


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.103.0.el8uek]
changelog:
  - lockd: don't use interval-based rebinding over TCP (Calum Mackay)  [Orabug: 32337715]  
  - tools: update header files in the tools directory (Thomas Tai)  [Orabug: 32321484]  
  - perf: Fix a kABI breakage in perf_event.h (Thomas Tai)  [Orabug: 32321484]  
  - perf/x86: Fix n_metric for cancelled txn (Peter Zijlstra)  [Orabug: 32321484]  
  - perf/x86: Fix n_pair for cancelled txn (Peter Zijlstra)  [Orabug: 32321484]  
  - perf/x86/intel: Check perf metrics feature for each CPU (Kan Liang)  [Orabug: 32321484]  
  - perf/x86/intel: Support per-thread RDPMC TopDown metrics (Kan Liang)  [Orabug: 32321484]  
  - perf/x86/intel: Support TopDown metrics on Ice Lake (Kan Liang)  [Orabug: 32321484]  
  - perf/x86: Use event_base_rdpmc for the RDPMC userspace support (Kan Liang)  [Orabug: 32321484]  
  - perf/x86: Add a macro for RDPMC offset of fixed counters (Kan Liang)  [Orabug: 32321484]  
  - perf/x86/intel: Generic support for hardware TopDown metrics (Kan Liang)  [Orabug: 32321484]  
  - perf/core: Add a new PERF_EV_CAP_SIBLING event capability (Kan Liang)  [Orabug: 32321484]  
  - perf/core: Unify {pinned,flexible}_sched_in() (Peter Zijlstra)  [Orabug: 32321484]  
  - perf/x86/intel: Use switch in intel_pmu_disable/enable_event (Kan Liang)  [Orabug: 32321484]  
  - perf/x86: Keep LBR records unchanged in host context for guest usage (Like Xu)  [Orabug: 32321484]  
  - perf/x86/intel: Fix the name of perf METRICS (Kan Liang)  [Orabug: 32321484]  
  - perf/x86/intel: Move BTS index to 47 (Kan Liang)  [Orabug: 32321484]  
  - perf/x86/intel: Introduce the fourth fixed counter (Kan Liang)  [Orabug: 32321484]  
  - perf/x86/intel: Name the global status bit in NMI handler (Kan Liang)  [Orabug: 32321484]  
  - perf/x86: Add constraint to create guest LBR event without hw counter (Like Xu)  [Orabug: 32321484]  
  - perf/x86/lbr: Add interface to get LBR information (Like Xu)  [Orabug: 32321484]  
  - perf/x86/core: Refactor hw->idx checks and cleanup (Like Xu)  [Orabug: 32321484]  
  - perf/x86/intel: Avoid unnecessary PEBS_ENABLE MSR access in PMI (Kan Liang)  [Orabug: 32321484]  
  - perf/x86: Provide stubs of KVM helpers for non-Intel CPUs (Sean Christopherson)  [Orabug: 32321484]  
  - partitions/efi: Enable no warning option for the GPT warnings related to alternative header (Saeed Mirzamohammadi)  [Orabug: 32302136]  
  - Revert "cpu/hotplug: avoid race between cpuset_hotplug_workfn and later hotplug" (Daniel Jordan)  [Orabug: 32295229]  
  - cpuset: fix race between hotplug work and later CPU offline (Daniel Jordan)  [Orabug: 32295229]  
  - uek-rpm: aarch64: update PMU configs for Altra (Dave Kleikamp)  [Orabug: 32290034]  
  - driver/perf: Add PMU driver for the ARM DMC-620 memory controller (Tuan Phan)  [Orabug: 32290034]  
  - perf: arm-cmn: Fix conversion specifiers for node type (Will Deacon)  [Orabug: 32290034]  
  - perf: arm-cmn: Fix unsigned comparison to less than zero (Will Deacon)  [Orabug: 32290034]  
  - perf: Add Arm CMN-600 PMU driver (Robin Murphy)  [Orabug: 32290034]  
  - perf: Add Arm CMN-600 DT binding (Robin Murphy)  [Orabug: 32290034]  
  - perf: arm_dsu: Support DSU ACPI devices (Tuan Phan)  [Orabug: 32290034]  
  - arm64: acpi: Make apei_claim_sea() synchronise with APEI's irq work (James Morse)  [Orabug: 32290034]  
  - ACPI: APEI: Kick the memory_failure() queue for synchronous errors (James Morse)  [Orabug: 32290034]  
  - iommu/arm-smmu-v3: Don't reserve implementation defined register space (Jean-Philippe Brucker)  [Orabug: 32290034]  
  - Revert "BACKPORT: perf: Add Arm CMN-600 DT binding" (Dave Kleikamp)  [Orabug: 32290034]  
  - Revert "BACKPORT: WIP: perf: Add Arm CMN-600 PMU driver" (Dave Kleikamp)  [Orabug: 32290034]  
  - Revert "BACKPORT: WIP: perf/arm-cmn: Add ACPI support" (Dave Kleikamp)  [Orabug: 32290034]  
  - Revert "perf: Add ARM DMC-620 PMU driver." (Dave Kleikamp)  [Orabug: 32290034]  
  - Revert "BACKPORT: ACPI / APEI: Kick the memory_failure() queue for synchronous errors" (Dave Kleikamp)  [Orabug: 32290034]  
  - Revert "BACKPORT: arm64: acpi: Make apei_claim_sea() synchronise with APEI's irq work" (Dave Kleikamp)  [Orabug: 32290034]  
  - Revert "Perf: arm-cmn: Allow irq to be shared." (Dave Kleikamp)  [Orabug: 32290034]  
  - Revert "perf: arm_cmn: improve and make it work on 2P." (Dave Kleikamp)  [Orabug: 32290034]  
  - Revert "perf: arm_dsu: Allow IRQ to be shared among devices." (Dave Kleikamp)  [Orabug: 32290034]  
  - Revert "perf: arm_dsu: Support ACPI mode." (Dave Kleikamp)  [Orabug: 32290034]  
  - Revert "perf: arm_dmc620: Update ACPI ID." (Dave Kleikamp)  [Orabug: 32290034]  
  - Revert "perf: avoid breaking KABI by reusing enum" (Dave Kleikamp)  [Orabug: 32290034]  
  - Revert "perf/smmuv3: Allow sharing MMIO registers with the SMMU driver" (Dave Kleikamp)  [Orabug: 32290034]  
  - tty: Fix ->session locking (Jann Horn)  [Orabug: 32266677]  {CVE-2020-29660} 
  - tty: Fix ->pgrp locking in tiocspgrp() (Jann Horn)  [Orabug: 32266677]  {CVE-2020-29660} 
  - xen-blkback: set ring->xenblkd to NULL after kthread_stop() (Pawel Wieczorkiewicz)  [Orabug: 32260252]  {CVE-2020-29569} 
  - xenbus/xenbus_backend: Disallow pending watch messages (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568} 
  - xen/xenbus: Count pending messages for each watch (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568} 
  - xen/xenbus/xen_bus_type: Support will_handle watch callback (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568} 
  - xen/xenbus: Add 'will_handle' callback support in xenbus_watch_path() (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568} 
  - xen/xenbus: Allow watches discard events before queueing (SeongJae Park)  [Orabug: 32253409]  {CVE-2020-29568} 
  - KVM: x86: clflushopt should be treated as a no-op by emulation (David Edmondson)  [Orabug: 32251910]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.103.1.el8uek]
changelog:
  - mwifiex: Fix possible buffer overflows in mwifiex_cmd_802_11_ad_hoc_start (Zhang Xiaohui)  [Orabug: 32349203]  {CVE-2020-36158} 
  - x86/process: Mark cpu inactive before offlining (Mridula Shastry)  [Orabug: 32234812]  
  - add license checking to kABI checker (Dan Duval)  [Orabug: 32355206]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.103.2.el8uek]
changelog:
  - A/A Bonding: Fix a one-byte-off kmalloc (Håkon Bugge)  [Orabug: 32380824]  
  - netfilter: add and use nf_hook_slow_list() (Florian Westphal)  [Orabug: 32372530]  {CVE-2021-20177} 
  - net/rds: Fix gfp_t parameter (Hans Westgaard Ry)  [Orabug: 32372158]  
  - uek-rpm: Report removed symbols also during kabi check (Somasundaram Krishnasamy)  [Orabug: 32380061]  
  - uek-rpm: update kABI lists for new symbol (Dan Duval)  [Orabug: 32378206]  
  - A/A Bonding: Introduce selective interface name inclusion (Håkon Bugge)  [Orabug: 32350974]  
  - uek-rpm: add nfs_ssc to nano_modules (Calum Mackay)  [Orabug: 32346419]  
  - target: fix XCOPY NAA identifier lookup (David Disseldorp)  [Orabug: 32248035]  {CVE-2020-28374}


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.103.3.1.el8uek]
changelog:
  - xen-blkback: fix error handling in xen_blkbk_map() (Jan Beulich)  [Orabug: 32492109]  {CVE-2021-26930} 
  - xen-scsiback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32492101]  {CVE-2021-26931} 
  - xen-netback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32492101]  {CVE-2021-26931} 
  - xen-blkback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32492101]  {CVE-2021-26931} 
  - Xen/gntdev: correct error checking in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32492093]  {CVE-2021-26932} 
  - Xen/gntdev: correct dev_bus_addr handling in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32492093]  {CVE-2021-26932} 
  - Xen/x86: also check kernel mapping in set_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32492093]  {CVE-2021-26932} 
  - Xen/x86: don't bail early from clear_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32492093]  {CVE-2021-26932}


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.104.0.el8uek]
changelog:
  - Revert "rds: Deregister all FRWR mr with free_mr" (aru kolappan)  [Orabug: 32426610]  
  - thermal: intel_pch_thermal: Add PCI ids for Lewisburg PCH. (Andres Freund)  [Orabug: 32424705]  
  - thermal: intel: intel_pch_thermal: Add Cannon Lake Low Power PCH support (Sumeet Pawnikar)  [Orabug: 32424705]  
  - thermal: intel: intel_pch_thermal: Add Comet Lake (CML) platform support (Gayatri Kammela)  [Orabug: 32424705]  
  - nfs: Fix security label length not being reset (Jeffrey Mitchell)  [Orabug: 32350989]  
  - ovl: check permission to open real file (Miklos Szeredi)  [Orabug: 32046372]  {CVE-2020-16120} 
  - ovl: verify permissions in ovl_path_open() (Miklos Szeredi)  [Orabug: 32046372]  {CVE-2020-16120} 
  - ovl: switch to mounter creds in readdir (Miklos Szeredi)  [Orabug: 32046372]  {CVE-2020-16120} 
  - ovl: pass correct flags for opening real directory (Miklos Szeredi)  [Orabug: 32046372]  
  - A/A Bonding: Add synchronized bundle failback (Gerd Rausch)  [Orabug: 32381883]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.104.1.el8uek]
changelog:
  - vhost scsi: alloc vhost_scsi with kvzalloc() to avoid delay (Dongli Zhang)  [Orabug: 32471677]  
  - HID: hid-input: fix stylus battery reporting (Dmitry Torokhov)  [Orabug: 32464784]  {CVE-2020-0431} 
  - nbd: freeze the queue while we're adding connections (Josef Bacik)  [Orabug: 32447285]  {CVE-2021-3348} 
  - futex: Handle faults correctly for PI futexes (Thomas Gleixner)  [Orabug: 32447187]  {CVE-2021-3347} 
  - futex: Simplify fixup_pi_state_owner() (Thomas Gleixner)  [Orabug: 32447187]  {CVE-2021-3347} 
  - futex: Use pi_state_update_owner() in put_pi_state() (Thomas Gleixner)  [Orabug: 32447187]  {CVE-2021-3347} 
  - rtmutex: Remove unused argument from rt_mutex_proxy_unlock() (Thomas Gleixner)  [Orabug: 32447187]  {CVE-2021-3347} 
  - futex: Don't enable IRQs unconditionally in put_pi_state() (Dan Carpenter)  [Orabug: 32447187]  {CVE-2021-3347} 
  - futex: Provide and use pi_state_update_owner() (Thomas Gleixner)  [Orabug: 32447187]  {CVE-2021-3347} 
  - futex: Replace pointless printk in fixup_owner() (Thomas Gleixner)  [Orabug: 32447187]  {CVE-2021-3347} 
  - futex: Ensure the correct return value from futex_lock_pi() (Thomas Gleixner)  [Orabug: 32447187]  {CVE-2021-3347} 
  - uek-rpm: Enable Oracle Pilot BMC module (Eric Snowberg)  [Orabug: 32422662]  
  - hwmon: Add a new Oracle Pilot BMC driver (Eric Snowberg)  [Orabug: 32422662]  
  - arm64: Reserve only 256M on RPi for crashkernel=auto (Vijay Kumar)  [Orabug: 32301026]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.104.2.el8uek]
changelog:
  - tcp: fix to update snd_wl1 in bulk receiver fast path (Neal Cardwell)  [Orabug: 32498822]  
  - selinux: allow reading labels before policy is loaded (Jonathan Lebon)  [Orabug: 32492277]  
  - selinux: allow labeling before policy is loaded (Jonathan Lebon)  [Orabug: 32492277]  
  - KVM: SVM: Initialize prev_ga_tag before use (Suravee Suthikulpanit)  [Orabug: 32478549]  
  - tools/power turbostat: Support additional CPU model numbers (Len Brown)  [Orabug: 32422451]  
  - x86/cpu: Add Lakefield, Alder Lake and Rocket Lake models to the to Intel CPU family (Tony Luck)  [Orabug: 32422451]  
  - x86/cpu: Add Sapphire Rapids CPU model number (Tony Luck)  [Orabug: 32422451]  
  - tools/power turbostat: Support Tiger Lake (Chen Yu)  [Orabug: 32422451]  
  - uek-rpm: config-aarch64: enable MEMORY HOTREMOVE (Mihai Carabas)  [Orabug: 32353851]  
  - arm64/mm/hotplug: Ensure early memory sections are all online (Anshuman Khandual)  [Orabug: 32353851]  
  - arm64/mm/hotplug: Enable MEM_OFFLINE event handling (Anshuman Khandual)  [Orabug: 32353851]  
  - arm64/mm/hotplug: Register boot memory hot remove notifier earlier (Anshuman Khandual)  [Orabug: 32353851]  
  - arm64/mm: Enable memory hot remove (Anshuman Khandual)  [Orabug: 32353851]  
  - arm64/mm: Hold memory hotplug lock while walking for kernel page table dump (Anshuman Khandual)  [Orabug: 32353851]  
  - KVM: arm64: Save/restore sp_el0 as part of __guest_enter (Marc Zyngier)  [Orabug: 32171445]  
  - net/mlx4_en: Handle TX error CQE (Moshe Shemesh)  [Orabug: 32492969]  
  - net/mlx4_en: Avoid scheduling restart task if it is already running (Moshe Shemesh)  [Orabug: 32492969]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.104.3.el8uek]
changelog:
  - config: enable CONFIG_MLX5_MPFS (Brian Maly)  [Orabug: 32249042]  
  - net: Fix bridge enslavement failure (Ido Schimmel)  [Orabug: 32503298]  
  - inet: do not call sublist_rcv on empty list (Florian Westphal)  [Orabug: 32512814]  
  - KVM: arm64: pmu: Don't mark a counter as chained if the odd one is disabled (Eric Auger)  [Orabug: 32499188]  
  - random: wire /dev/random with a DRBG instance (Saeed Mirzamohammadi)  [Orabug: 32522087]  
  - crypto: drbg - always try to free Jitter RNG instance (Stephan Müller)  [Orabug: 32522087]  
  - crypto: drbg - always seeded with SP800-90B compliant noise source (Stephan Müller)  [Orabug: 32522087]  
  - crypto: jitter - SP800-90B compliance (Stephan Müller)  [Orabug: 32522087]  
  - crypto: jitter - add header to fix buildwarnings (Ben Dooks)  [Orabug: 32522087]  
  - crypto: jitter - fix comments (Alexander E. Patrakov)  [Orabug: 32522087]  
  - xen-blkback: fix error handling in xen_blkbk_map() (Jan Beulich)  [Orabug: 32492109]  {CVE-2021-26930} 
  - xen-scsiback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32492101]  {CVE-2021-26931} 
  - xen-netback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32492101]  {CVE-2021-26931} 
  - xen-blkback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32492101]  {CVE-2021-26931} 
  - Xen/gntdev: correct error checking in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32492093]  {CVE-2021-26932} 
  - Xen/gntdev: correct dev_bus_addr handling in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32492093]  {CVE-2021-26932} 
  - Xen/x86: also check kernel mapping in set_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32492093]  {CVE-2021-26932} 
  - Xen/x86: don't bail early from clear_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32492093]  {CVE-2021-26932}


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2036.104.5.el8uek]
changelog:
  - scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech)  [Orabug: 32603379]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech)  [Orabug: 32603379]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - scsi: iscsi: Report connection state in sysfs (Gabriel Krisman Bertazi)  [Orabug: 32603379]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - sysfs: Add sysfs_emit and sysfs_emit_at to format sysfs output (Joe Perches)  [Orabug: 32603379]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - scsi: iscsi: Restrict sessions and handles to admin capabilities (Lee Duncan)  [Orabug: 32603379]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365}


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2102.200.4.el8uek]
changelog:
  - Revert "rds: Deregister all FRWR mr with free_mr" (aru kolappan)  [Orabug: 32426609]  
  - thermal: intel_pch_thermal: Add PCI ids for Lewisburg PCH. (Andres Freund)  [Orabug: 32424704]  
  - thermal: intel: intel_pch_thermal: Add Cannon Lake Low Power PCH support (Sumeet Pawnikar)  [Orabug: 32424704]  
  - thermal: intel: intel_pch_thermal: Add Comet Lake (CML) platform support (Gayatri Kammela)  [Orabug: 32424704]  
  - KVM: x86: Expose AVX512_FP16 for supported CPUID (Cathy Zhang)  [Orabug: 32424461]  
  - x86/kvm: Expose TSX Suspend Load Tracking feature (Cathy Zhang)  [Orabug: 32424461]  
  - x86: Expose SERIALIZE for supported cpuid (Paolo Bonzini)  [Orabug: 32424461]  
  - KVM: x86: Expose fast short REP MOV for supported cpuid (Zhenyu Wang)  [Orabug: 32424461]  
  - KVM: x86: Expose AVX512 VP2INTERSECT in cpuid for TGL (Zhenyu Wang)  [Orabug: 32424461]  
  - tools: update header files in the tools directory (Thomas Tai)  [Orabug: 32424461]  
  - x86: Enumerate AVX512 FP16 CPUID feature flag (Kyung Min Park)  [Orabug: 32424461]  
  - EDAC/i10nm: Add Intel Sapphire Rapids server support (Qiuxu Zhuo)  [Orabug: 32424461]  
  - EDAC/i10nm: Use readl() to access MMIO registers (Qiuxu Zhuo)  [Orabug: 32424461]  
  - EDAC: Add DDR5 new memory type (Qiuxu Zhuo)  [Orabug: 32424461]  
  - EDAC: Add three new memory types (Qiuxu Zhuo)  [Orabug: 32424461]  
  - x86/cpufeatures: Enumerate ENQCMD and ENQCMDS instructions (Fenghua Yu)  [Orabug: 32424461]  
  - x86/cpufeatures: Enumerate TSX suspend load address tracking instructions (Kyung Min Park)  [Orabug: 32424461]  
  - x86/cpufeatures: Add enumeration for SERIALIZE instruction (Ricardo Neri)  [Orabug: 32424461]  
  - x86/split_lock: Enable the split lock feature on Sapphire Rapids and Alder Lake CPUs (Fenghua Yu)  [Orabug: 32424461]  
  - x86/cpu: Add Lakefield, Alder Lake and Rocket Lake models to the to Intel CPU family (Tony Luck)  [Orabug: 32424461]  
  - x86/cpufeatures: Add Architectural LBRs feature bit (Kan Liang)  [Orabug: 32424461]  
  - powercap: intel_rapl: add support for Sapphire Rapids (Zhang Rui)  [Orabug: 32424461]  
  - x86/cpu: Add Sapphire Rapids CPU model number (Tony Luck)  [Orabug: 32424461]  
  - EDAC, {skx,i10nm}: Use CPU stepping macro to pass configurations (Qiuxu Zhuo)  [Orabug: 32424461]  
  - x86/cpu: Add a X86_MATCH_INTEL_FAM6_MODEL_STEPPINGS() macro (Borislav Petkov)  [Orabug: 32424461]  
  - powercap/intel_rapl: Convert to new X86 CPU match macros (Thomas Gleixner)  [Orabug: 32424461]  
  - powercap/intel_rapl: add support for TigerLake Mobile (Zhang Rui)  [Orabug: 32424461]  
  - powercap/intel_rapl: add support for JasperLake (Zhang Rui)  [Orabug: 32424461]  
  - x86/cpufeatures: Add support for fast short REP; MOVSB (Tony Luck)  [Orabug: 32424461]  
  - powercap/intel_rapl: add support for Cometlake desktop (Zhang Rui)  [Orabug: 32424461]  
  - powercap/intel_rapl: add support for CometLake Mobile (Zhang Rui)  [Orabug: 32424461]  
  - crypto: lib/chacha20poly1305 - define empty module exit function (Jason A. Donenfeld)  [Orabug: 32417868]  
  - A/A Bonding: Add synchronized bundle failback (Gerd Rausch)  [Orabug: 32381881]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2102.200.5.el8uek]
changelog:
  - vhost scsi: alloc vhost_scsi with kvzalloc() to avoid delay (Dongli Zhang)  [Orabug: 32471659]  
  - arm64: Reserve only 256M on RPi for crashkernel=auto (Vijay Kumar)  [Orabug: 32454711]  
  - nbd: freeze the queue while we're adding connections (Josef Bacik)  [Orabug: 32447284]  {CVE-2021-3348} 
  - futex: Handle faults correctly for PI futexes (Thomas Gleixner)  [Orabug: 32447185]  {CVE-2021-3347} 
  - futex: Simplify fixup_pi_state_owner() (Thomas Gleixner)  [Orabug: 32447185]  {CVE-2021-3347} 
  - futex: Use pi_state_update_owner() in put_pi_state() (Thomas Gleixner)  [Orabug: 32447185]  {CVE-2021-3347} 
  - rtmutex: Remove unused argument from rt_mutex_proxy_unlock() (Thomas Gleixner)  [Orabug: 32447185]  {CVE-2021-3347} 
  - futex: Provide and use pi_state_update_owner() (Thomas Gleixner)  [Orabug: 32447185]  {CVE-2021-3347} 
  - futex: Replace pointless printk in fixup_owner() (Thomas Gleixner)  [Orabug: 32447185]  {CVE-2021-3347} 
  - futex: Ensure the correct return value from futex_lock_pi() (Thomas Gleixner)  [Orabug: 32447185]  {CVE-2021-3347} 
  - uek-rpm: Enable Oracle Pilot BMC module (Eric Snowberg)  [Orabug: 32422661]  
  - hwmon: Add a new Oracle Pilot BMC driver (Eric Snowberg)  [Orabug: 32422661]  
  - rds: avoid crash on IB conn path shutdown prepare (Alan Maguire)  [Orabug: 32466763]  
  - mm/memcontrol: Increase threshold for draining per-cpu stocked bytes (Imran Khan)  [Orabug: 32314559]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2102.200.6.el8uek]
changelog:
  - selinux: allow reading labels before policy is loaded (Jonathan Lebon)  [Orabug: 32492276]  
  - rds: tracepoints incorrectly reporting valid rds ping as drop (Alan Maguire)  [Orabug: 32490004]  
  - KVM: arm64: Save/restore sp_el0 as part of __guest_enter (Marc Zyngier)  [Orabug: 32488537]  
  - uek-rpm: config-aarch64: enable MEMORY HOTREMOVE (Mihai Carabas)  [Orabug: 32353873]  
  - arm64/mm/hotplug: Ensure early memory sections are all online (Anshuman Khandual)  [Orabug: 32353873]  
  - arm64/mm/hotplug: Enable MEM_OFFLINE event handling (Anshuman Khandual)  [Orabug: 32353873]  
  - arm64/mm/hotplug: Register boot memory hot remove notifier earlier (Anshuman Khandual)  [Orabug: 32353873]  
  - arm64/mm: Enable memory hot remove (Anshuman Khandual)  [Orabug: 32353873]  
  - arm64/mm: Hold memory hotplug lock while walking for kernel page table dump (Anshuman Khandual)  [Orabug: 32353873]  
  - rds: tracepoint-related KASAN: use-after-free Read in rds_send_xmit (Alan Maguire)  [Orabug: 32490030]  
  - inet: do not call sublist_rcv on empty list (Florian Westphal)  [Orabug: 32422895]  
  - net/mlx4_en: Handle TX error CQE (Moshe Shemesh)  [Orabug: 32485133]  
  - net/mlx4_en: Avoid scheduling restart task if it is already running (Moshe Shemesh)  [Orabug: 32485133]  
  - vdpa/mlx5: allow Jumbo MTU config other than standard sized MTU (Si-Wei Liu)  [Orabug: 32480078]  
  - vdpa/mlx5: should exclude header length and fcs from mtu (Si-Wei Liu)  [Orabug: 32480078]  
  - vdpa/mlx5: Fix memory key MTT population (Eli Cohen)  [Orabug: 32480078]  
  - vdpa: Use simpler version of ida allocation (Parav Pandit)  [Orabug: 32480078]  
  - vdpa: Add missing comment for virtqueue count (Parav Pandit)  [Orabug: 32480078]  
  - vdpa/mlx5: Use write memory barrier after updating CQ index (Eli Cohen)  [Orabug: 32480078]  
  - vdpa: remove unnecessary 'default n' in Kconfig entries (Stefano Garzarella)  [Orabug: 32480078]  
  - vhost_vdpa: switch to vmemdup_user() (Tian Tao)  [Orabug: 32480078]  
  - vhost_vdpa: return -EFAULT if copy_to_user() fails (Dan Carpenter)  [Orabug: 32480078]  
  - vdpa: mlx5: fix vdpa/vhost dependencies (Randy Dunlap)  [Orabug: 32480078]  
  - vdpa/mlx5: Setup driver only if VIRTIO_CONFIG_S_DRIVER_OK (Eli Cohen)  [Orabug: 32480078]  
  - vdpa/mlx5: Fix failure to bring link up (Eli Cohen)  [Orabug: 32480078]  
  - vdpa/mlx5: Make use of a specific 16 bit endianness API (Eli Cohen)  [Orabug: 32480078]  
  - vdpasim: fix "mac_pton" undefined error (Laurent Vivier)  [Orabug: 32480078]  
  - vdpasim: allow to assign a MAC address (Laurent Vivier)  [Orabug: 32480078]  
  - vdpasim: fix MAC address configuration (Laurent Vivier)  [Orabug: 32480078]  
  - vdpa: handle irq bypass register failure case (Zhu Lingshan)  [Orabug: 32480078]  
  - vdpa_sim: Fix DMA mask (Laurent Vivier)  [Orabug: 32480078]  
  - vdpa/mlx5: Fix error return in map_direct_mr() (Jing Xiangfeng)  [Orabug: 32480078]  
  - vhost_vdpa: Return -EFAULT if copy_from_user() fails (Dan Carpenter)  [Orabug: 32480078]  
  - vdpa_sim: implement get_iova_range() (Jason Wang)  [Orabug: 32480078]  
  - vhost: vdpa: report iova range (Jason Wang)  [Orabug: 32480078]  
  - vdpa: introduce config op to get valid iova range (Jason Wang)  [Orabug: 32480078]  
  - vhost_vdpa: remove unnecessary spin_lock in vhost_vring_call (Zhu Lingshan)  [Orabug: 32480078]  
  - vhost_vdpa: Fix duplicate included kernel.h (Tian Tao)  [Orabug: 32480078]  
  - rds: CONFIG_RDS_DEBUG + tracepoints breaks rds build (Alan Maguire)  [Orabug: 32442487]  
  - tools/power turbostat: Support additional CPU model numbers (Len Brown)  [Orabug: 32422450]  
  - tools/power turbostat: Support Tiger Lake (Chen Yu)  [Orabug: 32422450]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2102.200.7.el8uek]
changelog:
  - KVM: arm64: pmu: Don't mark a counter as chained if the odd one is disabled (Eric Auger)  [Orabug: 32504832]  
  - xen-blkback: fix error handling in xen_blkbk_map() (Jan Beulich)  [Orabug: 32492108]  {CVE-2021-26930} 
  - xen-scsiback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32492100]  {CVE-2021-26931} 
  - xen-netback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32492100]  {CVE-2021-26931} 
  - xen-blkback: don't "handle" error by BUG() (Jan Beulich)  [Orabug: 32492100]  {CVE-2021-26931} 
  - Xen/gntdev: correct error checking in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32492092]  {CVE-2021-26932} 
  - Xen/gntdev: correct dev_bus_addr handling in gntdev_map_grant_pages() (Jan Beulich)  [Orabug: 32492092]  {CVE-2021-26932} 
  - Xen/x86: also check kernel mapping in set_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32492092]  {CVE-2021-26932} 
  - Xen/x86: don't bail early from clear_foreign_p2m_mapping() (Jan Beulich)  [Orabug: 32492092]  {CVE-2021-26932}


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2102.200.8.el8uek]
changelog:
  - config: enable CONFIG_MLX5_MPFS (Brian Maly)  [Orabug: 32522477]  
  - random: wire /dev/random with a DRBG instance (Saeed Mirzamohammadi)  [Orabug: 32522086]  
  - crypto: drbg - always try to free Jitter RNG instance (Stephan Müller)  [Orabug: 32522086]  
  - crypto: drbg - always seeded with SP800-90B compliant noise source (Stephan Müller)  [Orabug: 32522086]  
  - crypto: jitter - SP800-90B compliance (Stephan Müller)  [Orabug: 32522086]  
  - crypto: jitter - add header to fix buildwarnings (Ben Dooks)  [Orabug: 32522086]  
  - crypto: jitter - fix comments (Alexander E. Patrakov)  [Orabug: 32522086]  
  - Revert "RDMA/umem: Move to allocate SG table from pages" (John Donnelly)  [Orabug: 32481224]  
  - Revert "lib/scatterlist: Add support in dynamic allocation of SG table from pages" (John Donnelly)  [Orabug: 32481224]  
  - Revert "Maintainer: Fix build warning introduced in commit 99b99d76e6732" (John Donnelly)  [Orabug: 32481224]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2102.200.10.el8uek]
changelog:
  - scsi: target: core: Make completion affinity configurable (Mike Christie)  [Orabug: 32403502]  
  - target: flush submission work during TMR processing (Mike Christie)  [Orabug: 32403502]  
  - target iblock: add backend plug/unplug callouts (Mike Christie)  [Orabug: 32403502]  
  - target: fix backend plugging (Mike Christie)  [Orabug: 32403502]  
  - target: cleanup cmd flag bits (Mike Christie)  [Orabug: 32403502]  
  - tcm loop: use lio wq cmd submission helper (Mike Christie)  [Orabug: 32403502]  
  - tcm loop: use blk cmd allocator for se_cmds (Mike Christie)  [Orabug: 32403502]  
  - vhost scsi: use lio wq cmd submission helper (Mike Christie)  [Orabug: 32403502]  
  - target: add workqueue based cmd submission (Mike Christie)  [Orabug: 32403502]  
  - target: add gfp_t arg to target_cmd_init_cdb (Mike Christie)  [Orabug: 32403502]  
  - target: remove target_submit_cmd_map_sgls (Mike Christie)  [Orabug: 32403502]  
  - tcm_fc: Convert to new submission API (Mike Christie)  [Orabug: 32403502]  
  - xen-scsiback: Convert to new submission API (Mike Christie)  [Orabug: 32403502]  
  - vhost-scsi: Convert to new submission API (Mike Christie)  [Orabug: 32403502]  
  - usb gadget: Convert to new submission API (Mike Christie)  [Orabug: 32403502]  
  - sbp_target: Convert to new submission API (Mike Christie)  [Orabug: 32403502]  
  - tcm_loop: Convert to new submission API (Mike Christie)  [Orabug: 32403502]  
  - qla2xxx: Convert to new submission API (Mike Christie)  [Orabug: 32403502]  
  - ibmvscsi_tgt: Convert to new submission API (Mike Christie)  [Orabug: 32403502]  
  - srpt: Convert to new submission API (Mike Christie)  [Orabug: 32403502]  
  - target: break up target_submit_cmd_map_sgls (Mike Christie)  [Orabug: 32403502]  
  - target: rename transport_init_se_cmd (Mike Christie)  [Orabug: 32403502]  
  - target: drop kref_get_unless_zero in target_get_sess_cmd (Mike Christie)  [Orabug: 32403502]  
  - target: move t_task_cdb initialization (Mike Christie)  [Orabug: 32403502]  
  - scsi: tcm_loop: Allow queues, can_queue and cmd_per_lun to be settable (Mike Christie)  [Orabug: 32403502]  
  - scsi: target: Make state_list per CPU (Mike Christie)  [Orabug: 32403502]  
  - scsi: target: Drop sess_cmd_lock from I/O path (Mike Christie)  [Orabug: 32403502]  
  - scsi: qla2xxx: Move sess cmd list/lock to driver (Mike Christie)  [Orabug: 32403502]  
  - scsi: target: Remove TARGET_SCF_LOOKUP_LUN_FROM_TAG (Mike Christie)  [Orabug: 32403502]  
  - scsi: qla2xxx: Drop TARGET_SCF_LOOKUP_LUN_FROM_TAG (Mike Christie)  [Orabug: 32403502]  
  - scsi: target: Fix cmd_count ref leak (Mike Christie)  [Orabug: 32403502]  
  - scsi: target: Fix LUN ref count handling (Mike Christie)  [Orabug: 32403502]  
  - scsi: target: Fix lun lookup for TARGET_SCF_LOOKUP_LUN_FROM_TAG case (Sudhakar Panneerselvam)  [Orabug: 32403502]  
  - scsi: target: Rename target_setup_cmd_from_cdb() to target_cmd_parse_cdb() (Sudhakar Panneerselvam)  [Orabug: 32403502]  
  - scsi: target: Fix NULL pointer dereference (Sudhakar Panneerselvam)  [Orabug: 32403502]  
  - scsi: target: Initialize LUN in transport_init_se_cmd() (Sudhakar Panneerselvam)  [Orabug: 32403502]  
  - scsi: target: Factor out a new helper, target_cmd_init_cdb() (Sudhakar Panneerselvam)  [Orabug: 32403502]  
  - mm: memcontrol: decouple reference counting from page accounting (Johannes Weiner)   
  - uek-rpm: add opbmc to nano-kernel (Eric Snowberg)  [Orabug: 32555675]  
  - rds: rds_drop_egress events should be enabled as part of RDS_RTD_SND (Alan Maguire)  [Orabug: 32587016]  
  - rds: use dedicated rds_send_lock_contention tracepoint instead of drop (Alan Maguire)  [Orabug: 32587016]  
  - rds: ensure saddr/daddr for tracepoints is not NULL (Alan Maguire)  [Orabug: 32580940]  
  - hsr: use netdev_err() instead of WARN_ONCE() (Taehee Yoo)  [Orabug: 32576070]  
  - PCI: hotplug: Add module parameter to allow user control of LEDs (Thomas Tai)  [Orabug: 32556980]  
  - net/rds: increase 1MB MR pool size for RDS (Manjunath Patil)   
  - block/diskstats: accumulate all per-cpu counters in one pass (Konstantin Khlebnikov)  [Orabug: 32531556]  
  - arm64/crash_core: fix TCR_EL1.T1SZ in vmcoreinfo (John Donnelly)  [Orabug: 32559514]  
  - x86/platform/uv: Fix UV4 hub revision adjustment (Mike Travis)  [Orabug: 32527680]  
  - x86/platform/uv: Fix copied UV5 output archtype (Mike Travis)  [Orabug: 32527680]  
  - x86/platform/uv: Drop last traces of uv_flush_tlb_others (Jiri Slaby)  [Orabug: 32527680]  
  - x86/tlb/uv: Add a forward declaration for struct flush_tlb_info (Borislav Petkov)  [Orabug: 32527680]  
  - x86/platform/uv: Recognize UV5 hubless system identifier (Mike Travis)  [Orabug: 32527680]  
  - x86/platform/uv: Remove spaces from OEM IDs (Mike Travis)  [Orabug: 32527680]  
  - x86/platform/uv: Fix missing OEM_TABLE_ID (Mike Travis)  [Orabug: 32527680]  
  - x86/platform/uv: Update Copyrights to conform to HPE standards (Mike Travis)  [Orabug: 32527680]  
  - x86/platform/uv: Update for UV5 NMI MMR changes (Mike Travis)  [Orabug: 32527680]  
  - x86/platform/uv: Update UV5 TSC checking (Mike Travis)  [Orabug: 32527680]  
  - x86/platform/uv: Update node present counting (Mike Travis)  [Orabug: 32527680]  
  - x86/platform/uv: Update UV5 MMR references in UV GRU (Mike Travis)  [Orabug: 32527680]  
  - x86/platform/uv: Adjust GAM MMR references affected by UV5 updates (Mike Travis)  [Orabug: 32527680]  
  - x86/platform/uv: Update MMIOH references based on new UV5 MMRs (Mike Travis)  [Orabug: 32527680]  
  - x86/platform/uv: Add and decode Arch Type in UVsystab (Mike Travis)  [Orabug: 32527680]  
  - x86/platform/uv: Add UV5 direct references (Mike Travis)  [Orabug: 32527680]  
  - x86/platform/uv: Update UV MMRs for UV5 (Mike Travis)  [Orabug: 32527680]  
  - drivers/misc/sgi-xp: Adjust references in UV kernel modules (Mike Travis)  [Orabug: 32527680]  
  - x86/platform/uv: Remove SCIR MMR references for UV systems (Mike Travis)  [Orabug: 32527680]  
  - x86/platform/uv: Remove UV BAU TLB Shootdown Handler (Mike Travis)  [Orabug: 32527680]  
  - x86/apic/uv: Avoid unused variable warning (Arnd Bergmann)  [Orabug: 32527680]  
  - x86/platform/uv: Remove vestigial mention of UV1 platform from bios header (steve.wahl@hpe.com)  [Orabug: 32527680]  
  - x86/platform/uv: Remove support for UV1 platform from uv (steve.wahl@hpe.com)  [Orabug: 32527680]  
  - x86/platform/uv: Remove support for uv1 platform from uv_hub (steve.wahl@hpe.com)  [Orabug: 32527680]  
  - x86/platform/uv: Remove support for UV1 platform from uv_bau (steve.wahl@hpe.com)  [Orabug: 32527680]  
  - x86/platform/uv: Remove support for UV1 platform from uv_mmrs (steve.wahl@hpe.com)  [Orabug: 32527680]  
  - x86/platform/uv: Remove support for UV1 platform from x2apic_uv_x (steve.wahl@hpe.com)  [Orabug: 32527680]  
  - x86/platform/uv: Remove support for UV1 platform from uv_tlb (steve.wahl@hpe.com)  [Orabug: 32527680]  
  - x86/platform/uv: Remove support for UV1 platform from uv_time (steve.wahl@hpe.com)  [Orabug: 32527680]  
  - x86/platform/uv: Remove the unused _uv_cpu_blade_processor_id() macro (Christoph Hellwig)  [Orabug: 32527680]  
  - x86/platform/uv: Unexport uv_apicid_hibits (Christoph Hellwig)  [Orabug: 32527680]  
  - x86/platform/uv: Remove _uv_hub_info_check() (Christoph Hellwig)  [Orabug: 32527680]  
  - x86/platform/uv: Simplify uv_send_IPI_one() (Christoph Hellwig)  [Orabug: 32527680]  
  - x86/platform/uv: Remove the UV*_HUB_IS_SUPPORTED macros (Christoph Hellwig)  [Orabug: 32527680]  
  - x86/platform/uv: Remove the uv_partition_coherence_id() macro (Christoph Hellwig)  [Orabug: 32527680]  
  - x86/apic/uv: Remove code for unused distributed GRU mode (Steve Wahl)  [Orabug: 32527680]  
  - cper,edac,efi: Memory Error Record: bank group/address and chip id (Alex Kluver)  [Orabug: 32526741]  
  - edac,ghes,cper: Add Row Extension to Memory Error Record (Alex Kluver)  [Orabug: 32526741]  
  - perf/x86/intel/uncore: With > 8 nodes, get pci bus die id from NUMA info (Steve Wahl)  [Orabug: 32526200]  
  - perf/x86/intel/uncore: Store the logical die id instead of the physical die id. (Steve Wahl)  [Orabug: 32526200]  
  - perf/x86/intel/uncore: Generic support for the PCI sub driver (Kan Liang)  [Orabug: 32526200]  
  - perf/x86/intel/uncore: Factor out uncore_pci_pmu_unregister() (Kan Liang)  [Orabug: 32526200]  
  - perf/x86/intel/uncore: Factor out uncore_pci_pmu_register() (Kan Liang)  [Orabug: 32526200]  
  - perf/x86/intel/uncore: Factor out uncore_pci_find_dev_pmu() (Kan Liang)  [Orabug: 32526200]  
  - perf/x86/intel/uncore: Factor out uncore_pci_get_dev_die_info() (Kan Liang)  [Orabug: 32526200]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2102.200.11.el8uek]
changelog:
  - mm/vmscan: fix infinite loop in drop_slab_node (Chunxin Zang)  [Orabug: 32620155]  
  - scsi: iscsi: Verify lengths on passthrough PDUs (Chris Leech)  [Orabug: 32603378]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - scsi: iscsi: Ensure sysfs attributes are limited to PAGE_SIZE (Chris Leech)  [Orabug: 32603378]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - scsi: iscsi: Report connection state in sysfs (Gabriel Krisman Bertazi)  [Orabug: 32603378]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - sysfs: Add sysfs_emit and sysfs_emit_at to format sysfs output (Joe Perches)  [Orabug: 32603378]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - scsi: iscsi: Restrict sessions and handles to admin capabilities (Lee Duncan)  [Orabug: 32603378]  {CVE-2021-27363} {CVE-2021-27364} {CVE-2021-27365} 
  - drm/nouveau: bail out of nouveau_channel_new if channel init fails (Frantisek Hrbata)  [Orabug: 32591559]  {CVE-2020-25639} 
  - mm: support memblock alloc on the exact node for sparse_buffer_init() (Yunfeng Ye)  [Orabug: 32613823]  
  - mm/sparse.c: do not waste pre allocated memmap space (Michal Hocko)  [Orabug: 32613823]  
  - mm/sparse: consistently do not zero memmap (Vincent Whitchurch)  [Orabug: 32613823]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2102.200.12.el8uek]
changelog:
  - Revert "x86/platform/uv: Update UV MMRs for UV5" (Jack Vogel)  [Orabug: 32651197]  
  - Revert "x86/platform/uv: Add UV5 direct references" (Jack Vogel)  [Orabug: 32651197]  
  - Revert "x86/platform/uv: Add and decode Arch Type in UVsystab" (Jack Vogel)  [Orabug: 32651197]  
  - Revert "x86/platform/uv: Update MMIOH references based on new UV5 MMRs" (Jack Vogel)  [Orabug: 32651197]  
  - Revert "x86/platform/uv: Adjust GAM MMR references affected by UV5 updates" (Jack Vogel)  [Orabug: 32651197]  
  - Revert "x86/platform/uv: Update UV5 MMR references in UV GRU" (Jack Vogel)  [Orabug: 32651197]  
  - Revert "x86/platform/uv: Update node present counting" (Jack Vogel)  [Orabug: 32651197]  
  - Revert "x86/platform/uv: Update UV5 TSC checking" (Jack Vogel)  [Orabug: 32651197]  
  - Revert "x86/platform/uv: Update for UV5 NMI MMR changes" (Jack Vogel)  [Orabug: 32651197]  
  - Revert "x86/platform/uv: Update Copyrights to conform to HPE standards" (Jack Vogel)  [Orabug: 32651197]  
  - Revert "x86/platform/uv: Fix missing OEM_TABLE_ID" (Jack Vogel)  [Orabug: 32651197]  
  - Revert "x86/platform/uv: Remove spaces from OEM IDs" (Jack Vogel)  [Orabug: 32651197]  
  - Revert "x86/platform/uv: Recognize UV5 hubless system identifier" (Jack Vogel)  [Orabug: 32651197]  
  - Revert "x86/tlb/uv: Add a forward declaration for struct flush_tlb_info" (Jack Vogel)  [Orabug: 32651197]  
  - Revert "x86/platform/uv: Drop last traces of uv_flush_tlb_others" (Jack Vogel)  [Orabug: 32651197]  
  - Revert "x86/platform/uv: Fix copied UV5 output archtype" (Jack Vogel)  [Orabug: 32651197]  
  - Revert "x86/platform/uv: Fix UV4 hub revision adjustment" (Jack Vogel)  [Orabug: 32651197]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2102.200.13.el8uek]
changelog:
  - bpf, selftests: Fix up some test_verifier cases for unprivileged (Piotr Krysiuk)  [Orabug: 32656761]  {CVE-2020-27170} {CVE-2020-27171} 
  - bpf: Add sanity check for upper ptr_limit (Piotr Krysiuk)  [Orabug: 32656761]  {CVE-2020-27170} {CVE-2020-27171} 
  - bpf: Simplify alu_limit masking for pointer arithmetic (Piotr Krysiuk)  [Orabug: 32656761]  {CVE-2020-27170} {CVE-2020-27171} 
  - bpf: Fix off-by-one for area size in creating mask to left (Piotr Krysiuk)  [Orabug: 32656761]  {CVE-2020-27170} {CVE-2020-27171} 
  - bpf: Prohibit alu ops for pointer types not defining ptr_limit (Piotr Krysiuk)  [Orabug: 32656761]  {CVE-2020-27170} {CVE-2020-27171} 
  - selftests/bpf: Test access to bpf map pointer (Andrey Ignatov)  [Orabug: 32656761]  {CVE-2020-27170} {CVE-2020-27171} 
  - bpf: Fix truncation handling for mod32 dst reg wrt zero (Daniel Borkmann)  [Orabug: 32673813]  {CVE-2021-3444} 
  - bpf: Fix 32 bit src register truncation on div/mod (Daniel Borkmann)  [Orabug: 32673813]  {CVE-2021-3444}


author: Pingfan Liu <piliu@redhat.com> - 2.0.17-24
changelog:
  - makedumpfile/arm64: Fix 'info->page_offset' calculation for both KASLR and non-KASLR cases
  - makedumpfile: Prepare paddr_to_vaddr() for arch-specific p2v conversion


author: Pingfan Liu <piliu@redhat.com> - 2.0.17-26
changelog:
  - earlykdump: fix kexec fails to load the early kdump kernel
  - makedumpfile/x86_64: fix an unnecessary message with --mem-usage option


author: Pingfan Liu <piliu@redhat.com> - 2.0.17-27
changelog:
  - Revert "kdumpctl, earlykdump: Don't use kexec_file_load when secure boot is enabled"
  - mkdumprd: refine regex on dropping mount options


author: EL Errata <el-errata_ww@oracle.com> - 2.0.17-28.0.1
changelog:
  - rebase kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch [Orabug: 28872281]
  - don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
    (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: Pingfan Liu <piliu@redhat.com> - 2.0.19-4
changelog:
  - kexec-kdump-howto.txt: Add document about encrypted targets
  - kexec-kdump-howto.txt: Add document about initramfs rebiuld
  - kexec-kdump-howto: Add note on setting correct value of kptr_restrict
  - doc: fix dead links in the file kexec-kdump-howto.txt
  - earlykdump: provide a prompt message after the rebuilding of kdump initramfs.
  - Get rid of duplicated strip_comments when reading config
  - mkdumprd: Improve the config reading logic
  - kdumpctl: don't always rebuild when extra_modules is set
  - kdumpctl: follow symlink when checking for modified files
  - fadump: leverage kernel support to re-regisgter FADump


author: Pingfan Liu <piliu@redhat.com> - 2.0.19-5
changelog:
  - kdumpctl: check for ssh path availability when rebuild
  - kdumpctl: Check kdump.conf for error when rebuild is called
  - makedumpfile: x86_64: Add support for AMD Secure Memory Encryption
  - aarch64/kdump.sysconfig: Make config options similar to x86_64


author: Pingfan Liu <piliu@redhat.com> - 2.0.19-9
changelog:
  - kexec/arm64: Add support for handling zlib compressed (Image.gz) image
  - kexec/kexec-zlib.h: Add 'is_zlib_file()' helper function
  - kexec-uImage-arm64.c: Fix return value of uImage_arm64_probe()
  - kexec/kexec.c: Add the missing close() for fd used for kexec_file_load()


author: Edward Leung <edward.leung@oracle.com> - 2.0.19-12.0.1
changelog:
  - change makedumpfile fixed size buffer for VMCOREINFO [Orabug: 29870551]
  - 99kdumpbase: Do not append ip=<devname>:dhcp if ip=dhcp is present [Orabug: 29518713]
  - rebase kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch [Orabug: 28872281]
  - don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
    (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: Pingfan Liu <piliu@redhat.com> - 2.0.19-12.1
changelog:
  - Don't execute final_action if failure_action terminates the system
  - dracut-module-setup.sh: Don't use squash module for fadump
  - Don't mount the dump target unless needed


author: Pingfan Liu <piliu@redhat.com> - 2.0.19-12.2
changelog:
  - arm64: kdump: deal with a lot of resource entries in /proc/iomem
  - arm64: kexec: allocate memory space avoiding reserved regions
  - kexec: add variant helper functions for handling memory regions


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-6
changelog:
  -rhel-8.2.0, origin/rhel-8.2.0) Increase SECTION_MAP_LAST_BIT to 4
  - spec: move binaries from /sbin to /usr/sbin
  - As /etc/kdump.conf timestamp is updated do not compare it when doing rpm --verify
  - kdumpctl: make reload fail proof


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 2.0.20-14.0.1
changelog:
  - kdump: append no_timer_check to kdump kernel cmdline on xen guests [Orabug: 30928441]
  - arm64: skip purgatory integrity checks to speed up reboot [Orabug: 30822387]
  - kdump: append iommu=off to kdump kernel cmdline [Orabug: 30832988]
  - makedumpfile: fix RHCK makedumpfile [Orabug: 30580398]
  - makedumpfile: backport latest upstream 52-bit VA arm patch [Orabug: 30580398]
  - makedumpfile: rebase rhonly-kexec-tools-2.0.18-makedumpfile* patch [Orabug: 30580398]
  - makedumpfile: backport latest aarch64-related upstream patches [Orabug: 30352094]
  - makedumpfile: update to 1.6.7, drop patches, now present in upstream code [Orabug: 30446702]
  - change makedumpfile fixed size buffer for VMCOREINFO [Orabug: 29870551]
  - 99kdumpbase: Do not append ip=<devname>:dhcp if ip=dhcp is present [Orabug: 29518713]
  - rebase kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch [Orabug: 28872281]
  - don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
    (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-28
changelog:
  - mkdumprd: Fix nfs detection in to_mount
  - Always wrap up call to dracut get_persistent_dev function
  - man: improve description about /etc/kdump/{pre.d,post.d}interface


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-30
changelog:
  - x86_64: enable the kexec file load by default
  - Revert "kdump-lib: switch to the kexec_file_load() syscall on x86_64 by default"


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-31
changelog:
  - ppc64/kdump: use kexec_file_load when secureboot is enabled
  - kdump_pre: make notes more precise
  - dracut-kdump.sh: exit shell when machine reboot
  - kdump.conf: fix a grammar issue
  - kdumpctl: detect modification of scripts by its directory's timestamp
  - module-setup.sh: suppress false alarm
  - kexec-tools.spec: make the existence of pre.d and post.d mandatory


author: Alex Burmashev <alexander.burmashev@oracle.com> - 2.0.20-34.0.1
changelog:
  - kdump: append no_timer_check to kdump kernel cmdline on xen guests [Orabug: 30928441]
  - arm64: skip purgatory integrity checks to speed up reboot [Orabug: 30822387]
  - kdump: append iommu=off to kdump kernel cmdline [Orabug: 30832988]
  - makedumpfile: fix RHCK makedumpfile [Orabug: 30580398]
  - makedumpfile: backport latest upstream 52-bit VA arm patch [Orabug: 30580398]
  - makedumpfile: rebase rhonly-kexec-tools-2.0.18-makedumpfile* patch [Orabug: 30580398]
  - makedumpfile: backport latest aarch64-related upstream patches [Orabug: 30352094]
  - change makedumpfile fixed size buffer for VMCOREINFO [Orabug: 29870551]
  - 99kdumpbase: Do not append ip=<devname>:dhcp if ip=dhcp is present [Orabug: 29518713]
  - rebase kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch [Orabug: 28872281]
  - don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
    (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: EL Errata <el-errata_ww@oracle.com> - 2.0.20-34.0.3
changelog:
  - kdump: add threshold for the required memory (Chen Zhou) [Orabug: 32258986]
  - Fix duplicate -s option for kexec [Orabug: 32127375]
  - kdump: append no_timer_check to kdump kernel cmdline on xen guests [Orabug: 30928441]
  - arm64: skip purgatory integrity checks to speed up reboot [Orabug: 30822387]
  - kdump: append iommu=off to kdump kernel cmdline [Orabug: 30832988]
  - makedumpfile: fix RHCK makedumpfile [Orabug: 30580398]
  - makedumpfile: backport latest upstream 52-bit VA arm patch [Orabug: 30580398]
  - makedumpfile: rebase rhonly-kexec-tools-2.0.18-makedumpfile* patch [Orabug: 30580398]
  - makedumpfile: backport latest aarch64-related upstream patches [Orabug: 30352094]
  - change makedumpfile fixed size buffer for VMCOREINFO [Orabug: 29870551]
  - 99kdumpbase: Do not append ip=<devname>:dhcp if ip=dhcp is present [Orabug: 29518713]
  - rebase kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch [Orabug: 28872281]
  - don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
    (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-34.2
changelog:
  - kdump-lib.sh: Remove is_atomic
  - Refactor kernel image and initrd detection code
  - early-kdump: Use consistent symbol link for kernel and initramfs
  - kdump-lib: strip grub device from kdump_bootdir
  - kdumpctl: fix driver change detection on latest Fedora


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 2.0.20-34.0.5.el8_u3.2
changelog:
  - 99kdumpbase: Do not append ip=<devname>:dhcp if ip=single-dhcp is present [Orabug: 32404661]
  - kdump-lib: Fix get_bind_mount_source to support btrfs and fstab [Orabug: 32297893]
  - kdump: add threshold for the required memory (Chen Zhou) [Orabug: 32258986]
  - Fix duplicate -s option for kexec [Orabug: 32127375]
  - kdump: append no_timer_check to kdump kernel cmdline on xen guests [Orabug: 30928441]
  - arm64: skip purgatory integrity checks to speed up reboot [Orabug: 30822387]
  - kdump: append iommu=off to kdump kernel cmdline [Orabug: 30832988]
  - makedumpfile: fix RHCK makedumpfile [Orabug: 30580398]
  - makedumpfile: backport latest upstream 52-bit VA arm patch [Orabug: 30580398]
  - makedumpfile: rebase rhonly-kexec-tools-2.0.18-makedumpfile* patch [Orabug: 30580398]
  - makedumpfile: backport latest aarch64-related upstream patches [Orabug: 30352094]
  - change makedumpfile fixed size buffer for VMCOREINFO [Orabug: 29870551]
  - 99kdumpbase: Do not append ip=<devname>:dhcp if ip=dhcp is present [Orabug: 29518713]
  - rebase kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch [Orabug: 28872281]
  - don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
    (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-38
changelog:
  - Don's try to restart dracut-initqueue if it's already failed
  - fadump-howto: update about 'nocma' and 'off' options for 'fadump=' parameter
  - dracut-module-setup.sh: use auto6 for ipv6
  - module-setup.sh: enable vlan on team interface
  - Fix rootfs detection in dump_fs
  - Remove RHEL-only patch: kexec-tools-2.0.18-makedumpfile-arm64-Add-support-for-ARMv8.2-LVA-52-bi.patch
  - Rebase to makedumpfile-1.6.8 (step1)


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-43
changelog:
  - Always include watchdog-modules
  - mkdumprd: Ensure kdumpbase is added
  - Move watchdog detect and install code to module-setup.sh
  - Add a helper to omit non-mandatory dracut module
  - Move some dracut module dependencies checks to module-setup.sh
  - Set watchdog's pretimeout to zero in kdump kernel
  - kdump-lib.sh: Use a more generic helper to detect omitted dracut module
  - Fix the watchdog drivers detection code
  - Add a helper for detecting watchdog drivers
  - Remove a redundant nfs check
  - kdumpctl: split the driver detection from fs dection function
  - kdump.service: use ConditionKernelCommandLine=crashkernel
  - Revert "Append both nofail and x-systemd.before to kdump mount target"
  - Revert "Don's try to restart dracut-initqueue if it's already failed"
  - Fix dump_fs mount point detection and fallback mount
  - kdump.conf: Update doc about core_collector for ssh target
  - Save the final failure information to log file if saving vmcore failed
  - Doc: Improve the kdump sysconfig document
  - kdumpctl: fix a variable expansion in check_fence_kdump_config()
  - Fedora 33 rhpkg build bug


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-44
changelog:
  - module-setup.sh: don't polute the namespace unnecessarily
  - module-setup.sh: don't source $dracutfunctions
  - logger: source the logger file individually
  - dracut-module-setup.sh: enable ForwardToConsole=yes in fadump mode


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-45
changelog:
  - origin/rhel-8.4.0) Revert "Revert "Append both nofail and x-systemd.before to kdump mount target""
  - kdump.conf: add ipv6 example for nfs and ssh dump
  - fix kdump failure of saving vmcore with the scp + ipv6 method


author: EL Errata <el-errata_ww@oracle.com> - 2.0.20-46.0.1
changelog:
  - Added the following patches from https://github.com/makedumpfile version 1.6.8++ [Orabug: 32851262]
  - Added Patch1009, orabug32851262-PATCH-2-3-arm64-Make-use-of-NUMBER-VA_BITS-in-vmcore.patch
  - Added Patch1010, orabug32851262-PATCH-3-3-arm64-support-flipped-VA-and-52-bit-kernel.patch
  - Removed Patch701 which was in conflict with Patch1010
  - Remove -s setting for KEXEC_ARGS in kdump.sysconfig.aarch64 [Orabug: 3280449]
  - 99kdumpbase: Do not append ip=<devname>:dhcp if ip=single-dhcp is present [Orabug: 32404661]
  - kdump-lib: Fix get_bind_mount_source to support btrfs and fstab [Orabug: 32297893]
  - kdump: add threshold for the required memory (Chen Zhou) [Orabug: 32258986]
  - Fix duplicate -s option for kexec [Orabug: 32127375]
  - kdump: append no_timer_check to kdump kernel cmdline on xen guests [Orabug: 30928441]
  - arm64: skip purgatory integrity checks to speed up reboot [Orabug: 30822387]
  - kdump: append iommu=off to kdump kernel cmdline [Orabug: 30832988]
  - 99kdumpbase: Do not append ip=<devname>:dhcp if ip=dhcp is present [Orabug: 29518713]
  - rebase kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch [Orabug: 28872281]
  - don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
    (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: EL Errata <el-errata_ww@oracle.com> - 2.0.20-46.0.1
changelog:
  - Added the following patches from https://github.com/makedumpfile version 1.6.8++ [Orabug: 32851262]
  - Added Patch1009, orabug32851262-PATCH-2-3-arm64-Make-use-of-NUMBER-VA_BITS-in-vmcore.patch
  - Added Patch1010, orabug32851262-PATCH-3-3-arm64-support-flipped-VA-and-52-bit-kernel.patch
  - Removed Patch701 which was in conflict with Patch1010
  - Remove -s setting for KEXEC_ARGS in kdump.sysconfig.aarch64 [Orabug: 3280449]
  - 99kdumpbase: Do not append ip=<devname>:dhcp if ip=single-dhcp is present [Orabug: 32404661]
  - kdump-lib: Fix get_bind_mount_source to support btrfs and fstab [Orabug: 32297893]
  - kdump: add threshold for the required memory (Chen Zhou) [Orabug: 32258986]
  - Fix duplicate -s option for kexec [Orabug: 32127375]
  - kdump: append no_timer_check to kdump kernel cmdline on xen guests [Orabug: 30928441]
  - arm64: skip purgatory integrity checks to speed up reboot [Orabug: 30822387]
  - kdump: append iommu=off to kdump kernel cmdline [Orabug: 30832988]
  - 99kdumpbase: Do not append ip=<devname>:dhcp if ip=dhcp is present [Orabug: 29518713]
  - rebase kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch [Orabug: 28872281]
  - don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
    (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: EL Errata <el-errata_ww@oracle.com> - 2.0.20-46.0.1
changelog:
  - Added the following patches from https://github.com/makedumpfile version 1.6.8++ [Orabug: 32851262]
  - Added Patch1009, orabug32851262-PATCH-2-3-arm64-Make-use-of-NUMBER-VA_BITS-in-vmcore.patch
  - Added Patch1010, orabug32851262-PATCH-3-3-arm64-support-flipped-VA-and-52-bit-kernel.patch
  - Removed Patch701 which was in conflict with Patch1010
  - Remove -s setting for KEXEC_ARGS in kdump.sysconfig.aarch64 [Orabug: 3280449]
  - 99kdumpbase: Do not append ip=<devname>:dhcp if ip=single-dhcp is present [Orabug: 32404661]
  - kdump-lib: Fix get_bind_mount_source to support btrfs and fstab [Orabug: 32297893]
  - kdump: add threshold for the required memory (Chen Zhou) [Orabug: 32258986]
  - Fix duplicate -s option for kexec [Orabug: 32127375]
  - kdump: append no_timer_check to kdump kernel cmdline on xen guests [Orabug: 30928441]
  - arm64: skip purgatory integrity checks to speed up reboot [Orabug: 30822387]
  - kdump: append iommu=off to kdump kernel cmdline [Orabug: 30832988]
  - 99kdumpbase: Do not append ip=<devname>:dhcp if ip=dhcp is present [Orabug: 29518713]
  - rebase kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch [Orabug: 28872281]
  - don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
    (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]
    (Sriharsha Yadagudde) [Orabug: 18905671]
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-51
changelog:
  - Stop reloading kdump service on CPU hotplug event for FADump
  - fadump: improve fadump-howto.txt about remote dump target setup


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-52
changelog:
  - Write to `/var/lib/kdump` if $KDUMP_BOOTDIR not writable
  - Iterate /sys/bus/ccwgroup/devices to tell if we should set up rd.znet
  - mkdumprd: display the absolute path of dump location in the check_user_configured_target()


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-53
changelog:
  - check for invalid physical address of /proc/kcore when making ELF dumpfile
  - check for invalid physical address of /proc/kcore when finding max_paddr
  - fix format issue in find_online_znet_device
  - check the existence of /sys/bus/ccwgroup/devices before trying to find online network device
  - kdump-lib.sh: fix a warning in prepare_kdump_bootinfo()


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-54
changelog:
  - kdump/ppc64: rebuild initramfs image after migration
  - Check the existence of /sys/bus/ccwgroup/devices/*/online beforehand
  - kdump.sysconfig.s390: Remove "prot_virt" from kdump kernel cmdline


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-50
changelog:
  - rd.route should use the name from kdump_setup_ifname
  - get kdump ifname once in kdump_install_netdev


author: EL Errata <el-errata_ww@oracle.com> - 2.0.20-57.0.3
changelog:
  - Merge 8.4 extra patches for SB boot environment [Orabug: 33512440]
  - Merge SRPM/ol8-u4 orabug patches into SRPM/ol8-u5 [Orabug: 33471981]
  - makedumpfile: Add support for newer kernels up to v5.12 [Orabug: 33250117]


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-60
changelog:
  - fadump-init: clean up mount points properly
  - fadump: kdumpctl should check the modules used by the fadump initramfs
  - fadump: isolate fadump initramfs image within the default one
  - mkdumprd: Use xz for squash image compression


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-66
changelog:
  - kdump/ppc64: suppress the error message "Could not find a registered notification tool" from servicelog_notify
  - Enable zstd compression for makedumpfile in kexec-tools.spec


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 2.0.20-68.0.1
changelog:
  - kdump/kexec: fix saving vmcore-dmesg.txt failed on aarch64 with UEK7 [Orabug: 33748084]
  - kdump: skip lvm private devices [Orabug: 33822070]
  - Merge 8.4 extra patches for SB boot environment [Orabug: 33512440]
  - Merge SRPM/ol8-u4 orabug patches into SRPM/ol8-u5 [Orabug: 33471981]


author: Brian Maly <brian.maly@oracle.com> - 2.0.20-68.0.2
changelog:
  - rebase makdumpfile to version 1.7.1 [Orabug: 34125577] [Orabug: 34105778]
  - add requires for virt-what [Orabug: 34015178]


author: Pingfan Liu <piliu@redhat.com> - 2.0.20-69
changelog:
  - s390: add support for --reuse-cmdline
  - use slurp_proc_file() in get_command_line()
  - add slurp_proc_file()
  - s390: use KEXEC_ALL_OPTIONS
  - s390: add variable command line size
  - util_lib/elf_info: harden parsing of printk buffer
  - print error when reading with unsupported compression
  - use cycle detection when parsing the prink log_buf
  - use pointer arithmetics for dump_dmesg
  - add generic cycle detection


author: Pingfan Liu <piliu@redhat.com> - 2.0.24-1
changelog:
  - kdumpctl: sync the $TARGET_INITRD after rebuild
  - Avoid false-positive mem_section validation with vmlinux
  - Rebase kexec-tools to 2.0.24
  - Rebase makedumpfile to 1.7.1


author: Pingfan Liu <piliu@redhat.com> - 2.0.24-6
changelog:
  - kdump-lib: Add the CoreOS kernel dir to the boot_dirlist
  - kdump-lib: attempt to fix BOOT_IMAGE detection
  - kdump-lib: change how ostree based systems are detected
  - kdump-lib: clear up references to Atomic/CoreOS


author: Brian Maly <brian.maly@oracle.com> - 2.0.24-6.0.1
changelog:
  - makedumpfile: fix issue where manpage wont load [Orabug: 34219528]
  - add requires for virt-what [Orabug: 34015178]
  - kdump/kexec: fix saving vmcore-dmesg.txt failed on aarch64 with UEK7 [Orabug: 33748084]
  - kdump: skip lvm private devices [Orabug: 33822070]
  - Merge 8.4 extra patches for SB boot environment [Orabug: 33512440]
  - Merge SRPM/ol8-u4 orabug patches into SRPM/ol8-u5 [Orabug: 33471981]
  - Reformat orabug33822070-kdump-skip-lvm-private-devices.patch [Orabug: 33822070]
  - Drop oracle specific patches no longer applicable [Orabug: 32258986] [Orabug: 33748084]


author: Pingfan Liu <piliu@redhat.com> - 2.0.25-2
changelog:
  - mkdumprd: Improve error messages on non-existing NFS target directories
  - fadump: avoid non-debug kernel use for fadump case


author: Pingfan Liu <piliu@redhat.com> - 2.0.25-3
changelog:
  - kdump.conf: use a simple generator script to maintain
  - Reduce kdump memory consumption by not letting NetworkManager manage unneeded network interfaces


author: Pingfan Liu <piliu@redhat.com> - 2.0.25-4
changelog:
  - Don't check fs modified when dump target is lvm2 thinp
  - Add dependency of dracut lvmthinpool-monitor module
  - lvm.conf should be check modified if lvm2 thinp enabled
  - Add lvm2 thin provision dump target checker
  - Fix the sync issue for dump_fs


author: Pingfan Liu <piliu@redhat.com> - 2.0.25-5
changelog:
  dracut-module-setup: Fix invalid rd.znet command line entry
   dracut-module-setup: Fix persistent nic name on s390


author: Pingfan Liu <piliu@redhat.com> - 2.0.26-6
changelog:
  - dracut-module-setup.sh: skip installing driver for the loopback interface
  - Reduce kdump memory consumption by only installing needed NIC drivers


author: Pingfan Liu <piliu@redhat.com> - 2.0.26-8
changelog:
  - mkdumprd: Use the correct syntax to redirect the stderr to null
  - mkdumprd: call dracut with --add-device to install the drivers needed by /boot partition automatically for FIPS
  - Add NICs that handle DNS queries to the allowlist


author: EL Errata <el-errata_ww@oracle.com> - 2.0.26-8.0.1
changelog:
  - Backport of upstream crash hotplug support [Orabug: 35884454]
  - Drop kexec-tools-2.0.25-makedumpfile-sadump-fix-failure-of-reading-memory-when-5-le.patch
  - Insert new udev rules for crash hotplug into 98-kexec.rules
  - sadump: fix failure of reading memory when 5-level paging is enabled
  - Update UEK reserved sizes [Orabug: 35224510]
  - makedumpfile: fix issue where manpage wont load [Orabug: 34219528]
  - add requires for virt-what [Orabug: 34015178]
  - kdump/kexec: fix saving vmcore-dmesg.txt failed on aarch64 with UEK7 [Orabug: 33748084]
  - kdump: skip lvm private devices [Orabug: 33822070]
  - Merge 8.4 extra patches for SB boot environment [Orabug: 33512440]
  - Merge SRPM/ol8-u4 orabug patches into SRPM/ol8-u5 [Orabug: 33471981]
  - Reformat orabug33822070-kdump-skip-lvm-private-devices.patch [Orabug: 33822070]
  - Drop oracle specific patches no longer applicable [Orabug: 32258986] [Orabug: 33748084]


author: Brian Maly <brian.maly@oracle.com> - 2.0.26-8.0.2
changelog:
  - Rebase makedumpfile to 1.7.4 [Orabug: 36157739]
  - kdumpctl check if FIPS is enabled [Orabug: 35982140]


author: David Howells <dhowells@redhat.com> - 1.5.9-1
changelog:
  - Add manpages for get_persistent.
  - Fix memory leaks in keyctl_describe/read/get_security_alloc().
  - Use keyctl_describe_alloc in dump_key_tree_aux rather than open coding it.
  - Exit rather than returning from act_xxx() functions.
  - Fix memory leak in dump_key_tree_aux.
  - Only get the groups list if we need it.
  - Don't trust sscanf's %n argument.
  - Use the correct path macros in the specfile.
  - Avoid use realloc when the memory has no content.
  - Fix a bunch of issues in key.dns_resolver.
  - Fix command table searching in keyctl utility.
  - Fix a typo in the permissions mask constants.
  - Improve the keyctl_read manpage.
  - Add man7 pages describing various keyrings concepts.


author: David Howells <dhowells@redhat.com> - 1.5.10-1
changelog:
  - Include sys/types.h in keyutils.h.
  - The dns resolver needs limits.h.
  - Overhaul of all manual pages.
  - Some manual pages moved to Linux man-pages project.
  - Add Diffie-Helman keyctl function.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 25-5
changelog:
  - weak-modules: handle versions with + and other special regex symbols
  - weak-modules: fix misleading message when cannot find dracut.
    Resolves: rhbz#1609372.


author: Eugene Syromiatnikov <esyr@redhat.com> - 25-6
changelog:
  - weak-modules: check also for /lib/modules/$krel/symvers.gz as a possible
    symvers file path.
    Resolves: rhbz#1614119.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 25-7
changelog:
  - weak-modules: use is_kernel_installed wrapper in update_modules_for_krel.
  - weak-modules: more abstract symvers search implementation.
  - weak-modules: use additional paths for System.map file.
    Resolves: rhbz#1621306.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 25-8
changelog:
  - weak-modules: fix initial state creation for dry-run
  - weak-modules: check compatibility in a temporary directory
    Resolves: rhbz#1622990.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 25-10
changelog:
  - weak-modules: group modules on add-kernel
  - weak-modules: do not make groups if there are no extra modules
    Resolves: rhbz#1649211


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 25-16
changelog:
  - weak-modules: update_modules_for_krel: always finish sandbox
  - weak-modules: groupping: use dependencies of extra/ provider
    Resolves: rhbz#1778889


author: - Andy Walsh <awalsh@redhat.com> - 6.2.1.102-53
changelog:
  - Continued converting the VDO device to conform to the DM convention of
    not issuing I/O while suspended.
    - Resolves: rhbz#1659303
  - Added more rate limiting of error logging in both the kvdo and uds
    modules in order to avoid soft-lockups on newer kernels.
    - Resolves: rhbz#1703243
  - Eliminated the passing of addresses of unaligned fields in packed
    - Resolves: rhbz#1718058


author: - Andy Walsh <awalsh@redhat.com> - 6.2.1.134-56
changelog:
  - Finished converting the VDO device to conform to the DM convention of not
    issuing I/O while suspended.
  - Resolves: rhbz#1659303
  - Fixed a bug where crash recovery could use the wrong threads for certain
    operations potentially resulting in memory corruption.
  - Resolves: rhbz#1703621
  - Fixed a bug which could cause segfaults when running the vdostatus
    command.
  - Resolves: rhbz#1669960
  - Eliminated a backtrace from the error logged when creating a VDO device
    with an erroneous physical size in the table line.
  - Resolves: rhbz#1717435
  - Fixed a possible use-after-free of the UDSConfiguration.
  - Resolves: rhbz#1653802
  - Made VDO a singleton device because multi-segment devices containing a
    VDO have a number of issues.
  - Resolves: rhbz#1725077
  - Converted the VDO device to conform to the DM convention of not issuing
    writes from the constructor.
  - Resolves: rhbz#1669086


author: - Andy Walsh <awalsh@redhat.com> - 6.2.1.138-56
changelog:
  - Fixed a crash on allocation failure and a use-after-free race introduced by
    the changes to avoid issuing I/O while suspended.
  - Resolves: rhbz#1659303


author: - Andy Walsh <awalsh@redhat.com> - 6.2.2.117-63
changelog:
  - Fixed a bug which would cause the UDS index to be perceived as corrupt
    when a VDO volume is moved to a system with a different endianness.
  - Resolves: rhbz#1745211
  - Modified UDS index rebuild to be interruptible so that shutting down a
    VDO whose index is rebuilding need not wait for the index rebuild to
    complete.
  - Resolves: rhbz#1737639
  - Prevented two VDO devices from being started on the same storage.
  - Resolves: rhbz#1725052
  - Fixed rare races which could result in VDO issuing I/O while suspended.
  - Resolves: rhbz#1766358
  - Fixed crashes when re-suspending a VDO after it had been resumed.
  - Resolves: rhbz#1765253
  - Made async mode ACID. Added async-unsafe mode to preserve the performance of
    the old implementation.
  - Resolves: rhbz#1657301


author: - Andy Walsh <awalsh@redhat.com> - 6.2.3.91-73
changelog:
  - Removed unused UDS bio statistics.
  - Resolves: rhbz#1827762
  - Removed support for old kernels.
  - Resolves: rhbz#1827762
  - Fixed Coverity errors.
  - Resolves: rhbz#1827763
  - Improved the error message when slab journal locks overflow.
  - Resolves: rhbz#1827761
  - Fixed a bug which could result in VDO issuing I/O while suspended.
  - Resolves: rhbz#1824789
  - Fixed a rare double-enqueue bug in the recovery journal.
  - Resolves: rhbz#1824802
  - Modified VDO to not allocate an index if the VDO device is started
    with deduplication disabled.
  - Resolves: rhbz#1755448
  - Nodified VDO to not log spurious journal lock warnings when cleaning up
    write requests which failed due to the VDO going read-only.
  - Resolves: rhbz#1840455


author: - Andy Walsh <awalsh@redhat.com> - 6.2.3.107-73
changelog:
  - Fixed a bug which can cause a soft lockup if users interrupt processes
    waiting on dm-setup commands.
  - Resolves: rhbz#1844651
  - Fixed a rare race which could cause a suspend of a VDO device to fail.
  - Resolves: rhbz#1847747


author: - Andy Walsh <awalsh@redhat.com> - 6.2.3.107-74
changelog:
  - Updated dependencies to prevent installing kernel-rt incorrectly.
  - Resolves: rhbz#1811923
  - Bumped requirement for new 4.18 kernel
  - Relates: rhbz#1812069


author: - Andy Walsh <awalsh@redhat.com> - 6.2.3.114-74
changelog:
  - Fixed an index bug which can cause vdo stop to hang on systems with many
    cores.
  - Resolves: rhbz#1791056
  - Fixed a bug where VDO would ignore errors from empty flush bios.
  - Resolves: rhbz#1858363


author: - Andy Walsh <awalsh@redhat.com> - 6.2.4.14-74
changelog:
  - Fixed a bug which causes the UDS index to consume an excessive
    number of CPU cycles when the VDO device is idle.
  - Resolves: rhbz#1870660


author: - Andy Walsh <awalsh@redhat.com> - 6.2.4.26-74
changelog:
  - Modified physical growth to validate the new VDO size against the size of
    the underlying storage.
  - Resolves: rhbz#1732922
  - Fixed issues which prevented lvrename from working on lvm managed
    VDO devices.
  - Resolves: rhbz#1888419


author: - Andy Walsh <awalsh@redhat.com> - 6.2.5.41-78
changelog:
  - Fixed bugs in reading the UDS index of a VDO volume which was converted
    to LVM.
  - Resolves: rhbz#1928284


author: - Andy Walsh <awalsh@redhat.com> - 6.2.5.62-79
changelog:
  - Fixed chapter computation for a converted sparse index.
  - Resolves: rhbz#1965516
  - Fixed invalidation of converted chapters.
  - Resolves: rhbz#1966818
  - Removed extraneous fields from the super block of a converted index.
  - Resolves: rhbz#1965546
  - Fixed calculation of the number of expiring chapters in a converted
    index.
  - Resolves: rhbz#1975546
  - Fixed bugs rebuilding a converted index.
  - Resolves: rhbz#1966824


author: - Andy Walsh <awalsh@redhat.com> - 6.2.5.65-79
changelog:
  - Removed unneeded allocations from the previous fixes for rebuilding
    a converted index.
  - Resolves: rhbz#1966824


author: - Andy Walsh <awalsh@redhat.com> - 6.2.5.72-79
changelog:
  - Fixed a bug which could result in the UDS index issuing I/O while
    suspended.
  - Resolves: rhbz#1990180


author: - Andy Walsh <awalsh@redhat.com> - 6.2.6.3-83
changelog:
  - Adjusted kernel dependencies to grab the right packages.
  - Resolves: rhbz#2011426
  - Rebuilt for latest kernel.
  - Relates: rhbz#2000909


author: - Andy Walsh <awalsh@redhat.com> - 6.2.7.17-86
changelog:
  - Fixed bug which could result in empty flushes being issued to the storage
    below vdo while suspended.
  - Resolves: rhbz#2013056
  - Fixed syntax mismatch which prevented lvm from being able to configure a
    512MB UDS index.
  - Resolves: rhbz#2073203
  - Fixed a race handling timeouts of dedupe index queries.
  - Resolves: rhbz#2092075


author: - Andy Walsh <awalsh@redhat.com> - 6.2.8.1-87
changelog:
  - Fixed a bug which could produce a deadlock after multiple saves and resumes
    of a vdo.
  - Resolves: rhbz#2109047


author: - Susan LeGendre-McGhee <slegendr@redhat.com> - 6.2.8.7-88
changelog:
  - Fixed bug in read-only rebuild when the logical size of the volume is an
    exact multiple of 821 4K blocks.
  - Resolves: rhbz#2166131


author: Eugene Syromiatnikov <esyr@redhat.com> 1.10.0_dup8.1-1
changelog:
  - 9158390ccae759c2c0221de6e0c9541375a480f6
  - bnxt_en kernel module for Driver Update Program
  - Resolves: #bz1802054


author: Eugene Syromiatnikov <esyr@redhat.com> 0.8_4.18.0_80.23_dup8.0-3
changelog:
  - 1d6a0fb6a4ad99d22c0a6e537e3d408b683aa60d
  - btusb kernel module for Driver Update Program
  - Resolves: #bz1755922


author: Eugene Syromiatnikov <esyr@redhat.com> 4.18.0_348_dup8.5-1
changelog:
  - 9dc660bf1362f5a22a908e61004498cf7ec063a8
  - cfg80211 kernel module for Driver Update Program
  - Resolves: #bz2051885, #bz2051886


author: Eugene Syromiatnikov <esyr@redhat.com> 4.18.0_348_dup8.5-2
changelog:
  - Bump release due to "Package build kmod-redhat-cfg80211-4.18.0_348_dup8.5-1.el8_5
    kept gated because not onboarded to gating".


author: Eugene Syromiatnikov <esyr@redhat.com> 0.8.2_k_dup8.2-1
changelog:
  - afe1694503958c189ab98273de137c65bc3909f8
  - ice kernel module for Driver Update Program
  - Resolves: #bz1875784


author: Eugene Syromiatnikov <esyr@redhat.com> 4.18.0.210_dup8.2-1
changelog:
  - 2f22e260c6b75f2acb86bd91292dc8c66f56c481
  - ionic kernel module for Driver Update Program
  - Resolves: #bz1851940


author: Eugene Syromiatnikov <esyr@redhat.com> 4.18.0.210_dup8.2-2
changelog:
  - Bump release due to "Package build kmod-redhat-ionic-4.18.0.210_dup8.2-1.el8_2
    kept gated because not onboarded to gating".


author: Eugene Syromiatnikov <esyr@redhat.com> 4.18.0_107_dup8.0-5
changelog:
  - e67217ec68636d7570e69bab9e3b1ed1728b8292
  - iwlwifi kernel module for Driver Update Program
  - Resolves: #bz1755919


author: Eugene Syromiatnikov <esyr@redhat.com> 4.18.0_348_dup8.5-1
changelog:
  - 9dc660bf1362f5a22a908e61004498cf7ec063a8
  - mac80211 kernel module for Driver Update Program
  - Resolves: #bz2051885, #bz2051886


author: Eugene Syromiatnikov <esyr@redhat.com> 4.18.0_348_dup8.5-2
changelog:
  - Bump release due to "Package build kmod-redhat-mac80211-4.18.0_348_dup8.5-1.el8_5
    kept gated because not onboarded to gating".


author: Eugene Syromiatnikov <esyr@redhat.com> 5.0_0_dup8.2-1
changelog:
  - 86de78c2e6f431762836a4ea5891f891bc0fdcb4
  - mlx5_core kernel module for Driver Update Program
  - Resolves: #bz1889733


author: Eugene Syromiatnikov <esyr@redhat.com> 5.0_0_dup8.2-2
changelog:
  - Bump release due to "Package build kmod-redhat-mlx5_core-5.0_0_dup8.2-1.el8_2
    kept gated because not onboarded to gating".


author: Eugene Syromiatnikov <esyr@redhat.com> 35.101.00.00_dup8.3-1
changelog:
  - bfcc924fa05e36abe7a039ac5ec2be581e20c288
  - mpt3sas kernel module for Driver Update Program
  - Resolves: #bz1915214


author: Eugene Syromiatnikov <esyr@redhat.com> 4.18.0_363_dup8.5-1
changelog:
  - 9dc660bf1362f5a22a908e61004498cf7ec063a8
  - mt7921 kernel module for Driver Update Program
  - Resolves: #bz2051885


author: Eugene Syromiatnikov <esyr@redhat.com> 4.18.0_363_dup8.5-2
changelog:
  - Bump release due to "Package build kmod-redhat-mt7921-4.18.0_363_dup8.5-1.el8_5
    kept gated because not onboarded to gating".


author: EL Errata <el-errata_ww@oracle.com> - 2.0.8-1.3.0.1
changelog:
  * Mon Mar 01 2021 Eugene Syromiatnikov <esyr@redhat.com> 2.0.8-1.3
  - Replace "and" with "with" in pre-4.18.0-240.14.1.el8_3 kernel dependency
    to match it more precisely (it passes when both post-4.18.0-240.14.1.el8_3
    and pre-4.18.0-240.el8 kernels installed otherwise).


author: Eugene Syromiatnikov <esyr@redhat.com> 2.0.8-3
changelog:
  - Add "Provides: oracleasm" and "Provides: oracleasm-kmod".
  - Dropping "0001-oracleasm-driver-replace-fs_context-with-mount_pseud.patch".


author: Eugene Syromiatnikov <esyr@redhat.com> 4.18.0_363_dup8.5-1
changelog:
  - 9dc660bf1362f5a22a908e61004498cf7ec063a8
  - rtw89 kernel module for Driver Update Program
  - Resolves: #bz2051886


author: Nishant Nayan <nishant.nayan@oracle.com> - 1.18.2-14.0.1
changelog:
  - Try harder to avoid password change replay errors [Orabug: 33609767]
  - Reverting the initial fix as this fix is MIT approved.
  - Initial fix was to toggle between udp and tcp using change_pw_no_udp option.


author: Julien Rische <jrische@redhat.com> - 1.18.2-21
changelog:
  - Backport fix of memory use after free during libkrad cleanup
  - Backport support for larger RADIUS attributes in libkrad
  - Resolves: rhbz#2103125


author: Robbie Harwood <rharwood@redhat.com> - 1.18-1
changelog:
  - New upstream version (1.18)
  - Resolves: #1802334
  - Resolves: #1820311
  - Resolves: #1791062
  - Resolves: #1784655


author: Robbie Harwood <rharwood@redhat.com> - 1.18.2-3
changelog:
  - Match Heimdal behavior for channel bindings
  - Code hygiene + test stability fix included
  - Resolves: #1840518


author: Cestmir Kalina <ckalina@redhat.com> - 1.1-1
changelog:
  - Replace the Python interpreter path to RHEL8 compliant path.
  - Related: #1633691
  - Resolves: #1637594


author: Cestmir Kalina <ckalina@redhat.com> - 1.3-1
changelog:
  - Resolves: #1642134 Error restrict bugs to groups without permission while
    trying to submit RHEL8 symbols
  - New ksc reports will no longer be submitted under redhat bugzilla group.
  - At least one bugzilla group must be specified by a ksc user, otherwise ksc
    will terminate with an error.
  - Version bump to 1.3


author: Cestmir Kalina <ckalina@redhat.com> - 1.4-1
changelog:
  - Resolves: #1643187 ksc manpage lies -k can only be specified once
  - Resolves: #1645335 FILE is shown in ksc man page but no explain or effect
  - Support for multiple -k arguments added
  - Man page reworded to match ksc behaviour


author: Čestmír Kalina <ckalina@redhat.com> - 1.5-1
changelog:
  - Resolves: #1647528 ksc add feature to copy justifications between ksc...
  - Resolves: #1648026 ksc add a non-processed .ko file
  - Resolves: #1647974 piped input causes ksc to fail when asking for user input
  - Add support for justification carry over.
  - Add support for symbol filtering using -K.
  - Fix input problems when piping through to ksc.
  - Extend manpage with EXAMPLES section.
  - Version bump fo 1.5.


author: Čestmír Kalina <ckalina@redhat.com> - 1.6-1
changelog:
  - Resolves: #1729039 Extend ksc output to include environment metadata
  - Add modinfo vermagic field to the output.
  - Add kmod (provides modinfo) to requires.


author: Čestmír Kalina <ckalina@redhat.com> - 1.6-2
changelog:
  - Resolves: #1729039 Extend ksc output to include environment metadata
  - (OSCI) Add kmod to Makefile-generated Requires


author: Lukas Lemes <lukas.lemes@oracle.com> - 1.6-2.0.1
changelog:
  - Added bug30319244-remove-upstream-references.patch [Orabug: 30319244]
  - Added bug30285084-remove-upstream-references.patch [Orabug: 30285084]
  - Add oracle-remove-unfit-option.patch [Orabug: 23634996]


author: Čestmír Kalina <ckalina@redhat.com> - 1.7-1
changelog:
  - Resolves: #1886901 Avoid divisive language
  - Resolves: #1912506 File bugs with Tracking keyword by default


author: Čestmír Kalina <ckalina@redhat.com> - 1.9-1
changelog:
  - Resolves: #2043450 ksc: Support Authorization header in bugzilla API
  - Rebase to latest ksc release


author: Čestmír Kalina <ckalina@redhat.com> - 1.9-2
changelog:
  - Resolves: #2043450 ksc: Support Authorization header in bugzilla API
  - Use platform-python in place of python3


author: EL Errata <el-errata_ww@oracle.com> - 1.9-2.0.1
changelog:
  - Add oracle-remove-unfit-option.patch [Orabug: 23634996]
  - Added bug30285084-remove-upstream-references.patch [Orabug: 30285084]
  - Added bug30319244-remove-upstream-references.patch [Orabug: 30319244]


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.2-1
changelog:
  - New upstream release 1.3.3
  - Resolves: rhbz#1574267 - libldb-1.3.3 is available
  - Backport a patch from samba upstream to not require rpc.h


author: Petr Viktorin <pviktori@redhat.com> - 1.4.0-3
changelog:
  - Use %{__python2}, not "python", as the Python2 interpreter
  - Add workaround to allow building with Python 2
  - Remove the lmdb dependency in RHEL


author: Jakub Hrozek <jhrozek@redhat.com> - 1.5.4-1
changelog:
  - Resolves: rhbz#1684582 - Rebase libldb to version 1.5.4 for Samba
  - Resolves: rhbz#1567115 - libldb: Drop Python 2 subpackages from RHEL 8
  - Resolves: rhbz#1597243 - libldb uses Python 2 to build.


author: Jakub Hrozek <jhrozek@redhat.com> - 1.5.4-2
changelog:
  - Fix some python2-related upgrade issues
  - Related: rhbz#1567115 - libldb: Drop Python 2 subpackages from RHEL 8


author: Isaac Boukris <iboukris@redhat.com> - 2.0.7-3
changelog:
  - Resolves: rhbz#1754423 - Rebase libldb to 2.0.7 version for samba
  - Related: rhbz#1754423 - Fix sssd tests (ldb)


author: Isaac Boukris <iboukris@redhat.com> - 2.2.0-1
changelog:
  - Resolves: rhbz#1878114 - Rebase libldb to the version required by Samba
  - Resolves: rhbz#1794349 - Build libldb with lmdb support


author: Andreas Schneider <asn@redhat.com> - 2.3.0-1
changelog:
  - resolves: rhbz#1945021 - Update to version 2.3.0
  - resolves: rhbz#1897082 - Fix libldb tests on aarch64


author: Jan Macku <jamacku@redhat.com> - 0.97-1
changelog:
  - update to 0.97 (#2159588)
  - drop downstream patch - ipmi: avoid error messages on non-dell platforms


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.110-12.el8
changelog:
  - Pass in the distro-provided CFLAGS and LFLAGS. (Jeff Moyer)
  - Get rid of -nostartfiles -nostdlib (Jeff Moyer)
  - Resolves: rhbz#1630578


author: Richard Hughes <richard@hughsie.com> 0.7.8-1
changelog:
  - New upstream release
  - Add as_version_string() for fwupd
  - Add support for component agreements
  - Correctly compare version numbers like '1.2.3' and '1.2.3a'
  - Don't include the path component in the name when parsing the package filename
  - If the launchable is specified don't guess it when composing
  - Never add more than one component to the AppStream store when composing


author: Richard Hughes <richard@hughsie.com> 0.7.9-1
changelog:
  - New upstream release
  - Convert local icons found in metainfo files
  - Follow the Debian tilde usage when ordering versions
  - Use the launchable to find the desktop filename


author: Richard Hughes <richard@hughsie.com> 0.7.10-1
changelog:
  - New upstream release
  - Do not parse firmware files anymore
  - Do not require a release transaction when validating in relaxed mode
  - Extract release descriptions and agreement sections for translation


author: Richard Hughes <richard@hughsie.com> 0.7.11-1
changelog:
  - New upstream release
  - Add AS_APP_QUIRK_DEVELOPER_VERIFIED
  - Escape quotes in attributes
  - Provide async variants of store load functions


author: Richard Hughes <richard@hughsie.com> 0.7.13-1
changelog:
  - New upstream release
  - Do not restrict the maximum number of releases allowed
  - Throw an error when a launchable desktop-id is invalid


author: Richard Hughes <richard@hughsie.com> 0.7.14-1
changelog:
  - New upstream release
  - Add new API for gnome-software
  - Set the AppStream ID from the X-Flatpak desktop key


author: Karel Zak <kzak@redhat.com> 2.32.1-10
changelog:
  - fix #1699310 - rpm -V setup fail on /var/log/lastlog
  - fix #1702712 - pam_env bypassed for root user when using su


author: Karel Zak <kzak@redhat.com> 2.32.1-13
changelog:
  - fix #1734553 - blkid_get_dev() leak file descriptor to underlying block device
  - fix #1719069 - findmnt warning "recommended root FS passno is 1" for XFS


author: Karel Zak <kzak@redhat.com> 2.32.1-18
changelog:
  - fix #1739443 - lscpu reports wrong hypervisor in nested virt on s390x
  - fix #1743555 - command chfn adds some useless commas with GECOS information into /etc/password


author: Karel Zak <kzak@redhat.com> 2.32.1-23
changelog:
  - fix #1826251 - remove MD metadata 0.90 based tests from util-linux CI
  - fix #1812576 - RFE: Bitlocker detection for RHEL 8.3
  - fix #1817726 - add libblkid BLOCK_SIZE
  - fix #1803753 - RHEL-8: col struct char_str c_column field should be of unsigned type and/or larger than 16 bit
  - fix #1812118 - mount -a always tries to mount smb3 share subdir despite being already mounted
  - fix #1824727 - util-linux: Include python3-libmount package in the release
  - fix #1829245 - mount -a tries to mount already mounted cifs shares when we cannot query up to root dir


author: Karel Zak <kzak@redhat.com> 2.32.1-25
changelog:
  - fix #1884194 - RHEL-8: chrt command does not support the -R option
  - fix #1855759 - mount.8: clarify (no)suid behavior on file capabilities
  - fix #1861670 - lsblk can not show serial information for virtio disk
  - fix #1883783 - lscpu: avoid segfault on PowerPC systems with valid hardware configurations
  - fix #1900498 - libfdisk/libmount: backport two patches for upstream systemd
  - fix #1883056 - lscpu support for Fujitsu A64FX
  - fix #1882740 - lscpu: use SMBIOS Type 4 strings for CPU vendor and model on ARM


author: Karel Zak <kzak@redhat.com> 2.32.1-28
changelog:
  - fix #1906157 - after su from root to a normal user mesg is unable to show current status
  - fix #1917852 - findmnt: add option to list all fs-independent flags
  - fix #1922299 - throws error using /sbin/nologin: invalid option -- 'c'
  - fix #1940607 - lsblk sometimes returns block devices in wrong order with --pairs
  - fix #1919529 - [RFE] RHEL-8: Support option flags with mount(8) --bind
  - fix #1946921 - RHEL8: mount --rbind -o rprivate doesn't do recursive bind mount


author: Karel Zak <kzak@redhat.com> 2.32.1-29
changelog:
  - fix #1988955 - script command continues without stopping.
  - fix #2041498 - incorrect partition size calculation for BLKPG_* ioctls
  - fix #2011602 - logger from util-linux incorrectly handles long messages
  - fix #1916151 - [RFE] spread fstrim.timer across time
  - fix #1894192 - Update or backport setpriv --pdeathsig
  - fix #2026511 - blkid fails to complete when targeting  non-block devices


author: Karel Zak <kzak@redhat.com> 2.32.1-31
changelog:
  - improve #2026511 fix - blkid fails to complete when targeting non-block devices
  - fix #1950187 - Ambient capabilities failed to applied to non-root user


author: Karel Zak <kzak@redhat.com> 2.32.1-36
changelog:
  - fix #2060030 - Please backport patches for atari partition detection to RHEL 8
  - fix #2069187 - Internal testsuite for lscpu failed on aarch64
  - fix #2093166 - lslogins reports incorrect "Password is locked" status
  - fix #2059241 - rpm -V / --verify reports bad user/group/mtime for /run/uuidd
  - fix #2044592 - Move /var/log/lastlog ownership to systemd


author: Karel Zak <kzak@redhat.com> 2.32.1-40
changelog:
  - fix #2121699 - fstrim -av fails to trim root filesystem on Red Hat Coreos 
  - fix #2142496 - update upstream tests
  - fix #2149394 - umount outputs inaccurate error message when umount() fails with EACCES
  - fix #2159544 - lslogins "Password is locked" status changed in util-linux-2.32.1-38
  - fix #2160321 - [last] ut->ut_user is not null terminated


author: Karel Zak <kzak@redhat.com> 2.32.1-43
changelog:
  - fix #2117355 - Add additional documentation for fstab
  - fix #2184728 - libuuid - downport cache related patch
  - fix #2188894 - The swapon man page of -p(priority) option shows incorrect.
  - fix #2227097 - wall(1) fail when trying to use seat0


author: Karel Zak <kzak@redhat.com> - 2.32-3
changelog:
  - sync spec file with Fedora
  - move /etc/adjtime config from initscripts to util-linux
  - fix #1560642 - uuidd.service does not start
  - remove unused build option --enable-libmount-force-mountinfo (it's default now)
  - disable assert code


author: Karel Zak <kzak@redhat.com> 2.32.1-4
changelog:
  - fix #1614364 - losetup: /dev/loop1: failed to set up loop device
  - fix #1614852 - mount man page says sync option has no effect for ext4
  - fix #1614843 - Man page of logger is missing -S option


author: Karel Zak <kzak@redhat.com> 2.32.1-7
changelog:
  - fix #1656437 - Failing tests from testsuite
  - fix #1653781 - unable to umount by loop backing file
  - fix #1655650 - RHEL8.0 - fdisk -l shows the conflicting partitions name for the mpath
  - fix #1653413 - blkid: add --no-part-details to not return metadata from empty partitions


author: Zoltan Fridrich <zfridric@redhat.com> - 2.26-5
changelog:
  - added CAP_PERFMON, CAP_BPF and CAP_CHECKPOINT_RESTORE capabilities
    resolves: rhbz#1946982 rhbz#1921576


author: Zoltan Fridrich <zfridric@redhat.com> - 2.48-2
changelog:
  - rebase to 2.48
    resolves: rhbz#2032813
  - fix ambient capabilities for non-root users
    resolves: rhbz#1950187


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.48-5
changelog:
  - Fix integer overflow in _libcap_strdup() (CVE-2023-2603)
    Resolves: rhbz#2210637
  - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602)
    Resolves: rhbz#2210644


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.7.8-6
changelog:
  - Python 2 binary package renamed to python2-libcap-ng
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Nikola Forró <nforro@redhat.com> - 0.41-17
changelog:
  - backport several upstream fixes
  - set Delegate property for cgconfig service to make sure complete
    cgroup hierarchy is always created by systemd


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.1.16-1
changelog:
  - Update to 0.1.16
  - Make inline function __comps_objmrtree_all also static (RhBug:1793424)
  - Fix memory leaks and resource leaks
  - Fix: Check result "comps_parse_parsed_init()"


author: Kalev Lember <klember@redhat.com> - 0.6.9-1
changelog:
  - Update to 0.6.9
  - Use make_install macro
  - Mark COPYING and COPYING.LIB as %license
  - Tighten -devel subpackage deps


author: Filip Januš <fjanus@redhat.com> 5.3.28-42
changelog:
  - Apply the previous change only on aarch64 to limit the risk of unwanted impact
  - Resolves: #1992402


author: Sam Booth <sam.booth@oracle.com> - 5.3.28-42.0.1
changelog:
  - Update URL in rpm description [Orabug: 35986894]
  - Change http links in spec to https [Orabug: 35986894]
  - Buildrequire java-devel 1:1.8.0


author: Jaroslav Mracek <jmracek@redhat.com> - 0.20.0-1
changelog:
  - [module] Report module solver errors
  - [module] Enhance module commands and errors
  - [transaction] Fixed several problems with SWDB
  - Remove unneeded regex URL tests (RhBug:1598336)
  - Allow quoted values in ini files (RhBug:1624056)
  - Filter out not unique set of solver problems (RhBug:1564369)
  - Resolves: rhbz#1614531 - dnf 3.2 does not depsolve correctly
  - Resolves: rhbz#1614346 - dnf rollback doesn't work after install/downgrade/upgrade
  - bug 1605274 - DNF crashes on * in installation repository URL
  - Resolves: rhbz#1623383 - dnf.exceptions.ConfigError: Error parsing ...


author: Jaroslav Mracek <jmracek@redhat.com> - 0.22.0-1
changelog:
  - Fix segfault in repo_internalize_trigger (RhBug:1375895)
  - Change sorting of installonly packages (RhBug:1627685)
  - [swdb] Fixed pattern searching in history db (RhBug:1635542)
  - Check correctly gpg for repomd when refresh is used (RhBug:1636743)
  - [conf] Provide additional VectorString methods for compatibility with Python list.
  - [plugins] add plugin loading and hooks into libdnf


author: Jaroslav Mracek <jmracek@redhat.com> - 0.22.0-2
changelog:
  - Add patch Modify-solver_describe_decision-to-report-cleaned-RhBug1486749
  - Add patch swdb-create-persistent-WAL-files-RhBug1640235
  - Add patch Relocate-ModuleContainer-save-hook-RhBug1632518
  - Add patch Test-if-sack-is-present-and-run-save-module-persistor-RhBug1632518


author: Jaroslav Mracek <jmracek@redhat.com> - 0.22.3-1
changelog:
  - Permanently disable Python2 build for Fedora 30+
  - Update to 0.22.3
  - Modify solver_describe_decision to report cleaned (RhBug:1486749)
  - [swdb] create persistent WAL files (RhBug:1640235)
  - Relocate ModuleContainer save hook (RhBug:1632518)
  - [transaction] Fix transaction item lookup for obsoleted packages (RhBug: 1642796)
  - Fix memory leaks and memory allocations
  - [repo] Possibility to extend downloaded repository metadata


author: Daniel Mach <dmach@redhat.com> - 0.22.4-1
changelog:
  - Enhance LIBDNF plugins support
  - [repo] Check whether metadata cache is expired (RhBug:1539620,1648274)
  - [sack] Implement dnf_sack_get_rpmdb_version()


author: Jingdong Lu <jingdong.lu@oracle.com> - 0.22.5-5.0.1
changelog:
  - Disable rhsm [Orabug: 29901202]
  - Replaced bugzilla.redhat.com with bugzilla.oracle.com in config [Orabug: 29656932]


author: Frank Deng <frank.deng@oracle.com> - 0.22.5-5.0.2
changelog:
  - Add support for apps that use libdnf to access yum url with 'ociregion' variable [Orabug: 30121584]


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.33.0-1
changelog:
  - Update to 0.33.0
  - Enhance sorting for module list (RhBug:1590358)
  - [DnfRepo] Add methods for alternative repository metadata type and download (RhBug:1656314)
  - Remove installed profile on module enable or disable (RhBug:1653623)
  - Enhance modular solver to handle enabled and default module streams differently (RhBug:1648839)
  - Add support of wild cards for modules (RhBug:1644588)
  - Exclude module pkgs that have conflict
  - Enhance config parser to preserve order of data, and keep comments and format
  - Improve ARM detection
  - Add support for SHA-384
  - Return empty query if incorrect reldep (RhBug:1687135)
  - ConfigParser: Improve compatibility with Python ConfigParser and dnf-plugin-spacewalk (RhBug:1692044)
  - ConfigParser: Unify default set of string represenation of boolean values
  - Fix segfault when interrupting dnf process (RhBug:1610456)
  - Installroot now requires absolute path
  - Support "_none_" value for repo option "proxy" (RhBug:1680272)
  - Add support for Module advisories
  - Add support for xml:base attribute from primary.xml (RhBug:1691315)
  - Improve detection of Platform ID (RhBug:1688462)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.35.1-1
changelog:
  - Update to 0.35.1
  - Skip invalid key files in "/etc/pki/rpm-gpg" with warning (RhBug:1644040)
  - Enable timestamp preserving for downloaded data (RhBug:1688537)
  - Fix 'database is locked' error (RhBug:1631533)
  - Replace the 'Failed to synchronize cache' message (RhBug:1712055)
  - Fix 'no such table: main.trans_cmdline' error (RhBug:1596540)
  - Fix: skip_if_unavailable=true for local repositories (RhBug:1716313)
  - Add support of modular FailSafe (RhBug:1623128)
  - Add support of DNF main config file in context; used by PackageKit and
    microdnf (RhBug:1689331)
  - Exit gpg-agent after repokey import (RhBug:1650266)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.35.1-4
changelog:
  - Fix typo in error message (RhBug:1726661)
  - Update localizations from zanata (RhBug:1689991)
  - Don't disable nonexistent but required repositories (RhBug:1689331)
  - Ignore trailing blank lines of multiline value (RhBug:1722493)
  - Re-size includes map before re-computation (RhBug:1725213)


author: Edward Leung <edward.leung@oracle.com> - 0.35.1-8.0.1
changelog:
  - Disable rhsm [Orabug: 29901202]
  - Replaced bugzilla.redhat.com with bugzilla.oracle.com in config [Orabug: 29656932]
  - Add support for apps that use libdnf to access yum url with 'ociregion' variable [Orabug: 30121584] (Frank Deng)


author: Ales Matej <amatej@redhat.com> - 0.35.5-1
changelog:
  - Update to 0.35.5
  - Make libdnf own its plugin directory (RhBug:1714265)
  - Set priority of dnf.conf.d drop-ins
  - Fix toString() to not insert [] (RhBug:1584442)
  - Fix handling large number of filenames on input (RhBug:1690915)
  - Detect armv7 with crypto extension only on arm version >= 8
  - A new standardized User-Agent field consisting of the libdnf and OS version
    (including the variant) (RhBug:1156007)
  - Add basic countme support (RhBug:1647454)
  - Fix crash in PackageKit (RhBug:1636803)
  - Do not create @System.solv files (RhBug:1707995)
  - Set LRO_CACHEDIR so zchunk works again (RhBug:1739867)
  - Improve detection of extras packages by comparing (name, arch) pair instead
    of full NEVRA (RhBuh:1684517)
  - Improve handling multilib packages in the history command (RhBug:1728637)
  - Repo download: use full error description into the exception text (RhBug:1741442)
  - Properly close hawkey.log (RhBug:1594016)
  - Fix dnf updateinfo --update to not list advisories for packages updatable
    only from non-enabled modules
  - Apply modular filtering by package name (RhBug:1702729)


author: Ales Matej <amatej@redhat.com> - 0.38.1-1
changelog:
  - Update to 0.38.1
  - Change the best option default to false
  - Use more descriptive message when failed to retrieve GPG key (RhBug:1605117)
  - Add removeMetadataTypeFromDownload function to the API
  - Context part of libdnf can now read vars (urlvars) from dirs and environment
  - Throw exception immediately if file cannot be opened
  - Add test when there is no primary metadata in compatible format (RhBug:1744960)
  - Various improvements to countme features
  - Don't abort on rpmdb checksum calculation failure
  - Enable module dependency trees when using set_modules_enabled_by_pkgset() (RhBug:1762314)
  - Resolve problem with --best and search in provides (RhBug:1737469)
  - New method "Query::filterSubject()", replaces Solution::getBestSolution()
  - The Solution class was removed
  - Add query argument into get_best_query and get_best_solution
  - Add module reset function into dnf_context
  - Add method to get all repository metadata locations
  - Catch NoModuleException in case of not existent value was used in persistor (RhBug:1761773)


author: Ales Matej <amatej@redhat.com> - 0.39.1-1
changelog:
  - Update to 0.39.1
  - Report reason how package was excluded (RhBug:1649754)
  - Additional Arm detection improvements (RhBug:1691430)
  - Set skip_if_unavailable for media repos to skip their update (RhBug:1716067)
  - Add support of xml:base for remote and local url in context (RhBug:1734350,1717865)


author: Ales Matej <amatej@redhat.com> - 0.39.1-3
changelog:
  - Add two new query filters: obsoletes_by_priority, upgrades_by_priority (RhBug:1769466)
  - [context] Add wildcard support in dnf_context_repo_set_data (RhBug:1781420)
  - Remove killGpgAgent function (RhBug:1781601)


author: EL Errata <el-errata_ww@oracle.com> - 0.39.1-5.0.1.el8
changelog:
  - Update OL8 dnf to recognise kernel-uek as installonlypkgs package [Orabug: 31018668]
  - Disable rhsm [Orabug: 29901202]
  - Replaced bugzilla.redhat.com with bugzilla.oracle.com in config [Orabug: 29656932]
  - Add support for apps that use libdnf to access yum url with 'ociregion' variable [Orabug: 30121584] (Frank Deng)


author: Ales Matej <amatej@redhat.com> - 0.47.0-1
changelog:
  - Update to 0.47.0
  - Allow excluding packages with "excludepkgs" and globs
  - Make parsing of reldeps more strict (RhBug:1788107)
  - Add expanding solvable provides for dependency matching (RhBug:1534123)
  - DnfRepo: fix module_hotfixes keyfile priority level
  - Add custom exceptions to libdnf interface
  - Port to libmodulemd-2 API (RhBug:1693683)
  - Add prereq_ignoreinst & regular_requires properties for pkg (RhBug:1543449)
  - Reset active modules when no module enabled or default (RhBug:1767351)
  - Add comment option to transaction (RhBug:1773679)
  - Baseurl is not exclusive with mirrorlist/metalink (RhBug:1775184)
  - Add new function to reset all modules in C API (dnf_context_reset_all_modules)
  - Handle situation when an unprivileged user cannot create history database (RhBug:1634385)
  - Add query filter: latest by priority
  - Add setter for running kernel protection setting
  - Add DNF_NO_PROTECTED flag to allow empty list of protected packages
  - Config options: only first empty value clears existing (RhBug:1788154)
  - [conf] Set useful default colors when color is enabled
  - [context] Use installonly_limit from global config (RhBug:1256108)
  - [context] Add API to get/set "install_weak_deps"
  - [context] Adds support for includepkgs in repository configuration.
  - [context] Adds support for excludepkgs, exclude, includepkgs, and disable_excludes in main configuration.
  - [context] Added function dnf_transaction_set_dont_solve_goal
  - [context] Added functions dnf_context_get/set_config_file_path
  - [context] Respect "plugins" global conf value
  - [context] Add API to disable/enable plugins
  - [context] Create new repo instead of reusing old one (RhBug:1795004)
  - [context] Error when main config file can't be opened (RhBug:1794864)
  - [context] Add function function dnf_context_is_set_config_file_path
  - [context] Support repositories defined in main configuration file


author: Nicola Sella <nsella@redhat.com> - 0.48.0-1
changelog:
  - Update to 0.48.0
  - swdb: Catch only SQLite3 exceptions and simplify the messages
  - MergedTransaction list multiple comments (RhBug:1773679)
  - Modify CMake to pull *.po files from weblate
  - Optimize DependencyContainer creation from an existing queue
  - fix a memory leak in dnf_package_get_requires()
  - Fix memory leaks on g_build_filename()
  - Fix memory leak in dnf_context_setup()
  - Add `hy_goal_favor` and `hy_goal_disfavor`
  - Define a cleanup function for `DnfPackageSet`
  - dnf-repo: fix dnf_repo_get_public_keys double-free
  - Do not cache RPMDB
  - Use single-quotes around string literals used in SQL statements
  - SQLite3: Do not close the database if it wasn't opened (RhBug:1761976)
  - Don't create a new history DB connection for in-memory DB
  - transaction/Swdb: Use a single logger variable in constructor
  - utils: Add a safe version of pathExists()
  - swdb: Handle the case when pathExists() fails on e.g. permission
  - Repo: prepend "file://" if a local path is used as baseurl
  - Move urlEncode() to utils
  - utils: Add 'exclude' argument to urlEncode()
  - Encode package URL for downloading through librepo (RhBug:1817130)
  - Replace std::runtime_error with libdnf::RepoError
  - Fixes and error handling improvements of the File class
  - [context] Use ConfigRepo for gpgkey and baseurl (RhBug:1807864)
  - [context] support "priority" option in .repo config file (RhBug:1797265)


author: Nicola Sella <nsella@redhat.com> - 0.48.0-3
changelog:
  - Add log file level main config option (RhBug:1802074)
  - Accept '==' as an operator in reldeps (RhBug:1847946)


author: EL Errata <el-errata_ww@oracle.com> - 0.48.0-5.0.1
changelog:
  - Update OL8 dnf to recognise kernel-uek as installonlypkgs package [Orabug: 31018668]
  - Disable rhsm [Orabug: 29901202]
  - Replaced bugzilla.redhat.com with bugzilla.oracle.com in config [Orabug: 29656932]


author: Alan Steinberg <alan.steinberg@oracle.com> - 0.48.0-5.0.2
changelog:
  - Add support for apps that use libdnf to access yum url with 'ociregion' variable [Orabug: 30121584] (Frank Deng)


author: Nicola Sella <nsella@redhat.com> - 0.55.0-1
changelog:
  - Add vendor to dnf API (RhBug:1876561)
  - Add formatting function for solver error
  - Add error types in ModulePackageContainer
  - Implement module enable for context part
  - Improve string formatting for translation
  - Remove redundant printf and change logging info to notice (RhBug:1827424)
  - Add allow_vendor_change option (RhBug:1788371) (RhBug:1788371)


author: Nicola Sella <nsella@redhat.com> - 0.55.0-3
changelog:
  - Avoid multilib file conflict in config.h (RhBug:1918818)
  - [modules] Add special handling for src artifacts (RhBug:1809314)


author: Nicola Sella <nsella@redhat.com> - 0.55.0-4
changelog:
  - [context] improve retrieving repository configuration
  - Allow loading incomplete cache and loading ext solv files without its repodata


author: EL Errata <el-errata_ww@oracle.com> - 0.55.0-7.0.1
changelog:
  - Add support for apps that use libdnf to access yum url with 'ociregion' variable [Orabug: 30121584] (Frank Deng)
  - Update OL8 dnf to recognise kernel-uek as installonlypkgs package [Orabug: 31018668]
  - Disable rhsm [Orabug: 29901202]
  - Replaced bugzilla.redhat.com with bugzilla.oracle.com in config [Orabug: 29656932]


author: Lukas Hrazky <lhrazky@redhat.com> - 0.63.0-8
changelog:
  - Substitute all repository config options (fixes substitution of baseurl)
  - Use solvfile userdata to store and check checksums and solv versions
  - Fix handling transaction id in resolveTransactionItemReason
  - Set short action for Reason Change


author: Lukas Hrazky <lhrazky@redhat.com> - 0.63.0-10
changelog:
  - Do not print errors on failovermethod repo option
  - the dnf_context_remove() function accepts `<package-spec>`, doc updates
  - advisory upgrade: filter out advPkgs with different arch


author: EL Errata <el-errata_ww@oracle.com> - 0.63.0-11.1.0.1
changelog:
  - Add support for apps that use libdnf to access yum url with 'ociregion' variable [Orabug: 30121584] (Frank Deng)
  - Update OL8 dnf to recognise kernel-uek as installonlypkgs package [Orabug: 31018668]
  - Disable rhsm [Orabug: 29901202]
  - Replaced bugzilla.redhat.com with bugzilla.oracle.com in config [Orabug: 29656932]
  - Update OL8 dnf to recognise UEK7 as installonlypkgs package [Orabug: 33861658]


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.63.0-1
changelog:
  - Update to 0.62.0
  - Hardening: add signature check with rpmcliVerifySignatures (RhBug:1932079)
  - Support allow_vendor_change setting in dnf context API
  - Add a new option module_obsoletes
  - Add new API applyObsoletes() function to apply modular obsoletes
  - Do not allow 1 as installonly_limit value (RhBug:1926261)
  - Add a config option to check TLS certificate revocation status (using OCSP stapling), defaults to false (RhBug:1814383)
  - Swdb: Add a method to get the current transaction
  - [context,API] Functions for accessing main/global configuration options
  - [context,API] Function for adding setopt
  - Add getter for modular obsoletes from ModuleMetadata
  - Add ModulePackage.getStaticContext() and getRequires()
  - Fix modular queries with the new solver
  - Fix: Fully set ssl in newHandle function
  - [conf] Add options for working with certificates used with proxy
  - Modify module NSVCA parsing - context definition (RhBug:1926771)
  - [context] Fix: dnf_package_is_installonly (RhBug:1928056)
  - Add getApplicablePackages to advisory and isApplicable to advisorymodule
  - Keep isAdvisoryApplicable to preserve API
  - [context] Support config file option "proxy_auth_method", defaults "any"
  - Support main config file options "installonlypkgs" and "protected_packages". Changes behaviour of microdnf and PackageKit.
  - Properly handle multiple collections in updateinfo.xml (RhBug:1804234)
  - Fix a crash when [media] section in .treeinfo is missing for bootable media (RhBug:1946024)
  - Add new dnf_context_module_install() C API


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.63.0-2
changelog:
  - Fix: dnf_context_module_install: memory leaks
  - covscan: remove unused vars, mark private func static, return values
  - DNF does not fail on non UTF-8 file names in a package


author: Lans Hung <lans.hung@oracle.com> - 0.63.0-3.0.2
changelog:
  - Update OL8 dnf to recognize UEK7(kernel-uek-core & kernel-uek-modules) as installonlypkgs package [Orabug: 33861658]


author: Jerry James <loganjerry@gmail.com> - 3.1-23.20170329cvs
changelog:
  - Add gcc BR
  - Build verbosely
  - Drop obsolete --enable-widec configure option
  - Fix "unused direct shared library dependency" warning from rpmlint again
  - Fix man page error due to BSD nroff macro that is not available on Linux
  - Drop explicit R on pkgconfig from the -devel package, autogenerated


author: Parag Nemade <pnemade AT fedoraproject DOT org> - 1:1.07.4-10
changelog:
  - Resolves:rh#1526510 - USE_TYPO_METRICS set in Fedora 2X but not set in RHEL7 or in ttf binary release
  - some spec cleanups


author: Vishal Vijayraghavan <vishalvijayraghavan AT gmail DOT com> - 1:2.00.3-1
changelog:
  - Resolves: rhbz#1614529
  - Updated the BuildRequires to python3 and using latest build
  - Changed the upstream URL


author: Vishal vijayraghavan <vishalvijayraghavan AT gmail DOT com> - 1:2.00.3-4
changelog:
  - Resolves: rhbz#1643920: Removed Obsoletes: liberation-narrow-fonts and Provides: liberation-narrow-fonts macro


author: Vishal Vijayraghavan <vvijayra@redhat.com> - 1:2.00.3-6
changelog:
  - Resolves: #1664501 - liberation-fonts-common contains fonts.dir
  - Splitted the font family(mono, sans and serif) into diferrent root font directories


author: Honggang Li <honli@redhat.com> - 1.11.1-1
changelog:
  - Rebase to upstream release v1.11.1
  - EFA Support requires libfabric
  - Resolves: bz1831145, bz1852636


author: Michal Schmidt <mschmidt@redhat.com> - 1.15.1-1
changelog:
  - Update to upstream release 1.15.1
  - Disable LTO on x86_64 due to memory issues (copied from Fedora)
  - Resolves: rhbz#2040450


author: Jens Petersen <petersen@redhat.com> - 3.1-12
changelog:
  - protect install-info in the rpm scriptlets
    https://fedoraproject.org/wiki/Packaging:Scriptlets#Texinfo


author: DJ Delorie <dj@redhat.com> - 3.1-24
changelog:
  - Use /etc/sysconfig/libffi-force-shared-memory-check-first to
    override selinux permissions check for shared memory access (#2014228)


author: Tomáš Mráz <tmraz@redhat.com> 1.8.3-2
changelog:
  - make only_urandom a default in non-presence of configuration file
  - run the full FIPS selftests only when the library is called from
    application


author: Tomáš Mráz <tmraz@redhat.com> 1.8.3-3
changelog:
  - add CMAC selftest for FIPS POST
  - add continuous FIPS entropy test
  - disable non-approved FIPS hashes in the enforced FIPS mode


author: Tomáš Mráz <tmraz@redhat.com> 1.8.5-3
changelog:
  - new upstream version 1.8.5
  - AES performance improvements backported from master branch
  - FIPS module is implicit with kernel FIPS flag
  - always run the FIPS selftests if FIPS module is installed


author: Jakub Jelen <jjelen@redhat.com> - 1.8.5-6
changelog:
  - Fix for CVE-2021-33560 (#1971421)
  - Enable HW optimizations in FIPS (#1976137)
  - Performance enchancements for ChaCha20 and Poly1305 (#1855231)


author: Jakub Jelen <jjelen@redhat.com> - 1.8.5-6
changelog:
  - Fix for CVE-2021-40528 (#1971421)
  - Enable HW optimizations in FIPS (#1976137)
  - Performance enchancements for ChaCha20 and Poly1305 (#1855231)


author: Richard Hughes <richard@hughsie.com> 0.2.10-1
changelog:
  - New upstream version
  - Correctly detect removed devices when rescanning
  - Fix a memory leak when using control tranfers
  - Fix symbol version table up to version 0.2.9


author: Rafael Aquini <aquini@redhat.com> - 2.20-10
changelog:
  - Fix up annocheck distro flag failures (1624131)
  - Convert libhugetlbfs run_tests.py to Python3 (1620250)


author: Rafael Aquini <aquini@redhat.com> - 2.21-4
changelog:
  - Fix: task-size-overrun hung over 8 hours on ppc64le (1737370)
  - Introduce libhugetlbfs-tests subpkg for CI tests (1688930)


author: Rafael Aquini <aquini@redhat.com> - 2.21-12
changelog:
  - Fix: Introduce libhugetlbfs-tests subpkg for CI tests (1688930)
  - trim repetitive changelogs for interim debug builds


author: Rafael Aquini <aquini@redhat.com> - 2.21-13
changelog:
  - Fix: huge_page_setup_helper.py: SyntaxError: Missing parentheses in call to 'print' (1821938)
  - libhugetlbfs-tests: harden the testcases to satisfy EXECSHIELD RPMDiff checks (1785296)


author: Michal Židek <mzidek@redhat.com> - 2.0.0-33
changelog:
  - Resolves: rhbz#1646113 - Missing concise documentation about valid options
                             for sssd-files-provider


author: Michal Židek <mzidek@redhat.com> - 2.0.0-34
changelog:
  - Resolves: rhbz#1622008 - Error message when IPA server uninstall calls
                             kdestroy caused by KCM returning a wrong error
                             code during the delete operation


author: Michal Židek <mzidek@redhat.com> - 2.0.0-36
changelog:
  - Resolves: rhbz#1652563 - incorrect example in the man page of idmap_sss
                             suggests using * for backend sss


author: Michal Židek <mzidek@redhat.com> - 2.0.0-38
changelog:
  - Resolves: rhbz#1578014 - sssd does not work under non-root user
  - Note: Actually the patches were in the 2.0.0-37, this one just adds this
          changelog because it was missing.


author: Michal Židek <mzidek@redhat.com> - 2.0.0-39
changelog:
  - Resolves: rhbz#1661183 - SSSD 2.0 has drastically lower sbus timeout than
                             1.x, this can result in time outs


author: Michal Židek <mzidek@redhat.com> - 2.0.0-40
changelog:
  -Resolves: rhbz#1660083 - extraAttributes is org.freedesktop.DBus.Error.
                            UnknownProperty: Unknown property


author: Michal Židek <mzidek@redhat.com> - 2.0.0-41
changelog:
  -Resolves: rhbz#1659498 - Re-setting the trusted AD domain fails due to wrong
                            subdomain service name being used


author: Michal Židek <mzidek@redhat.com> - 2.0.0-42
changelog:
  - Resolves: rhbz#1645291 - Perform some basic ccache initialization as part
                             of gen_new to avoid a subsequent switch call
                             failure


author: Jakub Hrozek <jhrozek@redhat.com> - 2.0.0-43
changelog:
  - Resolves: rhbz#1672780 - gdm login not prompting for username when smart
                             card maps to multiple users


author: Michal Židek <mzidek@redhat.com> - 2.0.0-43.1
changelog:
  - Resolves: rhbz#1691750 - pam_sss failing for external users not configured
                             via sssd


author: Michal Židek <mzidek@redhat.com> - 2.0.0-43.2
changelog:
  - Resolves: rhbz#1696596 - AD user not found after establishing trust and
                             restarting sssd [ZStream Clone]


author: Michal Židek <mzidek@redhat.com> - 2.0.0-43.3
changelog:
  - Resolves: rhbz#1701135 - Include libsss_nss_idmap-devel in the Builder
                             repository


author: Michal Židek <mzidek@redhat.com> - 2.2.0-10
changelog:
  - Resolves: rhbz#1736483 - Sudo prompt for smart card authentication is missing
                             the trailing colon


author: Michal Židek <mzidek@redhat.com> - 2.2.0-11
changelog:
  - Resolves: rhbz#1733372 - permission denied on logs when running sssd as
                             non-root user


author: Michal Židek <mzidek@redhat.com> - 2.2.0-13
changelog:
  - Resolves: rhbz#1669407 - MAN: Document that PAM stack contains the
              systemd-user service in the account phase in RHEL-8


author: Michal Židek <mzidek@redhat.com> - 2.2.0-14
changelog:
  - Resolves: rhbz#1736796 - sssd config option "default_domain_suffix"
                             should not cause files domain entries to be
                             qualified, this can break sudo access


author: Michal Židek <mzidek@redhat.com> - 2.2.0-15
changelog:
  - Resolves: rhbz#1736265 - Smart Card auth of local user: endless
                             loop if wrong PIN was provided


author: Michal Židek <mzidek@redhat.com> - 2.2.0-16
changelog:
  - Resolves: rhbz#1736861 - dyndns_update = True is no longer enough to get
                             the IP address of the machine updated in IPA upon
                             sssd.service startup


author: Michal Židek <mzidek@redhat.com> - 2.2.0-17
changelog:
  - Resolves: rhbz#1676385 - pam_sss with smartcard auth does not create gnome
                             keyring
  - Also apply a patch to fix gating tests issue


author: Michal Židek <mzidek@redhat.com> - 2.2.0-18
changelog:
  - Resolves: rhbz#1744134 - New defect found in sssd-2.2.0-16.el8
  - Also sync. kcm multihost tests with master


author: Michal Židek <mzidek@redhat.com> - 2.2.0-19
changelog:
  - Resolves: rhbz#1712875 - Old kerberos credentials active instead of valid
                             new ones (kcm)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.2.0-19.1
changelog:
  - Resolves: rhbz#1816591 - p11_child should have an option to skip
                             C_WaitForSlotEvent if the PKCS#11 module does not
                             implement it properly [rhel-8.1.0.z]


author: Michal Židek <mzidek@redhat.com> - 2.2.3-14
changelog:
  - Resolves: rhbz#1767514 - sssd requires timed sudoers ldap entries to be
                             specified up to the seconds


author: Alexey Tikhonov <atikhono@redhat.com> - 2.2.3-16
changelog:
  - Resolves: rhbz#1792331 - sssd_be crashes when krb5_realm and krb5_server is
                             omitted and auth_provider is krb5


author: Alexey Tikhonov <atikhono@redhat.com> - 2.2.3-17
changelog:
  - Resolves: rhbz#1718193 - p11_child should have an option to skip
                             C_WaitForSlotEvent if the PKCS#11 module
                             does not implement it properly


author: Michal Židek <mzidek@redhat.com> - 2.2.3-18
changelog:
  - Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard
                             certificate EKU and perform an action based
                             on value when generating SSH key from a certificate


author: Alexey Tikhonov <atikhono@redhat.com> - 2.2.3-19
changelog:
  - Resolves: rhbz#1810634 - id command taking 1+ minute for returning user
                             information


author: Alexey Tikhonov <atikhono@redhat.com> - 2.2.3-19
changelog:
  - Resolves: rhbz#1580506 - [RFE]: sssd to be able to read smartcard
                             certificate EKU and perform an action based
                             on value when generating SSH key from a certificate
                             (additional patch)


author: EL Errata <el-errata_ww@oracle.com> - 2.2.3-20.0.1.el8
changelog:
  - Revert Redhat's change of disallowing duplicated incomplete gid
    when "id_provider=ldap" is used, which caused regression in AD
    environment. [Orabug: 29286774] [Doc ID 2605732.1]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-1
changelog:
  - Resolves: rhbz#1839037 - Rebase SSSD for RHEL 8.3
  - Resolves: rhbz#1843872 - sssd 2.3.0 breaks AD auth due to GPO parsing failure
  - Resolves: rhbz#1834156 - sssd or sssd-ad not updating their dependencies on "yum update" which breaks working


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-2
changelog:
  - Resolves: rhbz#Bug 1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-3
changelog:
  - Resolves: rhbz#1829470 - `sssd.api.conf` and `sssd.api.d` should belong to `python-sssdconfig` package
  - Resolves: rhbz#1544457 - sssd fails to release file descriptor on child logs after receiving HUP
  - Resolves: rhbz#1824323 - SSSD user filtering is failing on RHEL 8 after "files" provider rebuilds cache
  - Resolves: rhbz#1827432 - When the passwd or group files are replaced, sssd stops monitoring the file for
                             inotify events, and no updates are triggered
  - Resolves: rhbz#1835710 - Change the message "Please enter smart card" to "Please insert smart card"
                             on GDM login with smart-card
  - Resolves: rhbz#1838037 - Oddjob-mkhomedir fails when using NSS compat
  - Resolves: rhbz#1845904 - gdm smart card authentication does not work shortly after disconnecting from network.
  - Resolves: rhbz#1845975 - sssd doesn't follow the link order of AD Group Policy Management
  - Resolves: rhbz#1845980 - sssd is failing to discover other subdomains in the forest
                             if LDAP entries do not contain AD forest root information
  - Resolves: rhbz#1845987 - Document how to prevent invalid selinux context for default home directories
                             in SSSD-AD direct integration.
  - Resolves: rhbz#1845994 - GDM failure loop when no user mapped for smart card
  - Resolves: rhbz#1846003 - GDM password prompt when cert mapped to multiple users and promptusername is False
  - Resolves: rhbz#1850961 - /usr/share/systemtap/tapset/sssd_functions.stp missing a comma


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-4
changelog:
  - Resolves: rhbz#1815584 - id_provider = proxy proxy_lib_name = files returns * in password field, breaking PAM authentication
  - Resolves: rhbz#1794607 - SSSD must be able to resolve membership involving root with files provider
  - Resolves: rhbz#1803134 - Improve "unlock" time when user session already active


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-5
changelog:
  - Resolves: rhbz#1821719 - sssd (sssd_be) is consuming 100% CPU, partially due to failing mem-cache
  - Fixed "requires/provides" rpmdiff warning


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-7
changelog:
  - Resolves: rhbz#1723273 - RFE: Add option to specify alternate sssd config file location with "sssctl config-check" command.
  - Resolves: rhbz#1780404 - smartcards: special characters must be escaped when building search filter


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-8
changelog:
  - Resolves: rhbz#1868387 - system not enforcing GPO rule restriction. ad_gpo_implicit_deny = True is not working
  - Resolves: rhbz#1854951 - sss-certmap man page change to add clarification for userPrincipalName attribute from AD schema
  - Resolves: rhbz#1856861 - False errors/warnings are logged in sssd.log file after enabling 2FA prompting settings in sssd.conf
  - Resolves: rhbz#1869683 - p11_child: default value of ocsp_dgst == sha256 doesn't conform RFC5019 and has to be changed to sha1


author: Alexey Tikhonov <atikhono@redhat.com> - 2.3.0-9
changelog:
  - Resolves: rhbz#1855323 - When ad_gpo_implicit_deny is True, it is permitting users to login when no gpo is applied


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-1
changelog:
  - Resolves: rhbz#1881992 - Rebase SSSD for RHEL 8.4
  - Resolves: rhbz#1722842 - sssd-kcm does not store TGT with ssh login using GSSAPI
  - Resolves: rhbz#1734040 - sssd crash in ad_get_account_domain_search()
  - Resolves: rhbz#1784459 - [RFE] tlog does not allow to exclude some users from session recording
  - Resolves: rhbz#1791300 - sporadic sssd_be crash on s390x
  - Resolves: rhbz#1817122 - 'getent group ldapgroupname' doesn't show any LDAP users or some LDAP users when 'rfc2307bis' schema is used with SSSD.
  - Resolves: rhbz#1819012 - [RFE] Improve AD site discovery process
  - Resolves: rhbz#1846778 - [RfE] `/usr/libexec/sssd/p11_child` cmdline argument '--nssdb' might be confusing when SSSD was built against OpenSSL
  - Resolves: rhbz#1873715 - automount sssd issue when 2 automount maps have the same key (one un uppercase, one in lowercase)
  - Resolves: rhbz#1879860 - correction in sssd.conf:pam_response_filter man page
  - Resolves: rhbz#1881336 - [RFE] sssd-ldap man page modification for parameter "ldap_referrals"
  - Resolves: rhbz#1883488 - [RfE] Implement a new sssd.conf option to disable the filter for AD domain local groups from trusted domains
  - Resolves: rhbz#1884196 - [RFE] Add "enabled" option to domain section in config file
  - Resolves: rhbz#1884205 - KCM: Increase client idle timeout to 5 minutes
  - Resolves: rhbz#1884207 - [RFE] ldap: add new option ldap_library_debug_level
  - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff
  - Resolves: rhbz#1884281 - Secondary LDAP group go missing from 'id' command
  - Resolves: rhbz#1884301 - [RFE] dyndns: suport asymmetric auth for nsupdate


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-3
changelog:
  - Resolves: rhbz#1900733 - sssd_be segfaults at be_refresh_get_values_ex() due to NULL ptrs in results of sysdb_search_with_ts_attr()
  - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process
  - Resolves: rhbz#1894540 - sssd component logging is now too generic in syslog/journal
  - Resolves: rhbz#1828483 - filtered ID is appearing due to strange negative cache behavior


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-4
changelog:
  - Resolves: rhbz#1876514 - High CPU utilization by the sssd_kcm process
  - Resolves: rhbz#1876658 - filter_groups option partially filters the group from 'id' output of the user because gidNumber still appears in 'id' output [RHEL 8]
  - Resolves: rhbz#1895001 - User lookups over the InfoPipe responder fail intermittently


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-5
changelog:
  - Resolves: rhbz#1631410 - Can't login with smartcard with multiple certs having same ID value
  - Resolves: rhbz#1884213 - [RFE] add offline_timeout_max config option to control offline interval backoff (additional patches)
  - Resolves: rhbz#1893159 - Default debug level should report all errors / failures
  - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-6
changelog:
  - Resolves: rhbz#1113639 - autofs: return a connection failure until maps have been fetched
  - Resolves: rhbz#1915395 - Memory leak in the simple access provider
  - Resolves: rhbz#1915319 - SSSD: SBUS: failures during servers startup
  - Resolves: rhbz#1893698 - [RFE] sudo kerberos authentication (additional patches)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-7
changelog:
  - Resolves: rhbz#1920001 - Do not add '%' to group names already prefixed with '%' in IPA sudo rules
  - Resolves: rhbz#1918433 - sssd unable to lookup certmap rules
  - Resolves: rhbz#1917382 - [abrt] [faf] sssd: dp_client_handshake_timeout(): /usr/libexec/sssd/sssd_be killed by 11


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-8
changelog:
  - Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
  - Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.
  - Resolves: rhbz#1893159 - Default debug level should report all errors / failures (additional patch)


author: EL Errata <el-errata_ww@oracle.com> - 2.4.0-9.0.1
changelog:
  - Restore default debug level for sss_cache [Orabug: 32810448]
  - Restore default debug level for shadow-utils tools [Orabug: 32810448]
  - Revert Redhat's change of disallowing duplicated incomplete gid
    when "id_provider=ldap" is used, which caused regression in AD
    environment. [Orabug: 29286774] [Doc ID 2605732.1]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-9.1
changelog:
  - Resolves: rhbz#1949170 - pam_sss_gss.so doesn't work with large kerberos tickets [rhel-8.4.0.z]
  - Resolves: rhbz#1945656 - No gpo found and ad_gpo_implicit_deny set to True still permits user login [rhel-8.4.0.z]
  - Resolves: rhbz#1945655 - SSSD not detecting subdomain from AD forest (RHEL 8.3) [rhel-8.4.0.z]
  - Resolves: rhbz#1945654 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7 [rhel-8.4.0.z]
  - Resolves: rhbz#1942438 - Wrong default debug level of sssd tools [rhel-8.4.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-9.2
changelog:
  - Resolves: rhbz#1985456 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8.4.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.0-1
changelog:
  - Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
  - Resolves: rhbz#1930535 - [abrt] [faf] sssd: monitor_service_shutdown(): /usr/sbin/sssd killed by 11
  - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
  - Resolves: rhbz#1945888 - Inconsistant debug level for connection logging
  - Resolves: rhbz#1948657 - pam_sss_gss.so doesn't work with large kerberos tickets
  - Resolves: rhbz#1949149 - [RFE] Poor man's backtrace
  - Resolves: rhbz#1920500 - Authentication handshake (ldap_install_tls()) fails due to underlying openssl operation failing with EINTR
  - Resolves: rhbz#1923964 - [RFE] SSSD Error Msg Improvement: write_krb5info_file failed, authentication might fail.
  - Resolves: rhbz#1928648 - SSSD logs improvements: clarify which config option applies to each timeout in the logs
  - Resolves: rhbz#1632159 - sssd-kcm starts successfully for non existent socket_path
  - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm
  - Resolves: rhbz#1925505 - [RFE] improve the sssd refresh timers for SUDO queries
  - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
  - Resolves: rhbz#1925561 - sssd-ldap(5) does not report how to disable the SUDO smart queries
  - Resolves: rhbz#1925621 - document impact of indices and of scope on performance of LDAP queries
  - Resolves: rhbz#1855320 - [RFE] RHEL8 sssd: inheritance of the case_sensitive parameter for subdomains.
  - Resolves: rhbz#1925608 - [RFE] make 'random_offset' addon to 'offline_timeout' option configurable
  - Resolves: rhbz#1447945 - man page / docs update required: if two certificate matching rules with the same priority match only one is used
  - Resolves: rhbz#1703436 - sssd not thread-safe in innetgr()
  - Resolves: rhbz#1713143 - SSSD does not translate the 2FA text labels("first factor" / "second factor") on GDM login and screensaver unlock screen
  - Resolves: rhbz#1888977 - sss_override: Usage limitations clarification in man page
  - Resolves: rhbz#1890177 - Clarify "single_prompt" option in "PROMPTING CONFIGURATION SECTION" section of sssd.conf man page
  - Resolves: rhbz#1902280 - fix sss_cache to also reset cached timestamp
  - Resolves: rhbz#1935683 - SSSD not detecting subdomain from AD forest (RHEL 8.3)
  - Resolves: rhbz#1937919 - IPA missing secondary IPA Posix groups in latest sssd 1.16.5-10.el7_9.7
  - Resolves: rhbz#1944665 - No gpo found and ad_gpo_implicit_deny set to True still permits user login
  - Resolves: rhbz#1919942 - sss_override does not take precedence over override_homedir directive


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.1-1
changelog:
  - Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
  - Resolves: rhbz#1942387 - Wrong default debug level of sssd tools
  - Resolves: rhbz#1917444 - SSSD Error Msg Improvement: Server resolution failed: [2]: No such file or directory
  - Resolves: rhbz#1917511 - SSSD Error Msg Improvement: Failed to resolve server 'server.example.com': Error reading file
  - Resolves: rhbz#1917535 - sssd.conf man page: parameter dns_resolver_server_timeout and dns_resolver_op_timeout
  - Resolves: rhbz#1940509 - [RFE] Health and Support Analyzer: Link frontend to backend requests
  - Resolves: rhbz#1649464 - auto_private_groups not working as expected with posix ipa/ad trust
  - Resolves: rhbz#1925514 - [RFE] Randomize the SUDO timeouts upon reconnection
  - Resolves: rhbz#1961215 - Invalid sssd-kcm return code if requested operation is not found
  - Resolves: rhbz#1837090 - SSSD fails nss_getby_name for IPA user with SID if the user has user private group
  - Resolves: rhbz#1879869 - sudo commands incorrectly exports the KRB5CCNAME environment variable
  - Resolves: rhbz#1962550 - sss_pac_make_request fails on systems joined to Active Directory.
  - Resolves: rhbz#1737489 - [RFE] SSSD should honor default Kerberos settings (keytab name) in /etc/krb5.conf


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.1-2
changelog:
  - Resolves: rhbz#1974257 - 'debug_microseconds' config option is broken
  - Resolves: rhbz#1936902 - SSSD Error Msg Improvement: Invalid argument
  - Resolves: rhbz#1627112 - RFE: Kerberos ticket renewal for sssd-kcm (additional patches and rebuild)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-1
changelog:
  - Resolves: rhbz#1947671 - Rebase SSSD for RHEL 8.5
  - Resolves: rhbz#1693379 - sssd_be and sss_cache too heavy on CPU
  - Resolves: rhbz#1909373 - Missing search index for `originalADgidNumber`
  - Resolves: rhbz#1954630 - [RFE] Improve debug messages by adding a unique tag for each request the backend is handling
  - Resolves: rhbz#1936891 - SSSD Error Msg Improvement: Bad address
  - Resolves: rhbz#1364596 - sssd still showing ipa user after removed from last group
  - Resolves: rhbz#1979404 - Changes made to /etc/pam.d/sssd-shadowutils are overwritten back to default on sssd-common package upgrade


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-2
changelog:
  - Resolves: rhbz#1975169 - EMBARGOED CVE-2021-3621 sssd: shell command injection in sssctl [rhel-8]
  - Resolves: rhbz#1962042 - [sssd] RHEL 8.5 Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-2.1
changelog:
  - Resolves: rhbz#2014460 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing [rhel-8.5.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-2.2
changelog:
  - Resolves: rhbz#2018440 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest) [rhel-8.5.0.z]
  - Resolves: rhbz#2016923 - autofs lookups for unknown mounts are delayed for 50s [rhel-8.5.0.z]
  - Resolves: rhbz#2021499 - Make backtrace less "chatty" (avoid duplicate backtraces) [rhel-8.5.0.z]
  - Resolves: rhbz#2013379 - Lookup with fully-qualified name does not work with 'cache_first = True' [rhel-8.5.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-2.3
changelog:
  - Resolves: rhbz#2028828 - pam responder does not call initgroups to refresh the user entry [rhel-8.5.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-2.4
changelog:
  - Resolves: rhbz#2030651 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries [rhel-8.5.0.z]
  - Resolves: rhbz#2035285 - AD Domain in the AD Forest Missing after sssd latest update [rhel-8.5.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.1-1
changelog:
  - Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
  - Resolves: rhbz#1968340 - 'exclude_groups' option provided in SSSD for session recording (tlog) doesn't work as expected
  - Resolves: rhbz#1952569 - SSSD should use "hidden" temporary file in its krb locator
  - Resolves: rhbz#1917970 - proxy provider: secondary group is showing in sssd cache after group is removed
  - Resolves: rhbz#1636002 - socket-activated services start as the sssd user and then are unable to read the confdb
  - Resolves: rhbz#2021196 - Make backtrace less "chatty" (avoid duplicate backtraces)
  - Resolves: rhbz#2018432 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest)
  - Resolves: rhbz#2015070 - Consistency in defaults between OpenSSH and SSSD
  - Resolves: rhbz#2013297 - disabled root ad domain causes subdomains to be marked offline
  - Resolves: rhbz#2013294 - Lookup with fully-qualified name does not work with 'cache_first = True'
  - Resolves: rhbz#2013218 - autofs lookups for unknown mounts are delayed for 50s
  - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
  - Resolves: rhbz#2013024 - Add support for CKM_RSA_PKCS in smart card authentication.
  - Resolves: rhbz#2013006 - [RFE] support subid ranges managed by FreeIPA
  - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
  - Resolves: rhbz#2012122 - tps tests fail with cross dependency on sssd debuginfo package: removal of 'sssd-libwbclient-debuginfo' is missing


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-1
changelog:
  - Resolves: rhbz#2011216 - Rebase SSSD for RHEL 8.6
  - Resolves: rhbz#2013260 - [RHEL8] Add ability to parse child log files
  - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
  - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
  - Resolves: rhbz#1961182 - Passwordless (GSSAPI) SSH not working due to missing "includedir /var/lib/sss/pubconf/krb5.include.d" directive in /etc/krb5.conf
  - Resolves: rhbz#2008829 - sssd_be segfault due to empty forest root name
  - Resolves: rhbz#2012263 - pam responder does not call initgroups to refresh the user entry
  - Resolves: rhbz#2012308 - Add client certificate validation D-Bus API
  - Resolves: rhbz#2012327 - Groups are missing while performing id lookup as SSSD switching to offline mode due to the wrong domain name in the ldap-pings(netlogon).
  - Resolves: rhbz#2013028 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs
  - Resolves: rhbz#2013259 - [RHEL8] Add tevent chain ID logic into responders
  - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-3
changelog:
  - Resolves: rhbz#2039892 - 2.6.2 regression: Daemon crashes when resolving AD user names
  - Resolves: rhbz#1859315 - sssd does not use kerberos port that is set.
  - Resolves: rhbz#2030386 - sssd-kcm has requirement on krb5 symbol "krb5_unmarshal_credentials" only available in latest RHEL8.5 krb5 libraries
  - Resolves: rhbz#2035245 - AD Domain in the AD Forest Missing after sssd latest update
  - Resolves: rhbz#2017301 - [sssd] RHEL 8.6 Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-4
changelog:
  - Resolves: rhbz#2074648 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop [rhel-8.6.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-4.1
changelog:
  - Resolves: rhbz#2072958 - Use right sdap_domain in ad_domain_info_send [rhel-8.6.0.z]
  - Resolves: rhbz#2089244 - pam_sss_gss ceased to work after upgrade to 8.6 [rhel-8.6.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.0-2
changelog:
  - Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
  - Resolves: rhbz#2026799 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
  - Resolves: rhbz#2033347 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
  - Resolves: rhbz#2056483 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
  - Resolves: rhbz#2062689 - [Improvement] Add user and group version of sss_nss_getorigbyname()
  - Resolves: rhbz#2065692 - [RHEL8] Ship new sub-package called sssd-idp into sssd
  - Resolves: rhbz#2072050 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
  - Resolves: rhbz#2072931 - Use right sdap_domain in ad_domain_info_send
  - Resolves: rhbz#2087088 - sssd does not enforce smartcard auth for kde screen locker
  - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol
  - Resolves: rhbz#2087745 - 2FA prompting setting ineffective
  - Resolves: rhbz#2087746 - sssd fails GPO-based access if AD have setup with Japanese language


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.2-1
changelog:
  - Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
  - Resolves: rhbz#2098620 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
  - Resolves: rhbz#2098619 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
  - Resolves: rhbz#2088817 - pam_sss_gss ceased to work after upgrade to 8.6
  - Resolves: rhbz#2098616 - Add idp authentication indicator in man page of sssd.conf
  - Resolves: rhbz#2056035 - 'getent hosts' not return hosts if they have more than one CN in LDAP
  - Resolves: rhbz#2098615 - Regression "Missing internal domain data." when setting ad_domain to incorrect
  - Resolves: rhbz#2098617 - Harden kerberos ticket validation
  - Resolves: rhbz#2087744 - Unable to lookup AD user if the AD group contains '@' symbol


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-1
changelog:
  - Resolves: rhbz#2069379 - Rebase SSSD for RHEL 8.7
  - Resolves: rhbz#2063016 - [sssd] RHEL 8.7 Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-2
changelog:
  - Resolves: rhbz#2116488 - virsh command will hang after the host run several auto test cases
  - Resolves: rhbz#2116486 - [regression] sssctl analyze fails to parse PAM related sssd logs
  - Resolves: rhbz#2116487 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-3
changelog:
  - Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8
  - Resolves: rhbz#2119726 - sssctl analyze --logdir option requires sssd to be configured
  - Resolves: rhbz#2120669 - Incorrect request ID tracking from responder to backend


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-4
changelog:
  - Resolves: rhbz#2116395 - NFS krb5 mount failed as "access denied" after test accessing a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-1.el8


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-4.1
changelog:
  - Resolves: rhbz#2128544 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-8.7.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-4.2
changelog:
  - Resolves: rhbz#2139871 - Analyzer: Optimize and remove duplicate messages in verbose list [rhel-8.7.0.z]
  - Resolves: rhbz#2142961 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged [rhel-8.7.0.z]
  - Resolves: rhbz#2148989 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around [rhel-8.7.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-4.3
changelog:
  - Resolves: rhbz#2152883 - authenticating against external IdP services okta (native app) with OAuth client secret failed [rhel-8.7.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-5
changelog:
  - Related: rhbz#2132051 - Rebase Samba to the the latest 4.17.x release
    Rebuild against Samba rebase.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.1-1
changelog:
  - Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8
  - Resolves: rhbz#2144581 - [RFE] provide dbus method to find users by attr
  - Resolves: rhbz#2144579 - sssd timezone issues sudonotafter
  - Resolves: rhbz#2144519 - [RFE] SSSD does not support to change the user’s password when option ldap_pwd_policy equals to shadow in sssd.conf file
  - Resolves: rhbz#2127822 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict)
  - Resolves: rhbz#2111393 - authenticating against external IdP services okta (native app) with OAuth client secret failed


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.2-1
changelog:
  - Resolves: rhbz#2127511 - Rebase SSSD for RHEL 8.8
  - Resolves: rhbz#2136701 - Lower the severity of the log message for SSSD so that it is not shown at the default debug level.
  - Resolves: rhbz#2139760 - [sssd] RHEL 8.8 Tier 0 Localization
  - Resolves: rhbz#2139865 - Analyzer: Optimize and remove duplicate messages in verbose list
  - Resolves: rhbz#2142795 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged
  - Resolves: rhbz#2144491 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around
  - Resolves: rhbz#2150357 - Smart Card auth does not work with p11_uri (with-smartcard-required)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.2-2
changelog:
  - Resolves: rhbz#2149091 - Update to sssd-2.7.3-4.el8_7.1.x86_64 resulted in "Request to sssd failed. Device or resource busy"


author: Craig Guiller <craig.guiller@oracle.com> - 2.8.2-3.0.2
changelog:
  - [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed'. (BZ#2196838)
  - SSSD enters failed state after heavy load in the system. (BZ#2219351)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.0-1
changelog:
  - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9
  - Resolves: rhbz#2101489 - [sssd] Auth fails if client cannot speak to forest root domain (ldap_sasl_interactive_bind_s failed)
  - Resolves: rhbz#2143925 - kinit switches KCM away from the newly issued ticket
  - Resolves: rhbz#2151403 - AD user is not found on IPA client after upgrading to RHEL8.7
  - Resolves: rhbz#2164805 - man page entry should make clear that a nested group needs a name
  - Resolves: rhbz#2170484 - Unable to lookup AD user from child domain (or "make filtering of the domains more configurable")
  - Resolves: rhbz#2180981 - sss allows extraneous @ characters prefixed to username #


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.0-4
changelog:
  - Related: rhbz#2190417 - Rebase Samba to the latest 4.18.x release
    Rebuild against rebased Samba libs


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.1-1
changelog:
  - Resolves: rhbz#2167836 - Rebase SSSD for RHEL 8.9
  - Resolves: rhbz#2196521 - [RHEL8] sssd : AD user login problem when modify ldap_user_name= name and restricted by GPO Policy
  - Resolves: rhbz#2195919 - sssd-be tends to run out of system resources, hitting the maximum number of open files
  - Resolves: rhbz#2192708 - [RHEL8] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed'
  - Resolves: rhbz#2139467 - [RHEL8] sssd attempts LDAP password modify extended op after BIND failure
  - Resolves: rhbz#2054825 - sssd_be segfault at 0 ip 00007f16b5fcab7e sp 00007fffc1cc0988 error 4 in libc-2.28.so[7f16b5e72000+1bc000]
  - Resolves: rhbz#2189583 - [sssd] RHEL 8.9 Tier 0 Localization
  - Resolves: rhbz#2170720 - [RHEL8] When adding attributes in sssd.conf that we have already, the cross-forest query just stop working
  - Resolves: rhbz#2096183 - BE_REQ_USER_AND_GROUP LDAP search filter can inadvertently catch multiple overrides
  - Resolves: rhbz#2151450 - [RHEL8] SSSD missing group membership when evaluating GPO policy with 'auto_private_groups = true'


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 2.9.1-3
changelog:
  - Resolves: rhbz#2236414 - dbus and crond getting terminated with SIGBUS in sss_client code
  - Resolves: rhbz#2237302 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7)


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 2.9.1-4
changelog:
  - Related: rhbz#2236414 - dbus and crond getting terminated with SIGBUS in sss_client code
    Handle all invalidations consistently
    Supply a valid pointer to `sss_mmap_cache_validate_or_reinit()`, not a pointer to a local var


author: Darren Archibald <darren.archibald@oracle.com> - 2.9.1-4.0.1.5
changelog:
  - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest (JIRA:RHEL-19212)
  - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users (JIRA:RHEL-19994)
  - SSSD GPO lacks group resolution on hosts (JIRA:RHEL-21085)
  - Make sure 8.9.z/9.3.z doesn't build 'passkey' code (JIRA:RHEL-21164)


author: Ondrej Mosnáček <omosnace@redhat.com> - 1.1.1-14_2
changelog:
  - [RHEL] Re-enable AEAD tests and ignore test result
  - [RHEL] Drop the ppc64 ignore-failures workaround


author: Ondrej Mosnáček <omosnace@redhat.com> - 1.1.1-16_1
changelog:
  - [RHEL] Apply 'Add missing dependencies to the tests package'
  - [RHEL] Apply 'Update patch from upstream'


author: Sahana Prasad <sahana@redhat.com> - 1.1.5-3
changelog:
  - Enables building on old kernels [sync fix in Fedora from omosnance].
  - This is required for covscans as they run on RHEL7 machines.


author: Phil Sutter <psutter@redhat.com> - 0.3-2
changelog:
  - Add missing build requirement: gcc.
  - Add source code patches to facilitate following changes.
  - Patches managed in git, so add git as another build requirement.
  - Respect build system compiler flags.
  - Use %make_build instead of plain make in %build.
  - Add %check target which performs unattended runtime test.
  - Use -D install flag instead of manual mkdir.


author: Phil Sutter <psutter@redhat.com> - 0.3-3
changelog:
  - Use %autosetup flag '-p1' instead of '-S git' to get rid of git dependency.
  - Use %license macro in %files section.
  - Added comment about included patches' upstream status.


author: Ana Cabral <acabral@redhat.com> - 1.26.0-2
changelog:
  - Add Conflicts tag because the bash-completion scripts moved
    from the main package to the utils sub package causing a file
    conflict on multilib systems between the old 32 bit main
    package and the new 64 bit utils sub package.


author: Martin Gansser <martinkg@fedoraproject.org> - 1:0.9.57-1
changelog:
  - Update to 0.9.57
  - Dropped dependency on libgcrypt
  - Dropped dependency on openssl
  - Update tarball link to "https:"
  - Add examples from doc/examples


author: Stephen Gallagher <sgallagh@redhat.com> - 1.6.2-1
changelog:
  - Update to 1.6.2
  - Make buildorder a signed integer to match modulemd specification
  - Obsolete unsupported pythonX-modulemd packages


author: Stephen Gallagher <sgallagh@redhat.com> - 2.0.0-0.beta2
changelog:
  - Update to 2.0.0beta2
  - Better validation of stored content during read and write operations
  - ModuleIndex now returns FALSE if any subdocument fails
  - Fix tests on 32-bit platforms
  - Make unknown keys in YAML maps non-fatal for libmodulemd1
  - Make unknown keys in YAML maps optionally fatal for libmodulemd 2.x
  - Fix RPM version requirements for libmodulemd1


author: Stephen Gallagher <sgallagh@redhat.com> - 2.0.0-1
changelog:
  - Update to 2.0.0 final
  - Assorted fixes for validation
  - Add modulemd-validator tool based on v2 code
  - Fix a crash when merging defaults
  - Add missing BuildRequires


author: Stephen Gallagher <sgallagh@redhat.com> - 2.5.0-2
changelog:
  - Fix memory corruption error using Module.search_rpms() from python
  - Speed up valgrind tests
  - Resolves: rhbz#1714766


author: Jiri Pirko <jiri@mellanox.com> - 1.6-1
changelog:
  - Update to 1.6
  - libndb: reject redirect and router advertisements from non-link-local
  - libndp: validate the IPv6 hop limit
  - libndp: revert API change for ndp_msg_send() and add ndp_msg_send_with_flags()
  - libndp: fix type of field "na" in "struct ndp_msgna"
  - ndptool: add option to send messages types
  - libndp: add option flags to send messages
  - Add SubmittingPatches howto


author: Hangbin Liu <haliu@redhat.com> - 1.7-1
changelog:
  - Update to 1.7
  - libndp: apply filter to raw socket to only accept ND messages
  - libndp: move ndp_sock_{open,close}() after msg parsing functions
  - ndptool: Fix compilation on musl libc


author: Hangbin Liu <haliu@redhat.com> - 1.7-2
changelog:
  - ndptool: add -T target support (rhbz 1666194)
  - ndptool: fix target parameter typo (rhbz 1666194)
  - libndp: close sockfd after using to avoid handle leak (rhbz 1666194)
  - libndp: fix nd_msg typo when setting target address (rhbz 1666194)


author: Hangbin Liu <haliu@redhat.com> - 1.7-3
changelog:
  - ndptool: add -D dest support (rhbz 1697595)
  - ndptool: fix potential memory leak caused by strdup (rhbz 1697595)


author: Steve Dickson <steved@redhat.com> 2.3.3-6
changelog:
  - Changed /var/lib/nfs/rpc_pipefs to have 555 permissions (bz 1583489)
  - Removed tcp wrappers support from man pages (bz 1642596) 
  - Reload not restart gssproxy in nfs-server.service (bz 1592660)


author: Steve Dickson <steved@redhat.com> 2.3.3-8
changelog:
  - Update junction code with latest upstream code (1543126)
  - Make sure /etc/sysconfig/nfs is immutabl (1639432)


author: Steve Dickson <steved@redhat.com> 2.3.3-12
changelog:
  - Change nfsconvert.sh not to set the immutable bit (bz 1673685)
  - Change nfsconvert.py not to create the new dummy /etc/sysconfig/nfs (bz 1673685)


author: Steve Dickson <steved@redhat.com> 2.3.3-14_0
changelog:
  - Add nfs.conf equivalent for the statd --no-notify cmdline option (1690280)
  - Correct the modes on /etc/nfs.conf after a conversion (bz 1690266)


author: Steve Dickson <steved@redhat.com> 2.3.3-17
changelog:
  - Moved the gating tests out of a patch and into the top dir (bz 1653927)
  - Move the mode corrections on /etc/nfs.conf to nfsconvert.py (bz 1655880)
  - gssd: add verbosity options to the rpc.gssd man page (bz 1668026)


author: Steve Dickson <steved@redhat.com> 2.3.3-24
changelog:
  - nfs.man: Fixed small typo in man page (bz 1732877)
  - mount: Report correct error in the fall_back cases (bz 1709963)
  - rpc.mountd: Fix e_hostname and e_uuid leaks (bz 1712202)
  - spec: Remove redundant manpage files (bz 1718738)


author: Steve Dickson <steved@redhat.com> 2.3.3-27
changelog:
  - More coverity scans updates (bz 1746572)
  - nfsd: Adjust nfs.conf setting/parsing of rdma port (bz 1710532)
  - Add plain --rdma option to nfs.conf convertor (bz 1747295)
  - mountstats: Add per-op error counts to iostat command (bz 1719983)
  - gssd: add configure options verbosity to man page (bz 1749642)


author: Steve Dickson <steved@redhat.com> 2.3.3-32
changelog:
  - junction: Fixed debug statement (bz 1831829)
  - Userspace support for the latest nfsdcld daemon (bz 1817756)


author: Steve Dickson <steved@redhat.com> 2.3.3-33
changelog:
  - manpage: Add a description of the 'nconnect' mount option (bz 1761352)
  - nfsdclddb: Redname clddb-tool to nfsdclddb (bz 1836924)


author: Steve Dickson <steved@redhat.com> 2.3.3-38
changelog:
  - exports man page: warn about subdirectory exports (bz 1652437)
  - Don't modify /etc/group on upgrades (bz 1856881)
  - nfs-iostat: divide by zero with fresh mount (bz 1861823)
  - nfsiostat: Drop autofs entries before calling compare_iostats() (bz 1859130)
  - nfsdclddb: clddb-tool was recently renamed to nfsdclddb (bz 1893599)


author: Steve Dickson <steved@redhat.com> 2.3.3-39
changelog:
  - systemd: Ingnore export failures in nfs-server.serivce unit (bz 1894873)
  - exports.man: Remove some outdated verbiage (bz 1769688)


author: Steve Dickson <steved@redhat.com> 2.3.3-42
changelog:
  - gssd: Add options to allow for the use of ~/.k5identity file (bz 1868087)
  - man: Correct gssd(8) description of rpc-timeout and context-timeout (bz 1908232)
  - exportfs: fix unexporting of '/' (bz 1944119)


author: Steve Dickson <steved@redhat.com> 2.3.3-44
changelog:
  - gssd: Deal with failed thread creation (bz 1981400)
  - gssd: Add timeout for upcall threads (bz 1981403)
  - gssd: Cleaned up debug messages (bz 1961056)
  - spec: Updated description of the nfs-utils rpm (bz 1981419)


author: Steve Dickson <steved@redhat.com> 2.3.3-59
changelog:
  - Covscan Scan: Wrong Check of Return Value (bz 2151966)
  - Covscan Scan: Clang (experimental) (bz 2151971)


author: Phil Sutter <psutter@redhat.com> [1.1.1-1.el8]
changelog:
  - Rebase onto upstream version 1.1.1
  - Sync spec file with RHEL7
  - Disable JSON parsing, deprecated by upstream
  - Make use of builtin testsuite


author: Phil Sutter <psutter@redhat.com> [1.1.1-2.el8]
changelog:
  - chain: Hash chain list by name (Phil Sutter) [1658533]
  - chain: Add lookup functions for chain list and rules in chain (Phil Sutter) [1658533]
  - chain: Support per chain rules list (Phil Sutter) [1658533]
  - src: remove nftnl_rule_cmp() and nftnl_expr_cmp() (Phil Sutter) [1658533]


author: Phil Sutter <psutter@redhat.com> [1.1.1-3.el8]
changelog:
  - src: chain: Fix nftnl_chain_rule_insert_at() (Phil Sutter) [1666495]
  - src: chain: Add missing nftnl_chain_rule_del() (Phil Sutter) [1666495]
  - flowtable: Fix for reading garbage (Phil Sutter) [1661327]
  - flowtable: Fix memleak in nftnl_flowtable_parse_devs() (Phil Sutter) [1661327]
  - flowtable: Fix use after free in two spots (Phil Sutter) [1661327]
  - flowtable: Add missing break (Phil Sutter) [1661327]
  - object: Avoid obj_ops array overrun (Phil Sutter) [1661327]


author: Phil Sutter <psutter@redhat.com> [1.1.4-2.el8]
changelog:
  - obj/ct_timeout: Fix NFTA_CT_TIMEOUT_DATA parser (Phil Sutter) [1758673]
  - set_elem: Validate nftnl_set_elem_set() parameters (Phil Sutter) [1758673]
  - obj/ct_timeout: Avoid array overrun in timeout_parse_attr_data() (Phil Sutter) [1758673]
  - set: Don't bypass checks in nftnl_set_set_u{32,64}() (Phil Sutter) [1758673]
  - obj/tunnel: Fix for undefined behaviour (Phil Sutter) [1758673]
  - set_elem: Fix return code of nftnl_set_elem_set() (Phil Sutter) [1758673]
  - obj: ct_timeout: Check return code of mnl_attr_parse_nested() (Phil Sutter) [1758673]


author: Phil Sutter <psutter@redhat.com> [1.1.5-2.el8]
changelog:
  - chain: Correctly check realloc() call (Phil Sutter) [1778952]
  - flowtable: Correctly check realloc() call (Phil Sutter) [1778952]
  - chain: Fix memleak in error path of nftnl_chain_parse_devs() (Phil Sutter) [1778952]
  - flowtable: Fix memleak in error path of nftnl_flowtable_parse_devs() (Phil Sutter) [1778952]


author: Phil Sutter <psutter@redhat.com> [1.1.5-3.el8]
changelog:
  - set_elem: Introduce support for NFTNL_SET_ELEM_KEY_END (Phil Sutter) [1795223]
  - set: Add support for NFTA_SET_DESC_CONCAT attributes (Phil Sutter) [1795223]
  - include: resync nf_tables.h cache copy (Phil Sutter) [1795223]


author: Phil Sutter <psutter@redhat.com> [1.1.5-5.el8]
changelog:
  - set: expose nftnl_set_elem_nlmsg_build() (Phil Sutter) [2040754]
  - expr: dynset: release stateful expression from .free path (Phil Sutter) [2040478]
  - set_elem: missing set and build for NFTNL_SET_ELEM_EXPR (Phil Sutter) [2040478]


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.3.0-4
changelog:
  - Python 2 binary package renamed to python2-libnl3
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Michal Ruprich <michalruprich@gmail.com> - 14:1.9.1-1
changelog:
  - Resolves: #1806422 - rebase libpcap to version 1.9.1
  - Resolves: #1743650 - [RFE] enable inbox support for sniffing offloaded (RDMA) traffic with tcpdump
  - Resolves: #1785330 - Invalid IPv4 addresses are accepted without reporting even a warning
  - Resolves: #1792208 - Resource exhaustion while PHB header length validation


author: Bastien Nocera <bnocera@redhat.com> - 1.22.0-6
changelog:
  + libpeas-1.22.0-6
  - Remove python2 loader, all GNOME apps using libpeas were ported to Python3
    when ported to GTK+ 3.x, and obsolete libpeas-loader-python
  - Resolves: #1559090


author: Dan Winship <danw@redhat.com> - 0.4.15-5.1
changelog:
  - Drop python2 subpackage (#1559092)
  - Drop PAC runner based on the "pacrunner" package (#1569023)
  - Replace pacrunner-crash-fix patch with version from RHEL7
  - Drop kde subpackage (#1538147)


author: Honggang Li <honli@redhat.com> - 10.2.103_1-1
changelog:
  - Rebase to latest upstream master branch.
  - Fix build failures caught by gcc 7.x.
  - Resolves: bz1423872


author: - 10.3.8-5
changelog:
  - Fix partial injection of Fedora build flags.
  - Double the sizeof array fdesc to fix a gcc compiling issue.
  - Resolves: bz1556062


author: Tomáš Mráz <tmraz@redhat.com> 1.4.0-1
changelog:
  - Do not try to check presence of too short username in password
  - Make the user name check optional (via usercheck option)
  - Add an 'enforcing' option to make the checks to be warning-only
    in PAM
  - The difok = 0 setting will disable all old password similarity
    checks except new and old passwords being identical
  - Updated translations from Zanata


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.4.0-4
changelog:
  - Python 2 binary package renamed to python2-pwquality
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Tomáš Mráz <tmraz@redhat.com> 1.4.4-1
changelog:
  - Translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer
  - pam_pwquality: Abort the retry loop if user requests it
  - Allow setting retry, enforce_for_root, and local_users_only options
    in the pwquality.conf config file


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1.4.4-3
changelog:
  - Resolves: rhbz#1919026 libpwquaily rpm requires cracklib to function but RPM missing requirement [updated]


author: Jan Pokorný <jpokorny+rpm-libqb@redhat.com> - 1.0.3-1
changelog:
  - Update to libqb-1.0.3, for list of changes see:
    https://github.com/ClusterLabs/libqb/releases/tag/v1.0.3


author: Christine Caulfield <ccaulfie@redhat.com> - 1.0.3-11
changelog:
  Correctly set socket directory permissions when
    qb_ipcs_connection_auth_set() is called
    Resolves: rhbz#1836146


author: Jan Pokorný <jpokorny+rpm-libqb@redhat.com> - 1.0.2-14
changelog:
  - Evolution of the previous (rhbz#1478089)
  - Make -devel package dependency on the main package arch-qualified


author: Pavla Kratochvilova <pkratoch@redhat.com> - 1.10.1-1
changelog:
  - Update to 1.10.1
  - Reduce download delays
  - Add an option to preserve timestamps of the downloaded files (RhBug:1688537)
  - Append the '?' part of repo URL after the path
  - Fix memory leaks


author: Ales Matej <amatej@redhat.com> - 1.10.6-1
changelog:
  - Update to 1.10.6
  - Imporove handling of xattr to re-download damadged files (RhBug:1690894)
  - Rephrase repository GPG check error message (RhBug:1741442)
  - Add sleep before next try when all mirrors were tried (RhBug:1741931)
  - Raise logging level of error messages (RhBug:1737709)
  - Handle webservers that don't support ranges when downloading zck
  - Define LRO_SUPPORTS_CACHEDIR only with zchunk (RhBug:1726141)
  - Allow to use mirrors multiple times for a target (RhBug:1678588)
  - Allow to try baseurl multiple times (RhBug:1678588)


author: Ales Matej <amatej@redhat.com> - 1.11.0-1
changelog:
  - Update to 1.11.0
   - Retry mirrorlist/metalink downloads several times (RhBug:1741931)
   - Improve variable substitutions in URLs and add ${variable} support


author: Ales Matej <amatej@redhat.com> - 1.11.3-1
changelog:
  - Update to 1.11.3
   - Prefer mirrorlist/metalink over baseurl (RhBug:1775184)
   - Fix calling Python API without holding GIL (RhBug:1788918) 
   - Do not unref LrErr_Exception on exit (RhBug:1778854)


author: Nicola Sella <nsella@redhat.com> - 1.12.0-1
changelog:
  - Update to 1.12.0
  - Decode package URL when using for local filename (RhBug:1817130)
  - Fix memory leak in lr_download_metadata() and lr_yum_download_remote()
  - Download sources work when at least one of specified is working (RhBug:1775184)
  - Enable building on OSX


author: Pavla Kratochvilova <pkratoch@redhat.com> - 1.14.0-1
changelog:
  - Update to 1.14.0
  - Fix the key string parsing in url_substitution
  - When zchunk enabled and not using HTTP/S protocol, download the whole file (RhBug:1886706)
  - Add an option LRO_SSLVERIFYSTATUS to check TLS certificate revocation status (using OCSP stapling) (RhBug:1814383)
  - Fix: lr_perform() - Avoid 100% CPU usage
  - Add support for working with certificates used with proxy
  - Reposync does not re-download unchanged packages (RhBug:1931904)
  - Fix memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 1.14.2-1
changelog:
  - Update to 1.14.2
  - Reduce time to load metadata
  - Fix resource leaks and memory leaks
  - Remove build dependency on python3-flask


author: Lukas Hrazky <lhrazky@redhat.com> - 1.14.2-4
changelog:
  - Fix termination of va_list in lr_metadatatarget_append_error()
  - Detailed error message when using non-existing TMPDIR


author: Matej Habrnal <mhabrnal@redhat.com> 2.9.5-6
changelog:
  - replace all Fedora URLs by corresponding values for RHEL
  - fix coverity issues
  - Resolves: #1602590, #1623406


author: Michal Fabik <mfabik@redhat.com> 2.9.5-7
changelog:
  - bugzilla: change the default bugzilla group
  - tests: Disable strcpm'ing a freed pointer
  - Add autogen.sh
  - Resolves #1660449


author: Martin Kutlak <mkutlak@redhat.com> - 2.9.5-10
changelog:
  - reportclient: Search for required packages recursively
  - reportclient: Find and download required debuginfo packages
  - report-client: Find debuginfos in own method
  - Resolves: rhbz#1783897


author: EL Errata <el-errata_ww@oracle.com> - 2.9.5-10.0.1.el8
changelog:
  - Update workflow xml for Oracle [Orabug: 18945470]
  - Add oracle-enterprise.patch and oracle-enterprise-po.patch
  - Remove libreport-plugin-rhtsupport and libreport-rhel
  - Added orabug20390725.patch to remove redhat reference [Orabug: 20390725]
  - Added Bug20357383.patch to remove redhat reference [Orabug: 20357383]
  - libreport: unresolved deps python3-subscription-manager-rhsm [Orabug: 29386049]
  - Removed libreport-rhel-bugzilla and libreport-rhel-anaconda-bugzilla


author: Michal Židek <mzidek@redhat.com> - 2.9.5-12
changelog:
  - Resolves: rhbz#1835388 - abrt-addon-ccpp causes failures during openscap scans on CCE-27119-7
  - This is just libreport side (abrt also needs to be patched)


author: Matej Habrnal <mhabrnal@redhat.com> 2.9.1-1
changelog:
  - build: create tarball in release-* target
  - problem_data: fix double const
  - wizard: fix error found by -Werror=format-security
  - run_event: fix cmp between pointer and zero character
  - build: do not upload tarball to fedorahosted.org
  - spec: do not use fedorahosted.org as source
  - build: fix generating list of dependences in autogen.sh
  - build: generate new release entries with date
  - report-newt: free allocated variables, don't close dd twice
  - build: fix scratch-build target
  - changelog: reflect the PR
  - lib: several bug fixes in parsing of mountinfo
  - lib: correctly recognize chroot in container
  - lib: declare CONTAINER_ROOTS element name
  - lib: add more log wrappers for perror
  - reporter-bugzilla: use /etc/os-release for default url
  - configure.ac: Remove nss dependency
  - spec: include testsuite headers in the devel package
  - tests: include testsuite.h in the dist archive
  - maint: check pulled .po files for errors
  - build: fix bug in changelog generating in release target
  - changelog: fix typos


author: Julius Milan <jmilan@redhat.com> 2.9.3-1
changelog:
  - Translation updates
  - commit to delete
  - workflows: fix description in workflow_RHELJavaScript.xml.in
  - workflows: add workflow for adding data to existing case
  - client-python,report-python: Allow python to be optional at build time
  - ignored words: add SYSTEMD_NSS_BYPASS_BUS
  - reporter-ureport: add 'ProcessUnpackaged' option
  - spec: add workflow for adding data to existing case
  - rep-sys-journal: fix in finding executable basename
  - remove old obsolete
  - Group is not used any more
  - remove old changelogs
  - requires pythonX-dnf instead of dnf
  - doc: fix obsolete doxygen tags & complains
  - lib: Introduce pid_for_children element from ns
  - client-python: Do not try to unlink None
  - spec: rename Python binary packages


author: Martin Kutlak <mkutlak@redhat.com> 2.9.4-1
changelog:
  - Translation updates
  - Revert "use /usr/sbin/"
  - ureport: remove json-c is_error() usage
  - ldconfig and gtk-update-icon-cache is not needed in rawhide
  - reporter-rhtsupport: Remove dependency on redhat-access-insights
  - do not expand macro in changelog
  - move defattr which match the defaults
  - use /usr/sbin/
  - macro python_sitearch is always defined on rhel7+
  - remove rhel6 specific items and accomodate to rhel7+
  - This package uses names with ambiguous `python-` prefix in requirements.
  - reporter-{bugzilla,mantisbt,rhtsupport}: fix free
  - reporter-mailx: rely on configured email
  - spec: fix unowned directories
  - augeas: include local config path
  - doc: update to contain newly added user's local config
  - reporter-mantisbt: read configuration from user's home
  - reporter-rhtsupport: read configuration from user's home
  - reporter-bugzilla: read configuration from user's home
  - reporter-bugzilla: ask concrete bz when requiring login
  - makefile: fix make release


author: Matej Habrnal <mhabrnal@redhat.com> 2.9.5-1
changelog:
  - spec: actualize according to downstream
  - spec: Conditionalize the Python2 and Python3
  - report-python: fix tests if configure --without-python2
  - autogen: correctly parse buildrequires from spec file


author: Petr Lautrbach <plautrba@redhat.com> - 2.9-2.1
changelog:
  - Use Python distutils to install SELinux python bindings (#1719771)
  - Move  sefcontext_compile to -utils package (#1612518)


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-6
changelog:
  - Describe fcontext regular expressions (#1904059)
  - Strip spaces before values in config (#2012145)


author: Petr Lautrbach <plautrba@redhat.com> - 2.9-5
changelog:
  - Revert "genhomedircon: check usepasswd" (rhbz#1871786)
  - semanage.conf - improve usepasswd=False explanation (rhbz#1871786)
  - semanage.conf - expand list of ignoredirs (rhbz#1871786)


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-7
changelog:
  - Trivial style fixes
  - Free contents of modkey in semanage_direct_remove
  - Fix USE_AFTER_FREE (CWE-672) in semanage_direct_write_langext()
  - add missing include to boolean_record.c
  - move module hashing into libsemanage
  - move compressed file handling into a separate object
  - clean up semanage_direct_commit() a bit
  - optionally rebuild policy when modules are changed externally
  - add command-line option to detect module changes (#2049186)


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-9
changelog:
  - allow spaces in user/group names (#2042408)
  - always write kernel policy when check_ext_changes is specified (#2089802)


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-2
changelog:
  - reset pointer after free in cil_strpool_destroy()
  - cil: Add ability to redeclare types[attributes]
  - cil: Keep attributes used by generated attributes in neverallow rules
  - use IN6ADDR_ANY_INIT to initialize IPv6 addresses
  - fix memory leak in sepol_bool_query()
  - cil: drop wrong unused attribute
  - cil: fix -Wwrite-strings warning
  - cil: __cil_post_db_neverallow_attr_helper() does not use extra_args


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-5
changelog:
  - cil: Create new keep field for type attribute sets
  - build: follow standard semantics for DESTDIR and PREFIX
  - cil: show an error when cil_expr_to_string() fails


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-6
changelog:
  - Prevent freeing unitialized value in ibendport handling
  - Add support for the SCTP portcon keyword
  - Export sepol_polcap_getnum/name functions


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-3
changelog:
  - cil: Fix out-of-bound read of file context pattern ending with "\"
  - cil: Destroy classperms list when resetting classpermission (#1983517)
  - cil: Destroy classperm list when resetting map perms (#1983521)
  - cil: cil_reset_classperms_set() should not reset classpermission (#1983525)
  - cil: Set class field to NULL when resetting struct cil_classperms
  - cil: More strict verification of constraint leaf expressions
  - cil: Exit with an error if declaration name is a reserved word
  - cil: Allow permission expressions when using map classes
  - cil: Reorder checks for invalid rules when building AST
  - cil: Cleanup build AST helper functions
  - cil: Create new first child helper function for building AST
  - cil: Remove unused field from struct cil_args_resolve
  - cil: Destroy disabled optional blocks after pass is complete
  - cil: Check if name is a macro parameter first
  - cil: fix NULL pointer dereference in __cil_insert_name
  - cil: Report disabling an optional block only at high verbose levels
  - cil: Use AST to track blocks and optionals when resolving
  - cil: Reorder checks for invalid rules when resolving AST
  - cil: Sync checks for invalid rules in booleanifs
  - cil: Check for statements not allowed in optional blocks (#1983530)


author: Peter Jones <pjones@redhat.com> - 2.3.0-2
changelog:
  - Once again, don't complain about compilers newer than tested with in the
    public headers.
  - Fix up bad %global vs %define directives
  - Fix up bad old changelog dates
  - Note there's a missing changelog here from the 2.3.0 rebase


author: Pavla Kratochvilova <pkratoch@redhat.org> - 0.7.4-1
changelog:
  - soname bump to "1"
  - incompatible API changes:
    * bindings: Selection.flags is now an attribute
    * repodata_lookup_num now works like the other lookup_num functions
  - new functions:
    * selection_make_matchsolvable
    * selection_make_matchsolvablelist
    * pool_whatmatchessolvable
    * repodata_search_arrayelement
    * repodata_lookup_kv_uninternalized
    * repodata_search_uninternalized
    * repodata_translate_dir
  - new repowriter interface to write solv files allowing better
    control over what gets written
  - support for filtered file lists with a custom filter
  - dropped support of (since a long time unused) REPOKEY_TYPE_U32
  - selected bug fixes:
    * fix nasty off-by-one error in repo_write
    * do not autouninstall packages because of forcebest updates
    * fixed a couple of null pointer derefs and potential memory
      leaks
    * made disfavoring recommended packages work if strong recommends
      is enabled
    * no longer disable infarch rules when they don't conflict with
      the job
    * repo_add_rpmdb: do not copy bad solvables from the old solv file
    * fix cleandeps updates not updating all packages
  - new features:
    * support rpm's new '^' version separator
    * support set/get_considered_list in bindings
    * new experimental SOLVER_FLAG_ONLY_NAMESPACE_RECOMMENDED flag
    * do favor evaluation before pruning allowing to (dis)favor
      specific package versions
    * bindings: support pool.matchsolvable(), pool.whatmatchessolvable()
      pool.best_solvables() and selection.matchsolvable()
    * experimental DISTTYPE_CONDA and REL_CONDA support


author: Ales Matej <amatej@redhat.org> - 0.7.7-1
changelog:
  - Update to 0.7.7
  - selected bug fixes:
    * fix updating of too many packages in focusbest mode
    * fix handling of disabled installed packages in distupgrade
    * fix repository priority handling for multiversion packages
    * better support of inverval deps in pool_match_dep()
    * support src rpms that have non-empty provides
    * fix favorq leaking between solver runs if the solver is reused
    * fix SOLVER_FLAG_FOCUS_BEST updateing packages without reason
    * be more correct with multiversion packages that obsolete their
      own name
    * allow building with swig-4.0.0
    * lock jobs now take precedence over dup and forcebest jobs
  - new features
    * new POOL_FLAG_WHATPROVIDESWITHDISABLED pool flag 
    * bindings: add get_disabled_list() and set_disabled_list()
    * bindings: add whatcontainsdep()
    * bindings: make the selection filters return the self object
    * MSVC compilation support


author: Ales Matej <amatej@redhat.org> - 0.7.11-1
changelog:
  - Update to 0.7.11
  - selected bug fixes:
    * support arch<->noarch package changes when creating patch
      conflicts from the updateinfo data
    * also support other rpm database types
    * fixed solv_zchunk decoding error if large chunks are used
    * treat retracted pathes as irrelevant
    * made add_update_target work with multiversion installs
  - new features
    * support for SOLVER_BLACKLIST jobs that block the installation of matched
      packages unless they are directly selected by an SOLVER_INSTALL job
    * libsolv now also parses the patch status in the updateinfo parser
    * new solvable_matchessolvable() function
    * support conda constrains dependencies
    * new rpm_stat_database() function
    * new rpm_hash_database_state() function


author: Nicola Sella <nsella@redhat.com> - 0.7.16-1
changelog:
  - Update to 0.7.16
  - selected bug fixes:
    * make testcase_mangle_repo_names deal correctly with freed repos
    [bnc#1177238]
    * fix add_complex_recommends() selecting conflicted packages in
      rare cases leading to crashes
    * improve choicerule generation so that package updates are
      prefered in more cases
    * fix deduceq2addedmap clearing bits outside of the map
    * conda: feature depriorization and fix startswith implementation
    * Fix solvable swapping messing up idarrays
    * fix ruleinfo of complex dependencies returning the wrong origin
    * fix solv_zchunk decoding error if large chunks are used
      [bnc#1159314]
  - new features
    * new testcase_mangle_repo_names() function
    * new solv_fmemopen() function
    * Enable zstd compression support for sle15 and sle15-sp2
    * Support blacklisted packages in solver_findproblemrule()
      [bnc#1172135]
    * Support rules with multiple negative literals in choice rule
      generation
    * build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
      multiple rpm database backends
    * added two new function to make libzypp independent of the rpm
      database format
    * support conda constrains dependencies


author: Pavla Kratochvilova <pkratoch@redhat.org> - 0.7.17-1
changelog:
  - Update to 0.7.17
  - selected bug fixes:
    * repo_write: fix handling of nested flexarray
    * improve choicerule generation a bit more to cover more cases
    * harden testcase parser against repos being added too late
    * support python-3.10
    * check /var/lib/rpm macro in rpmdb code
  - new features:
    * handle default/visible/langonly attributes in comps parser
    * support multiple collections in updateinfo parser
    * add '-D' option in rpmdb2solv to set the dbpath


author: Pavla Kratochvilova <pkratoch@redhat.org> - 0.7.19-1
changelog:
  - Update to 0.7.19
  - repo_add_conda: add flag to skip v2 packages
  - fix rare segfault in resolve_jobrules() that could happen if new rules are learnt
  - fix error handling in solv_xfopen_fd()
  - fix memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.20-1
changelog:
  - Update to 0.7.20
  - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
  - support for environments in comps parser
  - fix misparsing of '&' in attributes with libxml2
  - choice rules: treat orphaned packages as newest
  - fix compatibility with Python 3.10


author: Jaroslav Rohel <jrohel@redhat.com> - 0.7.20-5
changelog:
  - Backport Treat condition both as positive and negative literal in pool_add_pos_literals_complex_dep
    (RhBug:2185061,2190136)


author: Milan Crha <mcrha@redhat.com> - 2.62.2-1
changelog:
  - Update to 2.62.2
  - Backport upstream patch for CVE-2018-12910 - Crash in soup_cookie_jar.c:get_cookies() on empty hostnames


author: Anderson Sasaki <ansasaki@redhat.com> - 0.8.1-2
changelog:
  - Add Provides for libssh_threads.so to unbreak applications
  - Fix ABIMap detection to not depend on python to build


author: Anderson Sasaki <ansasaki@redhat.com> - 0.8.3-1
changelog:
  - Update to version 0.8.3
    * Added support for rsa-sha2 (#1610882)
    * Added support to parse private keys in openssh container format (other than
      ed25519) (#1622983)
    * Added support for diffie-hellman-group18-sha512 and
      diffie-hellman-group16-sha512 (#1610885)
    * Added ssh_get_fingerprint_hash()
    * Added ssh_pki_export_privkey_base64()
    * Added support for Match keyword in config file
    * Improved performance and reduced memory footprint for sftp
    * Fixed ecdsa publickey auth
    * Fixed reading a closed channel
    * Added support to announce posix-rename@openssh.com and hardlink@openssh.com
      in the sftp server
    * Use -fstack-protector-strong if possible (#1624135)


author: Anderson Sasaki <ansasaki@redhat.com> - 0.8.5-1
changelog:
  - Update to version 0.8.5
    * Fixed an issue where global known_hosts file was ignored (#1649321)
    * Fixed ssh_get_fd() to return writable file descriptor (#1649319)
    * Fixed regression introduced in known_hosts parsing (#1649315)
    * Fixed a regression which caused only the first algorithm in known_hosts to
      be considered (#1638790)


author: Anderson Sasaki <ansasaki@redhat.com> - 0.8.91-0.1
changelog:
  - Update to 0.9.0 pre release version (0.8.91)
  - Added default configuration files for client and server
  - Removed unused patch files left behind
  - Fixed issues found to run upstream test suite with SELinux


author: Anderson Sasaki <ansasaki@redhat.com> - 0.9.0-1
changelog:
  - Update to version 0.9.0
    https://www.libssh.org/2019/06/28/libssh-0-9-0/
  - Added explicit Requires for crypto-policies
  - Do not ignore known_hosts keys when SSH_OPTIONS_HOSTKEYS is set
  - Provide the configuration files in a separate libssh-config subpackage


author: Anderson Sasaki <ansasaki@redhat.com> - 0.9.0-3
changelog:
  - Add Obsoletes in libssh-config to avoid conflict with old libssh which
    installed the configuration files.


author: Anderson Sasaki <ansasaki@redhat.com> - 0.9.4-1
changelog:
  - Update to version 0.9.4
    https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  - Fixed CVE-2019-14889 (#1781782)
  - Fixed CVE-2020-1730 (#1802422)
  - Create missing directories in the path provided for known_hosts files (#1733914)
  - Removed inclusion of OpenSSH server configuration file from
    libssh_server.config (#1821339)


author: Anderson Sasaki <ansasaki@redhat.com> - 0.9.4-2
changelog:
  - Do not return error when server properly closed the channel (#1849071)
  - Add a test for CVE-2019-14889
  - Do not parse configuration file in torture_knownhosts test


author: Sahana Prasad <sahana@redhat.com> - 0.9.4-3
changelog:
  - Fix CVE-2020-16135 NULL pointer dereference in sftpserver.c if
    ssh_buffer_new returns NULL (#1862646)


author: Norbert Pocs <npocs@redhat.com> - 0.9.6-1
changelog:
  - Fix CVE-2021-3634: Fix possible heap-buffer overflow when
    rekeying with different key exchange mechanism
  - Rebase to version 0.9.6
  - Rename SSHD_EXECUTABLE to SSH_EXECUTABLE in tests/torture.c
  - Resolves: rhbz#1896651, rhbz#1994600


author: Norbert Pocs <npocs@redhat.com> - 0.9.6-6
changelog:
  - Enable client and server testing build time
  - Fix failing rekey test on arch s390x
  - Resolves: rhbz#2126342


author: Norbert Pocs <npocs@redhat.com> - 0.9.6-7
changelog:
  - Fix NULL dereference during rekeying with algorithm guessing
    GHSL-2023-032 / CVE-2023-1667
  - Fix possible authentication bypass
    GHSL 2023-085 / CVE-2023-2283
  - Resolves: rhbz#2182251, rhbz#2189742


author: Darren Archibald <darren.archibald@oracle.com> - 0.9.6-13
changelog:
  - Client and Server side mitigations (CVE-2023-48795)
  - Strip extensions from both kex lists for matching (CVE-2023-48795)
  - tests: Adjust calculation to strict kex (CVE-2023-48795)


author: Norbert Pocs <npocs@redhat.com> - 0.9.6-1
changelog:
  - Fix CVE-2021-3634: Fix possible heap-buffer overflow when
    rekeying with different key exchange mechanism (#1978810)


author: Tony Asleson <tasleson@redhat.com> - 1.9.1-7
changelog:
  - Remove valgrind dependency as not being used and causing
    build to fail as it pulls in python3.11


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.14-1
changelog:
  - New upstream release - 2.1.14
  - Patch the waf script to explicitly call python2 as "env python" doesn't
    yield py2 anymore


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.16-1
changelog:
  - Resolves: rhbz#1684577 - Rebase libtalloc to version 2.1.16 for Samba
  - Resolves: rhbz#1597315 - libtalloc uses Python 2 to build
  - Resolves: rhbz#1567136 - libtalloc: Drop Python 2 subpackage from RHEL 8


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.16-2
changelog:
  - Remove python2 libraries on upgrade
  - Resolves: rhbz#1567136 - libtalloc: Drop Python 2 subpackage from RHEL 8


author: Jakub Hrozek <jhrozek@redhat.com> - 2.1.16-3
changelog:
  - Also obsolete python2-libtalloc-debuginfo
  - Resolves: rhbz#1567136 - libtalloc: Drop Python 2 subpackage from RHEL 8


author: Peter Robinson <pbrobinson@fedoraproject.org> 4.9-2
changelog:
  - Move development related docs to devel sub package
  - Cleanup spec and macros
  - Update valgrind ExclusiveArch


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.16-1
changelog:
  - New upstream release 1.3.16
  - Use RHEL_ALLOW_PYTHON2_FOR_BUILD=1 until libtalloc uses waf3
  - Patch the waf script to explicitly call python2 as "env python" doesn't
    yield py2 anymore


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.18.1
changelog:
  - Resolves: rhbz#1684579 - Rebase libtdb to version 1.3.18 for Samba
  - Resolves: rhbz#1597319 - libtdb uses Python 2 to build
  - Resolves: rhbz#1567138 - libtdb: Drop Python 2 subpackage from RHEL 8


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.18.2
changelog:
  - Obsolete the python2 packages on upgrade
  - Resolves: rhbz#1567138 - libtdb: Drop Python 2 subpackage from RHEL 8


author: Isaac Boukris <iboukris@redhat.com> - 1.4.2-2
changelog:
  - Resolves: rhbz#1754420 - Rebase libtdb 1.4.2 for samba
  - Related: rhbz#1754420 - Fix sssd tests (tdb)


author: Jiri Pirko <jiri@resnulli.us> - 1.27-1
changelog:
  - 1.27 release
  - teamd: check target host with nap.nah.nd_na_target
  - teamd: check ipv6 packet only with the 4 bits version
  - teamd: set correct bits for standby ports
  - libteam: Add team_get_port_enabled function
  - teamd: check port link_up when a port is added with loadbalance runner
  - libteam: resynchronize ifinfo after lost RTNLGRP_LINK notifications
  - SubmittingPatches: add checkpatch note
  - README: add note regarding pull requests
  - teamd: escape some sensitive characters in ifname with double quotation marks


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.27-4
changelog:
  - Python 2 binary package renamed to python2-libteam
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Xin Long <lxin@redhat.com> - 1.27-8
changelog:
  - Add fix to only process LACPDU after port ifinfo is set
  - Add port_hwaddr_changed for ab, lb and lacp runners
  - Add patch to fix runner.sys_prio default in man docs
  - Add patch to empty LDFLAGS before checking for libnl3 in configure.ac
  - Add patch to not crash when trying to print unregistered device name
  - Add patch to use SWIG_FromCharPtrAndSize for Python3 support
  - Add patch to check to_stdout return correctly in bond2team in bond2team
  - Add 'BuildRequires: systemd-units' in libteam.spec to fix building errors
  - Add 'autoreconf --force --install -I m4' in libteam.sepc to regenerate configure
  - Remove ifup/ifdown scripts installation in libteam.sepc


author: Xin Long <lxin@redhat.com> - 1.28-1
changelog:
  - teamd: lacp: update port state according to partner's sync bit
  - man: fix runner.min_ports default value [1679853]
  - teamd: lw: nsna_ping: only send ns on enabled port [1671195]
  - teamd: lw: arp_ping: only check arp reply message [1663093]
  - teamd: config: update local prio to kernel [1657113]
  - teamnl: update help message
  - 1.28 release
  - teamd: lacp: send LACPDU when port state transitions from DEFAULT to CURRENT
  - man teamd.conf: Document ARP Ping link_watch.vlanid option
  - man teamd.conf: fix indentation of link_watch.send_always
  - libteam/options: fix s32/u32 data storage on big endian
  - teamd: add an option to force log output to stdout, stderr or syslog
  - teamd: add port_master_ifindex_changed for teamd_event_watch_ops
  - man: add 'random' to the list of available runners
  - examples: fix duplex comparison against best port


author: Xin Long <lxin@redhat.com> - 1.28-2
changelog:
  - teamd: use enabled option_changed to sync enabled to link_up for lb runner [1668132]
  - teamd: tdport has to exist if item->per_port is set in __find_by_item_path [1687336]
  - teamd: remove port if adding fails [1668744]


author: Xin Long <lxin@redhat.com> - 1.28-3
changelog:
  - teamd: return 0 if tdport doesn't exist in teamd_config_port_set [1722449]
  - teamd: improve the error output for non-integer port prio


author: Xin Long <lxin@redhat.com> - 1.29-1
changelog:
  - man teamd.conf: update some parameter default values [1732587]
  - 1.29 release
  - teamd: add port_master_ifindex_changed for link_watch_port_watch_ops
  - initscripts: fix if/fi align
  - teamd: fix a json object memleak in get_port_obj() [1767685]
  - libteam: set netlink event socket as non-blocking [1684389]
  - libteam: double NETLINK_RCVBUF to fix -ENOMEM error
  - teamd: add a default value 1000 for link_watch.interval


author: Xin Long <lxin@redhat.com> - 1.29-1.el8_2.1
changelog:
  - utils/bond2team: keep delivering config to file if stdout not supplied [1865899]
  - utils/bond2team: remove TYPE in ifcfg file [1865899]


author: Xin Long <lxin@redhat.com> - 1.29-2
changelog:
  - teamd/lacp: fix segfault due to NULL pointer dereference [1758073]
  - teamd: fix build error in expansion of macro teamd_log_dbgx [1758073]
  - teamd: update ctx->hwaddr after setting team dev to new hwaddr
  - libteam: wapper teamd_log_dbg with teamd_log_dbgx [1758073]


author: Xin Long <lxin@redhat.com> - 1.31-1
changelog:
  - 1.31 release
  - utils/bond2team: remove TYPE in ifcfg file [1858518]
  - utils/bond2team: keep delivering config to file if stdout not supplied [1858518]
  - teamd/lacp: silence ignore none LACP frames
  - Send LACP PDU right after the Actor state has been changed
  - Skip setting the same hwaddr to a lag port if not needed
  - Make all netlink socket RCVBUF sizes configurable
  - Don't return an error when timerfd socket return 0
  - Fix ifinfo_link_with_port race condition with newlink
  - teamd: fix possible race in master ifname callback
  - 1.30 release
  - teamd: Disregard current state when considering port enablement [1851460]


author: Xin Long <lxin@redhat.com> - 1.31-4
changelog:
  - teamd: do no remove the ports on shutdown with -N [2148856]
  - teamd: stop iterating callbacks when a loop restart is requested [2148855]


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.37-1
changelog:
  - New upstream release 0.9.37
  - Use RHEL_ALLOW_PYTHON2_FOR_BUILD=1 for build
  - Use %{__python2}, not "python", as the Python2 interpreter


author: Jakub Hrozek <jhrozek@redhat.com> - 0.9.39-1
changelog:
  - Resolves: #1684580 - Rebase libtevent to version 0.9.36 for Samba
  - Resolves: #1597318 - libtevent uses Python 2 to build
  - Resolves: #1567139 - libtevent: Drop Python 2 subpackage from RHEL 8


author: Jakub Hrozek <jhrozek@redhat.com>
changelog:
  - Remove the python2 subpackages on upgrade
  - Resolves: #1567139 - libtevent: Drop Python 2 subpackage from RHEL 8


author: Isaac Boukris <iboukris@redhat.com> - 0.10.0-2
changelog:
  - Resolves: #1754421 - Upgrade tevent to 0.10.0 version for samba
  - Related: #1754421 - Fix sssd tests (tevent)


author: Steve Dickson <steved@redhat.com> 1.1.4-4
changelog:
  - Enable gating using reverse dependency testing of nfs-utils (bz 1681965)
  - Updated the URL (bz 1638671)
  - Fix EOF detection on non-blocking socket (bz 1641875)


author: Steve Dickson <steved@redhat.com> 1.1.4-5
changelog:
  - blacklist: Add a few more well known ports (bz 1854147)
  - Disallow calling auth_refresh from clnt_call with RPCSEC_GSS (bz 1934866)


author: Steve Dickson <steved@redhat.com> 1.1.4-8
changelog:
  - rpcb_clnt.c add mechanism to try v2 protocol first (bz 2107650)
  - Multithreaded cleanup (bz 2112116)


author: Pavel Raiskup <praiskup@redhat.com> - 2.4.6-23
changelog:
  - bake in versioned requirement on automake (rhbz#1193591)
  - fix testsuite FTBFS against automake 1.16.1
  - bypass -specs=* to gcc (rhbz#985592)


author: Jeff Moyer <jmoyer@redhat.com> - 1.0.7-2.el8
changelog:
  - Fix versioning.  The installed library is 1.0.7, make the rpm match.
  - bump release number for build, which includes -fPIC fix
  - Related: rhbz#1862551


author: Hans de Goede <hdegoede@redhat.com> - 1.0.21-0.1.git448584a
changelog:
  - Update to a pre 1.0.21 git snapshot to bring in libusb_interrupt_event_handler
    which chromium needs (rhbz#1270324)


author: Jakub Hrozek <jhrozek@redhat.com> - 0.62-14
changelog:
  - Do not build python2-libuser at all in RHEL-8
  - Resolves: #1559103 - libuser: Drop Python 2 subpackage(s) from RHEL 8


author: Jakub Hrozek <jhrozek@redhat.com> - 0.62-16
changelog:
  - Use 2048bit keys in tests
  - Resolves: rhbz#1611729 - [RHEL8-S-BUILD] libuser Fails Scratch Build on rhel-8.0


author: Jakub Hrozek <jhrozek@redhat.com> - 0.62-17
changelog:
  - Resolves: rhbz#1558151 - libuser needs audit events around the account
                             lifecycle


author: Jakub Hrozek <jhrozek@redhat.com> - 0.62-19
changelog:
  - Resolves: rhbz#1602600 -  Please review important issues found by covscan
                              in "libuser-0.62-14.el8+7" package


author: Jakub Hrozek <jhrozek@redhat.com> - 0.62-20
changelog:
  - Resolves: rhbz#1637398 - libuser-python3 should be renamed to comply
                             with Packaging Guidelines


author: Jakub Hrozek <jhrozek@redhat.com> - 0.62-23
changelog:
  - Actually apply the patch from the previous build
  - Resolves: rhbz#1670997 - Amend the user lifecycle auditing


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.1.6-14
changelog:
  - build with hardening LDFLAGS (#1548717)
  - remove obsolete macro and comments
  - add gcc to build requirements


author: Harald Hoyer <harald@redhat.com> - 16-1
changelog:
  - libvarlink 16
  - fixed coverity issues
  - Resolves: #1638294 - Interface name validation rule update


author: Björn Esser <besser82@fedoraproject.org> - 4.0.1-5
changelog:
  - Add patch to update to recent development branch
  - Re-enable SUNMD5 support as it is BSD licensed now
  - Build compatibility symbols for glibc only
  - Skip failing testsuite once


author: David King <dking@redhat.com> - 2.9.7-10
changelog:
  - Fix CVE-2021-3516 (#1956976)
  - Fix CVE-2021-3517 (#1957001)
  - Fix CVE-2021-3518 (#1957028)
  - Fix CVE-2021-3537 (#1957284)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.9.4-5
changelog:
  - Python 2 binary package renamed to python2-libxml2
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 2.9.7-5.0.1
changelog:
  - Update doc/redhat.gif in tarball
  - Add libxml2-oracle-enterprise.patch and update logos in tarball


author: David King <dking@redhat.com> - 2.9.7-9.1
changelog:
  - Fix CVE-2021-3516 (#1956975)
  - Fix CVE-2021-3517 (#1957000)
  - Fix CVE-2021-3518 (#1957027)
  - Fix CVE-2021-3537 (#1957283)


author: Tomas Korbar <tkorbar@redhat.com> - 0.16.105-1
changelog:
  - Change specfile accordingly to mosvald's review
  - Remove obsolete ldconfig scriptlets
  - libyang-devel-doc changed to noarch package
  - Add python_provide macro to python3-libyang subpackage
  - Remove obsolete Requires from libyang-cpp-devel
  - Start using cmake with smp_mflags macro


author: Michal Ruprich <mruprich@redhat.com> - 0.16.105-3.1
changelog:
  - Resolves: #1779573 - CVE-2019-19333 libyang: stack-based buffer overflow in make_canonical when bits leaf type is used
  - Resolves: #1779576 - CVE-2019-19334 libyang: stack-based buffer overflow in make_canonical when identityref leaf type is used


author: Xin Long <lxin@redhat.com> - 1.0.18-3
changelog:
  - Added a patch to fix netinet/sctp.h not to be installed.
  - Added some fixes for kernel feature detection.


author: Aaron Conole <aconole@redhat.com> - 1.0.1-14.git036e314
changelog:
  - Update to branch-1.1 compatibility
  - Fixes to avoid assert in the agent state machine
  - Remove the memory constraint on the event socket buffer (#1554110)


author: Chris Leech <cleech@redhat.com> - 1.0.1-3.git986eb2e
changelog:
  - 1303439 package should not attempt to own /etc/bash_completion.d
  - fix more build warning in rawhide


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.4.0-21.20180522git70f7e08
changelog:
  - Fix printing CPU info on non-x86 architectures in sensors-detect
  - Resolves: rhbz#1752854
  - Fix printing lm_sensors version in sensors-detect and pwmconfig
  - Resolves: rhbz#1677414


author: Artem Egorenkov <aegorenk@redhat.com> - 3.4.0-23
changelog:
  - New flag for no sensors added. This flag is used in VM environment
    to make sensors binaries not fail if no sensors was detected.


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.0.4-0.27.20111007git
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
  - Explicitly include <sys/sysmacros.h> due to glibc-headers changes.
  Definition of major and minor macros is no longer transitively included
  through <sys/types.h>, hence make it explicit.
  Ref:
  https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=NEWS;hb=HEAD


author: Kamil Dudka <kdudka@redhat.com> - 3.14.0-3
changelog:
  - fix programming mistakes detected by Coverity Analysis
  - document the --version option in the logrotate(8) man page (#1611498)


author: Kamil Dudka <kdudka@redhat.com> - 3.14.0-4
changelog:
  - logrotate.8: encourage admins to use the `su` directive (#1759770)
  - do not abort globbing on broken symlink (#1723265)


author: Pavel Šimovec <psimovec@redhat.com> - 7.4.3-17
changelog:
  - do not treat "RAS: Correctable Errors collector initialized" message as an error
  - Resolves: rhbz#2043946


author: Lianbo Jiang <lijiang@redhat.com> - B.02.18-18
changelog:
  - Fix:59a8e99ab22d ("Porting the code from /CoreOS/lshw/sanity/check-output for the CI gating")
  - Resolves: rhbz#1680623


author: Lianbo Jiang <lijiang@redhat.com> - B.02.18-22
changelog:
  - Display proper logical name of network device
  - Resolves: rhbz#1724087
  - Add DIMM running speed and Print dimm rank information
  - Resolves: rhbz#1725199


author: Jan Rybar <jrybar@redhat.com> - 4.93.2-1
changelog:
  - Rebase to lsof-4.93.2
  - Upstream moved to GitHub (original unreachable) and tarball structure changed
  - Manpage patch needed to reflect the tarball changes
  - Resolves: rhbz#1778228


author: Tomas Bzatek <tbzatek@redhat.com> - 0.32-1
changelog:
  - Upgrade to 0.32 upstream snapshot (#1855766)
  - Fix NVMe device parsing (#1687841, #1845977)
  - Fix WWN string reporting (#1846559)
  - Implement SCSI identifier sort priority (#1846566)


author: Robert Scheck <robert@fedoraproject.org> - 1.03-13
changelog:
  - Added patch by Khem Raj to use static inlines as the external
    inline definition has changed with GCC 5 (to fix ppc64 builds)


author: Patsy Griffin Franklin <pfrankli@redhat.com> 1:4.2.1-7
changelog:
  - Fix build failure caused by automake versioning differences related
    to the glob changes. (#1589769)
  - Fix testing failure due to Perl changes related to expanding paths.


author: Nikola Forró <nforro@redhat.com> - 2.7.6.1-18
changelog:
  - schedule interrupted cache update for the next boot, instead of blocking
    system reboot/shutdown
    resolves #1874010


author: Nikola Forró <nforro@redhat.com> - 4.15-7
changelog:
  - remove rpc.3 and xdr.3 man pages documenting deprecated glibc RPC implementation
    resolves: #1980919


author: Lans Hung <lans.hung@oracle.com> - 3:159-1.0.1
changelog:
  - Fix mcelog service should not fail but put into inactive with unsupported (AMD) cpu. [Orabug: 29501190]


author: Prarit Bhargava <prarit@redhat.com> - 3:160-1
changelog:
  - Deduce channel number for Haswell/Broadwell/Skylake systems [1641046]
  - Add decoding for Optane DC persistent memory mode [1645344]


author: Prarit Bhargava <prarit@redhat.com> - 3:173-0
changelog:
  - Update to v173
  - adds support for Tigerlake, Rocketlake, Alderlake, Lakefield
  - adds support for CometLake, Icelake server, Icelake-D, and Snow Ridge


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-2
changelog:
  - Revert "mcstransd select correct colour range." (#1731451)
  - Fix mcstrans secolor examples (#1731451)


author: Xiao Ni <xni@redhat.com> - 4.1.12
changelog:
  - Update mdadm to latest upstream && change tmpfiles directory && correct changelog date
  - Resolves rhbz#1800521 and rhbz#1657265


author: EL Errata <el-errata_ww@oracle.com> - 4.1-4.0.1
changelog:
  - imsm fix spare activation for old matrix-arrays [Orabug: 29246647]
  - mdmon wait for previous mdmon to exit during takeover [Orabug: 29246647]
  - mdmon dont attempt to manage new arrays when terminating [Orabug: 29246647]


author: Xiao Ni <xni@redhat.com> - 4.2-6
changelog:
  - Keep udev rule close to upstream and update to latest upstream
  - Resolves rhbz#1991596, rhbz#2129088, rhbz#2107150


author: Xiao Ni <xni@redhat.com> - 4.2-7
changelog:
  - Update to latest to upstream to fix some bugs
  - Resolves rhbz#2149307, rhbz#2149473, rhbz#2151208, rhbz#2127096


author: Xiao Ni <xni@redhat.com> - 4.2-9
changelog:
  - Update to latest upstream and fix mdcheck service bug
  - Resolves rhbz#2116418, rhbz#2150862, rhbz#2159584


author: Jaroslav Škarvada <jskarvad@redhat.com> - 5.01-10
changelog:
  - Fixed memtest86+ to run even if relocated above 1 MB
    (by real-mode-reloc patch)
  - Relocated memtest86+ above 1 MB (as we always did in Fedora)
  - Fixed compilation of inline assembly with new gcc
    (by fgnu89-inline patch)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 5.01-14
changelog:
  - Removed some spec artifacts (like buildroot cleaning)
  - Fixed malformed "Loading" banner
  - Not relocating memtest86+ above 1 MB
    Related: rhbz#1303804
  - Introduced new configuration file (/etc/memtest86+.conf)
  - Introduced new memtest-setup switches for selecting ELF/non-ELF versions
    Resolves: rhbz#1303804


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20180807a-2.20190514a.2
changelog:
  - Remove disclaimer, as it is not as important now to justify kmsg/log
    pollution; its contents are partially adopted in README.caveats.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20190618-1.20190918.1
changelog:
  - Intel CPU microcode update to 20190918 (#1758538).
  - Add new disclaimer, generated based on relevant caveats.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20190618-1.20191112-1
changelog:
  - Intel CPU microcode update to 20191112, addresses CVE-2017-5715,
    CVE-2019-0117, CVE-2019-11135, CVE-2019-11139 (#1764059, #1764072, #1764951,
      - Addition of 06-a6-00/0x80 (CML-U 6+2 A0) microcode at revision 0xc6;
    - Addition of 06-66-03/0x80 (CNL-U D0) microcode at revision 0x2a;
    - Addition of 06-55-03/0x97 (SKL-SP B1) microcode at revision 0x1000150;
    - Addition of 06-7e-05/0x80 (ICL-U/Y D1) microcode at revision 0x46;
    - Update of 06-4e-03/0xc0 (SKL-U/Y D0) microcode from revision 0xcc to 0xd4;
    - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 R0/N0) microcode from revision 0xcc
      to 0xd4
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xb4 to 0xc6;
    - Update of 06-8e-09/0xc0 (KBL-U/Y H0) microcode from revision 0xb4 to 0xc6;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0) microcode from revision 0xb4
      to 0xc6;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xb8 to 0xc6;
    - Update of 06-8e-0c/0x94 (AML-Y V0) microcode from revision 0xb8 to 0xc6;
    - Update of 06-8e-0c/0x94 (CML-U 4+2 V0) microcode from revision 0xb8 to 0xc6;
    - Update of 06-8e-0c/0x94 (WHL-U V0) microcode from revision 0xb8 to 0xc6;
    - Update of 06-9e-09/0x2a (KBL-G/X H0) microcode from revision 0xb4 to 0xc6;
    - Update of 06-9e-09/0x2a (KBL-H/S/Xeon E3 B0) microcode from revision 0xb4
      to 0xc6;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision 0xb4
      to 0xc6;
    - Update of 06-9e-0b/0x02 (CFL-S B0) microcode from revision 0xb4 to 0xc6;
    - Update of 06-9e-0d/0x22 (CFL-H R0) microcode from revision 0xb8 to 0xc6.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20190618-1.20191112.2
changelog:
  - Package the publicy available microcode-20191112 release (#1758539):
    - Addition of 06-4d-08/0x1 (AVN B0/C0) microcode at revision 0x12d;
    - Addition of 06-55-06/0xbf (CSL-SP B0) microcode at revision 0x400002c;
    - Addition of 06-7a-08/0x1 (GLK R0) microcode at revision 0x16;
    - Update of 06-55-03/0x97 (SKL-SP B1) microcode from revision 0x1000150
      up to 0x1000151;
    - Update of 06-55-04/0xb7 (SKL-SP H0/M0/U0, SKL-D M1) microcode from revision
      0x2000064 up to 0x2000065;
    - Update of 06-55-07/0xbf (CSL-SP B1) microcode from revision 0x500002b
      up to 0x500002c;
    - Update of 06-7a-01/0x1 (GLK B0) microcode from revision 0x2e up to 0x32;
  - Include 06-9e-0c (CFL-H/S P0) microcode from the microcode-20190918 release.
  - Correct the releasenote file (0001-releasenote-changes-summary-fixes.patch).
  - Update README.caveats with the link to the new Knowledge Base article.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20190618-1.20191113.1
changelog:
  - Update Intel CPU microcode to microcode-20191113 release:
    - Update of 06-9e-0c (CFL-H/S P0) microcode from revision 0xae up to 0xc6.
  - Drop 0001-releasenote-changes-summary-fixes.patch.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20190618-1.20191115.1
changelog:
  - Update Intel CPU microcode to microcode-20191115 release:
    - Update of 06-4e-03/0xc0 (SKL-U/Y D0) from revision 0xd4 up to 0xd6;
    - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 R0/N0) from revision 0xd4
      up to 0xd6;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) from revision 0xc6 up to 0xca;
    - Update of 06-8e-09/0xc0 (KBL-U/Y H0) from revision 0xc6 up to 0xca;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0) from revision 0xc6 up to 0xca;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) from revision 0xc6 up to 0xca;
    - Update of 06-8e-0c/0x94 (AML-Y V0, CML-U 4+2 V0, WHL-U V0) from revision
      0xc6 up to 0xca;
    - Update of 06-9e-09/0x2a (KBL-G/X H0, KBL-H/S/Xeon E3 B0) from revision 0xc6
      up to 0xca;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) from revision 0xc6 up to 0xca;
    - Update of 06-9e-0b/0x02 (CFL-S B0) from revision 0xc6 up to 0xca;
    - Update of 06-9e-0c/0x22 (CFL-S/Xeon E P0) from revision 0xc6 up to 0xca;
    - Update of 06-9e-0d/0x22 (CFL-H/S R0) from revision 0xc6 up to 0xca;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) from revision 0xc6 up to 0xca.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20190618-1.20191115.3
changelog:
  - Update stale posttrans dependency, add triggers for proper handling
    of the debug kernel flavour along with kernel-rt (#1780009).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20191115-3
changelog:
  - Update stale posttrans dependency, add triggers for proper handling
    of the debug kernel flavour along with kernel-rt (#1766178).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20191115-4.20191115.5
changelog:
  - Re-generate initramfs not only for the currently running kernel,
    but for several recently installed kernels as well.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20191115-4.20200602.1
changelog:
  - Update Intel CPU microcode to microcode-20200602 release, addresses
    CVE-2020-0543, CVE-2020-0548, CVE-2020-0549 (#1827183):
    - Update of 06-2d-06/0x6d (SNB-E/EN/EP C1/M0) microcode from revision 0x61f
      up to 0x621;
    - Update of 06-2d-07/0x6d (SNB-E/EN/EP C2/M1) microcode from revision 0x718
      up to 0x71a;
    - Update of 06-3c-03/0x32 (HSW C0) microcode from revision 0x27 up to 0x28;
    - Update of 06-3d-04/0xc0 (BDW-U/Y E0/F0) microcode from revision 0x2e
      up to 0x2f;
    - Update of 06-45-01/0x72 (HSW-U C0/D0) microcode from revision 0x25
      up to 0x26;
    - Update of 06-46-01/0x32 (HSW-H C0) microcode from revision 0x1b up to 0x1c;
    - Update of 06-47-01/0x22 (BDW-H/Xeon E3 E0/G0) microcode from revision 0x21
      up to 0x22;
    - Update of 06-4e-03/0xc0 (SKL-U/Y D0) microcode from revision 0xd6
      up to 0xdc;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000151
      up to 0x1000157;
    - Update of 06-55-04/0xb7 (SKX-SP H0/M0/U0, SKX-D M1) microcode
      (in intel-06-55-04/intel-ucode/06-55-04) from revision 0x2000065
      up to 0x2006906;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400002c
      up to 0x4002f01;
    - Update of 06-55-07/0xbf (CLX-SP B1) microcode from revision 0x500002c
      up to 0x5002f01;
    - Update of 06-5e-03/0x36 (SKL-H/S R0/N0) microcode from revision 0xd6
      up to 0xdc;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x46
      up to 0x78;
    - Update of 06-8e-09/0x10 (AML-Y22 H0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-8e-09/0xc0 (KBL-U/Y H0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-8e-0a/0xc0 (CFL-U43e D0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-8e-0c/0x94 (AML-Y42 V0, CML-Y42 V0, WHL-U V0) microcode
      from revision 0xca up to 0xd6;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from revision
      0xca up to 0xd6;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E3 U0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-9e-0b/0x02 (CFL-S B0) microcode from revision 0xca up to 0xd6;
    - Update of 06-9e-0c/0x22 (CFL-H/S P0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-9e-0d/0x22 (CFL-H R0) microcode from revision 0xca up to 0xd6.
  - Change the URL to point to the GitHub repository since the microcode download
    section at Intel Download Center does not exist anymore.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20191112-2
changelog:
  - Package the publicy available microcode-20191112 release (#1755027):
    - Addition of 06-4d-08/0x1 (AVN B0/C0) microcode at revision 0x12d;
    - Addition of 06-55-06/0xbf (CSL-SP B0) microcode at revision 0x400002c;
    - Addition of 06-7a-08/0x1 (GLK R0) microcode at revision 0x16;
    - Update of 06-55-03/0x97 (SKL-SP B1) microcode from revision 0x1000150
      up to 0x1000151;
    - Update of 06-55-04/0xb7 (SKL-SP H0/M0/U0, SKL-D M1) microcode from revision
      0x2000064 up to 0x2000065;
    - Update of 06-55-07/0xbf (CSL-SP B1) microcode from revision 0x500002b
      up to 0x500002c;
    - Update of 06-7a-01/0x1 (GLK B0) microcode from revision 0x2e up to 0x32;
  - Include 06-9e-0c (CFL-H/S P0) microcode from the microcode-20190918 release.
  - Correct the releasenote file (0001-releasenote-changes-summary-fixes.patch).
  - Update README.caveats with the link to the new Knowledge Base article.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20191115-4.20200602.3
changelog:
  - Do not update 06-4e-03 (SKL-U/Y) and 06-5e-03 (SKL-H/S/Xeon E3 v5) to revision
    0xdc, use 0xd6 by default (#1848440).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20191115-4.20200609.1
changelog:
  - Update Intel CPU microcode to microcode-20200609 release (#1848504):
    - Fixed a typo in the release note file.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20190918-1
changelog:
  - Intel CPU microcode update to 20190918 (#1753544).
  - Add new disclaimer, generated based on relevant caveats.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20191112-1
changelog:
  - Intel CPU microcode update to 20191112, addresses CVE-2017-5715,
    CVE-2019-0117, CVE-2019-11135, CVE-2019-11139 (#1755019, #1764060, #1764073,
      - Addition of 06-a6-00/0x80 (CML-U 6+2 A0) microcode at revision 0xc6;
    - Addition of 06-66-03/0x80 (CNL-U D0) microcode at revision 0x2a;
    - Addition of 06-55-03/0x97 (SKL-SP B1) microcode at revision 0x1000150;
    - Addition of 06-7e-05/0x80 (ICL-U/Y D1) microcode at revision 0x46;
    - Update of 06-4e-03/0xc0 (SKL-U/Y D0) microcode from revision 0xcc to 0xd4;
    - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 R0/N0) microcode from revision 0xcc
      to 0xd4
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode from revision 0xb4 to 0xc6;
    - Update of 06-8e-09/0xc0 (KBL-U/Y H0) microcode from revision 0xb4 to 0xc6;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0) microcode from revision 0xb4
      to 0xc6;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xb8 to 0xc6;
    - Update of 06-8e-0c/0x94 (AML-Y V0) microcode from revision 0xb8 to 0xc6;
    - Update of 06-8e-0c/0x94 (CML-U 4+2 V0) microcode from revision 0xb8 to 0xc6;
    - Update of 06-8e-0c/0x94 (WHL-U V0) microcode from revision 0xb8 to 0xc6;
    - Update of 06-9e-09/0x2a (KBL-G/X H0) microcode from revision 0xb4 to 0xc6;
    - Update of 06-9e-09/0x2a (KBL-H/S/Xeon E3 B0) microcode from revision 0xb4
      to 0xc6;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode from revision 0xb4
      to 0xc6;
    - Update of 06-9e-0b/0x02 (CFL-S B0) microcode from revision 0xb4 to 0xc6;
    - Update of 06-9e-0d/0x22 (CFL-H R0) microcode from revision 0xb8 to 0xc6.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20200508-1
changelog:
  - Update Intel CPU microcode to microcode-20200508 release (#1783103):
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x46
      up to 0x78.
  - Change the URL to point to the GitHub repository since the microcode download
    section at Intel Download Center does not exist anymore.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20200520-1
changelog:
  - Update Intel CPU microcode to microcode-20200520 release (#1783103):
    - Update of 06-2d-06/0x6d (SNB-E/EN/EP C1/M0) microcode from revision 0x61f
      up to 0x621;
    - Update of 06-2d-07/0x6d (SNB-E/EN/EP C2/M1) microcode from revision 0x718
      up to 0x71a.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20200602-1
changelog:
  - Update Intel CPU microcode to microcode-20200602 release, addresses
    CVE-2020-0543, CVE-2020-0548, CVE-2020-0549 (#1795354, #1795356, #1827184):
    - Update of 06-3c-03/0x32 (HSW C0) microcode from revision 0x27 up to 0x28;
    - Update of 06-3d-04/0xc0 (BDW-U/Y E0/F0) microcode from revision 0x2e
      up to 0x2f;
    - Update of 06-45-01/0x72 (HSW-U C0/D0) microcode from revision 0x25
      up to 0x26;
    - Update of 06-46-01/0x32 (HSW-H C0) microcode from revision 0x1b up to 0x1c;
    - Update of 06-47-01/0x22 (BDW-H/Xeon E3 E0/G0) microcode from revision 0x21
      up to 0x22;
    - Update of 06-4e-03/0xc0 (SKL-U/Y D0) microcode from revision 0xd6
      up to 0xdc;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000151
      up to 0x1000157;
    - Update of 06-55-04/0xb7 (SKX-SP H0/M0/U0, SKX-D M1) microcode
      (in intel-06-55-04/intel-ucode/06-55-04) from revision 0x2000065
      up to 0x2006906;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400002c
      up to 0x4002f01;
    - Update of 06-55-07/0xbf (CLX-SP B1) microcode from revision 0x500002c
      up to 0x5002f01;
    - Update of 06-5e-03/0x36 (SKL-H/S R0/N0) microcode from revision 0xd6
      up to 0xdc;
    - Update of 06-8e-09/0x10 (AML-Y22 H0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-8e-09/0xc0 (KBL-U/Y H0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-8e-0a/0xc0 (CFL-U43e D0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-8e-0c/0x94 (AML-Y42 V0, CML-Y42 V0, WHL-U V0) microcode
      from revision 0xca up to 0xd6;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from revision
      0xca up to 0xd6;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E3 U0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-9e-0b/0x02 (CFL-S B0) microcode from revision 0xca up to 0xd6;
    - Update of 06-9e-0c/0x22 (CFL-H/S P0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-9e-0d/0x22 (CFL-H R0) microcode from revision 0xca up to 0xd6.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20200602-3
changelog:
  - Do not update 06-4e-03 (SKL-U/Y) and 06-5e-03 (SKL-H/S/Xeon E3 v5) to revision
    0xdc, use 0xd6 by default (#1846119).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20200609-1
changelog:
  - Update Intel CPU microcode to microcode-20200609 release (#1845967):
    - Fixed a typo in the release note file.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20200609-2
changelog:
  - Blacklist latest microcode revision for 06-[89]e-0x CPUs (AML-Y,
    CFL-H/S/U/Xeon E, CML-Y, KBL-G/H/S/X/U/Y/Xeon E3 v6, WHL-U) on Dell systems,
    use revision 0xae/0xb4/0xb8 by default, provide the latest revision
    and intermediate revision 0xca in caveats (#1807960, #1846097).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20200609-2.20200609.3
changelog:
  - Add README file to the documentation directory.
  - Add publicly-sourced codenames list to supply to gen_provides.sh; update
    the latter to handle the somewhat different format.
  - Add SUMMARY.intel-ucode file containing metadata information from
    the microcode file headers.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20200609-2.20201027.1
changelog:
  - Update Intel CPU microcode to microcode-20201027 release, addresses
    CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698
    (#1893265, #1893253, #1893233):
    - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;
    - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
    - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;
    - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;
    - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;
    - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision
      0xe0;
    - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
      intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up
      to 0x2006a08;
    - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
      intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
      to 0xde;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
      to 0xde;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up
      to 0xe0;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up
      to 0xde;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xd6 up to 0xde;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up
      to 0xde;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up
      to 0xde;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up
      to 0xde;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up
      to 0xde;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up
      to 0xde;
    - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
      from revision 0x43 up to 0x44;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157
      up to 0x1000159;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01
      up to 0x4003003;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5002f01 up to 0x5003003;
    - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up
      to 0x40;
    - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up
      to 0x1e;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up
      to 0x18;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78
      up to 0xa0;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca
      up to 0xe0.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20200609-2.20201112.1
changelog:
  - Update Intel CPU microcode to microcode-20201112 release (#1897187):
    - Addition of 06-8a-01/0x10 (LKF B2/B3) microcode at revision 0x28;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x32 up
      to 0x34;
    - Updated releasenote file.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20200609-2.20210216.1
changelog:
  - Update Intel CPU microcode to microcode-20210216 release (#1907898):
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
      to 0x2006a0a;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
      up to 0x4003006;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003003 up to 0x5003006.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20201027-1
changelog:
  - Update Intel CPU microcode to microcode-20201027 release, addresses
    CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698
    (#1893266, #1893254, #1893234):
    - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;
    - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
    - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;
    - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;
    - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;
    - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision
      0xe0;
    - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
      intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up
      to 0x2006a08;
    - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
      intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
      to 0xde;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
      to 0xde;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up
      to 0xe0;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up
      to 0xde;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xd6 up to 0xde;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up
      to 0xde;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up
      to 0xde;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up
      to 0xde;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up
      to 0xde;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up
      to 0xde;
    - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
      from revision 0x43 up to 0x44;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157
      up to 0x1000159;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01
      up to 0x4003003;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5002f01 up to 0x5003003;
    - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up
      to 0x40;
    - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up
      to 0x1e;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up
      to 0x18;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78
      up to 0xa0;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca
      up to 0xe0.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20201112-1
changelog:
  - Update Intel CPU microcode to microcode-20201112 release (#1896912):
    - Addition of 06-8a-01/0x10 (LKF B2/B3) microcode at revision 0x28;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x32 up
      to 0x34;
    - Updated releasenote file.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20201112-2
changelog:
  - Do not use "grep -q" in a pipe in check_caveats (#1902021).
  - Add 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats
    (#1902884).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20210216-1
changelog:
  - Update Intel CPU microcode to microcode-20210216 release (#1902884):
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
      to 0x2006a0a;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
      up to 0x4003006;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003003 up to 0x5003006.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20210216-1.20210525.1
changelog:
  - Update Intel CPU microcode to microcode-20210525 release, addresses
    CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
    (#1962663, #1962713, #1962733, #1962679):
    - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
    - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
    - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
    - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
    - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
      at revision 0xb00000f;
    - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
      at revision 0xb00000f;
    - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
    - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
    - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
    - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
    - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
    - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
    - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
      intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
    - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
      intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up
      to 0xb00003e;
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up
      to 0x2006b06;
    - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
      intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
      to 0xea;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
      to 0xea;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up
      to 0xea;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up
      to 0xea;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xde up to 0xea;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up
      to 0xea;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up
      to 0xea;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up
      to 0xea;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up
      to 0xea;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up
      to 0xea;
    - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
      from revision 0x44 up to 0x46;
    - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up
      to 0x19;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159
      up to 0x100015b;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006
      up to 0x4003102;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003006 up to 0x5003102;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e
      up to 0x7002302;
    - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
      0x7000019 up to 0x700001b;
    - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000017
      up to 0xf000019;
    - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
      0xe00000f up to 0xe000012;
    - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x40 up
      to 0x44;
    - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x1e up
      to 0x20;
    - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x2e up
      to 0x34;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x34 up
      to 0x36;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x18 up
      to 0x1a;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa0
      up to 0xa6;
    - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x28 up
      to 0x2a;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xe0 up
      to 0xea;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xe0
      up to 0xea;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xe0
      up to 0xec;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe0
      up to 0xe8;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode from revision
      0xe0 up to 0xea.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20210216-1.20210525.2
changelog:
  - Make intel-06-2d-07, intel-06-4e-03, intel-06-4f-01, intel-06-55-04,
    intel-06-5e-03, intel-06-8c-01, intel-06-8e-9e-0x-0xca,
    and intel-06-8e-9e-0x-dell caveats dependent on intel caveat.
  - Enable 06-8c-01 microcode update by default (#1972328).
  - Enable 06-5e-03 microcode update by default (#1972325).


author: Todd Vierling <todd.vierling@oracle.com> - 4:20210216-1.20210608.0.1
changelog:
  - add support for UEK6 kernels
  - enable early update for 06-4f-01
  - remove no longer appropriate caveats for 06-2d-07 and 06-55-04
  - enable early and late load on RHCK


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20210525-1
changelog:
  - Update Intel CPU microcode to microcode-20210525 release, addresses
    CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
    (#1962664, #1962714, #1962734, #1962680):
    - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
    - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
    - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
    - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
    - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
      at revision 0xb00000f;
    - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
      at revision 0xb00000f;
    - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
    - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
    - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
    - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
    - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
    - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
    - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
      intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
    - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
      intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up
      to 0xb00003e;
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up
      to 0x2006b06;
    - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
      intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
      to 0xea;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
      to 0xea;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up
      to 0xea;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up
      to 0xea;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xde up to 0xea;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up
      to 0xea;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up
      to 0xea;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up
      to 0xea;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up
      to 0xea;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up
      to 0xea;
    - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
      from revision 0x44 up to 0x46;
    - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up
      to 0x19;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159
      up to 0x100015b;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006
      up to 0x4003102;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003006 up to 0x5003102;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e
      up to 0x7002302;
    - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
      0x7000019 up to 0x700001b;
    - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000017
      up to 0xf000019;
    - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
      0xe00000f up to 0xe000012;
    - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x40 up
      to 0x44;
    - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x1e up
      to 0x20;
    - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x2e up
      to 0x34;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x34 up
      to 0x36;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x18 up
      to 0x1a;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa0
      up to 0xa6;
    - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x28 up
      to 0x2a;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xe0 up
      to 0xea;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xe0
      up to 0xea;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xe0
      up to 0xec;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe0
      up to 0xe8;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode from revision
      0xe0 up to 0xea.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20210525-2
changelog:
  - Make intel-06-2d-07, intel-06-4e-03, intel-06-4f-01, intel-06-55-04,
    intel-06-5e-03, intel-06-8c-01, intel-06-8e-9e-0x-0xca,
    and intel-06-8e-9e-0x-dell caveats dependent on intel caveat.
  - Enable 06-8c-01 microcode update by default (#1970611).
  - Enable 06-5e-03 microcode update by default (#1897673).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20210608-1
changelog:
  - Update Intel CPU microcode to microcode-20210608 release (#1921773):
    - Fixes in releasenote.md file.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20210608-1.20220204.1
changelog:
  - Update Intel CPU microcode to microcode-20220204 release, addresses
    CVE-2021-0127, CVE-2021-0145, CVE-2021-33120 (#2049541, #2049553, #2049570):
    - Removal of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
    - Removal of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
      at revision 0xb00000f;
    - Removal of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
      at revision 0xb00000f;
    - Removal of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
    - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
      intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xea up to 0xec;
    - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
      intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb00003e up
      to 0xb000040;
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006b06 up
      to 0x2006c0a;
    - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
      intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xea up to 0xec;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x88 up to 0x9a;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xea up
      to 0xec;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xea up
      to 0xec;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xea up
      to 0xec;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xea up
      to 0xec;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xea up to 0xec;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xea up
      to 0xec;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xea up
      to 0xec;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xea up
      to 0xec;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xea up
      to 0xec;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xea up
      to 0xec;
    - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
      from revision 0x46 up to 0x49;
    - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x19 up
      to 0x1a;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015b
      up to 0x100015c;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003102
      up to 0x400320a;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003102 up to 0x500320a;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002302
      up to 0x7002402;
    - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
      0x700001b up to 0x700001c;
    - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000019
      up to 0xf00001a;
    - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
      0xe000012 up to 0xe000014;
    - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x44 up
      to 0x46;
    - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x20 up
      to 0x24;
    - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x34 up
      to 0x36;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0002a0
      up to 0xd000331;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x36 up
      to 0x38;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1a up
      to 0x1c;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa6
      up to 0xa8;
    - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2a up
      to 0x2d;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x16 up
      to 0x22;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x2c up
      to 0x3c;
    - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x11 up
      to 0x15;
    - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x1d up
      to 0x2400001f;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xea up
      to 0xec;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xea
      up to 0xec;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xec
      up to 0xee;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe8
      up to 0xea;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xea up to 0xec;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x40 up
      to 0x50.


author: Todd Vierling <todd.vierling@oracle.com> - 4:20210608-1.20220207.1.0.1
changelog:
  - roll back 06-6a-06 to 0xd0002a0 due to PCIe issues on reset [Orabug: 34076995]
  - add support for UEK6 and UEK7 kernels
  - enable early update for 06-4f-01
  - remove no longer appropriate caveats for 06-2d-07 and 06-55-04
  - enable early and late load on RHCK


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20220204-1
changelog:
  - Update Intel CPU microcode to microcode-20220204 release, addresses
    CVE-2021-0127, CVE-2021-0145, and CVE-2021-33120 (#1971906, #2049543,
      - Removal of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
    - Removal of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
      at revision 0xb00000f;
    - Removal of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
      at revision 0xb00000f;
    - Removal of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
    - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
      intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xea up to 0xec;
    - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
      intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb00003e up
      to 0xb000040;
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006b06 up
      to 0x2006c0a;
    - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
      intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xea up to 0xec;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x88 up to 0x9a;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xea up
      to 0xec;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xea up
      to 0xec;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xea up
      to 0xec;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xea up
      to 0xec;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xea up to 0xec;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xea up
      to 0xec;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xea up
      to 0xec;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xea up
      to 0xec;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xea up
      to 0xec;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xea up
      to 0xec;
    - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
      from revision 0x46 up to 0x49;
    - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x19 up
      to 0x1a;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015b
      up to 0x100015c;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003102
      up to 0x400320a;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003102 up to 0x500320a;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002302
      up to 0x7002402;
    - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
      0x700001b up to 0x700001c;
    - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000019
      up to 0xf00001a;
    - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
      0xe000012 up to 0xe000014;
    - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x44 up
      to 0x46;
    - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x20 up
      to 0x24;
    - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x34 up
      to 0x36;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0002a0
      up to 0xd000331;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x36 up
      to 0x38;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1a up
      to 0x1c;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa6
      up to 0xa8;
    - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2a up
      to 0x2d;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x16 up
      to 0x22;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x2c up
      to 0x3c;
    - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x11 up
      to 0x15;
    - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x1d up
      to 0x2400001f;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xea up
      to 0xec;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xea
      up to 0xec;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xec
      up to 0xee;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe8
      up to 0xea;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xea up to 0xec;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x40 up
      to 0x50.


author: Todd Vierling <todd.vierling@oracle.com> - 4:20220207-1.0.1
changelog:
  - add support for UEK6 and UEK7 kernels
  - enable early update for 06-4f-01
  - remove no longer appropriate caveats for 06-2d-07 and 06-55-04
  - enable early and late load on RHCK


author: Todd Vierling <todd.vierling@oracle.com> - 4:20220207-1.0.3
changelog:
  - update 06-55-04 to 0x2006d05
  - update 06-55-07 to 0x5003302
  - update 06-6a-04 to 0xb000280
  - update 06-6a-06 to 0xd000375


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20220207-1.20220510.1
changelog:
  - Update Intel CPU microcode to microcode-20220510 release, addresses
    CVE-2022-0005, CVE-2022-21131, CVE-2022-21136, CVE-2022-21151 (#2086742):
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode at revision 0x1f;
    - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) at revision 0x1f;
    - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
      at revision 0x1f;
    - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
      at revision 0x1f;
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
      intel-ucode/06-97-05) at revision 0x1f;
    - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode at revision 0x1f;
    - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
      at revision 0x1f;
    - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
      at revision 0x1f;
    - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode at
      revision 0x41c;
    - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) at revision 0x41c;
    - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) at revision 0x41c;
    - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode at revision 0x41c;
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
      intel-ucode/06-bf-02) at revision 0x1f;
    - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) at revision 0x1f;
    - Addition of 06-bf-02/0x03 (ADL C0) microcode at revision 0x1f;
    - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
      at revision 0x1f;
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
      intel-ucode/06-bf-05) at revision 0x1f;
    - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) at revision 0x1f;
    - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
      at revision 0x1f;
    - Addition of 06-bf-05/0x03 (ADL C0) microcode at revision 0x1f;
    - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
      intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xec up to 0xf0;
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006c0a up
      to 0x2006d05;
    - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
      intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xec up to 0xf0;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x9a up to 0xa4;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
      to 0xf0;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
      to 0xf0;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xec up
      to 0xf0;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xec up
      to 0xf0;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xec up to 0xf0;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xec up
      to 0xf0;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xec up
      to 0xf0;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xec up
      to 0xf0;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xec up
      to 0xf0;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xec up
      to 0xf0;
    - Update of 06-37-09/0x0f (VLV D0) microcode from revision 0x90c up
      to 0x90d;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015c
      up to 0x100015d;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400320a
      up to 0x4003302;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x500320a up to 0x5003302;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002402
      up to 0x7002501;
    - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x46 up
      to 0x48;
    - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x24 up
      to 0x28;
    - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x36 up
      to 0x38;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000331
      up to 0xd000363;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x38 up
      to 0x3a;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1c up
      to 0x1e;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa8
      up to 0xb0;
    - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2d up
      to 0x31;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x22 up
      to 0x26;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3c up
      to 0x3e;
    - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x15 up
      to 0x16;
    - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x2400001f
      up to 0x24000023;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xec up
      to 0xf0;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xec
      up to 0xf0;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xee
      up to 0xf0;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xea
      up to 0xf0;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xec up to 0xf0;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x50 up
      to 0x53.


author: Todd Vierling <todd.vierling@oracle.com> - 4:20220207-1.20220510.1.0.1
changelog:
  - ensure UEK also rebuilds initramfs [Orabug: 34280058]
  - update 06-6a-04 to 0xb000280
  - update 06-6a-06 to 0xd000375
  - add support for UEK6 and UEK7 kernels
  - enable early update for 06-4f-01
  - remove no longer appropriate caveats for 06-2d-07 and 06-55-04
  - enable early and late load on RHCK


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20220510-1
changelog:
  - Update Intel CPU microcode to microcode-20220510 release, addresses
    CVE-2022-0005, CVE-2022-21131, CVE-2022-21136, CVE-2022-21151 (#2086743):
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode at revision 0x1f;
    - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) at revision 0x1f;
    - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
      at revision 0x1f;
    - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
      at revision 0x1f;
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
      intel-ucode/06-97-05) at revision 0x1f;
    - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode at revision 0x1f;
    - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
      at revision 0x1f;
    - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
      at revision 0x1f;
    - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode at
      revision 0x41c;
    - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) at revision 0x41c;
    - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) at revision 0x41c;
    - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode at revision 0x41c;
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
      intel-ucode/06-bf-02) at revision 0x1f;
    - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) at revision 0x1f;
    - Addition of 06-bf-02/0x03 (ADL C0) microcode at revision 0x1f;
    - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
      at revision 0x1f;
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
      intel-ucode/06-bf-05) at revision 0x1f;
    - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) at revision 0x1f;
    - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
      at revision 0x1f;
    - Addition of 06-bf-05/0x03 (ADL C0) microcode at revision 0x1f;
    - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
      intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xec up to 0xf0;
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006c0a up
      to 0x2006d05;
    - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
      intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xec up to 0xf0;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x9a up to 0xa4;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
      to 0xf0;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
      to 0xf0;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xec up
      to 0xf0;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xec up
      to 0xf0;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xec up to 0xf0;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xec up
      to 0xf0;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xec up
      to 0xf0;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xec up
      to 0xf0;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xec up
      to 0xf0;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xec up
      to 0xf0;
    - Update of 06-37-09/0x0f (VLV D0) microcode from revision 0x90c up
      to 0x90d;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015c
      up to 0x100015d;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400320a
      up to 0x4003302;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x500320a up to 0x5003302;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002402
      up to 0x7002501;
    - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x46 up
      to 0x48;
    - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x24 up
      to 0x28;
    - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x36 up
      to 0x38;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000331
      up to 0xd000363;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x38 up
      to 0x3a;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1c up
      to 0x1e;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa8
      up to 0xb0;
    - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2d up
      to 0x31;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x22 up
      to 0x26;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3c up
      to 0x3e;
    - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x15 up
      to 0x16;
    - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x2400001f
      up to 0x24000023;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xec up
      to 0xf0;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xec
      up to 0xf0;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xee
      up to 0xf0;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xea
      up to 0xf0;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xec up to 0xf0;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x50 up
      to 0x53.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20220809-1
changelog:
  - Update Intel CPU microcode to microcode-20220510 release, addresses
    CVE-2022-21233 (#2115667):
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006d05 up
      to 0x2006e05;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015d
      up to 0x100015e;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000363
      up to 0xd000375;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3a up
      to 0x3c;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1e up
      to 0x20;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb0
      up to 0xb2;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x26 up
      to 0x28;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3e up
      to 0x40;
    - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode from revision
      0x1f up to 0x22;
    - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x1f up to 0x22;
    - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x1f up to 0x22;
    - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x1f up to 0x22;
    - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x1f up to 0x22;
    - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode from revision 0x1f
      up to 0x22;
    - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x1f up to 0x22;
    - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x1f up to 0x22;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x41c up to 0x421;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x41c up to 0x421;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x41c up to 0x421;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x41c
      up to 0x421;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x53 up
      to 0x54;
    - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
    - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
    - Update of 06-bf-02/0x03 (ADL C0) microcode from revision 0x1f up
      to 0x22;
    - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x1f up to 0x22;
    - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
    - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
    - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x1f up to 0x22;
    - Update of 06-bf-05/0x03 (ADL C0) microcode from revision 0x1f up
      to 0x22.


author: Todd Vierling <todd.vierling@oracle.com> - 4:20220809-2.0.1
changelog:
  - ensure UEK also rebuilds initramfs [Orabug: 34280058]
  - update 06-6a-04 to 0xb000280
  - update 06-6a-06 to 0xd000389
  - add support for UEK6 and UEK7 kernels
  - enable early update for 06-4f-01
  - remove no longer appropriate caveats for 06-2d-07 and 06-55-04
  - enable early and late load on RHCK


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20230214-1
changelog:
  - Update Intel CPU microcode to microcode-20230214 release, addresses
    CVE-2022-21216, CVE-2022-33196, CVE-2022-33972, CVE-2022-38090 (#2171234,
      - Addition of 06-6c-01/0x10 (ICL-D B0) microcode at revision 0x1000211;
    - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode at revision
      0x2b000181;
    - Addition of 06-8f-04/0x10 microcode at revision 0x2c000170;
    - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b000181;
    - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-04) at revision 0x2c000170;
    - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b000181;
    - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) at
      revision 0x2c000170;
    - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b000181;
    - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b000181;
    - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-04) at revision 0x2c000170;
    - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) at revision 0x2b000181;
    - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) at
      revision 0x2c000170;
    - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode at revision
      0x2b000181;
    - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode at revision
      0x2c000170;
    - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) at revision 0x2b000181;
    - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) at
      revision 0x2c000170;
    - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) at revision 0x2b000181;
    - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) at revision 0x2b000181;
    - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) at revision 0x2c000170;
    - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) at revision 0x2b000181;
    - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) at
      revision 0x2c000170;
    - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) at revision 0x2b000181;
    - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) at revision 0x2c000170;
    - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode at revision
      0x2b000181;
    - Addition of 06-8f-06/0x10 microcode at revision 0x2c000170;
    - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) at revision 0x2b000181;
    - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) at revision 0x2b000181;
    - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) at revision 0x2c000170;
    - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) at revision 0x2b000181;
    - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) at revision 0x2b000181;
    - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) at revision 0x2b000181;
    - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode at revision
      0x2b000181;
    - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) at revision 0x2b000181;
    - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) at revision 0x2b000181;
    - Addition of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) at
      revision 0x2c000170;
    - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) at revision 0x2b000181;
    - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) at revision 0x2c000170;
    - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) at revision 0x2b000181;
    - Addition of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) at
      revision 0x2c000170;
    - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) at revision 0x2b000181;
    - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode at revision
      0x2b000181;
    - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode at revision
      0x2c000170;
    - Addition of 06-b7-01/0x32 (RPL-S S0) microcode at revision 0x112;
    - Addition of 06-ba-02/0xc0 microcode at revision 0x410e;
    - Addition of 06-ba-03/0xc0 microcode (in intel-ucode/06-ba-02) at
      revision 0x410e;
    - Addition of 06-ba-02/0xc0 microcode (in intel-ucode/06-ba-03) at
      revision 0x410e;
    - Addition of 06-ba-03/0xc0 microcode at revision 0x410e;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xa4 up to 0xa6;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xf0 up to 0xf4;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xf0 up
      to 0xf4;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015e
      up to 0x1000161;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003302
      up to 0x4003303;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003302 up to 0x5003303;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002501
      up to 0x7002503;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000375
      up to 0xd000389;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3c up
      to 0x3e;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x20 up
      to 0x22;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb2
      up to 0xb8;
    - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x31 up
      to 0x32;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x40 up
      to 0x42;
    - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x16 up
      to 0x17;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x22 up to 0x2c (old pf 0x3);
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x22
      up to 0x2c (old pf 0x3);
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x421 up to 0x429;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x421 up to 0x429;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x421 up to 0x429;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x421
      up to 0x429;
    - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x24000023
      up to 0x24000024;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf0 up
      to 0xf4;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf0
      up to 0xf4;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf0
      up to 0xf4;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf0
      up to 0xf4;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xf0 up to 0xf4;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x54 up
      to 0x57;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x22 up to
      0x2c (old pf 0x3);
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x22 up to 0x2c (old pf 0x3);
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x22 up to
      0x2c (old pf 0x3).


author: Todd Vierling <todd.vierling@oracle.com> - 4:20230214-2.0.3
changelog:
  - update 06-55-04 to 0x2007006
  - update 06-55-06 to 0x4003604
  - update 06-55-07 to 0x5003604
  - update 06-6a-06 to 0xd0003a5
  - Resolves for Oracle hardware: {CVE-2022-40982} [Orabug: 35692741]


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20230516-1
changelog:
  - Update Intel CPU microcode to microcode-20230516 release (#2213125):
    - Addition of 06-be-00/0x01 (ADL-N A0) microcode at revision 0x10;
    - Addition of 06-9a-04/0x40 (AZB A0) microcode at revision 0x4;
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006e05 up
      to 0x2006f05;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xa6 up to 0xaa;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf0 up
      to 0xf2;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf0 up
      to 0xf2;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xf0 up
      to 0xf2;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xf0 up
      to 0xf2;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xf4 up to 0xf6;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xf0 up
      to 0xf2;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xf0 up
      to 0xf2;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xf0 up
      to 0xf2;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xf0 up
      to 0xf2;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xf4 up
      to 0xf8;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000161
      up to 0x1000171;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003303
      up to 0x4003501;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003303 up to 0x5003501;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002503
      up to 0x7002601;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000389
      up to 0xd000390;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000211
      up to 0x1000230;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb8
      up to 0xba;
    - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x32 up
      to 0x33;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x28 up
      to 0x2a;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x42 up
      to 0x44;
    - Update of 06-8f-04/0x10 microcode from revision 0x2c000170 up to
      0x2c0001d1;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
      0x2b000181 up to 0x2b000461;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b000181
      up to 0x2b000461;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c000170 up to
      0x2c0001d1;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b000181
      up to 0x2b000461;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b000181 up to 0x2b000461;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b000181 up to 0x2b000461;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x429 up to 0x42a;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x429 up to 0x42a;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x429 up to 0x42a;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x429
      up to 0x42a;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf4 up
      to 0xf6;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf4
      up to 0xf6;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf4
      up to 0xf6;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf4
      up to 0xf6;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xf4 up to 0xf6;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x57 up
      to 0x58;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x112 up
      to 0x113;
    - Update of 06-ba-02/0xc0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x410e up to 0x4112;
    - Update of 06-ba-03/0xc0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x410e up to 0x4112;
    - Update of 06-ba-02/0xc0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x410e up to 0x4112;
    - Update of 06-ba-03/0xc0 (RPL-U 2+8 Q0) microcode from revision 0x410e
      up to 0x4112.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20230808-1
changelog:
  - Update Intel CPU microcode to microcode-20230808 release, addresses
    CVE-2022-40982, CVE-2022-41804, CVE-2023-23908 (#2213125, #2223993, #2230678,
      - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006f05 up
      to 0x2007006;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xaa up to 0xac;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf2 up
      to 0xf4;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf2 up
      to 0xf4;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xf2 up
      to 0xf4;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xf2 up
      to 0xf4;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xf6 up to 0xf8;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xf2 up
      to 0xf4;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xf2 up
      to 0xf4;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xf2 up
      to 0xf4;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xf2 up
      to 0xf4;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xf8 up
      to 0xfa;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000171
      up to 0x1000181;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003501
      up to 0x4003604;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003501 up to 0x5003604;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002601
      up to 0x7002703;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000390
      up to 0xd0003a5;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xba
      up to 0xbc;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x2a up
      to 0x2c;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x44 up
      to 0x46;
    - Update of 06-8f-04/0x10 microcode from revision 0x2c0001d1 up to
      0x2c000271;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
      0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b000461
      up to 0x2b0004b1;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c0001d1 up to
      0x2c000271;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b000461
      up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b000461 up to 0x2b0004b1;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x2c up to 0x2e;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x2c up to 0x2e;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x2c up to 0x2e;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x2c up to 0x2e;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x2c up to 0x2e;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x2c
      up to 0x2e;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x2c up to 0x2e;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x2c up to 0x2e;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x42a up to 0x42c;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x42a up to 0x42c;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x42a up to 0x42c;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x42a
      up to 0x42c;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf6 up
      to 0xf8;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf6
      up to 0xf8;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf6
      up to 0xf8;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf6
      up to 0xf8;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xf6 up to 0xf8;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x58 up
      to 0x59;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x113 up
      to 0x119;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2c up to 0x2e;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2c up to 0x2e;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x2c up
      to 0x2e;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x2c up to 0x2e;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2c up to 0x2e;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2c up to 0x2e;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x2c up to 0x2e;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x2c up
      to 0x2e;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4112 up to 0x4119 (old pf 0xc0);
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4112 up to 0x4119 (old pf 0xc0);
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4112 up to 0x4119 (old pf 0xc0);
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4112
      up to 0x4119 (old pf 0xc0);
    - Update of 06-be-00/0x11 (ADL-N A0) microcode from revision 0x10 up
      to 0x11 (old pf 0x1).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20230808-2
changelog:
  - Add support for the new, more correct, variant of dracut's default
    $fw_dir path in dracut_99microcode_ctl-fw_dir_override_module_init.sh.


author: Todd Vierling <todd.vierling@oracle.com> - 4:20230808-2.0.1
changelog:
  - switch upstream to 8 Stream sources for simplicity
  - Resolves for all supported hardware: {CVE-2022-40982} [Orabug: 35692741]
  - don't bother calling dracut if virtualized [Orabug: 35710077]
  - ensure UEK also rebuilds initramfs [Orabug: 34280058]
  - add support for UEK7 kernels
  - enable early update for 06-4f-01
  - remove no longer appropriate caveats for 06-2d-07 and 06-55-04
  - enable early and late load on RHCK


author: Todd Vierling <todd.vierling@oracle.com> - 4:20231114-0.1
changelog:
  - update microcode to Intel 20231114 release
  - elide patches on top of Intel's release notes; ship them as-is


author: Ales Matej <amatej@redhat.com> - 3.4.0-1
changelog:
  - Update to 3.4.0
  - Fix: do not download metadata in remove command
  - Add reinstall command
  - Add "--setopt=tsflags=test" support
  - Add "--setopt=reposdir=<path>" and "--setopt=varsdir=<path1>,<path2>,..." support
  - Add "--config=<path_to_config_file>" support
  - Add "--disableplugin", "--enableplugin" support (RhBug:1781126)
  - Add "--noplugins" support
  - Add "--setopt=cachedir=<path_to_cache_directory>" support
  - Add "--installroot=<path_to_installroot_directory>" support
  - Add "--refresh" support
  - Support "install_weak_deps" conf option and "--setopt=install_weak_deps=0/1"
  - Respect reposdir from conf file
  - Respect "metadata_expire" conf file opton (RhBug:1771147)
  - [repolist] Print padding spaces only if output is terminal


author: Nicola Sella <nsella@redhat.com> - 3.4.0-3
changelog:
  - Patch: Add support for setting a platform module ID
  - Rename "update" command to "upgrade", "update" remain as compatibility alias


author: Pavla Kratochvilova <pkratoch@redhat.com> - 3.8.0-1
changelog:
  - Update to 3.8.0
  - Don't set default value of "assumeyes" to TRUE
  - Support for user confirmation and assumeyes, assumeno, defaultyes
  - Add commands: distro-sync, makecache
  - Add subcommands support
  - Add support for command aliases
  - Added alias "update" to "upgrade" command
  - Relicense to GPLv2+
  - Add support for setting allow_vendor_change
  - [download] Support for "--resolve", "--alldeps" and "--archlist=" arguments
  - [download] several optimizations
  - Support "--setopt=keepcache=0/1"
  - Extend "--setopt" to support repository options


author: Michal Hlavinka <mhlavink@redhat.com> 56-1
changelog:
  - Upgrade to 56 (#1479800)
  - fixes wait exit codes of co-processes when run in interactive mode (#1479320)


author: Michal Sekletar <msekleta@redhat.com> - 0.26-14
changelog:
  - start timer after the installation (#1278587)
  - make mlocate-updatedb.service of the type simple, systemd will then not wait for its completion (#1282232)


author: Javier Martinez Canillas <javierm@redhat.com> - 0.3.0-10
changelog:
  - Add mokutil code to consume data from /sys/firmware/efi/mok-variables/
    as well as attempting to consume numbered mok variables from efivarfs
    when mok-variables aren't present (pjones)
    Resolves: rhbz#1877343


author: Ilya Okomin <ilya.okomin@oracle.com> - 0.3.0-10.0.1
changelog:
  - Add more info to --sb-state: show when we're in SetupMode or
    with shim validation disabled [Orabug: 31887197]


author: Javier Martinez Canillas <javierm@redhat.com> - 0.3.0-10
changelog:
  - Add mokutil code to consume data from /sys/firmware/efi/mok-variables/
    as well as attempting to consume numbered mok variables from efivarfs
    when mok-variables aren't present (pjones)
    Resolves: rhbz#1907418


author: James Paul Turner <jamesturner246@fedoraproject.org> - 3.1.6-1
changelog:
  - Update to MPFR version 3.1.6
  - Use autosetup specfile macro for applying patches (patches 1 and 2 applied)
  - Removed iconv calls, as they were breaking .info files, which are now unicode
    resolves #1299649
  - Other minor cleanups
  - BuildRequire gcc per https://fedoraproject.org/wiki/Packaging:C_and_C%2B%2B#BuildRequires_and_Requires


author: Pavel Cahyna <pcahyna@redhat.com> - 4.0.18-15
changelog:
  - Add dependency on glibc-gconv-extra
    mtools need codepage 850, which was split from glibc into a subpackage.
    (Fedora bug #2021637, RHEL bug #2073842)


author: Miroslav Lichvar <mlichvar@redhat.com> 6.1-5.20180224
changelog:
  - fix crash in parsing of terminfo use capability (CVE-2018-10754)
  - add gcc-c++ to build requirements


author: Miroslav Lichvar <mlichvar@redhat.com> 6.1-8.20180224
changelog:
  - fix buffer overflow in terminfo entry hashtable (CVE-2019-17594)
  - handle missing character after backslash in terminfo entry (CVE-2019-17595)


author: Miroslav Lichvar <mlichvar@redhat.com> 6.0-14.20170916
changelog:
  - update to 6.0-20170916 (CVE-2017-13728 CVE-2017-13729 CVE-2017-13730
    CVE-2017-13731 CVE-2017-13732 CVE-2017-13733 CVE-2017-13734)


author: Josef Ridky <jridky@redhat.com> - 1:5.8-2
changelog:
  - fix default configuration file (#1589480 and #1594147)
  - modify permissions for /var/log files (#1601060)


author: Josef Ridky <jridky@redhat.com> - 1:5.8-12.1
changelog:
  - fix double free or corruption error caused by freeing security context (#1802055)
  - remove deprecated CFLAG


author: Josef Ridky <jridky@redhat.com> - 1:5.8-14
changelog:
  - fix double free or corruption error when freeing security context (#1809077)
  - remove deprecated CFLAG


author: Josef Ridky <jridky@redhat.com> - 1:5.8-15
changelog:
  - proxied OIDs unspecified in proxy statement in snmpd.conf (#1658134)
  - UCD-SNMP-MIB::dskTable doesn't update dynamically (#1658185)
  - expand SNMPCONFPATH variable (#1660146)
  - remove file with Apple license (#1690936)
  - log meningful message on duplicate IP address (#1692286)
  - memory reporting adjustment (#1695497 and #1766521)
  - fix typos in man page (#1700262)
  - speedup ipAddressTable loading(#1700391)
  - fix memory leak when shut down librpm (#1763008)
  - services starts after network-online.target (#1775304)
  - add missing part of memory leak patch (#1829860)
  - add support for AES192 and AES256 (#1846252)


author: Josef Ridky <jridky@redhat.com> - 1:5.8-19
changelog:
  - revert permission of config files to 600 (#1601060)
  - fix error message when the address specified by clientaddr option
    is wrong or cannot be bound (#1877375)
  - log error with /proc/net/if_inet6 only when IPv6 is enabled (#1824367)
  - fix issue with quoting empty passphrase (#1817225)


author: Josef Ridky <jridky@redhat.com> - 1:5.8-21
changelog:
  - prevent parsing IP address twice (#1768908)
  - add support for digests detected from ECC certs (#1919714)
  - fix broken ErrorMsg at ucd-snmp (#1933150)
  - add support for intermediate certs (#1914656)
  - fix crash of certs with longer extension (#1908718)


author: Josef Ridky <jridky@redhat.com> - 1:5.8-27
changelog:
  - fix memory leak due of proc file creating (#2105957)
  - fix CVE-2022-44792 and CVE-2022-44793 (#2141901) and (#2141905)
  - fix memory leak when ipv6 disable set to 1 (#2151537)
  - fix proxy timeout issue (#2160723)


author: Michal Ruprich <mruprich@redhat.com> - 2.0-0.50.20160912git
changelog:
  - Resolves: 1557470 - netstat -i cut's interface names
  - Resolves: 1566084 - netstat -agn only shows 10 character interface name for IPv4 addressing


author: Michal Ruprich <michalruprich@gmail.com> - 2.0-0.52.20160912git
changelog:
  - Resolves: #1711119 - netstat says "packetes" instead of "packets"
  - Resolves: #1670355 - Exit code on wrong parameter is zero for many net-tools binaries
  - Resolves: #1807989 - The output of `route -A inet6` does not display properly when the 'Use' column output is over 6 digits


author: Nikos Mavrogiannopoulos <nmav@redhat.com> - 3.3-5
changelog:
  - Removed executables from the library to allow parallel installation
    of x86-64 and x86 packages. The executables had testing purpose, and
    may be re-introduced in a separate package if needed.


author: Tomáš Mráz <tmraz@redhat.com> - 3.4-4
changelog:
  - Cover the gaps in annotation coverage for assembler sources
  - Add .hmac checksums for FIPS mode integrity checking


author: Daiki Ueno <dueno@redhat.com> - 3.4.1-5
changelog:
  - Backport powerpc64 optimization patches from upstream (#1855228)
    Patch from Christopher M. Riedl.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.52.20-4
changelog:
  - Python 2 binary package renamed to python2-newt
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.20-8
changelog:
  - rename newt-python3 subpackage to python3-newt
  - build python3 subpackage unconditionally
  - don't use unversioned python_sitearch macro
  - drop static subpackage
  - use macro for ldconfig scriptlets
  - add gcc to build requirements
  - fix description of python2-newt


author: Miroslav Lichvar <mlichvar@redhat.com> - 0.52.20-10
changelog:
  - move snack provides to python3-newt subpackage (#1640153)
  - fix radio button selection check in snack (#1714517)


author: Steve Dickson <steved@redhat.com> 0.3.5-2
changelog:
  - nfs4_getfacl: Add new option -c/--omit-header (bz 1698281)
  - nfs4_setfacl: Skip comment field while reading ACE(s) (bz 1687299)


author: Phil Sutter <psutter@redhat.com> - 1:0.9.0-9
changelog:
  - Allow variables in jump statement
  - Make example configs readable only by root
  - Document nft list parameters
  - Document vmap statement
  - Install netdev-ingress.nft sample config in the right spot
  - Backport upstream fixes since last release


author: Phil Sutter - 1:0.9.0-4
changelog:
  - Add fixes for covscan report
  - Fix for ECN keyword in LHS of relational
  - Update meta pkt_type value description
  - Fix for segfault with JSON output if xt expression is present
  - Add missing nft suffix to files included from /etc/sysconfig/nftables.conf
  - Use native JSON API in nft monitor


author: Phil Sutter <psutter@redhat.com> [0.9.3-6.el8]
changelog:
  - monitor: Do not decompose non-anonymous sets (Phil Sutter) [1774742]
  - main: restore --debug (Phil Sutter) [1778883]
  - main: enforce options before commands (Phil Sutter) [1778883]


author: Phil Sutter <psutter@redhat.com> [0.9.3-8.el8]
changelog:
  - cache: Fix for doubled output after reset command (Phil Sutter) [1790793]
  - tests: shell: Search diff tool once and for all (Phil Sutter) [1790793]
  - xfrm: spi is big-endian (Phil Sutter) [1790963]


author: Phil Sutter <psutter@redhat.com> [0.9.3-9.el8]
changelog:
  - netlink: Avoid potential NULL-pointer deref in netlink_gen_payload_stmt() (Phil Sutter) [1793030]
  - netlink: Fix leaks in netlink_parse_cmp() (Phil Sutter) [1793030]
  - netlink: Fix leak in unterminated string deserializer (Phil Sutter) [1793030]


author: Phil Sutter <psutter@redhat.com> [0.9.3-10.el8]
changelog:
  - scanner: Extend asteriskstring definition (Phil Sutter) [1763652]
  - doc: nft.8: Mention wildcard interface matching (Phil Sutter) [1763652]
  - tests: py: Support testing host binaries (Phil Sutter) [1754047]
  - tests: monitor: Support testing host's nft binary (Phil Sutter) [1754047]
  - tests: monitor: Support running individual test cases (Phil Sutter) [1754047]
  - tests: json_echo: Support testing host binaries (Phil Sutter) [1754047]
  - tests: json_echo: Fix for Python3 (Phil Sutter) [1754047]


author: Phil Sutter <psutter@redhat.com> [0.9.3-11.el8]
changelog:
  - Package requires libnftnl-1.1.5-3 (Phil Sutter) [1795224]
  - src: Add support for concatenated set ranges (Phil Sutter) [1795224]
  - src: Add support for NFTNL_SET_DESC_CONCAT (Phil Sutter) [1795224]
  - include: resync nf_tables.h cache copy (Phil Sutter) [1795224]
  - parser: add a helper for concat expression handling (Phil Sutter) [1795224]


author: Phil Sutter <psutter@redhat.com> [0.9.3-12.el8.1]
changelog:
  - src: Set NFT_SET_CONCAT flag for sets with concatenated ranges (Phil Sutter) [1854532]
  - include: Resync nf_tables.h cache copy (Phil Sutter) [1854532]


author: Phil Sutter <psutter@redhat.com> [0.9.3-14.el8]
changelog:
  - JSON: Improve performance of json_events_cb() (Phil Sutter) [1835300]
  - doc: Document notrack statement (Phil Sutter) [1841292]


author: Phil Sutter <psutter@redhat.com> [0.9.3-15.el8]
changelog:
  - segtree: Fix get element command with prefixes (Phil Sutter) [1832235]
  - tests: 0034get_element_0: do not discard stderr (Phil Sutter) [1832235]
  - segtree: Merge get_set_interval_find() and get_set_interval_end() (Phil Sutter) [1832235]
  - segtree: Use expr_clone in get_set_interval_*() (Phil Sutter) [1832235]
  - segtree: Fix missing expires value in prefixes (Phil Sutter) [1832235]


author: Phil Sutter <psutter@redhat.com> [0.9.3-16.el8]
changelog:
  - src: Set NFT_SET_CONCAT flag for sets with concatenated ranges (Phil Sutter) [1820684]
  - include: Resync nf_tables.h cache copy (Phil Sutter) [1820684]


author: Phil Sutter <psutter@redhat.com> [0.9.3-17.el8]
changelog:
  - json: don't leave dangling pointers on hlist (Phil Sutter) [1900565]
  - json: Fix seqnum_to_json() functionality (Phil Sutter) [1900565]
  - json: echo: Speedup seqnum_to_json() (Phil Sutter) [1900565]
  - proto: Fix ARP header field ordering (Phil Sutter) [1896334]
  - proto: add sctp crc32 checksum fixup (Phil Sutter) [1895804]
  - mergesort: unbreak listing with binops (Phil Sutter) [1891790]
  - evaluate: missing datatype definition in implicit_set_declaration() (Phil Sutter) [1877022]
  - evaluate: Perform set evaluation on implicitly declared (anonymous) sets (Phil Sutter) [1877022]
  - src: store expr, not dtype to track data in sets (Phil Sutter) [1877022]


author: Phil Sutter <psutter@redhat.com> [0.9.3-19.el8]
changelog:
  - evaluate: Reject quoted strings containing only wildcard (Phil Sutter) [1818117]
  - tests: monitor: use correct $nft value in EXIT trap (Phil Sutter) [1919203]
  - monitor: Fix for use after free when printing map elements (Phil Sutter) [1919203]
  - tests: Disable tests known to fail on RHEL8 (Phil Sutter) [1919203]


author: Phil Sutter <psutter@redhat.com> [0.9.3-20.el8]
changelog:
  - src: Optimize prefix matches on byte-boundaries (Phil Sutter) [1934926]
  - src: Support odd-sized payload matches (Phil Sutter) [1934926]
  - spec: Add an rpminspect.yaml file to steer rpminspect (Phil Sutter) [1962184]
  - spec: Explicitly state dist string in Release tag (Phil Sutter) [1962184]


author: Phil Sutter <psutter@redhat.com> [0.9.3-21.el8]
changelog:
  - tests: shell: Fix bogus testsuite failure with 100Hz (Phil Sutter) [1919203]
  - doc: nft.8: Extend monitor description by trace (Phil Sutter) [1820365]
  - include: missing sctp_chunk.h in Makefile.am (Phil Sutter) [1979334]
  - exthdr: Implement SCTP Chunk matching (Phil Sutter) [1979334]
  - scanner: sctp: Move to own scope (Phil Sutter) [1979334]
  - scanner: introduce start condition stack (Phil Sutter) [1979334]
  - json: Simplify non-tcpopt exthdr printing a bit (Phil Sutter) [1979334]
  - json: tcp: add raw tcp option match support (Phil Sutter) [1979334]
  - tcp: add raw tcp option match support (Phil Sutter) [1979334]
  - tcpopt: allow to check for presence of any tcp option (Phil Sutter) [1979334]
  - tcpopt: split tcpopt_hdr_fields into per-option enum (Phil Sutter) [1979334]
  - tcpopt: rename noop to nop (Phil Sutter) [1979334]
  - tcpopts: clean up parser -> tcpopt.c plumbing (Phil Sutter) [1979334]
  - parser: merge sack-perm/sack-permitted and maxseg/mss (Phil Sutter) [1979334]
  - tests/py: Move tcpopt.t to any/ directory (Phil Sutter) [1979334]


author: Phil Sutter <psutter@redhat.com> [0.9.3-22.el8]
changelog:
  - json: Drop pointless assignment in exthdr_expr_json() (Phil Sutter) [1999059]
  - parser_json: Fix for memleak in tcp option error path (Phil Sutter) [1999059]
  - parser_bison: Fix for implicit declaration of isalnum (Phil Sutter) [1999059]
  - parser_json: Fix error reporting for invalid syntax (Phil Sutter) [1994141]


author: Phil Sutter <psutter@redhat.com> [0.9.3-23.el8]
changelog:
  - tests: cover baecd1cf2685 ("segtree: Fix segfault when restoring a huge interval set") (Phil Sutter) [1908127]
  - segtree: Fix segfault when restoring a huge interval set (Phil Sutter) [1908127]


author: Phil Sutter <psutter@redhat.com> [0.9.3-24.el8]
changelog:
  - tests: shell: better parameters for the interval stack overflow test (Phil Sutter) [1908127]
  - tests: shell: $NFT needs to be invoked unquoted (Phil Sutter) [1908127]


author: Phil Sutter <psutter@redhat.com> [0.9.3-25.el8]
changelog:
  - mnl: do not build nftnl_set element list (Phil Sutter) [2047821]
  - tests: py: add dnat to port without defining destination address (Phil Sutter) [2030773]
  - evaluate: fix inet nat with no layer 3 info (Phil Sutter) [2030773]
  - evaluate: attempt to set_eval flag if dynamic updates requested (Phil Sutter) [2039594]
  - src: support for restoring element counters (Phil Sutter) [2039594]
  - netlink: remove unused parameter from netlink_gen_stmt_stateful() (Phil Sutter) [2039594]


author: Phil Sutter <psutter@redhat.com> [0.9.3-26.el8]
changelog:
  - libnftables: call nft_cmd_expand() only with CMD_ADD (Phil Sutter) [2073287]
  - src: add CMD_OBJ_SETELEMS (Phil Sutter) [2073287]
  - src: rename CMD_OBJ_SETELEM to CMD_OBJ_ELEMENTS (Phil Sutter) [2073287]
  - rule: fix element cache update in __do_add_setelems() (Phil Sutter) [2073287]
  - rule: memleak in __do_add_setelems() (Phil Sutter) [2073287]
  - tests: shell: auto-removal of chain hook on netns removal (Phil Sutter) [2070924]
  - mnl: do not use expr->identifier to fetch device name (Phil Sutter) [2070924]


author: Phil Sutter <psutter@redhat.com> [1.0.4-1.el8]
changelog:
  - Synchronize patch level with nftables-1.0.4-10.el9 (Phil Sutter) [2211076]
  - Rebase onto version 1.0.4 (Phil Sutter) [2211076]


author: Phil Sutter <psutter@redhat.com> [1.0.4-2.el8]
changelog:
  - Add expected error records for testsuite runs (Phil Sutter) [2211076]
  - tests: monitor: Summarize failures per test case (Phil Sutter) [2211076]


author: Phil Sutter <psutter@redhat.com> [1.0.4-3.el8]
changelog:
  - spec: Rename variables to avoid a clash (Phil Sutter) [INTERNAL]
  - rule: check address family in set collapse (Phil Sutter) [RHEL-5160]


author: Dridi Boukelmoune <dridi@fedoraproject.org>- 2.1-1
changelog:
  - Update to 2.1
  - Upstream moved to github
  - Upstream switched to autotools
  - Disable --as-needed until it's patched upstream
  - Drop defunct 32bit x86 support
  - Add ppc64le support
  - Run the new test suite


author: luto@kernel.org - 1.9-1
changelog:
  - Update to 1.9
  - Certain fabric functionality may not work yet due to missing dracut
    support and missing hostid and hostnqn configuration.


author: Junxiao Bi <junxiao.bi@oracle.com> - 1.8.6-6.el6
changelog:
  - vendor: rhel: remove redhat-lsb* dependency (Junxiao Bi)
  - scandisk: remove unnecessary scansysfs op (Junxiao Bi)


author: Junxiao Bi <junxiao.bi@oracle.com> - 1.8.6-8.el6
changelog:
  - BUILDINFO: commit=f0e130273b7eed12385e1d0aa7704b414bceeff0
  - vendor: rhel5: fix build failure (Junxiao Bi)
  - tunefs.ocfs2: fix double free bug (Junxiao Bi)
  - fsck.ocfs2: the members of 'o2fsck_state' need to be freed at the end of main() (Jun Piao)
  - fsck.ocfs2: fix the mistake of clearing valid flag in o2fsck_check_blocks() (Jun Piao)
  - mkfs.ocfs2: disable append-dio feature by default (Junxiao Bi)
  - fsck.ocfs2: support append direct io incompat feature (Joseph Qi)
  - tunefs.ocfs2: support append direct io incompat feature (Joseph Qi)
  - mkfs.ocfs2: support append direct io incompat feature (Joseph Qi)
  - mkfs.ocfs2: clean up deadcode in is_cluster_info_valid() (Jun Piao)
  - fsck.ocfs2: return error if o2fsck_check_journals fails (Joseph Qi)
  - ocfs2: fix cluster unlocked if journal is replayed (Joseph Qi)
  - fsck.ocfs2: close ost_fs in case of check superblock fails (Joseph Qi)
  - mkfs.ocfs2: fix a potential segment fault in main() (Jun Piao)
  - fsck.ocfs2: clean up useless assignment in dup_insert() (piaojun)
  - o2info: clean up useless branch in o2info_append_task() (piaojun)
  - tunefs.ocfs2: fix the parameter misuse of tunefs_dlm_lock (Weiwei Wang)
  - debugfs.ocfs2: encode 'M' lockname with generation only for sysfile (piaojun)
  - mkfs.ocfs2: fix memory leak problems in main() (piaojun)
  - tunefs.ocfs2: fix memory leak problems in tunefs_journal_check() and parse_options() (piaojun)
  - o2image: fix a memory leak problem in ocfs2_image_free_bitmap() (piaojun)
  - debugfs.ocfs2: fix NULL pointer dereference risk in dump_dir_entry (Joseph Qi)
  - o2image: clean up unused variable 'install_flag' in o2image_initialize() (piaojun)
  - libocfs2: close fd if read fails in create_generation (Joseph Qi)
  - o2image: Free 'filepath' before return in prompt_image_creation() (Jun Piao)
  - libocfs2: fix risk of using uninitialized variables (Joseph Qi)
  - mkfs.ocfs2: fix command line segfault (Valentin Vidic)
  - debugfs.ocfs2: fix command line segfault (Valentin Vidic)
  - Update udev rule for newer kernels (Valentin Vidic)
  - ocfs2-tools: add support for vd devices (Valentin Vidić)
  - fsck.ocfs2: Free 'ci' in each cycle of for loop in check_journal_walk (Jun Piao)


author: Junxiao Bi <junxiao.bi@oracle.com> - 1.8.6-9.el6
changelog:
  - BUILDINFO: commit=8b8e9d3b017f6e9bb23bd137878669831eec0f4d
  - o2cb.service: drop unknown lvalue ExecRestart (Junxiao Bi)


author: Ashish Samant <ashish.samant@oracle.com> - 1.8.6-11.el8
changelog:
  - tunefs.ocfs2: read journal superblock even for online operations (Ashish
    Samant)  [Orabug: 28804934]


author: Gautham Ananthakrishna <gautham.ananthakrishna@oracle.com> - 1.8.6-15.el8
changelog:
  - fsck.ocfs2: Avoid taking all available physical pages for cache (Gautham
    Ananthakrishna)  [Orabug: 31069094]


author: Honggang Li <honli@redhat.com> - 10.3.1.0-9
changelog:
  - Rebase to latest upstream branch v10_3_1 as required.
  - Clean up change log.
  - Apply Epoch tag.
  - Resolves: bz1382796


author: Lukas Lemes <lukas.lemes@oracle.com> - 10.10.0.0.445-1.0.1
changelog:
  - Add oracle-linux.patch
  - Add modify_to_suitable_os_release.patch
  - Added patch to properly identify oracle as redhat (Alex Burmashev)


author: Honggang Li <honli@redhat.com> - 10.3.1.0-8
changelog:
  - Rebase to upstream branch v10_3_1 as required.
  - Clean up change log.
  - Apply Epoch tag.
  - Resolves: bz1257452, bz1382792


author: Lukas Lemes <lukas.lemes@oracle.com> - 10.10.0.0.444-2.0.1
changelog:
  - Support os_vendor checking for OL
  - Add modify_to_suitable_os_release.patch
  - Added patch to identify OL as redhat vendor (Alex Burmashev)


author: Than Ngo <than@redhat.com> - 3.10.0-3
changelog:
  - Resolves: #1657683, can't establish libica token in FIPS mode
  - Resolves: #1652856, EP11 token fails when using Strict-Session mode or VHSM-Mode


author: Than Ngo <than@redhat.com> - 3.11.0-3
changelog:
  - Resolves: #1667941, 3des tests failures due to FIPS incompatible test scenarios
  - Resolves: #1651731, ep11 token: enhanced IBM z14 functions
  - Resolves: #1651732, ep11 token: support m_*Single functions from ep11 lib
  - Resolves: #1525407, use CPACF hashes in ep11 token
  - Resolves: #1651238, rebase to 3.11.0
  - Resolves: #1682530, gating


author: Than Ngo <than@redhat.com> - 3.14.0-1
changelog:
  - Resolves: #1723863 - ep11 token: Enhanced Support
  - Resolves: #1780285 - ep11 token: Support for new IBM Z hardware z15
  - Resolves: #1780293 - rebase to 3.14.0
  - Resolves: #1800549 - key management tool: list keys function
   -Resolves: #1800555 - key management tool: random key generation function


author: Than Ngo <than@redhat.com> - 3.15.0-1
changelog:
  - Resolves: #1847433, rebase to 3.15.0 
  - Resolves: #1851105, PKCS #11 3.0 - baseline provider support
  - Resolves: #1851108, openCryptoki ep11 token: enhanced functionality
  - Resolves: #1851109, openCryptoki key management tool: key deletion function


author: Than Ngo <than@redhat.com> - 3.15.1-1
changelog:
  - Related: #1847433
    upstream fixes:
      - Free generated key in all error cases
      - CCA: Zeroize key buffer to avoid CCA 8/32 error
      - Do not delete the map-btree entry if destroying an object is not allowed
      - Remove now unused header timeb.h
      - TESTCASES: Use FIPS conforming keys for 3DES CBC-MAC test vectors
      - Fix buffer overrun in C_CopyObject
      - TPM: Fix double free in openssl_gen_key


author: Than Ngo <than@redhat.com> - 3.15.1-3
changelog:
  - Resolves: #1902022
     Fix compiling with c++
     Added error message handling for p11sak remove-key command


author: Than Ngo <than@redhat.com> - 3.15.1-7
changelog:
  - Resolves: #1995919, pkcstok_migrate leaves options with multiple strings in opencryptoki.conf options without double-quotes


author: Than Ngo <than@redhat.com> - 3.16.0-1
changelog:
  - Resolves: #1919223, rebase to 3.16.0
  - Resolves: #1922195, Event Notification Support
  - Resolves: #1959936, Soft token does not check if an EC key is valid
  - Resolves: #1851104, import and export of secure key objects
  - Resolves: #1851106, openCryptoki ep11 token: protected key support
  - Resolves: #1851107, openCryptoki ep11 token: support attribute bound keys


author: Than Ngo <than@redhat.com> - 3.16.0-5
changelog:
  - Resolves: #1987256, pkcstok_migrate leaves options with multiple strings in opencryptoki.conf options without double-quotes


author: Than Ngo <than@redhat.com> - 3.18.0-1
changelog:
  - Resolves: #2043845, rebase to 3.18.0
  - Resolves: #2043854, add crypto counters
  - Resolves: #2043855, support crypto profiles


author: Than Ngo <than@redhat.com> - 3.18.0-3
changelog:
  - Related: #2043854, do not touch opencryptoki.conf if it is in place already and even if it is unchanged
  - Resolves: #2112785, EP11: Fix C_GetMechanismList returning CKR_BUFFER_TOO_SMALL


author: Than Ngo <than@redhat.com> - 3.18.0-4
changelog:
  - Resolves: #2129059, C_GenerateKeyPair() fails after generating > 500 RSA keys with CEX7 crypto cards


author: Than Ngo <than@redhat.com> - 3.19.0-1
changelog:
  - Resolves: #2126612, opencryptoki fails after generating > 500 RSA keys
  - Resolves: #2110315, rebase to 3.19.0
  - Resolves: #2110990, openCryptoki key generation with expected MKVP only on CCA and EP11 tokens
  - Resolves: #2110477, openCryptoki ep11 token: master key consistency
  - Resolves: #1984871, openCryptoki ep11 token: vendor specific key derivation


author: Than Ngo <than@redhat.com> - 3.21.0-1
changelog:
  - Resolves: #1984865, ep11 and cca: support concurrent HSM master key changes
  - Resolves: #2110500, ep11 token: PKCS #11 3.0 - support AES_XTS 
  - Resolves: #2111011, cca token: protected key support
  - Resolves: #2159697, update to 3.21.0
  - Resolves: #2159740, pkcsslotd hardening
  - Resolves: #2159741, p11sak support Dilithium and Kyber keys
  - Resolves: #2159742, ica and soft tokens: PKCS #11 3.0 - support AES_XTS


author: Than Ngo <than@redhat.com> - 3.21.0-2
changelog:
  - add missing /var/lib/opencryptoki/HSM_MK_CHANGE
  - disable unsupported sandbox options and add /run to ReadWritePaths to exclude
    /run directory from being made read-only on rhel8
  Related: #2159697


author: Than Ngo <than@redhat.com> - 3.21.0-3
changelog:
  - pkcsstats: Fix handling of user name
  - p11sak: Fix user confirmation prompt behavior when stdin is closed
  Related: #2159697


author: Than Ngo <than@redhat.com> - 3.21.0-7
changelog:
  - Resolves: #2222595, p11sak tool: slot option does not accept argument 0 for slot index 0
  - Resolves: #2222594, p11sak fails as soon as there reside non-key objects


author: Jitka Plesnikova <jplesnik@redhat.com> - 2.4.46-2
changelog:
  - Perl 5.28 rebuild
  - MozNSS Compat. Layer: Fix typos, and spelling in the README file header (#1564161)


author: Matus Honek <mhonek@redhat.com> - 2.4.46-3
changelog:
  - MozNSS Compat. Layer: Make log messages more clear (#1598103)
  - MozNSS Compat. Layer: Fix memleaks reported by valgrind (#1595203)


author: Matus Honek <mhonek@redhat.com> - 2.4.46-6
changelog:
  - Build with LDAP_USE_NON_BLOCKING_TLS (#1594928)
  - Remove unused leftover MozNSS Compat. Layer references (cont.) (#1557967)


author: Jakub Jelen <jjelen@redhat.com> - 0.17.0-10
changelog:
  - Install the PKCS#11 modules also to the new NSS DB
  - Drop the pkcs11-switch as the coolkey is gone


author: Jakub Jelen <jjelen@redhat.com> - 0.18.0-3
changelog:
  - Do not add pkcs11 module to NSS after installation
    (NSS is loading p11-kit modules by default)
  - Remove pkcs11-switch since there is nothing to switch to


author: Jakub Jelen <jjelen@redhat.com> - 0.19.0-1
changelog:
  - New upstream release fixing various CVE-2018-16418 - 16421, 16423 - 16427
  - Add support for RSA-PSS signatures


author: Jakub Jelen <jjelen@redhat.com> - 0.19.0-2
changelog:
  - Avoid mismatching coolkey cards for muscle ones (#1588722)
  - Implement legacy CAC1 driver (#1638052)
  - Disable pinpad
  - Fixup verification after RSA-PSS implementation


author: Jakub Jelen <jjelen@redhat.com> - 0.19.0-3
changelog:
  - Unbreak the RSA-PSS mechanisms (#1595626)
  - Unbreak the signing using hashed mechanisms in CardOS and others (#1644338)


author: Jakub Jelen <jjelen@redhat.com> - 0.19.0-4
changelog:
  - Unbreak the Dual CAC cards in PIV driver (#1651748)
  - Fix few more corner cases for handling different types of padding (#1595626)
  - Unbreak signature verification in pkcs11-tool (#1651748)


author: Jakub Jelen <jjelen@redhat.com> - 0.19.0-6
changelog:
  - Add support for Gemalto IDPrime smart cards (#1657970)
  - Fix 2k RSA key operations with Coolkey (#1766712)


author: Jakub Jelen <jjelen@redhat.com> - 0.20.0-3
changelog:
  - Support PIN change for HID Alt tokens (#1830901)
  - Fix CVE-2020-26570, CVE-2020-26571 and CVE-2020-26572
  - Fix right padding of token labels of some cards (#1877973)


author: Jakub Jelen <jjelen@redhat.com> - 0.20.0-5
changelog:
  - Avoid potential crash because of missing list terminator (#2196234)
  - Fix CVE-2023-2977: potential buffer overrun in pkcs15 cardos_have_verifyrc_package (#2211093)
  - Backport upstream changes regarding to reader removal (#2097048)


author: Jakub Jelen <jjelen@redhat.com> - 0.20.0-7
changelog:
  - Fix file caching with different offsets (RHEL-4077)
  - Fix CVE-2023-40660: Potential PIN bypass
  - Fix CVE-2023-40661: Dynamic analyzers reports in pkcs15init
  - Fix CVE-2023-5992: Marvin: Side-channel leaks while stripping encryption PKCS#1.5 padding


author: Jakub Jelen <jjelen@redhat.com> - 7.7p1-1 + 0.10.3-4
changelog:
  - New upstream release (#1563223)
  - Add support for ECDSA keys in PKCS#11 (#1354510)
  - Add support for PKCS#11 URIs


author: Jakub Jelen <jjelen@redhat.com> - 7.7p1-6 + 0.10.3-4
changelog:
  - Fix listing of kex algoritms in FIPS mode
  - Allow aes-gcm cipher modes in FIPS mode
  - Coverity fixes


author: Jakub Jelen <jjelen@redhat.com> - 7.8p1-2 + 0.10.3-5
changelog:
  - New upstream release fixing CVE 2018-15473
  - Remove unused patches
  - Remove reference to unused enviornment variable SSH_USE_STRONG_RNG
  - Address coverity issues
  - Unbreak scp between two IPv6 hosts (#1620333)
  - Unbreak GSSAPI key exchange (#1624323)
  - Unbreak rekeying with GSSAPI key exchange (#1624344)


author: Jakub Jelen <jjelen@redhat.com> - 7.8p1-3 + 0.10.3-5
changelog:
  - Disable OpenSSH hardening flags and use the ones provided by system (#1630615)
  - Ignore unknown parts of PKCS#11 URI (#1631478)
  - Do not fail with GSSAPI enabled in match blocks (#1580017)
  - Fix the segfaulting cavs test (#1629692)


author: Jakub Jelen <jjelen@redhat.com> - 7.8p1-4 + 0.10.3-5
changelog:
  - Unbreak PKCS#11 URI tests (#1648262)
  - Allow to disable RSA signatures with SHA1 (#1648898)
  - Dump missing GSS options from client configuration (#1649505)
  - Minor fixes from Fedora related to GSSAPI and keberos
  - Follow the system-wide PATH settings


author: Jakub Jelen <jjelen@redhat.com> - 8.0p1-1 + 0.10.3-7
changelog:
  - New upstream release (#1691045)
  - Remove support for unused VendorPatchLevel configuration option
  - Fix kerberos cleanup procedures (#1683295)
  - Do not negotiate arbitrary primes with DH GEX in FIPS (#1685096)
  - Several GSSAPI key exchange improvements and sync with Debian
  - Allow to use labels in PKCS#11 URIs even if they do not match on private key (#1671262)
  - Do not fall back to sshd_net_t SELinux context (#1678695)
  - Use FIPS compliant high-level signature OpenSSL API and KDF
  - Mention crypto-policies in manual pages
  - Do not fail if non-FIPS approved algorithm is enabled in FIPS
  - Generate the PEM files in new PKCS#8 format without the need of MD5 (#1712436)


author: Jakub Jelen <jjelen@redhat.com> - 8.0p1-2 + 0.10.3-7
changelog:
  - Allow specifying a pin-value in PKCS #11 URI in ssh-add (#1639698)
  - Whitelist another syscall variant for s390x cryptographic module (ibmca engine) (#1714915)


author: Jakub Jelen <jjelen@redhat.com> - 8.0p1-3 + 0.10.3-7
changelog:
  - Fix typos in manual pages (#1668325)
  - Use the upstream support for PKCS#8 PEM files alongside with the legacy PEM files (#1712436)
  - Unbreak ssh-keygen -A in FIPS mode (#1732424)
  - Add missing RSA certificate types to offered hostkey types in FIPS mode (#1732449)


author: Jakub Jelen <jjelen@redhat.com> - 8.0p1-5 + 0.10.3-7
changelog:
  - Do not print "no slots" warning by default (#1744220)
  - Unbreak connecting using gssapi through proxy commands (#1749862)
  - Document in manual pages that CASignatureAlgorithms are handled by crypto policies (#1790604)
  - Use SHA2-based signature algorithms by default for signing certificates (#1790610)
  - Prevent simple ProxyJump loops in configuration files (#1804099)
  - Teach ssh-keyscan to use SHA2 RSA variants (#1744108)
  - Do not fail hard if getrandom() is not available and no SSH_USE_STRONG_RNG is specified (#1812120)
  - Improve wording of crypto policies references in manual pages (#1812854)
  - Do not break X11 forwarding if IPv6 is disabled (#1662189)
  - Enable SHA2-based GSSAPI key exchange algorithms by default (#1816226)
  - Mark RDomain server configuration option unsupported in RHEL (#1807686)
  - Clarify crypto policies defaults in manual pages (#1724195)
  - Mention RSA SHA2 variants in ssh-keygen manual page (#1665900)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.0p1-7 + 0.10.3-7
changelog:
  - SFTP sort upon the modification time (#1909988)
  - ssh-keygen printing fingerprint issue with Windows keys (#1901518)
  - PIN is lost when iterating over tokens when adding pkcs11 keys to ssh-agent (#1843372)
  - ssh-agent segfaults during ssh-add -s pkcs11 (#1868996)
  - ssh-copy-id could not resolve ipv6 address ends with colon (#1933517)
  - sshd provides PAM an incorrect error code (#1879503)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.0p1-9
changelog:
  - CVE-2020-14145 openssh: Observable Discrepancy leading to an information
    leak in the algorithm negotiation (#1882252)
  - Hostbased ssh authentication fails if session ID contains a '/' (#1944125)


author: Zoltan Fridrich <zfridric@redhat.com> - 8.0p1-14
changelog:
  - Upstream: add a local implementation of BSD realpath() for sftp-server (#2064249)
  - Change product name from Fedora to RHEL in openssh-7.8p1-UsePAM-warning.patch (#1953807)
  - Include caveat for crypto-policy in sshd manpage (#2044354)
  - Change log level of FIPS specific log message to verbose (#2050511)
  - Clarify force_file_perms (-m) documentation in sftp-server manpage (#1862504)
  - Minimize the use of SHA1 as a proof of possession for RSA key (#2093897)


author: Dmitry Belyavskiy - 8.0p1-17
changelog:
  - Fix parsing of IPv6 IPs in sftp client (#2151334)
  - Avoid ssh banner one-byte overflow (#2138344)
  - Avoid crash of sshd when Include folder does not exist (#2133087)


author: Alan Steinberg <alan.steinberg@oracle.com> - 8.0p1-19.2
changelog:
  - Forbid shell metasymbols in username/hostname
    Resolves: CVE-2023-51385
  - Fix Terrapin attack
    Resolves: CVE-2023-48795


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1-1
changelog:
  - update to the final 1.1.1 version
  - for consistent support of security policies we build
    RC4 support in TLS (not default) and allow SHA1 in SECLEVEL 2
  - use only /dev/urandom if getrandom() is not available
  - disable SM4


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1c-6
changelog:
  - backport of S390x ECC CPACF enhancements from master
  - FIPS mode: properly disable 1024 bit DSA key generation
  - FIPS mode: skip ED25519 and ED448 algorithms in openssl speed
  - FIPS mode: allow AES-CCM ciphersuites


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1c-8
changelog:
  - fix CVE-2019-1547 - side-channel weak encryption vulnerability
  - fix CVE-2019-1563 - padding oracle in CMS API
  - fix CVE-2019-1549 - ensure fork safety of the DRBG
  - fix handling of non-FIPS allowed EC curves in FIPS mode
  - fix TLS compliance issues


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1c-14
changelog:
  - fix incorrect error return value from FIPS_selftest_dsa
  - S390x: properly restore SIGILL signal handler


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1b-1
changelog:
  - update to the 1.1.1b release
  - EVP_KDF API backport from master
  - SSH KDF implementation for EVP_KDF API backport from master
  - add S390x chacha20-poly1305 assembler support from master branch


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1c-2
changelog:
  - do not try to use EC groups disallowed in FIPS mode
    in TLS
  - fix Valgrind regression with constant-time code


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1c-2.1
changelog:
  - add selftest of the RAND_DRBG implementation
  - fix incorrect error return value from FIPS_selftest_dsa


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1g-7
changelog:
  - Disallow dropping Extended Master Secret extension
    on renegotiation
  - Return alert from s_server if ALPN protocol does not match
  - SHA1 is allowed in @SECLEVEL=2 only if allowed by
    TLS SigAlgs configuration


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1g-9
changelog:
  - Rewire FIPS_drbg API to use the RAND_DRBG
  - Use the well known DH groups in TLS even for 2048 and 1024 bit parameters


author: Tomáš Mráz <tmraz@redhat.com> 1.1.1g-11.1
changelog:
  - Implemented new FIPS requirements in regards to KDF and DH selftests
  - Disallow certificates with explicit EC parameters


author: Sahana Prasad <sahana@redhat.com> - 1:1.1.1k-4
changelog:
  - Fixes bugs in s390x AES code.
  - Uses the first detected address family if IPv6 is not available
  - Reverts the changes in https://github.com/openssl/openssl/pull/13305
    as it introduces a regression if server has a DSA key pair, the handshake fails
    when the protocol is not explicitly set to TLS 1.2. However, if the patch is reverted,
    it has an effect on the "ssl_reject_handshake" feature in nginx. Although, this feature
    will continue to work, TLS 1.3 protocol becomes unavailable/disabled. This is already
    known - https://trac.nginx.org/nginx/ticket/2071#comment:1
    As per https://github.com/openssl/openssl/issues/16075#issuecomment-879939938, nginx
    could early callback instead of servername callback.
  - Resolves: rhbz#1978214
  - Related: rhbz#1934534


author: Sahana Prasad <sahana@redhat.com> - 1:1.1.1k-5
changelog:
  - Fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
  - Resolves: rhbz#2005402


author: Clemens Lang <cllang@redhat.com> - 1:1.1.1k-6
changelog:
  - Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  - Resolves: rhbz#2067146


author: Clemens Lang <cllang@redhat.com> - 1:1.1.1k-7
changelog:
  - Fix CVE-2022-2097: AES OCB fails to encrypt some bytes on 32-bit x86
    Resolves: CVE-2022-2097
  - Update expired certificates used in the testsuite
    Resolves: rhbz#2092462
  - Fix CVE-2022-1292: openssl: c_rehash script allows command injection
    Resolves: rhbz#2090372
  - Fix CVE-2022-2068: the c_rehash script allows command injection
    Resolves: rhbz#2098279


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:1.1.1k-9
changelog:
  - Fixed Timing Oracle in RSA Decryption
    Resolves: CVE-2022-4304
  - Fixed Double free after calling PEM_read_bio_ex
    Resolves: CVE-2022-4450
  - Fixed Use-after-free following BIO_new_NDEF
    Resolves: CVE-2023-0215
  - Fixed X.400 address type confusion in X.509 GeneralName
    Resolves: CVE-2023-0286


author: Clemens Lang <cllang@redhat.com> - 1:1.1.1k-10
changelog:
  - Fix CVE-2023-3446: Excessive time spent checking DH keys and parameters
    Resolves: RHEL-14245
  - Fix CVE-2023-3817: Excessive time spent checking DH q parameter value
    Resolves: RHEL-14239


author: Clemens Lang <cllang@redhat.com> - 1:1.1.1k-11
changelog:
  - Fix CVE-2023-5678: Generating excessively long X9.42 DH keys or checking
    excessively long X9.42 DH keys or parameters may be very slow
    Resolves: RHEL-16538


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:1.1.1k-12
changelog:
  - Backport implicit rejection mechanism for RSA PKCS#1 v1.5 to RHEL-8 series
    (a proper fix for CVE-2020-25659)
    Resolves: RHEL-17696


author: Sahana Prasad <sahana@redhat.com> 1.1.1g-14
changelog:
  - Fix CVE-2021-3450 openssl: CA certificate check bypass with
    X509_V_FLAG_X509_STRICT
  - Fix CVE-2021-3449 NULL pointer deref in signature_algorithms processing


author: Daiki Ueno <dueno@redhat.com> 1.1.1g-16
changelog:
  - Use AI_ADDRCONFIG only when explicit host name is given
  - Allow only curves defined in RFC 8446 in TLS 1.3


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:1.1.1k-2
changelog:
  - Fixes FIPS_selftest to work in FIPS mode. Resolves: rhbz#1940085
  - Using safe primes for FIPS DH self-test


author: Clemens Lang <cllang@redhat.com> - 1:1.1.1k-6
changelog:
  - Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  - Resolves: rhbz#2067144


author: Clemens Lang <cllang@redhat.com> - 1:1.1.1k-6
changelog:
  - Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  - Resolves: rhbz#2067145


author: Clemens Lang <cllang@redhat.com> - 1:1.1.1k-7
changelog:
  - Fix CVE-2022-2097: AES OCB fails to encrypt some bytes on 32-bit x86
    Resolves: CVE-2022-2097
  - Update expired certificates used in the testsuite
    Resolves: rhbz#2100554
  - Fix CVE-2022-1292: openssl: c_rehash script allows command injection
    Resolves: rhbz#2090371
  - Fix CVE-2022-2068: the c_rehash script allows command injection
    Resolves: rhbz#2098278


author: Anderson Sasaki <ansasaki@redhat.com> - 0.4.8-1
changelog:
  - Update to 0.4.8-1
  - RSA key generation on the token
  - RSA-OAEP and RSA-PKCS encryption support
  - RSA-PSS signature support
  - Support for OpenSSL 1.1.1 beta
  - Removed support for OpenSSL 0.9.8
  - Various bug fixes and enhancements


author: Anderson Sasaki <ansasaki@redhat.com> - 0.4.8-2
changelog:
  - Require OpenSSL >= 1.0.2
  - Fixed missing declaration of ERR_get_CKR_code()
  - Add support to use EC keys and tests (#1625338)
  - Exposed check_fork() API
  - Fixed memory leak of RSA objects in pkcs11_store_key()
  - Updated OpenSSL license in eng_front.c
  - Fixed build for old C dialects
  - Allow engine to use private key without PIN
  - Require DEBUG to be defined to print debug messages
  - Changed package description


author: Anderson Sasaki <ansasaki@redhat.com> - 0.4.10-1
changelog:
  - Update to 0.4.10 (#1745082)
  - Add BuildRequires for OpenSSL >= 1.0.2, required for testing
  - Print tests logs if failed during build
  - Small bug fixes such as removal of unused variable
  - Search objects in all matching tokens (#1705505)


author: Stephen Gallagher <sgallagh@redhat.com> - 80.1-2
changelog:
  - Separate desktop backgrounds into their own subpackage
  - Correct the description to match the license terms
  - Drop vestiges of fedora-logos


author: Ray Strode <rstrode@redhat.com> - 80.3-1
changelog:
  - Make night time pattern lighter
    Resolves: #1628092
  - Remove Alpha from logos
    Resolves: #1637446
  - Remove Alpha from wallpapers
    Resolves: #1636822


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 80.5-1.0.3
changelog:
  - Removed Dtrace related banner image anaconda/rnotes/en/orcl_linux_dtrace_750x120.png
    [Orabug: 29839540]


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 80.5-1.0.6
changelog:
  - Correct grammar in installer banner images [Orabug: 31261316]
  - Fix scaling in backgroup images [Orabug: 31260679]


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 84.5-1.0.1
changelog:
  - Provide: system-logos(httpd-logo-ng) for httpd subpackage
  - Resolves: #1934800 - Apache trademark update (luhliari@redhat.com)


author: Alex Burmashev <alexander.burmashev@oracle.com> 1.0-3
changelog:
  - Use $ocidomain instead of hardcoded .oracle.com [Orabug: 35256560]
  - Update post scripts to support new self-service DNS hostnames [JIRA: OLDIS-22726]


author: Petr Kovar <pkovar@redhat.com> - 8-3
changelog:
  - New content tarball for RHEL 8 Beta
  - Remove outdated translations
  - Update fr-FR, ja-JP, ko-KR and zh-CN translations
  - Remove unneeded files
  - Change file permissions to 644
  - Update description
  - Resolves: rhbz1562063


author: Darren Archibald <darren.archibald@oracle.com> - 8-7.0.1
changelog:
  - Rebrand and replace upstream references from description tag
  - Replace upstream references in the index.html files


