# changelog

author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.330.2.el7uek]
changelog:
  - LTS tag: v5.4.269 (Alok Tiwari)   
  - bpf: Add map and need_defer parameters to .map_fd_put_ptr() (Hou Tao)   
  - of: gpio unittest kfree() wrong object (Frank Rowand)   
  - of: unittest: fix EXPECT text for gpio hog errors (Frank Rowand)   
  - net: bcmgenet: Fix EEE implementation (Florian Fainelli)   
  - Revert "Revert "mtd: rawnand: gpmi: Fix setting busy timeout setting"" (Max Krummenacher)   
  - netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() (Dan Carpenter) [Orabug: 36229438] {CVE-2024-0607}
  - lsm: new security_file_ioctl_compat() hook (Alfred Piccioni)   
  - drm/msm/dsi: Enable runtime PM (Konrad Dybcio)   
  - PM: runtime: Have devm_pm_runtime_enable() handle pm_runtime_dont_use_autosuspend() (Douglas Anderson)   
  - PM: runtime: add devm_pm_runtime_enable helper (Dmitry Baryshkov)   
  - nilfs2: fix potential bug in end_buffer_async_write (Ryusuke Konishi)   
  - sched/membarrier: reduce the ability to hammer on sys_membarrier (Linus Torvalds)   
  - net: prevent mss overflow in skb_segment() (Eric Dumazet)   
  - netfilter: ipset: Missing gc cancellations fixed (Jozsef Kadlecsik)   
  - netfilter: ipset: fix performance regression in swap operation (Jozsef Kadlecsik)   
  - KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache (Oliver Upton)   
  - mips: Fix max_mapnr being uninitialized on early stages (Serge Semin)   
  - arch, mm: remove stale mentions of DISCONIGMEM (Mike Rapoport)   
  - bus: moxtet: Add spi device table (Sjoerd Simons)   
  - tracing: Inform kmemleak of saved_cmdlines allocation (Steven Rostedt (Google))   
  - pmdomain: core: Move the unused cleanup to a _sync initcall (Konrad Dybcio)   
  - can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER) (Oleksij Rempel)   
  - irqchip/irq-brcmstb-l2: Add write memory barrier before exit (Doug Berger)   
  - nfp: flower: prevent re-adding mac index for bonded port (Daniel de Villiers)   
  - nfp: use correct macro for LengthSelect in BAR config (Daniel Basilio)   
  - nilfs2: fix hang in nilfs_lookup_dirty_data_buffers() (Ryusuke Konishi)   
  - nilfs2: fix data corruption in dsync block recovery for small block sizes (Ryusuke Konishi)   
  - ALSA: hda/conexant: Add quirk for SWS JS201D (bo liu)   
  - mmc: slot-gpio: Allow non-sleeping GPIO ro (Alexander Stein)   
  - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Steve Wahl)   
  - x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6 (Aleksander Mazur)   
  - serial: max310x: improve crystal stable clock detection (Hugo Villeneuve)   
  - serial: max310x: set default value when reading clock ready bit (Hugo Villeneuve)   
  - ring-buffer: Clean ring_buffer_poll_wait() error return (Vincent Donnefort)   
  - iio: magnetometer: rm3100: add boundary check for the value read from RM3100_REG_TMRC (zhili.liu)   
  - staging: iio: ad5933: fix type mismatch regression (David Schiller)   
  - tracing: Fix wasted memory in saved_cmdlines logic (Steven Rostedt (Google))   
  - ext4: fix double-free of blocks due to wrong extents moved_len (Baokun Li)   
  - misc: fastrpc: Mark all sessions as invalid in cb_remove (Ekansh Gupta)   
  - binder: signal epoll threads of self-work (Carlos Llamas)   
  - ALSA: hda/realtek: Enable headset mic on Vaio VJFE-ADL (Edson Juliano Drosdeck)   
  - xen-netback: properly sync TX responses (Jan Beulich)   
  - nfc: nci: free rx_data_reassembly skb on NCI device cleanup (Fedor Pchelkin)   
  - kbuild: Fix changing ELF file type for output of gen_btf for big endian (Nathan Chancellor)   
  - firewire: core: correct documentation of fw_csr_string() kernel API (Takashi Sakamoto)   
  - scsi: Revert "scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock" (Lee Duncan)   
  - i2c: i801: Fix block process call transactions (Jean Delvare)   
  - i2c: i801: Remove i801_set_block_buffer_mode (Heiner Kallweit)   
  - usb: f_mass_storage: forbid async queue when shutdown happen (yuan linyu)   
  - USB: hub: check for alternate port before enabling A_ALT_HNP_SUPPORT (Oliver Neukum)   
  - HID: wacom: Do not register input devices until after hid_hw_start (Jason Gerecke)   
  - HID: wacom: generic: Avoid reporting a serial of '0' to userspace (Tatsunosuke Tobita)   
  - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Zach O'Keefe)   
  - tracing/trigger: Fix to return error if failed to alloc snapshot (Masami Hiramatsu (Google))   
  - i40e: Fix waiting for queues of all VSIs to be disabled (Ivan Vecera)   
  - MIPS: Add 'memory' clobber to csum_ipv6_magic() inline assembler (Guenter Roeck)   
  - ASoC: rt5645: Fix deadlock in rt5645_jack_detect_work() (Alexey Khoroshilov)   
  - spi: ppc4xx: Drop write-only variable (Uwe Kleine-König)   
  - of: unittest: Fix compile in the non-dynamic case (Christian A. Ehrhardt)   
  - of: unittest: add overlay gpio test to catch gpio hog problem (Frank Rowand)   
  - btrfs: send: return EOPNOTSUPP on unknown flags (David Sterba)   
  - btrfs: forbid deleting live subvol qgroup (Boris Burkov)   
  - btrfs: forbid creating subvol qgroups (Boris Burkov)   
  - netfilter: nft_set_rbtree: skip end interval element from gc (Pablo Neira Ayuso)   
  - net: stmmac: xgmac: fix a typo of register name in DPP safety handling (Furong Xu)   
  - net: stmmac: xgmac: use #define for string constants (Simon Horman)   
  - vhost: use kzalloc() instead of kmalloc() followed by memset() (Prathu Baronia) [Orabug: 36192400] {CVE-2024-0340}
  - Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID (Hans de Goede)   
  - USB: serial: cp210x: add ID for IMST iM871A-USB (Leonard Dallmayr)   
  - USB: serial: option: add Fibocom FM101-GL variant (Puliang Lu)   
  - USB: serial: qcserial: add new usb-id for Dell Wireless DW5826e (JackBB Wu)   
  - net/af_iucv: clean up a try_then_request_module() (Julian Wiedmann)   
  - netfilter: nft_ct: reject direction for ct id (Pablo Neira Ayuso)   
  - netfilter: nft_compat: restrict match/target protocol to u16 (Pablo Neira Ayuso)   
  - netfilter: nft_compat: reject unused compat flag (Pablo Neira Ayuso)   
  - ppp_async: limit MRU to 64K (Eric Dumazet)   
  - tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() (Shigeru Yoshida)   
  - rxrpc: Fix response to PING RESPONSE ACKs to a dead call (David Howells)   
  - inet: read sk->sk_family once in inet_recv_error() (Eric Dumazet)   
  - hwmon: (coretemp) Fix bogus core_id to attr name mapping (Zhang Rui)   
  - hwmon: (coretemp) Fix out-of-bounds memory access (Zhang Rui)   
  - hwmon: (aspeed-pwm-tacho) mutex for tach reading (Loic Prylli)   
  - atm: idt77252: fix a memleak in open_card_ubr0 (Zhipeng Lu)   
  - selftests: net: avoid just another constant wait (Paolo Abeni)   
  - net: stmmac: xgmac: fix handling of DPP safety error for DMA channels (Furong Xu)   
  - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Tony Lindgren)   
  - dmaengine: fix is_slave_direction() return false when DMA_DEV_TO_DEV (Frank Li)   
  - phy: renesas: rcar-gen3-usb2: Fix returning wrong error code (Yoshihiro Shimoda)   
  - dmaengine: fsl-qdma: Fix a memory leak related to the queue command DMA (Christophe JAILLET)   
  - dmaengine: fsl-qdma: Fix a memory leak related to the status queue DMA (Christophe JAILLET)   
  - bonding: remove print in bond_verify_device_path (Zhengchao Shao)   
  - HID: apple: Add 2021 magic keyboard FN key mapping (Benjamin Berg)   
  - HID: apple: Swap the Fn and Left Control keys on Apple keyboards (free5lot)   
  - HID: apple: Add support for the 2021 Magic Keyboard (Alex Henrie)   
  - net: sysfs: Fix /sys/class/net/<iface> path (Breno Leitao)   
  - af_unix: fix lockdep positive in sk_diag_dump_icons() (Eric Dumazet)   
  - net: ipv4: fix a memleak in ip_setup_cork (Zhipeng Lu)   
  - netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations (Pablo Neira Ayuso)   
  - netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger (Pablo Neira Ayuso)   
  - llc: call sock_orphan() at release time (Eric Dumazet)   
  - ipv6: Ensure natural alignment of const ipv6 loopback and router addresses (Helge Deller)   
  - ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550() (Christophe JAILLET)   
  - ixgbe: Refactor overtemp event handling (Jedrzej Jagielski)   
  - ixgbe: Refactor returning internal error codes (Jedrzej Jagielski)   
  - ixgbe: Remove non-inclusive language (Piotr Skajewski)   
  - net: remove unneeded break (Tom Rix)   
  - scsi: isci: Fix an error code problem in isci_io_request_build() (Su Hui)   
  - wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update (Edward Adam Davis)   
  - perf: Fix the nr_addr_filters fix (Peter Zijlstra)   
  - drm/amdgpu: Release 'adev->pm.fw' before return in 'amdgpu_device_need_post()' (Srinivasan Shanmugam)   
  - ceph: fix deadlock or deadcode of misusing dget() (Xiubo Li)   
  - blk-mq: fix IO hang from sbitmap wakeup race (Ming Lei)   
  - virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings (Zhu Yanjun)   
  - libsubcmd: Fix memory leak in uniq() (Ian Rogers)   
  - PCI/AER: Decode Requester ID when no error info found (Bjorn Helgaas)   
  - fs/kernfs/dir: obey S_ISGID (Max Kellermann)   
  - usb: hub: Replace hardcoded quirk value with BIT() macro (Hardik Gajjar)   
  - PCI: switchtec: Fix stdev_release() crash after surprise hot remove (Daniel Stodden)   
  - PCI: Only override AMD USB controller if required (Guilherme G. Piccoli)   
  - mfd: ti_am335x_tscadc: Fix TI SoC dependencies (Peter Robinson)   
  - i3c: master: cdns: Update maximum prescaler value for i2c clock (Harshit Shah)   
  - um: net: Fix return type of uml_net_start_xmit() (Nathan Chancellor)   
  - um: Don't use vfprintf() for os_info() (Benjamin Berg)   
  - um: Fix naming clash between UML and scheduler (Anton Ivanov)   
  - leds: trigger: panic: Don't register panic notifier if creating the trigger failed (Heiner Kallweit)   
  - drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()' (Srinivasan Shanmugam)   
  - drm/amdgpu: Let KFD sync with VM fences (Felix Kuehling)   
  - clk: mmp: pxa168: Fix memory leak in pxa168_clk_init() (Kuan-Wei Chiu)   
  - clk: hi3620: Fix memory leak in hi3620_mmc_clk_init() (Kuan-Wei Chiu)   
  - drm/msm/dpu: Ratelimit framedone timeout msgs (Rob Clark)   
  - media: ddbridge: fix an error code problem in ddb_probe (Su Hui)   
  - IB/ipoib: Fix mcast list locking (Daniel Vacek)   
  - drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time (Douglas Anderson)   
  - ALSA: hda: Intel: add HDA_ARL PCI ID support (Pierre-Louis Bossart)   
  - PCI: add INTEL_HDA_ARL to pci_ids.h (Pierre-Louis Bossart)   
  - media: rockchip: rga: fix swizzling for RGB formats (Michael Tretter)   
  - media: stk1160: Fixed high volume of stk1160_dbg messages (Ghanshyam Agrawal)   
  - drm/mipi-dsi: Fix detach call without attach (Tomi Valkeinen)   
  - drm/framebuffer: Fix use of uninitialized variable (Tomi Valkeinen)   
  - drm/drm_file: fix use of uninitialized variable (Tomi Valkeinen)   
  - RDMA/IPoIB: Fix error code return in ipoib_mcast_join (Jack Wang)   
  - fast_dput(): handle underflows gracefully (Al Viro)   
  - ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument (Cristian Ciocaltea)   
  - f2fs: fix to check return value of f2fs_reserve_new_block() (Chao Yu)   
  - wifi: cfg80211: free beacon_ies when overridden from hidden BSS (Benjamin Berg)   
  - wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift() (Su Hui)   
  - wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices (Zenm Chen)   
  - arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property (Mao Jinlong)   
  - arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property (Mao Jinlong)   
  - md: Whenassemble the array, consult the superblock of the freshest device (Alex Lyakas)   
  - block: prevent an integer overflow in bvec_try_merge_hw_page (Christoph Hellwig)   
  - ARM: dts: imx23/28: Fix the DMA controller node name (Fabio Estevam)   
  - ARM: dts: imx23-sansa: Use preferred i2c-gpios properties (Fabio Estevam)   
  - ARM: dts: imx27-apf27dev: Fix LED name (Fabio Estevam)   
  - ARM: dts: imx25/27: Pass timing0 (Fabio Estevam)   
  - ARM: dts: imx1: Fix sram node (Fabio Estevam)   
  - ARM: dts: imx27: Fix sram node (Fabio Estevam)   
  - ARM: dts: imx: Use flash@0,0 pattern (Fabio Estevam)   
  - ARM: dts: imx25/27-eukrea: Fix RTC node name (Fabio Estevam)   
  - ARM: dts: rockchip: fix rk3036 hdmi ports node (Johan Jonker)   
  - scsi: libfc: Fix up timeout error in fc_fcp_rec_error() (Hannes Reinecke)   
  - scsi: libfc: Don't schedule abort twice (Hannes Reinecke)   
  - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Minsuk Kang)   
  - ARM: dts: imx7s: Fix nand-controller #size-cells (Alexander Stein)   
  - ARM: dts: imx7s: Fix lcdif compatible (Alexander Stein)   
  - ARM: dts: imx7d: Fix coresight funnel ports (Alexander Stein)   
  - bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk (Zhengchao Shao)   
  - PCI: Add no PM reset quirk for NVIDIA Spectrum devices (Ido Schimmel)   
  - scsi: lpfc: Fix possible file string name overflow when updating firmware (Justin Tee)   
  - selftests/bpf: Fix pyperf180 compilation failure with clang18 (Yonghong Song)   
  - selftests/bpf: satisfy compiler by having explicit return in btf test (Andrii Nakryiko)   
  - wifi: rt2x00: restart beacon queue when hardware reset (Shiji Yang)   
  - ext4: avoid online resizing failures due to oversized flex bg (Baokun Li)   
  - ext4: remove unnecessary check from alloc_flex_gd() (Baokun Li)   
  - ext4: unify the type of flexbg_size to unsigned int (Baokun Li)   
  - ext4: fix inconsistent between segment fstrim and full fstrim (Ye Bin)   
  - ecryptfs: Reject casefold directory inodes (Gabriel Krisman Bertazi)   
  - SUNRPC: Fix a suspicious RCU usage warning (Anna Schumaker)   
  - KVM: s390: fix setting of fpc register (Heiko Carstens)   
  - s390/ptrace: handle setting of fpc register correctly (Heiko Carstens)   
  - jfs: fix array-index-out-of-bounds in diNewExt (Edward Adam Davis)   
  - rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock() (Oleg Nesterov)   
  - afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*() (Oleg Nesterov)   
  - crypto: stm32/crc32 - fix parsing list of devices (Thomas Bourgoin)   
  - pstore/ram: Fix crash when setting number of cpus to an odd number (Weichen Chen)   
  - jfs: fix uaf in jfs_evict_inode (Edward Adam Davis)   
  - jfs: fix array-index-out-of-bounds in dbAdjTree (Manas Ghandat)   
  - jfs: fix slab-out-of-bounds Read in dtSearch (Manas Ghandat)   
  - UBSAN: array-index-out-of-bounds in dtSplitRoot (Osama Muhammad)   
  - FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree (Osama Muhammad)   
  - ACPI: extlog: fix NULL pointer dereference check (Prarit Bhargava)   
  - PNP: ACPI: fix fortify warning (Dmitry Antipov)   
  - ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop (Yuluo Qiu)   
  - audit: Send netlink ACK before setting connection in auditd_set (Chris Riches)   
  - regulator: core: Only increment use_count when enable_count changes (Rui Zhang)   
  - perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file (Greg KH)   
  - x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel (Zhiquan Li)   
  - powerpc/lib: Validate size for vector operations (Naveen N Rao)   
  - powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE (Stephen Rothwell)   
  - powerpc/mm: Fix build failures due to arch_reserved_kernel_pages() (Michael Ellerman)   
  - powerpc: Fix build error due to is_valid_bugaddr() (Michael Ellerman)   
  - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Kunwu Chan)   
  - x86/entry/ia32: Ensure s32 is sign extended to s64 (Richard Palethorpe)   
  - tick/sched: Preserve number of idle sleeps across CPU hotplug events (Tim Chen)   
  - mips: Call lose_fpu(0) before initializing fcr31 in mips_set_personality_nan (Xi Ruoyao)   
  - spi: bcm-qspi: fix SFDP BFPT read by usig mspi read (Kamal Dasu)   
  - gpio: eic-sprd: Clear interrupt after set the interrupt type (Wenhua Lin)   
  - drm/exynos: gsc: minor fix for loop iteration in gsc_runtime_resume (Fedor Pchelkin)   
  - drm/exynos: fix accidental on-stack copy of exynos_drm_plane (Arnd Bergmann)   
  - drm/bridge: nxp-ptn3460: simplify some error checking (Dan Carpenter)   
  - drm/bridge: nxp-ptn3460: fix i2c_master_send() error checking (Dan Carpenter)   
  - drm: Don't unref the same fb many times by mistake due to deadlock handling (Ville Syrjälä)   
  - gpiolib: acpi: Ignore touchpad wakeup on GPD G1619-04 (Mario Limonciello)   
  - netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [Orabug: 36251144] {CVE-2024-1086}
  - rbd: don't move requests to the running list on errors (Ilya Dryomov)   
  - btrfs: defrag: reject unknown flags of btrfs_ioctl_defrag_range_args (Qu Wenruo)   
  - btrfs: don't warn if discard range is not aligned to sector (David Sterba)   
  - btrfs: tree-checker: fix inline ref size in error messages (Chung-Chiang Cheng)   
  - btrfs: ref-verify: free ref cache before clearing mount opt (Fedor Pchelkin)   
  - net: fec: fix the unhandled context fault from smmu (Shenwei Wang)   
  - fjes: fix memleaks in fjes_hw_setup (Zhipeng Lu)   
  - netfilter: nf_tables: validate NFPROTO_* family (Pablo Neira Ayuso)   
  - netfilter: nf_tables: restrict anonymous set and map names to 16 bytes (Florian Westphal)   
  - net/mlx5e: fix a double-free in arfs_create_groups (Zhipeng Lu)   
  - net/mlx5: Use kfree(ft->g) in arfs_create_groups() (Denis Efremov)   
  - net/mlx5: DR, Use the right GVMI number for drop action (Yevgeny Kliteynik)   
  - netlink: fix potential sleeping issue in mqueue_flush_file (Zhengchao Shao)   
  - tcp: Add memory barrier to tcp_push() (Salvatore Dipietro)   
  - afs: Hide silly-rename files from userspace (David Howells)   
  - tracing: Ensure visibility when inserting an element into tracing_map (Petr Pavlu)   
  - net/rds: Fix UBSAN: array-index-out-of-bounds in rds_cmsg_recv (Sharath Srinivasan)   
  - llc: Drop support for ETH_P_TR_802_2. (Kuniyuki Iwashima)   
  - llc: make llc_ui_sendmsg() more robust against bonding changes (Eric Dumazet)   
  - vlan: skip nested type that is not IFLA_VLAN_QOS_MAPPING (Lin Ma)   
  - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Wen Gu)   
  - x86/CPU/AMD: Fix disabling XSAVES on AMD family 0x17 due to erratum (Maciej S. Szmigiero)   
  - powerpc: Use always instead of always-y in for crtsavres.o (Nathan Chancellor)   
  - fs: move S_ISGID stripping into the vfs_*() helpers (Yang Xu)   
  - fs: add mode_strip_sgid() helper (Yang Xu)   
  - mtd: spinand: macronix: Fix MX35LFxGE4AD page size (JaimeLiao)   
  - block: Remove special-casing of compound pages (Matthew Wilcox (Oracle))   
  - rename(): fix the locking of subdirectories (Al Viro)   
  - ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path (Zhihao Cheng)   
  - nouveau/vmm: don't set addr on the fail path to avoid warning (Dave Airlie)   
  - mmc: core: Use mrq.sbc in close-ended ffu (Avri Altman)   
  - arm64: dts: qcom: sdm845: fix USB wakeup interrupt types (Johan Hovold)   
  - parisc/firmware: Fix F-extend for PDC addresses (Helge Deller)   
  - rpmsg: virtio: Free driver_override when rpmsg_remove() (Xiaolei Wang)   
  - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Herbert Xu)   
  - PM: hibernate: Enforce ordering during image compression/decompression (Hongchen Zhang)   
  - crypto: api - Disallow identical driver names (Herbert Xu)   
  - ext4: allow for the last group to be marked as trimmed (Suraj Jitindar Singh)   
  - serial: sc16is7xx: add check for unsupported SPI modes during probe (Hugo Villeneuve)   
  - spi: introduce SPI_MODE_X_MASK macro (Oleksij Rempel)   
  - serial: sc16is7xx: set safe default SPI clock frequency (Hugo Villeneuve)   
  - units: add the HZ macros (Daniel Lezcano)   
  - units: change from 'L' to 'UL' (Daniel Lezcano)   
  - units: Add Watt units (Daniel Lezcano)   
  - PCI: mediatek: Clear interrupt status before dispatching handler (qizhong cheng)


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.330.4.el7uek]
changelog:
  - Revert "crypto: api - Disallow identical driver names" (Saeed Mirzamohammadi)  [Orabug: 36361379]  
  - Fix null ptr in rds_tcp_recv_path (Allison Henderson)  [Orabug: 35587415]  
  - net/rds: print PPID/COMM of process doing user reset on RDS connection (Juan Garcia)  [Orabug: 36248461]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.330.5.el7uek]
changelog:
  - afs: Fix endless loop in directory parsing (David Howells)   
  - netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate() (Ignat Korchagin)   
  - netfilter: nf_tables: set dormant flag on hook register failure (Florian Westphal)   
  - scsi: megaraid_sas: Correct value passed to scsi_device_lookup() (Guixin Liu)  [Orabug: 36345168]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.330.6.el7uek]
changelog:
  - eVM: x86: Drop kvm SRCU lock in kvm_vcpu_update_apicv (Alejandro Jimenez)  [Orabug: 36329600]  
  - KVM: x86: Handle APICv updates for APIC "mode" changes via request (Sean Christopherson)  [Orabug: 36329600]  
  - blk-mq: fix system hang while doing cpu offline on domU (Shminderjit Singh)  [Orabug: 36366420]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.330.7.el7uek]
changelog:
  - Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped." (Sherry Yang)  [Orabug: 36409910]  
  - arm64: dts: qcom: sdm845: fix USB DP/DM HS PHY interrupts (Johan Hovold)   
  - arm64: dts: qcom: add PDC interrupt controller for SDM845 (Lina Iyer)   
  - hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed (Shradha Gupta)   
  - hv_netvsc: use netif_is_bond_master() instead of open code (Juhee Kang)   
  - netfilter: nft_ct: fix l3num expectations with inet pseudo family (Florian Westphal)


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2136.330.7.1.el7uek]
changelog:
  - KVM: x86: Add BHI_NO (Daniel Sneddon)  [Orabug: 36384803]  {CVE-2024-2201} 
  - x86/bhi: Mitigate KVM by default (Pawan Gupta)  [Orabug: 36384803]  {CVE-2024-2201} 
  - x86/bhi: Add BHI mitigation knob (Pawan Gupta)  [Orabug: 36384803]  {CVE-2024-2201} 
  - x86/bhi: Enumerate Branch History Injection (BHI) bug (Pawan Gupta)  [Orabug: 36384803]  {CVE-2024-2201} 
  - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Daniel Sneddon)  [Orabug: 36384803]  {CVE-2024-2201} 
  - x86/bhi: Add support for clearing branch history at syscall entry (Pawan Gupta)  [Orabug: 36384803]  {CVE-2024-2201} 
  - x86/cpufeature: Add missing leaf enumeration (Daniel Sneddon)  [Orabug: 36384803]  {CVE-2024-2201} 
  - KVM: x86: Use a switch statement and macros in __feature_translate() (Jim Mattson)  [Orabug: 36384803]  {CVE-2024-2201} 
  - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Jim Mattson)  [Orabug: 36384803]  {CVE-2024-2201} 
  - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Sean Christopherson)  [Orabug: 36384803]  {CVE-2024-2201} 
  - x86/bugs: Use sysfs_emit() (Borislav Petkov)  [Orabug: 36384803]  {CVE-2024-2201} 
  - Documentation/hw-vuln: Update spectre doc (Lin Yujun)  [Orabug: 36384803]  {CVE-2024-2201} 
  - x86/speculation: Reorder SRSO and GDS functions (Alexandre Chartre)  [Orabug: 36384803]  {CVE-2024-2201} 
  - KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES (Jim Mattson)  [Orabug: 36384803]  {CVE-2024-2201} 
  - KVM: x86: Move reverse CPUID helpers to separate header file (Ricardo Koller)  [Orabug: 36384803]  {CVE-2024-2201} 
  - KVM: x86: Fix implicit enum conversion goof in scattered reverse CPUID code (Sean Christopherson)  [Orabug: 36384803]  {CVE-2024-2201} 
  - KVM: x86: Add support for reverse CPUID lookup of scattered features (Sean Christopherson)  [Orabug: 36384803]  {CVE-2024-2201} 
  - x86/msr: Define new bits in TSX_FORCE_ABORT MSR (Pawan Gupta)  [Orabug: 36384803]  {CVE-2024-2201} 
  - objtool: Add asm version of STACK_FRAME_NON_STANDARD (Josh Poimboeuf)  [Orabug: 36384803]  {CVE-2024-2201} 
  - objtool: Only include valid definitions depending on source file type (Julien Thierry)  [Orabug: 36384803]  {CVE-2024-2201}


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.330.7.2.el7uek]
changelog:
  - net/mlx5: Brute force GFP_NOIO (Håkon Bugge)  [Orabug: 36496480]  
  - RDMA/mlx5: Brute force GFP_NOIO (Håkon Bugge)  [Orabug: 36496480]  
  - RDMA/cm: Brute force GFP_NOIO (Håkon Bugge)  [Orabug: 36496480]  
  - RDMA/cma: Brute force GFP_NOIO (Håkon Bugge)  [Orabug: 36496480]  
  - rds: Brute force GFP_NOIO (Håkon Bugge)  [Orabug: 36496480]  
  - workqueue: Inherit NOIO and NOFS alloc flags (Håkon Bugge)  [Orabug: 36496480]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.330.7.3.el7uek]
changelog:
  - RDMA/cm: add timeout to cm_destroy_id wait (Manjunath Patil)  [Orabug: 36505155]  
  - rds: Add count for ready receive cache (Hans Westgaard Ry)  [Orabug: 36505157]  
  - uek-rpm: ol7, ol8: add vmlinux-nano.ctfa building (Nick Alcock)  [Orabug: 36505152]  
  - ctf: add ctf-nano, ctf containing only some modules' CTF (Nick Alcock)  [Orabug: 36505152]  
  - mm/hwpoison: fix error page recovered but reported "not recovered" (Naoya Horiguchi)  [Orabug: 36505149]  
  - mm,hwpoison: check mm when killing accessing process (Shuai Xue)  [Orabug: 36505149]  
  - mm,hwpoison: send SIGBUS with error virutal address (Naoya Horiguchi)  [Orabug: 36505149]  
  - mm,hwpoison: return -EHWPOISON to denote that the page has already been poisoned (Aili Yao)  [Orabug: 36505149]  
  - mm/memory-failure: use a mutex to avoid memory_failure() races (Tony Luck)  [Orabug: 36505149]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.330.7.4.el7uek]
changelog:
  - Revert "net/mlx5: Enable SW-defined RoCEv2 UDP source port" (Arumugam Kolappan)  [Orabug: 36584784]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.330.7.5.el7uek]
changelog:
  - mm/memory-failure: fix an incorrect use of tail pages (Liu Shixin)  [Orabug: 36664186]  
  - net/rds: mod reconnect delay on sendmsg() (Sharath Srinivasan)  [Orabug: 36664174]  
  - net/rds: Extend exponential backoff for rds reconnects (Sharath Srinivasan)  [Orabug: 36664174]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.331.1.el7uek]
changelog:
  - Revert "mmc: core: Use mrq.sbc in close-ended ffu" (Thomas Tai)  [Orabug: 36446450]  
  - ext4: fix corruption during on-line resize (Maximilian Heyne)  [Orabug: 36342902]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.331.2.el7uek]
changelog:
  - uek-rpm: ol7, ol8: add vmlinux-nano.ctfa building (Nick Alcock)  [Orabug: 35266053]  
  - ctf: add ctf-nano, ctf containing only some modules' CTF (Nick Alcock)  [Orabug: 35266053]  
  - RDMA/cm: add timeout to cm_destroy_id wait (Manjunath Patil)  [Orabug: 36280586]  
  - rds: Add count for ready receive cache (Hans Westgaard Ry)  [Orabug: 36360482]  
  - mm/hwpoison: fix error page recovered but reported "not recovered" (Naoya Horiguchi)  [Orabug: 36436639]  
  - mm,hwpoison: check mm when killing accessing process (Shuai Xue)  [Orabug: 36436639]  
  - mm,hwpoison: send SIGBUS with error virutal address (Naoya Horiguchi)  [Orabug: 36436639]  
  - mm,hwpoison: return -EHWPOISON to denote that the page has already been poisoned (Aili Yao)  [Orabug: 36436639]  
  - mm/memory-failure: use a mutex to avoid memory_failure() races (Tony Luck)  [Orabug: 36436639]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.331.3.el7uek]
changelog:
  - LTS tag: v5.4.273 (Sherry Yang)   
  - regmap: Add missing map->bus check (Marek Vasut)   
  - spi: spi-mt65xx: Fix NULL pointer access in interrupt handler (Fei Shao)   
  - bpf: report RCU QS in cpumap kthread (Yan Zhai)   
  - rcu: add a helper to report consolidated flavor QS (Yan Zhai)   
  - netfilter: nf_tables: do not compare internal table flags on updates (Pablo Neira Ayuso)   
  - ARM: dts: sun8i-h2-plus-bananapi-m2-zero: add regulator nodes vcc-dram and vcc1v2 (Michael Klein)   
  - octeontx2-af: Use separate handlers for interrupts (Subbaraya Sundeep)   
  - net/bnx2x: Prevent access to a freed page in page_pool (Thinh Tran)   
  - hsr: Handle failures in module init (Felix Maurer)   
  - packet: annotate data-races around ignore_outgoing (Eric Dumazet)   
  - hsr: Fix uninit-value access in hsr_get_node() (Shigeru Yoshida)   
  - s390/vtime: fix average steal time calculation (Mete Durlu)   
  - usb: gadget: net2272: Use irqflags in the call to net2272_probe_fin (Colin Ian King)   
  - staging: greybus: fix get_channel_from_mode() failure path (Dan Carpenter)   
  - serial: 8250_exar: Don't remove GPIO device on suspend (Andy Shevchenko)   
  - rtc: mt6397: select IRQ_DOMAIN instead of depending on it (Randy Dunlap)   
  - kconfig: fix infinite loop when expanding a macro at the end of file (Masahiro Yamada)   
  - tty: serial: samsung: fix tx_empty() to return TIOCSER_TEMT (Tudor Ambarus)   
  - serial: max310x: fix syntax error in IRQ error message (Hugo Villeneuve)   
  - tty: vt: fix 20 vs 0x20 typo in EScsiignore (Jiri Slaby (SUSE))   
  - afs: Revert "afs: Hide silly-rename files from userspace" (David Howells)   
  - NFS: Fix an off by one in root_nfs_cat() (Christophe JAILLET)   
  - watchdog: stm32_iwdg: initialize default timeout (Ben Wolsieffer)   
  - net: sunrpc: Fix an off by one in rpc_sockaddr2uaddr() (Christophe JAILLET)   
  - scsi: bfa: Fix function pointer type mismatch for hcb_qe->cbfn (Arnd Bergmann)   
  - RDMA/device: Fix a race between mad_client and cm_client init (Shifeng Li)   
  - scsi: csiostor: Avoid function pointer casts (Arnd Bergmann)   
  - ALSA: usb-audio: Stop parsing channels bits when all channels are found. (Johan Carlsson)   
  - clk: Fix clk_core_get NULL dereference (Bryan O'Donoghue)   
  - sparc32: Fix section mismatch in leon_pci_grpci (Sam Ravnborg)   
  - backlight: lp8788: Fully initialize backlight_properties during probe (Daniel Thompson)   
  - backlight: lm3639: Fully initialize backlight_properties during probe (Daniel Thompson)   
  - backlight: da9052: Fully initialize backlight_properties during probe (Daniel Thompson)   
  - backlight: lm3630a: Don't set bl->props.brightness in get_brightness (Luca Weiss)   
  - backlight: lm3630a: Initialize backlight_properties on init (Luca Weiss)   
  - powerpc/embedded6xx: Fix no previous prototype for avr_uart_send() etc. (Michael Ellerman)   
  - drm/msm/dpu: add division of drm_display_mode's hskew parameter (Paloma Arellano)   
  - powerpc/hv-gpci: Fix the H_GET_PERF_COUNTER_INFO hcall return value checks (Kajol Jain)   
  - drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip (Hsin-Yi Wang)   
  - media: ttpci: fix two memleaks in budget_av_attach (Zhipeng Lu)   
  - media: media/pci: rename VFL_TYPE_GRABBER to _VIDEO (Hans Verkuil)   
  - media: go7007: fix a memleak in go7007_load_encoder (Zhipeng Lu)   
  - media: dvb-frontends: avoid stack overflow warnings with clang (Arnd Bergmann)   
  - media: pvrusb2: fix uaf in pvr2_context_set_notify (Edward Adam Davis)   
  - drm/amdgpu: Fix missing break in ATOM_ARG_IMM Case of atom_get_src_int() (Srinivasan Shanmugam)   
  - ASoC: meson: axg-tdm-interface: fix mclk setup without mclk-fs (Jerome Brunet)   
  - mtd: rawnand: lpc32xx_mlc: fix irq handler prototype (Arnd Bergmann)   
  - mtd: maps: physmap-core: fix flash size larger than 32-bit (Baruch Siach)   
  - crypto: arm/sha - fix function cast warnings (Arnd Bergmann)   
  - mfd: altera-sysmgr: Call of_node_put() only when of_parse_phandle() takes a ref (Peter Griffin)   
  - mfd: syscon: Call of_node_put() only when of_parse_phandle() takes a ref (Peter Griffin)   
  - drm/tegra: put drm_gem_object ref on error in tegra_fb_create (Fedor Pchelkin)   
  - clk: hisilicon: hi3519: Release the correct number of gates in hi3519_clk_unregister() (Christophe JAILLET)   
  - PCI: Mark 3ware-9650SE Root Port Extended Tags as broken (Jörg Wedekind)   
  - drm/mediatek: dsi: Fix DSI RGB666 formats and definitions (AngeloGioacchino Del Regno)   
  - clk: qcom: dispcc-sdm845: Adjust internal GDSC wait times (Konrad Dybcio)   
  - media: pvrusb2: fix pvr2_stream_callback casts (Arnd Bergmann)   
  - media: pvrusb2: remove redundant NULL check (Daniil Dulov)   
  - media: go7007: add check of return value of go7007_read_addr() (Daniil Dulov)   
  - media: imx: csc/scaler: fix v4l2_ctrl_handler memory leak (Lucas Stach)   
  - perf stat: Avoid metric-only segv (Ian Rogers)   
  - ALSA: seq: fix function cast warnings (Takashi Iwai)   
  - drm/radeon/ni: Fix wrong firmware size logging in ni_init_microcode() (Nikita Zhandarovich)   
  - perf thread_map: Free strlist on normal path in thread_map__new_by_tid_str() (Yang Jihong)   
  - PCI: switchtec: Fix an error handling path in switchtec_pci_probe() (Christophe JAILLET)   
  - quota: Fix rcu annotations of inode dquot pointers (Jan Kara)   
  - quota: Fix potential NULL pointer dereference (Wang Jianjian)   
  - quota: simplify drop_dquot_ref() (Baokun Li)   
  - clk: qcom: reset: Ensure write completion on reset de/assertion (Konrad Dybcio)   
  - clk: qcom: reset: Commonize the de/assert functions (Konrad Dybcio)   
  - clk: qcom: reset: support resetting multiple bits (Robert Marko)   
  - clk: qcom: reset: Allow specifying custom reset delay (Stephan Gerhold)   
  - media: edia: dvbdev: fix a use-after-free (Zhipeng Lu)   
  - media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity (Zhipeng Lu)   
  - media: v4l2-tpg: fix some memleaks in tpg_alloc (Zhipeng Lu)   
  - media: em28xx: annotate unchecked call to media_device_register() (Nikita Zhandarovich)   
  - perf evsel: Fix duplicate initialization of data->id in evsel__parse_sample() (Yang Jihong)   
  - drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()' (Srinivasan Shanmugam)   
  - perf record: Fix possible incorrect free in record__switch_output() (Yang Jihong)   
  - PCI/DPC: Print all TLP Prefixes, not just the first (Ilpo Järvinen)   
  - media: tc358743: register v4l2 async device only after successful setup (Alexander Stein)   
  - dmaengine: tegra210-adma: Update dependency to ARCH_TEGRA (Peter Robinson)   
  - drm/rockchip: lvds: do not overwrite error code (Quentin Schulz)   
  - drm: Don't treat 0 as -1 in drm_fixp2int_ceil (Harry Wentland)   
  - drm/rockchip: inno_hdmi: Fix video timing (Alex Bee)   
  - drm/tegra: output: Fix missing i2c_put_adapter() in the error handling paths of tegra_output_probe() (Christophe JAILLET)   
  - drm/tegra: dsi: Fix missing pm_runtime_disable() in the error handling path of tegra_dsi_probe() (Christophe JAILLET)   
  - drm/tegra: dsi: Fix some error handling paths in tegra_dsi_probe() (Christophe JAILLET)   
  - drm/tegra: dsi: Make use of the helper function dev_err_probe() (Cai Huoqing)   
  - gpu: host1x: mipi: Update tegra_mipi_request() to be node based (Sowjanya Komatineni)   
  - drm/tegra: dsi: Add missing check for of_find_device_by_node (Chen Ni)   
  - dm: call the resume method on internal suspend (Mikulas Patocka)   
  - dm raid: fix false positive for requeue needed during reshape (Ming Lei)   
  - nfp: flower: handle acti_netdevs allocation failure (Duoming Zhou)   
  - net/x25: fix incorrect parameter validation in the x25_getsockopt() function (Gavrilov Ilia)   
  - net: kcm: fix incorrect parameter validation in the kcm_getsockopt) function (Gavrilov Ilia)   
  - udp: fix incorrect parameter validation in the udp_lib_getsockopt() function (Gavrilov Ilia)   
  - l2tp: fix incorrect parameter validation in the pppol2tp_getsockopt() function (Gavrilov Ilia)   
  - tcp: fix incorrect parameter validation in the do_tcp_getsockopt() function (Gavrilov Ilia)   
  - net: hns3: fix port duplex configure error in IMP reset (Jie Wang)   
  - net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv() (Eric Dumazet)   
  - ipv6: fib6_rules: flush route cache when rule is changed (Shiming Cheng)   
  - bpf: Fix stackmap overflow check on 32-bit arches (Toke Høiland-Jørgensen)   
  - bpf: Fix hashtab overflow check on 32-bit arches (Toke Høiland-Jørgensen)   
  - sr9800: Add check for usbnet_get_endpoints (Chen Ni)   
  - Bluetooth: hci_core: Fix possible buffer overflow (Luiz Augusto von Dentz)   
  - Bluetooth: Remove superfluous call to hci_conn_check_pending() (Jonas Dreßler)   
  - igb: Fix missing time sync events (Vinicius Costa Gomes)   
  - igb: move PEROUT and EXTTS isr logic to separate functions (Ruud Bos)   
  - mmc: wmt-sdmmc: remove an incorrect release_mem_region() call in the .remove function (Christophe JAILLET)   
  - SUNRPC: fix some memleaks in gssx_dec_option_array (Zhipeng Lu)   
  - x86, relocs: Ignore relocations in .notes section (Kees Cook)   
  - ACPI: scan: Fix device check notification handling (Rafael J. Wysocki)   
  - ARM: dts: imx6dl-yapp4: Move the internal switch PHYs under the switch node (Michal Vokáč)   
  - ARM: dts: imx6dl-yapp4: Fix typo in the QCA switch register address (Michal Vokáč)   
  - ARM: dts: imx6dl-yapp4: Move phy reset into switch node (Michal Vokáč)   
  - ARM: dts: arm: realview: Fix development chip ROM compatible value (Geert Uytterhoeven)   
  - net: ena: Remove ena_select_queue (Kamal Heib)   
  - net: ena: cosmetic: fix line break issues (Arthur Kiyanovski)   
  - wifi: brcmsmac: avoid function pointer casts (Arnd Bergmann)   
  - iommu/amd: Mark interrupt as managed (Mario Limonciello)   
  - bus: tegra-aconnect: Update dependency to ARCH_TEGRA (Peter Robinson)   
  - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Armin Wolf)   
  - arm64: dts: qcom: msm8996: Pad addresses (Bjorn Andersson)   
  - arm64: dts: qcom: msm8996: Move regulator consumers to db820c (Bjorn Andersson)   
  - arm64: dts: qcom: msm8996: Use node references in db820c (Bjorn Andersson)   
  - arm64: dts: qcom: db820c: Move non-soc entries out of /soc (Bjorn Andersson)   
  - bpf: Mark bpf_spin_{lock,unlock}() helpers with notrace correctly (Yonghong Song)   
  - bpf: Factor out bpf_spin_lock into helpers. (Alexei Starovoitov)   
  - arm64: dts: mediatek: mt7622: add missing "device_type" to memory nodes (Rafał Miłecki)   
  - wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer() (Zhipeng Lu)   
  - net: blackhole_dev: fix build warning for ethh set but not used (Breno Leitao)   
  - af_unix: Annotate data-race of gc_in_progress in wait_for_unix_gc(). (Kuniyuki Iwashima)   
  - sock_diag: annotate data-races around sock_diag_handlers[family] (Eric Dumazet)   
  - wifi: mwifiex: debugfs: Drop unnecessary error check for debugfs_create_dir() (Jinjie Ruan)   
  - wifi: wilc1000: fix RCU usage in connect path (Alexis Lothoré)   
  - wifi: wilc1000: fix declarations ordering (Alexis Lothoré)   
  - wifi: b43: Disable QoS for bcm4331 (Rahul Rameshbabu)   
  - wifi: b43: Stop correct queue in DMA worker when QoS is disabled (Rahul Rameshbabu)   
  - b43: main: Fix use true/false for bool type (Saurav Girepunje)   
  - wifi: b43: Stop/wake correct queue in PIO Tx path when QoS is disabled (Rahul Rameshbabu)   
  - wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled (Rahul Rameshbabu)   
  - b43: dma: Fix use true/false for bool type variable (Saurav Girepunje)   
  - wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() (Xingyuan Mo)   
  - timekeeping: Fix cross-timestamp interpolation for non-x86 (Peter Hilber)   
  - timekeeping: Fix cross-timestamp interpolation corner case decision (Peter Hilber)   
  - timekeeping: Fix cross-timestamp interpolation on counter wrap (Peter Hilber)   
  - aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts (Chun-Yi Lee)   
  - fs/select: rework stack allocation hack for clang (Arnd Bergmann)   
  - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Nikita Zhandarovich)   
  - ASoC: wm8962: Fix up incorrect error message in wm8962_set_fll (Stuart Henderson)   
  - ASoC: wm8962: Enable both SPKOUTR_ENA and SPKOUTL_ENA in mono mode (Stuart Henderson)   
  - ASoC: wm8962: Enable oscillator if selecting WM8962_FLL_OSC (Stuart Henderson)   
  - Input: gpio_keys_polled - suppress deferred probe error for gpio (Uwe Kleine-König)   
  - ASoC: Intel: bytcr_rt5640: Add an extra entry for the Chuwi Vi8 tablet (Alban Boyé)   
  - firewire: core: use long bus reset on gap count error (Takashi Sakamoto)   
  - Bluetooth: rfcomm: Fix null-ptr-deref in rfcomm_check_security (Yuxuan Hu)   
  - scsi: mpt3sas: Prevent sending diag_reset when the controller is ready (Ranjan Kumar)   
  - btrfs: fix data race at btrfs_use_block_rsv() when accessing block reserve (Filipe Manana)   
  - dm-verity, dm-crypt: align "struct bvec_iter" correctly (Mikulas Patocka)   
  - block: sed-opal: handle empty atoms when parsing response (Greg Joyce)   
  - parisc/ftrace: add missing CONFIG_DYNAMIC_FTRACE check (Max Kellermann)   
  - net/iucv: fix the allocation size of iucv_path_table array (Alexander Gordeev)   
  - RDMA/mlx5: Relax DEVX access upon modify commands (Yishai Hadas)   
  - HID: multitouch: Add required quirk for Synaptics 0xcddc device (Manuel Fombuena)   
  - MIPS: Clear Cause.BD in instruction_pointer_set (Jiaxun Yang)   
  - x86/xen: Add some null pointer checking to smp.c (Kunwu Chan)   
  - ASoC: rt5645: Make LattePanda board DMI match more precise (Hans de Goede)   
  - selftests: tls: use exact comparison in recv_partial (Jakub Kicinski)   
  - LTS tag: v5.4.272 (Sherry Yang)   
  - serial: max310x: fix IO data corruption in batched operations (Jan Kundrát)   
  - serial: max310x: implement I2C support (Cosmin Tanislav)   
  - serial: max310x: make accessing revision id interface-agnostic (Cosmin Tanislav)   
  - regmap: Add bulk read/write callbacks into regmap_config (Marek Vasut)   
  - regmap: allow to define reg_update_bits for no bus configuration (Ansuel Smith)   
  - serial: max310x: Unprepare and disable clock in error path (Andy Shevchenko)   
  - getrusage: use sig->stats_lock rather than lock_task_sighand() (Oleg Nesterov)   
  - getrusage: use __for_each_thread() (Oleg Nesterov)   
  - getrusage: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Oleg Nesterov)   
  - getrusage: add the "signal_struct *sig" local variable (Oleg Nesterov)   
  - y2038: rusage: use __kernel_old_timeval (Arnd Bergmann)   
  - Input: i8042 - fix strange behavior of touchpad on Clevo NS70PU (Werner Sembach)   
  - serial: max310x: prevent infinite while() loop in port startup (Hugo Villeneuve)   
  - serial: max310x: use a separate regmap for each port (Cosmin Tanislav)   
  - serial: max310x: use regmap methods for SPI batch operations (Cosmin Tanislav)   
  - serial: max310x: Make use of device properties (Andy Shevchenko)   
  - serial: max310x: fail probe if clock crystal is unstable (Hugo Villeneuve)   
  - serial: max310x: Try to get crystal clock rate from property (Andy Shevchenko)   
  - serial: max310x: Use devm_clk_get_optional() to get the input clock (Andy Shevchenko)   
  - um: allow not setting extra rpaths in the linux binary (Johannes Berg)   
  - selftests: mm: fix map_hugetlb failure on 64K page size systems (Nico Pache)   
  - netrom: Fix data-races around sysctl_net_busy_read (Jason Xing)   
  - netrom: Fix a data-race around sysctl_netrom_link_fails_count (Jason Xing)   
  - netrom: Fix a data-race around sysctl_netrom_routing_control (Jason Xing)   
  - netrom: Fix a data-race around sysctl_netrom_transport_no_activity_timeout (Jason Xing)   
  - netrom: Fix a data-race around sysctl_netrom_transport_requested_window_size (Jason Xing)   
  - netrom: Fix a data-race around sysctl_netrom_transport_busy_delay (Jason Xing)   
  - netrom: Fix a data-race around sysctl_netrom_transport_acknowledge_delay (Jason Xing)   
  - netrom: Fix a data-race around sysctl_netrom_transport_maximum_tries (Jason Xing)   
  - netrom: Fix a data-race around sysctl_netrom_transport_timeout (Jason Xing)   
  - netrom: Fix data-races around sysctl_netrom_network_ttl_initialiser (Jason Xing)   
  - netrom: Fix a data-race around sysctl_netrom_obsolescence_count_initialiser (Jason Xing)   
  - netrom: Fix a data-race around sysctl_netrom_default_path_quality (Jason Xing)   
  - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Lena Wang)   
  - net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (Eric Dumazet)   
  - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (Rand Deeb)   
  - geneve: make sure to pull inner header in geneve_rx() (Eric Dumazet)   
  - ixgbe: {dis, en}able irqs in ixgbe_txrx_ring_{dis, en}able (Maciej Fijalkowski)   
  - net: lan78xx: fix runtime PM count underflow on link stop (Oleksij Rempel)   
  - lan78xx: Fix race conditions in suspend/resume handling (John Efstathiades)   
  - lan78xx: Fix partial packet errors on suspend/resume (John Efstathiades)   
  - lan78xx: Add missing return code checks (John Efstathiades)   
  - lan78xx: Fix white space and style issues (John Efstathiades)   
  - LTS tag: v5.4.271 (Sherry Yang)   
  - gpio: 74x164: Enable output pins after registers are reset (Arturas Moskvinas)   
  - fs,hugetlb: fix NULL pointer dereference in hugetlbs_fill_super (Oscar Salvador)   
  - cachefiles: fix memory leak in cachefiles_add_cache() (Baokun Li)   
  - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Paolo Bonzini)   
  - mmc: core: Fix eMMC initialization with 1-bit bus connection (Ivan Semenov)   
  - dmaengine: fsl-qdma: init irq after reg initialization (Curtis Klein)   
  - dmaengine: fsl-qdma: fix SoC may hang on 16 byte unaligned read (Peng Ma)   
  - btrfs: dev-replace: properly validate device names (David Sterba)   
  - wifi: nl80211: reject iftype change with mesh ID change (Johannes Berg)   
  - gtp: fix use-after-free and null-ptr-deref in gtp_newlink() (Alexander Ofitserov)   
  - ALSA: Drop leftover snd-rtctimer stuff from Makefile (Takashi Iwai)   
  - power: supply: bq27xxx-i2c: Do not free non existing IRQ (Hans de Goede)   
  - efi/capsule-loader: fix incorrect allocation size (Arnd Bergmann)   
  - rtnetlink: fix error logic of IFLA_BRIDGE_FLAGS writing back (Lin Ma)   
  - Bluetooth: Enforce validation on max value of connection interval (Kai-Heng Feng)   
  - Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST (Luiz Augusto von Dentz)   
  - Bluetooth: Avoid potential use-after-free in hci_error_reset (Ying Hsu)   
  - net: usb: dm9601: fix wrong return value in dm9601_mdio_read (Javier Carrasco)   
  - lan78xx: enable auto speed configuration for LAN7850 if no EEPROM is detected (Oleksij Rempel)   
  - ipv6: fix potential "struct net" leak in inet6_rtm_getaddr() (Eric Dumazet)   
  - tun: Fix xdp_rxq_info's queue_index when detaching (Yunjian Wang)   
  - net: ip_tunnel: prevent perpetual headroom growth (Florian Westphal)   
  - netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter (Ryosuke Yasuoka)   
  - LTS tag: v5.4.270 (Sherry Yang)   
  - fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio (Bart Van Assche)   
  - drm/syncobj: call drm_syncobj_fence_add_wait when WAIT_AVAILABLE flag is set (Erik Kurzinger)   
  - drm/syncobj: make lockdep complain on WAIT_FOR_SUBMIT v3 (Christian König)   
  - tls: stop recv() if initial process_rx_list gave us non-DATA (Sabrina Dubroca)   
  - tls: rx: drop pointless else after goto (Jakub Kicinski)   
  - tls: rx: jump to a more appropriate label (Jakub Kicinski)   
  - s390: use the correct count for __iowrite64_copy() (Jason Gunthorpe)   
  - packet: move from strlcpy with unused retval to strscpy (Wolfram Sang)   
  - ipv6: sr: fix possible use-after-free and null-ptr-deref (Vasiliy Kovalev)   
  - afs: Increase buffer size in afs_update_volume_status() (Daniil Dulov)   
  - ipv6: properly combine dev_base_seq and ipv6.dev_addr_genid (Eric Dumazet)   
  - ipv4: properly combine dev_base_seq and ipv4.dev_addr_genid (Eric Dumazet)   
  - nouveau: fix function cast warnings (Arnd Bergmann)   
  - scsi: jazz_esp: Only build if SCSI core is builtin (Randy Dunlap)   
  - bpf, scripts: Correct GPL license name (Gianmarco Lusvardi)   
  - scripts/bpf: teach bpf_helpers_doc.py to dump BPF helper definitions (Andrii Nakryiko)   
  - RDMA/srpt: fix function pointer cast warnings (Arnd Bergmann)   
  - RDMA/srpt: Make debug output more detailed (Bart Van Assche)   
  - RDMA/bnxt_re: Return error for SRQ resize (Kalesh AP)   
  - IB/hfi1: Fix a memleak in init_credit_return (Zhipeng Lu)   
  - usb: roles: don't get/set_role() when usb_role_switch is unregistered (Xu Yang)   
  - usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs (Krishna Kurapati)   
  - usb: cdns3: fix memory double free when handle zero packet (Frank Li)   
  - usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable() (Frank Li)   
  - ARM: ep93xx: Add terminator to gpiod_lookup_table (Nikita Shubin)   
  - l2tp: pass correct message length to ip6_append_data (Tom Parkin)   
  - PCI/MSI: Prevent MSI hardware interrupt number truncation (Vidya Sagar)   
  - gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() (Vasiliy Kovalev)   
  - dm-crypt: don't modify the data when using authenticated encryption (Mikulas Patocka)   
  - IB/hfi1: Fix sdma.h tx->num_descs off-by-one error (Daniel Vacek)   
  - PCI: tegra: Fix OF node reference leak (Christophe JAILLET)   
  - PCI: tegra: Fix reporting GPIO error value (Pali Rohár)   
  - arm64: dts: qcom: msm8916: Fix typo in pronto remoteproc node (Sireesh Kodali)   
  - drm/amdgpu: Fix type of second parameter in trans_msg() callback (Nathan Chancellor)   
  - iomap: Set all uptodate bits for an Uptodate page (Matthew Wilcox (Oracle))   
  - dm-integrity: don't modify bio's immutable bio_vec in integrity_metadata() (Mikulas Patocka)   
  - x86/alternatives: Disable KASAN in apply_alternatives() (Kirill A. Shutemov)   
  - drm/amdgpu: Check for valid number of registers to read (Trek)   
  - Revert "drm/sun4i: dsi: Change the start delay calculation" (Icenowy Zheng)   
  - ALSA: hda/realtek - Enable micmute LED on and HP system (Kai-Heng Feng)   
  - selftests/bpf: Avoid running unprivileged tests with alignment requirements (Björn Töpel)   
  - net: bridge: clear bridge's private skb space on xmit (Nikolay Aleksandrov)   
  - spi: mt7621: Fix an error message in mt7621_spi_probe() (Christophe JAILLET)   
  - pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups (Miaoqian Lin)   
  - pinctrl: pinctrl-rockchip: Fix a bunch of kerneldoc misdemeanours (Lee Jones)   
  - tcp: add annotations around sk->sk_shutdown accesses (Eric Dumazet)   
  - tcp: return EPOLLOUT from tcp_poll only when notsent_bytes is half the limit (Soheil Hassas Yeganeh)   
  - tcp: factor out __tcp_close() helper (Paolo Abeni)   
  - pmdomain: renesas: r8a77980-sysc: CR7 must be always on (Geert Uytterhoeven)   
  - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Alexandra Winter)   
  - virtio-blk: Ensure no requests in virtqueues before deleting vqs. (Yi Sun)   
  - firewire: core: send bus reset promptly on gap count error (Takashi Sakamoto)   
  - scsi: lpfc: Use unsigned type for num_sge (Hannes Reinecke)   
  - hwmon: (coretemp) Enlarge per package core count limit (Zhang Rui)   
  - nvmet-fc: abort command when there is no binding (Daniel Wagner)   
  - netfilter: conntrack: check SCTP_CID_SHUTDOWN_ACK for vtag setting in sctp_new (Xin Long)   
  - ASoC: sunxi: sun4i-spdif: Add support for Allwinner H616 (Chen-Yu Tsai)   
  - nvmet-tcp: fix nvme tcp ida memory leak (Guixin Liu)   
  - regulator: pwm-regulator: Add validity checks in continuous .get_voltage (Martin Blumenstingl)   
  - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (Baokun Li)   
  - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (Baokun Li)   
  - ahci: add 43-bit DMA address quirk for ASMedia ASM1061 controllers (Lennert Buytenhek)   
  - ahci: asm1166: correct count of reported ports (Conrad Kostecki)   
  - fbdev: sis: Error out if pixclock equals zero (Fullway Wang)   
  - fbdev: savage: Error out if pixclock equals zero (Fullway Wang)   
  - wifi: mac80211: fix race condition on enabling fast-xmit (Felix Fietkau)   
  - wifi: cfg80211: fix missing interfaces when dumping (Michal Kazior)   
  - dmaengine: fsl-qdma: increase size of 'irq_name' (Vinod Koul)   
  - dmaengine: shdma: increase size of 'dev_id' (Vinod Koul)   
  - scsi: target: core: Add TMF to tmr_list handling (Dmitry Bogdanov)   
  - sched/rt: Disallow writing invalid values to sched_rt_period_us (Cyril Hrubis)   
  - sched/rt: Fix sysctl_sched_rr_timeslice intial value (Cyril Hrubis)   
  - userfaultfd: fix mmap_changing checking in mfill_atomic_hugetlb (Lokesh Gidra)   
  - nilfs2: replace WARN_ONs for invalid DAT metadata block requests (Ryusuke Konishi)   
  - sched/rt: sysctl_sched_rr_timeslice show default timeslice after reset (Cyril Hrubis)   
  - KVM: arm64: vgic-its: Test for valid IRQ in MOVALL handler (Oliver Upton)   
  - KVM: arm64: vgic-its: Test for valid IRQ in its_sync_lpi_pending_table() (Oliver Upton)


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.331.4.el7uek]
changelog:
  - net/mlx5: Brute force GFP_NOIO (Håkon Bugge)  [Orabug: 35436312]  
  - RDMA/mlx5: Brute force GFP_NOIO (Håkon Bugge)  [Orabug: 35436312]  
  - RDMA/cm: Brute force GFP_NOIO (Håkon Bugge)  [Orabug: 35436312]  
  - RDMA/cma: Brute force GFP_NOIO (Håkon Bugge)  [Orabug: 35436312]  
  - rds: Brute force GFP_NOIO (Håkon Bugge)  [Orabug: 35436312]  
  - workqueue: Inherit NOIO and NOFS alloc flags (Håkon Bugge)  [Orabug: 35436312]  
  - KVM: x86: Add BHI_NO (Daniel Sneddon)  [Orabug: 36496846]  {CVE-2024-2201} 
  - x86/bhi: Mitigate KVM by default (Pawan Gupta)  [Orabug: 36496846]  {CVE-2024-2201} 
  - x86/bhi: Add BHI mitigation knob (Pawan Gupta)  [Orabug: 36496846]  {CVE-2024-2201} 
  - x86/bhi: Enumerate Branch History Injection (BHI) bug (Pawan Gupta)  [Orabug: 36496846]  {CVE-2024-2201} 
  - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Daniel Sneddon)  [Orabug: 36496846]  {CVE-2024-2201} 
  - x86/bhi: Add support for clearing branch history at syscall entry (Pawan Gupta)  [Orabug: 36496846]  {CVE-2024-2201} 
  - x86/cpufeature: Add missing leaf enumeration (Daniel Sneddon)  [Orabug: 36496846]  {CVE-2024-2201} 
  - KVM: x86: Use a switch statement and macros in __feature_translate() (Jim Mattson)  [Orabug: 36496846]  {CVE-2024-2201} 
  - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Jim Mattson)  [Orabug: 36496846]  {CVE-2024-2201} 
  - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Sean Christopherson)  [Orabug: 36496846]  {CVE-2024-2201} 
  - x86/bugs: Use sysfs_emit() (Borislav Petkov)  [Orabug: 36496846]  {CVE-2024-2201} 
  - Documentation/hw-vuln: Update spectre doc (Lin Yujun)  [Orabug: 36496846]  {CVE-2024-2201} 
  - x86/speculation: Reorder SRSO and GDS functions (Alexandre Chartre)  [Orabug: 36496846]  {CVE-2024-2201} 
  - KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES (Jim Mattson)  [Orabug: 36496846]  {CVE-2024-2201} 
  - KVM: x86: Move reverse CPUID helpers to separate header file (Ricardo Koller)  [Orabug: 36496846]  {CVE-2024-2201} 
  - KVM: x86: Fix implicit enum conversion goof in scattered reverse CPUID code (Sean Christopherson)  [Orabug: 36496846]  {CVE-2024-2201} 
  - KVM: x86: Add support for reverse CPUID lookup of scattered features (Sean Christopherson)  [Orabug: 36496846]  {CVE-2024-2201} 
  - x86/msr: Define new bits in TSX_FORCE_ABORT MSR (Pawan Gupta)  [Orabug: 36496846]  {CVE-2024-2201} 
  - objtool: Add asm version of STACK_FRAME_NON_STANDARD (Josh Poimboeuf)  [Orabug: 36496846]  {CVE-2024-2201} 
  - objtool: Only include valid definitions depending on source file type (Julien Thierry)  [Orabug: 36496846]  {CVE-2024-2201}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.331.5.el7uek]
changelog:
  - hwmon: (opbmc) E6/AST2600 platform enabled (Jan Zdarek)  [Orabug: 36485646]  
  - rds/ib: Disable WARN_ON() when system is going down (Hans Westgaard Ry)  [Orabug: 36394488]  
  - rds/rdma: print connection up/down time while dropping/connecting (Juan Garcia)  [Orabug: 36264675]  
  - rds: ib: Use fastreg QP if conn is down and handle FRWR CQE timeout (Håkon Bugge)  [Orabug: 36236541]  
  - rds: ib: Tear down QP when FRWR WRs fails (Håkon Bugge)  [Orabug: 36236541]  
  - rds: ib: Poll fastreg CQ before destroying (Håkon Bugge)  [Orabug: 36236541]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.331.6.el7uek]
changelog:
  - mm/memory-failure: fix an incorrect use of tail pages (Liu Shixin)   
  - fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion (Bart Van Assche)   
  - ahci: asm1064: asm1166: don't limit reported ports (Conrad Kostecki)   
  - ahci: asm1064: correct count of reported ports (Andrey Jr. Melnikov)   
  - mmc: core: Fix switch on gp3 partition (Dominique Martinet)   
  - Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"" (Song Liu)   
  - serial: max310x: fix NULL pointer dereference in I2C instantiation (Hugo Villeneuve)   
  - bonding: rate-limit bonding driver inspect messages (Praveen Kumar Kannoju)  [Orabug: 36250568]  
  - rds/rdma: Fix congestion value for userspace consumption (Juan Garcia)  [Orabug: 36264652]  
  - rds: Include transport protocol name in rds-info -k output (Juan Garcia)  [Orabug: 36264652]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.331.7.el7uek]
changelog:
  - Revert "tracing/trigger: Fix to return error if failed to alloc snapshot" (Siddh Raman Pant)   
  - Revert "selftests: mm: fix map_hugetlb failure on 64K page size systems" (Harshit Mogalapalli)  [Orabug: 36584568]  
  - Revert "net/mlx5: Enable SW-defined RoCEv2 UDP source port" (Arumugam Kolappan)  [Orabug: 36530159]  
  - PCI: boot time optimization (Harman Kalra)  [Orabug: 36553666]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.332.1.el7uek]
changelog:
  - uek-rpm: ol7: Prevent vmlinux build ID mismatch (Stephen Brennan)  [Orabug: 35094286]  
  - uek-rpm: ol7: Remove fancy_debuginfo (Stephen Brennan)  [Orabug: 35094286]  
  - uek-rpm: ol8: Remove fancy_debuginfo (Stephen Brennan)  [Orabug: 35094286]  
  - Revert "Revert "uek-rpm: Don't recompute build-ids for kernel-uek-debuginfo"" (Stephen Brennan)  [Orabug: 35094286]  
  - genirq/cpuhotplug: Retry with cpu_online_mask when migration fails (Dongli Zhang)  [Orabug: 36378870]  
  - rds: Optimize rds_percpu_caches garbage-collection (Hans Westgaard Ry)  [Orabug: 36383439]  
  - rds: Add lfstack_pop_all (Hans Westgaard Ry)  [Orabug: 36383439]  
  - dmapool: create/destroy cleanup (Keith Busch)  [Orabug: 36483085]  
  - dmapool: link blocks across pages (Keith Busch)  [Orabug: 36483085]  
  - dmapool: don't memset on free twice (Keith Busch)  [Orabug: 36483085]  
  - dmapool: simplify freeing (Keith Busch)  [Orabug: 36483085]  
  - dmapool: consolidate page initialization (Keith Busch)  [Orabug: 36483085]  
  - dmapool: rearrange page alloc failure handling (Keith Busch)  [Orabug: 36483085]  
  - dmapool: move debug code to own functions (Keith Busch)  [Orabug: 36483085]  
  - dmapool: speedup DMAPOOL_DEBUG with init_on_alloc (Tony Battersby)  [Orabug: 36483085]  
  - dmapool: cleanup integer types (Tony Battersby)  [Orabug: 36483085]  
  - dmapool: use sysfs_emit() instead of scnprintf() (Tony Battersby)  [Orabug: 36483085]  
  - dmapool: remove checks for dev == NULL (Tony Battersby)  [Orabug: 36483085]  
  - mm/dmapool.c: revert "make dma pool to use kmalloc_node" (Christian König)  [Orabug: 36483085]  
  - mm/dmapool: use DEVICE_ATTR_RO macro (YueHaibing)  [Orabug: 36483085]  
  - mm/dmapool: switch from strlcpy to strscpy (Zhiyuan Dai)  [Orabug: 36483085]  
  - mm/dmapool: use might_alloc() (Daniel Vetter)  [Orabug: 36483085]  
  - mm/dmapool.c: replace hard coded function name with __func__ (Andy Shevchenko)  [Orabug: 36483085]  
  - mm/dmapool.c: replace open-coded list_for_each_entry_safe() (Andy Shevchenko)  [Orabug: 36483085]  
  - mm/dmapool.c: micro-optimisation remove unnecessary branch (Mateusz Nosek)  [Orabug: 36483085]  
  - mm: extract might_alloc() debug check (Daniel Vetter)  [Orabug: 36483085]  
  - exec, elf: ignore malformed note segments (Anthony Yznaga)  [Orabug: 36524977]  
  - io_uring: ensure '0' is returned on file registration success (Jens Axboe)  [Orabug: 36544122]  
  - io_uring: don't save/restore iowait state (Jens Axboe)  [Orabug: 36544122]  
  - io_uring: drop any code related to SCM_RIGHTS (Jens Axboe)  [Orabug: 36544122]  
  - io_uring/unix: drop usage of io_uring socket (Jens Axboe)  [Orabug: 36544122]  
  - io_uring/rw: ensure io->bytes_done is always initialized (Jens Axboe)  [Orabug: 36544122]  
  - io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid (Jens Axboe)  [Orabug: 36544122]  
  - RDMA/cm: Print the old state when cm_destroy_id gets timeout (Mark Zhang)  [Orabug: 36546712]  
  - igb: free up irq resources in device shutdown path. (Imran Khan)  [Orabug: 36547250]  
  - hwmon: (k10temp) Check range scale when CUR_TEMP register is read-write (Babu Moger)  [Orabug: 36550305]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.332.2.el7uek]
changelog:
  - net-sysfs: initialize uid and gid before calling net_ns_get_ownership (Xin Long)  [Orabug: 33937964]  
  - sysfs: fix static inline declaration of sysfs_groups_change_owner() (Christian Brauner)  [Orabug: 33937964]  
  - net: fix sysfs permssions when device changes network namespace (Christian Brauner)  [Orabug: 33937964]  
  - net-sysfs: add queue_change_owner() (Christian Brauner)  [Orabug: 33937964]  
  - net-sysfs: add netdev_change_owner() (Christian Brauner)  [Orabug: 33937964]  
  - drivers/base/power: add dpm_sysfs_change_owner() (Christian Brauner)  [Orabug: 33937964]  
  - device: add device_change_owner() (Christian Brauner)  [Orabug: 33937964]  
  - sysfs: add sysfs_change_owner() (Christian Brauner)  [Orabug: 33937964]  
  - sysfs: add sysfs_group{s}_change_owner() (Christian Brauner)  [Orabug: 33937964]  
  - sysfs: add sysfs_link_change_owner() (Christian Brauner)  [Orabug: 33937964]  
  - sysfs: add sysfs_file_change_owner() (Christian Brauner)  [Orabug: 33937964]  
  - kallsyms: add kallsyms_seqs_of_names to list of special symbols (Arnd Bergmann)  [Orabug: 36475636]  
  - kallsyms: Reduce the memory occupied by kallsyms_seqs_of_names[] (Zhen Lei)  [Orabug: 36475636]  
  - kallsyms: Improve the performance of kallsyms_lookup_name() (Saeed Mirzamohammadi)  [Orabug: 36475636]  
  - kallsyms: strip ThinLTO hashes from static functions (Sami Tolvanen)  [Orabug: 36475636]  
  - kallsyms: Skip the name search for empty string (Jiri Olsa)  [Orabug: 36475636]  
  - RDMA/mlx5: Fix port number for counter query in multi-port configuration (Michael Guralnik)  [Orabug: 36545979]  
  - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Josh Poimboeuf)  [Orabug: 36584737]  
  - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Josh Poimboeuf)  [Orabug: 36584737]  
  - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Josh Poimboeuf)  [Orabug: 36584737]  
  - x86/bugs: Fix BHI handling of RRSBA (Josh Poimboeuf)  [Orabug: 36584737]  
  - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Ingo Molnar)  [Orabug: 36584737]  
  - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Josh Poimboeuf)  [Orabug: 36584737]  
  - x86/bugs: Fix BHI documentation (Josh Poimboeuf)  [Orabug: 36584737]  
  - x86/bugs: Fix return type of spectre_bhi_state() (Daniel Sneddon)  [Orabug: 36584737]  
  - x86/bhi: Update BHI mitigation (Alexandre Chartre)  [Orabug: 36584737]  
  - x86/syscall: Don't force use of indirect calls for system calls (Linus Torvalds)  [Orabug: 36584737]  
  - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Josh Poimboeuf)  [Orabug: 36584737]  
  - uek-rpm: ol7: fix prod build with editbuildid (Stephen Brennan)  [Orabug: 36607867]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.332.3.el7uek]
changelog:
  - uek: kabi: Enable the size checks and fix broken APIs (Saeed Mirzamohammadi)  [Orabug: 36545483]  
  - uek: kabi: Introduce new APIs to check for size (Saeed Mirzamohammadi)  [Orabug: 36545483]  
  - RDS/IB: Remove incorrect clearing of RDS_IB_CQ_ERR in rds_ib_conn_path_shutdown_final() (Hans Westgaard Ry)  [Orabug: 36606170]  
  - igb: fix __free_irq warnings seen during module unload. (Imran Khan)  [Orabug: 36618478]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.332.4.el7uek]
changelog:
  - bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS (Matthew Wilcox (Oracle))   
  - usb: dwc2: host: Fix dereference issue in DDMA completion flow. (Minas Harutyunyan)   
  - Revert "usb: cdc-wdm: close race between read and workqueue" (Greg Kroah-Hartman)   
  - LTS tag: v5.4.274 (Sherry Yang)   
  - x86/cpu: Enable STIBP on AMD if Automatic IBRS is enabled (Kim Phillips)   
  - x86/cpu: Support AMD Automatic IBRS (Kim Phillips)   
  - firmware: meson_sm: fix to avoid potential NULL pointer dereference (Zhang Shurong)   
  - ip_gre: do not report erspan version on GRE interface (Hangbin Liu)   
  - erspan: Check IFLA_GRE_ERSPAN_VER is set. (William Tu)   
  - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Vasiliy Kovalev)   
  - Bluetooth: btintel: Fixe build regression (Luiz Augusto von Dentz)   
  - x86/alternative: Don't call text_poke() in lazy TLB mode (Juergen Gross)   
  - drm/i915/gt: Reset queue_priority_hint on parking (Chris Wilson)   
  - x86/mm/pat: fix VM_PAT handling in COW mappings (David Hildenbrand)   
  - virtio: reenable config if freezing device failed (David Hildenbrand)   
  - drm/vkms: call drm_atomic_helper_shutdown before drm_dev_put() (Guo Mengqi)   
  - tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc (Thadeu Lima de Souza Cascardo)   
  - netfilter: nf_tables: discard table flag update with pending basechain deletion (Pablo Neira Ayuso)   
  - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Pablo Neira Ayuso)   
  - netfilter: nf_tables: release batch on table validation from abort path (Pablo Neira Ayuso)   
  - netfilter: nf_tables: reject new basechain after table flag update (Pablo Neira Ayuso)   
  - fbmon: prevent division by zero in fb_videomode_from_videomode() (Roman Smirnov)   
  - fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2 (Aleksandr Burakov)   
  - usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined (Colin Ian King)   
  - usb: typec: tcpci: add generic tcpci fallback compatible (Marco Felsch)   
  - tools: iio: replace seekdir() in iio_generic_buffer (Petre Rodan)   
  - ktest: force $buildonly = 1 for 'make_warnings_file' test type (Ricardo B. Marliere)   
  - Input: allocate keycode for Display refresh rate toggle (Gergo Koteles)   
  - block: prevent division by zero in blk_rq_stat_sum() (Roman Smirnov)   
  - Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default" (Daniel Drake)   
  - SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int (Dai Ngo)   
  - drm/amd/display: Fix nanosec stat overflow (Aric Cyr)   
  - media: sta2x11: fix irq handler cast (Arnd Bergmann)   
  - isofs: handle CDs with bad root inode but good Joliet root directory (Alex Henrie)   
  - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (Justin Tee)   
  - sysv: don't call sb_bread() with pointers_lock held (Tetsuo Handa)   
  - Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails (Kunwu Chan)   
  - Bluetooth: btintel: Fix null ptr deref in btintel_read_version (Edward Adam Davis)   
  - btrfs: send: handle path ref underflow in header iterate_inode_ref() (David Sterba)   
  - btrfs: export: handle invalid inode or root reference in btrfs_get_parent() (David Sterba)   
  - btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks() (David Sterba)   
  - tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num() (Samasth Norway Ananda)   
  - ionic: set adminq irq affinity (Shannon Nelson)   
  - arm64: dts: rockchip: fix rk3399 hdmi ports node (Johan Jonker)   
  - arm64: dts: rockchip: fix rk3328 hdmi ports node (Johan Jonker)   
  - panic: Flush kernel log buffer at the end (John Ogness)   
  - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Harshit Mogalapalli)   
  - wifi: ath9k: fix LNA selection in ath_ant_try_scan() (Dmitry Antipov)   
  - s390/entry: align system call table on 8 bytes (Sumanth Korikkar)   
  - x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (Borislav Petkov (AMD))   
  - ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone (I Gede Agastya Darma Laksana)   
  - ata: sata_mv: Fix PCI device ID table declaration compilation warning (Arnd Bergmann)   
  - scsi: mylex: Fix sysfs buffer lengths (Arnd Bergmann)   
  - ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit (Arnd Bergmann)   
  - ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw (Stephen Lee)   
  - net: ravb: Always process TX descriptor ring (Paul Barker)   
  - erspan: make sure erspan_base_hdr is present in skb->head (Eric Dumazet)   
  - erspan: Add type I version 0 support. (William Tu)   
  - init: open /initrd.image with O_LARGEFILE (John Sperbeck)   
  - initramfs: switch initramfs unpacking to struct file based APIs (Christoph Hellwig)   
  - fs: add a vfs_fchmod helper (Christoph Hellwig)   
  - fs: add a vfs_fchown helper (Christoph Hellwig)   
  - staging: vc04_services: fix information leak in create_component() (Dan Carpenter)   
  - staging: vc04_services: changen strncpy() to strscpy_pad() (Arnd Bergmann)   
  - i40e: fix vf may be used uninitialized in this function warning (Aleksandr Loktionov)   
  - ipv6: Fix infinite recursion in fib6_dump_done(). (Kuniyuki Iwashima)   
  - selftests: reuseaddr_conflict: add missing new line at the end of the output (Jakub Kicinski)   
  - net: stmmac: fix rx queue priority assignment (Piotr Wejman)   
  - net/sched: act_skbmod: prevent kernel-infoleak (Eric Dumazet)   
  - bpf, sockmap: Prevent lock inversion deadlock in map delete elem (Jakub Sitnicki)   
  - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Ziyang Xuan)   
  - netfilter: nf_tables: flush pending destroy work before exit_net release (Pablo Neira Ayuso)   
  - mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations (Vlastimil Babka)   
  - vfio/platform: Create persistent IRQ handlers (Alex Williamson)   
  - vfio/pci: Create persistent INTx handler (Alex Williamson)   
  - vfio: Introduce interface to flush virqfd inject workqueue (Alex Williamson)   
  - vfio/pci: Lock external INTx masking ops (Alex Williamson)   
  - vfio/pci: Disable auto-enable of exclusive INTx IRQ (Alex Williamson)   
  - netfilter: nf_tables: disallow timeout for anonymous sets (Pablo Neira Ayuso)   
  - Bluetooth: Fix TOCTOU in HCI debugfs implementation (Bastien Nocera)   
  - Bluetooth: hci_event: set the conn encrypted before conn establishes (Hui Wang)   
  - r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d (Heiner Kallweit)   
  - dm integrity: fix out-of-range warning (Arnd Bergmann)   
  - tcp: properly terminate timers for kernel sockets (Eric Dumazet)   
  - ixgbe: avoid sleeping allocation in ixgbe_ipsec_vf_add_sa() (Przemek Kitszel)   
  - nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet (Ryosuke Yasuoka)   
  - USB: core: Fix deadlock in usb_deauthorize_interface() (Alan Stern)   
  - scsi: lpfc: Correct size for wqe for memset() (Muhammad Usama Anjum)   
  - scsi: qla2xxx: Fix command flush on cable pull (Quinn Tran)   
  - usb: udc: remove warning when queue disabled ep (yuan linyu)   
  - usb: dwc2: gadget: LPM flow fix (Minas Harutyunyan)   
  - usb: dwc2: host: Fix ISOC flow in DDMA mode (Minas Harutyunyan)   
  - usb: dwc2: host: Fix hibernation flow (Minas Harutyunyan)   
  - usb: dwc2: host: Fix remote wakeup from hibernation (Minas Harutyunyan)   
  - scsi: core: Fix unremoved procfs host directory regression (Guilherme G. Piccoli)   
  - ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs (Duoming Zhou)   
  - usb: cdc-wdm: close race between read and workqueue (Oliver Neukum)   
  - exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack() (Max Filippov)   
  - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Felix Fietkau)   
  - mm/migrate: set swap entry values of THP tail pages properly. (Zi Yan)   
  - vt: fix memory overlapping when deleting chars in the buffer (Yangxi Xiang)   
  - bounds: support non-power-of-two CONFIG_NR_CPUS (Matthew Wilcox (Oracle))   
  - powerpc: xor_vmx: Add '-mhard-float' to CFLAGS (Nathan Chancellor)   
  - efivarfs: Request at most 512 bytes for variable names (Tim Schumacher)   
  - perf/core: Fix reentry problem in perf_output_read_group() (Yang Jihong)   
  - loop: loop_set_status_from_info() check before assignment (Zhong Jinghua)   
  - loop: Check for overflow while configuring loop (Siddh Raman Pant)   
  - loop: Factor out configuring loop from status (Martijn Coenen)   
  - loop: Refactor loop_set_status() size calculation (Martijn Coenen)   
  - loop: Factor out setting loop device size (Martijn Coenen)   
  - loop: Remove sector_t truncation checks (Martijn Coenen)   
  - loop: Call loop_config_discard() only after new config is applied (Martijn Coenen)   
  - Revert "loop: Check for overflow while configuring loop" (Genjian Zhang)   
  - btrfs: allocate btrfs_ioctl_defrag_range_args on stack (Goldwyn Rodrigues)   
  - printk: Update @console_may_schedule in console_trylock_spinning() (John Ogness)   
  - xen/events: close evtchn after mapping cleanup (Maximilian Heyne)   
  - vt: fix unicode buffer corruption when deleting characters (Nicolas Pitre)   
  - tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled (Sherry Sun)   
  - usb: port: Don't try to peer unused USB ports based on location (Mathias Nyman)   
  - usb: gadget: ncm: Fix handling of zero block length packets (Krishna Kurapati)   
  - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Alan Stern)   
  - ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform (Kailang Yang)   
  - xfrm: Avoid clang fortify warning in copy_to_user_tmpl() (Nathan Chancellor)   
  - netfilter: nf_tables: reject constant set with timeout (Pablo Neira Ayuso)   
  - netfilter: nf_tables: disallow anonymous set with timeout flag (Pablo Neira Ayuso)   
  - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Pablo Neira Ayuso)   
  - comedi: comedi_test: Prevent timers rescheduling during deletion (Ian Abbott)   
  - dm snapshot: fix lockup in dm_exception_table_exit (Mikulas Patocka)   
  - x86/CPU/AMD: Update the Zenbleed microcode revisions (Borislav Petkov (AMD))   
  - nilfs2: prevent kernel bug at submit_bh_wbc() (Ryusuke Konishi)   
  - nilfs2: use a more common logging style (Joe Perches)   
  - nilfs2: fix failure to detect DAT corruption in btree and direct mappings (Ryusuke Konishi)   
  - memtest: use {READ,WRITE}_ONCE in memory scanning (Qiang Zhang)   
  - drm/vc4: hdmi: do not return negative values from .get_modes() (Jani Nikula)   
  - drm/imx/ipuv3: do not return negative values from .get_modes() (Jani Nikula)   
  - drm/exynos: do not return negative values from .get_modes() (Jani Nikula)   
  - s390/zcrypt: fix reference counting on zcrypt card objects (Harald Freudenberger)   
  - soc: fsl: qbman: Use raw spinlock for cgr_lock (Sean Anderson)   
  - soc: fsl: qbman: Add CGR update function (Sean Anderson)   
  - soc: fsl: qbman: Add helper for sanity checking cgr ops (Sean Anderson)   
  - soc: fsl: qbman: Always disable interrupts when taking cgr_lock (Sean Anderson)   
  - vfio/platform: Disable virqfds on cleanup (Alex Williamson)   
  - kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1 (Nathan Chancellor)   
  - speakup: Fix 8bit characters from direct synth (Samuel Thibault)   
  - slimbus: core: Remove usage of the deprecated ida_simple_xx() API (Christophe JAILLET)   
  - nvmem: meson-efuse: fix function pointer type mismatch (Jerome Brunet)   
  - firmware: meson_sm: Rework driver as a proper platform driver (Carlo Caione)   
  - hwmon: (amc6821) add of_match table (Josua Mayer)   
  - dm-raid: fix lockdep waring in "pers->hot_add_disk" (Yu Kuai)   
  - PCI/PM: Drain runtime-idle callbacks before driver removal (Rafael J. Wysocki)   
  - PCI: Drop pci_device_remove() test of pci_dev->driver (Uwe Kleine-König)   
  - btrfs: fix off-by-one chunk length calculation at contains_pending_extent() (Filipe Manana)   
  - fuse: don't unhash root (Miklos Szeredi)   
  - mmc: tmio: avoid concurrent runs of mmc_request_done() (Wolfram Sang)   
  - PM: sleep: wakeirq: fix wake irq warning in system suspend (Qingliang Li)   
  - USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M (Toru Katagiri)   
  - USB: serial: option: add MeiG Smart SLM320 product (Aurélien Jacobs)   
  - USB: serial: cp210x: add ID for MGP Instruments PDS100 (Christian Häggström)   
  - USB: serial: add device ID for VeriFone adapter (Cameron Williams)   
  - USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB (Daniel Vogelbacher)   
  - powerpc/fsl: Fix mfpmr build errors with newer binutils (Michael Ellerman)   
  - clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays (Gabor Juhos)   
  - clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays (Gabor Juhos)   
  - clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays (Gabor Juhos)   
  - PM: suspend: Set mem_sleep_current during kernel command line setup (Maulik Shah)   
  - parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds (Guenter Roeck)   
  - parisc: Fix csum_ipv6_magic on 64-bit systems (Guenter Roeck)   
  - parisc: Fix csum_ipv6_magic on 32-bit systems (Guenter Roeck)   
  - parisc: Fix ip_fast_csum (Guenter Roeck)   
  - parisc: Do not hardcode registers in checksum functions (Helge Deller)   
  - mtd: rawnand: meson: fix scrambling mode value in command macro (Arseniy Krasnov)   
  - ubi: correct the calculation of fastmap size (Zhang Yi)   
  - ubi: Check for too small LEB size in VTBL code (Richard Weinberger)   
  - ubifs: Set page uptodate in the correct place (Matthew Wilcox (Oracle))   
  - fat: fix uninitialized field in nostale filehandles (Jan Kara)   
  - ext4: correct best extent lstart adjustment logic (Baokun Li)   
  - selftests/mqueue: Set timeout to 180 seconds (SeongJae Park)   
  - crypto: qat - resolve race condition during AER recovery (Damian Muszynski)   
  - crypto: qat - fix double free during reset (Svyatoslav Pankratov)   
  - sparc: vDSO: fix return value of __setup handler (Randy Dunlap)   
  - sparc64: NMI watchdog: fix return value of __setup handler (Randy Dunlap)   
  - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson)   
  - media: xc4000: Fix atomicity violation in xc4000_get_frequency (Gui-Dong Han)   
  - arm: dts: marvell: Fix maxium->maxim typo in brownstone dts (Duje Mihanović)   
  - ARM: dts: mmp2-brownstone: Don't redeclare phandle references (Lubomir Rintel)   
  - smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity() (Roberto Sassu)   
  - smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr() (Roberto Sassu)   
  - clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd (Amit Pundir)   
  - media: staging: ipu3-imgu: Set fields before media_entity_pads_init() (Hidenori Kobayashi)   
  - wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach (Zheng Wang)   
  - timers: Use del_timer_sync() even on UP (Thomas Gleixner)   
  - timers: Update kernel-doc for various functions (Thomas Gleixner)   
  - amdkfd: use calloc instead of kzalloc to avoid integer overflow (Dave Airlie)


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.332.5.1.el7uek]
changelog:
  - net/rds: mod reconnect delay on sendmsg() (Sharath Srinivasan)  [Orabug: 36685235]  
  - net/rds: Extend exponential backoff for rds reconnects (Sharath Srinivasan)  [Orabug: 36685235]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.333.1.el7uek]
changelog:
  - net/rds: Get RDS statistics for each possible CPU (Anand Khoje)  [Orabug: 35830449]  
  - net/rds: mod reconnect delay on sendmsg() (Sharath Srinivasan)  [Orabug: 36307093]  
  - net/rds: Extend exponential backoff for rds reconnects (Sharath Srinivasan)  [Orabug: 36307093]  
  - RDMA/cm: Use RCU synchronization mechanism to protect cm_id_private xa_load() (Danit Goldberg)  [Orabug: 36375215]  
  - uek-rpm: Enable FUNCTION_GRAPH_RETVAL in UEK6 (Jianfeng Wang)  [Orabug: 36460675]  
  - fgraph: Add declaration of "struct fgraph_ret_regs" (Steven Rostedt (Google))  [Orabug: 36460675]  
  - x86/ftrace: Enable HAVE_FUNCTION_GRAPH_RETVAL (Donglin Peng)  [Orabug: 36460675]  
  - arm64: ftrace: Enable HAVE_FUNCTION_GRAPH_RETVAL (Donglin Peng)  [Orabug: 36460675]  
  - tracing: Add documentation for funcgraph-retval and funcgraph-retval-hex (Donglin Peng)  [Orabug: 36460675]  
  - function_graph: Support recording and printing the return value of function (Donglin Peng)  [Orabug: 36460675]  
  - fgraph: Make overruns 4 bytes in graph stack structure (Steven Rostedt (VMware))  [Orabug: 36460675]  
  - block: fix io util% for exadata disk with 1 hw queue (Gulam Mohamed)  [Orabug: 36511453]  
  - Revert "Use inflight IO in io acct of high latency devices" (Gulam Mohamed)  [Orabug: 36511453]  
  - kprobe/ftrace: bail out if ftrace was killed (Stephen Brennan)  [Orabug: 36572635]  
  - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (Dongli Zhang)  [Orabug: 36592398]  
  - x86/returnthunk: Allow different return thunks (Peter Zijlstra)  [Orabug: 36628382]  
  - tcp: Fix data-races around sysctl_tcp_fastopen_blackhole_timeout. (Kuniyuki Iwashima)  [Orabug: 36637454]  
  - tcp: disable TFO blackhole logic by default (Wei Wang)  [Orabug: 36637454]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.333.2.el7uek]
changelog:
  - slub: use count_partial_free_approx() in slab_out_of_memory() (Jianfeng Wang)  [Orabug: 36655469]  
  - slub: introduce count_partial_free_approx() (Jianfeng Wang)  [Orabug: 36655469]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.333.3.el7uek]
changelog:
  - LTS tag: v5.4.277 (Sherry Yang)   
  - docs: kernel_include.py: Cope with docutils 0.21 (Akira Yokosawa)   
  - serial: kgdboc: Fix NMI-safety problems from keyboard reset code (Daniel Thompson)   
  - usb: typec: ucsi: displayport: Fix potential deadlock (Heikki Krogerus)   
  - drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper() (Srinivasan Shanmugam)   
  - arm64: dts: qcom: Fix 'interrupt-map' parent address cells (Rob Herring)   
  - firmware: arm_scmi: Harden accesses to the reset domains (Cristian Marussi)   
  - smb: client: fix potential OOBs in smb2_parse_contexts() (Paulo Alcantara)   
  - net: bcmgenet: synchronize UMAC_CMD access (Doug Berger)   
  - net: bcmgenet: synchronize use of bcmgenet_set_rx_mode() (Doug Berger)   
  - net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access (Doug Berger)   
  - net: bcmgenet: keep MAC in reset until PHY is up (Doug Berger)   
  - Revert "net: bcmgenet: use RGMII loopback for MAC reset" (Doug Berger)   
  - ext4: fix bug_on in __es_tree_search (Baokun Li)   
  - pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin() (Sergey Shtylyov)   
  - LTS tag: v5.4.276 (Sherry Yang)   
  - pinctrl: mediatek: paris: Fix PIN_CONFIG_INPUT_SCHMITT_ENABLE readback (Chen-Yu Tsai)   
  - pinctrl: mediatek: remove set but not used variable 'e' (YueHaibing)   
  - pinctrl: mediatek: Fix some off by one bugs (Dan Carpenter)   
  - pinctrl: mediatek: Fix fallback behavior for bias_set_combo (Hsin-Yi Wang)   
  - regulator: core: fix debugfs creation regression (Johan Hovold)   
  - net: fix out-of-bounds access in ops_init (Thadeu Lima de Souza Cascardo)   
  - drm/vmwgfx: Fix invalid reads in fence signaled events (Zack Rusin)   
  - dyndbg: fix old BUG_ON in >control parser (Jim Cromie)   
  - tipc: fix UAF in error path (Paolo Abeni)   
  - usb: gadget: f_fs: Fix a race condition when processing setup packets. (Chris Wulff)   
  - usb: gadget: composite: fix OS descriptors w_value logic (Peter Korsgaard)   
  - firewire: nosy: ensure user_length is taken into account when fetching packet contents (Thanassis Avgerinos)   
  - net: qede: use return from qede_parse_flow_attr() for flower (Asbjørn Sloth Tønnesen)   
  - net: qede: sanitize 'rc' in qede_add_tc_flower_fltr() (Asbjørn Sloth Tønnesen)   
  - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (Eric Dumazet)   
  - net: bridge: fix corrupted ethernet header on multicast-to-unicast (Felix Fietkau)   
  - phonet: fix rtm_phonet_notify() skb allocation (Eric Dumazet)   
  - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Roded Zats)   
  - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (Duoming Zhou)   
  - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (Duoming Zhou)   
  - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (Kuniyuki Iwashima)   
  - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (Eric Dumazet)   
  - xfrm: Preserve vlan tags for transport mode software GRO (Paul Davey)   
  - pinctrl: mediatek: Fix fallback call path (Hsin-Yi Wang)   
  - net:usb:qmi_wwan: support Rolling modules (Vanillan Wang)   
  - fs/9p: drop inodes immediately on non-.L too (Joakim Sindholt)   
  - clk: Don't hold prepare_lock when calling kref_put() (Stephen Boyd)   
  - gpio: crystalcove: Use -ENOTSUPP consistently (Andy Shevchenko)   
  - gpio: wcove: Use -ENOTSUPP consistently (Andy Shevchenko)   
  - 9p: explicitly deny setlease attempts (Jeff Layton)   
  - fs/9p: translate O_TRUNC into OTRUNC (Joakim Sindholt)   
  - fs/9p: only translate RWX permissions for plain 9P2000 (Joakim Sindholt)   
  - selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior (John Stultz)   
  - MIPS: scall: Save thread_info.syscall unconditionally on entry (Jiaxun Yang)   
  - gpu: host1x: Do not setup DMA for virtual devices (Thierry Reding)   
  - scsi: target: Fix SELinux error when systemd-modules loads the target module (Maurizio Lombardi)   
  - btrfs: always clear PERTRANS metadata during commit (Boris Burkov)   
  - btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve (Boris Burkov)   
  - tools/power turbostat: Fix Bzy_MHz documentation typo (Peng Liu)   
  - tools/power turbostat: Fix added raw MSR output (Doug Smythies)   
  - firewire: ohci: mask bus reset interrupts between ISR and bottom half (Adam Goldman)   
  - ata: sata_gemini: Check clk_enable() result (Chen Ni)   
  - net: bcmgenet: Reset RBUF on first open (Phil Elwell)   
  - ALSA: line6: Zero-initialize message buffers (Takashi Iwai)   
  - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (Saurav Kashyap)   
  - net: mark racy access on sk->sk_rcvbuf (linke li)   
  - wifi: cfg80211: fix rdev_dump_mpp() arguments order (Igor Artemiev)   
  - wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc (Jeff Johnson)   
  - gfs2: Fix invalid metadata access in punch_hole (Andrew Price)   
  - scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic (Justin Tee)   
  - clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change (Jernej Skrabec)   
  - tipc: fix a possible memleak in tipc_buf_append (Xin Long)   
  - net: bridge: fix multicast-to-unicast with fraglist GSO (Felix Fietkau)   
  - net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341 (Marek Behún)   
  - net: dsa: mv88e6xxx: Add number of MACs in the ATU (Andrew Lunn)   
  - net: qede: use return from qede_parse_flow_attr() for flow_spec (Asbjørn Sloth Tønnesen)   
  - net l2tp: drop flow hash on forward (David Bauer)   
  - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). (Kuniyuki Iwashima)   
  - bna: ensure the copied buf is NUL terminated (Bui Quang Minh)   
  - s390/mm: Fix clearing storage keys for huge pages (Claudio Imbrenda)   
  - s390/mm: Fix storage key clearing for guest huge pages (Claudio Imbrenda)   
  - pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map() (Zeng Heng)   
  - power: rt9455: hide unused rt9455_boost_voltage_values (Arnd Bergmann)   
  - nfs: Handle error of rpc_proc_register() in nfs_net_init(). (Kuniyuki Iwashima)   
  - nfs: make the rpc_stat per net namespace (Josef Bacik)   
  - nfs: expose /proc/net/sunrpc/nfs in net namespaces (Josef Bacik)   
  - sunrpc: add a struct rpc_stats arg to rpc_create_args (Josef Bacik)   
  - pinctrl: mediatek: paris: Rework support for PIN_CONFIG_{INPUT,OUTPUT}_ENABLE (Chen-Yu Tsai)   
  - pinctrl: mediatek: paris: Rework mtk_pinconf_{get,set} switch/case logic (Chen-Yu Tsai)   
  - pinctrl: mediatek: paris: Fix PIN_CONFIG_BIAS_* readback (Chen-Yu Tsai)   
  - pinctrl: mediatek: remove shadow variable declaration (Light Hsieh)   
  - pinctrl: mediatek: Backward compatible to previous Mediatek's bias-pull usage (Light Hsieh)   
  - pinctrl: mediatek: Refine mtk_pinconf_get() (Light Hsieh)   
  - pinctrl: mediatek: Refine mtk_pinconf_get() and mtk_pinconf_set() (Light Hsieh)   
  - pinctrl: mediatek: Supporting driving setting without mapping current to register value (Light Hsieh)   
  - pinctrl: mediatek: Check gpio pin number and use binary search in mtk_hw_pin_field_lookup() (Light Hsieh)   
  - pinctrl: core: delete incorrect free in pinctrl_enable() (Dan Carpenter)   
  - wifi: nl80211: don't free NULL coalescing rule (Johannes Berg)   
  - dmaengine: Revert "dmaengine: pl330: issue_pending waits until WFP state" (Vinod Koul)   
  - dmaengine: pl330: issue_pending waits until WFP state (Bumyong Lee)   
  - LTS tag: v5.4.275 (Sherry Yang)   
  - serial: core: fix kernel-doc for uart_port_unlock_irqrestore() (Randy Dunlap)   
  - udp: preserve the connected status if only UDP cmsg (Yick Xie)   
  - dm: limit the number of targets and parameter size area (Mikulas Patocka)   
  - HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up (Nam Cao)   
  - i2c: smbus: fix NULL function pointer dereference (Wolfram Sang)   
  - idma64: Don't try to serve interrupts when device is powered off (Andy Shevchenko)   
  - dmaengine: owl: fix register access functions (Arnd Bergmann)   
  - tcp: Fix NEW_SYN_RECV handling in inet_twsk_purge() (Eric Dumazet)   
  - tcp: Clean up kernel listener's reqsk in inet_twsk_purge() (Kuniyuki Iwashima)   
  - mtd: diskonchip: work around ubsan link failure (Arnd Bergmann)   
  - stackdepot: respect __GFP_NOLOCKDEP allocation flag (Andrey Ryabinin)   
  - net: b44: set pause params only when interface is up (Peter Münster)   
  - ethernet: Add helper for assigning packet type when dest address does not match device address (Rahul Rameshbabu)   
  - irqchip/gic-v3-its: Prevent double free on error (Guanrui Huang)   
  - drm/amdgpu: Fix leak when GPU memory allocation fails (Mukul Joshi)   
  - arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma (Iskander Amara)   
  - btrfs: fix information leak in btrfs_ioctl_logical_to_ino() (Johannes Thumshirn)   
  - Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853 (WangYuli)   
  - Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old() (Nathan Chancellor)   
  - tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together (Robin H. Johnson)   
  - tracing: Show size of requested perf buffer (Robin H. Johnson)   
  - drm/amdgpu: validate the parameters of bo mapping operations more clearly (xinhui pan)   
  - amdgpu: validate offset_in_bo of drm_amdgpu_gem_va (Chia-I Wu)   
  - drm/amdgpu: restrict bo mapping within gpu address limits (Rajneesh Bhardwaj)   
  - serial: mxs-auart: add spinlock around changing cts state (Emil Kronborg)   
  - serial: core: Provide port lock wrappers (Thomas Gleixner)   
  - af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc(). (Kuniyuki Iwashima)   
  - iavf: Fix TC config comparison with existing adapter TC config (Sudheer Mogilappagari)   
  - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Sindhu Devale)   
  - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ido Schimmel)   
  - mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (Ido Schimmel)   
  - mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ido Schimmel)   
  - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ido Schimmel)   
  - mlxsw: spectrum_acl_tcam: Rate limit error message (Ido Schimmel)   
  - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ido Schimmel)   
  - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ido Schimmel)   
  - mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work (Ido Schimmel)   
  - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (Hyunwoo Kim)   
  - ipvs: Fix checksumming on GSO of SCTP packets (Ismael Luceno)   
  - net: gtp: Fix Use-After-Free in gtp_dellink (Hyunwoo Kim)   
  - net: usb: ax88179_178a: stop lying about skb->truesize (Eric Dumazet)   
  - NFC: trf7970a: disable all regulators on removal (Paul Geurts)   
  - mlxsw: core: Unregister EMAD trap using FORWARD action (Ido Schimmel)   
  - vxlan: drop packets from invalid src-address (David Bauer)   
  - ARC: [plat-hsdk]: Remove misplaced interrupt-cells property (Alexey Brodkin)   
  - arm64: dts: mediatek: mt2712: fix validation errors (Rafał Miłecki)   
  - arm64: dts: mt2712: add ethernet device node (Biao Huang)   
  - arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block (Rafał Miłecki)   
  - arm64: dts: mediatek: mt7622: fix ethernet controller "compatible" (Rafał Miłecki)   
  - arm64: dts: mediatek: mt7622: fix IR nodename (Rafał Miłecki)   
  - arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma (Quentin Schulz)   
  - arm64: dts: rockchip: fix alphabetical ordering RK3399 puma (Iskander Amara)   
  - KVM: async_pf: Cleanup kvm_setup_async_pf() (Vitaly Kuznetsov)   
  - nilfs2: fix OOB in nilfs_set_de_type (Jeongjun Park)   
  - nouveau: fix instmem race condition around ptr stores (Dave Airlie)   
  - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Alan Stern)   
  - speakup: Avoid crash on very long word (Samuel Thibault)   
  - usb: Disable USB3 LPM at shutdown (Kai-Heng Feng)   
  - USB: serial: option: add Telit FN920C04 rmnet compositions (Daniele Palmas)   
  - USB: serial: option: add Rolling RW101-GL and RW135-GL support (Vanillan Wang)   
  - USB: serial: option: support Quectel EM060K sub-models (Jerry Meng)   
  - USB: serial: option: add Lonsung U8300/U9300 product (Coia Prant)   
  - USB: serial: option: add support for Fibocom FM650/FG650 (Chuanhong Guo)   
  - USB: serial: option: add Fibocom FM135-GL variants (bolan wang)   
  - serial/pmac_zilog: Remove flawed mitigation for rx irq flood (Finn Thain)   
  - comedi: vmk80xx: fix incomplete endpoint checking (Nikita Zhandarovich)   
  - binder: check offset alignment in binder_get_object() (Carlos Llamas)   
  - x86/cpufeatures: Fix dependencies for GFNI, VAES, and VPCLMULQDQ (Eric Biggers)   
  - clk: Get runtime PM before walking tree during disable_unused (Stephen Boyd)   
  - clk: Initialize struct clk_core kref earlier (Stephen Boyd)   
  - clk: Print an info line before disabling unused clocks (Konrad Dybcio)   
  - clk: remove extra empty line (Claudiu Beznea)   
  - clk: Mark 'all_lists' as const (Stephen Boyd)   
  - clk: Remove prepare_lock hold assertion in __clk_release() (Stephen Boyd)   
  - drm: nv04: Fix out of bounds access (Mikhail Kobuk)   
  - RDMA/rxe: Fix the problem "mutex_destroy missing" (Yanjun.Zhu)   
  - tun: limit printing rate when illegal packet received by tun dev (Lei Chen)   
  - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Ziyang Xuan)   
  - kprobes: Fix possible use-after-free issue on kprobe registration (Zheng Yejian)   
  - selftests/ftrace: Limit length in subsystem-enable tests (Yuanhe Shu)   
  - btrfs: record delayed inode root in transaction (Boris Burkov)   
  - x86/apic: Force native_apic_mem_read() to use the MOV instruction (Adam Dunlap)   
  - selftests: timers: Fix abs() warning in posix_timers test (John Stultz)   
  - vhost: Add smp_rmb() in vhost_vq_avail_empty() (Gavin Shan)   
  - drm/client: Fully protect modes[] with dev->mode_config.mutex (Ville Syrjälä)   
  - btrfs: qgroup: correctly model root qgroup rsv in convert (Boris Burkov)   
  - net: ena: Fix potential sign extension issue (David Arinzon)   
  - af_unix: Fix garbage collector racing against connect() (Michal Luczaj)   
  - af_unix: Do not use atomic ops for unix_sk(sk)->inflight. (Kuniyuki Iwashima)   
  - net/mlx5: Properly link new fs rules into the tree (Cosmin Ratiu)   
  - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr (Jiri Benc)   
  - ipv4/route: avoid unused-but-set-variable warning (Arnd Bergmann)   
  - ipv6: fib: hide unused 'pn' variable (Arnd Bergmann)   
  - geneve: fix header validation in geneve[6]_xmit_skb (Eric Dumazet)   
  - u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file (Petr Tesarik)   
  - net: openvswitch: fix unwanted error log on timeout policy probing (Ilya Maximets)   
  - nouveau: fix function cast warning (Arnd Bergmann)   
  - Bluetooth: Fix memory leak in hci_req_sync_complete() (Dmitry Antipov)   
  - batman-adv: Avoid infinite loop trying to resize local TT (Sven Eckelmann)


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.333.4.el7uek]
changelog:
  - PCI: pciehp: Add Solidigm NVMe to spurious DLLSC quirk (Alan Adamson)  [Orabug: 36622673]  
  - RDS/IB: Add counter to measure when RDS_IB_RX_LIMIT is reached (Hans Westgaard Ry)  [Orabug: 36696279]  
  - net/mlx5e: Fix a race in command alloc flow (Shifeng Li)  [Orabug: 36702071]  
  - Revert "net/mlx5: Add retry mechanism to the command entry index allocation" (Qing Huang)  [Orabug: 36702071]  
  - kallsyms: shuffle kallmodsyms writeout before symbol sort (Nick Alcock)  [Orabug: 36722084]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.333.5.el7uek]
changelog:
  - nfc: nci: Fix handling of zero-length payload packets in nci_rx_work() (Ryosuke Yasuoka)   
  - nfc: nci: Fix uninit-value in nci_rx_work (Ryosuke Yasuoka)   
  - nfc: nci: Fix kcov check in nci_rx_work() (Tetsuo Handa)   
  - ipv6: sr: fix incorrect unregister order (Hangbin Liu)   
  - vxlan: Fix regression when dropping packets due to invalid src addresses (Daniel Borkmann)   
  - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Herbert Xu)   
  - fbdev: savage: Handle err return when savagefb_check_var failed (Cai Xinchen)   
  - speakup: Fix sizeof() vs ARRAY_SIZE() bug (Dan Carpenter)   
  - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Yu Kuai)   
  - x86/boot: Ignore relocations in .notes sections in walk_relocs() too (Guixiong Wei)


author: Jack Vogel <jack.vogel@oracle.com> [5.4.17-2136.333.5.1.el7uek]
changelog:
  - net/mlx5e: drop shorter ethernet frames (Manjunath Patil)  [Orabug: 36660755]  
  - pci: add hotplug patch support for SOLIDIGM Aura10 AIC 0x025e:0x0b60 (Alan Adamson)  [Orabug: 36836653]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.334.1.el7uek]
changelog:
  - rds/rdma: Track rds_message in send, retrans and recv queue (Juan Garcia)  [Orabug: 36529583]  
  - xfs: make sure sb_fdblocks is non-negative (Wengang Wang)  [Orabug: 36596998]  
  - xfs: fix sb write verify for lazysbcount (Long Li)  [Orabug: 36596998]  
  - rds/rdma: Clear rds_info_socket before use (Juan Garcia)  [Orabug: 36613125]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.332.4.el7uek]
changelog:
  - bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS (Matthew Wilcox (Oracle))   
  - usb: dwc2: host: Fix dereference issue in DDMA completion flow. (Minas Harutyunyan) [Orabug: 36765452] {CVE-2024-26997}
  - Revert "usb: cdc-wdm: close race between read and workqueue" (Greg Kroah-Hartman)   
  - LTS tag: v5.4.274 (Sherry Yang)   
  - x86/cpu: Enable STIBP on AMD if Automatic IBRS is enabled (Kim Phillips)   
  - x86/cpu: Support AMD Automatic IBRS (Kim Phillips)   
  - firmware: meson_sm: fix to avoid potential NULL pointer dereference (Zhang Shurong)   
  - ip_gre: do not report erspan version on GRE interface (Hangbin Liu)   
  - erspan: Check IFLA_GRE_ERSPAN_VER is set. (William Tu)   
  - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Vasiliy Kovalev)   
  - Bluetooth: btintel: Fixe build regression (Luiz Augusto von Dentz)   
  - x86/alternative: Don't call text_poke() in lazy TLB mode (Juergen Gross)   
  - drm/i915/gt: Reset queue_priority_hint on parking (Chris Wilson) [Orabug: 36596705] {CVE-2024-26937}
  - x86/mm/pat: fix VM_PAT handling in COW mappings (David Hildenbrand) [Orabug: 36643056] {CVE-2024-35877}
  - virtio: reenable config if freezing device failed (David Hildenbrand)   
  - drm/vkms: call drm_atomic_helper_shutdown before drm_dev_put() (Guo Mengqi)   
  - tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc (Thadeu Lima de Souza Cascardo) [Orabug: 36685661] {CVE-2023-52880}
  - netfilter: nf_tables: discard table flag update with pending basechain deletion (Pablo Neira Ayuso) [Orabug: 36643133] {CVE-2024-35897}
  - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Pablo Neira Ayuso) [Orabug: 36579648] {CVE-2024-26925}
  - netfilter: nf_tables: release batch on table validation from abort path (Pablo Neira Ayuso)   
  - netfilter: nf_tables: reject new basechain after table flag update (Pablo Neira Ayuso) [Orabug: 36643144] {CVE-2024-35900}
  - fbmon: prevent division by zero in fb_videomode_from_videomode() (Roman Smirnov) [Orabug: 36643192] {CVE-2024-35922}
  - fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2 (Aleksandr Burakov)   
  - usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined (Colin Ian King)   
  - usb: typec: tcpci: add generic tcpci fallback compatible (Marco Felsch)   
  - tools: iio: replace seekdir() in iio_generic_buffer (Petre Rodan)   
  - ktest: force $buildonly = 1 for 'make_warnings_file' test type (Ricardo B. Marliere)   
  - Input: allocate keycode for Display refresh rate toggle (Gergo Koteles)   
  - block: prevent division by zero in blk_rq_stat_sum() (Roman Smirnov) [Orabug: 36643210] {CVE-2024-35925}
  - Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default" (Daniel Drake)   
  - SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int (Dai Ngo)   
  - drm/amd/display: Fix nanosec stat overflow (Aric Cyr)   
  - media: sta2x11: fix irq handler cast (Arnd Bergmann)   
  - isofs: handle CDs with bad root inode but good Joliet root directory (Alex Henrie)   
  - scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() (Justin Tee) [Orabug: 36643239] {CVE-2024-35930}
  - sysv: don't call sb_bread() with pointers_lock held (Tetsuo Handa)   
  - Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails (Kunwu Chan)   
  - Bluetooth: btintel: Fix null ptr deref in btintel_read_version (Edward Adam Davis) [Orabug: 36643256] {CVE-2024-35933}
  - btrfs: send: handle path ref underflow in header iterate_inode_ref() (David Sterba) [Orabug: 36643267] {CVE-2024-35935}
  - btrfs: export: handle invalid inode or root reference in btrfs_get_parent() (David Sterba)   
  - btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks() (David Sterba) [Orabug: 36643273] {CVE-2024-35936}
  - tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num() (Samasth Norway Ananda)   
  - ionic: set adminq irq affinity (Shannon Nelson)   
  - arm64: dts: rockchip: fix rk3399 hdmi ports node (Johan Jonker)   
  - arm64: dts: rockchip: fix rk3328 hdmi ports node (Johan Jonker)   
  - panic: Flush kernel log buffer at the end (John Ogness)   
  - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Harshit Mogalapalli) [Orabug: 36643321] {CVE-2024-35944}
  - wifi: ath9k: fix LNA selection in ath_ant_try_scan() (Dmitry Antipov)   
  - s390/entry: align system call table on 8 bytes (Sumanth Korikkar)   
  - x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() (Borislav Petkov (AMD))   
  - ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone (I Gede Agastya Darma Laksana)   
  - ata: sata_mv: Fix PCI device ID table declaration compilation warning (Arnd Bergmann)   
  - scsi: mylex: Fix sysfs buffer lengths (Arnd Bergmann)   
  - ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit (Arnd Bergmann)   
  - ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw (Stephen Lee)   
  - net: ravb: Always process TX descriptor ring (Paul Barker)   
  - erspan: make sure erspan_base_hdr is present in skb->head (Eric Dumazet) [Orabug: 36643106] {CVE-2024-35888}
  - erspan: Add type I version 0 support. (William Tu)   
  - init: open /initrd.image with O_LARGEFILE (John Sperbeck)   
  - initramfs: switch initramfs unpacking to struct file based APIs (Christoph Hellwig)   
  - fs: add a vfs_fchmod helper (Christoph Hellwig)   
  - fs: add a vfs_fchown helper (Christoph Hellwig)   
  - staging: vc04_services: fix information leak in create_component() (Dan Carpenter)   
  - staging: vc04_services: changen strncpy() to strscpy_pad() (Arnd Bergmann)   
  - i40e: fix vf may be used uninitialized in this function warning (Aleksandr Loktionov) [Orabug: 36683051] {CVE-2024-36020}
  - ipv6: Fix infinite recursion in fib6_dump_done(). (Kuniyuki Iwashima) [Orabug: 36643093] {CVE-2024-35886}
  - selftests: reuseaddr_conflict: add missing new line at the end of the output (Jakub Kicinski)   
  - net: stmmac: fix rx queue priority assignment (Piotr Wejman)   
  - net/sched: act_skbmod: prevent kernel-infoleak (Eric Dumazet) [Orabug: 36643117] {CVE-2024-35893}
  - bpf, sockmap: Prevent lock inversion deadlock in map delete elem (Jakub Sitnicki)   
  - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Ziyang Xuan) [Orabug: 36643137] {CVE-2024-35898}
  - netfilter: nf_tables: flush pending destroy work before exit_net release (Pablo Neira Ayuso) [Orabug: 36643141] {CVE-2024-35899}
  - mm, vmscan: prevent infinite loop for costly GFP_NOIO | __GFP_RETRY_MAYFAIL allocations (Vlastimil Babka)   
  - vfio/platform: Create persistent IRQ handlers (Alex Williamson) [Orabug: 36531105] {CVE-2024-26813}
  - vfio/pci: Create persistent INTx handler (Alex Williamson) [Orabug: 36531100] {CVE-2024-26812}
  - vfio: Introduce interface to flush virqfd inject workqueue (Alex Williamson)   
  - vfio/pci: Lock external INTx masking ops (Alex Williamson) [Orabug: 36531069] {CVE-2024-26810}
  - vfio/pci: Disable auto-enable of exclusive INTx IRQ (Alex Williamson) [Orabug: 36531123] {CVE-2024-27437}
  - netfilter: nf_tables: disallow timeout for anonymous sets (Pablo Neira Ayuso) [Orabug: 36654623] {CVE-2023-52620}
  - Bluetooth: Fix TOCTOU in HCI debugfs implementation (Bastien Nocera)   
  - Bluetooth: hci_event: set the conn encrypted before conn establishes (Hui Wang)   
  - r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d (Heiner Kallweit)   
  - dm integrity: fix out-of-range warning (Arnd Bergmann)   
  - tcp: properly terminate timers for kernel sockets (Eric Dumazet) [Orabug: 36643165] {CVE-2024-35910}
  - ixgbe: avoid sleeping allocation in ixgbe_ipsec_vf_add_sa() (Przemek Kitszel)   
  - nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet (Ryosuke Yasuoka) [Orabug: 36643177] {CVE-2024-35915}
  - USB: core: Fix deadlock in usb_deauthorize_interface() (Alan Stern) [Orabug: 36596629] {CVE-2024-26934}
  - scsi: lpfc: Correct size for wqe for memset() (Muhammad Usama Anjum)   
  - scsi: qla2xxx: Fix command flush on cable pull (Quinn Tran) [Orabug: 36596615] {CVE-2024-26931}
  - usb: udc: remove warning when queue disabled ep (yuan linyu) [Orabug: 36642386] {CVE-2024-35822}
  - usb: dwc2: gadget: LPM flow fix (Minas Harutyunyan)   
  - usb: dwc2: host: Fix ISOC flow in DDMA mode (Minas Harutyunyan)   
  - usb: dwc2: host: Fix hibernation flow (Minas Harutyunyan)   
  - usb: dwc2: host: Fix remote wakeup from hibernation (Minas Harutyunyan)   
  - scsi: core: Fix unremoved procfs host directory regression (Guilherme G. Piccoli) [Orabug: 36596633] {CVE-2024-26935}
  - ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs (Duoming Zhou) [Orabug: 36530190] {CVE-2024-26654}
  - usb: cdc-wdm: close race between read and workqueue (Oliver Neukum)   
  - exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack() (Max Filippov)   
  - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Felix Fietkau) [Orabug: 36642166] {CVE-2024-35789}
  - mm/migrate: set swap entry values of THP tail pages properly. (Zi Yan)   
  - vt: fix memory overlapping when deleting chars in the buffer (Yangxi Xiang)   
  - bounds: support non-power-of-two CONFIG_NR_CPUS (Matthew Wilcox (Oracle))   
  - powerpc: xor_vmx: Add '-mhard-float' to CFLAGS (Nathan Chancellor)   
  - efivarfs: Request at most 512 bytes for variable names (Tim Schumacher)   
  - perf/core: Fix reentry problem in perf_output_read_group() (Yang Jihong)   
  - loop: loop_set_status_from_info() check before assignment (Zhong Jinghua)   
  - loop: Check for overflow while configuring loop (Siddh Raman Pant)   
  - loop: Factor out configuring loop from status (Martijn Coenen)   
  - loop: Refactor loop_set_status() size calculation (Martijn Coenen)   
  - loop: Factor out setting loop device size (Martijn Coenen)   
  - loop: Remove sector_t truncation checks (Martijn Coenen)   
  - loop: Call loop_config_discard() only after new config is applied (Martijn Coenen)   
  - Revert "loop: Check for overflow while configuring loop" (Genjian Zhang)   
  - btrfs: allocate btrfs_ioctl_defrag_range_args on stack (Goldwyn Rodrigues)   
  - printk: Update @console_may_schedule in console_trylock_spinning() (John Ogness)   
  - xen/events: close evtchn after mapping cleanup (Maximilian Heyne) [Orabug: 36530408] {CVE-2024-26687}
  - vt: fix unicode buffer corruption when deleting characters (Nicolas Pitre) [Orabug: 36642392] {CVE-2024-35823}
  - tty: serial: fsl_lpuart: avoid idle preamble pending if CTS is enabled (Sherry Sun)   
  - usb: port: Don't try to peer unused USB ports based on location (Mathias Nyman)   
  - usb: gadget: ncm: Fix handling of zero block length packets (Krishna Kurapati) [Orabug: 36642399] {CVE-2024-35825}
  - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Alan Stern) [Orabug: 36598219] {CVE-2024-27059}
  - ALSA: hda/realtek - Fix headset Mic no show at resume back for Lenovo ALC897 platform (Kailang Yang)   
  - xfrm: Avoid clang fortify warning in copy_to_user_tmpl() (Nathan Chancellor)   
  - netfilter: nf_tables: reject constant set with timeout (Pablo Neira Ayuso)   
  - netfilter: nf_tables: disallow anonymous set with timeout flag (Pablo Neira Ayuso) [Orabug: 36530110] {CVE-2024-26642}
  - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Pablo Neira Ayuso) [Orabug: 36530115] {CVE-2024-26643}
  - comedi: comedi_test: Prevent timers rescheduling during deletion (Ian Abbott)   
  - dm snapshot: fix lockup in dm_exception_table_exit (Mikulas Patocka) [Orabug: 36642240] {CVE-2024-35805}
  - x86/CPU/AMD: Update the Zenbleed microcode revisions (Borislav Petkov (AMD))   
  - nilfs2: prevent kernel bug at submit_bh_wbc() (Ryusuke Konishi) [Orabug: 36596792] {CVE-2024-26955}
  - nilfs2: use a more common logging style (Joe Perches)   
  - nilfs2: fix failure to detect DAT corruption in btree and direct mappings (Ryusuke Konishi) [Orabug: 36596799] {CVE-2024-26956}
  - memtest: use {READ,WRITE}_ONCE in memory scanning (Qiang Zhang)   
  - drm/vc4: hdmi: do not return negative values from .get_modes() (Jani Nikula)   
  - drm/imx/ipuv3: do not return negative values from .get_modes() (Jani Nikula)   
  - drm/exynos: do not return negative values from .get_modes() (Jani Nikula)   
  - s390/zcrypt: fix reference counting on zcrypt card objects (Harald Freudenberger) [Orabug: 36596823] {CVE-2024-26957}
  - soc: fsl: qbman: Use raw spinlock for cgr_lock (Sean Anderson) [Orabug: 36642373] {CVE-2024-35819}
  - soc: fsl: qbman: Add CGR update function (Sean Anderson)   
  - soc: fsl: qbman: Add helper for sanity checking cgr ops (Sean Anderson)   
  - soc: fsl: qbman: Always disable interrupts when taking cgr_lock (Sean Anderson) [Orabug: 36642246] {CVE-2024-35806}
  - vfio/platform: Disable virqfds on cleanup (Alex Williamson)   
  - kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1 (Nathan Chancellor)   
  - speakup: Fix 8bit characters from direct synth (Samuel Thibault)   
  - slimbus: core: Remove usage of the deprecated ida_simple_xx() API (Christophe JAILLET)   
  - nvmem: meson-efuse: fix function pointer type mismatch (Jerome Brunet)   
  - firmware: meson_sm: Rework driver as a proper platform driver (Carlo Caione)   
  - hwmon: (amc6821) add of_match table (Josua Mayer)   
  - dm-raid: fix lockdep waring in "pers->hot_add_disk" (Yu Kuai)   
  - PCI/PM: Drain runtime-idle callbacks before driver removal (Rafael J. Wysocki) [Orabug: 36642261] {CVE-2024-35809}
  - PCI: Drop pci_device_remove() test of pci_dev->driver (Uwe Kleine-König)   
  - btrfs: fix off-by-one chunk length calculation at contains_pending_extent() (Filipe Manana)   
  - fuse: don't unhash root (Miklos Szeredi)   
  - mmc: tmio: avoid concurrent runs of mmc_request_done() (Wolfram Sang)   
  - PM: sleep: wakeirq: fix wake irq warning in system suspend (Qingliang Li)   
  - USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M (Toru Katagiri)   
  - USB: serial: option: add MeiG Smart SLM320 product (Aurélien Jacobs)   
  - USB: serial: cp210x: add ID for MGP Instruments PDS100 (Christian Häggström)   
  - USB: serial: add device ID for VeriFone adapter (Cameron Williams)   
  - USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB (Daniel Vogelbacher)   
  - powerpc/fsl: Fix mfpmr build errors with newer binutils (Michael Ellerman)   
  - clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays (Gabor Juhos) [Orabug: 36596857] {CVE-2024-26965}
  - clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays (Gabor Juhos) [Orabug: 36596862] {CVE-2024-26966}
  - clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays (Gabor Juhos) [Orabug: 36597857] {CVE-2024-26969}
  - PM: suspend: Set mem_sleep_current during kernel command line setup (Maulik Shah)   
  - parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds (Guenter Roeck)   
  - parisc: Fix csum_ipv6_magic on 64-bit systems (Guenter Roeck)   
  - parisc: Fix csum_ipv6_magic on 32-bit systems (Guenter Roeck)   
  - parisc: Fix ip_fast_csum (Guenter Roeck)   
  - parisc: Do not hardcode registers in checksum functions (Helge Deller)   
  - mtd: rawnand: meson: fix scrambling mode value in command macro (Arseniy Krasnov)   
  - ubi: correct the calculation of fastmap size (Zhang Yi)   
  - ubi: Check for too small LEB size in VTBL code (Richard Weinberger) [Orabug: 36356635] {CVE-2024-25739}
  - ubifs: Set page uptodate in the correct place (Matthew Wilcox (Oracle))   
  - fat: fix uninitialized field in nostale filehandles (Jan Kara) [Orabug: 36597868] {CVE-2024-26973}
  - ext4: correct best extent lstart adjustment logic (Baokun Li)   
  - selftests/mqueue: Set timeout to 180 seconds (SeongJae Park)   
  - crypto: qat - resolve race condition during AER recovery (Damian Muszynski) [Orabug: 36597873] {CVE-2024-26974}
  - crypto: qat - fix double free during reset (Svyatoslav Pankratov)   
  - sparc: vDSO: fix return value of __setup handler (Randy Dunlap)   
  - sparc64: NMI watchdog: fix return value of __setup handler (Randy Dunlap)   
  - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [Orabug: 36597882] {CVE-2024-26976}
  - media: xc4000: Fix atomicity violation in xc4000_get_frequency (Gui-Dong Han)   
  - arm: dts: marvell: Fix maxium->maxim typo in brownstone dts (Duje Mihanović)   
  - ARM: dts: mmp2-brownstone: Don't redeclare phandle references (Lubomir Rintel)   
  - smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity() (Roberto Sassu)   
  - smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr() (Roberto Sassu)   
  - clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd (Amit Pundir)   
  - media: staging: ipu3-imgu: Set fields before media_entity_pads_init() (Hidenori Kobayashi)   
  - wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach (Zheng Wang) [Orabug: 36647651] {CVE-2023-47233} {CVE-2024-35811}
  - timers: Use del_timer_sync() even on UP (Thomas Gleixner)   
  - timers: Update kernel-doc for various functions (Thomas Gleixner)   
  - amdkfd: use calloc instead of kzalloc to avoid integer overflow (Dave Airlie) [Orabug: 36531118] {CVE-2024-26817}


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.333.3.el7uek]
changelog:
  - LTS tag: v5.4.277 (Sherry Yang)   
  - docs: kernel_include.py: Cope with docutils 0.21 (Akira Yokosawa)   
  - serial: kgdboc: Fix NMI-safety problems from keyboard reset code (Daniel Thompson)   
  - usb: typec: ucsi: displayport: Fix potential deadlock (Heikki Krogerus)   
  - drm/amdgpu: Fix possible NULL dereference in amdgpu_ras_query_error_status_helper() (Srinivasan Shanmugam) [Orabug: 36784409] {CVE-2023-52585}
  - arm64: dts: qcom: Fix 'interrupt-map' parent address cells (Rob Herring)   
  - firmware: arm_scmi: Harden accesses to the reset domains (Cristian Marussi)   
  - smb: client: fix potential OOBs in smb2_parse_contexts() (Paulo Alcantara) [Orabug: 36654336] {CVE-2023-52434}
  - net: bcmgenet: synchronize UMAC_CMD access (Doug Berger)   
  - net: bcmgenet: synchronize use of bcmgenet_set_rx_mode() (Doug Berger)   
  - net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access (Doug Berger)   
  - net: bcmgenet: keep MAC in reset until PHY is up (Doug Berger)   
  - Revert "net: bcmgenet: use RGMII loopback for MAC reset" (Doug Berger)   
  - ext4: fix bug_on in __es_tree_search (Baokun Li)   
  - pinctrl: core: handle radix_tree_insert() errors in pinctrl_register_one_pin() (Sergey Shtylyov)   
  - LTS tag: v5.4.276 (Sherry Yang)   
  - pinctrl: mediatek: paris: Fix PIN_CONFIG_INPUT_SCHMITT_ENABLE readback (Chen-Yu Tsai)   
  - pinctrl: mediatek: remove set but not used variable 'e' (YueHaibing)   
  - pinctrl: mediatek: Fix some off by one bugs (Dan Carpenter)   
  - pinctrl: mediatek: Fix fallback behavior for bias_set_combo (Hsin-Yi Wang)   
  - regulator: core: fix debugfs creation regression (Johan Hovold)   
  - net: fix out-of-bounds access in ops_init (Thadeu Lima de Souza Cascardo) [Orabug: 36683113] {CVE-2024-36883}
  - drm/vmwgfx: Fix invalid reads in fence signaled events (Zack Rusin) [Orabug: 36691528] {CVE-2024-36960}
  - dyndbg: fix old BUG_ON in >control parser (Jim Cromie) [Orabug: 36643338] {CVE-2024-35947}
  - tipc: fix UAF in error path (Paolo Abeni) [Orabug: 36683231] {CVE-2024-36886}
  - usb: gadget: f_fs: Fix a race condition when processing setup packets. (Chris Wulff)   
  - usb: gadget: composite: fix OS descriptors w_value logic (Peter Korsgaard)   
  - firewire: nosy: ensure user_length is taken into account when fetching packet contents (Thanassis Avgerinos) [Orabug: 36630450] {CVE-2024-27401}
  - net: qede: use return from qede_parse_flow_attr() for flower (Asbjørn Sloth Tønnesen)   
  - net: qede: sanitize 'rc' in qede_add_tc_flower_fltr() (Asbjørn Sloth Tønnesen)   
  - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (Eric Dumazet) [Orabug: 36683279] {CVE-2024-36902}
  - net: bridge: fix corrupted ethernet header on multicast-to-unicast (Felix Fietkau)   
  - phonet: fix rtm_phonet_notify() skb allocation (Eric Dumazet) [Orabug: 36683485] {CVE-2024-36946}
  - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Roded Zats) [Orabug: 36679451] {CVE-2024-36017}
  - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (Duoming Zhou) [Orabug: 36630443] {CVE-2024-27399}
  - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (Duoming Zhou) [Orabug: 36630438] {CVE-2024-27398}
  - tcp: Use refcount_inc_not_zero() in tcp_twsk_unique(). (Kuniyuki Iwashima) [Orabug: 36683292] {CVE-2024-36904}
  - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (Eric Dumazet) [Orabug: 36683296] {CVE-2024-36905}
  - xfrm: Preserve vlan tags for transport mode software GRO (Paul Davey)   
  - pinctrl: mediatek: Fix fallback call path (Hsin-Yi Wang)   
  - net:usb:qmi_wwan: support Rolling modules (Vanillan Wang)   
  - fs/9p: drop inodes immediately on non-.L too (Joakim Sindholt)   
  - clk: Don't hold prepare_lock when calling kref_put() (Stephen Boyd)   
  - gpio: crystalcove: Use -ENOTSUPP consistently (Andy Shevchenko)   
  - gpio: wcove: Use -ENOTSUPP consistently (Andy Shevchenko)   
  - 9p: explicitly deny setlease attempts (Jeff Layton)   
  - fs/9p: translate O_TRUNC into OTRUNC (Joakim Sindholt)   
  - fs/9p: only translate RWX permissions for plain 9P2000 (Joakim Sindholt) [Orabug: 36691538] {CVE-2024-36964}
  - selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior (John Stultz)   
  - MIPS: scall: Save thread_info.syscall unconditionally on entry (Jiaxun Yang)   
  - gpu: host1x: Do not setup DMA for virtual devices (Thierry Reding)   
  - scsi: target: Fix SELinux error when systemd-modules loads the target module (Maurizio Lombardi)   
  - btrfs: always clear PERTRANS metadata during commit (Boris Burkov)   
  - btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve (Boris Burkov)   
  - tools/power turbostat: Fix Bzy_MHz documentation typo (Peng Liu)   
  - tools/power turbostat: Fix added raw MSR output (Doug Smythies)   
  - firewire: ohci: mask bus reset interrupts between ISR and bottom half (Adam Goldman) [Orabug: 36683505] {CVE-2024-36950}
  - ata: sata_gemini: Check clk_enable() result (Chen Ni)   
  - net: bcmgenet: Reset RBUF on first open (Phil Elwell)   
  - ALSA: line6: Zero-initialize message buffers (Takashi Iwai)   
  - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (Saurav Kashyap) [Orabug: 36683368] {CVE-2024-36919}
  - net: mark racy access on sk->sk_rcvbuf (linke li)   
  - wifi: cfg80211: fix rdev_dump_mpp() arguments order (Igor Artemiev)   
  - wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc (Jeff Johnson)   
  - gfs2: Fix invalid metadata access in punch_hole (Andrew Price)   
  - scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic (Justin Tee)   
  - clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change (Jernej Skrabec) [Orabug: 36784417] {CVE-2023-52882}
  - tipc: fix a possible memleak in tipc_buf_append (Xin Long) [Orabug: 36683526] {CVE-2024-36954}
  - net: bridge: fix multicast-to-unicast with fraglist GSO (Felix Fietkau)   
  - net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341 (Marek Behún)   
  - net: dsa: mv88e6xxx: Add number of MACs in the ATU (Andrew Lunn)   
  - net: qede: use return from qede_parse_flow_attr() for flow_spec (Asbjørn Sloth Tønnesen)   
  - net l2tp: drop flow hash on forward (David Bauer)   
  - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). (Kuniyuki Iwashima) [Orabug: 36683426] {CVE-2024-36933}
  - bna: ensure the copied buf is NUL terminated (Bui Quang Minh) [Orabug: 36683431] {CVE-2024-36934}
  - s390/mm: Fix clearing storage keys for huge pages (Claudio Imbrenda)   
  - s390/mm: Fix storage key clearing for guest huge pages (Claudio Imbrenda)   
  - pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map() (Zeng Heng) [Orabug: 36683544] {CVE-2024-36959}
  - power: rt9455: hide unused rt9455_boost_voltage_values (Arnd Bergmann)   
  - nfs: Handle error of rpc_proc_register() in nfs_net_init(). (Kuniyuki Iwashima) [Orabug: 36683443] {CVE-2024-36939}
  - nfs: make the rpc_stat per net namespace (Josef Bacik)   
  - nfs: expose /proc/net/sunrpc/nfs in net namespaces (Josef Bacik)   
  - sunrpc: add a struct rpc_stats arg to rpc_create_args (Josef Bacik)   
  - pinctrl: mediatek: paris: Rework support for PIN_CONFIG_{INPUT,OUTPUT}_ENABLE (Chen-Yu Tsai)   
  - pinctrl: mediatek: paris: Rework mtk_pinconf_{get,set} switch/case logic (Chen-Yu Tsai)   
  - pinctrl: mediatek: paris: Fix PIN_CONFIG_BIAS_* readback (Chen-Yu Tsai)   
  - pinctrl: mediatek: remove shadow variable declaration (Light Hsieh)   
  - pinctrl: mediatek: Backward compatible to previous Mediatek's bias-pull usage (Light Hsieh)   
  - pinctrl: mediatek: Refine mtk_pinconf_get() (Light Hsieh)   
  - pinctrl: mediatek: Refine mtk_pinconf_get() and mtk_pinconf_set() (Light Hsieh)   
  - pinctrl: mediatek: Supporting driving setting without mapping current to register value (Light Hsieh)   
  - pinctrl: mediatek: Check gpio pin number and use binary search in mtk_hw_pin_field_lookup() (Light Hsieh)   
  - pinctrl: core: delete incorrect free in pinctrl_enable() (Dan Carpenter) [Orabug: 36683460] {CVE-2024-36940}
  - wifi: nl80211: don't free NULL coalescing rule (Johannes Berg) [Orabug: 36683464] {CVE-2024-36941}
  - dmaengine: Revert "dmaengine: pl330: issue_pending waits until WFP state" (Vinod Koul)   
  - dmaengine: pl330: issue_pending waits until WFP state (Bumyong Lee)   
  - LTS tag: v5.4.275 (Sherry Yang)   
  - serial: core: fix kernel-doc for uart_port_unlock_irqrestore() (Randy Dunlap)   
  - udp: preserve the connected status if only UDP cmsg (Yick Xie)   
  - dm: limit the number of targets and parameter size area (Mikulas Patocka) [Orabug: 36298555] {CVE-2023-52429} {CVE-2024-23851}
  - HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up (Nam Cao) [Orabug: 36643496] {CVE-2024-35997}
  - i2c: smbus: fix NULL function pointer dereference (Wolfram Sang) [Orabug: 36643468] {CVE-2024-35984}
  - idma64: Don't try to serve interrupts when device is powered off (Andy Shevchenko)   
  - dmaengine: owl: fix register access functions (Arnd Bergmann)   
  - tcp: Fix NEW_SYN_RECV handling in inet_twsk_purge() (Eric Dumazet)   
  - tcp: Clean up kernel listener's reqsk in inet_twsk_purge() (Kuniyuki Iwashima)   
  - mtd: diskonchip: work around ubsan link failure (Arnd Bergmann)   
  - stackdepot: respect __GFP_NOLOCKDEP allocation flag (Andrey Ryabinin)   
  - net: b44: set pause params only when interface is up (Peter Münster)   
  - ethernet: Add helper for assigning packet type when dest address does not match device address (Rahul Rameshbabu)   
  - irqchip/gic-v3-its: Prevent double free on error (Guanrui Huang) [Orabug: 36642469] {CVE-2024-35847}
  - drm/amdgpu: Fix leak when GPU memory allocation fails (Mukul Joshi)   
  - arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma (Iskander Amara)   
  - btrfs: fix information leak in btrfs_ioctl_logical_to_ino() (Johannes Thumshirn) [Orabug: 36642481] {CVE-2024-35849}
  - Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853 (WangYuli)   
  - Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old() (Nathan Chancellor)   
  - tracing: Increase PERF_MAX_TRACE_SIZE to handle Sentinel1 and docker together (Robin H. Johnson)   
  - tracing: Show size of requested perf buffer (Robin H. Johnson)   
  - drm/amdgpu: validate the parameters of bo mapping operations more clearly (xinhui pan) [Orabug: 36545065] {CVE-2024-26922}
  - amdgpu: validate offset_in_bo of drm_amdgpu_gem_va (Chia-I Wu)   
  - drm/amdgpu: restrict bo mapping within gpu address limits (Rajneesh Bhardwaj)   
  - serial: mxs-auart: add spinlock around changing cts state (Emil Kronborg) [Orabug: 36597968] {CVE-2024-27000}
  - serial: core: Provide port lock wrappers (Thomas Gleixner)   
  - af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc(). (Kuniyuki Iwashima)   
  - iavf: Fix TC config comparison with existing adapter TC config (Sudheer Mogilappagari)   
  - i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (Sindhu Devale) [Orabug: 36643517] {CVE-2024-36004}
  - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ido Schimmel) [Orabug: 36642494] {CVE-2024-35852}
  - mlxsw: spectrum_acl_tcam: Fix incorrect list API usage (Ido Schimmel) [Orabug: 36643524] {CVE-2024-36006}
  - mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ido Schimmel) [Orabug: 36643527] {CVE-2024-36007}
  - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ido Schimmel) [Orabug: 36642497] {CVE-2024-35853}
  - mlxsw: spectrum_acl_tcam: Rate limit error message (Ido Schimmel)   
  - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ido Schimmel) [Orabug: 36642500] {CVE-2024-35854}
  - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ido Schimmel) [Orabug: 36642505] {CVE-2024-35855}
  - mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work (Ido Schimmel)   
  - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (Hyunwoo Kim) [Orabug: 36630423] {CVE-2024-27395}
  - ipvs: Fix checksumming on GSO of SCTP packets (Ismael Luceno)   
  - net: gtp: Fix Use-After-Free in gtp_dellink (Hyunwoo Kim) [Orabug: 36630427] {CVE-2024-27396}
  - net: usb: ax88179_178a: stop lying about skb->truesize (Eric Dumazet)   
  - NFC: trf7970a: disable all regulators on removal (Paul Geurts)   
  - mlxsw: core: Unregister EMAD trap using FORWARD action (Ido Schimmel)   
  - vxlan: drop packets from invalid src-address (David Bauer)   
  - ARC: [plat-hsdk]: Remove misplaced interrupt-cells property (Alexey Brodkin)   
  - arm64: dts: mediatek: mt2712: fix validation errors (Rafał Miłecki)   
  - arm64: dts: mt2712: add ethernet device node (Biao Huang)   
  - arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block (Rafał Miłecki)   
  - arm64: dts: mediatek: mt7622: fix ethernet controller "compatible" (Rafał Miłecki)   
  - arm64: dts: mediatek: mt7622: fix IR nodename (Rafał Miłecki)   
  - arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma (Quentin Schulz)   
  - arm64: dts: rockchip: fix alphabetical ordering RK3399 puma (Iskander Amara)   
  - KVM: async_pf: Cleanup kvm_setup_async_pf() (Vitaly Kuznetsov)   
  - nilfs2: fix OOB in nilfs_set_de_type (Jeongjun Park) [Orabug: 36597904] {CVE-2024-26981}
  - nouveau: fix instmem race condition around ptr stores (Dave Airlie) [Orabug: 36597921] {CVE-2024-26984}
  - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Alan Stern) [Orabug: 36597942] {CVE-2024-26993}
  - speakup: Avoid crash on very long word (Samuel Thibault) [Orabug: 36597947] {CVE-2024-26994}
  - usb: Disable USB3 LPM at shutdown (Kai-Heng Feng)   
  - USB: serial: option: add Telit FN920C04 rmnet compositions (Daniele Palmas)   
  - USB: serial: option: add Rolling RW101-GL and RW135-GL support (Vanillan Wang)   
  - USB: serial: option: support Quectel EM060K sub-models (Jerry Meng)   
  - USB: serial: option: add Lonsung U8300/U9300 product (Coia Prant)   
  - USB: serial: option: add support for Fibocom FM650/FG650 (Chuanhong Guo)   
  - USB: serial: option: add Fibocom FM135-GL variants (bolan wang)   
  - serial/pmac_zilog: Remove flawed mitigation for rx irq flood (Finn Thain) [Orabug: 36597963] {CVE-2024-26999}
  - comedi: vmk80xx: fix incomplete endpoint checking (Nikita Zhandarovich) [Orabug: 36597976] {CVE-2024-27001}
  - binder: check offset alignment in binder_get_object() (Carlos Llamas) [Orabug: 36579651] {CVE-2024-26926}
  - x86/cpufeatures: Fix dependencies for GFNI, VAES, and VPCLMULQDQ (Eric Biggers)   
  - clk: Get runtime PM before walking tree during disable_unused (Stephen Boyd) [Orabug: 36597987] {CVE-2024-27004}
  - clk: Initialize struct clk_core kref earlier (Stephen Boyd)   
  - clk: Print an info line before disabling unused clocks (Konrad Dybcio)   
  - clk: remove extra empty line (Claudiu Beznea)   
  - clk: Mark 'all_lists' as const (Stephen Boyd)   
  - clk: Remove prepare_lock hold assertion in __clk_release() (Stephen Boyd)   
  - drm: nv04: Fix out of bounds access (Mikhail Kobuk) [Orabug: 36597995] {CVE-2024-27008}
  - RDMA/rxe: Fix the problem "mutex_destroy missing" (Yanjun.Zhu)   
  - tun: limit printing rate when illegal packet received by tun dev (Lei Chen) [Orabug: 36598014] {CVE-2024-27013}
  - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Ziyang Xuan) [Orabug: 36598045] {CVE-2024-27020}
  - kprobes: Fix possible use-after-free issue on kprobe registration (Zheng Yejian) [Orabug: 36643370] {CVE-2024-35955}
  - selftests/ftrace: Limit length in subsystem-enable tests (Yuanhe Shu)   
  - btrfs: record delayed inode root in transaction (Boris Burkov)   
  - x86/apic: Force native_apic_mem_read() to use the MOV instruction (Adam Dunlap)   
  - selftests: timers: Fix abs() warning in posix_timers test (John Stultz)   
  - vhost: Add smp_rmb() in vhost_vq_avail_empty() (Gavin Shan)   
  - drm/client: Fully protect modes[] with dev->mode_config.mutex (Ville Syrjälä) [Orabug: 36643358] {CVE-2024-35950}
  - btrfs: qgroup: correctly model root qgroup rsv in convert (Boris Burkov)   
  - net: ena: Fix potential sign extension issue (David Arinzon)   
  - af_unix: Fix garbage collector racing against connect() (Michal Luczaj) [Orabug: 36579511] {CVE-2024-26923}
  - af_unix: Do not use atomic ops for unix_sk(sk)->inflight. (Kuniyuki Iwashima)   
  - net/mlx5: Properly link new fs rules into the tree (Cosmin Ratiu) [Orabug: 36643403] {CVE-2024-35960}
  - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr (Jiri Benc) [Orabug: 36643432] {CVE-2024-35969}
  - ipv4/route: avoid unused-but-set-variable warning (Arnd Bergmann)   
  - ipv6: fib: hide unused 'pn' variable (Arnd Bergmann)   
  - geneve: fix header validation in geneve[6]_xmit_skb (Eric Dumazet) [Orabug: 36643443] {CVE-2024-35973}
  - u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file (Petr Tesarik)   
  - net: openvswitch: fix unwanted error log on timeout policy probing (Ilya Maximets)   
  - nouveau: fix function cast warning (Arnd Bergmann)   
  - Bluetooth: Fix memory leak in hci_req_sync_complete() (Dmitry Antipov) [Orabug: 36643454] {CVE-2024-35978}
  - batman-adv: Avoid infinite loop trying to resize local TT (Sven Eckelmann) [Orabug: 36643462] {CVE-2024-35982}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.333.5.el7uek]
changelog:
  - nfc: nci: Fix handling of zero-length payload packets in nci_rx_work() (Ryosuke Yasuoka)   
  - nfc: nci: Fix uninit-value in nci_rx_work (Ryosuke Yasuoka) [Orabug: 36768758] {CVE-2024-38381}
  - nfc: nci: Fix kcov check in nci_rx_work() (Tetsuo Handa)   
  - ipv6: sr: fix incorrect unregister order (Hangbin Liu)   
  - vxlan: Fix regression when dropping packets due to invalid src addresses (Daniel Borkmann)   
  - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Herbert Xu)   
  - fbdev: savage: Handle err return when savagefb_check_var failed (Cai Xinchen)   
  - speakup: Fix sizeof() vs ARRAY_SIZE() bug (Dan Carpenter) [Orabug: 36765636] {CVE-2024-38587}
  - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Yu Kuai)   
  - x86/boot: Ignore relocations in .notes sections in walk_relocs() too (Guixiong Wei)


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.334.2.el7uek]
changelog:
  - LTS tag: v5.4.278 (Alok Tiwari)   
  - x86/tsc: Trust initial offset in architectural TSC-adjust MSRs (Daniel J Blueman)   
  - io_uring: fail NOP if non-zero op flags is passed in (Ming Lei)   
  - nfs: fix undefined behavior in nfs_block_bits() (Sergey Shtylyov)   
  - s390/ap: Fix crash in AP internal function modify_bitmap() (Harald Freudenberger)   
  - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (Baokun Li)   
  - sparc: move struct termio to asm/termios.h (Mike Gilbert)   
  - xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING (Eric Dumazet)   
  - net: fix __dst_negative_advice() race (Eric Dumazet)   
  - kdb: Use format-specifiers rather than memset() for padding in kdb_read() (Daniel Thompson)   
  - kdb: Merge identical case statements in kdb_read() (Daniel Thompson)   
  - kdb: Fix console handling when editing and tab-completing commands (Daniel Thompson)   
  - kdb: Use format-strings rather than '- kdb: Fix buffer overflow during tab-complete (Daniel Thompson)   
  - sparc64: Fix number of online CPUs (Sam Ravnborg)   
  - intel_th: pci: Add Meteor Lake-S CPU support (Alexander Shishkin)   
  - net/9p: fix uninit-value in p9_client_rpc() (Nikita Zhandarovich)   
  - net/ipv6: Fix route deleting failure when metric equals 0 (xu xin)   
  - crypto: ecrdsa - Fix module auto-load on add_key (Vitaly Chikunov)   
  - KVM: arm64: Allow AArch32 PSTATE.M to be restored as System mode (Marc Zyngier)   
  - media: v4l2-core: hold videodev_lock until dev reg, finishes (Hans Verkuil)   
  - media: mxl5xx: Move xpt structures off stack (Nathan Chancellor)   
  - media: mc: mark the media devnode as registered from the, start (Hans Verkuil)   
  - arm64: dts: hi3798cv200: fix the size of GICR (Yang Xiwen)   
  - wifi: rtl8xxxu: Fix the TX power of RTL8192CU, RTL8723AU (Bitterblue Smith)   
  - arm64: tegra: Correct Tegra132 I2C alias (Krzysztof Kozlowski)   
  - ACPI: resource: Do IRQ override on TongFang GXxHRXx and GMxHGxx (Christoffer Sandberg)   
  - ata: pata_legacy: make legacy_exit() work again (Sergey Shtylyov)   
  - drm/amdgpu: add error handle to avoid out-of-bounds (Bob Zhou)   
  - media: lgdt3306a: Add a check against null-pointer-def (Zheyu Ma)   
  - f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode() (Chao Yu)   
  - x86/mm: Remove broken vsyscall emulation code from the page fault code (Linus Torvalds)   
  - nilfs2: fix use-after-free of timer for log writer thread (Ryusuke Konishi)   
  - afs: Don't cross .backup mountpoint from backup volume (Marc Dionne)   
  - mmc: core: Do not force a retune before RPMB switch (Jorge Ramirez-Ortiz)   
  - binder: fix max_thread type inconsistency (Carlos Llamas)   
  - SUNRPC: Fix loop termination condition in gss_free_in_token_pages() (Chuck Lever)   
  - ALSA: timer: Set lower bound of start tick time (Takashi Iwai)   
  - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound (Yue Haibing)   
  - spi: stm32: Don't warn about spurious interrupts (Uwe Kleine-König)   
  - kconfig: fix comparison to constant symbols, 'm', 'n' (Masahiro Yamada)   
  - netfilter: tproxy: bail out if IP has been disabled on the device (Florian Westphal)   
  - net:fec: Add fec_enet_deinit() (Xiaolei Wang)   
  - net: usb: smsc95xx: fix changing LED_SEL bit value updated from EEPROM (Parthiban Veerasooran)   
  - smsc95xx: use usbnet->driver_priv (Andre Edich)   
  - smsc95xx: remove redundant function arguments (Andre Edich)   
  - enic: Validate length of nl attributes in enic_set_vf_port (Roded Zats)   
  - dma-buf/sw-sync: don't enable IRQ from sync_print_obj() (Tetsuo Handa)   
  - net/mlx5e: Use rx_missed_errors instead of rx_dropped for reporting buffer exhaustion (Carolina Jubran)   
  - nvmet: fix ns enable/disable possible hang (Sagi Grimberg)   
  - spi: Don't mark message DMA mapped when no transfer in it is (Andy Shevchenko)   
  - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Eric Dumazet)   
  - net: fec: avoid lock evasion when reading pps_enable (Wei Fang)   
  - virtio: delete vq in vp_find_vqs_msix() when request_irq() fails (Jiri Pirko)   
  - arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY (Jiangfeng Xiao)   
  - openvswitch: Set the skbuff pkt_type for proper pmtud support. (Aaron Conole)   
  - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (Kuniyuki Iwashima)   
  - params: lift param_set_uint_minmax to common code (Sagi Grimberg)   
  - ipv6: sr: fix memleak in seg6_hmac_init_algo (Hangbin Liu)   
  - sunrpc: fix NFSACL RPC retry on soft mount (Dan Aloni)   
  - x86/kconfig: Select ARCH_WANT_FRAME_POINTERS again when UNWINDER_FRAME_POINTER=y (Masahiro Yamada)   
  - null_blk: Fix the WARNING: modpost: missing MODULE_DESCRIPTION() (Zhu Yanjun)   
  - media: cec: cec-api: add locking in cec_release() (Hans Verkuil)   
  - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Hans Verkuil)   
  - um: Fix the -Wmissing-prototypes warning for __switch_mm (Tiwei Bie)   
  - powerpc/pseries: Add failure related checks for h_get_mpp and h_get_ppp (Shrikanth Hegde)   
  - scsi: qla2xxx: Replace all non-returning strlcpy() with strscpy() (Azeem Shaikh)   
  - media: stk1160: fix bounds checking in stk1160_copy_video() (Dan Carpenter)   
  - um: Add winch to winch_handlers before registering winch IRQ (Roberto Sassu)   
  - um: Fix return value in ubd_init() (Duoming Zhou)   
  - drm/msm/dpu: Always flush the slave INTF on the CTL (Marijn Suijten)   
  - Input: pm8xxx-vibrator - correct VIB_MAX_LEVELS calculation (Fenglin Wu)   
  - Input: ims-pcu - fix printf string overflow (Arnd Bergmann)   
  - libsubcmd: Fix parse-options memory leak (Ian Rogers)   
  - serial: sh-sci: protect invalidating RXDMA on shutdown (Wolfram Sang)   
  - f2fs: fix to release node block count in error path of f2fs_new_node_page() (Chao Yu)   
  - extcon: max8997: select IRQ_DOMAIN instead of depending on it (Randy Dunlap)   
  - ppdev: Add an error check in register_device (Huai-Yuan Liu)   
  - ppdev: Remove usage of the deprecated ida_simple_xx() API (Christophe JAILLET)   
  - stm class: Fix a double free in stm_register_device() (Dan Carpenter)   
  - usb: gadget: u_audio: Clear uac pointer when freed. (Chris Wulff)   
  - microblaze: Remove early printk call from cpuinfo-static.c (Michal Simek)   
  - microblaze: Remove gcc flag for non existing early_printk.c file (Michal Simek)   
  - iio: pressure: dps310: support negative temperature values (Thomas Haemmerle)   
  - greybus: arche-ctrl: move device table to its right location (Arnd Bergmann)   
  - serial: max3100: Fix bitwise types (Andy Shevchenko)   
  - serial: max3100: Update uart_driver_registered on driver removal (Andy Shevchenko)   
  - serial: max3100: Lock port->lock when calling uart_handle_cts_change() (Andy Shevchenko)   
  - firmware: dmi-id: add a release callback function (Arnd Bergmann)   
  - dmaengine: idma64: Add check for dma_set_max_seg_size (Chen Ni)   
  - soundwire: cadence: fix invalid PDI offset (Pierre-Louis Bossart)   
  - soundwire: cadence_master: improve PDI allocation (Bard Liao)   
  - soundwire: intel: don't filter out PDI0/1 (Pierre-Louis Bossart)   
  - soundwire: cadence/intel: simplify PDI/port mapping (Pierre-Louis Bossart)   
  - greybus: lights: check return of get_channel_from_mode (Rui Miguel Silva)   
  - sched/fair: Allow disabling sched_balance_newidle with sched_relax_domain_level (Vitalii Bursov)   
  - af_packet: do not call packet_read_pending() from tpacket_destruct_skb() (Eric Dumazet)   
  - netrom: fix possible dead-lock in nr_rt_ioctl() (Eric Dumazet)   
  - RDMA/IPoIB: Fix format truncation compilation errors (Leon Romanovsky)   
  - selftests/kcmp: remove unused open mode (Edward Liaw)   
  - selftests/kcmp: Make the test output consistent and clear (Gautam Menghani)   
  - SUNRPC: Fix gss_free_in_token_pages() (Chuck Lever)   
  - sunrpc: removed redundant procp check (Aleksandr Aprelkov)   
  - ext4: avoid excessive credit estimate in ext4_tmpfile() (Jan Kara)   
  - x86/insn: Fix PUSH instruction in x86 instruction decoder opcode map (Adrian Hunter)   
  - RDMA/hns: Use complete parentheses in macros (Chengchang Tang)   
  - drm/panel: simple: Add missing Innolux G121X1-L03 format, flags, connector (Marek Vasut)   
  - ASoC: tracing: Export SND_SOC_DAPM_DIR_OUT to its value (Steven Rostedt)   
  - drm/arm/malidp: fix a possible null pointer dereference (Huai-Yuan Liu)   
  - fbdev: sh7760fb: allow modular build (Randy Dunlap)   
  - platform/x86: wmi: Make two functions static (YueHaibing)   
  - media: radio-shark2: Avoid led_names truncations (Ricardo Ribalda)   
  - media: ngene: Add dvb_ca_en50221_init return value check (Aleksandr Burakov)   
  - fbdev: sisfb: hide unused variables (Arnd Bergmann)   
  - powerpc/fsl-soc: hide unused const variable (Arnd Bergmann)   
  - drm/mediatek: Add 0 size check to mtk_drm_gem_obj (Justin Green)   
  - fbdev: shmobile: fix snprintf truncation (Arnd Bergmann)   
  - mtd: rawnand: hynix: fixed typo (Maxim Korotkov)   
  - drm/amd/display: Fix potential index out of bounds in color transformation function (Srinivasan Shanmugam)   
  - ipv6: sr: fix invalid unregister error path (Hangbin Liu)   
  - ipv6: sr: add missing seg6_local_exit (Hangbin Liu)   
  - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (Ilya Maximets)   
  - net: usb: smsc95xx: stop lying about skb->truesize (Eric Dumazet)   
  - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (Breno Leitao)   
  - net: ethernet: cortina: Locking fixes (Linus Walleij)   
  - m68k: mac: Fix reboot hang on Mac IIci (Finn Thain)   
  - m68k: Fix spinlock race in kernel thread creation (Michael Schmitz)   
  - net: usb: sr9700: stop lying about skb->truesize (Eric Dumazet)   
  - usb: aqc111: stop lying about skb->truesize (Eric Dumazet)   
  - wifi: mwl8k: initialize cmd->addr[] properly (Dan Carpenter)   
  - scsi: qedf: Ensure the copied buf is NUL terminated (Bui Quang Minh)   
  - scsi: bfa: Ensure the copied buf is NUL terminated (Bui Quang Minh)   
  - HID: intel-ish-hid: ipc: Add check for pci_alloc_irq_vectors (Chen Ni)   
  - Revert "sh: Handle calling csum_partial with misaligned data" (Guenter Roeck)   
  - sh: kprobes: Merge arch_copy_kprobe() into arch_prepare_kprobe() (Geert Uytterhoeven)   
  - wifi: ar5523: enable proper endpoint verification (Nikita Zhandarovich)   
  - wifi: carl9170: add a proper sanity check for endpoints (Nikita Zhandarovich)   
  - macintosh/via-macii: Fix "BUG: sleeping function called from invalid context" (Finn Thain)   
  - tcp: avoid premature drops in tcp_add_backlog() (Eric Dumazet)   
  - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Lu Wei)   
  - tcp: minor optimization in tcp_add_backlog() (Eric Dumazet)   
  - wifi: ath10k: populate board data for WCN3990 (Dmitry Baryshkov)   
  - wifi: ath10k: Fix an error code problem in ath10k_dbg_sta_write_peer_debug_trigger() (Su Hui)   
  - x86/purgatory: Switch to the position-independent small code model (Ard Biesheuvel)   
  - scsi: hpsa: Fix allocation size for Scsi_Host private data (Yuri Karpov)   
  - scsi: libsas: Fix the failure of adding phy with zero-address to port (Xingui Yang)   
  - cpufreq: exit() callback is optional (Viresh Kumar)   
  - cpufreq: Rearrange locking in cpufreq_remove_dev() (Rafael J. Wysocki)   
  - cpufreq: Split cpufreq_offline() (Rafael J. Wysocki)   
  - cpufreq: Reorganize checks in cpufreq_offline() (Rafael J. Wysocki)   
  - ACPI: disable -Wstringop-truncation (Arnd Bergmann)   
  - irqchip/alpine-msi: Fix off-by-one in allocation error path (Zenghui Yu)   
  - scsi: ufs: core: Perform read back after disabling UIC_COMMAND_COMPL (Andrew Halaney)   
  - scsi: ufs: core: Perform read back after disabling interrupts (Andrew Halaney)   
  - scsi: ufs: cdns-pltfrm: Perform read back after writing HCLKDIV (Andrew Halaney)   
  - scsi: ufs: qcom: Perform read back after writing reset bit (Andrew Halaney)   
  - qed: avoid truncating work queue length (Arnd Bergmann)   
  - wifi: ath10k: poll service ready message before failing (Baochen Qiang)   
  - md: fix resync softlockup when bitmap size is less than array size (Yu Kuai)   
  - null_blk: Fix missing mutex_destroy() at module removal (Zhu Yanjun)   
  - jffs2: prevent xattr node from overflowing the eraseblock (Ilya Denisyev)   
  - s390/cio: fix tracepoint subchannel type field (Peter Oberparleiter)   
  - crypto: ccp - drop platform ifdef checks (Arnd Bergmann)   
  - parisc: add missing export of __cmpxchg_u8() (Al Viro)   
  - nilfs2: fix out-of-range warning (Arnd Bergmann)   
  - ecryptfs: Fix buffer size for tag 66 packet (Brian Kubisiak)   
  - firmware: raspberrypi: Use correct device for DMA mappings (Laurent Pinchart)   
  - crypto: bcm - Fix pointer arithmetic (Aleksandr Mishin)   
  - openpromfs: finish conversion to the new mount API (Eric Sandeen)   
  - nvme: find numa distance only if controller has valid numa id (Nilay Shroff)   
  - drm/amdkfd: Flush the process wq before creating a kfd_process (Lancelot SIX)   
  - ASoC: da7219-aad: fix usage of device_get_named_child_node() (Pierre-Louis Bossart)   
  - ASoC: dt-bindings: rt5645: add cbj sleeve gpio property (Derek Fang)   
  - ASoC: rt5645: Fix the electric noise due to the CBJ contacts floating (Derek Fang)   
  - drm/amd/display: Set color_mgmt_changed to true on unsuspend (Joshua Ashton)   
  - net: usb: qmi_wwan: add Telit FN920C04 compositions (Daniele Palmas)   
  - wifi: cfg80211: fix the order of arguments for trace events of the tx_rx_evt class (Igor Artemiev)   
  - nilfs2: fix potential hang in nilfs_detach_log_writer() (Ryusuke Konishi)   
  - nilfs2: fix unexpected freezing of nilfs_segctor_sync() (Ryusuke Konishi)   
  - net: smc91x: Fix m68k kernel compilation for ColdFire CPU (Thorsten Blum)   
  - ring-buffer: Fix a race between readers and resize checks (Petr Pavlu)   
  - tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (Daniel Starke)


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.334.3.el7uek]
changelog:
  - rds/rdma: Send info to userspace, even if connnection is down. (Juan Garcia)  [Orabug: 36529562]  
  - pci: add hotplug patch support for SOLIDIGM Aura10 AIC 0x025e:0x0b60 (Alan Adamson)  [Orabug: 36762919]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.334.4.el7uek]
changelog:
  - Bluetooth: L2CAP: Fix rejecting L2CAP_CONN_PARAM_UPDATE_REQ (Luiz Augusto von Dentz)   
  - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Jozsef Kadlecsik)   
  - drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found (Marek Szyprowski)   
  - vxlan: Fix regression when dropping packets due to invalid src addresses (Daniel Borkmann)


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.333.5.el7uek]
changelog:
  - nfc: nci: Fix handling of zero-length payload packets in nci_rx_work() (Ryosuke Yasuoka)   
  - nfc: nci: Fix uninit-value in nci_rx_work (Ryosuke Yasuoka) [Orabug: 36768758] {CVE-2024-38381}
  - nfc: nci: Fix kcov check in nci_rx_work() (Tetsuo Handa)   
  - ipv6: sr: fix incorrect unregister order (Hangbin Liu)   
  - vxlan: Fix regression when dropping packets due to invalid src addresses (Daniel Borkmann)   
  - crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (Herbert Xu) [Orabug: 36830461] {CVE-2024-39493}
  - fbdev: savage: Handle err return when savagefb_check_var failed (Cai Xinchen) [Orabug: 36809264] {CVE-2024-39475}
  - speakup: Fix sizeof() vs ARRAY_SIZE() bug (Dan Carpenter) [Orabug: 36765636] {CVE-2024-38587}
  - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Yu Kuai) [Orabug: 36809270] {CVE-2024-39476}
  - x86/boot: Ignore relocations in .notes sections in walk_relocs() too (Guixiong Wei)


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.334.2.el7uek]
changelog:
  - LTS tag: v5.4.278 (Alok Tiwari)   
  - x86/tsc: Trust initial offset in architectural TSC-adjust MSRs (Daniel J Blueman)   
  - io_uring: fail NOP if non-zero op flags is passed in (Ming Lei)   
  - nfs: fix undefined behavior in nfs_block_bits() (Sergey Shtylyov)   
  - s390/ap: Fix crash in AP internal function modify_bitmap() (Harald Freudenberger) [Orabug: 36774592] {CVE-2024-38661}
  - ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (Baokun Li) [Orabug: 36774598] {CVE-2024-39276}
  - sparc: move struct termio to asm/termios.h (Mike Gilbert)   
  - xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING (Eric Dumazet) [Orabug: 36643449] {CVE-2024-35976}
  - net: fix __dst_negative_advice() race (Eric Dumazet) [Orabug: 36720417] {CVE-2024-36971}
  - kdb: Use format-specifiers rather than memset() for padding in kdb_read() (Daniel Thompson)   
  - kdb: Merge identical case statements in kdb_read() (Daniel Thompson)   
  - kdb: Fix console handling when editing and tab-completing commands (Daniel Thompson)   
  - kdb: Use format-strings rather than '- kdb: Fix buffer overflow during tab-complete (Daniel Thompson) [Orabug: 36809288] {CVE-2024-39480}
  - sparc64: Fix number of online CPUs (Sam Ravnborg)   
  - intel_th: pci: Add Meteor Lake-S CPU support (Alexander Shishkin)   
  - net/9p: fix uninit-value in p9_client_rpc() (Nikita Zhandarovich) [Orabug: 36774612] {CVE-2024-39301}
  - net/ipv6: Fix route deleting failure when metric equals 0 (xu xin)   
  - crypto: ecrdsa - Fix module auto-load on add_key (Vitaly Chikunov)   
  - KVM: arm64: Allow AArch32 PSTATE.M to be restored as System mode (Marc Zyngier)   
  - media: v4l2-core: hold videodev_lock until dev reg, finishes (Hans Verkuil)   
  - media: mxl5xx: Move xpt structures off stack (Nathan Chancellor)   
  - media: mc: mark the media devnode as registered from the, start (Hans Verkuil)   
  - arm64: dts: hi3798cv200: fix the size of GICR (Yang Xiwen)   
  - wifi: rtl8xxxu: Fix the TX power of RTL8192CU, RTL8723AU (Bitterblue Smith)   
  - arm64: tegra: Correct Tegra132 I2C alias (Krzysztof Kozlowski)   
  - ACPI: resource: Do IRQ override on TongFang GXxHRXx and GMxHGxx (Christoffer Sandberg)   
  - ata: pata_legacy: make legacy_exit() work again (Sergey Shtylyov)   
  - drm/amdgpu: add error handle to avoid out-of-bounds (Bob Zhou) [Orabug: 36774657] {CVE-2024-39471}
  - media: lgdt3306a: Add a check against null-pointer-def (Zheyu Ma)   
  - f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode() (Chao Yu) [Orabug: 36774636] {CVE-2024-39467}
  - x86/mm: Remove broken vsyscall emulation code from the page fault code (Linus Torvalds)   
  - nilfs2: fix use-after-free of timer for log writer thread (Ryusuke Konishi) [Orabug: 36753564] {CVE-2024-38583}
  - afs: Don't cross .backup mountpoint from backup volume (Marc Dionne)   
  - mmc: core: Do not force a retune before RPMB switch (Jorge Ramirez-Ortiz)   
  - binder: fix max_thread type inconsistency (Carlos Llamas)   
  - SUNRPC: Fix loop termination condition in gss_free_in_token_pages() (Chuck Lever) [Orabug: 36809512] {CVE-2024-36288}
  - ALSA: timer: Set lower bound of start tick time (Takashi Iwai) [Orabug: 36753729] {CVE-2024-38618}
  - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound (Yue Haibing) [Orabug: 36763551] {CVE-2024-33621}
  - spi: stm32: Don't warn about spurious interrupts (Uwe Kleine-König)   
  - kconfig: fix comparison to constant symbols, 'm', 'n' (Masahiro Yamada)   
  - netfilter: tproxy: bail out if IP has been disabled on the device (Florian Westphal) [Orabug: 36763563] {CVE-2024-36270}
  - net:fec: Add fec_enet_deinit() (Xiaolei Wang)   
  - net: usb: smsc95xx: fix changing LED_SEL bit value updated from EEPROM (Parthiban Veerasooran)   
  - smsc95xx: use usbnet->driver_priv (Andre Edich)   
  - smsc95xx: remove redundant function arguments (Andre Edich)   
  - enic: Validate length of nl attributes in enic_set_vf_port (Roded Zats) [Orabug: 36763836] {CVE-2024-38659}
  - dma-buf/sw-sync: don't enable IRQ from sync_print_obj() (Tetsuo Handa) [Orabug: 36763844] {CVE-2024-38780}
  - net/mlx5e: Use rx_missed_errors instead of rx_dropped for reporting buffer exhaustion (Carolina Jubran)   
  - nvmet: fix ns enable/disable possible hang (Sagi Grimberg)   
  - spi: Don't mark message DMA mapped when no transfer in it is (Andy Shevchenko)   
  - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Eric Dumazet) [Orabug: 36763570] {CVE-2024-36286}
  - net: fec: avoid lock evasion when reading pps_enable (Wei Fang)   
  - virtio: delete vq in vp_find_vqs_msix() when request_irq() fails (Jiri Pirko) [Orabug: 36763587] {CVE-2024-37353}
  - arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY (Jiangfeng Xiao) [Orabug: 36825258] {CVE-2024-39488}
  - openvswitch: Set the skbuff pkt_type for proper pmtud support. (Aaron Conole)   
  - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (Kuniyuki Iwashima) [Orabug: 36763591] {CVE-2024-37356}
  - params: lift param_set_uint_minmax to common code (Sagi Grimberg)   
  - ipv6: sr: fix memleak in seg6_hmac_init_algo (Hangbin Liu) [Orabug: 36825262] {CVE-2024-39489}
  - sunrpc: fix NFSACL RPC retry on soft mount (Dan Aloni)   
  - x86/kconfig: Select ARCH_WANT_FRAME_POINTERS again when UNWINDER_FRAME_POINTER=y (Masahiro Yamada)   
  - null_blk: Fix the WARNING: modpost: missing MODULE_DESCRIPTION() (Zhu Yanjun)   
  - media: cec: cec-api: add locking in cec_release() (Hans Verkuil)   
  - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Hans Verkuil)   
  - um: Fix the -Wmissing-prototypes warning for __switch_mm (Tiwei Bie)   
  - powerpc/pseries: Add failure related checks for h_get_mpp and h_get_ppp (Shrikanth Hegde)   
  - scsi: qla2xxx: Replace all non-returning strlcpy() with strscpy() (Azeem Shaikh)   
  - media: stk1160: fix bounds checking in stk1160_copy_video() (Dan Carpenter) [Orabug: 36763602] {CVE-2024-38621}
  - um: Add winch to winch_handlers before registering winch IRQ (Roberto Sassu) [Orabug: 36768583] {CVE-2024-39292}
  - um: Fix return value in ubd_init() (Duoming Zhou)   
  - drm/msm/dpu: Always flush the slave INTF on the CTL (Marijn Suijten)   
  - Input: pm8xxx-vibrator - correct VIB_MAX_LEVELS calculation (Fenglin Wu)   
  - Input: ims-pcu - fix printf string overflow (Arnd Bergmann)   
  - libsubcmd: Fix parse-options memory leak (Ian Rogers)   
  - serial: sh-sci: protect invalidating RXDMA on shutdown (Wolfram Sang)   
  - f2fs: fix to release node block count in error path of f2fs_new_node_page() (Chao Yu)   
  - extcon: max8997: select IRQ_DOMAIN instead of depending on it (Randy Dunlap)   
  - ppdev: Add an error check in register_device (Huai-Yuan Liu) [Orabug: 36678064] {CVE-2024-36015}
  - ppdev: Remove usage of the deprecated ida_simple_xx() API (Christophe JAILLET)   
  - stm class: Fix a double free in stm_register_device() (Dan Carpenter) [Orabug: 36763763] {CVE-2024-38627}
  - usb: gadget: u_audio: Clear uac pointer when freed. (Chris Wulff)   
  - microblaze: Remove early printk call from cpuinfo-static.c (Michal Simek)   
  - microblaze: Remove gcc flag for non existing early_printk.c file (Michal Simek)   
  - iio: pressure: dps310: support negative temperature values (Thomas Haemmerle)   
  - greybus: arche-ctrl: move device table to its right location (Arnd Bergmann)   
  - serial: max3100: Fix bitwise types (Andy Shevchenko)   
  - serial: max3100: Update uart_driver_registered on driver removal (Andy Shevchenko) [Orabug: 36763814] {CVE-2024-38633}
  - serial: max3100: Lock port->lock when calling uart_handle_cts_change() (Andy Shevchenko) [Orabug: 36763819] {CVE-2024-38634}
  - firmware: dmi-id: add a release callback function (Arnd Bergmann)   
  - dmaengine: idma64: Add check for dma_set_max_seg_size (Chen Ni)   
  - soundwire: cadence: fix invalid PDI offset (Pierre-Louis Bossart) [Orabug: 36763825] {CVE-2024-38635}
  - soundwire: cadence_master: improve PDI allocation (Bard Liao)   
  - soundwire: intel: don't filter out PDI0/1 (Pierre-Louis Bossart)   
  - soundwire: cadence/intel: simplify PDI/port mapping (Pierre-Louis Bossart)   
  - greybus: lights: check return of get_channel_from_mode (Rui Miguel Silva) [Orabug: 36763832] {CVE-2024-38637}
  - sched/fair: Allow disabling sched_balance_newidle with sched_relax_domain_level (Vitalii Bursov)   
  - af_packet: do not call packet_read_pending() from tpacket_destruct_skb() (Eric Dumazet)   
  - netrom: fix possible dead-lock in nr_rt_ioctl() (Eric Dumazet) [Orabug: 36753581] {CVE-2024-38589}
  - RDMA/IPoIB: Fix format truncation compilation errors (Leon Romanovsky)   
  - selftests/kcmp: remove unused open mode (Edward Liaw)   
  - selftests/kcmp: Make the test output consistent and clear (Gautam Menghani)   
  - SUNRPC: Fix gss_free_in_token_pages() (Chuck Lever)   
  - sunrpc: removed redundant procp check (Aleksandr Aprelkov)   
  - ext4: avoid excessive credit estimate in ext4_tmpfile() (Jan Kara)   
  - x86/insn: Fix PUSH instruction in x86 instruction decoder opcode map (Adrian Hunter)   
  - RDMA/hns: Use complete parentheses in macros (Chengchang Tang)   
  - drm/panel: simple: Add missing Innolux G121X1-L03 format, flags, connector (Marek Vasut)   
  - ASoC: tracing: Export SND_SOC_DAPM_DIR_OUT to its value (Steven Rostedt)   
  - drm/arm/malidp: fix a possible null pointer dereference (Huai-Yuan Liu) [Orabug: 36678061] {CVE-2024-36014}
  - fbdev: sh7760fb: allow modular build (Randy Dunlap)   
  - platform/x86: wmi: Make two functions static (YueHaibing)   
  - media: radio-shark2: Avoid led_names truncations (Ricardo Ribalda)   
  - media: ngene: Add dvb_ca_en50221_init return value check (Aleksandr Burakov)   
  - fbdev: sisfb: hide unused variables (Arnd Bergmann)   
  - powerpc/fsl-soc: hide unused const variable (Arnd Bergmann)   
  - drm/mediatek: Add 0 size check to mtk_drm_gem_obj (Justin Green) [Orabug: 36753414] {CVE-2024-38549}
  - fbdev: shmobile: fix snprintf truncation (Arnd Bergmann)   
  - mtd: rawnand: hynix: fixed typo (Maxim Korotkov)   
  - drm/amd/display: Fix potential index out of bounds in color transformation function (Srinivasan Shanmugam) [Orabug: 36753424] {CVE-2024-38552}
  - ipv6: sr: fix invalid unregister error path (Hangbin Liu) [Orabug: 36753710] {CVE-2024-38612}
  - ipv6: sr: add missing seg6_local_exit (Hangbin Liu)   
  - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (Ilya Maximets) [Orabug: 36753462] {CVE-2024-38558}
  - net: usb: smsc95xx: stop lying about skb->truesize (Eric Dumazet)   
  - af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (Breno Leitao) [Orabug: 36753599] {CVE-2024-38596}
  - net: ethernet: cortina: Locking fixes (Linus Walleij)   
  - m68k: mac: Fix reboot hang on Mac IIci (Finn Thain)   
  - m68k: Fix spinlock race in kernel thread creation (Michael Schmitz) [Orabug: 36753714] {CVE-2024-38613}
  - net: usb: sr9700: stop lying about skb->truesize (Eric Dumazet)   
  - usb: aqc111: stop lying about skb->truesize (Eric Dumazet)   
  - wifi: mwl8k: initialize cmd->addr[] properly (Dan Carpenter)   
  - scsi: qedf: Ensure the copied buf is NUL terminated (Bui Quang Minh) [Orabug: 36753467] {CVE-2024-38559}
  - scsi: bfa: Ensure the copied buf is NUL terminated (Bui Quang Minh) [Orabug: 36753472] {CVE-2024-38560}
  - HID: intel-ish-hid: ipc: Add check for pci_alloc_irq_vectors (Chen Ni)   
  - Revert "sh: Handle calling csum_partial with misaligned data" (Guenter Roeck)   
  - sh: kprobes: Merge arch_copy_kprobe() into arch_prepare_kprobe() (Geert Uytterhoeven)   
  - wifi: ar5523: enable proper endpoint verification (Nikita Zhandarovich) [Orabug: 36753485] {CVE-2024-38565}
  - wifi: carl9170: add a proper sanity check for endpoints (Nikita Zhandarovich) [Orabug: 36753508] {CVE-2024-38567}
  - macintosh/via-macii: Fix "BUG: sleeping function called from invalid context" (Finn Thain)   
  - tcp: avoid premature drops in tcp_add_backlog() (Eric Dumazet)   
  - tcp: fix a signed-integer-overflow bug in tcp_add_backlog() (Lu Wei)   
  - tcp: minor optimization in tcp_add_backlog() (Eric Dumazet)   
  - wifi: ath10k: populate board data for WCN3990 (Dmitry Baryshkov)   
  - wifi: ath10k: Fix an error code problem in ath10k_dbg_sta_write_peer_debug_trigger() (Su Hui)   
  - x86/purgatory: Switch to the position-independent small code model (Ard Biesheuvel)   
  - scsi: hpsa: Fix allocation size for Scsi_Host private data (Yuri Karpov)   
  - scsi: libsas: Fix the failure of adding phy with zero-address to port (Xingui Yang)   
  - cpufreq: exit() callback is optional (Viresh Kumar) [Orabug: 36753721] {CVE-2024-38615}
  - cpufreq: Rearrange locking in cpufreq_remove_dev() (Rafael J. Wysocki)   
  - cpufreq: Split cpufreq_offline() (Rafael J. Wysocki)   
  - cpufreq: Reorganize checks in cpufreq_offline() (Rafael J. Wysocki)   
  - ACPI: disable -Wstringop-truncation (Arnd Bergmann)   
  - irqchip/alpine-msi: Fix off-by-one in allocation error path (Zenghui Yu)   
  - scsi: ufs: core: Perform read back after disabling UIC_COMMAND_COMPL (Andrew Halaney)   
  - scsi: ufs: core: Perform read back after disabling interrupts (Andrew Halaney)   
  - scsi: ufs: cdns-pltfrm: Perform read back after writing HCLKDIV (Andrew Halaney)   
  - scsi: ufs: qcom: Perform read back after writing reset bit (Andrew Halaney)   
  - qed: avoid truncating work queue length (Arnd Bergmann)   
  - wifi: ath10k: poll service ready message before failing (Baochen Qiang)   
  - md: fix resync softlockup when bitmap size is less than array size (Yu Kuai) [Orabug: 36753648] {CVE-2024-38598}
  - null_blk: Fix missing mutex_destroy() at module removal (Zhu Yanjun)   
  - jffs2: prevent xattr node from overflowing the eraseblock (Ilya Denisyev) [Orabug: 36753651] {CVE-2024-38599}
  - s390/cio: fix tracepoint subchannel type field (Peter Oberparleiter)   
  - crypto: ccp - drop platform ifdef checks (Arnd Bergmann)   
  - parisc: add missing export of __cmpxchg_u8() (Al Viro)   
  - nilfs2: fix out-of-range warning (Arnd Bergmann)   
  - ecryptfs: Fix buffer size for tag 66 packet (Brian Kubisiak) [Orabug: 36753536] {CVE-2024-38578}
  - firmware: raspberrypi: Use correct device for DMA mappings (Laurent Pinchart)   
  - crypto: bcm - Fix pointer arithmetic (Aleksandr Mishin) [Orabug: 36753541] {CVE-2024-38579}
  - openpromfs: finish conversion to the new mount API (Eric Sandeen)   
  - nvme: find numa distance only if controller has valid numa id (Nilay Shroff)   
  - drm/amdkfd: Flush the process wq before creating a kfd_process (Lancelot SIX)   
  - ASoC: da7219-aad: fix usage of device_get_named_child_node() (Pierre-Louis Bossart)   
  - ASoC: dt-bindings: rt5645: add cbj sleeve gpio property (Derek Fang)   
  - ASoC: rt5645: Fix the electric noise due to the CBJ contacts floating (Derek Fang)   
  - drm/amd/display: Set color_mgmt_changed to true on unsuspend (Joshua Ashton)   
  - net: usb: qmi_wwan: add Telit FN920C04 compositions (Daniele Palmas)   
  - wifi: cfg80211: fix the order of arguments for trace events of the tx_rx_evt class (Igor Artemiev)   
  - nilfs2: fix potential hang in nilfs_detach_log_writer() (Ryusuke Konishi) [Orabug: 36753557] {CVE-2024-38582}
  - nilfs2: fix unexpected freezing of nilfs_segctor_sync() (Ryusuke Konishi)   
  - net: smc91x: Fix m68k kernel compilation for ColdFire CPU (Thorsten Blum)   
  - ring-buffer: Fix a race between readers and resize checks (Petr Pavlu) [Orabug: 36753661] {CVE-2024-38601}
  - tty: n_gsm: fix possible out-of-bounds in gsm0_receive() (Daniel Starke) [Orabug: 36678068] {CVE-2024-36016}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.334.4.el7uek]
changelog:
  - Bluetooth: L2CAP: Fix rejecting L2CAP_CONN_PARAM_UPDATE_REQ (Luiz Augusto von Dentz)   
  - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Jozsef Kadlecsik) [Orabug: 36835599] {CVE-2024-39503}
  - drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found (Marek Szyprowski) [Orabug: 36836328] {CVE-2024-40916}
  - vxlan: Fix regression when dropping packets due to invalid src addresses (Daniel Borkmann)


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.334.5.el7uek]
changelog:
  - Fix incorrect syntax in UEK6 OL8 kernel-uek.spec (Sherry Yang)  [Orabug: 36847358]  
  - rds/ib: decrement ib_rx_total_incs after releasing associated cache (Arumugam Kolappan)  [Orabug: 36722026]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.334.6.el7uek]
changelog:
  - loop: Fix a race between loop detach and loop open (Gulam Mohamed)  [Orabug: 36197800]  
  - x86/bhi: Do not enable unnecessary BHI mitigation in OCI and Exadata VMs (Alexandre Chartre)  [Orabug: 36672495]  
  - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Alexandre Chartre)  [Orabug: 36642472]  
  - wifi: wilc1000: fix ies_len type in connect path (Jozef Hopko)   
  - net/mlx5e: drop shorter ethernet frames (Manjunath Patil)  [Orabug: 36879157]  {CVE-2024-41090} {CVE-2024-41091}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.335.1.el7uek]
changelog:
  - LTS tag: v5.4.280 (Alok Tiwari)   
  - i2c: rcar: bring hardware to known state when probing (Wolfram Sang)   
  - nilfs2: fix kernel bug on rename operation of broken directory (Ryusuke Konishi)   
  - tcp: avoid too many retransmit packets (Eric Dumazet)   
  - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Eric Dumazet)   
  - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Menglong Dong)   
  - tcp: refactor tcp_retransmit_timer() (Eric Dumazet)   
  - SUNRPC: Fix RPC client cleaned up the freed pipefs dentries (felix)   
  - libceph: fix race between delayed_work() and ceph_monc_stop() (Ilya Dryomov)   
  - ALSA: hda/realtek: Limit mic boost on VAIO PRO PX (Edson Juliano Drosdeck)   
  - nvmem: meson-efuse: Fix return value of nvmem callbacks (Joy Chakraborty)   
  - hpet: Support 32-bit userspace (He Zhe)   
  - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (Alan Stern)   
  - usb: gadget: configfs: Prevent OOB read/write in usb_string_copy() (Lee Jones)   
  - USB: Add USB_QUIRK_NO_SET_INTF quirk for START BP-850k (WangYuli)   
  - USB: serial: option: add Rolling RW350-GL variants (Vanillan Wang)   
  - USB: serial: option: add Netprisma LCUK54 series modules (Mank Wang)   
  - USB: serial: option: add support for Foxconn T99W651 (Slark Xiao)   
  - USB: serial: option: add Fibocom FM350-GL (Bjørn Mork)   
  - USB: serial: option: add Telit FN912 rmnet compositions (Daniele Palmas)   
  - USB: serial: option: add Telit generic core-dump composition (Daniele Palmas)   
  - ARM: davinci: Convert comma to semicolon (Chen Ni)   
  - s390: Mark psw in __load_psw_mask() as __unitialized (Sven Schnelle)   
  - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (Kuniyuki Iwashima)   
  - ppp: reject claimed-as-LCP but actually malformed packets (Dmitry Antipov)   
  - net: ethernet: lantiq_etop: fix double free in detach (Aleksander Jan Bajkowski)   
  - net: lantiq_etop: add blank line after declaration (Aleksander Jan Bajkowski)   
  - octeontx2-af: Fix incorrect value output on error path in rvu_check_rsrc_availability() (Aleksandr Mishin)   
  - tcp: fix incorrect undo caused by DSACK of TLP retransmit (Neal Cardwell)   
  - tcp: add TCP_INFO status for failed client TFO (Jason Baron)   
  - vfs: don't mod negative dentry count when on shrinker list (Brian Foster)   
  - fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading (linke li)   
  - filelock: fix potential use-after-free in posix_lock_inode (Jeff Layton)   
  - nilfs2: fix incorrect inode allocation from reserved inodes (Ryusuke Konishi)   
  - nvme-multipath: find NUMA path only for online numa-node (Nilay Shroff)   
  - ALSA: hda/realtek: Enable headset mic of JP-IK LEAP W502 with ALC897 (Jian-Hong Pan)   
  - i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr (Piotr Wojtaszczyk)   
  - media: dw2102: fix a potential buffer overflow (Mauro Carvalho Chehab)   
  - bnx2x: Fix multiple UBSAN array-index-out-of-bounds (Ghadi Elie Rahme)   
  - drm/amdgpu/atomfirmware: silence UBSAN warning (Alex Deucher)   
  - drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes (Ma Ke)   
  - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Jan Kara)   
  - fsnotify: Do not generate events for O_PATH file descriptors (Jan Kara)   
  - can: kvaser_usb: Explicitly initialize family in leafimx driver_info struct (Jimmy Assarsson)   
  - mm: optimize the redundant loop of mm_update_owner_next() (Jinliang Zheng)   
  - nilfs2: add missing check for inode numbers on directory entries (Ryusuke Konishi)   
  - nilfs2: fix inode number range checks (Ryusuke Konishi)   
  - inet_diag: Initialize pad field in struct inet_diag_req_v2 (Shigeru Yoshida)   
  - selftests: make order checking verbose in msg_zerocopy selftest (Zijian Zhang)   
  - selftests: fix OOM in msg_zerocopy selftest (Zijian Zhang)   
  - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (Sam Sun)   
  - tcp_metrics: validate source addr length (Jakub Kicinski)   
  - UPSTREAM: tcp: fix DSACK undo in fast recovery to call tcp_try_to_open() (Neal Cardwell)   
  - net: tcp better handling of reordering then loss cases (Yuchung Cheng)   
  - tcp: add ece_ack flag to reno sack functions (Yousuk Seung)   
  - tcp: tcp_mark_head_lost is only valid for sack-tcp (zhang kai)   
  - s390/pkey: Wipe sensitive data on failure (Holger Dengler)   
  - jffs2: Fix potential illegal address access in jffs2_free_inode (Wang Yong)   
  - powerpc/xmon: Check cpu id in commands "c#", "dp#" and "dx#" (Greg Kurz)   
  - orangefs: fix out-of-bounds fsid access (Mike Marshall)   
  - powerpc/64: Set _IO_BASE to POISON_POINTER_DELTA not 0 for CONFIG_PCI=n (Michael Ellerman)   
  - i2c: i801: Annotate apanel_addr as __ro_after_init (Heiner Kallweit)   
  - media: dvb-frontends: tda10048: Fix integer overflow (Ricardo Ribalda)   
  - media: s2255: Use refcount_t instead of atomic_t for num_channels (Ricardo Ribalda)   
  - media: dvb-frontends: tda18271c2dd: Remove casting during div (Ricardo Ribalda)   
  - net: dsa: mv88e6xxx: Correct check for empty list (Simon Horman)   
  - Input: ff-core - prefer struct_size over open coded arithmetic (Erick Archer)   
  - firmware: dmi: Stop decoding on broken entry (Jean Delvare)   
  - sctp: prefer struct_size over open coded arithmetic (Erick Archer)   
  - media: dw2102: Don't translate i2c read into write (Michael Bunk)   
  - drm/amd/display: Skip finding free audio for unknown engine_id (Alex Hung)   
  - drm/amdgpu: Initialize timestamp for some legacy SOCs (Ma Jun)   
  - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini)   
  - IB/core: Implement a limit on UMAD receive List (Michael Guralnik)   
  - media: dvb-usb: dib0700_devices: Add missing release_firmware() (Ricardo Ribalda)   
  - media: dvb: as102-fe: Fix as10x_register_addr packing (Ricardo Ribalda)   
  - drm/lima: fix shared irq handling on driver remove (Erico Nunes)   
  - LTS tag: v5.4.279 (Alok Tiwari)   
  - arm64: dts: rockchip: Add sound-dai-cells for RK3368 (Alex Bee)   
  - ARM: dts: rockchip: rk3066a: add #sound-dai-cells to hdmi node (Johan Jonker)   
  - tcp: Fix data races around icsk->icsk_af_ops. (Kuniyuki Iwashima)   
  - ipv6: Fix data races around sk->sk_prot. (Kuniyuki Iwashima)   
  - ipv6: annotate some data-races around sk->sk_prot (Eric Dumazet)   
  - nfs: Leave pages in the pagecache if readpage failed (Matthew Wilcox (Oracle))   
  - pwm: stm32: Refuse too small period requests (Uwe Kleine-König)   
  - mtd: spinand: macronix: Add support for serial NAND flash (Jaime Liao)   
  - ftruncate: pass a signed offset (Arnd Bergmann)   
  - ata: libata-core: Fix double free on error (Niklas Cassel)   
  - batman-adv: Don't accept TT entries for out-of-spec VIDs (Sven Eckelmann)   
  - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes (Ma Ke)   
  - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes (Ma Ke)   
  - hexagon: fix fadvise64_64 calling conventions (Arnd Bergmann)   
  - csky, hexagon: fix broken sys_sync_file_range (Arnd Bergmann)   
  - net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new (Oleksij Rempel)   
  - net: can: j1939: recover socket queue on CAN bus error during BAM transmission (Oleksij Rempel)   
  - net: can: j1939: Initialize unused data in j1939_send_one() (Shigeru Yoshida)   
  - tty: mcf: MCF54418 has 10 UARTS (Jean-Michel Hautbois)   
  - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (Nikita Zhandarovich)   
  - usb: musb: da8xx: fix a resource leak in probe() (Dan Carpenter)   
  - usb: gadget: printer: SS+ support (Oliver Neukum)   
  - net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez)   
  - iio: chemical: bme680: Fix sensor data read operation (Vasileios Amoiridis)   
  - iio: chemical: bme680: Fix overflows in compensate() functions (Vasileios Amoiridis)   
  - iio: chemical: bme680: Fix calibration data variable (Vasileios Amoiridis)   
  - iio: chemical: bme680: Fix pressure value output (Vasileios Amoiridis)   
  - iio: adc: ad7266: Fix variable checking bug (Fernando Yang)   
  - mmc: sdhci: Do not lock spinlock around mmc_gpio_get_ro() (Adrian Hunter)   
  - mmc: sdhci: Do not invert write-protect twice (Adrian Hunter)   
  - mmc: sdhci-pci: Convert PCIBIOS_* return codes to errnos (Ilpo Järvinen)   
  - x86: stop playing stack games in profile_pc() (Linus Torvalds)   
  - gpio: davinci: Validate the obtained number of IRQs (Aleksandr Mishin)   
  - nvme: fixup comment for nvme RDMA Provider Type (Hannes Reinecke)   
  - soc: ti: wkup_m3_ipc: Send NULL dummy message instead of pointer message (Andrew Davis)   
  - media: dvbdev: Initialize sbuf (Ricardo Ribalda)   
  - ALSA: emux: improve patch ioctl data validation (Oswald Buddenhagen)   
  - net/dpaa2: Avoid explicit cpumask var allocation on stack (Dawei Li)   
  - net/iucv: Avoid explicit cpumask var allocation on stack (Dawei Li)   
  - mtd: partitions: redboot: Added conversion of operands to a larger type (Denis Arefev)   
  - drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep (Laurent Pinchart)   
  - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Pablo Neira Ayuso)   
  - parisc: use correct compat recv/recvfrom syscalls (Arnd Bergmann)   
  - sparc: fix old compat_sys_select() (Arnd Bergmann)   
  - net: phy: micrel: add Microchip KSZ 9477 to the device table (Enguerrand de Ribaucourt)   
  - net: phy: mchp: Add support for LAN8814 QUAD PHY (Divya Koppera)   
  - net: dsa: microchip: fix initial port flush problem (Tristram Ha)   
  - ASoC: fsl-asoc-card: set priv->pdev before using it (Elinor Montmasson)   
  - netfilter: nf_tables: validate family when identifying table via handle (Pablo Neira Ayuso)   
  - drm/amdgpu: fix UBSAN warning in kv_dpm.c (Alex Deucher)   
  - pinctrl: rockchip: fix pinmux reset in rockchip_pmx_set (Huang-Huang Bao)   
  - pinctrl: rockchip: fix pinmux bits for RK3328 GPIO3-B pins (Huang-Huang Bao)   
  - pinctrl: rockchip: fix pinmux bits for RK3328 GPIO2-B pins (Huang-Huang Bao)   
  - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER (Hagar Hemdan)   
  - iio: dac: ad5592r: fix temperature channel scaling value (Marc Ferland)   
  - iio: dac: ad5592r: un-indent code-block for scale read (Alexandru Ardelean)   
  - iio: dac: ad5592r-base: Replace indio_dev->mlock with own device lock (Sergiu Cuciurean)   
  - x86/amd_nb: Check for invalid SMN reads (Yazen Ghannam)   
  - PCI: Add PCI_ERROR_RESPONSE and related definitions (Naveen Naidu)   
  - perf/core: Fix missing wakeup when waiting for context reference (Haifeng Xu)   
  - tracing: Add MODULE_DESCRIPTION() to preemptirq_delay_test (Jeff Johnson)   
  - arm64: dts: qcom: qcs404: fix bluetooth device address (Johan Hovold)   
  - ARM: dts: samsung: smdk4412: fix keypad no-autorepeat (Krzysztof Kozlowski)   
  - ARM: dts: samsung: exynos4412-origen: fix keypad no-autorepeat (Krzysztof Kozlowski)   
  - ARM: dts: samsung: smdkv310: fix keypad no-autorepeat (Krzysztof Kozlowski)   
  - i2c: ocores: set IACK bit after core is enabled (Grygorii Tertychnyi)   
  - gcov: add support for GCC 14 (Peter Oberparleiter)   
  - drm/radeon: fix UBSAN warning in kv_dpm.c (Alex Deucher)   
  - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (Raju Rangoju)   
  - dmaengine: ioatdma: Fix missing kmem_cache_destroy() (Nikita Shubin)   
  - regulator: core: Fix modpost error "regulator_get_regmap" undefined (Biju Das)   
  - net: usb: rtl8150 fix unintiatilzed variables in rtl8150_get_link_ksettings (Oliver Neukum)   
  - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Jozsef Kadlecsik)   
  - virtio_net: checksum offloading handling fix (Heng Qi)   
  - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (David Ruth)   
  - net/sched: act_api: rely on rcu in tcf_idr_check_alloc (Pedro Tammela)   
  - netns: Make get_net_ns() handle zero refcount net (Yue Haibing)   
  - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (Eric Dumazet)   
  - ipv6: prevent possible NULL dereference in rt6_probe() (Eric Dumazet)   
  - ipv6: prevent possible NULL deref in fib6_nh_init() (Eric Dumazet)   
  - netrom: Fix a memory leak in nr_heartbeat_expiry() (Gavrilov Ilia)   
  - cipso: fix total option length computation (Ondrej Mosnacek)   
  - mips: bmips: BCM6358: make sure CBR is correctly set (Christian Marangi)   
  - MIPS: Routerboard 532: Fix vendor retry check code (Ilpo Järvinen)   
  - PCI/PM: Avoid D3cold for HP Pavilion 17 PC/1972 PCIe Ports (Mario Limonciello)   
  - udf: udftime: prevent overflow in udf_disk_stamp_to_time() (Roman Smirnov)   
  - usb: misc: uss720: check for incompatible versions of the Belkin F5U002 (Alex Henrie)   
  - powerpc/io: Avoid clang null pointer arithmetic warnings (Michael Ellerman)   
  - powerpc/pseries: Enforce hcall result buffer validity and size (Nathan Lynch)   
  - Bluetooth: ath3k: Fix multiple issues reported by checkpatch.pl (Uri Arev)   
  - scsi: qedi: Fix crash while reading debugfs attribute (Manish Rangankar)   
  - drop_monitor: replace spin_lock by raw_spin_lock (Wander Lairson Costa)   
  - batman-adv: bypass empty buckets in batadv_purge_orig_ref() (Eric Dumazet)   
  - selftests/bpf: Prevent client connect before server bind in test_tc_tunnel.sh (Alessandro Carminati (Red Hat))   
  - rcutorture: Fix rcu_torture_one_read() pipe_count overflow comment (Paul E. McKenney)   
  - i2c: at91: Fix the functionality flags of the slave-only interface (Jean Delvare)   
  - usb-storage: alauda: Check whether the media is initialized (Shichao Lai)   
  - greybus: Fix use-after-free bug in gb_interface_release due to race condition. (Sicong Huang)   
  - netfilter: nftables: exthdr: fix 4-byte stack OOB write (Florian Westphal)   
  - hugetlb_encode.h: fix undefined behaviour (34 << 26) (Matthias Goergens)   
  - tick/nohz_full: Don't abuse smp_call_function_single() in tick_setup_device() (Oleg Nesterov)   
  - nilfs2: fix potential kernel bug due to lack of writeback flag waiting (Ryusuke Konishi)   
  - intel_th: pci: Add Lunar Lake support (Alexander Shishkin)   
  - intel_th: pci: Add Meteor Lake-S support (Alexander Shishkin)   
  - intel_th: pci: Add Sapphire Rapids SOC support (Alexander Shishkin)   
  - intel_th: pci: Add Granite Rapids SOC support (Alexander Shishkin)   
  - intel_th: pci: Add Granite Rapids support (Alexander Shishkin)   
  - dmaengine: axi-dmac: fix possible race in remove() (Nuno Sa)   
  - PCI: rockchip-ep: Remove wrong mask on subsys_vendor_id (Rick Wertenbroek)   
  - ocfs2: fix races between hole punching and AIO+DIO (Su Yue)   
  - ocfs2: use coarse time for new created files (Su Yue)   
  - fs/proc: fix softlockup in __read_vmcore (Rik van Riel)   
  - vmci: prevent speculation leaks by sanitizing event in event_deliver() (Hagar Gamal Halim Hemdan)   
  - tracing/selftests: Fix kprobe event name test for .isra. functions (Steven Rostedt (Google))   
  - drm/exynos/vidi: fix memory leak in .get_modes() (Jani Nikula)   
  - drivers: core: synchronize really_probe() and dev_uevent() (Dirk Behme)   
  - ionic: fix use after netif_napi_del() (Taehee Yoo)   
  - net/ipv6: Fix the RT cache flush via sysctl using a previous delay (Petr Pavlu)   
  - net/mlx5e: Fix features validation check for tunneled UDP (non-VXLAN) packets (Gal Pressman)   
  - tcp: fix race in tcp_v6_syn_recv_sock() (Eric Dumazet)   
  - drm/bridge/panel: Fix runtime warning on panel bridge release (Adam Miotk)   
  - drm/komeda: check for error-valued pointer (Amjad Ouled-Ameur)   
  - liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet (Aleksandr Mishin)   
  - HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode() (José Expósito)   
  - iommu: Return right value in iommu_sva_bind_device() (Lu Baolu)   
  - iommu/amd: Fix sysfs leak in iommu init (Kun(llfl))   
  - HID: core: remove unnecessary WARN_ON() in implement() (Nikita Zhandarovich)   
  - gpio: tqmx86: fix typo in Kconfig label (Gregor Herburger)   
  - SUNRPC: return proper error from gss_wrap_req_priv (Chen Hanxiao)   
  - Input: try trimming too long modalias strings (Dmitry Torokhov)   
  - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (Breno Leitao)   
  - xhci: Apply broken streams quirk to Etron EJ188 xHCI host (Kuangyi Chiang)   
  - xhci: Apply reset resume quirk to Etron EJ188 xHCI host (Kuangyi Chiang)   
  - xhci: Set correct transferred length for cancelled bulk transfers (Mathias Nyman)   
  - jfs: xattr: fix buffer overflow for invalid xattr (Greg Kroah-Hartman)   
  - mei: me: release irq in mei_me_pci_resume error path (Tomas Winkler)   
  - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (Alan Stern)   
  - nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors (Ryusuke Konishi)   
  - nilfs2: return the mapped address from nilfs_get_page() (Matthew Wilcox (Oracle))   
  - nilfs2: Remove check for PageError (Matthew Wilcox (Oracle))   
  - selftests/mm: compaction_test: fix bogus test success on Aarch64 (Dev Jain)   
  - selftests/mm: conform test to TAP format output (Muhammad Usama Anjum)   
  - selftests/mm: compaction_test: fix incorrect write of zero to nr_hugepages (Dev Jain)   
  - serial: sc16is7xx: fix bug in sc16is7xx_set_baud() when using prescaler (Hugo Villeneuve)   
  - serial: sc16is7xx: replace hardcoded divisor value with BIT() macro (Hugo Villeneuve)   
  - drm/amd/display: Handle Y carry-over in VCP X.Y calculation (George Shen)   
  - ASoC: ti: davinci-mcasp: Fix race condition during probe (Joao Paulo Goncalves)   
  - ASoC: ti: davinci-mcasp: Handle missing required DT properties (Peter Ujfalusi)   
  - ASoC: ti: davinci-mcasp: Simplify the configuration parameter handling (Peter Ujfalusi)   
  - ASoC: ti: davinci-mcasp: Remove legacy dma_request parsing (Peter Ujfalusi)   
  - ASoC: ti: davinci-mcasp: Use platform_get_irq_byname_optional (Peter Ujfalusi)   
  - ASoC: ti: davinci-mcasp: remove always zero of davinci_mcasp_get_dt_params (Zhang Qilong)   
  - ASoC: ti: davinci-mcasp: remove redundant assignment to variable ret (Colin Ian King)   
  - usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete (Wesley Cheng)   
  - ipv6: fix possible race in __fib6_drop_pcpu_from() (Eric Dumazet)   
  - af_unix: Annotate data-race of sk->sk_shutdown in sk_diag_fill(). (Kuniyuki Iwashima)   
  - af_unix: Use skb_queue_len_lockless() in sk_diag_show_rqlen(). (Kuniyuki Iwashima)   
  - af_unix: Use unix_recvq_full_lockless() in unix_stream_connect(). (Kuniyuki Iwashima)   
  - af_unix: Annotate data-race of net->unx.sysctl_max_dgram_qlen. (Kuniyuki Iwashima)   
  - af_unix: Annotate data-races around sk->sk_state in UNIX_DIAG. (Kuniyuki Iwashima)   
  - af_unix: Annotate data-races around sk->sk_state in sendmsg() and recvmsg(). (Kuniyuki Iwashima)   
  - af_unix: Annotate data-races around sk->sk_state in unix_write_space() and poll(). (Kuniyuki Iwashima)   
  - af_unix: Annotate data-race of sk->sk_state in unix_inq_len(). (Kuniyuki Iwashima)   
  - ptp: Fix error message on failed pin verification (Karol Kolacinski)   
  - net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP (Eric Dumazet)   
  - tcp: count CLOSE-WAIT sockets for TCP_MIB_CURRESTAB (Jason Xing)   
  - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Hangyu Hua)   
  - ipv6: sr: block BH in seg6_output_core() and seg6_input_core() (Eric Dumazet)   
  - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (Emmanuel Grumbach)   
  - wifi: iwlwifi: dbg_ini: move iwl_dbg_tlv_free outside of debugfs ifdef (Shahar S Matityahu)   
  - wifi: iwlwifi: mvm: revert gen2 TX A-MPDU size to 64 (Johannes Berg)   
  - wifi: cfg80211: pmsr: use correct nla_get_uX functions (Lin Ma)   
  - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (Remi Pommarel)   
  - wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects (Nicolas Escande)


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.335.2.el7uek]
changelog:
  - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Dan Carpenter)   
  - net: relax socket state check at accept time. (Paolo Abeni)   
  - fsnotify: clear PARENT_WATCHED flags lazily (Amir Goldstein)  [Orabug: 36922241]  
  - NFSD: Increase NFSD_MAX_OPS_PER_COMPOUND (Chuck Lever)  [Orabug: 36908594]  
  - x86/cpu: Avoid cpuinfo-induced IPI pileups (Paul E. McKenney)  [Orabug: 35773811]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.335.1.el7uek]
changelog:
  - LTS tag: v5.4.280 (Alok Tiwari)   
  - i2c: rcar: bring hardware to known state when probing (Wolfram Sang)   
  - nilfs2: fix kernel bug on rename operation of broken directory (Ryusuke Konishi) [Orabug: 36896821] {CVE-2024-41034}
  - tcp: avoid too many retransmit packets (Eric Dumazet) [Orabug: 36841816] {CVE-2024-41007}
  - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Eric Dumazet)   
  - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Menglong Dong)   
  - tcp: refactor tcp_retransmit_timer() (Eric Dumazet)   
  - SUNRPC: Fix RPC client cleaned up the freed pipefs dentries (felix) [Orabug: 36940547] {CVE-2023-52803}
  - libceph: fix race between delayed_work() and ceph_monc_stop() (Ilya Dryomov) [Orabug: 36930128] {CVE-2024-42232}
  - ALSA: hda/realtek: Limit mic boost on VAIO PRO PX (Edson Juliano Drosdeck)   
  - nvmem: meson-efuse: Fix return value of nvmem callbacks (Joy Chakraborty)   
  - hpet: Support 32-bit userspace (He Zhe)   
  - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (Alan Stern) [Orabug: 36896826] {CVE-2024-41035}
  - usb: gadget: configfs: Prevent OOB read/write in usb_string_copy() (Lee Jones) [Orabug: 36930138] {CVE-2024-42236}
  - USB: Add USB_QUIRK_NO_SET_INTF quirk for START BP-850k (WangYuli)   
  - USB: serial: option: add Rolling RW350-GL variants (Vanillan Wang)   
  - USB: serial: option: add Netprisma LCUK54 series modules (Mank Wang)   
  - USB: serial: option: add support for Foxconn T99W651 (Slark Xiao)   
  - USB: serial: option: add Fibocom FM350-GL (Bjørn Mork)   
  - USB: serial: option: add Telit FN912 rmnet compositions (Daniele Palmas)   
  - USB: serial: option: add Telit generic core-dump composition (Daniele Palmas)   
  - ARM: davinci: Convert comma to semicolon (Chen Ni)   
  - s390: Mark psw in __load_psw_mask() as __unitialized (Sven Schnelle)   
  - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (Kuniyuki Iwashima) [Orabug: 36896842] {CVE-2024-41041}
  - ppp: reject claimed-as-LCP but actually malformed packets (Dmitry Antipov) [Orabug: 36896856] {CVE-2024-41044}
  - net: ethernet: lantiq_etop: fix double free in detach (Aleksander Jan Bajkowski) [Orabug: 36896863] {CVE-2024-41046}
  - net: lantiq_etop: add blank line after declaration (Aleksander Jan Bajkowski)   
  - octeontx2-af: Fix incorrect value output on error path in rvu_check_rsrc_availability() (Aleksandr Mishin)   
  - tcp: fix incorrect undo caused by DSACK of TLP retransmit (Neal Cardwell)   
  - tcp: add TCP_INFO status for failed client TFO (Jason Baron)   
  - vfs: don't mod negative dentry count when on shrinker list (Brian Foster)   
  - fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading (linke li)   
  - filelock: fix potential use-after-free in posix_lock_inode (Jeff Layton) [Orabug: 36896877] {CVE-2024-41049}
  - nilfs2: fix incorrect inode allocation from reserved inodes (Ryusuke Konishi)   
  - nvme-multipath: find NUMA path only for online numa-node (Nilay Shroff)   
  - ALSA: hda/realtek: Enable headset mic of JP-IK LEAP W502 with ALC897 (Jian-Hong Pan)   
  - i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr (Piotr Wojtaszczyk) [Orabug: 36897909] {CVE-2024-42153}
  - media: dw2102: fix a potential buffer overflow (Mauro Carvalho Chehab)   
  - bnx2x: Fix multiple UBSAN array-index-out-of-bounds (Ghadi Elie Rahme) [Orabug: 36897886] {CVE-2024-42148}
  - drm/amdgpu/atomfirmware: silence UBSAN warning (Alex Deucher)   
  - drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes (Ma Ke) [Orabug: 36897640] {CVE-2024-42101}
  - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Jan Kara)   
  - fsnotify: Do not generate events for O_PATH file descriptors (Jan Kara)   
  - can: kvaser_usb: Explicitly initialize family in leafimx driver_info struct (Jimmy Assarsson)   
  - mm: optimize the redundant loop of mm_update_owner_next() (Jinliang Zheng)   
  - nilfs2: add missing check for inode numbers on directory entries (Ryusuke Konishi) [Orabug: 36897652] {CVE-2024-42104}
  - nilfs2: fix inode number range checks (Ryusuke Konishi) [Orabug: 36897658] {CVE-2024-42105}
  - inet_diag: Initialize pad field in struct inet_diag_req_v2 (Shigeru Yoshida) [Orabug: 36897666] {CVE-2024-42106}
  - selftests: make order checking verbose in msg_zerocopy selftest (Zijian Zhang)   
  - selftests: fix OOM in msg_zerocopy selftest (Zijian Zhang)   
  - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (Sam Sun) [Orabug: 36825248] {CVE-2024-39487}
  - tcp_metrics: validate source addr length (Jakub Kicinski) [Orabug: 36897915] {CVE-2024-42154}
  - UPSTREAM: tcp: fix DSACK undo in fast recovery to call tcp_try_to_open() (Neal Cardwell)   
  - net: tcp better handling of reordering then loss cases (Yuchung Cheng)   
  - tcp: add ece_ack flag to reno sack functions (Yousuk Seung)   
  - tcp: tcp_mark_head_lost is only valid for sack-tcp (zhang kai)   
  - s390/pkey: Wipe sensitive data on failure (Holger Dengler) [Orabug: 36897934] {CVE-2024-42157}
  - jffs2: Fix potential illegal address access in jffs2_free_inode (Wang Yong) [Orabug: 36897696] {CVE-2024-42115}
  - powerpc/xmon: Check cpu id in commands "c#", "dp#" and "dx#" (Greg Kurz)   
  - orangefs: fix out-of-bounds fsid access (Mike Marshall) [Orabug: 36897837] {CVE-2024-42143}
  - powerpc/64: Set _IO_BASE to POISON_POINTER_DELTA not 0 for CONFIG_PCI=n (Michael Ellerman)   
  - i2c: i801: Annotate apanel_addr as __ro_after_init (Heiner Kallweit)   
  - media: dvb-frontends: tda10048: Fix integer overflow (Ricardo Ribalda) [Orabug: 36897976] {CVE-2024-42223}
  - media: s2255: Use refcount_t instead of atomic_t for num_channels (Ricardo Ribalda)   
  - media: dvb-frontends: tda18271c2dd: Remove casting during div (Ricardo Ribalda)   
  - net: dsa: mv88e6xxx: Correct check for empty list (Simon Horman) [Orabug: 36897982] {CVE-2024-42224}
  - Input: ff-core - prefer struct_size over open coded arithmetic (Erick Archer)   
  - firmware: dmi: Stop decoding on broken entry (Jean Delvare)   
  - sctp: prefer struct_size over open coded arithmetic (Erick Archer)   
  - media: dw2102: Don't translate i2c read into write (Michael Bunk)   
  - drm/amd/display: Skip finding free audio for unknown engine_id (Alex Hung) [Orabug: 36897726] {CVE-2024-42119}
  - drm/amdgpu: Initialize timestamp for some legacy SOCs (Ma Jun)   
  - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [Orabug: 36897761] {CVE-2024-42124}
  - IB/core: Implement a limit on UMAD receive List (Michael Guralnik) [Orabug: 36897847] {CVE-2024-42145}
  - media: dvb-usb: dib0700_devices: Add missing release_firmware() (Ricardo Ribalda)   
  - media: dvb: as102-fe: Fix as10x_register_addr packing (Ricardo Ribalda)   
  - drm/lima: fix shared irq handling on driver remove (Erico Nunes) [Orabug: 36897779] {CVE-2024-42127}
  - LTS tag: v5.4.279 (Alok Tiwari)   
  - arm64: dts: rockchip: Add sound-dai-cells for RK3368 (Alex Bee)   
  - ARM: dts: rockchip: rk3066a: add #sound-dai-cells to hdmi node (Johan Jonker)   
  - tcp: Fix data races around icsk->icsk_af_ops. (Kuniyuki Iwashima) [Orabug: 34719866] {CVE-2022-3566}
  - ipv6: Fix data races around sk->sk_prot. (Kuniyuki Iwashima) [Orabug: 34719906] {CVE-2022-3567}
  - ipv6: annotate some data-races around sk->sk_prot (Eric Dumazet)   
  - nfs: Leave pages in the pagecache if readpage failed (Matthew Wilcox (Oracle))   
  - pwm: stm32: Refuse too small period requests (Uwe Kleine-König)   
  - mtd: spinand: macronix: Add support for serial NAND flash (Jaime Liao)   
  - ftruncate: pass a signed offset (Arnd Bergmann) [Orabug: 36897558] {CVE-2024-42084}
  - ata: libata-core: Fix double free on error (Niklas Cassel) [Orabug: 36897374] {CVE-2024-41087}
  - batman-adv: Don't accept TT entries for out-of-spec VIDs (Sven Eckelmann)   
  - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes (Ma Ke) [Orabug: 36897380] {CVE-2024-41089}
  - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes (Ma Ke) [Orabug: 36897444] {CVE-2024-41095}
  - hexagon: fix fadvise64_64 calling conventions (Arnd Bergmann)   
  - csky, hexagon: fix broken sys_sync_file_range (Arnd Bergmann)   
  - net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new (Oleksij Rempel)   
  - net: can: j1939: recover socket queue on CAN bus error during BAM transmission (Oleksij Rempel)   
  - net: can: j1939: Initialize unused data in j1939_send_one() (Shigeru Yoshida) [Orabug: 36897516] {CVE-2024-42076}
  - tty: mcf: MCF54418 has 10 UARTS (Jean-Michel Hautbois)   
  - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (Nikita Zhandarovich) [Orabug: 36897451] {CVE-2024-41097}
  - usb: musb: da8xx: fix a resource leak in probe() (Dan Carpenter)   
  - usb: gadget: printer: SS+ support (Oliver Neukum)   
  - net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez)   
  - iio: chemical: bme680: Fix sensor data read operation (Vasileios Amoiridis)   
  - iio: chemical: bme680: Fix overflows in compensate() functions (Vasileios Amoiridis) [Orabug: 36897566] {CVE-2024-42086}
  - iio: chemical: bme680: Fix calibration data variable (Vasileios Amoiridis)   
  - iio: chemical: bme680: Fix pressure value output (Vasileios Amoiridis)   
  - iio: adc: ad7266: Fix variable checking bug (Fernando Yang)   
  - mmc: sdhci: Do not lock spinlock around mmc_gpio_get_ro() (Adrian Hunter)   
  - mmc: sdhci: Do not invert write-protect twice (Adrian Hunter)   
  - mmc: sdhci-pci: Convert PCIBIOS_* return codes to errnos (Ilpo Järvinen)   
  - x86: stop playing stack games in profile_pc() (Linus Torvalds) [Orabug: 36897616] {CVE-2024-42096}
  - gpio: davinci: Validate the obtained number of IRQs (Aleksandr Mishin) [Orabug: 36897599] {CVE-2024-42092}
  - nvme: fixup comment for nvme RDMA Provider Type (Hannes Reinecke)   
  - soc: ti: wkup_m3_ipc: Send NULL dummy message instead of pointer message (Andrew Davis)   
  - media: dvbdev: Initialize sbuf (Ricardo Ribalda)   
  - ALSA: emux: improve patch ioctl data validation (Oswald Buddenhagen) [Orabug: 36897624] {CVE-2024-42097}
  - net/dpaa2: Avoid explicit cpumask var allocation on stack (Dawei Li) [Orabug: 36897602] {CVE-2024-42093}
  - net/iucv: Avoid explicit cpumask var allocation on stack (Dawei Li) [Orabug: 36897608] {CVE-2024-42094}
  - mtd: partitions: redboot: Added conversion of operands to a larger type (Denis Arefev)   
  - drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep (Laurent Pinchart) [Orabug: 36897570] {CVE-2024-42087}
  - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Pablo Neira Ayuso) [Orabug: 36897500] {CVE-2024-42070}
  - parisc: use correct compat recv/recvfrom syscalls (Arnd Bergmann)   
  - sparc: fix old compat_sys_select() (Arnd Bergmann)   
  - net: phy: micrel: add Microchip KSZ 9477 to the device table (Enguerrand de Ribaucourt)   
  - net: phy: mchp: Add support for LAN8814 QUAD PHY (Divya Koppera)   
  - net: dsa: microchip: fix initial port flush problem (Tristram Ha)   
  - ASoC: fsl-asoc-card: set priv->pdev before using it (Elinor Montmasson) [Orabug: 36897578] {CVE-2024-42089}
  - netfilter: nf_tables: validate family when identifying table via handle (Pablo Neira Ayuso)   
  - drm/amdgpu: fix UBSAN warning in kv_dpm.c (Alex Deucher) [Orabug: 36835992] {CVE-2024-40987}
  - pinctrl: rockchip: fix pinmux reset in rockchip_pmx_set (Huang-Huang Bao)   
  - pinctrl: rockchip: fix pinmux bits for RK3328 GPIO3-B pins (Huang-Huang Bao)   
  - pinctrl: rockchip: fix pinmux bits for RK3328 GPIO2-B pins (Huang-Huang Bao)   
  - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER (Hagar Hemdan) [Orabug: 36897586] {CVE-2024-42090}
  - iio: dac: ad5592r: fix temperature channel scaling value (Marc Ferland)   
  - iio: dac: ad5592r: un-indent code-block for scale read (Alexandru Ardelean)   
  - iio: dac: ad5592r-base: Replace indio_dev->mlock with own device lock (Sergiu Cuciurean)   
  - x86/amd_nb: Check for invalid SMN reads (Yazen Ghannam)   
  - PCI: Add PCI_ERROR_RESPONSE and related definitions (Naveen Naidu)   
  - perf/core: Fix missing wakeup when waiting for context reference (Haifeng Xu)   
  - tracing: Add MODULE_DESCRIPTION() to preemptirq_delay_test (Jeff Johnson)   
  - arm64: dts: qcom: qcs404: fix bluetooth device address (Johan Hovold)   
  - ARM: dts: samsung: smdk4412: fix keypad no-autorepeat (Krzysztof Kozlowski)   
  - ARM: dts: samsung: exynos4412-origen: fix keypad no-autorepeat (Krzysztof Kozlowski)   
  - ARM: dts: samsung: smdkv310: fix keypad no-autorepeat (Krzysztof Kozlowski)   
  - i2c: ocores: set IACK bit after core is enabled (Grygorii Tertychnyi)   
  - gcov: add support for GCC 14 (Peter Oberparleiter)   
  - drm/radeon: fix UBSAN warning in kv_dpm.c (Alex Deucher) [Orabug: 36835997] {CVE-2024-40988}
  - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (Raju Rangoju)   
  - dmaengine: ioatdma: Fix missing kmem_cache_destroy() (Nikita Shubin)   
  - regulator: core: Fix modpost error "regulator_get_regmap" undefined (Biju Das)   
  - net: usb: rtl8150 fix unintiatilzed variables in rtl8150_get_link_ksettings (Oliver Neukum)   
  - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Jozsef Kadlecsik) [Orabug: 36838634] {CVE-2024-40993}
  - virtio_net: checksum offloading handling fix (Heng Qi)   
  - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (David Ruth) [Orabug: 36836019] {CVE-2024-40995}
  - net/sched: act_api: rely on rcu in tcf_idr_check_alloc (Pedro Tammela)   
  - netns: Make get_net_ns() handle zero refcount net (Yue Haibing) [Orabug: 36835849] {CVE-2024-40958}
  - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (Eric Dumazet) [Orabug: 36835852] {CVE-2024-40959}
  - ipv6: prevent possible NULL dereference in rt6_probe() (Eric Dumazet) [Orabug: 36835857] {CVE-2024-40960}
  - ipv6: prevent possible NULL deref in fib6_nh_init() (Eric Dumazet) [Orabug: 36835862] {CVE-2024-40961}
  - netrom: Fix a memory leak in nr_heartbeat_expiry() (Gavrilov Ilia) [Orabug: 36836086] {CVE-2024-41006}
  - cipso: fix total option length computation (Ondrej Mosnacek)   
  - mips: bmips: BCM6358: make sure CBR is correctly set (Christian Marangi) [Orabug: 36835870] {CVE-2024-40963}
  - MIPS: Routerboard 532: Fix vendor retry check code (Ilpo Järvinen)   
  - PCI/PM: Avoid D3cold for HP Pavilion 17 PC/1972 PCIe Ports (Mario Limonciello)   
  - udf: udftime: prevent overflow in udf_disk_stamp_to_time() (Roman Smirnov)   
  - usb: misc: uss720: check for incompatible versions of the Belkin F5U002 (Alex Henrie)   
  - powerpc/io: Avoid clang null pointer arithmetic warnings (Michael Ellerman)   
  - powerpc/pseries: Enforce hcall result buffer validity and size (Nathan Lynch) [Orabug: 36835926] {CVE-2024-40974}
  - Bluetooth: ath3k: Fix multiple issues reported by checkpatch.pl (Uri Arev)   
  - scsi: qedi: Fix crash while reading debugfs attribute (Manish Rangankar) [Orabug: 36835947] {CVE-2024-40978}
  - drop_monitor: replace spin_lock by raw_spin_lock (Wander Lairson Costa) [Orabug: 36835960] {CVE-2024-40980}
  - batman-adv: bypass empty buckets in batadv_purge_orig_ref() (Eric Dumazet) [Orabug: 36835966] {CVE-2024-40981}
  - selftests/bpf: Prevent client connect before server bind in test_tc_tunnel.sh (Alessandro Carminati (Red Hat))   
  - rcutorture: Fix rcu_torture_one_read() pipe_count overflow comment (Paul E. McKenney)   
  - i2c: at91: Fix the functionality flags of the slave-only interface (Jean Delvare)   
  - usb-storage: alauda: Check whether the media is initialized (Shichao Lai) [Orabug: 36753734] {CVE-2024-38619}
  - greybus: Fix use-after-free bug in gb_interface_release due to race condition. (Sicong Huang) [Orabug: 36835564] {CVE-2024-39495}
  - netfilter: nftables: exthdr: fix 4-byte stack OOB write (Florian Westphal) [Orabug: 35814445] {CVE-2023-4881} {CVE-2023-52628}
  - hugetlb_encode.h: fix undefined behaviour (34 << 26) (Matthias Goergens)   
  - tick/nohz_full: Don't abuse smp_call_function_single() in tick_setup_device() (Oleg Nesterov)   
  - nilfs2: fix potential kernel bug due to lack of writeback flag waiting (Ryusuke Konishi) [Orabug: 36774571] {CVE-2024-37078}
  - intel_th: pci: Add Lunar Lake support (Alexander Shishkin)   
  - intel_th: pci: Add Meteor Lake-S support (Alexander Shishkin)   
  - intel_th: pci: Add Sapphire Rapids SOC support (Alexander Shishkin)   
  - intel_th: pci: Add Granite Rapids SOC support (Alexander Shishkin)   
  - intel_th: pci: Add Granite Rapids support (Alexander Shishkin)   
  - dmaengine: axi-dmac: fix possible race in remove() (Nuno Sa)   
  - PCI: rockchip-ep: Remove wrong mask on subsys_vendor_id (Rick Wertenbroek)   
  - ocfs2: fix races between hole punching and AIO+DIO (Su Yue) [Orabug: 36835817] {CVE-2024-40943}
  - ocfs2: use coarse time for new created files (Su Yue)   
  - fs/proc: fix softlockup in __read_vmcore (Rik van Riel)   
  - vmci: prevent speculation leaks by sanitizing event in event_deliver() (Hagar Gamal Halim Hemdan) [Orabug: 36835582] {CVE-2024-39499}
  - tracing/selftests: Fix kprobe event name test for .isra. functions (Steven Rostedt (Google))   
  - drm/exynos/vidi: fix memory leak in .get_modes() (Jani Nikula) [Orabug: 36835786] {CVE-2024-40932}
  - drivers: core: synchronize really_probe() and dev_uevent() (Dirk Behme) [Orabug: 36835589] {CVE-2024-39501}
  - ionic: fix use after netif_napi_del() (Taehee Yoo) [Orabug: 36835595] {CVE-2024-39502}
  - net/ipv6: Fix the RT cache flush via sysctl using a previous delay (Petr Pavlu)   
  - net/mlx5e: Fix features validation check for tunneled UDP (non-VXLAN) packets (Gal Pressman)   
  - tcp: fix race in tcp_v6_syn_recv_sock() (Eric Dumazet)   
  - drm/bridge/panel: Fix runtime warning on panel bridge release (Adam Miotk)   
  - drm/komeda: check for error-valued pointer (Amjad Ouled-Ameur) [Orabug: 36835674] {CVE-2024-39505}
  - liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet (Aleksandr Mishin) [Orabug: 36835677] {CVE-2024-39506}
  - HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode() (José Expósito) [Orabug: 36835793] {CVE-2024-40934}
  - iommu: Return right value in iommu_sva_bind_device() (Lu Baolu) [Orabug: 36835824] {CVE-2024-40945}
  - iommu/amd: Fix sysfs leak in iommu init (Kun(llfl))   
  - HID: core: remove unnecessary WARN_ON() in implement() (Nikita Zhandarovich) [Orabug: 36835689] {CVE-2024-39509}
  - gpio: tqmx86: fix typo in Kconfig label (Gregor Herburger)   
  - SUNRPC: return proper error from gss_wrap_req_priv (Chen Hanxiao)   
  - Input: try trimming too long modalias strings (Dmitry Torokhov)   
  - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (Breno Leitao) [Orabug: 36835696] {CVE-2024-40901}
  - xhci: Apply broken streams quirk to Etron EJ188 xHCI host (Kuangyi Chiang)   
  - xhci: Apply reset resume quirk to Etron EJ188 xHCI host (Kuangyi Chiang)   
  - xhci: Set correct transferred length for cancelled bulk transfers (Mathias Nyman)   
  - jfs: xattr: fix buffer overflow for invalid xattr (Greg Kroah-Hartman) [Orabug: 36835701] {CVE-2024-40902}
  - mei: me: release irq in mei_me_pci_resume error path (Tomas Winkler)   
  - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (Alan Stern) [Orabug: 36835709] {CVE-2024-40904}
  - nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors (Ryusuke Konishi) [Orabug: 36774647] {CVE-2024-39469}
  - nilfs2: return the mapped address from nilfs_get_page() (Matthew Wilcox (Oracle))   
  - nilfs2: Remove check for PageError (Matthew Wilcox (Oracle))   
  - selftests/mm: compaction_test: fix bogus test success on Aarch64 (Dev Jain)   
  - selftests/mm: conform test to TAP format output (Muhammad Usama Anjum)   
  - selftests/mm: compaction_test: fix incorrect write of zero to nr_hugepages (Dev Jain)   
  - serial: sc16is7xx: fix bug in sc16is7xx_set_baud() when using prescaler (Hugo Villeneuve)   
  - serial: sc16is7xx: replace hardcoded divisor value with BIT() macro (Hugo Villeneuve)   
  - drm/amd/display: Handle Y carry-over in VCP X.Y calculation (George Shen)   
  - ASoC: ti: davinci-mcasp: Fix race condition during probe (Joao Paulo Goncalves)   
  - ASoC: ti: davinci-mcasp: Handle missing required DT properties (Peter Ujfalusi)   
  - ASoC: ti: davinci-mcasp: Simplify the configuration parameter handling (Peter Ujfalusi)   
  - ASoC: ti: davinci-mcasp: Remove legacy dma_request parsing (Peter Ujfalusi)   
  - ASoC: ti: davinci-mcasp: Use platform_get_irq_byname_optional (Peter Ujfalusi)   
  - ASoC: ti: davinci-mcasp: remove always zero of davinci_mcasp_get_dt_params (Zhang Qilong)   
  - ASoC: ti: davinci-mcasp: remove redundant assignment to variable ret (Colin Ian King)   
  - usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete (Wesley Cheng) [Orabug: 36683255] {CVE-2024-36894}
  - ipv6: fix possible race in __fib6_drop_pcpu_from() (Eric Dumazet) [Orabug: 36835716] {CVE-2024-40905}
  - af_unix: Annotate data-race of sk->sk_shutdown in sk_diag_fill(). (Kuniyuki Iwashima)   
  - af_unix: Use skb_queue_len_lockless() in sk_diag_show_rqlen(). (Kuniyuki Iwashima)   
  - af_unix: Use unix_recvq_full_lockless() in unix_stream_connect(). (Kuniyuki Iwashima)   
  - af_unix: Annotate data-race of net->unx.sysctl_max_dgram_qlen. (Kuniyuki Iwashima)   
  - af_unix: Annotate data-races around sk->sk_state in UNIX_DIAG. (Kuniyuki Iwashima)   
  - af_unix: Annotate data-races around sk->sk_state in sendmsg() and recvmsg(). (Kuniyuki Iwashima)   
  - af_unix: Annotate data-races around sk->sk_state in unix_write_space() and poll(). (Kuniyuki Iwashima)   
  - af_unix: Annotate data-race of sk->sk_state in unix_inq_len(). (Kuniyuki Iwashima)   
  - ptp: Fix error message on failed pin verification (Karol Kolacinski)   
  - net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP (Eric Dumazet) [Orabug: 36748169] {CVE-2024-36974}
  - tcp: count CLOSE-WAIT sockets for TCP_MIB_CURRESTAB (Jason Xing)   
  - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Hangyu Hua) [Orabug: 36748177] {CVE-2024-36978}
  - ipv6: sr: block BH in seg6_output_core() and seg6_input_core() (Eric Dumazet)   
  - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (Emmanuel Grumbach) [Orabug: 36835808] {CVE-2024-40941}
  - wifi: iwlwifi: dbg_ini: move iwl_dbg_tlv_free outside of debugfs ifdef (Shahar S Matityahu)   
  - wifi: iwlwifi: mvm: revert gen2 TX A-MPDU size to 64 (Johannes Berg)   
  - wifi: cfg80211: pmsr: use correct nla_get_uX functions (Lin Ma)   
  - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (Remi Pommarel) [Orabug: 36835735] {CVE-2024-40912}
  - wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects (Nicolas Escande) [Orabug: 36835812] {CVE-2024-40942}


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.335.2.el7uek]
changelog:
  - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Dan Carpenter) [Orabug: 36898075] {CVE-2024-41022}
  - net: relax socket state check at accept time. (Paolo Abeni) [Orabug: 36768889] {CVE-2024-36484}
  - fsnotify: clear PARENT_WATCHED flags lazily (Amir Goldstein)  [Orabug: 36922241]  
  - NFSD: Increase NFSD_MAX_OPS_PER_COMPOUND (Chuck Lever)  [Orabug: 36908594]  
  - x86/cpu: Avoid cpuinfo-induced IPI pileups (Paul E. McKenney)  [Orabug: 35773811]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.335.4.el7uek]
changelog:
  - mm: memcg/slab: enable kmalloc-cg-<n> caches for x86_64. (Imran Khan)  [Orabug: 36951041]  
  - printk: add kthread for long-running print (Stephen Brennan)  [Orabug: 36456582]  
  - kdb: Use the passed prompt in kdb_position_cursor() (Douglas Anderson)   
  - driver core: Fix uevent_show() vs driver detach race (Dan Williams)   
  - pinctrl: ti: ti-iodelay: fix possible memory leak when pinctrl_enable() fails (Yang Yingliang)   
  - pinctrl: ti: ti-iodelay: Drop if block with always false condition (Uwe Kleine-König)   
  - pinctrl: single: fix possible memory leak when pinctrl_enable() fails (Yang Yingliang)   
  - pinctrl: core: fix possible memory leak when pinctrl_enable() fails (Yang Yingliang)   
  - ipvs: Avoid unnecessary calls to skb_is_gso_sctp (Ismael Luceno)


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.336.1.el7uek]
changelog:
  - mm/hwpoison: put page in already hwpoisoned case with MF_COUNT_INCREASED (Naoya Horiguchi)  [Orabug: 36947110]  
  - mm/memory-failure: send SIGBUS in the event of thp split fail (Jane Chu)  [Orabug: 36947110]  
  - mm/memory-failure: move hwpoison_filter() higher up (Jane Chu)  [Orabug: 36947110]  
  - mm/memory-failure: improve memory failure action_result messages (Jane Chu)  [Orabug: 36947110]  
  - mm/madvise: add MF_ACTION_REQUIRED to madvise(MADV_HWPOISON) (Jane Chu)  [Orabug: 36947110]  
  - mm/memory-failure: try to send SIGBUS even if unmap failed (Jane Chu)  [Orabug: 36947110]  
  - mm: memory-failure: cleanup try_to_split_thp_page() (Kefeng Wang)  [Orabug: 36947110]  
  - mm,hwpoison: introduce MF_MSG_UNSPLIT_THP (Naoya Horiguchi)  [Orabug: 36947110]  
  - KVM/x86: Do not clear SIPI while in SMM (Boris Ostrovsky)  [Orabug: 36401960]


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.336.2.el7uek]
changelog:
  - mm: Only enable HVO under UEK6 for Exadata system (Jane Chu)  [Orabug: 36990830]  
  - mm: delete redundent old PageCompound() macro (Jane Chu)  [Orabug: 36990830]


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.336.3.el7uek]
changelog:
  - Compiler Attributes: Add __uninitialized macro (Heiko Carstens)   
  - filelock: Correct the filelock owner in fcntl_setlk/fcntl_setlk64 (Long Li)   
  - ALSA: timer: Relax start tick time check for slave timer elements (Takashi Iwai)   
  - ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7 (Parsa Poorshikhian)   
  - LTS tag: v5.4.282 (Sherry Yang)   
  - media: Revert "media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()" (Sean Young)   
  - ARM: dts: imx6qdl-kontron-samx6i: fix phy-mode (Michael Walle)   
  - nvme/pci: Add APST quirk for Lenovo N60z laptop (WangYuli)   
  - exec: Fix ToCToU between perm check and set-uid/gid usage (Kees Cook)   
  - media: uvcvideo: Use entity get_cur in uvc_ctrl_set (Yunke Cao)   
  - arm64: cpufeature: Fix the visibility of compat hwcaps (Amit Daniel Kachhap)   
  - drm/i915/gem: Fix Virtual Memory mapping boundaries calculation (Andi Shyti)   
  - netfilter: nf_tables: prefer nft_chain_validate (Florian Westphal)   
  - netfilter: nf_tables: use timestamp to check for set element timeout (Pablo Neira Ayuso)   
  - netfilter: nf_tables: set element extended ACK reporting support (Pablo Neira Ayuso)   
  - kbuild: Fix '-S -c' in x86 stack protector scripts (Nathan Chancellor)   
  - Fix gcc 4.9 build issue in 5.4.y (Jari Ruusu)   
  - drm/mgag200: Set DDC timeout in milliseconds (Thomas Zimmermann)   
  - drm/bridge: analogix_dp: properly handle zero sized AUX transactions (Lucas Stach)   
  - x86/mtrr: Check if fixed MTRRs exist before saving them (Andi Kleen)   
  - tracing: Fix overflow in get_free_elt() (Tze-nan Wu)   
  - power: supply: axp288_charger: Round constant_charge_voltage writes down (Hans de Goede)   
  - power: supply: axp288_charger: Fix constant_charge_voltage writes (Hans de Goede)   
  - genirq/irqdesc: Honor caller provided affinity in alloc_desc() (Shay Drory)   
  - serial: core: check uartclk for zero to avoid divide by zero (George Kennedy)   
  - scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES (Damien Le Moal)   
  - ntp: Safeguard against time_constant overflow (Justin Stitt)   
  - ntp: Clamp maxerror and esterror to operating range (Justin Stitt)   
  - tick/broadcast: Move per CPU pointer access into the atomic section (Thomas Gleixner)   
  - scsi: ufs: core: Fix hba->last_dme_cmd_tstamp timestamp updating logic (Vamshi Gajjela)   
  - usb: gadget: core: Check for unset descriptor (Chris Wulff)   
  - USB: serial: debug: do not echo input by default (Marek Marczykowski-Górecki)   
  - usb: vhci-hcd: Do not drop references before new references are gained (Oliver Neukum)   
  - ALSA: hda/hdmi: Yet more pin fix for HP EliteDesk 800 G4 (Takashi Iwai)   
  - ALSA: hda: Add HP MP9 G4 Retail System AMS to force connect list (Steven 'Steve' Kendall)   
  - ALSA: line6: Fix racy access to midibuf (Takashi Iwai)   
  - drm/client: fix null pointer dereference in drm_client_modeset_probe (Ma Ke)   
  - spi: spi-fsl-lpspi: Fix scldiv calculation (Stefan Wahren)   
  - spi: fsl-lpspi: remove unneeded array (Oleksandr Suvorov)   
  - bpf: kprobe: remove unused declaring of bpf_kprobe_override (Menglong Dong)   
  - i2c: smbus: Send alert notifications to all devices if source not found (Guenter Roeck)   
  - i2c: smbus: Improve handling of stuck alerts (Guenter Roeck)   
  - i2c: smbus: Don't filter out duplicate alerts (Corey Minyard)   
  - arm64: errata: Expand speculative SSBS workaround (again) (Mark Rutland)   
  - arm64: cputype: Add Cortex-A725 definitions (Mark Rutland)   
  - arm64: cputype: Add Cortex-X1C definitions (Mark Rutland)   
  - arm64: errata: Expand speculative SSBS workaround (Mark Rutland)   
  - arm64: errata: Unify speculative SSBS errata logic (Mark Rutland)   
  - arm64: cputype: Add Cortex-X925 definitions (Mark Rutland)   
  - arm64: cputype: Add Cortex-A720 definitions (Mark Rutland)   
  - arm64: cputype: Add Cortex-X3 definitions (Mark Rutland)   
  - arm64: errata: Add workaround for Arm errata 3194386 and 3312417 (Mark Rutland)   
  - arm64: cputype: Add Neoverse-V3 definitions (Mark Rutland)   
  - arm64: cputype: Add Cortex-X4 definitions (Mark Rutland)   
  - arm64: Add Neoverse-V2 part (Besar Wicaksono)   
  - arm64: cpufeature: Force HWCAP to be based on the sysreg visible to user-space (James Morse)   
  - ext4: fix wrong unit use in ext4_mb_find_by_goal (Kemeng Shi)   
  - SUNRPC: Fix a race to wake a sync task (Benjamin Coddington)   
  - s390/sclp: Prevent release of buffer in I/O (Peter Oberparleiter)   
  - jbd2: avoid memleak in jbd2_journal_write_metadata_buffer (Kemeng Shi)   
  - media: uvcvideo: Fix the bandwdith quirk on USB 3.x (Michal Pecio)   
  - media: uvcvideo: Ignore empty TS packets (Ricardo Ribalda)   
  - drm/amdgpu: Fix the null pointer dereference to ras_manager (Ma Jun)   
  - btrfs: fix bitmap leak when loading free space cache on duplicate entry (Filipe Manana)   
  - wifi: nl80211: don't give key data to userspace (Johannes Berg)   
  - udf: prevent integer overflow in udf_bitmap_free_blocks() (Roman Smirnov)   
  - PCI: Add Edimax Vendor ID to pci_ids.h (FUJITA Tomonori)   
  - selftests/bpf: Fix send_signal test with nested CONFIG_PARAVIRT (Yonghong Song)   
  - ACPI: SBS: manage alarm sysfs attribute through psy core (Thomas Weißschuh)   
  - ACPI: battery: create alarm sysfs attribute atomically (Thomas Weißschuh)   
  - clocksource/drivers/sh_cmt: Address race condition for clock events (Niklas Söderlund)   
  - md/raid5: avoid BUG_ON() while continue reshape after reassembling (Yu Kuai)   
  - net: fec: Stop PPS on driver remove (Csókás, Bence)   
  - Bluetooth: l2cap: always unlock channel in l2cap_conless_channel() (Dmitry Antipov)   
  - net: linkwatch: use system_unbound_wq (Eric Dumazet)   
  - net: usb: qmi_wwan: fix memory leak for not ip packets (Daniele Palmas)   
  - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Kuniyuki Iwashima)   
  - sctp: move hlist_node and hashent out of sctp_ep_common (Xin Long)   
  - x86/mm: Fix pti_clone_pgtable() alignment assumption (Peter Zijlstra)   
  - irqchip/mbigen: Fix mbigen node address layout (Yipeng Zou)   
  - genirq: Allow irq_chip registration functions to take a const irq_chip (Marc Zyngier)   
  - netfilter: ipset: Add list flush to cancel_gc (Alexander Maltsev)   
  - net: usb: sr9700: fix uninitialized variable use in sr_mdio_read (Ma Ke)   
  - ALSA: usb-audio: Correct surround channels in UAC1 channel map (Takashi Iwai)   
  - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (Al Viro)   
  - HID: wacom: Modify pen IDs (Tatsunosuke Tobita)   
  - ipv6: fix ndisc_is_useropt() handling for PIO (Maciej Żenczykowski)   
  - net/mlx5e: Add a check for the return value from mlx5_port_set_eth_ptys (Shahar Shitrit)   
  - net/iucv: fix use after free in iucv_sock_close() (Alexandra Winter)   
  - drm/vmwgfx: Fix overlay when using Screen Targets (Ian Forbes)   
  - drm/nouveau: prime: fix refcount underflow (Danilo Krummrich)   
  - remoteproc: imx_rproc: Skip over memory region when node value is NULL (Aleksandr Mishin)   
  - remoteproc: imx_rproc: Fix ignoring mapping vdev regions (Dong Aisheng)   
  - remoteproc: imx_rproc: ignore mapping vdev regions (Peng Fan)   
  - irqchip/imx-irqsteer: Handle runtime power management correctly (Shenwei Wang)   
  - irqchip/imx-irqsteer: Add runtime PM support (Lucas Stach)   
  - irqchip/imx-irqsteer: Constify irq_chip struct (Lucas Stach)   
  - genirq: Allow the PM device to originate from irq domain (Marc Zyngier)   
  - devres: Fix memory leakage caused by driver API devm_free_percpu() (Zijun Hu)   
  - driver core: Cast to (void *) with __force for __percpu pointer (Andy Shevchenko)   
  - dev/parport: fix the array out-of-bounds risk (tuhaowen)   
  - parport: Standardize use of printmode (Joe Perches)   
  - parport: Convert printk(KERN_<LEVEL> to pr_<level>( (Joe Perches)   
  - PCI: rockchip: Use GPIOD_OUT_LOW flag while requesting ep_gpio (Manivannan Sadhasivam)   
  - PCI: rockchip: Make 'ep-gpios' DT property optional (Chen-Yu Tsai)   
  - mm: avoid overflows in dirty throttling logic (Jan Kara)   
  - nvme-pci: add missing condition check for existence of mapped data (Leon Romanovsky)   
  - ASoC: Intel: use soc_intel_is_byt_cr() only when IOSF_MBI is reachable (Pierre-Louis Bossart)   
  - ASoC: Intel: Move soc_intel_is_foo() helpers to a generic header (Hans de Goede)   
  - ASoC: Intel: Convert to new X86 CPU match macros (Thomas Gleixner)   
  - powerpc: fix a file leak in kvm_vcpu_ioctl_enable_cap() (Al Viro)   
  - apparmor: Fix null pointer deref when receiving skb during sock creation (Xiao Liang)   
  - mISDN: Fix a use after free in hfcmulti_tx() (Dan Carpenter)   
  - bpf: Fix a segment issue when downgrading gso_size (Fred Li)   
  - net: nexthop: Initialize all fields in dumped nexthops (Petr Machata)   
  - tipc: Return non-zero value from tipc_udp_addr2str() on error (Shigeru Yoshida)   
  - net: bonding: correctly annotate RCU in bond_should_notify_peers() (Johannes Berg)   
  - ipv4: Fix incorrect source address in Record Route option (Ido Schimmel)   
  - MIPS: SMP-CPS: Fix address for GCR_ACCESS register for CM3 and later (Gregory CLEMENT)   
  - dma: fix call order in dmam_free_coherent (Lance Richardson)   
  - libbpf: Fix no-args func prototype BTF dumping syntax (Andrii Nakryiko)   
  - um: time-travel: fix time-travel-start option (Johannes Berg)   
  - jfs: Fix array-index-out-of-bounds in diFree (Jeongjun Park)   
  - kdb: address -Wformat-security warnings (Arnd Bergmann)   
  - nilfs2: handle inconsistent state in nilfs_btnode_create_block() (Ryusuke Konishi)   
  - Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x13d3:0x3591 (WangYuli)   
  - Bluetooth: btusb: Add RTL8852BE device 0489:e125 to device tables (Hilda Wu)   
  - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov)   
  - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov)   
  - drm/panfrost: Mark simple_ondemand governor as softdep (Dragan Simic)   
  - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov)   
  - selftests/sigaltstack: Fix ppc64 GCC build (Michael Ellerman)   
  - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Bart Van Assche)   
  - platform: mips: cpu_hwmon: Disable driver on unsupported hardware (Jiaxun Yang)   
  - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (Thomas Gleixner)   
  - rtc: isl1208: Fix return value of nvmem callbacks (Joy Chakraborty)   
  - perf/x86/intel/pt: Fix a topa_entry base address calculation (Adrian Hunter)   
  - perf/x86/intel/pt: Fix topa_entry base length (Marco Cavenati)   
  - scsi: qla2xxx: validate nvme_local_port correctly (Nilesh Javali)   
  - scsi: qla2xxx: Complete command early within lock (Shreyas Deodhar)   
  - scsi: qla2xxx: Fix for possible memory corruption (Shreyas Deodhar)   
  - scsi: qla2xxx: During vport delete send async logout explicitly (Manish Rangankar)   
  - rtc: cmos: Fix return value of nvmem callbacks (Joy Chakraborty)   
  - kobject_uevent: Fix OOB access within zap_modalias_env() (Zijun Hu)   
  - decompress_bunzip2: fix rare decompression failure (Ross Lagerwall)   
  - ubi: eba: properly rollback inside self_check_eba (Fedor Pchelkin)   
  - clk: davinci: da8xx-cfgchip: Initialize clk_init_data before use (Bastien Curutchet)   
  - f2fs: fix to don't dirty inode for readonly filesystem (Chao Yu)   
  - scsi: qla2xxx: Return ENOBUFS if sg_cnt is more than one for ELS cmds (Saurav Kashyap)   
  - binder: fix hang of unregistered readers (Carlos Llamas)   
  - PCI: hv: Return zero, not garbage, when reading PCI_INTERRUPT_PIN (Wei Liu)   
  - hwrng: amd - Convert PCIBIOS_* return codes to errnos (Ilpo Järvinen)   
  - tools/memory-model: Fix bug in lock.cat (Alan Stern)   
  - leds: ss4200: Convert PCIBIOS_* return codes to errnos (Ilpo Järvinen)   
  - wifi: mwifiex: Fix interface type change (Rafael Beims)   
  - ext4: make sure the first directory block is not a hole (Baokun Li)   
  - ext4: check dot and dotdot of dx_root before making dir indexed (Baokun Li)   
  - m68k: amiga: Turn off Warp1260 interrupts during boot (Paolo Pisati)   
  - udf: Avoid using corrupted block bitmap buffer (Jan Kara)   
  - drm/amd/display: Check for NULL pointer (Sung Joon Kim)   
  - drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes (Ma Ke)   
  - drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes (Ma Ke)   
  - hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode() (Chao Yu)   
  - media: venus: fix use after free in vdec_close (Dikshita Agarwal)   
  - char: tpm: Fix possible memory leak in tpm_bios_measurements_open() (Joe Hattori)   
  - ipv6: take care of scope when choosing the src addr (Nicolas Dichtel)   
  - af_packet: Handle outgoing VLAN packets without hardware offloading (Chengen Du)   
  - net: netconsole: Disable target before netpoll cleanup (Breno Leitao)   
  - tick/broadcast: Make takeover of broadcast hrtimer reliable (Yu Liao)   
  - rtc: interface: Add RTC offset to alarm after fix-up (Csókás, Bence)   
  - nilfs2: avoid undefined behavior in nilfs_cnt32_ge macro (Ryusuke Konishi)   
  - fs/nilfs2: remove some unused macros to tame gcc (Alex Shi)   
  - pinctrl: freescale: mxs: Fix refcount of child (Peng Fan)   
  - netfilter: ctnetlink: use helper function to calculate expect ID (Pablo Neira Ayuso)   
  - bnxt_re: Fix imm_data endianness (Jack Wang)   
  - macintosh/therm_windtunnel: fix module unload. (Nick Bowler)   
  - powerpc/xmon: Fix disassembly CPU feature checks (Michael Ellerman)   
  - Input: elan_i2c - do not leave interrupt disabled on suspend failure (Dmitry Torokhov)   
  - RDMA/device: Return error earlier if port in not valid (Leon Romanovsky)   
  - mtd: make mtd_test.c a separate module (Arnd Bergmann)   
  - ASoC: max98088: Check for clk_prepare_enable() error (Chen Ni)   
  - RDMA/rxe: Don't set BTH_ACK_MASK for UC or UD QPs (Honggang LI)   
  - RDMA/mlx4: Fix truncated output warning in alias_GUID.c (Leon Romanovsky)   
  - RDMA/mlx4: Fix truncated output warning in mad.c (Leon Romanovsky)   
  - Input: qt1050 - handle CHIP_ID reading error (Andrei Lalaev)   
  - PCI: Fix resource double counting on remove & rescan (Ilpo Järvinen)   
  - SUNRPC: Fixup gss_status tracepoint error output (Benjamin Coddington)   
  - sparc64: Fix incorrect function signature and add prototype for prom_cif_init (Andreas Larsson)   
  - ext4: avoid writing unitialized memory to disk in EA inodes (Jan Kara)   
  - SUNRPC: avoid soft lockup when transmitting UDP to reachable server. (NeilBrown)   
  - mfd: omap-usb-tll: Use struct_size to allocate tll (Javier Carrasco)   
  - drm/qxl: Add check for drm_cvt_mode (Chen Ni)   
  - drm/etnaviv: fix DMA direction handling for cached RW buffers (Lucas Stach)   
  - perf report: Fix condition in sort__sym_cmp() (Namhyung Kim)   
  - leds: trigger: Unregister sysfs attributes before calling deactivate() (Hans de Goede)   
  - media: renesas: vsp1: Store RPF partition configuration per RPF instance (Laurent Pinchart)   
  - media: renesas: vsp1: Fix _irqsave and _irq mix (Laurent Pinchart)   
  - media: uvcvideo: Override default flags (Daniel Schaefer)   
  - media: uvcvideo: Allow entity-defined get_info and get_cur (Ricardo Ribalda)   
  - saa7134: Unchecked i2c_transfer function result fixed (Aleksandr Burakov)   
  - media: imon: Fix race getting ictx->lock (Ricardo Ribalda)   
  - media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control() (Zheng Yejian)   
  - USB: move snd_usb_pipe_sanity_check into the USB core (Greg Kroah-Hartman)   
  - selftests: forwarding: devlink_lib: Wait for udev events after reloading (Amit Cohen)   
  - bna: adjust 'name' buf size of bna_tcb and bna_ccb structures (Alexey Kodanev)   
  - wifi: virt_wifi: don't use strlen() in const context (Johannes Berg)   
  - gss_krb5: Fix the error handling path for crypto_sync_skcipher_setkey (Gaosheng Cui)   
  - wifi: virt_wifi: avoid reporting connection success with wrong SSID (En-Wei Wu)   
  - qed: Improve the stack space of filter_config() (Shai Malin)   
  - perf: Prevent passing zero nr_pages to rb_alloc_aux() (Adrian Hunter)   
  - perf: Fix perf_aux_size() for greater-than 32-bit size (Adrian Hunter)   
  - perf/x86/intel/pt: Fix pt_topa_entry_for_page() address calculation (Adrian Hunter)   
  - netfilter: nf_tables: rise cap on SELinux secmark context (Pablo Neira Ayuso)   
  - net: fec: Fix FEC_ECR_EN1588 being cleared on link-down (Csókás, Bence)   
  - net: fec: Refactor: #define magic constants (Csókás Bence)   
  - wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() (Baochen Qiang)   
  - wifi: cfg80211: fix typo in cfg80211_calculate_bitrate_he() (Baochen Qiang)   
  - mlxsw: spectrum_acl_erp: Fix object nesting warning (Ido Schimmel)   
  - lib: objagg: Fix general protection fault (Ido Schimmel)   
  - selftests/bpf: Check length of recv in test_sockmap (Geliang Tang)   
  - net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined (Guangguan Wang)   
  - net/smc: Allow SMC-D 1MB DMB allocations (Stefan Raspl)   
  - wifi: brcmsmac: LCN PHY code is used for BCM4313 2G-only device (Samasth Norway Ananda)   
  - firmware: turris-mox-rwtm: Initialize completion before mailbox (Marek Behún)   
  - firmware: turris-mox-rwtm: Fix checking return value of wait_for_completion_timeout() (Marek Behún)   
  - m68k: cmpxchg: Fix return value for default case in __arch_xchg() (Thorsten Blum)   
  - x86/xen: Convert comma to semicolon (Chen Ni)   
  - m68k: atari: Fix TT bootup freeze / unexpected (SCU) interrupt messages (Eero Tamminen)   
  - arm64: dts: amlogic: gx: correct hdmi clocks (Jerome Brunet)   
  - arm64: dts: mediatek: mt7622: fix "emmc" pinctrl mux (Rafał Miłecki)   
  - ARM: dts: imx6qdl-kontron-samx6i: fix PCIe reset polarity (Michael Walle)   
  - ARM: dts: imx6qdl-kontron-samx6i: fix board reset (Michael Walle)   
  - ARM: dts: imx6qdl-kontron-samx6i: fix PHY reset (Michael Walle)   
  - ARM: dts: imx6qdl-kontron-samx6i: move phy reset into phy-node (Marco Felsch)   
  - arm64: dts: rockchip: Increase VOP clk rate on RK3328 (Jonas Karlman)   
  - arm64: dts: qcom: msm8996: specify UFS core_clk frequencies (Dmitry Baryshkov)   
  - arm64: dts: qcom: sdm845: add power-domain to UFS PHY (Dmitry Baryshkov)   
  - hwmon: (max6697) Fix swapped temp{1,8} critical alarms (Guenter Roeck)   
  - hwmon: (max6697) Fix underflow when writing limit attributes (Guenter Roeck)   
  - pwm: stm32: Always do lazy disabling (Uwe Kleine-König)   
  - hwmon: (adt7475) Fix default duty on fan is disabled (Wayne Tung)   
  - x86/platform/iosf_mbi: Convert PCIBIOS_* return codes to errnos (Ilpo Järvinen)   
  - x86/pci/xen: Fix PCIBIOS_* return code handling (Ilpo Järvinen)   
  - x86/pci/intel_mid_pci: Fix PCIBIOS_* return code handling (Ilpo Järvinen)   
  - x86/of: Return consistent error type from x86_of_pci_irq_enable() (Ilpo Järvinen)   
  - hfsplus: fix to avoid false alarm of circular locking (Chao Yu)   
  - platform/chrome: cros_ec_debugfs: fix wrong EC message version (Tzung-Bi Shih)   
  - LTS tag: v5.4.281 (Sherry Yang)   
  - tap: add missing verification for short frame (Si-Wei Liu)   {CVE-2024-41090} 
  - tun: add missing verification for short frame (Dongli Zhang)   {CVE-2024-41091} 
  - filelock: Fix fcntl/close race recovery compat path (Jann Horn)   
  - ALSA: hda/realtek: Enable headset mic on Positivo SU C1400 (Edson Juliano Drosdeck)   
  - jfs: don't walk off the end of ealist (lei lu)   
  - ocfs2: add bounds checking to ocfs2_check_dir_entry() (lei lu)   
  - ACPI: processor_idle: Fix invalid comparison with insertion sort for latency (Kuan-Wei Chiu)   
  - ARM: 9324/1: fix get_user() broken with veneer (Masahiro Yamada)   
  - hfsplus: fix uninit-value in copy_name (Edward Adam Davis)   
  - selftests/vDSO: fix clang build errors and warnings (John Hubbard)   
  - spi: imx: Don't expect DMA for i.MX{25,35,50,51,53} cspi devices (Uwe Kleine-König)   
  - fs: better handle deep ancestor chains in is_subdir() (Christian Brauner)   
  - Bluetooth: hci_core: cancel all works upon hci_unregister_dev() (Tetsuo Handa)   
  - scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed (Xingui Yang)   
  - powerpc/eeh: avoid possible crash when edev->pdev changes (Ganesh Goudar)   
  - powerpc/pseries: Whitelist dtl slub object for copying to userspace (Anjali K)   
  - net: mac802154: Fix racy device stats updates by DEV_STATS_INC() and DEV_STATS_ADD() (Yunshui Jiang)   
  - net: usb: qmi_wwan: add Telit FN912 compositions (Daniele Palmas)   
  - ALSA: dmaengine_pcm: terminate dmaengine before synchronize (Shengjiu Wang)   
  - s390/sclp: Fix sclp_init() cleanup on failure (Heiko Carstens)   
  - can: kvaser_usb: fix return value for hif_usb_send_regout (Chen Ni)   
  - ASoC: ti: omap-hdmi: Fix too long driver name (Primoz Fiser)   
  - ASoC: ti: davinci-mcasp: Set min period size using FIFO config (Jai Luthra)   
  - bytcr_rt5640 : inverse jack detect for Archos 101 cesium (Thomas GENTY)   
  - Input: elantech - fix touchpad state on resume for Lenovo N24 (Jonathan Denose)   
  - mips: fix compat_sys_lseek syscall (Arnd Bergmann)   
  - ALSA: hda/realtek: Add more codec ID to no shutup pins list (Kailang Yang)   
  - KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group() (Michael Ellerman)   
  - wifi: cfg80211: wext: add extra SIOCSIWSCAN data check (Dmitry Antipov)   
  - mei: demote client disconnect warning on suspend to debug (Alexander Usyskin)   
  - fs/file: fix the check in find_next_fd() (Yuntao Wang)   
  - kconfig: remove wrong expr_trans_bool() (Masahiro Yamada)   
  - kconfig: gconf: give a proper initial state to the Save button (Masahiro Yamada)   
  - ila: block BH in ila_output() (Eric Dumazet)   
  - Input: silead - Always support 10 fingers (Hans de Goede)   
  - wifi: mac80211: fix UBSAN noise in ieee80211_prep_hw_scan() (Dmitry Antipov)   
  - wifi: mac80211: mesh: init nonpeer_pm to active by default in mesh sdata (Nicolas Escande)   
  - ACPI: EC: Avoid returning AE_OK on errors in address space handler (Armin Wolf)   
  - ACPI: EC: Abort address space access upon error (Armin Wolf)   
  - scsi: qedf: Set qed_slowpath_params to zero before use (Saurav Kashyap)   
  - filelock: Remove locks reliably when fcntl/close race is detected (Jann Horn)   
  - gcc-plugins: Rename last_stmt() for GCC 14+ (Kees Cook)


author: Alok Tiwari <alok.a.tiwari@oracle.com> [5.4.17-2136.335.4.el7uek]
changelog:
  - mm: memcg/slab: enable kmalloc-cg-<n> caches for x86_64. (Imran Khan)  [Orabug: 36951041]  
  - printk: add kthread for long-running print (Stephen Brennan)  [Orabug: 36456582]  
  - kdb: Use the passed prompt in kdb_position_cursor() (Douglas Anderson)   
  - driver core: Fix uevent_show() vs driver detach race (Dan Williams) [Orabug: 37029153] {CVE-2024-44952}
  - pinctrl: ti: ti-iodelay: fix possible memory leak when pinctrl_enable() fails (Yang Yingliang)   
  - pinctrl: ti: ti-iodelay: Drop if block with always false condition (Uwe Kleine-König)   
  - pinctrl: single: fix possible memory leak when pinctrl_enable() fails (Yang Yingliang)   
  - pinctrl: core: fix possible memory leak when pinctrl_enable() fails (Yang Yingliang)   
  - ipvs: Avoid unnecessary calls to skb_is_gso_sctp (Ismael Luceno)


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.336.3.el7uek]
changelog:
  - Compiler Attributes: Add __uninitialized macro (Heiko Carstens)   
  - filelock: Correct the filelock owner in fcntl_setlk/fcntl_setlk64 (Long Li)   
  - ALSA: timer: Relax start tick time check for slave timer elements (Takashi Iwai)   
  - ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7 (Parsa Poorshikhian)   
  - LTS tag: v5.4.282 (Sherry Yang)   
  - media: Revert "media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()" (Sean Young)   
  - ARM: dts: imx6qdl-kontron-samx6i: fix phy-mode (Michael Walle)   
  - nvme/pci: Add APST quirk for Lenovo N60z laptop (WangYuli)   
  - exec: Fix ToCToU between perm check and set-uid/gid usage (Kees Cook) [Orabug: 36984017] {CVE-2024-43882}
  - media: uvcvideo: Use entity get_cur in uvc_ctrl_set (Yunke Cao)   
  - arm64: cpufeature: Fix the visibility of compat hwcaps (Amit Daniel Kachhap)   
  - drm/i915/gem: Fix Virtual Memory mapping boundaries calculation (Andi Shyti) [Orabug: 36953969] {CVE-2024-42259}
  - netfilter: nf_tables: prefer nft_chain_validate (Florian Westphal) [Orabug: 36896846] {CVE-2024-41042}
  - netfilter: nf_tables: use timestamp to check for set element timeout (Pablo Neira Ayuso) [Orabug: 36630432] {CVE-2024-27397}
  - netfilter: nf_tables: set element extended ACK reporting support (Pablo Neira Ayuso)   
  - kbuild: Fix '-S -c' in x86 stack protector scripts (Nathan Chancellor)   
  - Fix gcc 4.9 build issue in 5.4.y (Jari Ruusu)   
  - drm/mgag200: Set DDC timeout in milliseconds (Thomas Zimmermann)   
  - drm/bridge: analogix_dp: properly handle zero sized AUX transactions (Lucas Stach)   
  - x86/mtrr: Check if fixed MTRRs exist before saving them (Andi Kleen) [Orabug: 37028936] {CVE-2024-44948}
  - tracing: Fix overflow in get_free_elt() (Tze-nan Wu) [Orabug: 36992998] {CVE-2024-43890}
  - power: supply: axp288_charger: Round constant_charge_voltage writes down (Hans de Goede)   
  - power: supply: axp288_charger: Fix constant_charge_voltage writes (Hans de Goede)   
  - genirq/irqdesc: Honor caller provided affinity in alloc_desc() (Shay Drory)   
  - serial: core: check uartclk for zero to avoid divide by zero (George Kennedy) [Orabug: 36993009] {CVE-2024-43893}
  - scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES (Damien Le Moal)   
  - ntp: Safeguard against time_constant overflow (Justin Stitt)   
  - ntp: Clamp maxerror and esterror to operating range (Justin Stitt)   
  - tick/broadcast: Move per CPU pointer access into the atomic section (Thomas Gleixner) [Orabug: 37036032] {CVE-2024-44968}
  - scsi: ufs: core: Fix hba->last_dme_cmd_tstamp timestamp updating logic (Vamshi Gajjela)   
  - usb: gadget: core: Check for unset descriptor (Chris Wulff) [Orabug: 37028988] {CVE-2024-44960}
  - USB: serial: debug: do not echo input by default (Marek Marczykowski-Górecki)   
  - usb: vhci-hcd: Do not drop references before new references are gained (Oliver Neukum) [Orabug: 36992971] {CVE-2024-43883}
  - ALSA: hda/hdmi: Yet more pin fix for HP EliteDesk 800 G4 (Takashi Iwai)   
  - ALSA: hda: Add HP MP9 G4 Retail System AMS to force connect list (Steven 'Steve' Kendall)   
  - ALSA: line6: Fix racy access to midibuf (Takashi Iwai) [Orabug: 37028957] {CVE-2024-44954}
  - drm/client: fix null pointer dereference in drm_client_modeset_probe (Ma Ke) [Orabug: 36993014] {CVE-2024-43894}
  - spi: spi-fsl-lpspi: Fix scldiv calculation (Stefan Wahren)   
  - spi: fsl-lpspi: remove unneeded array (Oleksandr Suvorov)   
  - bpf: kprobe: remove unused declaring of bpf_kprobe_override (Menglong Dong)   
  - i2c: smbus: Send alert notifications to all devices if source not found (Guenter Roeck)   
  - i2c: smbus: Improve handling of stuck alerts (Guenter Roeck)   
  - i2c: smbus: Don't filter out duplicate alerts (Corey Minyard)   
  - arm64: errata: Expand speculative SSBS workaround (again) (Mark Rutland)   
  - arm64: cputype: Add Cortex-A725 definitions (Mark Rutland)   
  - arm64: cputype: Add Cortex-X1C definitions (Mark Rutland)   
  - arm64: errata: Expand speculative SSBS workaround (Mark Rutland)   
  - arm64: errata: Unify speculative SSBS errata logic (Mark Rutland)   
  - arm64: cputype: Add Cortex-X925 definitions (Mark Rutland)   
  - arm64: cputype: Add Cortex-A720 definitions (Mark Rutland)   
  - arm64: cputype: Add Cortex-X3 definitions (Mark Rutland)   
  - arm64: errata: Add workaround for Arm errata 3194386 and 3312417 (Mark Rutland)   
  - arm64: cputype: Add Neoverse-V3 definitions (Mark Rutland)   
  - arm64: cputype: Add Cortex-X4 definitions (Mark Rutland)   
  - arm64: Add Neoverse-V2 part (Besar Wicaksono)   
  - arm64: cpufeature: Force HWCAP to be based on the sysreg visible to user-space (James Morse)   
  - ext4: fix wrong unit use in ext4_mb_find_by_goal (Kemeng Shi)   
  - SUNRPC: Fix a race to wake a sync task (Benjamin Coddington)   
  - s390/sclp: Prevent release of buffer in I/O (Peter Oberparleiter) [Orabug: 37029020] {CVE-2024-44969}
  - jbd2: avoid memleak in jbd2_journal_write_metadata_buffer (Kemeng Shi)   
  - media: uvcvideo: Fix the bandwdith quirk on USB 3.x (Michal Pecio)   
  - media: uvcvideo: Ignore empty TS packets (Ricardo Ribalda)   
  - drm/amdgpu: Fix the null pointer dereference to ras_manager (Ma Jun) [Orabug: 36993084] {CVE-2024-43908}
  - btrfs: fix bitmap leak when loading free space cache on duplicate entry (Filipe Manana)   
  - wifi: nl80211: don't give key data to userspace (Johannes Berg)   
  - udf: prevent integer overflow in udf_bitmap_free_blocks() (Roman Smirnov)   
  - PCI: Add Edimax Vendor ID to pci_ids.h (FUJITA Tomonori)   
  - selftests/bpf: Fix send_signal test with nested CONFIG_PARAVIRT (Yonghong Song)   
  - ACPI: SBS: manage alarm sysfs attribute through psy core (Thomas Weißschuh)   
  - ACPI: battery: create alarm sysfs attribute atomically (Thomas Weißschuh)   
  - clocksource/drivers/sh_cmt: Address race condition for clock events (Niklas Söderlund)   
  - md/raid5: avoid BUG_ON() while continue reshape after reassembling (Yu Kuai) [Orabug: 36993127] {CVE-2024-43914}
  - net: fec: Stop PPS on driver remove (Csókás, Bence)   
  - Bluetooth: l2cap: always unlock channel in l2cap_conless_channel() (Dmitry Antipov)   
  - net: linkwatch: use system_unbound_wq (Eric Dumazet)   
  - net: usb: qmi_wwan: fix memory leak for not ip packets (Daniele Palmas) [Orabug: 36983959] {CVE-2024-43861}
  - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Kuniyuki Iwashima) [Orabug: 36993147] {CVE-2024-44935}
  - sctp: move hlist_node and hashent out of sctp_ep_common (Xin Long)   
  - x86/mm: Fix pti_clone_pgtable() alignment assumption (Peter Zijlstra) [Orabug: 37029012] {CVE-2024-44965}
  - irqchip/mbigen: Fix mbigen node address layout (Yipeng Zou)   
  - genirq: Allow irq_chip registration functions to take a const irq_chip (Marc Zyngier)   
  - netfilter: ipset: Add list flush to cancel_gc (Alexander Maltsev)   
  - net: usb: sr9700: fix uninitialized variable use in sr_mdio_read (Ma Ke)   
  - ALSA: usb-audio: Correct surround channels in UAC1 channel map (Takashi Iwai)   
  - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (Al Viro) [Orabug: 36963808] {CVE-2024-42265}
  - HID: wacom: Modify pen IDs (Tatsunosuke Tobita)   
  - ipv6: fix ndisc_is_useropt() handling for PIO (Maciej Żenczykowski)   
  - net/mlx5e: Add a check for the return value from mlx5_port_set_eth_ptys (Shahar Shitrit)   
  - net/iucv: fix use after free in iucv_sock_close() (Alexandra Winter) [Orabug: 36964006] {CVE-2024-42271}
  - drm/vmwgfx: Fix overlay when using Screen Targets (Ian Forbes)   
  - drm/nouveau: prime: fix refcount underflow (Danilo Krummrich) [Orabug: 36983979] {CVE-2024-43867}
  - remoteproc: imx_rproc: Skip over memory region when node value is NULL (Aleksandr Mishin) [Orabug: 36964537] {CVE-2024-43860}
  - remoteproc: imx_rproc: Fix ignoring mapping vdev regions (Dong Aisheng)   
  - remoteproc: imx_rproc: ignore mapping vdev regions (Peng Fan)   
  - irqchip/imx-irqsteer: Handle runtime power management correctly (Shenwei Wang) [Orabug: 36964085] {CVE-2024-42290}
  - irqchip/imx-irqsteer: Add runtime PM support (Lucas Stach)   
  - irqchip/imx-irqsteer: Constify irq_chip struct (Lucas Stach)   
  - genirq: Allow the PM device to originate from irq domain (Marc Zyngier)   
  - devres: Fix memory leakage caused by driver API devm_free_percpu() (Zijun Hu) [Orabug: 36983991] {CVE-2024-43871}
  - driver core: Cast to (void *) with __force for __percpu pointer (Andy Shevchenko)   
  - dev/parport: fix the array out-of-bounds risk (tuhaowen) [Orabug: 36964223] {CVE-2024-42301}
  - parport: Standardize use of printmode (Joe Perches)   
  - parport: Convert printk(KERN_<LEVEL> to pr_<level>( (Joe Perches)   
  - PCI: rockchip: Use GPIOD_OUT_LOW flag while requesting ep_gpio (Manivannan Sadhasivam)   
  - PCI: rockchip: Make 'ep-gpios' DT property optional (Chen-Yu Tsai)   
  - mm: avoid overflows in dirty throttling logic (Jan Kara) [Orabug: 36897803] {CVE-2024-42131}
  - nvme-pci: add missing condition check for existence of mapped data (Leon Romanovsky) [Orabug: 36964022] {CVE-2024-42276}
  - ASoC: Intel: use soc_intel_is_byt_cr() only when IOSF_MBI is reachable (Pierre-Louis Bossart)   
  - ASoC: Intel: Move soc_intel_is_foo() helpers to a generic header (Hans de Goede)   
  - ASoC: Intel: Convert to new X86 CPU match macros (Thomas Gleixner)   
  - powerpc: fix a file leak in kvm_vcpu_ioctl_enable_cap() (Al Viro)   
  - apparmor: Fix null pointer deref when receiving skb during sock creation (Xiao Liang)   
  - mISDN: Fix a use after free in hfcmulti_tx() (Dan Carpenter) [Orabug: 36964032] {CVE-2024-42280}
  - bpf: Fix a segment issue when downgrading gso_size (Fred Li) [Orabug: 36964038] {CVE-2024-42281}
  - net: nexthop: Initialize all fields in dumped nexthops (Petr Machata) [Orabug: 36964044] {CVE-2024-42283}
  - tipc: Return non-zero value from tipc_udp_addr2str() on error (Shigeru Yoshida) [Orabug: 36964047] {CVE-2024-42284}
  - net: bonding: correctly annotate RCU in bond_should_notify_peers() (Johannes Berg)   
  - ipv4: Fix incorrect source address in Record Route option (Ido Schimmel)   
  - MIPS: SMP-CPS: Fix address for GCR_ACCESS register for CM3 and later (Gregory CLEMENT)   
  - dma: fix call order in dmam_free_coherent (Lance Richardson) [Orabug: 36964523] {CVE-2024-43856}
  - libbpf: Fix no-args func prototype BTF dumping syntax (Andrii Nakryiko)   
  - um: time-travel: fix time-travel-start option (Johannes Berg)   
  - jfs: Fix array-index-out-of-bounds in diFree (Jeongjun Park) [Orabug: 36964530] {CVE-2024-43858}
  - kdb: address -Wformat-security warnings (Arnd Bergmann)   
  - nilfs2: handle inconsistent state in nilfs_btnode_create_block() (Ryusuke Konishi) [Orabug: 36964203] {CVE-2024-42295}
  - Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x13d3:0x3591 (WangYuli)   
  - Bluetooth: btusb: Add RTL8852BE device 0489:e125 to device tables (Hilda Wu)   
  - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov)   
  - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov)   
  - drm/panfrost: Mark simple_ondemand governor as softdep (Dragan Simic)   
  - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov)   
  - selftests/sigaltstack: Fix ppc64 GCC build (Michael Ellerman)   
  - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Bart Van Assche) [Orabug: 36964054] {CVE-2024-42285}
  - platform: mips: cpu_hwmon: Disable driver on unsupported hardware (Jiaxun Yang)   
  - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (Thomas Gleixner)   
  - rtc: isl1208: Fix return value of nvmem callbacks (Joy Chakraborty)   
  - perf/x86/intel/pt: Fix a topa_entry base address calculation (Adrian Hunter)   
  - perf/x86/intel/pt: Fix topa_entry base length (Marco Cavenati)   
  - scsi: qla2xxx: validate nvme_local_port correctly (Nilesh Javali) [Orabug: 36964059] {CVE-2024-42286}
  - scsi: qla2xxx: Complete command early within lock (Shreyas Deodhar) [Orabug: 36964065] {CVE-2024-42287}
  - scsi: qla2xxx: Fix for possible memory corruption (Shreyas Deodhar) [Orabug: 36964070] {CVE-2024-42288}
  - scsi: qla2xxx: During vport delete send async logout explicitly (Manish Rangankar) [Orabug: 36964080] {CVE-2024-42289}
  - rtc: cmos: Fix return value of nvmem callbacks (Joy Chakraborty)   
  - kobject_uevent: Fix OOB access within zap_modalias_env() (Zijun Hu) [Orabug: 36964092] {CVE-2024-42292}
  - decompress_bunzip2: fix rare decompression failure (Ross Lagerwall)   
  - ubi: eba: properly rollback inside self_check_eba (Fedor Pchelkin)   
  - clk: davinci: da8xx-cfgchip: Initialize clk_init_data before use (Bastien Curutchet)   
  - f2fs: fix to don't dirty inode for readonly filesystem (Chao Yu) [Orabug: 36964213] {CVE-2024-42297}
  - scsi: qla2xxx: Return ENOBUFS if sg_cnt is more than one for ELS cmds (Saurav Kashyap)   
  - binder: fix hang of unregistered readers (Carlos Llamas)   
  - PCI: hv: Return zero, not garbage, when reading PCI_INTERRUPT_PIN (Wei Liu)   
  - hwrng: amd - Convert PCIBIOS_* return codes to errnos (Ilpo Järvinen)   
  - tools/memory-model: Fix bug in lock.cat (Alan Stern)   
  - leds: ss4200: Convert PCIBIOS_* return codes to errnos (Ilpo Järvinen)   
  - wifi: mwifiex: Fix interface type change (Rafael Beims)   
  - ext4: make sure the first directory block is not a hole (Baokun Li) [Orabug: 36964232] {CVE-2024-42304}
  - ext4: check dot and dotdot of dx_root before making dir indexed (Baokun Li) [Orabug: 36964237] {CVE-2024-42305}
  - m68k: amiga: Turn off Warp1260 interrupts during boot (Paolo Pisati)   
  - udf: Avoid using corrupted block bitmap buffer (Jan Kara) [Orabug: 36964242] {CVE-2024-42306}
  - drm/amd/display: Check for NULL pointer (Sung Joon Kim) [Orabug: 36964247] {CVE-2024-42308}
  - drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes (Ma Ke) [Orabug: 36964253] {CVE-2024-42309}
  - drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes (Ma Ke) [Orabug: 36964260] {CVE-2024-42310}
  - hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode() (Chao Yu) [Orabug: 36964265] {CVE-2024-42311}
  - media: venus: fix use after free in vdec_close (Dikshita Agarwal) [Orabug: 36964275] {CVE-2024-42313}
  - char: tpm: Fix possible memory leak in tpm_bios_measurements_open() (Joe Hattori)   
  - ipv6: take care of scope when choosing the src addr (Nicolas Dichtel)   
  - af_packet: Handle outgoing VLAN packets without hardware offloading (Chengen Du)   
  - net: netconsole: Disable target before netpoll cleanup (Breno Leitao)   
  - tick/broadcast: Make takeover of broadcast hrtimer reliable (Yu Liao)   
  - rtc: interface: Add RTC offset to alarm after fix-up (Csókás, Bence)   
  - nilfs2: avoid undefined behavior in nilfs_cnt32_ge macro (Ryusuke Konishi)   
  - fs/nilfs2: remove some unused macros to tame gcc (Alex Shi)   
  - pinctrl: freescale: mxs: Fix refcount of child (Peng Fan)   
  - netfilter: ctnetlink: use helper function to calculate expect ID (Pablo Neira Ayuso) [Orabug: 37013755] {CVE-2024-44944}
  - bnxt_re: Fix imm_data endianness (Jack Wang)   
  - macintosh/therm_windtunnel: fix module unload. (Nick Bowler)   
  - powerpc/xmon: Fix disassembly CPU feature checks (Michael Ellerman)   
  - Input: elan_i2c - do not leave interrupt disabled on suspend failure (Dmitry Torokhov)   
  - RDMA/device: Return error earlier if port in not valid (Leon Romanovsky)   
  - mtd: make mtd_test.c a separate module (Arnd Bergmann)   
  - ASoC: max98088: Check for clk_prepare_enable() error (Chen Ni)   
  - RDMA/rxe: Don't set BTH_ACK_MASK for UC or UD QPs (Honggang LI)   
  - RDMA/mlx4: Fix truncated output warning in alias_GUID.c (Leon Romanovsky)   
  - RDMA/mlx4: Fix truncated output warning in mad.c (Leon Romanovsky)   
  - Input: qt1050 - handle CHIP_ID reading error (Andrei Lalaev)   
  - PCI: Fix resource double counting on remove & rescan (Ilpo Järvinen)   
  - SUNRPC: Fixup gss_status tracepoint error output (Benjamin Coddington)   
  - sparc64: Fix incorrect function signature and add prototype for prom_cif_init (Andreas Larsson)   
  - ext4: avoid writing unitialized memory to disk in EA inodes (Jan Kara)   
  - SUNRPC: avoid soft lockup when transmitting UDP to reachable server. (NeilBrown)   
  - mfd: omap-usb-tll: Use struct_size to allocate tll (Javier Carrasco)   
  - drm/qxl: Add check for drm_cvt_mode (Chen Ni) [Orabug: 36964456] {CVE-2024-43829}
  - drm/etnaviv: fix DMA direction handling for cached RW buffers (Lucas Stach)   
  - perf report: Fix condition in sort__sym_cmp() (Namhyung Kim)   
  - leds: trigger: Unregister sysfs attributes before calling deactivate() (Hans de Goede) [Orabug: 36964459] {CVE-2024-43830}
  - media: renesas: vsp1: Store RPF partition configuration per RPF instance (Laurent Pinchart)   
  - media: renesas: vsp1: Fix _irqsave and _irq mix (Laurent Pinchart)   
  - media: uvcvideo: Override default flags (Daniel Schaefer)   
  - media: uvcvideo: Allow entity-defined get_info and get_cur (Ricardo Ribalda)   
  - saa7134: Unchecked i2c_transfer function result fixed (Aleksandr Burakov)   
  - media: imon: Fix race getting ictx->lock (Ricardo Ribalda)   
  - media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control() (Zheng Yejian)   
  - USB: move snd_usb_pipe_sanity_check into the USB core (Greg Kroah-Hartman)   
  - selftests: forwarding: devlink_lib: Wait for udev events after reloading (Amit Cohen)   
  - bna: adjust 'name' buf size of bna_tcb and bna_ccb structures (Alexey Kodanev) [Orabug: 36964480] {CVE-2024-43839}
  - wifi: virt_wifi: don't use strlen() in const context (Johannes Berg)   
  - gss_krb5: Fix the error handling path for crypto_sync_skcipher_setkey (Gaosheng Cui)   
  - wifi: virt_wifi: avoid reporting connection success with wrong SSID (En-Wei Wu) [Orabug: 36964487] {CVE-2024-43841}
  - qed: Improve the stack space of filter_config() (Shai Malin)   
  - perf: Prevent passing zero nr_pages to rb_alloc_aux() (Adrian Hunter)   
  - perf: Fix perf_aux_size() for greater-than 32-bit size (Adrian Hunter)   
  - perf/x86/intel/pt: Fix pt_topa_entry_for_page() address calculation (Adrian Hunter)   
  - netfilter: nf_tables: rise cap on SELinux secmark context (Pablo Neira Ayuso)   
  - net: fec: Fix FEC_ECR_EN1588 being cleared on link-down (Csókás, Bence)   
  - net: fec: Refactor: #define magic constants (Csókás Bence)   
  - wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() (Baochen Qiang) [Orabug: 36984010] {CVE-2024-43879}
  - wifi: cfg80211: fix typo in cfg80211_calculate_bitrate_he() (Baochen Qiang)   
  - mlxsw: spectrum_acl_erp: Fix object nesting warning (Ido Schimmel) [Orabug: 36984013] {CVE-2024-43880}
  - lib: objagg: Fix general protection fault (Ido Schimmel) [Orabug: 36964495] {CVE-2024-43846}
  - selftests/bpf: Check length of recv in test_sockmap (Geliang Tang)   
  - net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined (Guangguan Wang)   
  - net/smc: Allow SMC-D 1MB DMB allocations (Stefan Raspl)   
  - wifi: brcmsmac: LCN PHY code is used for BCM4313 2G-only device (Samasth Norway Ananda)   
  - firmware: turris-mox-rwtm: Initialize completion before mailbox (Marek Behún)   
  - firmware: turris-mox-rwtm: Fix checking return value of wait_for_completion_timeout() (Marek Behún)   
  - m68k: cmpxchg: Fix return value for default case in __arch_xchg() (Thorsten Blum)   
  - x86/xen: Convert comma to semicolon (Chen Ni)   
  - m68k: atari: Fix TT bootup freeze / unexpected (SCU) interrupt messages (Eero Tamminen)   
  - arm64: dts: amlogic: gx: correct hdmi clocks (Jerome Brunet)   
  - arm64: dts: mediatek: mt7622: fix "emmc" pinctrl mux (Rafał Miłecki)   
  - ARM: dts: imx6qdl-kontron-samx6i: fix PCIe reset polarity (Michael Walle)   
  - ARM: dts: imx6qdl-kontron-samx6i: fix board reset (Michael Walle)   
  - ARM: dts: imx6qdl-kontron-samx6i: fix PHY reset (Michael Walle)   
  - ARM: dts: imx6qdl-kontron-samx6i: move phy reset into phy-node (Marco Felsch)   
  - arm64: dts: rockchip: Increase VOP clk rate on RK3328 (Jonas Karlman)   
  - arm64: dts: qcom: msm8996: specify UFS core_clk frequencies (Dmitry Baryshkov)   
  - arm64: dts: qcom: sdm845: add power-domain to UFS PHY (Dmitry Baryshkov)   
  - hwmon: (max6697) Fix swapped temp{1,8} critical alarms (Guenter Roeck)   
  - hwmon: (max6697) Fix underflow when writing limit attributes (Guenter Roeck)   
  - pwm: stm32: Always do lazy disabling (Uwe Kleine-König)   
  - hwmon: (adt7475) Fix default duty on fan is disabled (Wayne Tung)   
  - x86/platform/iosf_mbi: Convert PCIBIOS_* return codes to errnos (Ilpo Järvinen)   
  - x86/pci/xen: Fix PCIBIOS_* return code handling (Ilpo Järvinen)   
  - x86/pci/intel_mid_pci: Fix PCIBIOS_* return code handling (Ilpo Järvinen)   
  - x86/of: Return consistent error type from x86_of_pci_irq_enable() (Ilpo Järvinen)   
  - hfsplus: fix to avoid false alarm of circular locking (Chao Yu)   
  - platform/chrome: cros_ec_debugfs: fix wrong EC message version (Tzung-Bi Shih)   
  - LTS tag: v5.4.281 (Sherry Yang)   
  - tap: add missing verification for short frame (Si-Wei Liu)   [Orabug: 36660755] {CVE-2024-41090} 
  - tun: add missing verification for short frame (Dongli Zhang)   [Orabug: 36660755] {CVE-2024-41091} 
  - filelock: Fix fcntl/close race recovery compat path (Jann Horn) [Orabug: 36896789] {CVE-2024-41020} {CVE-2024-41012}
  - ALSA: hda/realtek: Enable headset mic on Positivo SU C1400 (Edson Juliano Drosdeck)   
  - jfs: don't walk off the end of ealist (lei lu) [Orabug: 36891667] {CVE-2024-41017}
  - ocfs2: add bounds checking to ocfs2_check_dir_entry() (lei lu) [Orabug: 36891655] {CVE-2024-41015}
  - ACPI: processor_idle: Fix invalid comparison with insertion sort for latency (Kuan-Wei Chiu)   
  - ARM: 9324/1: fix get_user() broken with veneer (Masahiro Yamada)   
  - hfsplus: fix uninit-value in copy_name (Edward Adam Davis) [Orabug: 36896969] {CVE-2024-41059}
  - selftests/vDSO: fix clang build errors and warnings (John Hubbard)   
  - spi: imx: Don't expect DMA for i.MX{25,35,50,51,53} cspi devices (Uwe Kleine-König)   
  - fs: better handle deep ancestor chains in is_subdir() (Christian Brauner)   
  - Bluetooth: hci_core: cancel all works upon hci_unregister_dev() (Tetsuo Handa) [Orabug: 36896994] {CVE-2024-41063}
  - scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed (Xingui Yang)   
  - powerpc/eeh: avoid possible crash when edev->pdev changes (Ganesh Goudar) [Orabug: 36897003] {CVE-2024-41064}
  - powerpc/pseries: Whitelist dtl slub object for copying to userspace (Anjali K) [Orabug: 36897009] {CVE-2024-41065}
  - net: mac802154: Fix racy device stats updates by DEV_STATS_INC() and DEV_STATS_ADD() (Yunshui Jiang)   
  - net: usb: qmi_wwan: add Telit FN912 compositions (Daniele Palmas)   
  - ALSA: dmaengine_pcm: terminate dmaengine before synchronize (Shengjiu Wang)   
  - s390/sclp: Fix sclp_init() cleanup on failure (Heiko Carstens) [Orabug: 36897032] {CVE-2024-41068}
  - can: kvaser_usb: fix return value for hif_usb_send_regout (Chen Ni)   
  - ASoC: ti: omap-hdmi: Fix too long driver name (Primoz Fiser)   
  - ASoC: ti: davinci-mcasp: Set min period size using FIFO config (Jai Luthra)   
  - bytcr_rt5640 : inverse jack detect for Archos 101 cesium (Thomas GENTY)   
  - Input: elantech - fix touchpad state on resume for Lenovo N24 (Jonathan Denose)   
  - mips: fix compat_sys_lseek syscall (Arnd Bergmann)   
  - ALSA: hda/realtek: Add more codec ID to no shutup pins list (Kailang Yang)   
  - KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group() (Michael Ellerman) [Orabug: 36897048] {CVE-2024-41070}
  - wifi: cfg80211: wext: add extra SIOCSIWSCAN data check (Dmitry Antipov) [Orabug: 36897312] {CVE-2024-41072}
  - mei: demote client disconnect warning on suspend to debug (Alexander Usyskin)   
  - fs/file: fix the check in find_next_fd() (Yuntao Wang)   
  - kconfig: remove wrong expr_trans_bool() (Masahiro Yamada)   
  - kconfig: gconf: give a proper initial state to the Save button (Masahiro Yamada)   
  - ila: block BH in ila_output() (Eric Dumazet) [Orabug: 36897360] {CVE-2024-41081}
  - Input: silead - Always support 10 fingers (Hans de Goede)   
  - wifi: mac80211: fix UBSAN noise in ieee80211_prep_hw_scan() (Dmitry Antipov)   
  - wifi: mac80211: mesh: init nonpeer_pm to active by default in mesh sdata (Nicolas Escande)   
  - ACPI: EC: Avoid returning AE_OK on errors in address space handler (Armin Wolf)   
  - ACPI: EC: Abort address space access upon error (Armin Wolf)   
  - scsi: qedf: Set qed_slowpath_params to zero before use (Saurav Kashyap)   
  - filelock: Remove locks reliably when fcntl/close race is detected (Jann Horn) [Orabug: 36874758] {CVE-2024-41012} {CVE-2024-41020}
  - gcc-plugins: Rename last_stmt() for GCC 14+ (Kees Cook)


author: Sherry Yang <sherry.yang@oracle.com> [5.4.17-2136.336.4.el7uek]
changelog:
  - igb: Fix not clearing TimeSync interrupts for 82580 (Daiwei Li)   
  - VMCI: Fix use-after-free when removing resource in vmci_resource_remove() (David Fernandez Gonzalez)  [Orabug: 37037205]  
  - x86/speculation: Basic IBRS is enabled with AMD Automatic IBRS (Alexandre Chartre)  [Orabug: 37044540]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.0-1948.2.el7uek]
changelog:
  - uek6: Temporarily disable KABI check (Jack Vogel)   
  - arm64/crash_core: Export TCR_EL1.T1SZ in vmcoreinfo (John Donnelly)  [Orabug: 30193155]  
  - crypto: Enable CONFIG_CRYPTO_OFB for fips mode (Jack Vogel)   
  - kernel/crash_core.c - Add crashkernel=auto for x86 and Arm. (John Donnelly)  [Orabug: 30549968]  
  - drm/mgag200: Pin all framebuffer memory at offset 0 in VRAM (John Donnelly)  [Orabug: 30418470]  
  - uek-rpm: Reenable with_dtrace in both OL spec files. (Jack Vogel)   
  - ctf: toolchain-based CTF support (Nick Alcock)  [Orabug: 30544408]  
  - ctf: kernel build with -gt for CTF generation using GCC (sans ld atm) (Indu Bhagat)  [Orabug: 30544408]  
  - waitfd: new syscall implementing waitpid() over fds (Nick Alcock)  [Orabug: 30544408]  
  - ctf: generate CTF information for the kernel (Nick Alcock)  [Orabug: 30544408]  
  - kallsyms: new /proc/kallmodsyms with builtin modules and symbol sizes (Kris Van Hees)  [Orabug: 30544408]  
  - oracleasm: Convert block layer status to errno (Martin K. Petersen)  [Orabug: 30538854]  
  - Enable CONFIG_DM_WRITECACHE in UEK6 (Jack Vogel)  [Orabug: 30421025]  
  - Update the build versioning files. (Jack Vogel)  [Orabug: 30487822]  
  - sched: SIS_CORE to disable idle core search (subhra mazumdar)  [Orabug: 29708118]  
  - sched: add sched feature to disable idle core search (subhra mazumdar)  [Orabug: 29708118]  
  - sched: rotate the cpu search window for better spread (subhra mazumdar)  [Orabug: 29708118]  
  - sched: introduce per-cpu var next_cpu to track search limit (subhra mazumdar)  [Orabug: 29708118]  
  - sched: limit cpu search in select_idle_cpu (subhra mazumdar)  [Orabug: 29708118]  
  - CALL_NOSPEC macro needs forward/backward in label references (George Kennedy)  [Orabug: 30506771]  
  - uek-rpm: Update config files with "make olddefconfig" (Victor Erminpour)  [Orabug: 30507302]  
  - x86/kABI: Increase the NCAPINTS in case we need more CPU bits. (Konrad Rzeszutek Wilk)  [Orabug: 30318342]  
  - KEYS: Print insert-sys-cert information to stdout instead of stderr (Mehmet Kayaalp)  [Orabug: 30329032]  
  - KEYS: Support for inserting a certificate into x86 bzImage (Mehmet Kayaalp)  [Orabug: 30329032]  
  - KEYS: Add ELF class-independent certificate insertion support (Mehmet Kayaalp)  [Orabug: 30329032]  
  - KEYS: Insert incompressible bytes to reserve space in bzImage (Mehmet Kayaalp)  [Orabug: 30329032]  
  - uek-rpm: enable CONFIG_SYSTEM_EXTRA_CERTIFICATE (Eric Snowberg)  [Orabug: 30329032]  
  - Allow mce to reset instead of panic on UE (Allen Pais)  [Orabug: 29750244]  
  - net: enable RPS on vlan devices (Allen Pais)  [Orabug: 29751757]  
  - scsi: Don't abort scsi_scan due to unexpected response (John Sobecki)  [Orabug: 27429506]  
  - mm: parallelize deferred page init along max order boundaries (Daniel Jordan)  [Orabug: 29708084]  
  - ktask: add ktask_ctl flag KTASK_ATOMIC (Daniel Jordan)  [Orabug: 29708084]  
  - ktask: add ktask_aligned_size (Daniel Jordan)  [Orabug: 29708084]  
  - vfio: Fix locked DMA page accounting (Aaron Young)  [Orabug: 29708084]  
  - vfio: relieve mmap_sem reader cacheline bouncing by holding it longer (Daniel Jordan)  [Orabug: 29708084]  
  - vfio: ease mmap_sem writer contention by caching locked_vm (Daniel Jordan)  [Orabug: 29708084]  
  - vfio: parallelize vfio_pin_map_dma (Daniel Jordan)  [Orabug: 29708084]  
  - ktask: add undo support (Daniel Jordan)  [Orabug: 29708084]  
  - ktask, lockdep: detect deadlocks between master and helper threads (Daniel Jordan)  [Orabug: 29708084]  
  - kernel/ktask: annocate debugobjects properly according to its storage location (Shan Hai)  [Orabug: 29708084]  
  - ktask: multithread CPU-intensive kernel work (Daniel Jordan)  [Orabug: 29708084]  
  - ktask: add documentation (Daniel Jordan)  [Orabug: 29708084]  
  - uek-rpm: Enable lockdown LSM (Eric Snowberg)  [Orabug: 30431425]  
  - lockdown: Run in lockdown integrity mode when SB is enabled. (Eric Snowberg)  [Orabug: 30431425]  
  - parfait: Speculative Side Channel defect groups in lib/hexdump.c (Anjali Kulkarni)  [Orabug: 30092081]  
  - Parfait fixes for defects found by parfait-tools (Anjali Kulkarni)  [Orabug: 29962202]  
  - uek-rpm: Set to old style build_id generation to avoid rpm install conflicts. (Somasundaram Krishnasamy)  [Orabug: 30435996]  
  - vmscan: Support multiple kswapd threads per node (Buddy Lumpkin)  [Orabug: 29708468] [Orabug: 29708453]  
  - scsi: mpt3sas: Bump mpt3sas driver version to 32.100.00.00 (Sreekanth Reddy)  [Orabug: 30376506]  
  - scsi: mpt3sas: Fix module parameter max_msix_vectors (Sreekanth Reddy)  [Orabug: 30376506]  
  - scsi: mpt3sas: Reject NVMe Encap cmnds to unsupported HBA (Sreekanth Reddy)  [Orabug: 30376506]  
  - scsi: mpt3sas: Use Component img header to get Package ver (Sreekanth Reddy)  [Orabug: 30376506]  
  - scsi: mpt3sas: Fail release cmnd if diag buffer is released (Sreekanth Reddy)  [Orabug: 30376506]  
  - scsi: mpt3sas: Add app owned flag support for diag buffer (Sreekanth Reddy)  [Orabug: 30376506]  
  - scsi: mpt3sas: Reuse diag buffer allocated at load time (Sreekanth Reddy)  [Orabug: 30376506]  
  - scsi: mpt3sas: clear release bit when buffer reregistered (Sreekanth Reddy)  [Orabug: 30376506]  
  - scsi: mpt3sas: Maintain owner of buffer through UniqueID (Sreekanth Reddy)  [Orabug: 30376506]  
  - scsi: mpt3sas: Free diag buffer without any status check (Sreekanth Reddy)  [Orabug: 30376506]  
  - scsi: mpt3sas: Fix clear pending bit in ioctl status (Sreekanth Reddy)  [Orabug: 30376506]  
  - scsi: mpt3sas: Display message before releasing diag buffer (Sreekanth Reddy)  [Orabug: 30376506]  
  - scsi: mpt3sas: Register trace buffer based on NVDATA settings (Sreekanth Reddy)  [Orabug: 30376506]  
  - mm/memory-failure.c clean up around tk pre-allocation (Jane Chu)  [Orabug: 30124017]  
  - uek-rpm: enable CONFIG_INTEGRITY_PLATFORM_KEYRING (Eric Snowberg)  [Orabug: 30434806]  
  - x86/microcode/intel: Issue the revision updated message only on the BSP (Borislav Petkov)  [Orabug: 30353603]  
  - x86/microcode: Update late microcode in parallel (Ashok Raj)  [Orabug: 30353603]  
  - mm: Allow userspace to reserve VA range for use by userspace only (Khalid Aziz)  [Orabug: 30135230]  
  - x86/speculation/mds: Check for the right microcode before setting mitigation (Kanth Ghatraju)  [Orabug: 29962281]  
  - x86/speculation/mds: Make mds_mitigation mutable after init (Kanth Ghatraju)  [Orabug: 30091537]  {CVE-2019-11091} {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add debugfs for controlling MDS (Kanth Ghatraju)  [Orabug: 30091537]  {CVE-2019-11091} {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - x86/speculation/mds: Add boot option to enable MDS protection only while in idle (Boris Ostrovsky)  [Orabug: 30091537]  {CVE-2019-11091} {CVE-2018-12126} {CVE-2018-12130} {CVE-2018-12127} 
  - dm crypt: add middle-endian variant of plain64 IV (Konrad Rzeszutek Wilk)  [Orabug: 29689986]  
  - x86/speculation: Properly initialize percpu variables (Boris Ostrovsky)  [Orabug: 30386767]  
  - Revert "x86/microcode: Probe CPU features on microcode update" (Boris Ostrovsky)  [Orabug: 30386767]  
  - x86/microcode: Probe CPU features on microcode update (Patrick Colp)  [Orabug: 30090397]  
  - x86/speculation: Add per-cpu variables to control speculation (Patrick Colp)   
  - x86/speculation: Add the option to control spectre v2 heuristics (Patrick Colp)  [Orabug: 30090397]  
  - x86/speculation: Enable support for skylake (Patrick Colp)  [Orabug: 30090397]  
  - x86/speculation: Add runtime knobs (Patrick Colp)  [Orabug: 30090397]  
  - x86/speculation: Plumb additional support into KVM (Patrick Colp)  [Orabug: 30090397]  
  - x86/speculation: Add support for SPEC_CTRL idle (Patrick Colp)  [Orabug: 30090397]  
  - x86/speculation: Add SSBD userspace mode (deprecated) (Patrick Colp)  [Orabug: 30090397]  
  - x86/speculation: Add SSBD support with IBRS (Patrick Colp)  [Orabug: 30090397]  
  - x86/speculation: Add IBPB static key support (Patrick Colp)   
  - x86/speculation: Add RSB stuffing to entry code (Patrick Colp)  [Orabug: 30090397]  
  - x86/speculation: Add support for RSB stuffing (Patrick Colp)  [Orabug: 30090397]  
  - x86/speculation: Add IBRS_{ENABLE|DISABLE} to entry code (Patrick Colp)  [Orabug: 30090397]  
  - x86/speculation: Add static keys for IBRS firmware support (Patrick Colp)  [Orabug: 30090397]  
  - x86/speculation: Add support for basic IBRS in the kernel (Patrick Colp)  [Orabug: 30090397]  
  - x86/speculation: Use a static key to enable/disable retpoline (Patrick Colp)  [Orabug: 30090397]  
  - x86/speculation: Refactor mitigation selection code (Patrick Colp)  [Orabug: 30090397]  
  - x86/speculation: Split out nospec-annotate.h from nospec-branch.h (Patrick Colp)  [Orabug: 30090397]  
  - uek-rpm: Fix rpm warnings on OL8 (Somasundaram Krishnasamy)  [Orabug: 30346507]  
  - uek-rpm: Disable PCMCIA (Eric Snowberg)  [Orabug: 30318827]  
  - x86/simplefb: simplefb was broken on UEFI mode Oracle and HP system, skip VIDEO_TYPE_EFI (Ethan Zhao)  [Orabug: 29746425]  
  - revert commit ff8fb335221e2c446b0d4cbea26be371fd2feb64 (Shuning Zhang)  [Orabug: 29708297]  
  - sysfs: replace WARN() with pr_debug when sysfs_remove_group() failed (Ethan Zhao)  [Orabug: 29746401]  
  - uek6: enable XFS online scrub code (Darrick J. Wong)  [Orabug: 30195940]  
  - xfs: change DAX warning for Exadata (Darrick J. Wong)  [Orabug: 30033648]  
  - xfs: add lazytime mount option (Darrick J. Wong)  [Orabug: 29962792]  
  - scsi: scsi_transport_iscsi: modify detected conn err to KERN_ERR (Fred Herard)  [Orabug: 30023361]  
  - scsi: scsi_transport_iscsi: redirect conn error to console (Fred Herard)  [Orabug: 30023375]  
  - mISDN: Add __exit declaration for module exit function (Somasundaram Krishnasamy)  [Orabug: 29903374]  
  - crypto: cavium: cpt: Cavium Cryptographic Accelerator driver (Henry Willard)  [Orabug: 29751550]  
  - kvm: fix possible spectre gadgets in arch/x86/kvm/hyperv.h (Darren Kenny)  [Orabug: 28713077]  
  - kvm: fix possible spectre gadgets in arch/x86/kvm/pmu.h (Darren Kenny)  [Orabug: 28713077]  
  - kvm: fix possible spectre gadgets in include/linux/kvm_host.h (Darren Kenny)  [Orabug: 28713077]  
  - kvm: fix possible spectre gadgets in arch/x86/kvm/cpuid.c (Darren Kenny)  [Orabug: 28713077]  
  - kvm: fix possible spectre gadgets in arch/x86/kvm/hyperv.c (Darren Kenny)  [Orabug: 28713077]  
  - kvm: fix possible spectre gadgets in arch/x86/kvm/lapic.c (Darren Kenny)  [Orabug: 28713077]  
  - kvm: fix possible spectre gadgets in arch/x86/kvm/mmu.c (Darren Kenny)  [Orabug: 28713077]  
  - kvm: fix possible spectre gadgets in arch/x86/kvm/mtrr.c (Darren Kenny)  [Orabug: 28713077]  
  - kvm: fix possible spectre gadgets in arch/x86/kvm/x86.c (Darren Kenny)  [Orabug: 28713077]  
  - kvm: fix possible spectre gadgets in virt/kvm/irqchip.c (Darren Kenny)  [Orabug: 28713077]  
  - kvm: fix possible spectre gadgets in virt/kvm/kvm_main.c (Darren Kenny)  [Orabug: 28713077]  
  - arm64: do not place BUG() file name in generic section (Rob Gardner)  [Orabug: 29708067]  
  - ocfs2: Tighten free bit calculation in the global bitmap (Sunil Mushran)  [Orabug: 27199147]  
  - hugetlbfs: use truncate mutex to prevent pmd sharing race (Mike Kravetz)  [Orabug: 29708524]  
  - hugetlbfs: introduce truncation/fault mutex to avoid races (Mike Kravetz)  [Orabug: 29708507]  
  - kernel: VirtBox workaround for dynamically allocated text (Mike Kravetz)  [Orabug: 29708488]  
  - perf tools: add --sym-lookup arg to enable symbol lookup in hugepage shm segment (Ashok Vairavan)  [Orabug: 29745533]  
  - ocfs2: fix a performance issue with synced buffer io (Ryan Ding)   
  - ocfs2: call ocfs2_abort when journal abort (Ryan Ding)   
  - ocfs2/trivial: Limit unaligned aio+dio write messages to once per day (Sunil Mushran)  [Orabug: 27199146]  
  - ocfs2/trivial: Print message indicating unaligned aio+dio write (Sunil Mushran)  [Orabug: 27199145]  
  - ocfs2: Suppress the error message from being printed in ocfs2_rename (Xiaowei.Hu)  [Orabug: 27199148]  
  - ocfs2: make 'buffered' as the default coherency option (Wengang Wang)  [Orabug: 27199044]  
  - vmcore: quiet zero PT_NOTE warning (Dave Kleikamp)  [Orabug: 27199039]  
  - block: loop: Enable directIO whenever possible (Dave Kleikamp)  [Orabug: 27194729]  
  - arm64: Extend erratum 27456 workaround to ThunderX 83xx (Allen Pais)  [Orabug: 29538492]  
  - arm64: add support for crashkernel=auto (Allen Pais)  [Orabug: 29538492]  
  - oracleasm: Switch to new mount API in Linux 5.3 (Martin K. Petersen)   
  - oracleasm: Kernel changes for 5.2 (Martin K. Petersen)   
  - oracleasm: Kernel changes for 5.0 (Martin K. Petersen)   
  - oracleasm: Kernel changes for 4.18 (Martin K. Petersen)   
  - oracleasm: Honor ASM_IFLAG_FORMAT_NOCHECK flag (Martin K. Petersen)   
  - oracleasm: Implement support for QUERY HANDLE operation (Martin K. Petersen)   
  - oracleasm: Fix use after free for request processing timer (Martin K. Petersen)   
  - oracleasm: Fix incorrectly set flag (Martin K. Petersen)   
  - oracleasm: Fix memory leak (Martin K. Petersen)   
  - oracleasm: Add ENXIO handling (Martin K. Petersen)   
  - oracleasm: Tracing update (Martin K. Petersen)   
  - oracleasm: Don't assume bip was allocated by oracleasm (Martin K. Petersen)   
  - oracleasm: fix asmfs_dir_operations compiler error (Tom Saeger)  [Orabug: 27465296]  
  - oracleasm: Kernel interface changes for 4.12 (Divya Indi)   
  - oracleasm: Copy the integrity descriptor (Martin K. Petersen)   
  - oracleasm: Integrity profile has moved (Martin K. Petersen)   
  - oracleasm: Add support for inline bio error reporting (Martin K. Petersen)   
  - oracleasm: Fix trace output for warn_asm_ioc and check_asm_ioc (Martin K. Petersen)   
  - oracleasm: Fix occasional I/O stall due to merge error (Martin K. Petersen)   
  - oracleasm: Classify device connectivity issues as global errors (Martin K. Petersen)  [Orabug: 20117903]  
  - oracleasm: Deprecate mlog and implement support for tracepoints (Martin K. Petersen)   
  - oracleasm: Abolish mlog usage in integrity.c and clean up error printing. (Martin K. Petersen)   
  - oracleasm: Various code and whitespace cleanups. (Martin K. Petersen)   
  - oracleasm: 4.0 compat changes (Martin K. Petersen)   
  - oracleasm: Compat changes for 3.18 (Martin K. Petersen)   
  - oracleasm: claim FMODE_EXCL access on disk during asm_open (Srinivas Eeda)  [Orabug: 19454829]  
  - oracleasm: Restrict logical block size reporting (Martin K. Petersen)   
  - oracleasm: Report logical block size (Martin K. Petersen)   
  - oracleasm: Compat changes for 3.10 (Martin K. Petersen)   
  - oracleasm: Add support for new error return codes from block/SCSI (Martin K. Petersen)  [Orabug: 17484923]  
  - oracleasm: Compat changes for 3.8 (Martin K. Petersen)   
  - oracleasm: Compat changes for 3.5 (Dwight Engen)   
  - oracleasm: Introduce module parameter for block size selection (Martin K. Petersen)  [Orabug: 15924773]  
  - oracleasm: Data integrity support (Martin K. Petersen)   
  - oracleasm: Fix two merge errors (Martin K. Petersen)   
  - Oracle ASM Kernel Driver (Martin K. Petersen)   
  - ksplice: aarch64 use ksplice friendly KBUILD_CFLAGS (Tom Saeger)  [Orabug: 27649476] [Orabug: 29961704]  
  - ksplice: add sysctls for determining Ksplice features. (Jamie Iles)  [Orabug: 26537364] [Orabug: 29961704]  
  - ksplice: clear the stack before going in the freezer. (Victor Erminpour)  [Orabug: 29961704]  
  - ksplice: avoid going in the __refrigerator without unwinding the stack. (Victor Erminpour)  [Orabug: 29961704]  
  - ksplice: do not skip tasks with TIF_KSPLICE_FREEZING. (Quentin Casasnovas)  [Orabug: 29961704]  
  - ksplice: Provide an interface to freeze tasks (Victor Erminpour)  [Orabug: 29961704]  
  - uek-rpm: Remove kernel-uek-tools RPMs for OL8 (Victor Erminpour)  [Orabug: 30205292]  
  - uek-rpm: Add changes for kernel-uek-doc build support. (Victor Erminpour)  [Orabug: 30381773]  
  - uek-rpm: Update summary to Oracle UEK Release 6 from 5 (Victor Erminpour)  [Orabug: 30310967]  
  - uek-rpm: Re-enable NF_TABLES config options (Victor Erminpour)  [Orabug: 30326867]  
  - uek-rpm: Fix kabitool Module.symvers parse error (Victor Erminpour)  [Orabug: 30341561]  
  - uek-rpm: Update OL8 spec to latest firmware revision (Jack Vogel)  [Orabug: 30299029]  
  - uek-rpm: Generate bls.conf file and copy UEFI CA cert (Victor Erminpour)  [Orabug: 30275817]  
  - uek-rpm: Package vmlinuz and .vmlinuz.hmac in /lib/modules/ (Victor Erminpour)  [Orabug: 30269735]  
  - uek-rpm: kernel-uek RPM specfile cleanup (Victor Erminpour)  [Orabug: 30199979]  
  - uek-rpm: RPM debuginfo improvements for OL8 (Victor Erminpour)  [Orabug: 30199979]  
  - uek-rpm: Fix bug in OL8 kernel RPM scriptlets (Victor Erminpour)  [Orabug: 30179076]  
  - uek-rpm: Disable CONFIG_ARM_SMMU_DISABLE_BYPASS_BY_DEFAULT (Victor Erminpour)  [Orabug: 30179070]  
  - uek-rpm: Call find instead of cp and don't copy .tmp_versions (Victor Erminpour)  [Orabug: 30116866]  
  - uek-rpm: Add rsync as a 'BuildRequires' in RPM specfile (Victor Erminpour)  [Orabug: 30068210]  
  - uek-rpm: Enable CONFIG_NF_TABLES_NETDEV=y (Victor Erminpour)  [Orabug: 29897273]  
  - uek-rpm: Import 'certs/ol_signing_keys.pem' from 'linux-uek.git/uek5/master' (Victor Erminpour)   
  - config-aarch64: change CONFIG_HZ and CONFIG_FRAME_WARN (Thomas Tai)  [Orabug: 28894138]  
  - kernel-uek.spec: defuse a memory bomb in xargs (Lukáš Lipinský)  [Orabug: 30344582]  
  - kernel-uek.spec: defuse a memory bomb in xargs (Lukáš Lipinský)  [Orabug: 30057188]  
  - config-aarch64: enable CONFIG_MPLS_IPTUNNEL and CONFIG_BPF_JIT_ALWAYS_ON (Thomas Tai)  [Orabug: 29493120] [Orabug: 29409143]  
  - Revert "AMD: Change CONFIG_EDAC_DECODE_MCE to built-in" (George Kennedy)  [Orabug: 30080594]  
  - config-aarch64: enable ISCSI_IBFT (Thomas Tai)  [Orabug: 29456913]  
  - uek-rpm: Update firmware prerequisites to 20190627-999.2.git7ae3a09d. (John Donnelly)  [Orabug: 30043163]  
  - uek-rpm: Update UEK5 config files with "make olddefconfig" (Victor Erminpour)  [Orabug: 30038078]  
  - uek-rpm/ol7/nano_modules fix (Jane Chu)  [Orabug: 29959677]  
  - AMD: Change CONFIG_EDAC_DECODE_MCE to built-in (George Kennedy)  [Orabug: 29922372]  
  - config: enable PSI (Tom Hromatka)  [Orabug: 29896477]  
  - uek-rpm: Fix mce-inject.ko path in nano kernel modules list (Somasundaram Krishnasamy)  [Orabug: 29667299]  
  - Revert "aarch64 enable BNX2 CNIC ISCSI, FCOE" (Eric Saint-Etienne)  [Orabug: 29481221]  
  - uek-rpm: update list of removed files, generated by depmod on install stage (Alexander Burmashev)  [Orabug: 29383638]  
  - uek-rpm: replace i40evf.ko with iavf.ko in nano_modules. (John Donnelly)  [Orabug: 29421946]  
  - uek-rpm: aarch64 config enable RETPOLINE (Tom Saeger)  [Orabug: 28867144]  
  - add symbols to kABI whitelist (Dan Duval)  [Orabug: 29261848]  
  - uek-rpm: Remove hardcoded 'kernel_git_commit' macro from specfile (Victor Erminpour)  [Orabug: 29357441]  
  - uek-rpm: Add perf packages back to ol7-aarch64 (Victor Erminpour)  [Orabug: 29343605]  
  - uek-rpm: Remove perf RPMs (Victor Erminpour)  [Orabug: 29325581]  
  - uek-rpm: Remove oracle-armtoolset-1 for OL8 (Victor Erminpour)  [Orabug: 29325581]  
  - uek-rpm: use multi-threaded xz compression for rpms (Alexander Burmashev)  [Orabug: 29201054]  
  - uek-rpm: optimize find-requires usage (Alexander Burmashev)  [Orabug: 29201054]  
  - find-debuginfo.sh: backport parallel files procession (Alexander Burmashev)  [Orabug: 29201054]  
  - uek-rpm: Port to OL8 (Victor Erminpour)  [Orabug: 29287050]  
  - uek-rpm: Change RPM variant from 4k-debug to 4kdebug (Victor Erminpour)  [Orabug: 29287050]  
  - uek-rpm: Copy uek-rpm/ol7/ directory to uek-rpm/ol8/ (Victor Erminpour)  [Orabug: 29287050]  
  - Add the Intel ICE driver to UEK5 configuration (Jack Vogel)  [Orabug: 29293770]  
  - Add Configuration option for Intel IGC driver to UEK5 (Jack Vogel)  [Orabug: 29294226]  
  - uek-rpm: Enable device-mapper era driver (Dave Aldridge)  [Orabug: 29245896]  
  - uek-rpm: Enable Ext2 extended attributes (Dave Aldridge)  [Orabug: 29252939]  
  - uek-rpm: Update x86_64 config options (Victor Erminpour)  [Orabug: 28700595]  
  - uek-rpm: Enable Cavium ThunderX coprocessors and AES_TI crypto (Victor Erminpour)  [Orabug: 29186152]  
  - uek-rpm: Enable ena driver (Somasundaram Krishnasamy)  [Orabug: 29162519]  
  - ctf: explicitly specify the sizes of structures and unions (Nick Alcock)  [Orabug: 29054989]  
  - uek-rpm: remove obsolete CTF-related find-debuginfo hack (Nick Alcock)  [Orabug: 29043023]  
  - ktask: multithread CPU-intensive kernel work (Daniel Jordan)  [Orabug: 25577642]  
  - uek-rpm: build in vfio and vfio_iommu_type1 modules (Daniel Jordan)  [Orabug: 25577642]  
  - config-aarch64-debug: Match kernel config between aarch64 and config_x86_64 (Thomas Tai)  [Orabug: 28312743]  
  - config-aarch64: Match kernel config between aarch64 and config_x86_64 (Thomas Tai)  [Orabug: 28312743]  
  - [PATCH UEK5 v3] dtrace: add DTRACEACT_PCAP for packet capture for later pcap_dump() (Alan Maguire)  [Orabug: 28975818]  
  - uek-rpm: Allow blacklisting of kernel modules in initramfs during nano-kernel build (Somasundaram Krishnasamy)  [Orabug: 28925565]  
  - uek-rpm: aarch64: enable CONFIG_GPIO_THUNDERX (Henry Willard)  [Orabug: 28932941]  
  - uek-rpm: Enable read IMA policy (Eric Snowberg)  [Orabug: 28702669]  
  - Update the UEFI secureboot keys in UEK5 Master (Jack Vogel)  [Orabug: 28900807]  
  - arm64: disable /dev/port on 64 bit ARM (Eric Saint-Etienne)  [Orabug: 28320013]  
  - config: disable xfs online scrub in uek5 (Darrick J. Wong)  [Orabug: 28874134]  
  - config-aarch64-debug: Match kernel config between aarch64 and config_x86_64 (Thomas Tai)  [Orabug: 28312743]  {CVE-2018-12928} 
  - config-aarch64: Match kernel config between aarch64 and config_x86_64 (Thomas Tai)  [Orabug: 28312743]  {CVE-2018-12928} 
  - uek-rpm: Run 'make olddefconfig' to get latest x86 config values (Victor Erminpour)  [Orabug: 28763256]  
  - uek-rpm: Remove module rpcrdma.ko (NFSoRDMA) from nano_modules (Somasundaram Krishnasamy)  [Orabug: 28850263]  
  - config: enable BNXT_HWMON (Brian Maly)  [Orabug: 28797053]  
  - uek-rpm: aarch64 some XGENE drivers must be be modules (Tom Saeger)  [Orabug: 28549351]  
  - uek-rpm: enable DTrace FBT for aarch64 (Kris Van Hees)  [Orabug: 28707614]  
  - uek-rpm: enable DTrace SDT for aarch64 (Kris Van Hees)  [Orabug: 28707604]  
  - uek-rpm: Disable deprecated CONFIG_ACPI_PROCFS_POWER (Victor Erminpour)  [Orabug: 28630247]  
  - uek-rpm: support both 4k and 64k page size for aarch64 (Allen Pais)  [Orabug: 28526023]  
  - Revert "uek-rpm: support both 4k and 64k page size for aarch64" (Jack Vogel)   
  - uek-rpm: Disable F2FS in the UEK5 config (Victor Erminpour)  [Orabug: 28570381]  
  - uek-rpm: support both 4k and 64k page size for aarch64 (Allen Pais)  [Orabug: 28526023]  
  - uek-rpm: Enable MPLS suppoprt (Victor Erminpour)  [Orabug: 28367674]  
  - dtrace: increment dtrace-kernel-headers revision to 1.1.0 (Vincent Lim)  [Orabug: 28241736]  
  - uek-rpm: aarch64: enable building SHA3 algorithms (Henry Willard)  [Orabug: 28486461]  
  - mstflint: add mstflint secure boot access kernel support (Qing Huang)  [Orabug: 27416559]  
  - uek-rpm: Enable perf stripped binary (Victor Erminpour)  [Orabug: 28469286]  
  - uek-rpm: Show UEK Release Number in RPM summary (Victor Erminpour)  [Orabug: 28468593]  
  - uek-rpm: aarch64 Set CONFIG_BPF_STREAM_PARSER (Henry Willard)  [Orabug: 27653372]  
  - aarch64: remove duplicate dtb in kernel rpm (Eric Saint-Etienne)  [Orabug: 28216582]  
  - uek-rpm: Enable net_failover.ko in nano_modules file (Victor Erminpour)  [Orabug: 28390028]  
  - uek-rpm: config: Disable CONFIG_SECURITY_DMESG_RESTRICT (Victor Erminpour)  [Orabug: 28372959]  
  - uek-rpm: Enable ovmapi.ko in nano_modules file (Victor Erminpour)  [Orabug: 28144761]  
  - Revert "aarch64: remove duplicate dtb in kernel rpm" (Jack Vogel)   
  - aarch64: remove duplicate dtb in kernel rpm (Eric Saint-Etienne)  [Orabug: 28216582]  
  - aarch64: fix device mapper multipathing (Eric Saint-Etienne)  [Orabug: 27893211]  
  - uek-rpm: config-debug: Turn off torture testing by default (Knut Omang)  [Orabug: 27746166]  
  - rpi: MMC fails to find DMA channel and falls back to PIO (Vijay Kumar)  [Orabug: 28159727]  
  - uek-rpm: aarch64 Disable CONFIG_NET_VRF (Victor Erminpour)  [Orabug: 28158146]  
  - uek-rpm: config: disable CONFIG_DEBUG_VM on aarch64 (Henry Willard)  [Orabug: 28104208]  
  - uek-rpm: Enable kernel-uek-headers build. (Victor Erminpour)  [Orabug: 28110910]  
  - arm64: add support for crashkernel=auto (Dave Kleikamp)  [Orabug: 28095909]  
  - uek-rpm: aarch64 sync NVME config with x86 (Tom Saeger)  [Orabug: 28096294]  
  - uek-rpm: aarch64 make olddefconfig latest stable (Tom Saeger)  [Orabug: 28084270]  
  - uek-rpm: aarch64 make olddefconfig usercopy whitelist (Tom Saeger)  [Orabug: 28084248]  
  - uek-rpm: aarch64 set default cpu governor to PERFORMANCE (Tom Saeger)  [Orabug: 27952402]  
  - uek-rpm: Disable CONFIG_NET_VRF (Victor Erminpour)  [Orabug: 27801112]  
  - uek-rpm: Enable CONFIG_QED_OOO option in UEK5 (Victor Erminpour)  [Orabug: 27774819]  
  - uek-rpm: aarch64 use 64K pagesize (Tom Saeger)  [Orabug: 28057643]  
  - add new checksum files for kABI; re-enable kABI checking (Dan Duval)  [Orabug: 27199028]  
  - uek-rpm: aarch64 build using oracle-armtoolset (Tom Saeger)  [Orabug: 28022143]  
  - uek-rpm: aarch64 make TORTURE modules debug only (Tom Saeger)  [Orabug: 28032744]  
  - uek-rpm: aarch64 enable QLOGIC modules (Tom Saeger)  [Orabug: 28021280]  
  - uek-rpm: aarch64 disable HARDENED_USERCOPY (Tom Saeger)  [Orabug: 27996695]  
  - uek-rpm: aarch64 disable modules that panic kernel (Tom Saeger)  [Orabug: 27999744]  
  - uek-rpm: aarch64 make olddefconfig for ARM SDEI (Tom Saeger)  [Orabug: 28022735]  
  - uek-rpm: Add kernel/drivers/crypto/ccp/ccp.ko to nano modules list (Liam Merwick)  [Orabug: 27854232]  
  - uek-rpm: Run 'make olddefconfig' for UEK5 v4.14.35 (Victor Erminpour)  [Orabug: 27981731]  
  - uek-rpm: Enable silently dropped options from UEK4 (Victor Erminpour)  [Orabug: 27834007]  
  - Revert "enable kABI checking in spec file" (Jack Vogel)   
  - uek-rpm: Remove deprecated config options from UEK5 (Victor Erminpour)  [Orabug: 27981766]  
  - uek-rpm: enable building SHA3 algorithms (Khalid Aziz)  [Orabug: 28001020]  
  - initial kABI whitelists for UEK5 (Dan Duval)  [Orabug: 27199028]  
  - enable kABI checking in spec file (Dan Duval)  [Orabug: 27199028]  
  - uek-rpm: Update linux-firmware dependency to latest (Somasundaram Krishnasamy)  [Orabug: 27989702]  
  - uek-rpm: Turn on intel iommu/vt-d (Tushar Dave)  [Orabug: 27747905]  
  - kernel.spec: add requires system-release for OL7 (Brian Maly)  [Orabug: 27964285]  
  - uek-rpm: aarch64 add arm64 defconfig platforms (Tom Saeger)  [Orabug: 27573165]  
  - uek-rpm: aarch64 disable nct hwmon modules (Tom Saeger)  [Orabug: 27866965]  
  - uek-rpm: aarch64 olddefconfig update to 4.14.35 (Tom Saeger)  [Orabug: 27933685]  
  - uek-rpm: aarch64 remove perl dependency from perf (Tom Saeger)  [Orabug: 27704937]  
  - config: enable fasttrap provider for arm64 (Kris Van Hees)  [Orabug: 27847920]  
  - uek-rpm: Enable build of kernel-uek-doc rpm (Somasundaram Krishnasamy)  [Orabug: 27845100]  
  - uek-rpm: Enable options from RHCK-7.5 missing in UEK5 (Victor Erminpour)  [Orabug: 27866120]  
  - uek-rpm: Enable CONFIG_EDAC_SKX and CONFIG_RAS_CEC (Victor Erminpour)  [Orabug: 27824333]  
  - uek-rpm: Set base_sublevel to 35 (Somasundaram Krishnasamy)  [Orabug: 27911742]  
  - uek-rpm: aarch64 set CMA_SIZE_MBYTES to 0 (Tom Saeger)  [Orabug: 27854630]  
  - uek-rpm: aarch64 enable resilient_rdmaip module (Tom Saeger)  [Orabug: 27854808]  
  - uek-rpm: aarch64 add PANIC_ON_OOPS (Tom Saeger)  [Orabug: 27847484]  
  - uek-rpm: RPM install scripts doesn't supply grub2 with a DT despite it is requested (Petr Benes)  [Orabug: 27802749]  
  - uek-rpm: remove virtio-gpu from nanokernel modules (Jim Quigley)  [Orabug: 27829972]  
  - uek-rpm: aarch64 enable BNX2 CNIC ISCSI, FCOE (Tom Saeger)  [Orabug: 27824608]  
  - uek-rpm: aarch64 olddefconfig update to 4.14.32 (Tom Saeger)  [Orabug: 27824121]  
  - uek-rpm: aarch64 config enable NUMA (Tom Saeger)  [Orabug: 27570228]  
  - uek-rpm: config: Add support for resilient_rdmaip new kernel module (Sudhakar Dindukurti)  [Orabug: 27718686]  
  - uek-rpm: config: Enable ARM64_SVE for aarch64 (Jim Quigley)  [Orabug: 27821643]  
  - uek-rpm: Include tools/objtool/objtool in kernel-uek-devel (Somasundaram Krishnasamy)  [Orabug: 27799902]  
  - uek-rpm: config: Enable DRM_VIRTIO_GPU for x-86_64. (Jim Quigley)  [Orabug: 27815399]  
  - uek-rpm/kernel-uek.spec: Add module.lds in uek5 devel rpm (Vijay Kumar)  [Orabug: 27613639]  
  - Revert "uek-rpm: kabi: remove __stack_chk_fail from kABI list" (Todd Vierling)  [Orabug: 27509441]  
  - uek-rpm: Enable CONFIG_SCHEDSTATS in UEK5 config file (Victor Erminpour)  [Orabug: 27774280]  
  - uek-rpm: Enable config options from UEK5 review (Victor Erminpour)  [Orabug: 27741375]  
  - uek-rpm: Set base_sublevel to 32 (Somasundaram Krishnasamy)  [Orabug: 27792024]  
  - uek-rpm: deliver kvm_stat on x86_64 via kernel-uek-tools (Liam Merwick)  [Orabug: 27566074]  
  - uek-rpm: config: Run "make olddefconfig" against v4.14.28 for x86_64 (Victor Erminpour)  [Orabug: 27656430]  
  - uek-rpm: config: Enable OL7U5 RHCK options for UEK5 (Victor Erminpour)  [Orabug: 27622705]  
  - uek-rpm: config: Enable CONFIG_DMA_CMA and CONFIG_CMA_SIZE_MBYTES=0 (Victor Erminpour)  [Orabug: 25917090]  
  - uek-rpm: config: Enable KASLR in UEK5 (Victor Erminpour)  [Orabug: 27741231]  
  - uek-rpm: config: Enable CONFIG_X86_MCELOG_LEGACY=y (Victor Erminpour)  [Orabug: 27684921]  
  - uek-rpm: config: Enable XFRM_OFFLOAD and ESP_OFFLOAD config options (Victor Erminpour)  [Orabug: 27741365]  
  - uek-rpm: config: Enable CONFIG_KVM_DEBUG_FS in UEK5 debug kernel (Victor Erminpour)  [Orabug: 27741246]  
  - uek-rpm: config: Enable CONFIG_F2FS_FS in UEK5 (Victor Erminpour)  [Orabug: 27739286]  
  - uek-rpm: config: Enable qat_c62x and qat_c62xvf modules (Victor Erminpour)  [Orabug: 27725149]  
  - uek-rpm: config: Disable CONFIG_SECURITY_LOADPIN (Victor Erminpour)  [Orabug: 27703796]  
  - uek-rpm: update dtrace-kernel-headers to 1.0.0 (Tomas Jedlicka)  [Orabug: 27752578]  
  - uek-rpm: enable BNX* drivers for aarch64 (Allen Pais)  [Orabug: 27717735]  
  - uek-rpm: config aarch64 add RPi3 support (Tom Saeger)  [Orabug: 27574522]  
  - uek-rpm/config-aarch64: Unset CONFIG_MODULE_SIG_FORCE in kernel config (Vijay Kumar)  [Orabug: 27620376]  
  - uek-rpm/config-aarch64: Enable default sysrq in kernel config (Vijay Kumar)  [Orabug: 27080659]  
  - uek-rpm: Bump libdtrace-ctf dependency to 0.8.0. (Todd Vierling)  [Orabug: 27741711]  
  - uek-rpm: Set base_sublevel to 30 (Somasundaram Krishnasamy)  [Orabug: 27752925]  
  - uek-rpm: Update nano modules list (Somasundaram Krishnasamy)  [Orabug: 27706743]  
  - uek-rpm: Set base_sublevel to 28 (Somasundaram Krishnasamy)  [Orabug: 27717309]  
  - uek-rpm: aarch64 build kernel-tools, perf packages (Tom Saeger)  [Orabug: 27639751]  
  - uek-rpm: aarch64 add cpupower files needed by kernel-tools (Tom Saeger)  [Orabug: 27639751]  
  - uek-rpm: aarch64 install perf with kernel-uek (Tom Saeger)  [Orabug: 27639751]  
  - uek-rpm: config: Enable ext4 file system encryption (Victor Erminpour)  [Orabug: 27635263]  
  - uek-rpm: UEK5 config file Review (Victor Erminpour)  [Orabug: 27649939]  
  - uek-rpm: Remove config-sparc file (Victor Erminpour)  [Orabug: 27649916]  
  - uek-rpm: config: Enable IPVLAN support (Victor Erminpour)  [Orabug: 27633248]  
  - uek-rpm: config: Enable vfio_mdev VFIO mediated device module (Victor Erminpour)  [Orabug: 27583169]  
  - uek-rpm: config: Enable Intel RDT (Victor Erminpour)  [Orabug: 27581283]  
  - uek-rpm: Set base_sublevel to 26 (Somasundaram Krishnasamy)  [Orabug: 27678165]  
  - uek-rpm: config aarch64 enable kpti and bp harden (Tom Saeger)  [Orabug: 27657714]  
  - uek-rpm: Remove unneeded modules from kernel-ueknano (Somasundaram Krishnasamy)  [Orabug: 27663420]  
  - uek-rpm: config aarch64 enable Mellanox hardware (Tom Saeger)  [Orabug: 27657528]  
  - uek-rpm: Set base_sublevel to 24 (Somasundaram Krishnasamy)  [Orabug: 27639261]  
  - uek-rpm: config: enable XFS Realtime subvolume support by default (Shan Hai)  [Orabug: 27548835]  
  - uek-rpm: aarch64 provide kernel-uname-r metadata (Tom Saeger)  [Orabug: 27540755]  
  - modsign: aarch64 Add key for module signing (Tom Saeger)  [Orabug: 27448208]  
  - uek-rpm: Set base_sublevel to 23 (Somasundaram Krishnasamy)  [Orabug: 27601642]  
  - uek-rpm: Update nano modules list (Somasundaram Krishnasamy)  [Orabug: 27532347]  
  - uek-rpm: Set base_sublevel to 20 (Somasundaram Krishnasamy)  [Orabug: 27586336]  
  - uek-rpm: enable USERFAULTFD in debug kernel (Mike Kravetz)  [Orabug: 27574106]  
  - uek-rpm: Set base_sublevel to 19 (Somasundaram Krishnasamy)  [Orabug: 27396439]  
  - uek-rpm: aarch64 enable available DTrace options (Tom Saeger)  [Orabug: 27485993]  
  - uek-rpm: Update to latest linux-firmware version (Somasundaram Krishnasamy)  [Orabug: 27523859]  
  - uek-rpm: enable LOCK_DOWN_IN_EFI_SECURE_BOOT (Eric Snowberg)  [Orabug: 27193819]  
  - uek-rpm: Enable CONFIG_MODULE_SIG_ALL (Eric Snowberg)  [Orabug: 27193819]  
  - uek-rpm: enable CONFIG_LOCK_DOWN_KERNEL (Eric Snowberg)  [Orabug: 27193819]  
  - uek-rpm: enable CONFIG_LOAD_UEFI_KEYS. (Eric Snowberg)  [Orabug: 27193819]  
  - uek-rpm: enable EFI_SIGNATURE_LIST_PARSER (Eric Snowberg)  [Orabug: 27193819]  
  - uek-rpm: enable CONFIG_SECONDARY_TRUSTED_KEYRING (Eric Snowberg)  [Orabug: 27193819]  
  - Revert "uek-rpm: config: enable some secure boot features" (Somasundaram Krishnasamy)  [Orabug: 27193819]  
  - uek-rpm: Enable RDS_ACL in UEK5 (Aron Silverton)  [Orabug: 27503146]  
  - uek-rpm: aarch64 enable OCFS2_FS (Tom Saeger)  [Orabug: 27525109]  
  - uek-rpm: Add support for QLogic 41000 Series Converged Network Adapters (Somasundaram Krishnasamy)  [Orabug: 27426190]  
  - uek-rpm: Enable KPTI and Retpoline config options in UEK5 (Victor Erminpour)  [Orabug: 27487028]  
  - uek-rpm: Enable Yama LSM in UEK5 (Victor Erminpour)  [Orabug: 27486963]  
  - uek-rpm: Enable config support for NVMe over Fabrics (NVMe-oF) (Victor Erminpour)  [Orabug: 27449641]  
  - uek-rpm: Enable support for iWarp QLogic QEDR in UEK5 (Victor Erminpour)  [Orabug: 27448989]  
  - uek-rpm: Enable config support for iWARP Intel i40iw (Victor Erminpour)  [Orabug: 27448941]  
  - uek-rpm: Enable config options for Heterogeneous Memory Management (HMM) (Victor Erminpour)  [Orabug: 27110778]  
  - uek-rpm: Enable eBPF related configs in UEK5 (Victor Erminpour)  [Orabug: 27416748]  
  - uek-rpm: Use olddefconfig instead of oldnoconfig (Somasundaram Krishnasamy)  [Orabug: 27283275]  
  - uek-rpm: aarch64 RPMs need Provides 'kernel' (Tom Saeger)  [Orabug: 27516320]  
  - uek-rpm: kabi: remove __stack_chk_fail from kABI list (Todd Vierling)  [Orabug: 27509305]  
  - uek-rpm: aarch64 needs kernel-headers by default (Tom Saeger)  [Orabug: 27495792]  
  - uek-rpm: Update kernel-ueknano modules list (Somasundaram Krishnasamy)  [Orabug: 27494605]  
  - uek-rpm: require CC=gcc7 on aarch64 (Tom Saeger)  [Orabug: 27438232]  
  - uek-rpm: add _kernel_cc to kernel-uek.spec (Tom Saeger)  [Orabug: 27438232]  
  - uek-rpm: config: enable numa balancing on by default (Henry Willard)  [Orabug: 27464647]  
  - uek-rpm: Do not create kernel-uek-base rpm (Somasundaram Krishnasamy)  [Orabug: 27364632]  
  - uek-rpm: enable CONFIG_PREEMPT_VOLUNTARY (Vincent Lim)  [Orabug: 27456269]  
  - uek-rpm: Enable SoftRoCE related configuration in UEK5 (Victor Erminpour)  [Orabug: 27449119]  
  - uek-rpm: Do not build kernel-uek-headers by default. (Somasundaram Krishnasamy)  [Orabug: 27363133]  
  - ctf: enable in debugging kernels (Nick Alcock)  [Orabug: 27266231]  
  - uek-rpm: build env files for aarch64 (Tom Saeger)  [Orabug: 27437589]  
  - uek-rpm: enable debug builds on aarch64 (Tom Saeger)  [Orabug: 27433384]  
  - uek-rpm: configs: Enabel Oracle HXGE and ASM driver (Allen Pais)  [Orabug: 27199116]  
  - fm10k: Add driver to the kernel config for UEK4 (Allen Pais)  [Orabug: 27199008]  
  - uek-rpm: config: enable some secure boot features (Allen Pais)  [Orabug: 27199002]  
  - uek-rpm: config: Enable OVM API (Allen Pais)  [Orabug: 27199003]  
  - uek-rpm: config: sxge/sxgevf: enable driver (Allen Pais)  [Orabug: 27199004]  
  - uek-rpm: enable CONFIG_KSPLICE. (Allen Pais)  [Orabug: 27199009]  
  - x86: add support for crashkernel=auto (Brian Maly)  [Orabug: 27234070]  
  - modsign: Add key for module signing (Eric Snowberg)  [Orabug: 27199070]  
  - uek-rpm: Add Mellanox drivers neeeded for Exadata to base_modules (Victor Erminpour)  [Orabug: 27300509]  
  - uek-rpm: Enable Mellanox hardware kernel config options for UEK5. (Victor Erminpour)  [Orabug: 27300509]  
  - uek-rpm: Disable CONFIG_DMA_CMA in UEK5 kernel config (Victor Erminpour)  [Orabug: 27201411]  
  - uek-rpm: Enable CONFIG_IMA_DEFAULT_HASH=sha256 (Victor Erminpour)  [Orabug: 27186234]  
  - uek-rpm: Enable CGROUP config in the UEK5 kernel (Victor Erminpour)  [Orabug: 25974804]  
  - uek-rpm: Kernel config settings needed to support TCP-BBR (Victor Erminpour)  [Orabug: 27110608]  
  - uek-rpm: enable and configure PMEM/DAX for UEK (Victor Erminpour)  [Orabug: 27201433]  
  - uek-rpm: enable DTrace. (Nick Alcock)  [Orabug: 27124490]  
  - uek-rpm: emit vmlinux.ctfa into -base package. (Nick Alcock)  [Orabug: 27124490]  
  - uek-rpm: set CONFIG_DTRACE depending on the value of with_dtrace (Nick Alcock)  [Orabug: 27124490]  
  - uek-rpm: Add signing options for aarch64 (Tom Saeger)  [Orabug: 27255646]  
  - uek-rpm: add aarch64 config files (Allen Pais)  [Orabug: 27255646]  
  - uek-rpm: add support for aarch64 (Allen Pais)  [Orabug: 27255646]  
  - config: CONFIG_FRAME_POINTER_UNWINDER is CONFIG_UNWINDER_FRAME_POINTER in 4.14.8 (Kris Van Hees)  [Orabug: 27419674]  
  - uek-rpm: create base config files for UEK5 (Victor Erminpour)  [Orabug: 26942304]  
  - uek-rpm: Enable signed modules (Dhaval Giani)  [Orabug: 27162491]  
  - uek-rpm: Downgrade linux-firmware version (Dhaval Giani)  [Orabug: 27162498]  
  - uek-rpm: define base_sublevel as 14 after pull of mainline stable 4.14.14 (Chuck Anderson)  [Orabug: 26942304]  
  - uek-rpm: Temporarily disable doc build (Chuck Anderson)  [Orabug: 26942304]  
  - uek-rpm: Add build dependencies to avoid build errors (Somasundaram Krishnasamy)  [Orabug: 26942304]  
  - uek-rpm: Add RPM build environment for UEK5 (Somasundaram Krishnasamy)  [Orabug: 26942304]  
  - Linux 5.4 (Linus Torvalds)


author: Jack Vogel <jack.vogel@oracle.com> [5.4.1-1949.el7uek]
changelog:
  - Linux 5.4.1 (Greg Kroah-Hartman)   
  - KVM: PPC: Book3S HV: Flush link stack on guest exit to host kernel (Michael Ellerman)   
  - powerpc/book3s64: Fix link stack flush on context switch (Michael Ellerman)   {CVE-2019-18660} 
  - staging: comedi: usbduxfast: usbduxfast_ai_cmdtest rounding error (Bernd Porr)   
  - USB: serial: option: add support for Foxconn T77W968 LTE modules (Aleksander Morgado)   
  - USB: serial: option: add support for DW5821e with eSIM support (Aleksander Morgado)   
  - USB: serial: mos7840: fix remote wakeup (Johan Hovold)   
  - USB: serial: mos7720: fix remote wakeup (Johan Hovold)   
  - USB: serial: mos7840: add USB ID to support Moxa UPort 2210 (Pavel Löbl)   
  - appledisplay: fix error handling in the scheduled work (Oliver Neukum)   
  - USB: chaoskey: fix error case of a timeout (Oliver Neukum)   
  - usb-serial: cp201x: support Mark-10 digital force gauge (Greg Kroah-Hartman)   
  - usbip: Fix uninitialized symbol 'nents' in stub_recv_cmd_submit() (Suwan Kim)   
  - usbip: tools: fix fd leakage in the function of read_attr_usbip_status (Hewenliang)   
  - USBIP: add config dependency for SGL_ALLOC (Oliver Neukum)   
  - ALSA: hda - Disable audio component for legacy Nvidia HDMI codecs (Takashi Iwai)   
  - media: mceusb: fix out of bounds read in MCE receiver buffer (A Sun)   
  - media: imon: invalid dereference in imon_touch_event (Sean Young)   
  - media: cxusb: detect cxusb_ctrl_msg error in query (Vito Caputo)   
  - media: b2c2-flexcop-usb: add sanity checking (Oliver Neukum)   
  - media: uvcvideo: Fix error path in control parsing failure (Laurent Pinchart)   
  - futex: Prevent exit livelock (Thomas Gleixner)   
  - futex: Provide distinct return value when owner is exiting (Thomas Gleixner)   
  - futex: Add mutex around futex exit (Thomas Gleixner)   
  - futex: Provide state handling for exec() as well (Thomas Gleixner)   
  - futex: Sanitize exit state handling (Thomas Gleixner)   
  - futex: Mark the begin of futex exit explicitly (Thomas Gleixner)   
  - futex: Set task::futex_state to DEAD right after handling futex exit (Thomas Gleixner)   
  - futex: Split futex_mm_release() for exit/exec (Thomas Gleixner)   
  - exit/exec: Seperate mm_release() (Thomas Gleixner)   
  - futex: Replace PF_EXITPIDONE with a state (Thomas Gleixner)   
  - futex: Move futex exit handling into futex code (Thomas Gleixner)   
  - cpufreq: Add NULL checks to show() and store() methods of cpufreq (Kai Shen)   
  - media: usbvision: Fix races among open, close, and disconnect (Alan Stern)   
  - media: usbvision: Fix invalid accesses after device disconnect (Alan Stern)   
  - media: vivid: Fix wrong locking that causes race conditions on streaming stop (Alexander Popov)   
  - media: vivid: Set vid_cap_streaming and vid_out_streaming to true (Vandana BN)   
  - ALSA: usb-audio: Fix Scarlett 6i6 Gen 2 port data (Geoffrey D. Bennett)   
  - ALSA: usb-audio: Fix NULL dereference at parsing BADD (Takashi Iwai)   
  - futex: Prevent robust futex exit race (Yang Tao)   
  - x86/entry/32: Fix FIXUP_ESPFIX_STACK with user CR3 (Andy Lutomirski)   
  - x86/pti/32: Calculate the various PTI cpu_entry_area sizes correctly, make the CPU_ENTRY_AREA_PAGES assert precise (Ingo Molnar)   
  - selftests/x86/sigreturn/32: Invalidate DS and ES when abusing the kernel (Andy Lutomirski)   
  - selftests/x86/mov_ss_trap: Fix the SYSENTER test (Andy Lutomirski)   
  - x86/entry/32: Fix NMI vs ESPFIX (Peter Zijlstra)   
  - x86/entry/32: Unwind the ESPFIX stack earlier on exception entry (Andy Lutomirski)   
  - x86/entry/32: Move FIXUP_FRAME after pushing %fs in SAVE_ALL (Andy Lutomirski)   
  - x86/entry/32: Use %ss segment where required (Andy Lutomirski)   
  - x86/entry/32: Fix IRET exception (Peter Zijlstra)   
  - x86/cpu_entry_area: Add guard page for entry stack on 32bit (Thomas Gleixner)   
  - x86/pti/32: Size initial_page_table correctly (Thomas Gleixner)   
  - x86/doublefault/32: Fix stack canaries in the double fault handler (Andy Lutomirski)   
  - x86/xen/32: Simplify ring check in xen_iret_crit_fixup() (Jan Beulich)   
  - x86/xen/32: Make xen_iret_crit_fixup() independent of frame layout (Jan Beulich)   
  - x86/stackframe/32: Repair 32-bit Xen PV (Jan Beulich)   
  - nbd: prevent memory leak (Navid Emamdoost)   
  - x86/speculation: Fix redundant MDS mitigation message (Waiman Long)   
  - x86/speculation: Fix incorrect MDS/TAA mitigation status (Waiman Long)   
  - x86/insn: Fix awk regexp warnings (Alexander Kapshuk)   
  - md/raid10: prevent access of uninitialized resync_pages offset (John Pittman)   
  - Revert "dm crypt: use WQ_HIGHPRI for the IO and crypt workqueues" (Mike Snitzer)   
  - Revert "Bluetooth: hci_ll: set operational frequency earlier" (Adam Ford)   
  - ath10k: restore QCA9880-AR1A (v1) detection (Christian Lamparter)   
  - ath10k: Fix HOST capability QMI incompatibility (Bjorn Andersson)   
  - ath10k: Fix a NULL-ptr-deref bug in ath10k_usb_alloc_urb_from_pipe (Hui Peng)   
  - ath9k_hw: fix uninitialized variable data (Denis Efremov)   
  - Bluetooth: Fix invalid-free in bcsp_close() (Tomas Bortoli)


author: Jack Vogel <jack.vogel@oracle.com> [5.4.1-1949.1.el7uek]
changelog:
  - x86/spectre: Fix retpoline mode selection logic (Patrick Colp)  [Orabug: 30604403]  
  - uek-rpm: Add CONFIG_CRYPTO_CFB for FIPS (Jack Vogel)  [Orabug: 30158461]  
  - uek-rpm: Enable CONFIG_KEXEC_SIG (Victor Erminpour)  [Orabug: 30488668]  
  - uek-rpm: Enable CONFIG_FW_CFG_SYSFS and CONFIG_FW_CFG_SYSFS_CMDLINE (Victor Erminpour)  [Orabug: 30619488]  
  - uek-rpm: Enable CONFIG_X86_5LEVEL (Victor Erminpour)  [Orabug: 30155946]  
  - uek-rpm: Disable CONFIG_SCHED_AUTOGROUP (Victor Erminpour)  [Orabug: 30596055]  
  - uek-rpm: Carry forward previous UEK5 config options. (Victor Erminpour)  [Orabug: 30595946]  
  - x86/boot: Introduce setup_indirect (Daniel Kiper)  [Orabug: 30564020]  
  - x86/boot: Introduce kernel_info.setup_type_max (Daniel Kiper)  [Orabug: 30564020]  
  - x86/boot: Introduce kernel_info (Daniel Kiper)  [Orabug: 30564020]  
  - uek-rpm: Turn off CONFIG_DEBUG_WX for Arm production kernels. (John Donnelly)  [Orabug: 30193143]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.2-1950.el7uek]
changelog:
  - uek-rpm: Run "make olddefconfig" against uek6/master (Victor Erminpour)  [Orabug: 30596470]  
  - uek-rpm: Enable kTLS offload for for MLX5 (Victor Erminpour)  [Orabug: 30630366]  
  - uek-rpm: Enable CONFIG_CPU_IDLE_GOV_HALTPOLL (Victor Erminpour)  [Orabug: 30614031]  
  - uek-rpm: Enable DTrace required config options (Victor Erminpour)  [Orabug: 30619618]  
  - uek-rpm: UEK6 config option requests from John Haxby (Victor Erminpour)  [Orabug: 30596031]  
  - uek-rpm: UEK6 config option requests from Martin Petersen (Victor Erminpour)  [Orabug: 30596031]  
  - uek-rpm: RHCK config options for UEK6 (Victor Erminpour)  [Orabug: 30540922]  
  - Linux 5.4.2 (Greg Kroah-Hartman)   
  - platform/x86: hp-wmi: Fix ACPI errors caused by passing 0 as input size (Hans de Goede)   
  - platform/x86: hp-wmi: Fix ACPI errors caused by too small buffer (Hans de Goede)   
  - HID: core: check whether Usage Page item is after Usage ID items (Candle Sun)   
  - crypto: talitos - Fix build error by selecting LIB_DES (Herbert Xu)   
  - Revert "jffs2: Fix possible null-pointer dereferences in jffs2_add_frag_to_fragtree()" (Joel Stanley)   
  - ext4: add more paranoia checking in ext4_expand_extra_isize handling (Theodore Ts'o)   
  - r8169: fix resume on cable plug-in (Heiner Kallweit)   
  - r8169: fix jumbo configuration for RTL8168evl (Heiner Kallweit)   
  - selftests: pmtu: use -oneline for ip route list cache (Thadeu Lima de Souza Cascardo)   
  - tipc: fix link name length check (John Rutherford)   
  - selftests: bpf: correct perror strings (Jakub Kicinski)   
  - selftests: bpf: test_sockmap: handle file creation failures gracefully (Jakub Kicinski)   
  - net/tls: use sg_next() to walk sg entries (Jakub Kicinski)   
  - net/tls: remove the dead inplace_crypto code (Jakub Kicinski)   
  - selftests/tls: add a test for fragmented messages (Jakub Kicinski)   
  - net: skmsg: fix TLS 1.3 crash with full sk_msg (Jakub Kicinski)   
  - net/tls: free the record on encryption error (Jakub Kicinski)   
  - net/tls: take into account that bpf_exec_tx_verdict() may free the record (Jakub Kicinski)   
  - openvswitch: remove another BUG_ON() (Paolo Abeni)   
  - openvswitch: drop unneeded BUG_ON() in ovs_flow_cmd_build_info() (Paolo Abeni)   
  - sctp: cache netns in sctp_ep_common (Xin Long)   
  - slip: Fix use-after-free Read in slip_open (Jouni Hogander)   
  - sctp: Fix memory leak in sctp_sf_do_5_2_4_dupcook (Navid Emamdoost)   
  - openvswitch: fix flow command message size (Paolo Abeni)   
  - net: sched: fix `tc -s class show` no bstats on class with nolock subqueues (Dust Li)   
  - net: psample: fix skb_over_panic (Nikolay Aleksandrov)   
  - net: macb: add missed tasklet_kill (Chuhong Yuan)   
  - net: dsa: sja1105: fix sja1105_parse_rgmii_delays() (Oleksij Rempel)   
  - mdio_bus: don't use managed reset-controller (David Bauer)   
  - macvlan: schedule bc_work even if error (Menglong Dong)   
  - gve: Fix the queue page list allocated pages count (Jeroen de Borst)   
  - x86/fpu: Don't cache access to fpu_fpregs_owner_ctx (Sebastian Andrzej Siewior)   
  - thunderbolt: Power cycle the router if NVM authentication fails (Mika Westerberg)   
  - mei: me: add comet point V device id (Alexander Usyskin)   
  - mei: bus: prefix device names on bus with the bus name (Alexander Usyskin)   
  - USB: serial: ftdi_sio: add device IDs for U-Blox C099-F9P (Fabio D'Urso)   
  - staging: rtl8723bs: Add 024c:0525 to the list of SDIO device-ids (Hans de Goede)   
  - staging: rtl8723bs: Drop ACPI device ids (Hans de Goede)   
  - staging: rtl8192e: fix potential use after free (Pan Bian)   
  - staging: wilc1000: fix illegal memory access in wilc_parse_join_bss_param() (Ajay Singh)   
  - usb: dwc2: use a longer core rest timeout in dwc2_core_reset() (Mathias Kresin)   
  - driver core: platform: use the correct callback type for bus_find_device (Sami Tolvanen)   
  - crypto: inside-secure - Fix stability issue with Macchiatobin (Pascal van Leeuwen)   
  - net: disallow ancillary data for __sys_{send,recv}msg_file() (Jens Axboe)   
  - net: separate out the msghdr copy from ___sys_{send,recv}msg() (Jens Axboe)   
  - io_uring: async workers should inherit the user creds (Jens Axboe)


author: Jack Vogel <jack.vogel@oracle.com> [5.4.2-1950.1.el7uek]
changelog:
  - uek-rpm: aarch64 config enable RETPOLINE OL8 (Henry Willard)  [Orabug: 30297793]  
  - uek-rpm: aarch64 config enable RETPOLINE (Tom Saeger)  [Orabug: 30297793]  
  - arm64: Allow reference symbols in alt-seqs to be in kernel-data. (Christoph Muellner)  [Orabug: 30297793]  
  - arm64: retpoline: Don't use retpoline in KVM's HYP part. (Christoph Muellner)  [Orabug: 30297793]  
  - Arm64: add retpoline to cpu_show_spectre_v2 (Henry Willard)  [Orabug: 30297793]  
  - BACKPORT: VARIANT 2: arm64: Use alternative framework for retpoline. (Christoph Muellner)  [Orabug: 30297793]  
  - BACKPORT: VARIANT 2: arm64: alternatives: Add support for adr/adrp with offset in alt block. (Christoph Muellner)  [Orabug: 30297793]  
  - BACKPORT: VARIANT 2: arm64: insn: Add offset getter/setter for adr. (Christoph Muellner)  [Orabug: 30297793]  
  - BACKPORT: VARIANT 2: arm64: Add MIDR_APM_POTENZA. (Henry Willard)  [Orabug: 30297793]  
  - BACKPORT: VARIANT 2: arm64: asm: Use *_nospec variants for blr and br. (Henry Willard)  [Orabug: 30297793]  
  - BACKPORT: VARIANT 2: arm64: Add initial retpoline support (Henry Willard)  [Orabug: 30297793]


author: Jack Vogel <jack.vogel@oracle.com> [5.4.2-1950.2.el7uek]
changelog:
  - x86/speculation: Remove static jump from inside ALTERNATIVE block (Patrick Colp)  [Orabug: 30324611]


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-12
changelog:
  - kdump.sysconfig.x86_64: remove kaslr in kdump kernel cmdline
  - Revert commit b590153 kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-14
changelog:
  - kdump.conf.5: clarify the fence_kdump_nodes option
  - kdumpctl: for fence_kdump, the ipaddr of this node should be excluded from list


author: Pingfan Liu <piliu@redhat.com> - 2.0.14-15
changelog:
  - Revert "pc64/ppc64le: drop cpu online rule in 40-redhat.rules in kdump initramfs"
  - udev rules: mask cpu hotplug rules


author: Edward Leung <edward.leung@oracle.com> - 2.0.14-17.2.0.1
changelog:
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
  (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
  (Sriharsha Yadagudde) [Orabug: 18905671]


author: Pingfan Liu <piliu@redhat.com> 2.0.15-5
changelog:
  - Revert "Update kdump anaconda addon"
  - Revert "Update kdump anaconda addon: fix the md5sum in source file"


author: Pingfan Liu <piliu@redhat.com> 2.0.15-7
changelog:
  - mkdumprd: apply dracut "--hostonly-cmdline" and "--no-hostonly-default-device"
  - Change dump_to_rootfs to use "--mount" instead of "root=X"
  - kdumpctl: move is_fadump_capable() to kdump-lib.sh
  - module-setup: fix 99kdumpbase network dependency
  - mkdumprd: change for_each_block_target() to use get_kdump_targets()
  - kdump-lib.sh: introduce get_kdump_targets()
  - kdump-lib.sh: fix improper get_block_dump_target()
  - kdumpctl: remove "root=X" for kdump boot
  - kdumpctl: fix a bug in remove_cmdline_param()


author: Pingfan Liu <piliu@redhat.com> 2.0.15-9
changelog:
  - makedumpfile: Fix 'kernel_version' variable being uninitialized & introduce minor reorganization
  - makedumpfile: Fix segmentation fault when using --split on a vmcore
  - dracut-module-setup.sh: check whether to include multipath-hostonly or not


author: Pingfan Liu <piliu@redhat.com> 2.0.15-10
changelog:
  - kexec-tools.spec: require dracut >= 033-522 to make 99kdump module installed correctly
  - kdump.sysconfig.ppc64(le): remove "root=" param from ppc64(le) 2nd kernel's command line
  - Revert "kdumpctl: sanity check of nr_cpus for x86_64 in case running out of vectors"


author: Pingfan Liu <piliu@redhat.com> 2.0.15-11
changelog:
  - dracut-module-setup.sh: temporary install /bin/grep to work around dracut's bug
  - kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline
  - kdumpctl: skip selinux-relabel for dracut_args --mount dump target


author: Pingfan Liu <piliu@redhat.com> 2.0.15-13
changelog:
  * Thu Feb 1 2018 Pingfan Liu <piliu@redhat.com> 2.0.15-12
  - makedumpfile/sadump: Fix a problem of PTI enabled kernel
  - makedumpfile: Fix physical-to-virtual conversion in 'exclude_segment()'


author: Pingfan Liu <piliu@redhat.com> 2.0.15-14
changelog:
  - kdumpctl: Remove 'netroot' and 'iscsi initiator' entries from kdump cmdline
  - doc: remove btrfs from supported filesystems list
  - Update kdump anaconda addon
  - makedumpfile/arm64: Add '--mem-usage' support
  - Fix warning about persistent device name not found.
  - kdumpctl: Check the modification time of core_collector
  - kdump.sysconfig.x86_64: Remove 'notsc' from KDUMP_COMMANDLINE_REMOVE
  - makedumpfile: fix for hugepages filtering


author: Pingfan Liu <piliu@redhat.com> 2.0.15-15
changelog:
  - dracut-module-setup.sh: pass ip=either6 param for ipv6
  - dracut-module-setup.sh: install /etc/hosts when using fence_kdump
  - update kdump-anaconda-addon-003-29-g4c517c5.tar.gz


author: Pingfan Liu <piliu@redhat.com> 2.0.15-18
changelog:
  kdumpctl: Rebuild initramfs if loaded kernel modules changed
  dracut-module-setup.sh: don't include multipath-hostonly
  Add document to declare FCoE support (V2)
  Revert "Add document to declare FCoE support"
  Add document to declare FCoE support
  makedumpfile: fix makedumpfile Not tainted in 2nd kernel


author: Pingfan Liu <piliu@redhat.com> 2.0.15-20
changelog:
  - makedumpfile: when refiltering, initialize refiltered bitmap2 from the kdump file's bitmap2
  - dracut-module-setup: Fix DRM module inclusion test for hyper-v
  - kdumpctl: remove some cmdline inheritage from 1st kernel
  - kdump-lib.sh:get_loaded_kernel_modules() Fix missing newline
  - kdumpctl: Rebuild initramfs if loaded kernel modules changed (V2)
  - Revert "kdumpctl: Rebuild initramfs if loaded kernel modules changed"
  - dracut-module-setup: Fix test for inclusion of DRM modules


author: EL Errata <el-errata_ww@oracle.com> - 2.0.15-21.0.1
changelog:
  - don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
  (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
  (Sriharsha Yadagudde) [Orabug: 18905671]


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 2.0.15-21.0.3.el7_6.3
changelog:
  - change makedumpfile fixed size buffer for VMCOREINFO (isaac.chen@oracle.com) [Orabug: 29612733]
  - rebase kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch (brian.maly@oracle.com) [Orabug: 28872281]
  - don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
  (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
  (Sriharsha Yadagudde) [Orabug: 18905671]


author: EL Errata <el-errata_ww@oracle.com> - 2.0.15-21.0.4.el7_6.3
changelog:
  - makedumpfile: arm64: Fix page table walk of 1GB section [Orabug: 27995626]
  - arm64: skip purgatory integrity checks to speed up reboot [Orabug: 28043892]


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-32
changelog:
  - makedumpfile: exclude pages that are logically offline
  - makedumpfile: x86_64: Add support for AMD Secure Memory Encryption


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-33
changelog:
  - makedumpfile: x86_64: Add support for AMD Secure Memory Encryption
    [Fix the Fix the patch to make sure makedumpfile-1.6.2/ path is used]


author: Livy Ge <livy.ge@oracle.com> 2.0.15-33.0.1
changelog:
  - change makedumpfile fixed size buffer for VMCOREINFO (isaac.chen@oracle.com) [Orabug: 29612733]
  - rebase kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch (brian.maly@oracle.com) [Orabug: 28872281]
  - don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
    (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-43
changelog:
  - module-setup: re-fix 99kdumpbase network dependency
  - kdumpctl: bail out immediately if host key verification failed


author: Bhupesh Sharma <bhsharma@redhat.com> 2.0.15-48
changelog:
  - dracut-module-setup.sh: ensure cluster info is ready before query.
  - dracut-module-setup.sh: improve get_alias()


author: Alex Burmashev <alexander.burmashev@oracle.com> 2.0.15-51.0.1
changelog:
  - Check MokSBStateRT variable state to identify SecureBoot mode [Orabug: 31903240]
  - Add delay to avoid upstream race condition [Orabug: 31121959]
  - kdump: append no_timer_check to kdump kernel cmdline on xen guests [Orabug: 30928441]
  - kdump: append iommu=off to kdump kernel cmdline [Orabug: 30832988]
  - rebase on top makedumpfile 1.6.6 [Orabug: 30352094]
  - makedumpfile: bump LATEST_VERSION to 5.4.9 [Orabug: 30521746]
  - makedumpfile: backport needed upstream aarch64 patches [Orabug: 30352094]
  - trigger initramfs cleanup for kernel-uek and kernel-uek-debug [Orabug: 30192631]
  - change makedumpfile fixed size buffer for VMCOREINFO (isaac.chen@oracle.com) [Orabug: 29612733]
  - rebase kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch (brian.maly@oracle.com) [Orabug: 28872281]
  - don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
    (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: Tianyue Lan <tianyue.lan@oracle.com> 2.0.15-51.0.2
changelog:
  - makedumpfile: arm64: Fix page table walk of 1GB section [Orabug: 27995626]
  - arm64: skip purgatory integrity checks to speed up reboot [Orabug: 28043892]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface (Sriharsha Yadagudde) [Orabug: 18905671]
  - droped orabug30928441.kdump.no_timer_check.patch


author: EL Errata <el-errata_ww@oracle.com> - 2.0.15-51.0.3
changelog:
  - Mount sysroot inside kdump initramfs in specific FIPS cases [Orabug: 32179720]
  - Check MokSBStateRT variable state to identify SecureBoot mode [Orabug: 31903240]
  - Add delay to avoid upstream race condition [Orabug: 31121959]
  - kdump: append no_timer_check to kdump kernel cmdline on xen guests [Orabug: 30928441]
  - kdump: append iommu=off to kdump kernel cmdline [Orabug: 30832988]
  - rebase on top makedumpfile 1.6.6 [Orabug: 30352094]
  - makedumpfile: bump LATEST_VERSION to 5.4.9 [Orabug: 30521746]
  - makedumpfile: backport needed upstream aarch64 patches [Orabug: 30352094]
  - trigger initramfs cleanup for kernel-uek and kernel-uek-debug [Orabug: 30192631]
  - change makedumpfile fixed size buffer for VMCOREINFO (isaac.chen@oracle.com) [Orabug: 29612733]
  - rebase kexec-tools-2.0.8-dracut-module-setup-ibft-avoid-dup-config.patch (brian.maly@oracle.com) [Orabug: 28872281]
  - don't patch files in SOURCES directory. That breaks building from the srpm (dave.kleikamp@oracle.com)
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
    (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: Mridula Shastry <mridula.c.shastry@oracle.com> - 2.0.15-51.0.5.3
changelog:
  - kdumpctl: Add rd.md.uuid to kdump commandline if /boot is
   on a dedicated md device when fips is enabled (Todd Vierling) [Orabug: 34672180]


author: Brian Maly <brian.maly@oracle.com> 2.0.20-1.0.2
changelog:
  - fix kdump start with multiple crashkernel reservations [Orabug: 32133785]
  - fix OOM kill of makedumpfile when using smaller crashkernel reservations [Orabug: 32133850]
  - rebase to kexec-tools-2.0.20 [Orabug: 31933990]


author: WANG Chao <chaowang@redhat.com> - 2.0.4-25
changelog:
  - kdumpctl: Pass disable_cpu_apicid to kexec of capture kernel
  - Relax restriction of dumping on encrypted target
  - ssh dump: create random-seed manually


author: WANG Chao <chaowang@redhat.com> - 2.0.4-27
changelog:
  - mkdumprd: call dracut with --hostonly-cmdline (dracut >= 033-145)
  - warning on secure boot enabled platform


author: WANG Chao <chaowang@redhat.com> - 2.0.4-28
changelog:
  - Document supported/unsupported/unknown list of dump targets
  - Warn user about save vmcore path mounted by another disk


author: Guangyu Sun <guangyu.sun@oracle.com> - 2.0.4-32.0.1
changelog:
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: Vaughan Cao <vaughan.cao@oracle.com> - 2.0.4-32.0.2
changelog:
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
    (Sriharsha Yadagudde) [Orabug: 19134999]


author: Jingdong Lu <jingdong.lu@oracle.com> - 2.0.4-32.0.1.el7_0.1
changelog:
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface (Sriharsha Yadagudde) [Orabug: 18905671]


author: Andrey Yutman <andrey.yutman@oracle.com> - 2.0.4-32.0.2.el7_0.3
changelog:
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
    (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: WANG Chao <chaowang@redhat.com> - 2.0.7-14
changelog:
  - fix core_collector issue for ssh/raw dump
  - remove sysctl.conf for kdump kernel
  - exclude aarch64 build
  - fix path directive issue
  - remove panic_on_warn kernel parameter


author: WANG Chao <chaowang@redhat.com> - 2.0.7-15
changelog:
  - mount fail if its mount poing doesn't exist in /sysroot
  - rebuild initrd dependency during kdump restart
  - fix a dump path issue


author: Baoquan He <bhe@redhat.com> - 2.0.7-19.2
changelog:
  - dracut-module-setup: Enhance kdump to support the bind mounted feature in Atomic
  - Fix the warning if the target path is bind mount in Atomic
  - Get the mount point correctly, if the device has several mount point
  - kdump-lib: Add new function to judge the system is Atomic or not
  - kdump-lib: Add the new function to enhance bind mounted judgement
  - Remove duplicate slash in save path
  - dracut-module-setup.sh: change the insecure use of /tmp/*$$* filenames


author: Kevin Lyons <kevin.x.lyons@oracle.com> - 2.0.7-19.0.1.el7_1.2
changelog:
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
   (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: Baoquan He <bhe@redhat.com> - 2.0.7-33
changelog:
  mkdumprd: Remove ifcfg from dracut's modules
  arm64: move -fno-exceptions from purgatory code to spec file
  module-setup: Choose the first matched gateway in kdump_static_ip


author: Baoquan He <bhe@redhat.com> - 2.0.7-34
changelog:
  arm64: Overwrite CFLAGS and remove -fno-exceptions from kexec purgatory code
  Fix comment to exclude keyword 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro }"; export LDFLAGS; 
    [ "1" == 1 ] && [ "x86_64" == ppc64le ] && /usr/lib/rpm/redhat/libtool-handle-ppc64le.sh ; 
    for i in $(find . -name config.guess -o -name config.sub) ; do 
        [ -f /usr/lib/rpm/redhat/$(basename $i) ] && /usr/bin/rm -f $i && /usr/bin/cp -fv /usr/lib/rpm/redhat/$(basename $i) $i ; 
    done ; 
    ./configure --build=x86_64-redhat-linux-gnu --host=x86_64-redhat-linux-gnu \
  	--program-prefix= \
  	--disable-dependency-tracking \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib64 \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/var/lib \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info
  Revert "arm64: move -fno-exceptions from purgatory code to spec file"


author: EL Errata <el-errata_ww@oracle.com> - 2.0.7-38.0.1
changelog:
  - Fix makedumpfile stall on systems with 6TB memory [Orabug: 20364744] (brian.maly@oracle.com)
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
   (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: Baoquan He <bhe@redhat.com> - 2.0.7-42
changelog:
  - module-setup: Use get_ifcfg_filename() to get the proper ifcfg file
  - kdump-lib: Add get_ifcfg_filename() to get the proper ifcfg file
  - doc: add nfs to supported filesystems list


author: Baoquan He <bhe@redhat.com> - 2.0.7-43
changelog:
  - kexec/sadump: Back port two patches to fix regression bug of makedumpfile 1.6.0
  - Makedumpfile: Rebase to 1.6.0


author: Baoquan He <bhe@redhat.com> - 2.0.7-44
changelog:
  - Update kdump anaconda addon
  - kdumpctl: Do not rebuild initramfs when $KDUMP_BOOTDIR is read only
  - get_persistent_dev(): fix name contention with dracut's similar function


author: Baoquan He <bhe@redhat.com> - 2.0.7-45
changelog:
  - kdump.conf man page fixes
  - kdump.conf comments fixes
  - Add persistent memory support
  - module-setup: Don't handle iBFT in kdump


author: Baoquan He <bhe@redhat.com> - 2.0.7-47
changelog:
  - spec: Update to add dependency on dracut version >= 033-449
  - watchdog: do not add watchdog module in rd.driver.pre now
  - howto: Notes on watchdog module handling
  - kdumpctl: force rebuild in case of watchdog state change
  - mkdumprd: Add dracut watchdog module as default option


author: Baoquan He <bhe@redhat.com> - 2.0.7-50
changelog:
  - spec: Update to add dependency on dracut-network version >= 033-449
  - mkdumprd: Do not add "nfs" dracut module explicitly
  - kexec-kdump-howto: Add doc about the special mount information via "dracut_args"
  - Support special mount information via "dracut_args"


author: EL Errata <el-errata_ww@oracle.com> - 2.0.7-50.0.1
changelog:
  - dracut-module-setup: avoid duplicate config for ibft [Orabug: 22780125]
  - kdumpctl: exclude default_hugepagesz setting from kdump kernel cmdline
   (Sriharsha Yadagudde) [Orabug: 19134999]
  - kdumpctl: verify if kernel support securelevel interface
    (Sriharsha Yadagudde) [Orabug: 18905671]


author: David Howells <dhowells@redhat.com>
changelog:
  - Adjust the manual page for 'keyctl unlink' to show keyring is optional.
  - Add --version support for the keyutils version and build date.


author: David Howells <dhowells@redhat.com> - 1.5.4-1
changelog:
  - Fix the keyctl padd command and similar to handle binary input.
  - Make keyctl show able to take a keyring to dump.
  - Make keyctl show able to take a flag to request hex key IDs.
  - Make keyctl show print the real ID of the root keyring.


author: David Howells <dhowells@redhat.com> - 1.5.6-1
changelog:
  - Fix the request-key.conf.5 manpage.
  - Fix the max depth of key tree dump (keyctl show) [BZ 1002761].
  - The input buffer size for keyctl padd and pinstantiate should be larger [BZ 1002761].
  - Add keyctl_invalidate.3 manpage [BZ 1002761].


author: David Howells <dhowells@redhat.com> - 1.5.7-1
changelog:
  - Provide a utility function to find a key by type and name.
  - Allow keyctl commands to take a type+name arg instead of a key-id arg.
  - Add per-UID get_persistent keyring function [BZ 1014739].


author: Daniel Vrátil <dvratil@redhat.com> - 4.10.5-2
changelog:
  - Resolves: #997594, misbehaving checkbox "Allow encryption with untrusted keys"
  - Resolves: #997599, Key Manager does not refresh after change
  - Resolves: #999850, shows error message despite the change was successful


author: Rex Dieter <rdieter@fedoraproject.org> - 4.10.1-2
changelog:
  - pull a few upstream patches, in particular...
  - kmix crahes moving streams between sinks (#922849)


author: Tony Camuso <tcamuso@redhat.com> - 20-9
changelog:
  - Must be bumped to 20-9 due to changes and version bumps in the
    7.2-z stream.
    Resolves: rhbz#1320204


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-10
changelog:
  - weak-modules: deprecate --delete-modules switch.
  - weak-modules: implement some pathes configuration from cmdline.
  - weak-modules: redesign to reuse depmod -aeE functionality
    (with some preparation changes).
    This is an updated version of the script which doesn't support
    multiple installation of the same out-of-tree module (stored in the
    'extra' subdirectory). But it more correctly checks dependencies
    between the modules.
    Resolves: rhbz#1367942


author: Tony Camuso <tcamuso@redhat.com> - 20-10
changelog:
  - Rename patches so they are not specific to the build. This was
    causing problems with z-stream builds.
    Resolves: rhbz#1416498


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-12
changelog:
  - weak-modules: fix coverity introduced by latest changes
  - weak-modules: fix "permission denied" on some upgrades.
    Resolves: rhbz#1416566


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-15.el7_4.2
changelog:
  - libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
  - weak-modules: process only weak-updates related depmod output.
    Resolves: rhbz#1482385


author: John Mcwalters <john.mcwalters@oracle.com> - 20-15.0.1.el7_4.4
changelog:
  - Rebuilt with updated version
  - weak-modules: Cleanup weak-updates symlinks for external compiled in modules 
    created during dry-run option [Orabug: 26811747]
  - weak-modules: add patch for [Orabug: 26672773]


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-15.el7_4.3
changelog:
  - weak-modules: implement dry run by symlink restoration.
  - weak-modules: fix dry-run for non-lib-modules installation.
    Resolves: rhbz#1489696.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-15.el7_4.5
changelog:
  - weak-modules: use function to generate weak_updates_dir
  - weak-modules: implement dry-run on the tempdir
    Resolves: rhbz#1511943.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-17
changelog:
  - libkmod-elf: resolve CRC if module is built with MODULE_REL_CRCS.
  - weak-modules: process only weak-updates related depmod output.
    Resolves: rhbz#1468305
  - weak-modules: implement dry run by symlink restoration.
    Resolves: rhbz#1477073


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-18
changelog:
  - depmod: external directories support.
    Resolves: rhbz#1361857
  - BuildRequires automake autoconf libtool.


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-20
changelog:
  - weak-modules: use function to generate weak_updates_dir
  - weak-modules: implement dry-run on the tempdir
    Resolves: rhbz#1510058


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-23
changelog:
  - weak-modules: fix initial state creation for dry-run
  - weak-modules: check compatibility in a temporary directory
    Resolves: rhbz#1619889.


author: Natalya Naumova <natalya.naumova@oracle.com> - 20-23.0.1
changelog:
  - weak-modules: add patch for [Orabug: 26672773]
  - add PKCS#7 signature support [Orabug: 27645962]
  - Reviewed-by: Alexey Petrenko <alexey.petrenko@oracle.com>


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-26
changelog:
  - weak-modules: handle independent modules in one run
  - weak-modules: use asterisk for kernel version in sandbox
    Resolves: rhbz#1695547


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 20-28
changelog:
  - weak-modules: update_modules_for_krel: always finish sandbox
  - weak-modules: groupping: use dependencies of extra/ provider
    Resolves: rhbz#1774925


author: Jacob Wen <jian.w.wen@oracle.com> - 20-28.0.3
changelog:
  - Use ASN1_STRING_data for openssl-1.0.2k [Orabug: 31160124]
  - build: fix make distcheck [Orabug: 31160124]
  - libkmod-signature: implement pkcs7 parsing with openssl [Orabug: 31160124]
  - signature: do not report wrong data for pkc#7 signature [Orabug: 31160124]
  - libkmod: modinfo: implement signature output [Orabug: 31160124]
  - libkmod: modinfo: implement line splitting in hex_to_str [Orabug: 31160124]
  - libkmod: modinfo: use own function for sig_key hex output [Orabug: 31160124]
  - libkmod: modinfo: fix sig_id output [Orabug: 31160124]


author: David Shea <dshea@redhat.com> - 20-5
changelog:
  - Check for changes in non-module files that affect that initramfs
    Resolves: rhbz#1108166
  - Use dracut to skip early cpio archives in the initramfs
    Resolves: rhbz#1210449


author: David Shea <dshea@redhat.com> - 20-6
changelog:
  - Accept '.' as part of a symbol exported by the kernel
    Resolves: rhbz#1283486
  - Check the addon modules of the new kernel for exported symbols
    Resolves: rhbz#1296465


author: - Joseph Chapman <jochapma@redhat.com> - 6.1.0.106-11
changelog:
  - Detect journal overflow after 160E of writes
  - Clean up UDS threads when removing last VDO
  - Resolves: rhbz#1512968
  - Resolves: rhbz#1523240


author: - Joseph Chapman <jochapma@redhat.com> - 6.1.0.114-11
changelog:
  - /sys/uds permissions now resticted to superuser only
  - Remove /sys/uds files that should not be used in production
  - Removing kvdo module reports version
  - VDO automatically chooses the proper write policy by default
  - Fixed a Coverity-detected error path leak
  - Resolves: rhbz#1525305
  - Resolves: rhbz#1527734
  - Resolves: rhbz#1527737
  - Resolves: rhbz#1527924
  - Resolves: rhbz#1528399


author: - Joseph Chapman <jochapma@redhat.com> - 6.1.0.124-11
changelog:
  - Fixed provisional referencing for dedupe.
  - Only log a bio submission from a VDO to itself.
  - vdoformat cleans up metadata properly after fail.
  - Resolves: rhbz#1511587
  - Resolves: rhbz#1520972
  - Resolves: rhbz#1532481


author: - Joseph Chapman <jochapma@redhat.com> - 6.1.0.130-12
changelog:
  - Fix General Protection Fault unlocking UDS callback mutex
  - Removing kmod-kvdo package unloads kernel module
  - Fix URL to point to GitHub tree
  - Resolves: rhbz#1510176
  - Resolves: rhbz#1533260
  - Resolves: rhbz#1539061


author: - Joseph Chapman <jochapma@redhat.com> - 6.1.0.146-13
changelog:
  - Module target is now "vdo" instead of "dedupe"
  - Fixed a bug where crash recovery led to failed kernel page request
  - Improved modification log messages
  - Improved package description and summary fields
  - Resolves: rhbz#1535127
  - Resolves: rhbz#1535597
  - Resolves: rhbz#1540696
  - Resolves: rhbz#1541409


author: - Andy Walsh <awalsh@redhat.com> - 6.1.0.168-16
changelog:
  - Updated source to use GitHub
  - Fixed module version checking for upgrades.
  - Removed debug kernel requirement from spec file.
  - Fixed a deadlock resulting from sleeping while holding a spinlock while
    getting statistics.
  - Resolves: rhbz#1567742
  - Fixed bugs arising from attempts to access sysfs nodes during startup and
    shutdown.
  - Resolves: rhbz#1567744
  - Removed the prepare_ioctl() function to avoid signature changes since this
    function currently does nothing.
  - Resolves: rhbz#1572494


author: - Andy Walsh <awalsh@redhat.com> - 6.1.0.181-17
changelog:
  - Fixed a bug which would cause kernel panics when a VDO device is stacked on a
    RAID50 device.
  - Resolves: rhbz#1599668
  - Fixed a bug which could cause data loss when discarding unused portions of a
    VDO's logical space.
  - Resolves: rhbz#1600058
  - Modified grow physical to fail in the prepare step if the size isn't
    changing, avoiding a suspend-and-resume cycle.
  - Resolves: rhbz#1600662
  - Fixed a bug which would cause attempts to grow the physical size of a VDO
    device to fail if the device below the VDO was resized while the VDO was
    offline.
  - Resolves: rhbz#1591180


author: - Andy Walsh <awalsh@redhat.com> - 6.1.1.84-1
changelog:
  - Deleted unused UDS features.
  - Improved performance of sub 4K writes.
  - Simplified and improved performance of writes with FUA.
  - Improved the accuracy of dedupe statistics.
  - Made the MurmurHash3 implementation architecture independent.
  - Fixed compilation errors on newer versions of GCC.
  - Eliminated spurious allocation of a UDS sparse cache for dense indexes.
  - Fixed a deadlock resulting from sleeping while holding a spinlock while
    getting statistics.
  - Resvolves: rhbz#1562228
  - Fixed bugs related to the timing of the creation and destruction of sysfs
    nodes relative to the creation and destruction of VDO data structures.
  - Resolves: rhbz#1559692
  - Fixed a bug which made deduplication impossible to disable.
  - Removed obsolete code.
  - Improved deduplication of concurrent requests containing the same data.
  - Reduced unnecessary logging.
  - Resolves: rhbz#1511127
  - Removed the prepare_ioctl() function to avoid signature changes since
    this function currently does nothing.
  - Resolves: rhbz#1568129
  - Fixed a bug which made using a sparse index impossible to create.
  - Resolves: rhbz#1570156


author: - Andy Walsh <awalsh@redhat.com> 6.1.1.99-1
changelog:
  - Added /sys/kvdo/version which contains the currently loaded version of
    the kvdo module.
  - Resolves: rhbz#1533950
  - Added logging of normal operation when a VDO device starts normally.
  - Resolves: rhbz#1520988
  - Fixed a race in the UDS module which could cause the index to go offline.
  - Resolves: rhbz#1520988
  - Fixed a bug which would cause attempts to grow the physical size of a VDO
    device to fail if the device below the VDO was resized while the VDO was
    offline.
  - Resolves: rhbz#1582647
  - Fixed thread safety issues in the UDS page cache.
  - Resolves: rhbz#1579492
  - Modified the vdo script to not allow creation of a VDO device on top of an
    already running VDO device.
  - Resolves: rhbz#1572640
  - Fixed a bug which could cause data loss when discarding unused portions of a
    VDO's logical space.
  - Resolves: rhbz#1589249
  - Modified grow physical to fail in the prepare step if the size isn't
    changing, avoiding a suspend-and-resume cycle.
  - Resolves: rhbz#1576539


author: - Andy Walsh <awalsh@redhat.com> 6.1.1.111-1
changelog:
  - Added support for issuing fullness warnings via dmeventd
  - rhbz#1519307
  - Fixed a bug which would cause kernel panics when a VDO device is stacked on a
    RAID50 device.
  - Resolves: rhbz#1593444
  - Improved logging when growing the physical size of a VDO volume.
  - Resolves: rhbz#1597890
  - Resolves: rhbz#1597886
  - Removed misleading log messages when rebuilding the UDS index.
  - Resolves: rhbz#1599867


author: - Andy Walsh <awalsh@redhat.com> 6.1.1.120-2
changelog:
  - No longer attempt to unload modules in %preun
  - Resolves: rhbz#1553420
  - Improved memory allocation by not using the incorrect __GFP_NORETRY flag
    and by using the memalloc_noio_save mechanism.
  - Resolves: rhbz#1571292
  - Fixed a potential deadlock in the UDS index by using the kernel supplied
    struct callback instead of our own implementation of synchronous
    callbacks.
  - Resolves: rhbz#1602151
  - Fixed a potential stack overflow when reaping the recovery journal.
  - Resolves: rhbz#1608070
  - No longer attempt to unload modules in %preun
  - Resolves: rhbz#1553420
  - Improved safety around memory allocation permissions
  - Resolves: rhbz#1595923
  - Improved statistics accounting to allow for concurrent dedupe.
  - Resolves: rhbz#1540722


author: - Andy Walsh <awalsh@redhat.com> 6.1.1.125-4
changelog:
  - Attempt to unload modules and print a warning if unable to.
  - Resolves: rhbz#1553420
  - Fixed a hang when recovering a VDO volume with a physical size larger than
    16TB.
  - Resolves: rhbz#1628316


author: Jingdong Lu <jingdong.lu@oracle.com> 6.1.1.125-5.0.1
changelog:
  - depmod error for symbolic link [OraBug: 28718247] (Hui Han)
    Reviewed-by: Laurence Rochfort <laurence.rochfort@oracle.com>
  - add RHCK signature


author: - Andy Walsh <awalsh@redhat.com> 6.1.2.38-5
changelog:
  - Fixed more error path memory leaks.
    - Resolves: rhbz#1609426
  - Rebased to version 6.2.0 of the UDS module
    - Resolves: rhbz#1637762
  - Improved counting of dedupe timeouts by including in the count queries
    which are not made due to their being a lack of resources from previous
    queries taking too long.
    - Resolves: rhbz#1639898
  - Fixed a NULL pointer dereference if dmeventd registration fails.
    - Resolves: rhbz#1640794
  - Fixed a bug in the statistics tracking partial I/Os.
    - Resolves: rhbz#1594406
  - Allowed VDO backing devices to be specified by major:minor device number.
    - Resolves: rhbz#1637762
  - Suppressed egregious read-only error logging.
    - Resolves: rhbz#1687005


author: - Andy Walsh <awalsh@redhat.com> 6.1.2.41-5
changelog:
  - Reduced and rate limited error logging in order to avoid kernel soft-lockups.
    - Resolves: rhbz#1687005


author: - Andy Walsh <awalsh@redhat.com> 6.1.3.4-5
changelog:
  - Reduced and rate limited more error logging in order to avoid kernel
    soft-lockups.
    - Resolves: rhbz#1706196
  - Fixed a bug in the handling of re-used bios. This bug resulted in a
    kernel panic when rebooting a system after a crash with a VDO device on
    USB attached storage.
    - Resolves: rhbz#1676643


author: - Andy Walsh <awalsh@redhat.com> 6.1.3.7-5
changelog:
  - Fixed a rare bug which would log an assertion failure when shutting down
    a VDO device.
    - Resolves: rhbz#1749000


author: - Andy Walsh <awalsh@redhat.com> 6.1.3.23-5
changelog:
  - Fixed a bug where crash recovery could use the wrong threads for certain
    operations potentially resulting in memory corruption.
    - Resolves: rhbz#1821275


author: Eugene Syromiatnikov <esyr@redhat.com> 2.0.2.1_kern_dup7.5-1
changelog:
  - 394e4cd9074e05af7cd4843b33b4b1bef1e122d0
  - Resolves: #bz1607750
  - atlantic module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 1.10.0_dup7.7-1
changelog:
  - c45db7d2f34d6fad924c20443f73147dca7f6e29
  - bnxt_en kernel module for Driver Update Program
  - Resolves: #bz1755331


author: Eugene Syromiatnikov <esyr@redhat.com> 2.0.2K_dup7.6-2
changelog:
  - baf6ab56eb2d596f7d4c6c1e1ccd8a73db6e1c94
  - Resolves: #bz1659505
  - ena module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 1.6.27_k_dup7.3-1
changelog:
  - Resolves: #bz1448412
  - af7d3667969d1dedc990b0aa47458756796961c6
  - i40e module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 2.8.10_k_dup7.7-1
changelog:
  - c45db7d2f34d6fad924c20443f73147dca7f6e29
  - i40e kernel module for Driver Update Program
  - Resolves: #bz1784768


author: Eugene Syromiatnikov <esyr@redhat.com> 1.6.27_k_dup7.3-1
changelog:
  - Resolves: #bz1448413
  - 3545087798c48e481b8ae8aebcca6bfb199b470b
  - i40evf module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 4.4.0_k_rh7.4_z-1
changelog:
  - 6591372b59cec0e59cd144bed3e51ba8ceb2dd88
  - ixgbe module for Driver Update Program
  - Resolves: #bz1439814


author: Eugene Syromiatnikov <esyr@redhat.com> 4.4.0_k_rh7.4_z-2
changelog:
  - Remove testing desclaimer from the package description
  - 6591372b59cec0e59cd144bed3e51ba8ceb2dd88
  - ixgbe module for Driver Update Program
  - Resolves: #bz1439814


author: Eugene Syromiatnikov <esyr@redhat.com> 3.2.2_k_rh7.4_z-1
changelog:
  - Resolves: #bz1441298
  - 5e0df6596e78194c6dc5dd0a038302b7fbdfb4c3
  - ixgbevf module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 12.0.0.5_dup7.6-1
changelog:
  - baf6ab56eb2d596f7d4c6c1e1ccd8a73db6e1c94
  - Resolves: #bz1676589
  - lpfc kernel module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 07.700.00.00
changelog:
  - 5c36dd7d22747abb333b0c2541bac9544c358e3b
  - Resolves: #bz1427425
  - megaraid_sas module for Driver Update Program.


author: Eugene Syromiatnikov <esyr@redhat.com> 07.702.06.00_rh2_dup7.5-1
changelog:
  - 1514ac33c3e6a00c504e6e5eb0289f3c23bb8aa4
  - Resolves: #bz1578455
  - megaraid_sas module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 4.11.0_dup7.3-1
changelog:
  - Resolves: #bz1462099
  - 8d4022de88b02a390621a2bf9614b25b094951f8
  - mgag200 module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 4.11.0_dup7.3-5
changelog:
  - 8d4022de88b02a390621a2bf9614b25b094951f8
  - Provide fix for the #bz1463535 as a separate patch in order to preserve
    the integrity of sources.


author: Eugene Syromiatnikov <esyr@redhat.com> 14.101.00.00-1
changelog:
  - a2d3cbe3e7f414a5d0c8a9d931ddaf4dbc40c12d
  - Resolves: #rhbz1421748
  - mpt3sas module for Driver Update Program.


author: Eugene Syromiatnikov <esyr@redhat.com> 26.100.01.00_dup7.6-1
changelog:
  - db1eefc8c25d0a3feaed310963bb3c3d04d81825
  - Resolves: #bz1660390
  - mpt3sas module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 3.10.0_957-1
changelog:
  - baf6ab56eb2d596f7d4c6c1e1ccd8a73db6e1c94
  - Resolves: #bz1672909
  - nfit kernel module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 8.10.10.21_dup7.3-1
changelog:
  - d44f90c087a53365ef671c1a6414d07fd8bf4af0
  - Resolves: #bz1448409, #bz1448411
  - qed module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 8.10.10.21_dup7.4-1
changelog:
  - 0413ea41707374d85a707b850cd0b318d3d5d132
  - Resolves: #bz1525991, #bz1525992
  - qed module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 8.33.0.20_dup7.6-1
changelog:
  - baf6ab56eb2d596f7d4c6c1e1ccd8a73db6e1c94
  - Resolves: #1668206
  - qed module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 8.10.10.21_dup7.3-1
changelog:
  - Resolves: #bz1448411
  - 4fba2334c2fb174d98a4fabafd078f7b283b5622
  - qede module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 8.10.10.21_dup7.4-1
changelog:
  - 0413ea41707374d85a707b850cd0b318d3d5d132
  - Resolves: #bz1525991, #bz1525992
  - qede module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 8.33.0.20_dup7.6-1
changelog:
  - baf6ab56eb2d596f7d4c6c1e1ccd8a73db6e1c94
  - Resolves: #bz1668206
  - qede module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 8.10.7.0_dup7.3-1
changelog:
  - Resolves: #bz1448408
  - e22c53a31fd2776bd02b4be1d9f93db5b5f8d678
  - qedf module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 8.10.7.0_dup7.4-1
changelog:
  - 0413ea41707374d85a707b850cd0b318d3d5d132
  - Resolves: #bz1525991, #bz1525992
  - qedf module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 8.33.0.20_dup7.6-1
changelog:
  - baf6ab56eb2d596f7d4c6c1e1ccd8a73db6e1c94
  - Resolves: #bz1668206
  - qedf module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 8.10.4.0_dup7.4-1
changelog:
  - 0413ea41707374d85a707b850cd0b318d3d5d132
  - Resolves: #bz1525991, #bz1525992
  - qedi module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 8.33.0.20_dup7.6-1
changelog:
  - baf6ab56eb2d596f7d4c6c1e1ccd8a73db6e1c94
  - Resolves: #bz1668206
  - qedi module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 3.10.0_957_dup7.6-3
changelog:
  - baf6ab56eb2d596f7d4c6c1e1ccd8a73db6e1c94
  - Resolves: #bz1668206
  - qedr module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 8.10.10.0_dup7.4-1
changelog:
  - 0413ea41707374d85a707b850cd0b318d3d5d132
  - Resolves: #bz1525991, #bz1525992
  - qedr module for Driver Update Program


author: Eugene Syromiatnikov <esyr@redhat.com> 10.01.00.20.07.8_k_dup7.7-1
changelog:
  - c45db7d2f34d6fad924c20443f73147dca7f6e29
  - qla2xxx kernel module for Driver Update Program
  - Resolves: #bz1784769


author: Radek Novacek <rnovacek@redhat.com> 0.9.0-3
changelog:
  - Enable direct calls
  - Fix method arguments that are both input and output
  - Don't install Find*.cmake files


author: Radek Novacek <rnovacek@redhat.com> 0.9.1-3
changelog:
  - Set format(printf) attribute to __KReturn2 function
  - Fix possible integer overflow
  - Resolves: rhbz#1000434, rhbz#1000430


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-40
changelog:
  - pull in fix from master to make reporting of errors encountered by
    the SPNEGO mechanism work better (RT#7045, part of #1043962)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-42
changelog:
  - add proposed patch to fix the GSSAPI library's checks for expired
    client creds in gss_init_sec_context() so that they work with keyring
    caches (RT#7820, #1030607)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-44
changelog:
  - pull in and backport multiple changes to allow replay caches to be added to
    a GSS credential store as "rcache"-type credentials (RT#7818/#7819/#7836,


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-46
changelog:
  - pull in patch from master to move the default directory which the KDC uses
    when computing the socket path for a local OTP daemon from the database
    directory (/var/kerberos/krb5kdc) to the newly-added run directory
    (/run/krb5kdc), in line with what we're expecting in 1.13 (RT#7859, more
    of #1040056 as #1063905)
  - add a tmpfiles.d configuration file to have /run/krb5kdc created at
    boot-time
  - own /var/run/krb5kdc


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-47
changelog:
  - spnego: pull in patch from master to restore preserving the OID of the
    mechanism the initiator requested when we have multiple OIDs for the same
    mechanism, so that we reply using the same mechanism OID and the initiator
    doesn't get confused (#1066002, RT#7858)


author: Nathaniel McCallum <npmccallum@redhat.com> - 1.11.3-48
changelog:
  - add Nathaniel's backported fix for to make password changes work properly
    when performed while obtaining creds over FAST (RT#7868, #1072579)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.11.3-49
changelog:
  - mark the pkinit module "nodelete" so that applications which cause it
    to be loaded and unloaded repeatedly don't suffer from memory loss when
    libcrypto is initialized, allocating memory in the process, and then
    unloaded along with the module (most of #1063732)
  - when copying creds from one ccache to another, if we single out one
    server for which creds shouldn't be copied, don't leak the memory
    that those creds use (a bit more of #1063732)
  - fix an uninitialized variable warning that could, rarely, cause a
    service-unavailable error to be reported when a server was merely
    unreachable (spotted while chasing #1063732)
  - don't leak the per-request context allocated by preauth modules (a
    bit more of #1063732)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.2-5
changelog:
  - backport fix for trying all compatible keys when not being strict about
    acceptor names while reading AP-REQs (RT#7883, #1078888)
  - define _GNU_SOURCE in files where we use EAI_NODATA, to make sure that
    it's declared (#1059730,#1084068,#1109102)


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.2-6
changelog:
  - backport patch to make the client skip checking the server's reply
    address when processing responses to password-change requests, which
    between NAT and upcoming HTTPS support, can cause us to erroneously
    report an error to the user when the server actually reported success
    (RT#7886)
  - backport support for accessing KDCs and kpasswd services via HTTPS
    proxies (marked by being specified as https URIs instead as hostnames
    or hostname-and-port), such as the one implemented in python-kdcproxy
    (RT#7929, #109919), and pick up a subsequent patch to build HTTPS
    as a plugin


author: Nalin Dahyabhai <nalin@redhat.com> - 1.12.2-8
changelog:
  - fix the problem where the %license file has been a dangling symlink
  - ksu: pull in fix from pull #206 to avoid breakage when the
    default_ccache_name doesn't include a cache type as a prefix
  - ksu: pull in a proposed fix for pull #207 to avoid breakage when the
    invoking user doesn't already have a ccache


author: Roland Mainz <rmainz@redhat.com> - 1.12.2-9
changelog:
  - Undo libkadmclnt SONAME change (from 8 to 9) which originally
    happened in the krb5 1.12 rebase (#1166012) but broke
    rubygem-rkerberos (sort of ruby language bindings for
    libkadmclnt&co.) dependicies, as side effect of
    rubygem-rkerberos using private interfaces in libkadmclnt.


author: Roland Mainz <rmainz@redhat.com> - 1.12.2-10
changelog:
  - In ksu, without the -e flag, also check .k5users (#1105489)
    When ksu was explicitly told to spawn a shell, a line in .k5users which
    listed "*" as the allowed command would cause the principal named on the
    line to be considered as a candidate for authentication.
    When ksu was not passed a command to run, which implicitly meant that
    the invoking user wanted to run the target user's login shell, knowledge
    that the principal was a valid candidate was ignored, which could cause
    a less optimal choice of the default target principal.
    This doesn't impact the authorization checks which we perform later.
    Patch by Nalin Dahyabhai <nalin@redhat.com>


author: Roland Mainz <rmainz@redhat.com> - 1.12.2-13
changelog:
  - fix for CVE-2014-5352 (#1179856) "gss_process_context_token()
    incorrectly frees context (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9421 (#1179857) "kadmind doubly frees partial
    deserialization results (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9422 (#1179861) "kadmind incorrectly
    validates server principal name (MITKRB5-SA-2015-001)"
  - fix for CVE-2014-9423 (#1179863) "libgssrpc server applications
    leak uninitialized bytes (MITKRB5-SA-2015-001)"


author: Roland Mainz <rmainz@redhat.com> - 1.12.2-14
changelog:
  - fix for kinit -C loops (#1184629, MIT/krb5 issue 243, "Do not
    loop on principal unknown errors").


author: Roland Mainz <rmainz@redhat.com> - 1.12.2-15
changelog:
  - Add a patch to fix RedHat bug #1256870 ("KDC sends multiple
    requests to ipa-otpd for the same authentication") which causes
    the KDC to send multiple retries to ipa-otpd for TCP transports
    while it should only be done for UDP.


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-1
changelog:
  - the rebase to krb5 1.13.1 in vers 1.13.1-0 also fixed:
    - Bug 1144498 ("Fix the race condition in the libkrb5 replay cache")
    - Bug 1163402 ("kdb5_ldap_util view_policy does not shows ticket flags on s390x and ppc64")
    - Bug 1185770 ("Missing upstream test in krb5-1.12.2: src/tests/gssapi/t_invalid.c")
    - Bug 1204211 ("CVE-2014-5355 krb5: unauthenticated denial of service in recvauth_common() and other")


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-2
changelog:
  - Add fix for RedHat Bug #1164304 ("Upstream unit tests loads
    the installed shared libraries instead the ones from the build")


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-3
changelog:
  - Add patch to fix Redhat Bug #1222903 ("[SELinux] AVC denials may appear
    when kadmind starts"). The issue was caused by an unneeded |htons()|
    which triggered SELinux AVC denials due to the "random" port usage.


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-4
changelog:
  - the rebase to krb5 1.13.2 in vers 1.13.2-0 also fixed:
    - Redhat Bug #1247761 ("RFE: Minor krb5 spec file cleanup and sync
      with recent Fedora 22/23 changes")
    - Redhat Bug #1247751 ("krb5-config returns wrong -specs path")
    - Redhat Bug #1247608 ('Add support for multi-hop preauth mechs
      via |KDC_ERR_MORE_PREAUTH_DATA_REQUIRED| for RFC 6113 ("A
      Generalized Framework for Kerberos Pre-Authentication")')
  - Removed "krb5-1.10-kprop-mktemp.patch" and
    "krb5-1.3.4-send-pr-tempfile.patch", both are no longer used since
    the rebase to krb5 1.13.1


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-5
changelog:
  - Add a patch to fix RedHat bug #1251586 ("KDC sends multiple
    requests to ipa-otpd for the same authentication") which causes
    the KDC to send multiple retries to ipa-otpd for TCP transports
    while it should only be done for UDP.


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-6
changelog:
  - Add a patch to fix RedHat bug #1252454 ('testsuite complains
    "Lifetime has increased by 32436 sec while 0 sec passed!",
    while rhel5-libkrb5 passes') so that krb5 resolves GSS creds
    if |time_rec| is requested.


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-7
changelog:
  - Obsolete multilib versions of server packages to fix RH
    bug #1251913 ("krb5 should obsolete the multilib versions
    of krb5-server and krb5-server-ldap").
    The following packages are declared obsolete:
    - krb5-server-1.11.3-49.el7.i686
    - krb5-server-1.11.3-49.el7.ppc
    - krb5-server-1.11.3-49.el7.s390
    - krb5-server-ldap-1.11.3-49.el7.i686
    - krb5-server-ldap-1.11.3-49.el7.ppc
    - krb5-server-ldap-1.11.3-49.el7.s390


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-8
changelog:
  - Add a patch to fix RH Bug #1250154 ("[s390x, ppc64, ppc64le]:
    kadmind does not accept ACL if kadm5.acl does not end with EOL")
    The code "accidently" works on x86/AMD64 because declaring a
    variable |char| results in an |unsigned char| by default while
    most other platforms (e.g. { s390x, ppc64, ppc64le, ...})
    default to |signed char| (still have to use lint(1) to clean
    up 38 more instances of this kind of bug).


author: Roland Mainz <rmainz@redhat.com> - 1.13.2-9
changelog:
  - Ammend patch for RedHat bug #1252454 ('testsuite complains
    "Lifetime has increased by 32436 sec while 0 sec passed!",
    while rhel5-libkrb5 passes') to handle the newly introduced
    valgrind hits.


author: Robbie Harwood <rharwood@redhat.com> 1.13.2-9
changelog:
  - Add patch and test case for "KDC does not return proper
    client principal for client referrals"
  - Resolves: #1259846


author: Robbie Harwood <rharwood@redhat.com> - 1.13.2-12
changelog:
  - Fix CVE-2015-8631, CVE-2015-8630, and CVE-2015-8629
  - Remove obsolete trigger to enable building of package
  - Resolves: #1306969


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-29
changelog:
  - Process profile includedir in sorted order
  - Also, ignore dotfiles in included directories
  - Resolves: #1539824


author: Robbie Harwood <rharwood@redhat.com> - 1.15.1-32
changelog:
  - Include preauth name in trace output if possible
  - Update cert generation scripts to work on modern openssl
  - Fix per-request preauth scoping
  - Add test case for PKINIT DH renegotiation
  - Echo KDC cookies in preauth tryagain
  - Fall back to other preauth mechanisms after failures
  - Resolves: #1540130


author: Mridula Shastry <mridula.c.shastry@oracle.com> - 1.15.1-55.0.3
changelog:
  - Length check when parsing GSS token encapsulation [Orabug: 36927256]
  - Add a simple DER support header [Orabug: 36927256]
  - Fix vulnerabilities in GSS message token handling [Orabug: 36927256]


author: Jan Grulich <jgrulich@redhat.com> - 4.10.5-7
changelog:
  - Fix installed files for -java subpkg
    Resolves: bz#1253143, build failure when java is installed in build enviroment


author: Jan Grulich <jgrulich@redhat.com> - 4.10.5-8
changelog:
  - Properly remove kross-java files
    Resolves: bz#1253143, build failure when java is installed in build enviroment


author: Siteshwar Vashisht <svashisht@redhat.com> - 20120801-37
changelog:
  - Add configuration option to enable signal bubbling for backward compatibility
    Resolves: #1484937


author: Kamil Dudka <kdudka@redhat.com> - 20120801-137
changelog:
  - Increase the release number by 100 to make sure it stays higher than in RHEL-6
    Related: #1484937


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-12
changelog:
  - ksh sometimes wrote wrong byte sequence to terminal when vi editing 
    mode was used (#1026360)
  - fix errors in man page (#1030867)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-15
changelog:
  - fix argv rewrite (#1047507)
  - fix memory leak (#1048995)
  - standard error output could get misdirected (#1048272)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-19
changelog:
  - reading a file via command substitution did not work when any of stdin,
    stdout or stderr were closed (#1070328)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-20
changelog:
  - fix segfault in job list code (#1084406)
  - do not resend signal on termination (#1085385)
  - fix brace expansion on/off (#1099935)
  - fix incorrect rounding of numsers 0.5 < |x| <1.0 in printf (#1070871)
  - fix parser errors related to the end of the here-document marker (#1111120)
  - ksh hangs when command substitution fills out the pipe buffer (#1077090)
  - using typeset -l with a restricted variabled caused segmentation fault (#1121960)
  - monitor mode was documented incorrectly (#1100215)
  - do not crash when unsetting running function from another one (#1100215)
  - should report an error when trying to cd into directory without execution bit (#1109893)
  - job locking mechanism did not survive compiler optimization (#1116506)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-21
changelog:
  - include symlink for restricted shell (#1146161)
  - ksh hangs when command substitution containing pipe fills out the pipe buffer (#1138751)
  - current directory could differ from PWD (#1135573)
  - cd builtin could break IO redirection (#1133585)
  - return code from a function could be wrong (#1116507)


author: Michal Hlavinka <mhlavink@redhat.com> - 20120801-26
changelog:
  - closing a file descriptor in a command substitution caused loss of the output (#1202439)
  - fix: in a login shell "( cmd & )" does nothing (#1217237)
  - exporting fixed with variable corrupted its data (#1192026)
  - fix segfault when handling a trap (#1211540)
  - combining alarm and IFS caused segfault (#1192119)
  - declaration of a two dimemsional associatve array could add an extra 0 element (#1193557)
  - do not inherit invalid variables during shell initializaton (#1211538)
  - case in a for loop inside a subshell caused syntax error (#1241014)


author: Robert Scheck <robert@fedoraproject.org> - 1.13-5
changelog:
  - Really added the plugindir patch now (thanks to Karsten Hopp)
  - Avoid the make errors because of mkdirhier better than until now


author: John Dennis <jdennis@redhat.com> - 2.4.1-7
changelog:
  - Add ECP support, brings Lasso up to current upstream tip + revised ECP patches
    Resolves: #1205342


author: John Dennis <jdennis@redhat.com> - 2.4.1-8
changelog:
  - Add explicit minimum dependency on glib2 2.42,
    for some reason RPM is not automatically detecting the dependency
    Resolves: #1254989


author: Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-3
changelog:
  - Resolves: #1634267 - ECP signature check fails with
                         LASSO_DS_ERROR_SIGNATURE_NOT_FOUND when assertion signed
                         instead of response


author: Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-4
changelog:
  - Resolves: #1730009 - lasso includes "Destination" attribute in SAML
                         AuthnRequest populated with SP
                         AssertionConsumerServiceURL when ECP workflow
                         is used which leads to IdP-side errors


author: Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-5
changelog:
  - Resolves: #1719014 - Expired certificate prevents tests from running
  - Actually apply the patch file for the previous build
  - Related: #1730009 - lasso includes "Destination" attribute in SAML
                         AuthnRequest populated with SP
                         AssertionConsumerServiceURL when ECP workflow
                         is used which leads to IdP-side errors


author: Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-6
changelog:
  - Resolves: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
                         vulnerability when parsing SAML responses


author: Jakub Hrozek <jhrozek@redhat.com> - 2.5.1-7
changelog:
  - Fix Coverity warning introduced by the previous patch
  - Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
                        vulnerability when parsing SAML responses


author: Michal Schmidt <mschmidt@redhat.com> - 0.5-6
changelog:
  - Build both with and without GUI to allow the use on systems where Gtk
    dependency is undesirable. The latencytop package is still the full-blown build.
    latencytop-tui is the miminal build. latencytop-common has the shared files.


author: Michal Schmidt <mschmidt@redhat.com> - 0.5-7
changelog:
  - Remove the broken fsync view, stop using the obsolete 'tracing_enabled'.
  - Better error message when run as non-root.


author: Richard Hughes <richard@hughsie.com> 2.4-1
changelog:
  - Update to new upstream version.
  - Black point detection from the algorithm disclosed by Adobe
  - Added support for transforms on planar data with different stride
  - Added a new plug-in type for optimizing full transforms
  - Linear (gamma 1.0) profiles can now operate in unbounded mode
  - Added "half" float support


author: Richard Hughes <richard@hughsie.com> 2.5-1
changelog:
  - Update to new upstream version.
  - Added a reference for Mac MLU tag
  - Added a way to read the profile creator from header
  - Added error descriptions on cmsSmoothToneCurve
  - Added identity curves support for write V2 LUT
  - Added new cmsPlugInTHR() and fixed some race conditions
  - Added TIFF Lab16 handling on tifficc
  - Fixed a bug on big endian platforms not supporting uint64 or long long.
  - Fixed a multithead bug on optimization
  - Fixed devicelink generation for 8 bits
  - Fixed some 64 bit warnings on size_t to uint32 conversions
  - Rendering intent used when creating the transform is now propagated to profile
  - RGB profiles store only one copy of the curve to save space
  - Transform2Devicelink now keeps white point when guessing deviceclass is enabled
  - Update black point detection algorithm to reflect ICC changes
  - User defined parametric curves can now be saved in ICC profiles


author: Andrew Hughes <gnu.andrew@redhat.com> - 2.6-3
changelog:
  - Run tests as part of %check, fixing Makefile to set LD_LIBRARY_PATH
  - Use upstream endianness fix to avoid ppc64le being built big-endian
  - Resolves: #1250914


author: Paul Wouters <pwouters@redhat.com> - 1.6.16-1
changelog:
  - Updated to 1.6.16
  - Addresses bug in 1.6.14 and 1.6.15 that affects opendnssec
    (if you have empty non-terminals and use NSEC3)


author: Tomas Hozza <thozza@redhat.com> - 1.6.16-5
changelog:
  - Fix compiler warnings and one uninitialized value
  - make ldns-config multilib clean
  - Fix man pages and usages errors


author: Paul Wouters <pwouters@redhat.com> - 1.6.14-1
changelog:
  - [pulled before release]
  - Updated to 1.6.14
  - Removed merged in patch
  - Added new dependancy on ca-certificates for ldns-dane PKIX validation


author: Fridolin Pokorny <fpokorny@redhat.com> - 458-3
changelog:
  - Expanded lessecho usage (#948597)
  - Added lessfilter info to man (#948597)
  - Expanded lesskey usage (#948597)
  - Added --old-bot to help (#948597)


author: Jozef Mlich <jmlich@redhat.com> - 458-5
changelog:
  - fixing regression in 72dfd3f63594e1d4c9416180a95c47ae583934c6
    incorrect parsing of commandline arguments
  - Resolves #948597


author: Jozef Mlich <jmlich@redhat.com> - 458-8
changelog:
  - changes introduced in less-458-old-bot-in-help.patch
    wasn't compiled in. It is necessary to use mkhelp tool.
    Resolves: #948597


author: Jozef Mlich <jmlich@redhat.com> - 458-9
changelog:
  - The --use-backslash option documented in the man page
    was missing from online help for less.
    Resolves: #1109090


author: Luboš Uhliarik <luhliari@redhat.com> - 4.4.8-6
changelog:
  - Fix lftp does not follow http redirect (302) in mirror mode (#1181580)
  - Fix lftp exists randomly when "cmd:fail-exit" is set (#1193984)
  - Added RFE - lftp configurations for restricting each SSL/TLS 
    version (#1182987)
  - Fixed bogus dates of this SPEC


author: Michal Ruprich - 4.4.8-9
changelog:
  - Resolves: #1374653 -  File size decreases when synchronizing folders with a sftp account using lftp


author: Michal Ruprich - 4.4.8-10
changelog:
  - Related: #1374653 - File size decreases when synchronizing folders with a sftp account using lftp
                      - Patch edited so that it corresponds to upstream


author: Michal Ruprich <mruprich@redhat.com> - 4.4.8-11
changelog:
  - Resolves: #1514815 - lftp doesn't seems to consider 'set net:max-retries'
  - Resolves: #1556675 - "get" command with lftp does not fail on net:max-retries


author: Michal Ruprich <mruprich@redhat.com> - 4.4.8-11.1
changelog:
  - Resolves: #1797963 - lftp with ssl gives error Fatal error: gnutls_record_recv: The TLS connection was non-properly terminated


author: Michal Ruprich <mruprich@redhat.com> - 4.4.8-12
changelog:
  - Resolves: #1611641 - CVE-2018-10916 lftp: particular remote file names may lead to current working directory erased


author: Michal Ruprich <michalruprich@gmail.com> - 4.4.8-12.1
changelog:
  - Resolves: #1797964 - lftp with ssl gives error Fatal error: gnutls_record_recv: The TLS connection was non-properly terminated


author: Michal Ruprich <mruprich@redhat.com> - 4.4.8-13
changelog:
  - Resolves: #1573296 - lftp with ssl gives error Fatal error: gnutls_record_recv: The TLS connection was non-properly terminated


author: Michal Ruprich - 4.4.8-9
changelog:
  - Resolves: #1392944 - File size decreases when synchronizing folders with a sftp account using lftp


author: Benjamin Tissoires <btissoir@redhat.com> 1.4.7-2
changelog:
  - CVE-2014-0209: integer overflow of allocations in font metadata file parsing (bug 1163604, bug 1163603)
  - CVE-2014-0210: unvalidated length fields when parsing xfs protocol replies (bug 1163604, bug 1163603)
  - CVE-2014-0211: integer overflows calculating memory needs for xfs replies (bug 1163604, bug 1163603)


author: Benjamin Tissoires <benjamin.tissoires@redhat.com> 1.4.7-3
changelog:
  - CVE-2015-1802: missing range check in bdfReadProperties (bug 1258894)
  - CVE-2015-1803: crash on invalid read in bdfReadCharacters (bug 1258894)
  - CVE-2015-1804: out-of-bounds memory access in bdfReadCharacters (bug 1258894)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.7.1-3
changelog:
  - fix sequence number copy - the cookie already had (a potentially
    different) sequence number copied (#965347)


author: Peter Hutterer <peter.hutterer@redhat.com> 1.0.2-1
changelog:
  - libXp 1.0.2. Drags in a bunch of general cleanup, code changes are quite
    limited and CVE-2013-2062 (#960362)


author: Benjamin Tissoires <benjamin.tissoires@redhat.com> 1.1.5-3
changelog:
  - libXt 1.1.5
  - Merge F25:
  - Fix duplicate documentation (#1001246) by not using %doc
  - Turn on verbose build output via V=1 make
  - Remove %defattr
  - Use %?_isa in explicit package deps
  - Exclude docs from main package


author: Ville Skyttä <ville.skytta@iki.fi> - 1.2.1-3
changelog:
  - Add libXi-devel dep to -devel for XInput.h #inclusion.
  - Make main package dep in -devel arch qualified.


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.109-1
changelog:
  - Pull in upstream .109 to get ARM architecture support.
  - Remove the broken sparc patch;  it should go upstream first.


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.109-8
changelog:
  - Change the source location to the new upstream on fedorahosted
  - import a new tarball from the new source


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.109-10
changelog:
  - Un-revert the RHEL-specific changes. (Jeff Moyer)
  - Make devel sub-package depend on specific ver-rel (Jeff Moyer)
  - Resolves: bz#905462


author: Jeff Moyer <jmoyer@redhat.com> - 0.3.109-12.2
changelog:
  - Get rid of sparc support (we don't build it) (Jeff Moyer)
  - Implement proper support for aarch64 (Jeff Moyer)
  - Resolves: bz#1026429


author: Pavel Raiskup <praiskup@redhat.com> - 3.1.2-11
changelog:
  - fix out-of-bounds read within lha_read_data_none() (CVE-2017-14503)
  - fix crash on crafted 7zip archives (CVE-2019-1000019)
  - fix infinite loop in ISO9660 (CVE-2019-1000020)


author: Pavel Raiskup <praiskup@redhat.com> - 3.0.4-3
changelog:
  - better install manual pages for libarchive/bsdtar/bsdcpio (# ... )
  - several fedora-review fixes ...:
  - Source0 has moved to github.com
  - remove trailing white spaces
  - repair summary to better describe bsdtar/cpiotar utilities


author: Jochen Schmitt <Jochen herr-schmitt de> - 2.3.21-7
changelog:
  - Add aarch64 as a 65-Bit architecture (#975267)
  - Add libtool as a BR
  - Call libtoolize before autoreconf


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.8-1
changelog:
  - Temporarily skip vfat generic resize test on rawhide (vtrefny)
  - Use "safeprobe" in "bd_fs_wipe" (vtrefny)
  - Add a generic filesystem resize function (vtrefny)
  - Add a function to get mountpoint for a device (vtrefny)
  - Add a function to get filesystem type for a device (vtrefny)
  - Only include the LVM DBus config when shipping LVM DBus (vpodzime)
  - Skip the LVM DBus vgreduce tests on Rawhide (vpodzime)
  - Do not build the lvm-dbus plugin on RHEL/CentOS (vpodzime)
  - Give zRAM more time to settle before trying to remove a device (vpodzime)
  - Put zram tests adding/removing devices into a separate class (vpodzime)
  - Skip LVM cache and RAID tests on Rawhide (vpodzime)
  - Fix the skip_on decorator factory for tests (vpodzime)
  - Use 'blkid -p' instead of lsblk to get device's FS type (vpodzime)
  - Improve the lvm_set_global_config test (vpodzime)
  - Pass '-y' to pvresize (vpodzime)
  - Create a copy of os.environ for a child process (vpodzime)
  - Revert "Use the "C.UTF-8" locale instead of just "C"" (vpodzime)
  - Fix how we create vfat FS in tests (vpodzime)
  - Skip the test if requiring unavailable locales (vpodzime)
  - Use the "C.UTF-8" locale instead of just "C" (vpodzime)
  - Add functions for working with ext2 and ext3 filesystems (vtrefny)
  - Link to gobject when lvm or btrfs is enabled (andreas)
  - Link to libm where needed (andreas)
  - Add a function for cleaning a device (vtrefny)
  - Add few code exaples to documentation (vtrefny)
  - Use a special exception for no fs signature when doing wipe (vpodzime)
  - One more incompatible os.symlink() call (vpodzime)
  - Do not use pass-by-name in the os.symlink() call (vpodzime)
  - Ignore previous errors when falling back to using ioctl() (vpodzime)
  - Use ioctl() call to teardown loop devices (vpodzime)
  - Resolve the device to remove for mdadm (vpodzime)
  - Add a function for getting device symlinks (vpodzime)
  - Use the new resolve_device() function where appropriate (vpodzime)
  - Add the resolve_device() function to the utils library (vpodzime)
  - First try to read the 'autoclear' flag from /sys/ (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.9-1
changelog:
  - Fix hardcoded reference to gcc (timo.gurr)
  - Catch and ignore partial failures in LVM tests' cleanups (vpodzime)
  - Fix hardcoded reference to pkg-config (timo.gurr)
  - Make GObject introspection optional (vpodzime)
  - Do not link libraries required by plugins to the GI files (vpodzime)
  - Make sure the whole build status image is shown (vpodzime)
  - Show CI status in README (at the GH repo's front page) (vpodzime)
  - Always require the libudev pkg (tgurr)
  - Make sure we give kernel time to fully setup zram device(s) (vpodzime)
  - fs_test.py: Close FDs when calling utilities (tasleson)
  - crypto.c: Correct segmentation fault (tasleson)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.10-1
changelog:
  - Only enable partition size tolerance with alignment (vpodzime)
  - Limit the requested partition size to maximum possible (vpodzime)
  - Do not verify vfat FS' size after generic resize (vpodzime)
  - Specify tolerance for partition size (kailueke)
  - Only use the exact constraint if not using any other (vpodzime)
  - Check resulting FS size in tests for generic FS resize (vpodzime)
  - Query setting FS label support and generic relabeling (kailueke)
  - Do not strictly require all FS utilities (vpodzime)
  - Compile everything with the C99 standard (vpodzime)
  - Add partition resize function (kailueke)
  - Generic Check and Repair Functions (kailueke)
  - Query functions for FS resize and repair support (kailueke)
  - Update the project/source URL in the spec file (vpodzime)
  - Add functions for opening/closing TrueCrypt/VeraCrypt volumes (vpodzime)
  - Adapt to a change in behaviour in new libmount (vpodzime)
  - Try RO mount also if we get EACCES (vpodzime)
  - Size in bytes for xfs_resize_device (kailueke)
  - src/plugins/Makefile.am: Remove hard coded include path in /usr prefix (tristan.vanberkom)
  - Fixed include for libvolume_key.h (tristan.vanberkom)
  - Ignore parted warnings if possible (squimrel)
  - bcache tests: Remove FEELINGLUCKY checks (tasleson)
  - kbd.c: Code review corrections (tasleson)
  - kbd.c: Make bd_kbd_bcache_create work without abort (tasleson)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.11-1
changelog:
  - Make the KbdZRAMDevicesTestCase inherit from KbdZRAMTestCase (vpodzime)
  - Allow non-source directory builds (kailueke)
  - Add a way to disable runtime dependency checks (vpodzime)
  - Link to GObject even if no plugin is activated (kailueke)
  - Skip zram tests on Rawhide (vpodzime)
  - Keep most utilities available for tests (vpodzime)
  - Use new libmount function to get (un)mount error message (vtrefny)
  - Update the documentation URL (vpodzime)


author: Vratislav Podzimek <vpodzime@redhat.com> - 2.12-1
changelog:
  - Own directories /etc/libblockdev and /etc/libblockdev/conf.d (vtrefny)
  - Wait for resized partition (kailueke)
  - Make sure the device is opened for libparted (vpodzime)
  - Fix label check in swap_test (vtrefny)
  - Use "run_tests" script for running tests from Makefile (vtrefny)
  - Add a script for running tests (vtrefny)
  - Tests: Move library initialization to setUpClass method (vtrefny)
  - Stop skipping FAT resize tests on rawhide (vtrefny)
  - Close filesystem before closing the partition during FAT resize (vtrefny)
  - Use mountpoint for "xfs_info" calls (vtrefny)
  - Use libmount cache when parsing /proc/mounts (vtrefny)
  - Add some space for the CI status (vpodzime)
  - Confirm the force when creating PVs in FS tests (vpodzime)
  - Skip vgremove tests on 32bit Debian (vtrefny)
  - Fix names of backing files in tests (vtrefny)
  -  Fix checking for available locales (vtrefny)
  - Skip dependency checking in mpath tests on Debian (vtrefny)
  - Skip zRAM tests on Debian (vtrefny)
  - Skip the test for device escrow on Debian too (vtrefny)
  - Skip free region tests on Debian too (vtrefny)
  - Fix redirecting command output to /dev/null in tests (vtrefny)
  - Try harder to unmount devices in test cleanup (vtrefny)
  - Require only plugins that are needed for given test (vtrefny)
  - Try to get distribution info from "PrettyName" if "CPEName" isn't available (vtrefny)
  - Use -ff when creating PVs in FS tests (vpodzime)
  - Sync spec with downstream (vpodzime)


author: Bastien Nocera <bnocera@redhat.com> - 0.2.3-6
changelog:
  + libbluray-0.2.3-0.12.git
  - Fix security issues in parts of the library that we never exercised
  Related: rhbz#1045453 rhbz#1045452


author: Adrian Reber <adrian@lisas.de> - 10.2+0.90-2
changelog:
  - added missing files from git: COPYING-GPL and COPYING-LGPL
  - added patch from git for missing pkgconfig requires
    and fixed FSF address


author: Adrian Reber <adrian@lisas.de> - 10.2+0.90-3
changelog:
  - included upstreamed patches which are changing the license
    headers to be LGPLv2+ for the library parts and GPLv2+ for the
    binaries


author: jchaloup <jchaloup@redhat.com> - 0.41-8
changelog:
  - resolves: #885174
    loading configuration files from /etc/cgconfig.d/ directory
  - resolves: #885166
    use * character as a meta character for all mounted
  - resolves: #886920
    add examples to man pages
  - resolves: #1143851
    extending cgroup names with default
  - resolves: #1142807
    api.c: support for setting multiline values in control files
    config.c: xfs file system sets item->d_type to zero, stat() and S_ISREG() test added (#885174)


author: Nikola Forró <nforro@redhat.com> - 0.41-12
changelog:
  - resolves: #1406927
    start cgred service after nss-user-lookup target
    show warnings about unsuccessful user/group lookups


author: Nikola Forró <nforro@redhat.com> - 0.41-17
changelog:
  - show warning when "tasks" file can not be opened
  - extend description of "controllers" section in cgrules.conf man page
    resolves: #1561736


author: Peter Schiffer <pschiffe@redhat.com> 0.40-0.rc1.1
changelog:
  - resolves: #819568, #740113
    rebased to 0.40.rc1
  - resolves: #983264
    rebuilt with full relro and PIE
  - resolves: #1016810
    removed cgrulesengd daemon


author: Peter Schiffer <pschiffe@redhat.com> 0.40-0.rc1.2
changelog:
  - related: #1016810
    returned creation of cgred group, which was removed in previous commit by mistage


author: Peter Robinson <pbrobinson@fedoraproject.org> 0.12.4-1
changelog:
  - Update to 0.12.4
  - http://ftp.gnome.org/pub/GNOME/sources/libchamplain/0.12/libchamplain-0.12.4.news


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.3-4
changelog:
  - BuildRequires for libchewing-python changed
    from python-devel to python2-devel
  - RPM_BUILD_ROOT changed to buildroot


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.4-1
changelog:
  - Upstream update to 0.3.4
  - Download is changed to Google Code.
  - /usr/share/chewing is removed, data files now located in
    /usr/lib(64)/libchewing
  - Info for libchewing is included.


author: Ding-Yi Chen <dchen at redhat dot com> - 0.3.4-3
changelog:
  - Fixed [Bug 913214] libchewing complains "no info dir entry" while installing
    Add direntry in libchewing.texi so it can be listed under 
    Category "Localization"


author: David Tardon <dtardon@redhat.com> - 0.3.1-5
changelog:
  - Resolves: rhbz#918079 libcmis::sha1() can return digests with fewer
    than 40 hexadecimal digits
  - Resolves: rhbz#918080 restrict redirection protocols


author: David Tardon <dtardon@redhat.com> - 0.5.0-2
changelog:
  - Related: rhbz#1290152 autoreconf is not needed
  - Related: rhbz#1290152 add a bunch of fixes found by coverity


author: Doug Ledford <dledford@redhat.com> - 1.1.1-2
changelog:
  - Fix package description to differentiate the fact that this is for the T4
    Chelsio based adapters instead of the previous T3 generation


author: Doug Ledford <dledford@redhat.com> - 1.2.0-6
changelog:
  - Our -fno-strict-alias option patch was lost, and we discovered it
    was lost when I rebuilt the package.  Put it back and rebuild
    again.
  - Related: bz1062281


author: Matej Mužila <mmuzila@redhat.com> - 5.3.21-23
changelog:
  - Mention in man page that care should be taken when running db_hotbackup
    with -c option. Resolves: rhbz#1460077


author: Tom Lane <tgl@redhat.com> 0.8.3-4
changelog:
  - Do not use -ffast-math; it breaks things and seems quite unlikely to offer
    any useful performance benefit for this type of package, anyway
  Resolves: #629964


author: Tom Lane <tgl@redhat.com> 0.8.4-1
changelog:
  - Update to version 0.8.4 (seems to contain only configure-support updates,
    but might as well adopt it)
  - Fix memory leak due to incorrect test in _is_row_fetched()
  Related: #733413


author: Tom Lane <tgl@redhat.com> 0.8.3-12
changelog:
  - Remove unnecessary package-name Requires:, since dependencies on library
    sonames should be enough, and we don't want to hard-wire assumptions about
    which packages provide which libraries
  - isa-ify cross-subpackage Requires:


author: Richard W.M. Jones <rjones@redhat.com> - 1.12-13.1.el7
changelog:
  - Add patch to fix multilib conflicts in dnet-config
    resolves: rhbz#1059593
  - Remove RPM cruft from the spec file.


author: - nick.alcock@oracle.com - 0.5.0-3
changelog:
  - Include the distribution in the RPM release. [Orabug: 21211461]
  - No longer Provide: our own name. [Orabug: 21622263]


author: - nick.alcock@oracle.com - 0.7.1-1
changelog:
  - Fix CTF archive alignment and failed write() handling
    (Tomas Jedlicka) [Orabug: 27191792, 27204447]
  - Build on arm64 (Vincent Lim) [Orabug: 27418554]


author: - nick.alcock@oracle.com - 0.8.1-1
changelog:
  - Fix ctf_rollback() in client containers to delete only the types
  added since the last snapshot, rather than all of them.
  [Orabug: 27971037]


author: - nick.alcock@oracle.com - 1.0.0-1
changelog:
  - Format v2, supporting many more types and enum/struct/union members.
  v1 CTF files are transparently updated to v2. No soname change, but
  some API for users directly accessing CTF files is broken.
  [Orabug: 28150489]


author: - nick.alcock@oracle.com - 1.1.0-1
changelog:
  - Add ctf_add_{struct,union}_sized(). [Orabug: 29054972]
  - Work around some very minor CTF-generation bugs seen in the wild
    in old UEK kernels. [Orabug: 28952429]
  - Do not mprotect() the heap by mistake when reading CTF from a
    user-provided buffer. [Orabug: 28952429]


author: Dominik Mierzejewski <rpm[AT]greysector.net> 4.1.4-0.1.svn1184
changelog:
  - fix multilib conflict, based on a patch by Rex Dieter (rhbz#477684)
  - update to SVN r1184
  - move TODO to devel docs


author: Dominik Mierzejewski <rpm@greysector.net> 4.1.4-0.1.svn1183
changelog:
  - updated to SVN r1183
  - simplified multilib patch
  - fixed endianness issues (rhbz#442508)
  - added some docs


author: Tom Hughes <tom@compton.nu> - 20120410-1
changelog:
  - Update to 20120410 release
  - Drop the 0. from the version - the dates are the upstream versions
  - Remove explicit dependencies on elfutils-libelf


author: Kamil Dudka <kdudka@redhat.com> 3.0-7.20120601cvs
changelog:
  - Update to 3.0 (20120601 snap)
  - fix crash of el_insertstr() on incomplete multi-byte sequence (#840598)


author: Pawel Salek <pawsa@theochem.kth.se> - 1.0.4-14
changelog:
  - fix bug 599428: use 'version' macro instead of '_version'.
  - Use SSL patch by Ludwig Nussel of SUSE (bugzilla att id 399130).


author: Steve Dickson <steved@redhat.com> 2.0.14-1
changelog:
  - Updated to latest stable upstream version: 2.0.14-stable (bz 727129)
  - Removed the installion of the outdate man pages and the latex raw docs.
  - Corrected where the other doc are installed.


author: Steve Dickson <steved@redhat.com> 2.0.18-1
changelog:
  - Updated to latest stable upstream version: 2.0.18-stable
  - Moved documentation into its own rpm (bz 810138)


author: Petr Sabata <psabata@redhat.com> - 0.6.20-1
changelog:
  - 0.6.20 bump
  - Repackaging prehistoric libexif-docs, introducing version string in filename
  - Buildroot cleanup


author: Petr Šabata <contyk@redhat.com> - 0.6.21-1
changelog:
  - 0.6.21 bump
  - A security bugfixing release (CVE-2012-2812, CVE-2012-2813, CVE-2012-2814,
    CVE-2012-2836, CVE-2012-2837, CVE-2012-2840, CVE-2012-2841 & CVE-2012-2845)
  - Drop the pre-generated docs and introduce a doc subpackage


author: Dan Horák <dhorak@redhat.com> - 3.0.13-16
changelog:
  - Drop ppc64le from the multilib list
  - Use additional BR: only in ppc64le build
  - Resolves: RHBZ1116945


author: Hans de Goede <hdegoede@redhat.com> - 1.1.2-3
changelog:
  - Pass --with-fontrootdir to ./configure so that libfontenc can find the
    encoding files (rhbz#1046341)


author: Tomáš Mráz <tmraz@redhat.com> 1.5.3-5
changelog:
  - add FIPS DRBG implementation
  - run the FIPS POST tests in shared library constructor
  - make it possible to run the test suite in the FIPS mode


author: Tomáš Mráz <tmraz@redhat.com> 1.5.3-12.1
changelog:
  - touch only urandom in the selftest and when /dev/random is
    unavailable for example by SELinux confinement
  - fix the RSA selftest key (p q swap)


author: Tomáš Mráz <tmraz@redhat.com> 1.5.3-14
changelog:
  - add DRBG CAVS driver and other necessary CAVS driver updates (#1172568)
  - allow ath reinitialization in FIPS mode
  - allow for auto-initialization of DRBG


author: Debarshi Ray <rishi@fedoraproject.org> - 0.10.4-4
changelog:
  - Ensure that the new exiv2 soname is used during the build
  - Adapt to Exiv2::BasicIo API change
    Resolves: rhbz#1486570


author: Iryna Shcherbina <ishcherb@redhat.com> - 1:1.0.1-0.2.20180226gitb029c24
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Adam Jackson <ajax@redhat.com> - 1.0.1-0.6.git5baa1e5
changelog:
  - Enable %check for all but ppc64 and s390x, which has known but low-impact
    failures
  - Simplify %release


author: Ray Strode <rstrode@redhat.com> 2.32.1-4
changelog:
  - drop /etc/skel entry. libgnome creates it by default if it's
    not around and it needs it anyway. Better not to clutter users
    home directories just because they install glade.


author: Kalev Lember <klember@redhat.com> - 3.21.92-1
changelog:
  - Update to 3.21.92
  - Don't set group tags
  - Use make_install macro
  - Use license macro for COPYING
  - Use desktop-file-validate instead of desktop-file-install
  - Tighten -devel deps with the _isa macro


author: Kalev Lember <kalevlember@gmail.com> - 3.4.0.1-1
changelog:
  - Update to 3.4.0.1
  - Obsolete the -capplet subpackage; the whole plugins architecture is
    removed from libgnomekbd


author: Christophe Fergeau <cfergeau@redhat.com> 0.0.3-2
changelog:
  - Removed definition of BuildRoot and cleanup of BuildRoot in %clean
  - Added missing arch to versioned Requires: %{name} in the -devel package
  - Don't include empty NEWS and ChangeLog in built RPM


author: Christophe Fergeau <cfergeau@redhat.com> 0.3.1-2
changelog:
  - Requires a new enough librest as we use symbols not available in older
    librest
    Related: rhbz#1116844


author: Christophe Fergeau <cfergeau@redhat.com> - 0.3.3-1.3
changelog:
  - Add upstream patch fixing unwanted authentication dialog for foreign menu
    when using remote-viewer ovirt://
    Related: rhbz#1344633


author: Christophe Fergeau <cfergeau@redhat.com> - 0.3.3-1.4
changelog:
  - Add upstream patch forcing use of the older v3 REST API as we don't support
    yet the v4 API
    Resolves: rhbz#1346215


author: Fabiano Fidêncio <fidencio@redhat.com> 0.3.3-2
changelog:
  - Fix crash when VM has several ISO domains
    Resolves: rhbz#1274356
  - Add OvirtProxy::sso-token support for oVirt 4.0
    Resolves: rhbz#1324457


