# changelog

author: Nick Clifton <nickc@redhat.com> - 2.30-119.1
changelog:
  - Backport: Fix an illegal memory access when parsing an ELF file containing corrupt symbol version information.  (#2164700)


author: Nick Clifton <nickc@redhat.com> - 2.30-119.2
changelog:
  - Backport: Fix an illegal memory access when parsing an ELF file containing corrupt symbol version information.  (RHEL-12956)


author: Marek Polacek <polacek@redhat.com> 8.5.0-13
changelog:
  - require docbook-style-xsl instead of docbook5-style-xsl (#2073888)
  - backport Default widths with -fdec-format-defaults patch (#2074614)


author: Marek Polacek <polacek@redhat.com> 8.5.0-17
changelog:
  - fix deserialization for std::normal_distribution (#2130392,
    PR libstdc++/105502)
  - initialize std::normal_distribution::_M_saved (PR libstdc++/99536)
  - reject std::make_shared<T[]> (PR libstdc++/99006)


author: Mark Wielaard <mjw@redhat.com> - 0.182-1
changelog:
  - Upgrade to upstream 0.182
    - backends: Support for tilegx has been removed.
    - config: New /etc/profile.d files to provide default $DEBUGINFOD_URLS.
    - debuginfod: More efficient package traversal, tolerate various
      errors during scanning, grooming progress is more visible and
      interruptible, more prometheus metrics.
    - debuginfod-client: Now supports compressed (kernel) ELF images.
    - libdwfl: Add ZSTD compression support.


author: Mark Wielaard <mjw@redhat.com> - 0.186-1
changelog:
  - Upgrade to upstream 0.186
    - debuginfod-client: Default $DEBUGINFOD_URLS is computed from
      drop-in files /etc/debuginfod/*.urls rather than
      hardcoded into the /etc/profile.d/debuginfod*
      scripts.
      Add $DEBUGINFOD_MAXSIZE and $DEBUGINFOD_MAXTIME settings
      for skipping large/slow transfers.
      Add $DEBUGINFOD_RETRY for retrying aborted lookups.
    - debuginfod: Supply extra HTTP response headers, describing
      archive/file names that satisfy the requested buildid content.
      Support -d :memory: option for in-memory databases.
      Protect against loops in federated server configurations.
      Add -r option to use -I/-X regexes for grooming stale files.
      Protect against wasted CPU from duplicate concurrent requests.
      Limit the duration of groom ops roughly to rescan (-t) times.
      Add --passive mode for serving from read-only database.
      Several other performance improvements & prometheus metrics.
    - libdw: Support for the NVIDIA Cuda line map extensions.
      DW_LNE_NVIDIA_inlined_call and DW_LNE_NVIDIA_set_function_name
      are defined in dwarf.h. New functions dwarf_linecontext and
      dwarf_linefunctionname.
    - translations: Update Japanese translation.


author: Mark Wielaard <mjw@redhat.com> - 0.187-4
changelog:
  - Upgrade to elfutils 0.187
    - debuginfod: Support -C option for connection thread pooling.
    - debuginfod-client: Negative cache file are now zero sized instead
      of no-permission files.
    - addr2line: The -A, --absolute option, which shows file names
      includingthe full compilation directory is now the
      default.  To get theold behavior use the new option --relative.
    - readelf, elflint: Recognize FDO Packaging Metadata ELF notes
    - libdw, debuginfo-client: Load libcurl lazily only when files need
      to be fetched remotely. libcurl is now never loaded when
      DEBUGINFOD_URLS is unset. And whenDEBUGINFOD_URLS is set,
      libcurl is only loaded when the debuginfod_begin function is
      called.
  - Add elfutils-0.187-csh-profile.patch
  - Add elfutils-0.187-debuginfod-client-fd-leak.patch
  - Add elfutils-0.187-mhd_no_dual_stack.patch
  - Add elfutils-0.187-mhd_epoll.patch
  - Add an explicit versioned requires from elfutils-debuginfod-client
    on elfutils-libs and elfutils-libelf.
  - Remove brew testsuite workarounds


author: DJ Delorie <dj@redhat.com> - 2.28-225.7
changelog:
  - Fix temporal threshold calculations (RHEL-22865)
  - Fix string and memory function tuning on small systems (RHEL-22865)


author: Lucas Zampieri <lzampier@redhat.com> [4.18.0-477.27.1.el8_8]
changelog:
  - gfs2: Fix freeze consistency check in gfs2_trans_add_meta (Andreas Gruenbacher) [2231825 2095340]
  - gfs2: gfs2_freeze_lock_shared cleanup (Andreas Gruenbacher) [2231825 2095340]
  - gfs2: Replace sd_freeze_state with SDF_FROZEN flag (Andreas Gruenbacher) [2231825 2095340]
  - gfs2: Rework freeze / thaw logic (Andreas Gruenbacher) [2231825 2095340]
  - gfs2: Rename SDF_{FS_FROZEN => FREEZE_INITIATOR} (Andreas Gruenbacher) [2231825 2095340]
  - gfs2: Reconfiguring frozen filesystem already rejected (Andreas Gruenbacher) [2231825 2095340]
  - gfs2: Rename gfs2_freeze_lock{ => _shared } (Andreas Gruenbacher) [2231825 2095340]
  - gfs2: Rename the {freeze,thaw}_super callbacks (Andreas Gruenbacher) [2231825 2095340]
  - gfs2: Rename remaining "transaction" glock references (Andreas Gruenbacher) [2231825 2095340]
  - gfs2: init system threads before freeze lock (Bob Peterson) [2231825 2095340]
  - cifs: fix bogus cifs_mount error handling in RHEL8 (Jeffrey Layton) [2229128 2215018]
  - cifs: missing null pointer check in cifs_mount (Jay Shin) [2229128 2215018]
  - x86/cpu: Add CPU model numbers for Meteor Lake (Prarit Bhargava) [2230158 2156826]
  - redhat/configs: enable CONFIG_INTEL_UNCORE_FREQ_CONTROL for x86_64 (David Arcari) [2230158 2156826]
  - platform/x86/intel-uncore-freq: Return error on write frequency (David Arcari) [2230158 2156826]
  - platform/x86: intel-uncore-freq: Add client processors (David Arcari) [2230158 2156826]
  - platform/x86: intel-uncore-freq: add Emerald Rapids support (David Arcari) [2230158 2156826]
  - platform/x86: intel-uncore-freq: Use sysfs_emit() to instead of scnprintf() (David Arcari) [2230158 2156826]
  - platform/x86: intel-uncore-freq: Prevent driver loading in guests (David Arcari) [2230158 2156826]
  - platform/x86: intel-uncore-freq: fix uncore_freq_common_init() error codes (David Arcari) [2230158 2156826]
  - platform/x86/intel-uncore-freq: Split common and enumeration part (David Arcari) [2230158 2156826]
  - platform/x86/intel/uncore-freq: Display uncore current frequency (David Arcari) [2230158 2156826]
  - platform/x86/intel/uncore-freq: Use sysfs API to create attributes (David Arcari) [2230158 2156826]
  - platform/x86/intel/uncore-freq: Move to uncore-frequency folder (David Arcari) [2230158 2156826]
  - platform/x86: intel-uncore-frequency: use default_groups in kobj_type (David Arcari) [2230158 2156826]
  - platform/x86: intel-uncore-frequency: Move to intel sub-directory (David Arcari) [2230158 2156826]
  - platform/x86/intel-uncore-freq: Add Sapphire Rapids server support (David Arcari) [2230158 2156826]
  - platform/x86/intel-uncore-freq: make uncore_root_kobj static (David Arcari) [2230158 2156826]
  - platform/x86: Convert to new CPU match macros (David Arcari) [2230158 2156826]
  - platform/x86/intel-uncore-freq: Add release callback (David Arcari) [2230158 2156826]
  - platform/x86/intel-uncore-freq: Fix static checker issue and potential race condition (David Arcari) [2230158 2156826]
  - MAINTAINERS: Update for the intel uncore frequency control (David Arcari) [2230158 2156826]
  - platform/x86: Add support for Uncore frequency control (David Arcari) [2230158 2156826]
  - scsi: storvsc: Remove errant duplicate code (Cathy Avery) [2233227 2211725]
  - scsi: storvsc: Limit max_sectors for virtual Fibre Channel devices (Cathy Avery) [2233227 2211725]
  - net/sched: cls_fw: Fix improper refcount update leads to use-after-free (Davide Caratti) [2225647 2225103] {CVE-2023-3776}
  - iavf: remove active_cvlans and active_svlans bitmaps (Stefan Assmann) [2232399 2153349]
  - iavf: refactor VLAN filter states (Stefan Assmann) [2232399 2153349]
  - iavf: do not track VLAN 0 filters (Stefan Assmann) [2232399 2153349]
  - iavf: fix non-tunneled IPv6 UDP packet type and hashing (Stefan Assmann) [2232399 2153349]
  - iavf: fix inverted Rx hash condition leading to disabled hash (Stefan Assmann) [2232399 2153349]
  - net/sched: move struct tc_mqprio_qopt_offload from pkt_cls.h to pkt_sched.h (Stefan Assmann) [2232399 2153349]
  - iavf/iavf_main: actually log ->src mask when talking about it (Stefan Assmann) [2232399 2153349]
  - iavf: Fix VF driver counting VLAN 0 filters (Stefan Assmann) [2232399 2153349]
  - iavf: Change information about device removal in dmesg (Stefan Assmann) [2232399 2153349]
  - iavf: Replace __FUNCTION__ with __func__ (Stefan Assmann) [2232399 2153349]
  - net: Remove the obsolte u64_stats_fetch_*_irq() users (drivers). (Stefan Assmann) [2232399 2153349]
  - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Florian Westphal) [2221725 2221046] {CVE-2023-35001}


author: Patrick Talbert <ptalbert@redhat.com> [4.18.0-477.28.1.el8_8]
changelog:
  - Revert "xfs: expose the blockgc workqueue knobs publicly" (Bill O'Donnell) [2236813 2223260]
  - iommu/vt-d: Fix buggy QAT device mask (Jerry Snitselaar) [2221097 2169568]
  - iommu/vt-d: Add a fix for devices need extra dtlb flush (Jerry Snitselaar) [2221097 2169568]
  - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228709 2225512] {CVE-2023-4128}
  - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228709 2225512] {CVE-2023-4128}
  - net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (Davide Caratti) [2228709 2225512] {CVE-2023-4128}
  - EDAC/i10nm: Add Intel Emerald Rapids server support (Aristeu Rozanski) [2230161 2165649]
  - EDAC/skx_common: Delete duplicated and unreachable code (Aristeu Rozanski) [2230161 2165649]
  - EDAC/skx_common: Enable EDAC support for the "near" memory (Aristeu Rozanski) [2230161 2165649]
  - EDAC/i10nm: Print an extra register set of retry_rd_err_log (Aristeu Rozanski) [2230161 2165649]
  - EDAC/i10nm: Retrieve and print retry_rd_err_log registers for HBM (Aristeu Rozanski) [2230161 2165649]
  - EDAC/skx_common: Add ChipSelect ADXL component (Aristeu Rozanski) [2230161 2165649]
  - EDAC/i10nm: Fix NVDIMM detection (Aristeu Rozanski) [2230161 2165649]
  - EDAC/skx_common: Set the memory type correctly for HBM memory (Aristeu Rozanski) [2230161 2165649]
  - EDAC/mc: Add new HBM2 memory type (Aristeu Rozanski) [2230161 2165649]
  - EDAC: Replace EDAC_DIMM_PTR() macro with edac_get_dimm() function (Aristeu Rozanski) [2230161 2165649]


author: Lucas Zampieri <lzampier@redhat.com> [4.18.0-477.29.1.el8_8]
changelog:
  - tools/power/x86/intel-speed-select: v1.14 release (Prarit Bhargava) [2230163 2154078]
  - tools/power/x86/intel-speed-select: Adjust uncore max/min frequency (Prarit Bhargava) [2230163 2154078]
  - tools/power/x86/intel-speed-select: Fix display of uncore min frequency (Prarit Bhargava) [2230163 2154078]
  - tools/power/x86/intel-speed-select: Add Emerald Rapid quirk (Prarit Bhargava) [2230163 2154078]
  - tools/power/x86/intel-speed-select: turbo-freq auto mode with SMT off (Prarit Bhargava) [2230163 2154078]
  - tools/power/x86/intel-speed-select: cpufreq reads on offline CPUs (Prarit Bhargava) [2230163 2154078]
  - tools/power/x86/intel-speed-select: Use null-terminated string (Prarit Bhargava) [2230163 2154078]
  - tools/power/x86/intel-speed-select: Remove duplicate dup() (Prarit Bhargava) [2230163 2154078]
  - tools/power/x86/intel-speed-select: Handle open() failure case (Prarit Bhargava) [2230163 2154078]
  - tools/power/x86/intel-speed-select: Remove unused non_block flag (Prarit Bhargava) [2230163 2154078]
  - tools/power/x86/intel-speed-select: Remove wrong check in set_isst_id() (Prarit Bhargava) [2230163 2154078]
  - platform/x86: ISST: Fix typo in comments (Prarit Bhargava) [2230163 2154078]
  - tools/power/x86/intel-speed-select: Release v1.13 (Prarit Bhargava) [2230163 2154078]
  - tools/power/x86/intel-speed-select: Optimize CPU initialization (Prarit Bhargava) [2230163 2154078]
  - tools/power/x86/intel-speed-select: Utilize cpu_map to get physical id (Prarit Bhargava) [2230163 2154078]
  - tools/power/x86/intel-speed-select: Remove unused struct clos_config fields (Prarit Bhargava) [2230163 2154078]
  - tools/power/x86/intel-speed-select: Enforce isst_id value (Prarit Bhargava) [2230163 2154078]
  - tools/power/x86/intel-speed-select: Do not export get_physical_id (Prarit Bhargava) [2230163 2154078]
  - tools/power/x86/intel-speed-select: Introduce is_cpu_in_power_domain helper (Prarit Bhargava) [2230163 2154078]
  - tools/power/x86/intel-speed-select: Cleanup get_physical_id usage (Prarit Bhargava) [2230163 2154078]
  - tools/power/x86/intel-speed-select: Convert more function to use isst_id (Prarit Bhargava) [2230163 2154078]
  - tools/power/x86/intel-speed-select: Add pkg and die in isst_id (Prarit Bhargava) [2230163 2154078]
  - tools/power/x86/intel-speed-select: Introduce struct isst_id (Prarit Bhargava) [2230163 2154078]
  - tools/power/x86/intel-speed-select: Remove unused core_mask array (Prarit Bhargava) [2230163 2154078]
  - tools/power/x86/intel-speed-select: Remove dead code (Prarit Bhargava) [2230163 2154078]
  - tools/power/x86/intel-speed-select: Fix cpu count for TDP level display (Prarit Bhargava) [2230163 2154078]
  - tools/power/x86/intel-speed-select: Remove unneeded semicolon (Prarit Bhargava) [2230163 2154078]
  - tools/power/x86/intel-speed-select: Fix off by one check (Prarit Bhargava) [2230163 2154078]
  - tools/power/x86/intel-speed-select: Fix warning for perf_cap.cpu (Prarit Bhargava) [2230163 2154078]
  - tools/power/x86/intel-speed-select: Display error on turbo mode disabled (Prarit Bhargava) [2230163 2154078]
  - tools/power/x86/intel-speed-select: fix build failure when using -Wl,--as-needed (Prarit Bhargava) [2230163 2154078]
  - tools/power turbostat: Introduce support for EMR (Prarit Bhargava) [2230154 2156806]
  - powercap: intel_rapl: add support for Emerald Rapids (Prarit Bhargava) [2230146 2156804]
  - Revert "NFSv4: Retry LOCK on OLD_STATEID during delegation return" (Benjamin Coddington) [2237840 2217658]
  - intel_idle: add Emerald Rapids Xeon support (Prarit Bhargava) [2230155 2156824]
  - cpufreq: intel_pstate: Fix scaling for hybrid-capable systems with disabled E-cores (David Arcari) [2223403 2221276]
  - netfilter: snat: evict closing tcp entries on reply tuple collision (Florian Westphal) [2236514 2196717]
  - cpufreq: intel_pstate: Enable HWP IO boost for all servers (Prarit Bhargava) [2232123 2175625]
  - pNFS: Don't keep retrying if the server replied NFS4ERR_LAYOUTUNAVAILABLE (Benjamin Coddington) [2238394 2218539]


author: Lucas Zampieri <lzampier@redhat.com> [4.18.0-477.30.1.el8_8]
changelog:
  - redhat: list Z-Jiras in the changelog before Y-Jiras (Herton R. Krzesinski)
  - scsi: core: Add BLIST_NO_VPD_SIZE for some VDASD (Ewan D. Milne) [2238770 2171092]
  - net/sched: cls_u32: Fix reference counter leak leading to overflow (Davide Caratti) [2225492 2225202] {CVE-2023-3609}
  - ibmvnic: Do not reset dql stats on NON_FATAL err (Mamatha Inamdar) [2236701 2227904]


author: Lucas Zampieri <lzampier@redhat.com> [4.18.0-477.31.1.el8_8]
changelog:
  - mm/userfaultfd: don't consider uffd-wp bit of writable migration entries (Rafael Aquini) [2237947 2231554]
  - mm/userfaultfd: fix uffd-wp handling for THP migration entries (Rafael Aquini) [2237947 2231554]
  - mm/userfaultfd: fix uffd-wp special cases for fork() (Rafael Aquini) [2237947 2231554]
  - mm/thp: simplify copying of huge zero page pmd when fork (Rafael Aquini) [2237947 2231554]


author: Lucas Zampieri <lzampier@redhat.com> [4.18.0-477.32.1.el8_8]
changelog:
  - md: Fix bitmap offset type in sb writer (Nigel Croxon) [2235655 2189478]
  - md/raid5: Improve performance for sequential IO (Nigel Croxon) [2235655 2189478]
  - md/raid5: remove unused working_disks variable (Nigel Croxon) [2235655 2189478]
  - md/raid10: fix memleak of md thread (Nigel Croxon) [2235655 2189478]
  - md/raid10: fix memleak for 'conf->bio_split' (Nigel Croxon) [2235655 2189478]
  - md/raid10: fix leak of 'r10bio->remaining' for recovery (Nigel Croxon) [2235655 2189478]
  - md/raid10: don't BUG_ON() in raise_barrier() (Nigel Croxon) [2235655 2189478]
  - md: fix soft lockup in status_resync (Nigel Croxon) [2235655 2189478]
  - md: add error_handlers for raid0 and linear (Nigel Croxon) [2235655 2189478]
  - md: Use optimal I/O size for last bitmap page (Nigel Croxon) [2235655 2189478]
  - md: Fix types in sb writer (Nigel Croxon) [2235655 2189478]
  - md: Move sb writer loop to its own function (Nigel Croxon) [2235655 2189478]
  - md/raid10: Fix typo in comment (replacment -> replacement) (Nigel Croxon) [2235655 2189478]
  - md/raid10: fix null-ptr-deref in raid10_sync_request (Nigel Croxon) [2235655 2189478]
  - md/raid10: fix task hung in raid10d (Nigel Croxon) [2235655 2189478]
  - md: simplify sysctl registration (Nigel Croxon) [2235655 2189478]
  - i40e: fix potential NULL pointer dereferencing of pf->vf i40e_sync_vsi_filters() (Ivan Vecera) [2238305 2153348]
  - i40e: fix misleading debug logs (Ivan Vecera) [2238305 2153348]
  - i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir() (Ivan Vecera) [2238305 2153348]
  - i40e: fix i40e_setup_misc_vector() error handling (Ivan Vecera) [2238305 2153348]
  - i40e: fix registers dump after run ethtool adapter self test (Ivan Vecera) [2238305 2153348]
  - i40e: fix accessing vsi->active_filters without holding lock (Ivan Vecera) [2238305 2153348]
  - i40e: fix flow director packet filter programming (Ivan Vecera) [2238305 2153348]
  - i40e: Fix kernel crash during reboot when adapter is in recovery mode (Ivan Vecera) [2238305 2153348]
  - i40e: Add checking for null for nlmsg_find_attr() (Ivan Vecera) [2238305 2153348]
  - i40e: add double of VLAN header when computing the max MTU (Ivan Vecera) [2238305 2153348]
  - i40e: Disallow ip4 and ip6 l4_4_bytes (Ivan Vecera) [2238305 2153348]
  - i40e: Fix for VF MAC address 0 (Ivan Vecera) [2238305 2153348]
  - i40e: Fix not setting default xps_cpus after reset (Ivan Vecera) [2238305 2153348]
  - Documentation/x86: Fix backwards on/off logic about YMM support (Waiman Long) [2229883 2229884] {CVE-2022-40982}
  - KVM: Add GDS_NO support to KVM (Waiman Long) [2229883 2229884] {CVE-2022-40982}
  - x86/speculation: Add Kconfig option for GDS (Waiman Long) [2229883 2229884] {CVE-2022-40982}
  - x86/speculation: Add force option to GDS mitigation (Waiman Long) [2229883 2229884] {CVE-2022-40982}
  - x86/speculation: Add Gather Data Sampling mitigation (Waiman Long) [2229883 2229884] {CVE-2022-40982}
  - x86/bugs: Use sysfs_emit() (Waiman Long) [2229883 2229884] {CVE-2022-40982}
  - Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Waiman Long) [2229883 2229884] {CVE-2022-40982}
  - docs/kernel-parameters: Update descriptions for "mitigations=" param with retbleed (Waiman Long) [2229883 2229884] {CVE-2022-40982}
  - arm64: correct the effect of mitigations off on kpti (Waiman Long) [2229883 2229884] {CVE-2022-40982}
  - x86/speculation: Add missing srbds=off to the mitigations= help text (Waiman Long) [2229883 2229884] {CVE-2022-40982}
  - CI: Remove unused kpet_tree_family (Nikolai Kondrashov)
  - iavf: schedule a request immediately after add/delete vlan (Petr Oros) [2240751 2231174]
  - iavf: add iavf_schedule_aq_request() helper (Petr Oros) [2240751 2231174]
  - ice: always add legacy 32byte RXDID in supported_rxdids (Michal Schmidt) [RHEL-10392]
  - media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 (Dean Nelson) {CVE-2022-45919}
  - media: dvb-core: Fix use-after-free due to race at dvb_register_device() (Dean Nelson) {CVE-2022-45884}
  - media: dvb-core: Fix use-after-free due on race condition at dvb_net (Dean Nelson) {CVE-2022-45886}
  - media: dvb_ca_en50221: fix a size write bug (Dean Nelson) {CVE-2022-45919}
  - media: dvbdev: fix refcnt bug (Dean Nelson) {CVE-2022-45884}
  - media: dvbdev: adopts refcnt to avoid UAF (Dean Nelson) {CVE-2022-45884}
  - media: dvbdev: fix error logic at dvb_register_device() (Dean Nelson) {CVE-2022-45884}
  - media: dvb_net: avoid speculation from net slot (Dean Nelson) {CVE-2022-45886}
  - media: dvb_ca_en50221: avoid speculation from CA slot (Dean Nelson) {CVE-2022-45919}
  - media: dvbdev: Fix memleak in dvb_register_device (Dean Nelson) {CVE-2022-45884}
  - media: media/dvb: Use kmemdup rather than duplicating its implementation (Dean Nelson) {CVE-2022-45884}
  - media: dvbdev: remove double-unlock (Dean Nelson) {CVE-2022-45884}
  - media: dvb-core: fix epoll() by calling poll_wait first (Dean Nelson) {CVE-2022-45919}
  - media: dvb_ca_en50221: off by one in dvb_ca_en50221_io_do_ioctl() (Dean Nelson) {CVE-2022-45919}
  - bpf: sockmap: Remove preempt_disable in sock_map_sk_acquire (Tomas Glozar) [2239475 2229965]
  - sched/fair: Block nohz tick_stop when cfs bandwidth in use (Phil Auld) [RHEL-12722]
  - sched, cgroup: Restore meaning to hierarchical_quota (Phil Auld) [RHEL-12722]
  - sched/fair: Hide unused init_cfs_bandwidth() stub (Phil Auld) [RHEL-12722]


author: Lucas Zampieri <lzampier@redhat.com> [4.18.0-477.33.1.el8_8]
changelog:
  - ice: Don't tx before switchdev is fully configured (Michal Schmidt) [RHEL-11330]
  - mm/slab_common: fix slab_caches list corruption after kmem_cache_destroy() (Rafael Aquini) [RHEL-11586]
  - rbd: take header_rwsem in rbd_dev_refresh() only when updating (Ilya Dryomov) [RHEL-12688]
  - rbd: decouple parent info read-in from updating rbd_dev (Ilya Dryomov) [RHEL-12688]
  - rbd: decouple header read-in from updating rbd_dev->header (Ilya Dryomov) [RHEL-12688]
  - rbd: move rbd_dev_refresh() definition (Ilya Dryomov) [RHEL-12688]


author: Lucas Zampieri <lzampier@redhat.com> [4.18.0-477.34.1.el8_8]
changelog:
  - fbcon: set_con2fb_map needs to set con2fb_map! (Wander Lairson Costa) [RHEL-1185 RHEL-1183]
  - fbcon: Fix error paths in set_con2fb_map (Wander Lairson Costa) [RHEL-1185 RHEL-1183]


author: Lucas Zampieri <lzampier@redhat.com> [4.18.0-477.35.1.el8_8]
changelog:
  - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Florian Westphal) {CVE-2023-42753}
  - sched/fair: Block nohz tick_stop when cfs bandwidth in use (Phil Auld) [RHEL-12722]
  - sched, cgroup: Restore meaning to hierarchical_quota (Phil Auld) [RHEL-12722]
  - sched/fair: Hide unused init_cfs_bandwidth() stub (Phil Auld) [RHEL-12722]
  - redhat: fix bug/zjira sort in the changelog (Patrick Talbert)
  - blk-mq: enforce op-specific segment limits in blk_insert_cloned_request (Ming Lei) [RHEL-14723]
  - ipvs: queue delayed work to expire no destination connections if expire_nodest_conn=1 (Florian Westphal) [RHEL-12378]
  - powerpc/pseries/vas: Hold mmap_mutex after mmap lock during window close (Mamatha Inamdar) [2236703 2224883]


author: Lucas Zampieri <lzampier@redhat.com> [4.18.0-477.36.1.el8_8]
changelog:
  - cifs: sanitize paths in cifs_update_super_prepath. (Ronnie Sahlberg) [RHEL-9462 2182472]
  - cifs: Fix UAF in cifs_demultiplex_thread() (Scott Mayhew) [RHEL-15158 RHEL-15160] {CVE-2023-1192}
  - RDMA/restrack: Release MR restrack when delete (Kamal Heib) [2244423 2170076]


author: Lucas Zampieri <lzampier@redhat.com> [4.18.0-477.49.1.el8_8]
changelog:
  - mm/readahead: reintroduce legacy madvise_willneed behavior to force_page_cache_readahead (Rafael Aquini) [RHEL-24454 RHEL-22476]
  - ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet (Hangbin Liu) [RHEL-21643] {CVE-2023-6932}
  - drm/vmwgfx: Keep a gem reference to user bos in surfaces (Jocelyn Falempe) [RHEL-18941 RHEL-14510] {CVE-2023-5633}
  - drm/vmwgfx: Fix possible invalid drm gem put calls (Jocelyn Falempe) [RHEL-18941 RHEL-14510] {CVE-2023-5633}
  - drm/vmwgfx: Remove rcu locks from user resources (Jocelyn Falempe) [RHEL-18801 RHEL-18803 2133493 2133499] {CVE-2022-38457 CVE-2022-40133}
  - drm/vmwgfx: Remove vmwgfx_hashtab (Jocelyn Falempe) [RHEL-18801 RHEL-18803 2133493 2133499] {CVE-2022-38457 CVE-2022-40133}
  - drm/vmwgfx: Refactor ttm reference object hashtable to use linux/hashtable. (Jocelyn Falempe) [RHEL-18801 RHEL-18803 2133493 2133499] {CVE-2022-38457 CVE-2022-40133}
  - drm/vmwgfx: Refactor resource validation hashtable to use linux/hashtable implementation. (Jocelyn Falempe) [RHEL-18801 RHEL-18803 2133493 2133499] {CVE-2022-38457 CVE-2022-40133}
  - drm/vmwgfx: Remove ttm object hashtable (Jocelyn Falempe) [RHEL-18801 RHEL-18803 2133493 2133499] {CVE-2022-38457 CVE-2022-40133}
  - drm/vmwgfx: Refactor resource manager's hashtable to use linux/hashtable implementation. (Jocelyn Falempe) [RHEL-18801 RHEL-18803 2133493 2133499] {CVE-2022-38457 CVE-2022-40133}
  - drm/vmwgfx: clean up some error pointer checking (Jocelyn Falempe) [RHEL-18801 RHEL-18803 2133493 2133499] {CVE-2022-38457 CVE-2022-40133}
  - drm/vmwgfx: Fix shader stage validation (Jocelyn Falempe) [RHEL-20804 RHEL-3178] {CVE-2022-36402}
  - drm/vmwgfx: Do not drop the reference to the handle too soon (Jocelyn Falempe) [RHEL-18871 RHEL-18874 2218197 2218214] {CVE-2023-33952 CVE-2023-33951}
  - drm/vmwgfx: Stop accessing buffer objects which failed init (Jocelyn Falempe) [RHEL-18871 RHEL-18874 2218197 2218214] {CVE-2023-33952 CVE-2023-33951}
  - drm/atomic: Fix potential use-after-free in nonblocking commits (Jocelyn Falempe) [RHEL-23476 RHEL-22511] {CVE-2023-51043}
  - netfilter: nf_tables: reject QUEUE/DROP verdict parameters (Florian Westphal) [RHEL-24009 2262126] {CVE-2024-1086}


author: Rado Vrbovsky <rvrbovsk@redhat.com> [4.18.0-477.50.1.el8_8.g6d68]
changelog:
  - IB/IPoIB: Fix queue count inconsistency for PKEY child interfaces (Kamal Heib) [RHEL-19835 2170076]
  - IB/IPoIB: Fix legacy IPoIB due to wrong number of queues (Kamal Heib) [RHEL-19835 2170076]
  - drm/vmwgfx: Fix possible null pointer derefence with invalid contexts (Jocelyn Falempe) [RHEL-22765 RHEL-3179] {CVE-2022-38096}
  - s390/dasd: Use correct lock while counting channel queue length (Tobias Huschle) [RHEL-22643 2215889]
  - smb: client: fix OOB in receive_encrypted_standard() (Scott Mayhew) [RHEL-22076 RHEL-21685] {CVE-2024-0565}
  - powerpc: Don't select HAVE_IRQ_EXIT_ON_IRQ_STACK (Mamatha Inamdar) [RHEL-1122 2218348]
  - rbd: don't move requests to the running list on errors (Ilya Dryomov) [RHEL-24203 RHEL-21941]


author: Rado Vrbovsky <rvrbovsk@redhat.com> [4.18.0-477.51.1.el8_8]
changelog:
  - KVM: x86: Constrain guest-supported xfeatures only at KVM_GET_XSAVE{2} (Bandan Das) [RHEL-23062 RHEL-7558]
  - x86/fpu: Allow caller to constrain xfeatures when copying to uabi buffer (Bandan Das) [RHEL-23062 RHEL-7558]


author: Rado Vrbovsky <rvrbovsk@redhat.com> [4.18.0-477.52.1.el8_8]
changelog:
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} (Ricardo Robaina) [RHEL-18806 2139617] {CVE-2022-3640}
  - Bluetooth: L2CAP: Fix build errors in some archs (Ricardo Robaina) [RHEL-18806 2139617] {CVE-2022-3640}
  - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression (Ricardo Robaina) [RHEL-18806 2139617] {CVE-2022-3640}
  - Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del() (Ricardo Robaina) [RHEL-18806 2139617] {CVE-2022-3640}
  - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put (Ricardo Robaina) [RHEL-18806 2139617] {CVE-2022-3640}
  - ibmveth: Remove condition to recompute TCP header checksum. (Mamatha Inamdar) [RHEL-20821 RHEL-12553]


author: Rado Vrbovsky <rvrbovsk@redhat.com> [4.18.0-477.53.1.el8_8]
changelog:
  - ceph: don't let check_caps skip sending responses for revoke msgs (Xiubo Li) [RHEL-20908 RHEL-16412]
  - ceph: issue a cap release immediately if no cap exists (Xiubo Li) [RHEL-20908 RHEL-16412]
  - ceph: trigger to flush the buffer when making snapshot (Xiubo Li) [RHEL-20908 RHEL-16412]
  - ceph: force updating the msg pointer in non-split case (Xiubo Li) [RHEL-20908 RHEL-16412]
  - ceph: flush cap releases when the session is flushed (Xiubo Li) [RHEL-20908 RHEL-16412]
  - ceph: reorder fields in 'struct ceph_snapid_map' (Xiubo Li) [RHEL-20908 RHEL-16412]
  - ceph: voluntarily drop Xx caps for requests those touch parent mtime (Xiubo Li) [RHEL-20908 RHEL-16412]


author: Rado Vrbovsky <rvrbovsk@redhat.com> [4.18.0-477.54.1.el8_8]
changelog:
  - ext4: fix kernel BUG in 'ext4_write_inline_data_end()' (Carlos Maiolino) [RHEL-26330 RHEL-23386] {CVE-2021-33631}
  - smsc95xx: fix stalled rx after link change (Izabela Bakollari) [RHEL-25718 RHEL-22312]
  - dm-crypt, dm-verity: disable tasklets (Benjamin Marzinski) [RHEL-26100 RHEL-22232]
  - dm verity: initialize fec io before freeing it (Benjamin Marzinski) [RHEL-26100 RHEL-22232]
  - dm-verity: don't use blocking calls from tasklets (Benjamin Marzinski) [RHEL-26100 RHEL-22232]
  - dm crypt: avoid accessing uninitialized tasklet (Benjamin Marzinski) [RHEL-26100 2192702]
  - s390/qeth: Fix vipa deletion (Tobias Huschle) [RHEL-25810 RHEL-11194]


author: Rado Vrbovsky <rvrbovsk@redhat.com> [4.18.0-477.55.1.el8_8]
changelog:
  - Bluetooth: L2CAP: Fix attempting to access uninitialized memory (David Marlin) [RHEL-18808 2148408] {CVE-2022-42895}
  - serial: core: return early on unsupported ioctls (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - lib/hexdump: make print_hex_dump_bytes() a nop on !DEBUG builds (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: fix race condition in status line change on dead connections (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - Revert "tty: n_gsm: fix UAF in gsm_cleanup_mux" (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: fix UAF in gsm_cleanup_mux (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: add parameter negotiation support (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: add parameters used with parameter negotiation (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: introduce macro for minimal unit size (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: name the debug bits (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: introduce gsm_control_command() function (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: replace use of gsm_read_ea() with gsm_read_ea_val() (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: name gsm tty device minors (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: initialize more members at gsm_alloc_mux() (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: add sanity check for gsm->receive in gsm_receive_buf() (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: fix flow control handling in tx path (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: fix resource allocation order in gsm_activate_mux() (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: fix deadlock and link starvation in outgoing data path (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: fix race condition in gsmld_write() (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: fix non flow control frames during mux flow off (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: fix missing timer to handle stalled links (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: fix wrong queuing behavior in gsm_dlci_data_output() (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: fix tty registration before control channel open (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: fix user open not possible at responder until initiator open (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: Debug output allocation must use GFP_ATOMIC (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: Fix packet data hex dump output (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: fix buffer over-read in gsm_dlci_data() (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: fix sometimes uninitialized warning in gsm_dlci_modem_output() (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: fix software flow control handling (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: fix invalid use of MSC in advanced option (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: fix broken virtual tty handling (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: fix missing update of modem controls after DLCI open (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: fix reset fifo race condition (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: fix missing tty wakeup in convergence layer type 2 (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: fix wrong signal octets encoding in MSC (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: fix wrong command frame length field encoding (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: fix wrong command retry handling (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: fix missing explicit ldisc flush (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: fix wrong DLCI release order (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: fix insufficient txframe size (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: fix frame reception handling (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: fix wrong signal octet encoding in convergence layer type 2 (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: fix mux cleanup after unregister tty device (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: fix decoupled mux resource (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: fix restart handling via CLD command (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: fix deadlock in gsmtty_open() (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: fix wrong modem processing in convergence layer type 2 (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: fix wrong tty control line for flow control (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: fix NULL pointer access due to DLCI release (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: fix encoding of command/response bit (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: fix SW flow control encoding/handling (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - mxser: remove tty parameter from mxser_receive_chars_new() (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - mxser: don't throttle manually (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - mxser: make mxser_port::ldisc_stop_rx a bool (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: Don't ignore write return value in gsmld_output() (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: clean up indenting in gsm_queue() (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: Save dlci address open status when config requester (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: Modify gsmtty driver register method when config requester (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: Delete gsmtty open SABM frame when config requester (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: Modify CR,PF bit printk info when config requester (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: Modify CR,PF bit when config requester (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: stop using alloc_tty_driver (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: don't store semi-state into tty drivers (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - hvsi: don't panic on tty_register_driver failure (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - amiserial: switch rs_table to a single state (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - amiserial: expand "custom" (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - amiserial: use memset to zero serial_state (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - amiserial: remove serial_* strings (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - mxser: drop mxser_port::custom_divisor (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - mxser: drop mxser_port::baud_base (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - mxser: remove unused mxser_port::stop_rx (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - mxser: don't allocate MXSER_PORTS + 1 (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - mxser: remove cnt from mxser_receive_chars (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - mxser: remove MOXA_GETMSTATUS ioctl (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - mxser: remove MOXA_GETDATACOUNT ioctl (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - mxser: remove MOXA_CHKPORTENABLE ioctl (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - mxser: remove MOXA_ASPP_LSTATUS ioctl (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - mxser: remove MOXA_ASPP_MON and friends (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - mxser: remove MOXA_SET_BAUD_METHOD ioctl (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - mxser: remove MOXA_GET_MAJOR deprecated ioctl (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - mxser: drop unused MOXA_DIAGNOSE macro (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - mxser: drop UART_MCR_AFE and UART_LSR_SPECIAL defines (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - mxser: remove else from LSR bits checks (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - mxser: extract mxser_receive_chars_old (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - mxser: extract mxser_receive_chars_new (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - mxser: simplify mxser_interrupt and drop mxser_board::vector_mask (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - mxser: extract port ISR (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - mxser: cleanup LSR handling in mxser_receive_chars (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - mxser: remove nonsense from ISR (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - mxser: drop constant board::uart_type (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - mxser: introduce enum mxser_must_hwid (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - mxser: rename mxser_board::chip_flag to must_hwid (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - mxser: rename CheckIsMoxaMust to mxser_get_must_hwid (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - mxser: cleanup Gpci_uart_info struct (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - mxser: integrate mxser.h into .c (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - mxser: drop ISA support (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - n_gsm: use goto-failpaths in gsm_init (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: mxser: drop low-latency workaround (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: check error while registering tty devices (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: mxser: fix TIOCSSERIAL jiffies conversions (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm, remove duplicates of parameters (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: do not check tty_unregister_driver's return value (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: nozomi, remove init/exit messages (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty_port: drop last traces of low_latency (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: Demote obvious abuse of kernel-doc and supply other missing docss (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm, eliminate indirection for gsm->{output,error}() (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: Fix bogus i++ in gsm_data_kick (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: Remove unnecessary test in gsm_print_packet() (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: Fix waking up upper tty layer when room available (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: Fix SOF skipping (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: Improve debug output (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - n_gsm: switch constipated to bool (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - n_gsm: switch throttled to bool (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - n_gsm: switch dead to bool (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - n_gsm: introduce enum gsm_dlci_mode (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - n_gsm: introduce enum gsm_dlci_state (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - n_gsm: drop unneeded gsm_dlci->fifo field (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: Replace zero-length array with flexible-array member (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: avoid recursive locking with async port hangup (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: add helpers to convert mux-num to/from tty-base (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - docs: serial: move it to the driver-api (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - docs: serial: convert docs to ReST and rename to *.rst (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: Mark expected switch fall-throughs (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - n_gsm: Constify u8 and unsigned char usage (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty: n_gsm: Add copy_config() and gsm_config() to prepare for serdev (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - mxser: switch to ->[sg]et_serial() (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - amiserial: switch to ->[sg]et_serial() (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}
  - tty/serial_core: add ISO7816 infrastructure (Wander Lairson Costa) [RHEL-19953 RHEL-19955] {CVE-2023-6546}


author: Rado Vrbovsky <rvrbovsk@redhat.com> [4.18.0-477.56.1.el8_8]
changelog:
  - cgroup/rstat: Optimize cgroup_rstat_updated_list() (Waiman Long) [RHEL-30192 RHEL-18154]
  - cgroup/rstat: Reduce cpu_lock hold time in cgroup_rstat_flush_locked() (Waiman Long) [RHEL-30192 RHEL-18154]
  - cgroup/rstat: check updated_next only for root (Waiman Long) [RHEL-30192 2193485]
  - cgroup: rstat: explicitly put loop variant in while (Waiman Long) [RHEL-30192 2193485]
  - cgroup: use irqsave in cgroup_rstat_flush_locked(). (Waiman Long) [RHEL-30192 RHEL-18154]
  - cgroup: fix spelling mistakes (Waiman Long) [RHEL-30192 RHEL-18154]
  - x86/coco: Disable 32-bit emulation by default on TDX and SEV (Vitaly Kuznetsov) [RHEL-30263 RHEL-30265] {CVE-2024-25744}
  - x86: Make IA32_EMULATION boot time configurable (Vitaly Kuznetsov) [RHEL-30263 RHEL-30265] {CVE-2024-25744}
  - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-30263 RHEL-30265] {CVE-2024-25744}
  - x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-30263 RHEL-30265] {CVE-2024-25744}
  - x86/entry: Rename ignore_sysret() (Vitaly Kuznetsov) [RHEL-30263 RHEL-30265] {CVE-2024-25744}
  - x86/cpu: Don't write CSTAR MSR on Intel CPUs (Vitaly Kuznetsov) [RHEL-30263 RHEL-30265] {CVE-2024-25744}
  - x86: Introduce ia32_enabled() (Vitaly Kuznetsov) [RHEL-30263 RHEL-30265] {CVE-2024-25744}


author: Radomir Vrbovsky <rvrbovsk@redhat.com> [4.18.0-477.57.1.el8_8]
changelog:
  - nvmet-tcp: Fix the H2C expected PDU len calculation (Maurizio Lombardi) [RHEL-22298 RHEL-22635 RHEL-22640 RHEL-19167] {CVE-2023-6535 CVE-2023-6356 CVE-2023-6536}
  - nvmet-tcp: remove boilerplate code (Maurizio Lombardi) [RHEL-22298 RHEL-22635 RHEL-22640 RHEL-19167] {CVE-2023-6535 CVE-2023-6356 CVE-2023-6536}
  - nvmet-tcp: add bounds check on Transfer Tag (Maurizio Lombardi) [RHEL-22298 RHEL-22635 RHEL-22640 RHEL-19167] {CVE-2023-6535 CVE-2023-6356 CVE-2023-6536}
  - nvmet-tcp: fix a crash in nvmet_req_complete() (Maurizio Lombardi) [RHEL-22298 RHEL-22635 RHEL-22640 RHEL-19167] {CVE-2023-6535 CVE-2023-6356 CVE-2023-6536}
  - nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length (Maurizio Lombardi) [RHEL-22298 RHEL-22635 RHEL-22640 RHEL-19167] {CVE-2023-6535 CVE-2023-6356 CVE-2023-6536}
  - Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d" (Nigel Croxon) [RHEL-27235 RHEL-22698]
  - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-32977 RHEL-30080] {CVE-2024-26642}
  - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() (Ricardo Robaina) [RHEL-18820 2174409] {CVE-2023-1118}
  - SUNRPC: Fix UAF in svc_tcp_listen_data_ready() (Jay Shin) [RHEL-32174 2218539]


author: Patrick Talbert <ptalbert@redhat.com> [4.18.0-477.58.1.el8_8]
changelog:
  - sched/membarrier: reduce the ability to hammer on sys_membarrier (Wander Lairson Costa) [RHEL-26388 RHEL-23430] {CVE-2024-26602}
  - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30037 RHEL-30040] {CVE-2024-25742 CVE-2024-25743}
  - crypto: rsa - add a check for allocation failure (Vladis Dronov) [RHEL-36693 RHEL-35361]
  - crypto: rsa - allow only odd e and restrict value in FIPS mode (Vladis Dronov) [RHEL-36693 RHEL-35361]
  - KEYS: use kfree_sensitive with key (Vladis Dronov) [RHEL-36693 RHEL-35361]
  - lib/mpi: Extend the MPI library (only mpi_*_bit() part) (Vladis Dronov) [RHEL-36693 RHEL-35361]
  - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu (David Arcari) [RHEL-32733 RHEL-32516]
  - ceph: pass ino# instead of old_dentry if it's disconnected (Xiubo Li) [RHEL-35284 RHEL-32870]
  - x86/elf: Fix regression with process core dumps (Vitaly Kuznetsov) [RHEL-33448]
  - net: bridge: use DEV_STATS_INC() (Ivan Vecera) [RHEL-31414 RHEL-27989] {CVE-2023-52578}
  - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Ivan Vecera) [RHEL-31414 RHEL-27989] {CVE-2023-52578}
  - net: add atomic_long_t to net_device_stats fields (Ivan Vecera) [RHEL-31414 RHEL-27989] {CVE-2023-52578}
  - xfs: run blockgc on freeze to avoid inode inactivation deadlock (Brian Foster) [RHEL-34523 RHEL-11344]
  - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Ken Cox) [RHEL-34063 RHEL-27316] {CVE-2021-47013}
  - mlxsw: spectrum_acl_tcam: Fix stack corruption (Ivan Vecera) [RHEL-29183 RHEL-26462] {CVE-2024-26586}
  - x86/speculation: Allow enabling STIBP with legacy IBRS (Ricardo Robaina) [RHEL-18839 2187268] {CVE-2023-1998}


author: David Howells <dhowells@redhat.com> - 1.5.10-1
changelog:
  - Include sys/types.h in keyutils.h.
  - The dns resolver needs limits.h.
  - Overhaul of all manual pages.
  - Some manual pages moved to Linux man-pages project.
  - Add Diffie-Helman keyctl function.


author: Julien Rische <jrische@redhat.com> - 1.18.2-21
changelog:
  - Backport fix of memory use after free during libkrad cleanup
  - Backport support for larger RADIUS attributes in libkrad
  - Resolves: rhbz#2103125


author: Lukas Czerner <lczerner@redhat.com> 1.45.4-1
changelog:
  - Rebase to the release 1.45.4 (#1783777)
  - provide rhel6/7 compatible fs_type in mke2fs.conf (#1780279)
  - fix crafted ext4 partition leads to out-of-bounds write (#1768709)
  - include note about supported rhel8 features and options (#1788573)


author: Lukas Czerner <lczerner@redhat.com> 1.45.6-5
changelog:
  - Update e2fsprogs with upstream fixes and improvements (#2083621)
  - Fix out-of-bounds read/write via crafter filesystem (#2073548)


author: Petr Lautrbach <plautrba@redhat.com> - 2.9-2.1
changelog:
  - Use Python distutils to install SELinux python bindings (#1719771)
  - Move  sefcontext_compile to -utils package (#1612518)


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-6
changelog:
  - Describe fcontext regular expressions (#1904059)
  - Strip spaces before values in config (#2012145)


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-5
changelog:
  - cil: Create new keep field for type attribute sets
  - build: follow standard semantics for DESTDIR and PREFIX
  - cil: show an error when cil_expr_to_string() fails


author: Petr Lautrbach <plautrba@redhat.com> - 2.7-6
changelog:
  - Prevent freeing unitialized value in ibendport handling
  - Add support for the SCTP portcon keyword
  - Export sepol_polcap_getnum/name functions


author: Vit Mojzis <vmojzis@redhat.com> - 2.9-3
changelog:
  - cil: Fix out-of-bound read of file context pattern ending with "\"
  - cil: Destroy classperms list when resetting classpermission (#1983517)
  - cil: Destroy classperm list when resetting map perms (#1983521)
  - cil: cil_reset_classperms_set() should not reset classpermission (#1983525)
  - cil: Set class field to NULL when resetting struct cil_classperms
  - cil: More strict verification of constraint leaf expressions
  - cil: Exit with an error if declaration name is a reserved word
  - cil: Allow permission expressions when using map classes
  - cil: Reorder checks for invalid rules when building AST
  - cil: Cleanup build AST helper functions
  - cil: Create new first child helper function for building AST
  - cil: Remove unused field from struct cil_args_resolve
  - cil: Destroy disabled optional blocks after pass is complete
  - cil: Check if name is a macro parameter first
  - cil: fix NULL pointer dereference in __cil_insert_name
  - cil: Report disabling an optional block only at high verbose levels
  - cil: Use AST to track blocks and optionals when resolving
  - cil: Reorder checks for invalid rules when resolving AST
  - cil: Sync checks for invalid rules in booleanifs
  - cil: Check for statements not allowed in optional blocks (#1983530)


author: Björn Esser <besser82@fedoraproject.org> - 4.0.1-5
changelog:
  - Add patch to update to recent development branch
  - Re-enable SUNMD5 support as it is BSD licensed now
  - Build compatibility symbols for glibc only
  - Skip failing testsuite once


author: Jarod Wilson <jarod@redhat.com> - 20220713-109.gitdfa29317
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Include even newer qed firmware update (rhbz 2040269)


author: Jarod Wilson <jarod@redhat.com> - 20220726-110.git150864a4
changelog:
  - Omit unused password-protected vxge firmware files from package (rhbz 2108051)
  - Pick up latest AMD GPU firmwares


author: Lucas Zampieri <lzampier@redhat.com> - 20221102-111.git8bb75626
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - amdgpu firmware update to fix certain "multiple monitor scenarios" (rhbz 2130707)


author: Lucas Zampieri <lzampier@redhat.com> - 20230111-112.gita1ad1d5b
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Navi33 dGPU firmware (rhbz 2047480)
  - Navi31 dGPU firmware (rhbz 2047483)


author: Lucas Zampieri <lzampier@redhat.com> - 20230217-113.git83f1d778
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Qualcomm Wi-Fi - Disconnecting power cable during suspend wakes up the laptop (rhbz 2169012)


author: Patrick Talbert <ptalbert@redhat.com> - 20230404-114.git2e92a49f
changelog:
  - Update to latest upstream linux-firmware image for assorted updates
  - Intel QAT Update - firmware for QAT (rhbz 2030316)


author: Patsy Griffin Franklin <pfrankli@redhat.com> 1:4.2.1-7
changelog:
  - Fix build failure caused by automake versioning differences related
    to the glob changes. (#1589769)
  - Fix testing failure due to Perl changes related to expanding paths.


author: Sahana Prasad <sahana@redhat.com> - 1:1.1.1k-4
changelog:
  - Fixes bugs in s390x AES code.
  - Uses the first detected address family if IPv6 is not available
  - Reverts the changes in https://github.com/openssl/openssl/pull/13305
    as it introduces a regression if server has a DSA key pair, the handshake fails
    when the protocol is not explicitly set to TLS 1.2. However, if the patch is reverted,
    it has an effect on the "ssl_reject_handshake" feature in nginx. Although, this feature
    will continue to work, TLS 1.3 protocol becomes unavailable/disabled. This is already
    known - https://trac.nginx.org/nginx/ticket/2071#comment:1
    As per https://github.com/openssl/openssl/issues/16075#issuecomment-879939938, nginx
    could early callback instead of servername callback.
  - Resolves: rhbz#1978214
  - Related: rhbz#1934534


author: Sahana Prasad <sahana@redhat.com> - 1:1.1.1k-5
changelog:
  - Fixes CVE-2021-3712 openssl: Read buffer overruns processing ASN.1 strings
  - Resolves: rhbz#2005402


author: Clemens Lang <cllang@redhat.com> - 1:1.1.1k-6
changelog:
  - Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  - Resolves: rhbz#2067146


author: Clemens Lang <cllang@redhat.com> - 1:1.1.1k-7
changelog:
  - Fix CVE-2022-2097: AES OCB fails to encrypt some bytes on 32-bit x86
    Resolves: CVE-2022-2097
  - Update expired certificates used in the testsuite
    Resolves: rhbz#2092462
  - Fix CVE-2022-1292: openssl: c_rehash script allows command injection
    Resolves: rhbz#2090372
  - Fix CVE-2022-2068: the c_rehash script allows command injection
    Resolves: rhbz#2098279


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:1.1.1k-9
changelog:
  - Fixed Timing Oracle in RSA Decryption
    Resolves: CVE-2022-4304
  - Fixed Double free after calling PEM_read_bio_ex
    Resolves: CVE-2022-4450
  - Fixed Use-after-free following BIO_new_NDEF
    Resolves: CVE-2023-0215
  - Fixed X.400 address type confusion in X.509 GeneralName
    Resolves: CVE-2023-0286


author: Clemens Lang <cllang@redhat.com> - 1:1.1.1k-10
changelog:
  - Fix CVE-2023-3446: Excessive time spent checking DH keys and parameters
    Resolves: RHEL-14244
  - Fix CVE-2023-3817: Excessive time spent checking DH q parameter value
    Resolves: RHEL-14238


author: Clemens Lang <cllang@redhat.com> - 1:1.1.1k-11
changelog:
  - Fix CVE-2023-5678: Generating excessively long X9.42 DH keys or checking
    excessively long X9.42 DH keys or parameters may be very slow
    Resolves: RHEL-16537


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:1.1.1k-12
changelog:
  - Backport implicit rejection mechanism for RSA PKCS#1 v1.5 to RHEL-8 series
    (a proper fix for CVE-2020-25659)
    Resolves: RHEL-17695


author: Petr Pisar <ppisar@redhat.com> - 10.31-6
changelog:
  - Fix global search/replace in pcre2test and pcre2_substitute() when the pattern
    matches an empty string, but never at the starting offset


author: Petr Pisar <ppisar@redhat.com> - 10.31-7
changelog:
  - Fix checking that a lookbehind assertion has a fixed length if the
    lookbehind assertion is used inside a lookahead assertion
  - Fix parsing VERSION conditions


author: Petr Pisar <ppisar@redhat.com> - 10.31-8
changelog:
  - Fix backtracking atomic groups when they are not separated by something with
    a backtracking point


author: Petr Pisar <ppisar@redhat.com> - 10.31-9
changelog:
  - Recognize all Unicode space characters with /x option in a pattern
    (bug #1617960)
  - Fix changing dynamic options (bug #1617960)
  - Fix autopossessifying a repeated negative class with no characters less than
    256 that is followed by a positive class with only characters less than 255,
    (bug #1617960)
  - Fix autopossessifying a repeated negative class with no characters less than
    256 that is followed by a positive class with only characters less than 256,
    (bug #1617960)


author: Petr Pisar <ppisar@redhat.com> - 10.32-1
changelog:
  - 10.32 bump (bug #1628200)
  - Fix a subject buffer overread in JIT when UTF is disabled and \X or \R has
    a greater than 1 fixed quantifier (bug #1628200)
  - Fix matching a zero-repeated subroutine call at a start of a pattern
    (bug #1628200)
  - Fix heap limit checking overflow in pcre2_dfa_match() (bug #1628200)


author: Ondrej Dubaj <odubaj@redhat.com> - 1.2.11-13
changelog:
  - Added -DDFLTCC parameter to configure to enable 
  - Z hardware-accelerated deflate for s390x architectures (#1659433)


author: Ondrej Dubaj <odubaj@redhat.com> - 1.2.11-16
changelog:
  - Permit a deflateParams() parameter change
  - Another fix for Z hardware-accelerated deflate for s390x architectures
  - according to previous change by upstream


author: Ondrej Dubaj <odubaj@redhat.com> - 1.2.11-17
changelog:
  - Fixed DFLTCC compression level switching issues (#1875492)
  - Enabled HW compression for compression levels 1 through 6 (#1847438)
  - Fixed inflateSyncPoint() bad return value on z15 (#1888930)


author: Lukas Javorsky <ljavorsk@redhat.com> - 1.2.11-19
changelog:
  - Apply IBM patch for compressBound() function
  - Source from https://github.com/madler/zlib/issues/410#issuecomment-947212824
  - Resolves: #2056900


author: Matej Mužila <mmuzila@redhat.com> - 1.2.11-20
changelog:
  - Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c
  - Resolves: CVE-2022-37434


