# changelog

author: pmonreal@suse.com
changelog:
  - Update to git version 20210118
    * Output sigalgs required by nss >=3.59
    * Bump Python requirement to 3.6
    * Kerberos 5: Fix policy generator to account for macs
    * Add AES-192 support (non-TLS scenarios)
    * Add documentation of the --check option


author: pmonreal@suse.com
changelog:
  - Update to git version 20210127
    * Bump Python requirement to 3.6
    * Output sigalgs required by nss >=3.59
    * Do not require bind during build
    * Break build cycles with openssl and gnutls


author: dimstar@opensuse.org
changelog:
  - Convert to use a proper git source _service:
    + To update, one just needs to update the commit/revision in the
      _service file and run `osc service dr`.
    + The version of the package is defined by the commit date of the
      revision, followed by the abbreviated git hash (The same
      revision used before results thus in a downgrade to 20210118,
      but as this is a alltime new package, this is acceptable.


author: dimstar@opensuse.org
changelog:
  - Use tar_scm service, not obs_scm: With crypto-policies entering
    Ring0 (distro bootstrap) we want to be sure to keep the buildtime
    deps as low as possible.
  - Add python3-base BuildRequires: previously, OBS' tar service
    pulled this in for us.


author: pmonreal@suse.com
changelog:
  - Update to version 20210213.5c710c0: [bsc#1180938]
    * setup_directories(): perform safer creation of directories
    * save_config(): avoid re-opening output file for each iteration
    * save_config(): break after first match to avoid unnecessary stat() calls
    * CryptoPolicy.parse(): actually stop parsing line on syntax error
    * ProfileConfig.parse_string(): correctly extended subpolicies
    * Exclude RC4 from LEGACY
    * Introduce rc4_md5_in_krb5 to narrow AD_SUPPORT
    * code style: fix 'not in' membership testing
    * pylintrc: tighten up a bit
    * formatting: avoid long lines
    * formatting: use f-strings instead of format()
    * formatting: reformat all python code with autopep8
    * nss: postponing the version check again, to 3.61
    * Revert "Unfortunately we have to keep ignoring the openssh check for sk-"


author: pmonreal@suse.com
changelog:
  - Disable DTLS0.9 protocol in GnuTLS DEFAULT policy. [bsc#1180938]
    * The minimum DTLS protocol version in the DEFAULT and FUTURE
      policies is DTLS1.2.
    * Fixed upstream: 05203d21f6d0ea9bbdb351e4600f1e273720bb8e


author: pmonreal@suse.com
changelog:
  - Update to version 20210225.05203d2:
    * Disable DTLS0.9 protocol in the DEFAULT policy.
    * policies/FIPS: insignificant reformatting
    * policygenerators/libssh: respect ssh_certs
    * policies/modules/OSPP: tighten to follow RHEL 8
    * crypto-policies(7): drop not-reenableable comment
    * follow up on disabling RC4


author: pmonreal@suse.com
changelog:
  - Update to version 20210917.c9d86d1:
    * openssl: fix disabling ChaCha20
    * pacify pylint 2.11: use format strings
    * pacify pylint 2.11: specify explicit encoding
    * fix minor things found by new pylint
    * update-crypto-policies: --check against regenerated
    * update-crypto-policies: fix --check's walking order
    * policygenerators/gnutls: revert disabling DTLS0.9...
    * policygenerators/java: add javasystem backend
    * LEGACY: bump 1023 key size to 1024
    * cryptopolicies: fix 'and' in deprecation warnings
    * *ssh: condition ecdh-sha2-nistp384 on SECP384R1
    * nss: hopefully the last fix for nss sigalgs check
    * cryptopolicies: Python 3.10 compatibility
    * nss: postponing check + testing at least something
    * Rename 'policy modules' to 'subpolicies'
    * validation.rules: fix a missing word in error
    * cryptopolicies: raise errors right after warnings
    * update-crypto-policies: capitalize warnings
    * cryptopolicies: syntax-precheck scope errors
    * .gitlab-ci.yml, Makefile: enable codespell
    * all: fix several typos
    * docs: don't leave zero TLS/DTLS protocols on
    * openssl: separate TLS/DTLS MinProtocol/MaxProtocol
    * alg_lists: order protocols new-to-old for consistency
    * alg_lists: max_{d,}tls_version
    * update-crypto-policies: fix pregenerated + local.d
    * openssh: allow validation with pre-8.5
    * .gitlab-ci.yml: run commit-range against upstream
    * openssh: Use the new name for PubkeyAcceptedKeyTypes
    * sha1_in_dnssec: deprecate
    * .gitlab-ci.yml: test commit ranges
    * FIPS:OSPP: sign = -*-SHA2-224
    * scoped policies: documentation update
    * scoped policies: use new features to the fullest...
    * scoped policies: rewrite + minimal policy changes
    * scoped policies: rewrite preparations
    * nss: postponing the version check again, to 3.64
  - Remove patches fixed upstream: crypto-policies-typos.patch
  - Rebase: crypto-policies-test_supported_modules_only.patch
  - Merge crypto-policies-asciidoc.patch into
      crypto-policies-no-build-manpages.patch


author: pmonreal@suse.com
changelog:
  - Remove the scripts and documentation regarding
    fips-finish-install and test-fips-setup
    * Add crypto-policies-FIPS.patch


author: pmonreal@suse.com
changelog:
  - Update the update-crypto-policies(8) man pages and README.SUSE
    to mention the supported back-end policies. [bsc#1209998]


author: pmonreal@suse.com
changelog:
  - FIPS: Enable to set the kernel FIPS mode with fips-mode-setup
    and fips-finish-install commands, add also the man pages.
    * Adapt the fips-mode-setup script for SLE [jsc#PED-5041]
    * Rebase crypto-policies-FIPS.patch
    * Simplify the man pages creation:
    - Rebase crypto-policies-no-build-manpages.patch
    - Add crypto-policies-asciidoc.patch


author: pmonreal@suse.com
changelog:
  - FIPS: Adapt the fips-mode-setup script to use the pbl command
    from the perl-Bootloader package to replace grubby. Add a note
    for transactional systems. Ship the man 8 pages for
    fips-mode-setup and fips-finish-install [jsc#PED-5041].
    * Rebase crypto-policies-FIPS.patch


author: pmonreal@suse.com
changelog:
  - Make the supported versions change in the update-crypto-policies(8)
    man page persistent [bsc#1209998].
    * Add patch crypto-policies-supported.patch
    * Rebase patches:
    - crypto-policies-asciidoc.patch
    - crypto-policies-no-build-manpages.patch


author: fstrba@suse.com
changelog:
  - Update to 1.8.10:
    * Security fixes:
    - Increase dbus-daemon's RLIMIT_NOFILE rlimit to 65536
      so that CVE-2014-3636 part A cannot exhaust the system bus'
      file descriptors, completing the incomplete fix in 1.8.8.
      (CVE-2014-7824, fdo#85105; Simon McVittie, Alban Crequy)


author: fstrba@suse.com
changelog:
  - Update to 1.8.12:
    * Fixes:
    - Partially revert the CVE-2014-3639 patch by increasing the
      default authentication timeout on the system bus from 5
      seconds back to 30 seconds, since this has been reported to
      cause boot regressions for some users, mostly with parallel
      boot (systemd) on slower hardware.
      On fast systems where local users are considered particularly
      hostile, administrators can return to the 5 second timeout
      (or any other value in milliseconds) by saving this as
      /etc/dbus-1/system-local.conf:
      <busconfig>
      <limit name="auth_timeout">5000</limit>
      </busconfig>
      (fdo#86431, Simon McVittie)
    - Add a message in syslog/the Journal when the auth_timeout is
      exceeded (fdo#86431, Simon McVittie)
    - Send back an AccessDenied error if the addressed recipient is
      not allowed to receive a message (and in builds with
      assertions enabled, don't assert under the same conditions).
      (fdo#86194, Jacek Bukarewicz)


author: fstrba@suse.com
changelog:
  - Update to 1.8.14
    * Security hardening:
    - Do not allow calls to UpdateActivationEnvironment from uids
      other than the uid of the dbus-daemon. If a system service
      installs unsafe security policy rules that allow arbitrary
      method calls (such as CVE-2014-8148) then this prevents
      memory consumption and possible privilege escalation via
      UpdateActivationEnvironment.
      We believe that in practice, privilege escalation here is
      avoided by dbus-daemon-launch-helper sanitizing its
      environment; but it seems better to be safe.
    - Do not allow calls to UpdateActivationEnvironment or the
      Stats interface on object paths other than
      /org/freedesktop/DBus. Some system services install unsafe
      security policy rules that allow arbitrary method calls to
      any destination, method and interface with a specified object
      path; while less bad than allowing arbitrary method calls,
      these security policies are still harmful, since dbus-daemon
      normally offers the same API on all object paths and other
      system services might behave similarly.
    * Other fixes:
    - Add missing initialization so GetExtendedTcpTable doesn't
      crash on Windows Vista SP0 (fdo#77008, Ilya A. Tkachenko)


author: fstrba@suse.com
changelog:
  - Update to 1.8.16:
    * Security fixes:
    - Do not allow non-uid-0 processes to send forged
      ActivationFailure messages. On Linux systems with systemd
      activation, this would allow a local denial of service:
      unprivileged processes could flood the bus with these forged
      messages, winning the race with the actual service activation
      and causing an error reply to be sent back when service
      auto-activation was requested. This does not prevent the real
      service from being started, so it only works while the real
      service is not running. (CVE-2015-0245, fdo#88811, bnc#916343;
      Simon McVittie)
    * Other fixes:
    - fix a Windows build failure (fdo#88009, Ralf Habacker)
    - on Windows, allow up to 8K connections to the dbus-daemon
      instead of the previous 64, completing a previous fix which
      only worked under Autotools (fdo#71297, Ralf Habacker)


author: fstrba@suse.com
changelog:
  - Update to 1.8.18:
    * Security hardening:
    - On Unix platforms, change the default configuration for the
      session bus to only allow EXTERNAL authentication (secure
      kernel-mediated credentials-passing), as was already done for
      the system bus.
      This avoids falling back to DBUS_COOKIE_SHA1, which relies on
      strongly unpredictable pseudo-random numbers; under certain
      circumstances (/dev/urandom unreadable or malloc() returns
      NULL), dbus could fall back to using rand(), which does not
      have the desired unpredictability. The fallback to rand() has
      not been changed in this stable-branch since the necessary
      code changes for correct error-handling are rather intrusive.
      If you are using D-Bus over the (unencrypted!) tcp: or
      nonce-tcp: transport, in conjunction with DBUS_COOKIE_SHA1
      and a shared home directory using NFS or similar, you will
      need to reconfigure the session bus to accept DBUS_COOKIE_SHA1
      by commenting out the <auth> element. This configuration is
      not recommended. (bsc#931066, fdo#90414, Simon McVittie)
    * Other fixes:
    - Add locking to DBusCounter's reference count and notify
      function (fdo#89297, Adrian Szyndela)
    - Ensure that DBusTransport's reference count is protected by
      the corresponding DBusConnection's lock (fdo#90312,
      Adrian Szyndela)
    - On Windows, listen on the same port for IPv4 and IPv6
      (previously broken by an endianness mistake), and fix a
      failure to bind TCP sockets on approximately 1 attempt in 256
      (fdo#87999, Ralf Habacker)
    - Correctly release DBusServer mutex before early-return if we
      run out of memory while copying authentication mechanisms
      (fdo#90021, Ralf Habacker)
    - Correctly initialize all fields of DBusTypeReader (fdo#90021,
      Ralf Habacker, Simon McVittie)
    - Fix some missing \n in verbose (debug log) messages
      (fdo#90021, Ralf Habacker)
    - Clean up some memory leaks in test code (fdo#90021,
      Ralf Habacker)


author: hrvoje.senjan@gmail.com
changelog:
  - Move common-begin sections around to make pre_checkin work again
  - Unconditionally build with systemd features, there are no cycles
    now, systemd no longer buildrequires dbus-1-devel


author: fstrba@suse.com
changelog:
  - Account for openSUSE:Leap in the conditional for chosing right
    local state directories (boo#941352)


author: fstrba@suse.com
changelog:
  - Update to 1.8.20:
    * Fixes:
    - Fix a memory leak when GetConnectionCredentials() succeeds
      (fdo#91008, Jacek Bukarewicz)
    - Ensure that dbus-monitor does not reply to messages intended
      for others (fdo#90952, Simon McVittie)


author: fstrba@suse.com
changelog:
  - Update to 1.10.4
    * Changes between 1.10.2 and 1.10.4
    - Enhancements:
      + GetConnectionCredentials, GetConnectionUnixUser and
      GetConnectionUnixProcessID with argument
      "org.freedesktop.DBus" will now return details of the
      dbus-daemon itself. This is required to be able to call
      SetEnvironment on systemd. (fdo#92857, Jan Alexander
      Steffens)
    - Fixes:
      + Make UpdateActivationEnvironment always fail with
      AccessDenied  on the system bus. Previously, it was
      possible to configure it so root could call it, but the
      environment variables were not actually used, because the
      launch helper would discard them. (fdo#92857, Jan Alexander
      Steffens)
      + On Unix with --systemd-activation on a user bus, make
      UpdateActivationEnvironment pass on its arguments to
      systemd's SetEnvironment method, solving inconsistency
      between the environments used for traditional activation
      and systemd user-service activation. (fdo#92857, Jan
      Alexander Steffens)
      + On Windows, don't crash if <syslog/> or --syslog is used
      (fdo#92538, Ralf Habacker)
      + On Windows, fix a memory leak when setting a DBusError from
      a Windows error (fdo#92721, Ralf Habacker)
      + On Windows, don't go into infinite recursion if we abort the
      process with backtraces enabled (fdo#92721, Ralf Habacker)
      + Fix various failing tests, variously on Windows and
      cross-platform:
      . don't test system.conf features (users, groups) that only
      make sense on the system bus, which is not supported on
      Windows
      . don't call _dbus_warn() when we skip a test, since it is
      fatal
      . fix computation of expected <standard_session_servicedirs/>
      . when running TAP tests, translate newlines to Unix format,
      fixing cross-compiled tests under Wine on Linux
      . don't stress-test refcounting under Wine, where it's
      really slow
      . stop assuming that a message looped-back to the test will
      be received immediately
      . skip some system bus tests on Windows since they make no
      sense there (fdo#92538, fdo#92721; Ralf Habacker, Simon
      McVittie)
    * Changes between 1.10.0 and 1.10.2
    - Fixes:
      + Correct error handling for activation: if there are multiple
      attempts to activate the same service and it fails
      immediately, the first attempt would get the correct reply,
      but the rest would time out. We now send the same error
      reply to each attempt. (fdo#92200, Simon McVittie)
      + If BecomeMonitor is called with a syntactically invalid
      match rule, don't crash with an assertion failure, fixing a
      regression in 1.9.10. This was not exploitable as a denial
      of service, because the check for a privileged user is done
      first. (fdo#92298, Simon McVittie)
      + On Linux with --enable-user-session, add the bus address to
      the environment of systemd services for better backwards
      compatibility (fdo#92612, Jan Alexander Steffens)
      + On Windows, fix the logic for replacing the installation
      prefix in service files' Exec lines (fdo#83539; Milan Crha,
      Simon McVittie)
      + On Windows, if installed in the conventional layout with
      ${prefix}/etc and ${prefix}/share, use relative paths
      between bus configuration files to allow the tree to be
      relocated (fdo#92028, Simon McVittie)
      + Make more of the regression tests pass in Windows builds
      (fdo#92538, Simon McVittie)
    * Summary of major changes since 1.8.0:
    - The basic setup for the well-known system and session buses is
      now done in read-only files in ${datadir} (normally /usr/share).
    - AppArmor integration has been merged, with features similar to
      the pre-existing SELinux integration. It is mostly compatible
      with the patches previously shipped by Ubuntu, with one
      significant change: Ubuntu's GetConnectionAppArmorSecurityContext
      method has been superseded by GetConnectionCredentials and was
      not included.
    - The --enable-user-session configure option can be enabled
      by OS integrators intending to use systemd to provide a
      session bus per user (in effect, treating all concurrent
      graphical and non-graphical login sessions as one large session).
    - The new listenable address mode "unix:runtime=yes" listens on
      $XDG_RUNTIME_DIR/bus, the same AF_UNIX socket used by the
      systemd user session. libdbus and "dbus-launch --autolaunch"
      will connect to this address by default. GLib >= 2.45.3 and
      sd-bus >= 209 have a matching default.
    - All executables are now dynamically linked to libdbus-1.
      Previously, some executables, most notably dbus-daemon, were
      statically linked to a specially-compiled variant of libdbus.
      This results in various private functions in the _dbus
      namespace being exposed by the shared library. These are not
      API, and must not be used outside the dbus source tree.
    - On platforms with ELF symbol versioning, all public symbols
      are versioned LIBDBUS_1_3.
    * New bus APIs:
    - org.freedesktop.DBus.GetConnectionCredentials returns
      LinuxSecurityLabel where supported
    - org.freedesktop.DBus.Monitoring interface (privileged)
      . BecomeMonitor method supersedes match rules with eavesdrop=true,
      which are now deprecated
    - org.freedesktop.DBus.Stats interface (semi-privileged)
      . now enabled by default
      . new GetAllMatchRules method
    - org.freedesktop.DBus.Verbose interface (not normally compiled)
      . toggles the effect of DBUS_VERBOSE
    * New executables:
    - dbus-test-tool
    - dbus-update-activation-environment
    * New optional dependencies:
    - The systemd: pseudo-transport requires libsystemd or libsd-daemon
    - Complete documentation requires Ducktype and yelp-tools
    - Full test coverage requires GLib 2.36 and PyGI
    - AppArmor integration requires libapparmor and optionally libaudit
    * Dependencies removed:
    - dbus-glib


author: fstrba@suse.com
changelog:
  - Update to 1.10.6
    * Fixes:
    - On Unix when running tests as root, don't assert that root
      and the dbus-daemon user can still call
      UpdateActivationEnvironment; assert that those privileged
      users can call BecomeMonitor instead (fdo#93036, Simon
      McVittie)
    - On Windows, fix a memory leak in the autolaunch transport
      (fdo#92899, Simon McVittie)
    - On Windows Autotools builds, don't run tests that rely on
      dbus-run-session and other Unix-specifics (fdo#92899, Simon
      McVittie)


author: fstrba@suse.com
changelog:
  - Update to 1.10.8
    * Fixes:
      + Enable "large file support" on systems where it exists:
      dbus-daemon is not expected to open large files, but it might
      need to stat files that happen to have large inode numbers
      (fdo#93545, Hongxu Jia)
      + Eliminate padding inside DBusMessageIter on 64-bit platforms,
      which might result in a pedantic C compiler not copying the
      entire contents of a DBusMessageIter; statically assert that
      this is not an ABI change in practice (fdo#94136, Simon
      McVittie)
      + Document dbus-test-tool echo --sleep-ms=N instead of
      incorrect --sleep=N (fdo#94244, Dmitri Iouchtchenko)
      + Correctly report test failures in C tests from run-test.sh
      (fdo#93379; amit tewari, Simon McVittie)
      + When tests are enabled, run all the marshal-validate tests,
      not just the even-numbered ones (fdo#93908, Nick Lewycky)
      + Correct the expected error from one marshal-validate test,
      which was previously not run due to the above bug(fdo#93908,
      Simon McVittie)


author: fstrba@suse.com
changelog:
  - Update to 1.10.10
    * Fixes:
      + On Linux, when dbus-daemon is run with reduced susceptibility
      to the OOM killer (typically via systemd), do not let child
      processes inherit that setting (fdo#32851;
      Kimmo Hämäläinen, WaLyong Cho)
      + Output valid shell syntax in ~/.dbus/session-bus/ if the bus
      address contains a semicolon (fdo#94746, Thiago Macieira)
      + Fix memory leaks and thread safety in subprocess starting on
      Windows (fdo#95191, Ralf Habacker)
      + Do not require systemd to have a service file if using it for
      activation (fdo#93194; Simon McVittie; backport from 1.11.0)
      + Stop test-dbus-daemon incorrectly failing on platforms that
      cannot discover the process ID of clients (fdo#96653,
      ?????? ?????????)
      + In tests that exercise correct handling of crashing D-Bus
      services, suppress Windows crash handler (fdo#95155;
      Yiyang Fei, Ralf Habacker)
      + Explicitly check for stdint.h (Ioan-Adrian Ratiu)
      + update-activation-environment: produce better diagnostics on
      error (fdo#96653, Simon McVittie)
      + Don't fail the build with an unused const variable warning
      under gcc 6 (fdo#97282; Thomas Zimmermann, Simon McVittie)
      + Merge dbus-1.10-ci branch, containing backports from 1.11.0
      in build/test code to support continuous integration
      (fdo#93194, Simon McVittie)
    - Avoid -Wunused-label when compiling with libselinux but no
      libaudit
    - In development builds, allow OOM tests to be disabled as
      documented
    - Accept and ignore the --tap argument in all "embedded
      tests", and run all automated tests with that argument for
      better diagnostics
    - Fix the systemd activation test under CMake by installing
      the required files
    - In Automake, fix shell syntax for installcheck-local with
      no DESTDIR
    - In Automake, don't try to run manual tests in installcheck
    - In CMake, don't run manual-tcp test as an automated test
    - Add travis-ci.org build machinery


author: fstrba@suse.com
changelog:
  - Update to 1.10.12
    * Security fixes:
      + Do not treat ActivationFailure message received from
      root-owned systemd name as a format string. In principle this
      is a security vulnerability, but we do not believe it is
      exploitable in practice, because only privileged processes can
      own the org.freedesktop.systemd1 bus name, and systemd does
      not appear to send activation failures that contain "%".
      Please note that this probably *was* exploitable in dbus
      versions older than 1.6.30, 1.8.16 and 1.9.10 due to a missing
      check which at the time was only thought to be a denial of
      service vulnerability (CVE-2015-0245). If you are still
      running one of those versions, patch or upgrade immediately.
      (fdo#98157, bsc#1003898, Simon McVittie)
    * Other fixes:
      + Harden dbus-daemon against malicious or incorrect
      ActivationFailure messages by rejecting them if they do not
      come from a privileged process, or if systemd activation is
      not enabled (fdo#98157, Simon McVittie)
      + Avoid undefined behaviour when setting reply serial number
      without going via union DBusBasicValue (fdo#98035, Marc Mutz)
      + autogen.sh: fail cleanly if autoconf fails (Simon McVittie)


author: kukuk@suse.de
changelog:
  - Create new subpackage: dbus-1-nox11
    - contains dbus-launch without x11 support
  - Rename dbus-launch to dbus-launch.x11
  - use update-alternatives to switch between dbus-launch with and
    without X11
  - Solves [bnc#934214]


author: fstrba@suse.com
changelog:
  - Build the dbus-1 package without X in the dbus-1.spec
  - Move the dbus-launch.nox11 to the dbus-1 package and install
    it by default
  - Build devel-doc package in dbus-1.spec and don't build any
    documentation in dbus-1-x11
  - Make dbus-1-x11 package contains only the X11-enabled dbus-launch
  - Fix some rpmlint warnings
  - Delete the dbus-1-x11.spec.in file, since maintaining it is
    more complicated then keeping in sync a dbus-1-x11.spec file of
    less then 120 lines


author: jengelh@inai.de
changelog:
  - Drop useless --with-pic which is only for static libs
  - Abort installation when user/group creation fails
  - Avoid calling %service_* more than once


author: fstrba@suse.com
changelog:
  - Requires systemd >= 209 and drop the compatibility pkg-config
    names that don't exist in newer systemd


author: marius.kittler@suse.com
changelog:
  - Add systemd unit files to start session bus via systemd
  - Added patch:
    * 0001-Drop-Install-sections-from-user-services.patch
      + remove install section from socket unit because it does not
      need to be enabled explicitly (see fdo#92402)


author: sflees@suse.de
changelog:
  - Don't restart dbus on upgrade - Includes temporary work around
    for last version boo#1020301
  - Add 0001-Add-RefuseManualStartStop.patch don't allow users to Manually
    start or stop dbus.


author: sflees@suse.de
changelog:
  - Update to 1.10.16
    Fixes:
    * Prevent symlink attacks in the nonce-tcp transport on Unix that could
    allow an attacker to overwrite a file named "nonce", in a directory
    that the user running dbus-daemon can write, with a random value
    known only to the user running dbus-daemon. This is unlikely to be
    exploitable in practice, particularly since the nonce-tcp transport
    is really only useful on Windows.
    (fd.o #99828, Simon McVittie) (bsc#1025950)
    * Avoid symlink attacks in the "embedded tests", which are not enabled
    by default and should never be enabled in production builds of dbus.
    (fd.o #99828, Simon McVittie) (bsc#1025951)
    * Work around an undesired effect of the fix for CVE-2014-3637
    (fd.o #80559), in which processes that frequently send fds, such as
    logind during a flood of new PAM sessions, can get disconnected for
    continuously having at least one fd "in flight" for too long;
    dbus-daemon interprets that as a potential denial of service attack.
    The workaround is to disable that check for uid 0 process such as
    logind, with a message in the system log. The bug remains open while
    we look for a more general solution.
    (fd.o #95263, LP#1591411; Simon McVittie)
    * Don't run the test test-dbus-launch-x11.sh if X11 autolaunching
    was disabled at compile time. That test is not expected to work
    in that configuration. (fd.o #98665, Simon McVittie)
    Enhancements:
    * Do the Travis-CI build in Docker containers for Ubuntu LTS, Debian
    stable and Debian testing in addition to the older Ubuntu that is
    the default (fd.o #98889, Simon McVittie)


author: fstrba@suse.com
changelog:
  - Update to 1.10.18
    * Fixes
      + Re-order dbus-daemon startup so that on SELinux systems, the
      thread that reads AVC notifications retains the ability to
      write to the audit log (fdo#92832, Debian #857660; Laurent
      Bigonville)
      + Fix a harmless read overflow and some memory leaks in a unit
      test (fdo#100568, Philip Withnall)


author: sflees@suse.de
changelog:
  - swap to /usr/bin bsc#1029968
  - Add the following fixes from SLE12
    * bsc#980928 increase listen() backlog of AF_UNIX sockets to
      SOMAXCONN fix-upstream-increase-backlog.patch
  - The following bugs were already fixed but are missing changelog
    entries
    * bsc#867256 (No longer applicable)
    * bsc#916785 (No longer applicable)
    * bsc#1012564 (Not applicable)
    * fdo#90004 (Fixed Upstream)
  - Rename the following patches as a tidy up
    * dbus-log-deny.patch to feature-suse-log-deny.patch
    * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
    * 0001-Add-RefuseManualStartStop.patch to
      feature-suse-refuse-manual-start-stop.patch
    * 0001-Drop-Install-sections-from-user-services.patch to
      fix-upstream-drop-install-sections-from-user-services.patch


author: sflees@suse.de
changelog:
  - Update to 1.10.20
    * Fixes:
      + Fix a reference leak when blocking on a pending call on a
      connection that has been disconnected (fdo#101481, Shin-ichi
      MORITA)
      + Don't put timestamps in the Doxygen-generated documentation,
      for closer-to-reproducible builds (fdo#100692, Simon
      McVittie)
      + Avoid an assertion failure when connecting to a
      semicolon-separated series of addresses, one of which fails
      (fdo#101257, Simon McVittie)
    * Documentation:
      + Update git URIs in HACKING document to sync up with
      cgit.freedesktop.org (fdo#100715, Simon McVittie)


author: sflees@suse.de
changelog:
  - No need to set --libdir anymore now that prefix is /usr/bin,
    * fixes boo#1047532
  - No need to set --bindir, bindir in dbus-1-x11 was incorrect
  - Other fixes required to properly change prefix
  - Don't pass --with-initscripts we don't use them anymore.


author: sflees@suse.de
changelog:
  - boo#1027200 don't generate machine-id in %post systemd will do it
    on first boot.
  - swap usage of /bin/false to /usr/bin/false
  - Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1


author: sflees@suse.de
changelog:
  - boo#1027201 dbus-daemon not found
  - boo#978477 systemd reseting under heavy load
    * fix-upstream-timeout-reset-1.patch
    * fix-upstream-timeout-reset-2.patch


author: sflees@suse.de
changelog:
  - Update to 1.12.2
    Deprecations:
    ? Eavesdropping is officially deprecated in favour of BecomeMonitor.
    See the release notes for spec version 0.31 (in dbus 1.11.14).
    ? [Unix] Flag files in /var/run/console/${username} are deprecated.
    See the release notes for 1.11.18.
    New APIs:
    ? <allow> and <deny> rules in dbus-daemon configuration can now
    include send_broadcast="true", send_broadcast="false",
    max_unix_fds="N", min_unix_fds="N" (for some integer N).
    See the release notes for 1.11.18.
    ? dbus_try_get_local_machine_id() is like
    dbus_get_local_machine_id(), but returns a DBusError.
    ? New APIs around DBusMessageIter to simplify cleanup.
    See the release notes for 1.11.16.
    ? The message bus daemon now implements the standard Introspectable,
    Peer and Properties interfaces. See the release notes for
    dbus 1.11.14 and spec version 0.31.
    ? DTDs for introspection XML and bus configuration are installed.
    ? [Unix] A new unix:dir=? address family resembles unix:tmpdir=? but
    never uses Linux abstract sockets, which is advantageous for
    containers. On non-Linux it is equivalent to unix:tmpdir=?.
    See the release notes for dbus 1.11.14 and spec version 0.31.
    ? [Unix] New option "dbus-launch --exit-with-x11".
    ? [Unix] Session managers can create transient .service files in
    $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
    ? [Unix] A sysusers.d snippet can create the messagebus user on-demand.
    Miscellaneous behaviour changes:
    ? [Unix] The session bus now logs to syslog if it was started by
    dbus-launch.
    ? [Unix] Internal warnings are logged to syslog if configured.
    ? [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
    or to stderr.
  - Enabled "make check test suite"
  - Patches removed, fixed upstream
    * fix-upstream-drop-install-sections-from-user-services.patch
    * fix-upstream-increase-backlog.patch
    * fix-upstream-timeout-reset-1.patch
    * fix-upstream-timeout-reset-2.patch


author: sflees@suse.de
changelog:
  - Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
    * added fix-CVE-2019-12749.patch


author: sflees@suse.de
changelog:
  - Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
    * fix-upstream-userdb-constpointer.patch
    * fix-upstream-CVE-2020-35512.patch


author: sflees@suse.de
changelog:
  - Fix CVE-2020-12049 truncated messages lead to resource exhaustion
    (CVE-2020-12049, bsc#1172505)
    * fix-upstream-CVE-2020-12049.patch
  - Rebased fix-CVE-2019-12749.patch


author: dcermak@suse.com
changelog:
  - Remove pointless %%post scriptlet leveraging non-existent systemd env
    variables
    FIRST_ARG has been used in our systemd macros, but this has now been gone for
    years. Thus the true branch of the if has never been executed for years and is
    only causing warnings when installing dbus.


author: sflees@suse.de
changelog:
  - Fix a potential crash that could be triggered by an invalid signature.
    (CVE-2022-42010, bsc#1204111)
    * fix-upstream-CVE-2022-42010.patch
  - Fix an out of bounds read caused by a fixed length array (CVE-2022-42011,
    bsc#1204112)
    * fix-upstream-CVE-2022-42011.patch
  - A message in non-native endianness with out-of-band Unix file descriptors
    would cause a use-after-free and possible memory corruption CVE-2022-42012,
    bsc#1204113)
    * fix-upstream-CVE-2022-42012.patch
  - Disable asserts (bsc#1087072)
  - Refreshed patches
    * fix-upstream-CVE-2020-35512.patch


author: sflees@suse.de
changelog:
  - Sometimes unprivileged users were able to crash dbus-daemon
    (CVE-2023-34969, bsc#1212126)
    * fix-upstream-CVE-2023-34969.patch


author: trenn@suse.de
changelog:
  - dracut-initrd-restore.patch: dracut-shutdown.service invokes
    dracut-initramfs-restore script which will never work in
    openSUSE because initrd images are named initrd not initramfs.
    Patch is from: Cristian Rodríguez <crrodriguez@opensuse.org>
    * Add 0164-Fix-initramfs-ver.img-vs-initrd-ver-in-dracut-initra.patch


author: arvidjaar@gmail.com
changelog:
  - add 0165-Order-root-fsck-after-pre-mount.patch
    ensure root fsck runs after dracut-pre-mount.service which calls
    resume (bnc#906592)


author: schwab@suse.de
changelog:
  - 0001-kernel-modules-Fix-storage-module-selection-for-sdhc.patch: fix
    storage module selection for sdhci/mmc/ahci


author: bwiedemann@suse.com
changelog:
  - add 0166-load-xhci-pci.patch
    load xhci-pci on Linux-3.18+ to allow USB-keyboard to give LUKS PW
    (bnc#911319)


author: tchvatal@suse.com
changelog:
  - Apply patch for systemd-journald SIGTERMing on boot bnc#915575
    * 0167-do-not-symlink-var-log-to-run-log.patch


author: sfalken@opensuse.org
changelog:
  - Add patch to remove PLYMOUTH_LOGO_FILE from
    modules.d/50plymouth/plymouth-populate-initrd.sh (bnc#910952)
    + 0168-remove_plymouth_logo_file.patch


author: meissner@suse.com
changelog:
  - dracut-fix-systemd-vconsole.patch: patch from upstream to start
    the vconsole for new systemd.
    + Added 0169-fix-systemd-vconsole.patch


author: sfalken@opensuse.org
changelog:
  - Add patch to load logitech-hidpp module in default initrd, fixes
    issues with not being able to enter LUKS password with logitech
    wireless keyboards (boo#918938)
    + Added: 0170-enable-logitech-hidpp.patch


author: trenn@suse.de
changelog:
  - Update to dracut mainline version 041.
    Half of the patches got integrated mainline.
    Some others have been merged together when it made sense some have
    been left out, but are still in the repository as they need some special
    treating and mainline discussion whether/how they get added. These are
    also not urgently needed, but are debugging patches.
    I broke the rule here to mention every added/deleted/modified patch as
    every patch is touched and every 2nd  got removed (mainline integrated).
    I also re-ordered the patches in the PatchXY: area for easier merging them
    and get them discussed and posted mainline easier, topic by topic.
  - Patches merged in the git tracking repository:
    0065-95iscsi-Fixup-bnx2i-offload-booting.patch
    0028-95udev-rules-Include-correct-sg3_utils-rules.patch
    0135-lvm-Fix-12819a579900b9691e2-check-for-existance-of-6.patch
    0100-Add-btrfs-rescue-utilities.patch
    0067-95fcoe-check-always-returns-255.patch
    0138-warpclock-Do-not-use-warpclock-module-on-S390-x-hwcl.patch
    0077-90multipath-add-missing-11-dm-mpath.rules-file.patch
    0042-Enhance-suse.conf-example-with-SUSE-specific-setting.patch
    0161-Fix-error-message-when-there-are-no-internal-kernel-.patch
    0111-90mdraid-Remove-line-for-offroot-detection.patch
    0129-Revert-commit-6ecab258710d158a7a6-and-only-do-not-wa.patch
    0041-mkinitd-suse-remove-hostonly-and-hostonly-cmdline.patch
    0030-95iscsi-Autodetect-iSCSI-firmware.patch
    0052-99base-Add-chown-binary.patch
    0105-95iscsi-parse-output-from-iscsiadm-correctly.patch
    0101-Print-stored-dracut-commandline-during-initramfs-bui.patch
    0096-dracut-Fix-error-local-can-only-be-used-in-a-functio.patch
    0043-40network-always-add-network-module.patch
    0035-Introduce-force-drivers-parameter-and-force_drivers-.patch
    0136-Revert-95udev-rules-add-persistent-network-rule.patch
    0143-iscsi-Fix-up-ipv6-in-brackets-iterate-over-all-possi.patch
    0167-do-not-symlink-var-log-to-run-log.patch
    0024-Fixup-mdraid-setup.patch
    0032-mkinitrd-suse.sh-Use-hostonly-and-hostonly-cmdline-c.patch
    0022-95udev-rules-add-persistent-network-rule.patch
    0166-load-xhci-pci.patch
    0047-95resume-skip-module-for-s390-x.patch
    0014-Update-dracut-manpage-for-GRUB-Legacy-and-GRUB2.patch
    0055-95fcoe-Only-install-fcoe-module-if-required.patch
    0078-Restore-original-IFS-value.patch
    0046-dracut-Do-not-wait-for-swap-device.patch
    0074-More-empty-cmdline-fixes.patch
    0112-99base-warn-on-invalid-command-for-initqueue.patch
    0034-dracut-Do-not-stop-installing-drivers-if-one-fails.patch
    0139-dracut.sh-check-for-logfile-logfile-option-and-creat.patch
    0127-99base-Increase-initqueue-timeout-in-non-systemd-cas.patch
    0104-Generate-fallback-mount-unit-for-root-filesystem.patch
    0154-resume-Also-allow-this-module-on-S390-again-s2disk-c.patch
    0149-dracut.sh-Fix-fstab-parsing-again.patch
    0027-90multipath-install-dracut-specific-service-file.patch
    0084-95rootfs-block-Correctly-terminate-commandline-param.patch
    dracut_v37_to_HEAD.patch
    0128-90lvm-Install-dm-snapshot-module.patch
    0063-90multipath-Install-libgcc_s-library.patch
    0062-95iscsi-Install-libgcc_s-library.patch
    0146-dracut.sh-corrected-logfile-check.patch
    0071-Fix-non-export-of-journal-dev-boot-options.patch
    0044-Add-find-to-debug-binaries.patch
    0039-Remove-force-parameter-from-mkinitrd.patch
    0026-90multipath-add-67-kpartx-compat.rules.patch
    0099-90multipath-Load-device_handler-modules-early-during.patch
    0029-90multipath-install-correct-multipath-rules.patch
    0031-90multipath-Fixup-service-file-for-booting.patch
    0036-95fcoe-Store-current-configuration-in-dracut-cmdline.patch
    A patch (dracut_v041_to_HEAD.patch) is being added without being properly referenced from the changelog.
    0151-Go-back-to-xz-again-pixz-may-use-too-much-memory-whi.patch
    0069-81cio_ignore-skip-module-if-cio_ignore-is-not-active.patch
    0070-81cio_ignore-rewrite-module.patch
    0033-95iscsi-Set-correct-iscsi_started-value-for-iSCSI-fi.patch
    0098-Do-not-call-lvm-for-non-LVM-device-mapper-devices.patch
    0023-systemd-always-tries-to-load-autofs4.patch
    0051-mkinitrd-suse-add-update-bootloader-message.patch
    0013-mkinitrd-suse-do-not-update-bootloader-if-no-kernel-.patch
    0115-Handle-module-alias-properly.patch
    0054-95iscsi-update-commandline-printing.patch
    0148-dracut.sh-Fix-LABEL-and-other-fstab-syntax.patch
    0122-btrfs-btrfs-dump-super-and-btrfs-select-super-do-not.patch
    0045-40network-add-missing-_arch-variable-declaration.patch
    0050-95iscsi-strip-one-set-of-quotes-when-calling-initque.patch
    0152-Add-a-comment-to-easily-add-debug-modules-also-add-v.patch
    0147-dracut.sh-Fix-UUID-fstab-parsing-in-case-mount-optio.patch
    0038-95fcoe-start-lldpad-separately.patch
    0082-00warpclock-check-for-sbin-hwclock.patch
    0155-iscsi-iscsi.initiator-and-others-can-and-must-only-s.patch
    0037-95fcoe-update-fcoe-interface-check.patch
    0141-iscsi-Avoid-bad-ip-route-call-on-empty-address.patch
    0049-95iscsi-Use-ip-ibft-for-ibft-autoconfiguration.patch
    0153-Only-add-network-module-on-request-and-on-dependenci.patch
    0097-Implement-rd.timeout-to-modify-the-device-timeout.patch
    0169-fix-systemd-vconsole.patch
    0073-Don-t-create-lots-of-empty-cmdline-files-for-hostonl.patch
    0103-Fixup-missing-separators-in-rootfs-block-cmdline.patch
    0064-90kernel-modules-install-scsi_dh_alua.patch
    0012-Check-for-plymouth-lib-directories.patch
    0092-dracut-nbd-Only-complain-of-missing-binary-in-hoston.patch
    0160-nfs-Add-ip-.-and-root-nfs.-parameters-to-internal-dr.patch
    0093-95iscsi-generate-commandline-for-software-iscsi.patch
    0040-95fcoe-skip-VLAN-devices-in-fcoe-up.patch
    0156-dracut.usage.asc-Remove-distro-specific-help-from-ma.patch
    0018-mkinitrd-suse-Fix-whitespaces-when-adding-drivers.patch
    0140-dracut.sh-Avoid-duplicate-devices-in-host_devs.patch
    0095-95iscsi-use-static-configuration-for-software-iscsi.patch
    0025-95udev-rules-Add-59-scsi-sg_utils.rules.patch
    0072-Also-export-root-boot-param-for-hostonly-cmdline-cas.patch
    0102-Align-dev_unit_name-with-systemd-s-function.patch
    0001-kernel-modules-Fix-storage-module-selection-for-sdhc.patch
  - Added dracut_v041_to_HEAD.patch: new patch from v041 against our git


author: trenn@suse.de
changelog:
  - Add fix for multipath systems without multipathd.conf
    bsc#927719: Tumbleweed Snapshot blocked: no multipath support in 20150416\
      (likely dracut issue)
    bsc#930019: multipath is broken in dracut due to missing /etc/multipath.conf
    file (systemd multpath.service condition)
    * Added patch: dracut_fix_multipath_without_config.patch


author: trenn@suse.de
changelog:
  - Fix mkinitrd (get_kernel_version) for arm* arch by getting kernel version
    from vmlinux.*.gz file instead of [uz]Image file.
    Taken over from mkinitrd bnc#908454
    * Add patch 0122-Get_kernel_version_from_gz_file_for_arm.patch
  - Fix nfs ip= setup in case of IP instead of host in root= name (bsc#931307)
  - Honor allow_unsupported_modules setting
    From: Borislav Petkov <bp@suse.de>
    $ make install
    of a locally built kernel, you don't want dracut to do --check-supported
    for supported modules when you have "allow_unsupported_modules 1" in
    /etc/modprobe.d/10-unsupported-modules.conf.
    Teach /sbin/installkernel to pay attention to that setting.
    Use modprobe --showconfig too, which is going to be the proper way to do
    it starting with 12SP1.


author: trenn@suse.de
changelog:
  - Fix dmraid issue bnc#905746
    A    dracut_dmraid_use_udev.patch
  - Taken over from SLE12
    A    fips_add_aesni-intel.patch
  - Do not touch /run vs /var/run bnc#922676
    D    0106-dracut-Enable-converting-of-directory-var-run-var-lo.patch
  - Update dracut to version 042
    Remove these already included or unneeded patches:
    D    dracut_v041_to_HEAD.patch
    D    0011-Correct-paths-for-openSUSE.patch
    D    0068-95fcoe-uefi-Test-for-EFI-firmware.patch
    D    0170-enable-logitech-hidpp.patch
  - Fix nfs mount if IPv4 is used in fstab instead of hostname
    A fix_nfs_with_ip_instead_of_hostname.patch
    Adjust/refresh:
    M    0015-40network-replace-dhclient-with-wickedd-dhcp-supplic.patch
    M    0016-Add-new-s390x-specific-rule-files.patch
    M    0017-45ifcfg-use-distro-specific-scripts.patch
    M    0019-40network-Fix-race-condition-when-wait-for-networks.patch
    M    0020-00warpclock-Set-correct-timezone.patch
    M    0021-95dcssblk-Add-new-module-for-DCSS-block-devices.patch
    M    0048-40network-Only-enable-network-interfaces-if-explicit.patch
    M    0053-01fips-fixup-loading-issues.patch
    M    0056-81cio_ignore-handle-cio_ignore-commandline.patch
    M    0057-01fips-Include-some-more-hmacs.patch
    M    0058-dracut-add-warning-when-including-unsupported-module.patch
    M    0059-99suse-Add-SUSE-specific-initrd-parsing.patch
    M    0060-45ifcfg-Add-SUSE-specific-write-ifcfg-file.patch
    M    0061-45ifcfg-Fixup-error-message-in-write-ifcfg-suse.patch
    M    0066-40network-always-start-netroot-in-ifup.sh.patch
    M    0075-95dasd_rules-enable-parsing-of-rd.dasd-commandline-p.patch
    M    0076-Correctly-set-cio_ignore-for-dynamic-s390-rules.patch
    M    0079-95dasd_rules-fixup-rd.dasd-parsing.patch
    M    0080-95dasd_rules-print-out-rd.dasd-commandline.patch
    M    0081-95dasd_mod-do-not-set-module-parameters-if-dasd_cio_.patch
    M    0083-95zfcp_rules-Fixup-rd.zfcp-parsing.patch
    M    0085-95zfcp_rules-print-out-rd.zfcp-commandline-parameter.patch
    M    0086-95zfcp_rules-Auto-generate-udev-rule-for-ipl-device.patch
    M    0087-95dasd_rules-Auto-generate-udev-rule-for-ipl-device.patch
    M    0088-91zipl-Add-new-module-to-update-s390x-configuration.patch
    M    0089-40network-create-var-lib-wicked-in-ifup.sh.patch
    M    0090-dracut-caps-Remove-whole-caps-module.patch
    M    0091-dracut-biosdevname-In-SUSE-biosdevname-package-is-in.patch
    M    0094-Implement-shortcut-ip-ifname-static-for-static-confi.patch
    M    0106-dracut-Enable-converting-of-directory-var-run-var-lo.patch
    M    0107-Fixup-typo-firmare-instead-of-firmware.patch
    M    0108-91zipl-Store-commandline-correctly.patch
    M    0109-95dasd_rules-Store-all-devices-in-commandline.patch
    M    0110-95zfcp_rules-Store-all-devices-in-commandline.patch
    M    0113-91zipl-Install-script-as-executable.patch
    M    0114-91zipl-Translate-ext2-3-into-ext4.patch
    M    0116-Mark-scripts-as-executable.patch
    M    0117-95dasd_rules-Enable-the-device-before-checking-devic.patch
    M    0118-95zfcp_rules-Enable-the-device-before-checking-devic.patch
    M    0119-Reset-IFS-variable.patch
    M    0120-mkinitrd-suse.sh-Bail-out-with-exit-1-if-initrd-cann.patch
    M    0121-Adjust-initramfs-kernel.img-to-SUSE-default-initrd-k.patch
    M    0122-Get_kernel_version_from_gz_file_for_arm.patch
    M    0123-95zfcp_rules-fix-typo-in-module_setup.patch
    M    0124-40network-Update-iBFT-scanning-code-to-handle-IPv6.patch
    M    0125-40network-separate-mask-and-prefix.patch
    M    0126-01fips-Add-drbg-module-to-force-loaded-modules.patch
    M    0130-nfs-Always-add-all-kernel-modules-for-kdump.patch
    M    0131-40network-handle-prefixed-IP-addresses-correctly.patch
    M    0132-40network-fixup-static-network-configuration.patch
    M    0137-Switch-from-Mozilla-NSS-sha256hmac-checking-to-fipsc.patch
    M    0142-40network-Don-t-report-error-for-etc-sysconfig-netwo.patch
    M    0144-90crypt-Fixed-crypttab_contains-to-also-work-with-de.patch
    M    0150-Find-kernel-modules-in-extra-and-weak-updates-path-a.patch
    M    0157-Add-boot-zipl-to-host-devs-if-it-is-a-mount-point.patch
    M    0158-Add-SUSE-kernel-module-dependencies-in-etc-modprobe..patch
    M    0159-network-Try-to-load-xennet.patch
    M    0163-Install-etc-sysconfig-console-to-see-specific-fonts.patch
    M    0164-Fix-initramfs-ver.img-vs-initrd-ver-in-dracut-initra.patch
    M    0165-Order-root-fsck-after-pre-mount.patch
    M    0168-remove_plymouth_logo_file.patch
    M    dracut_fix_multipath_without_config.patch


author: seife+obs@b1-systems.com
changelog:
  - fix plymouth installation if dpkg package is installed
    - add dracut_dont_use_dpkg_defaults_on_SUSE.patch


author: fvogt@suse.com
changelog:
  - Add experimental 0400-use_fstab_systemd.patch:
      Add entry for /sysroot in /etc/fstab instead of relying
      on root= and rootflags=


author: fvogt@suse.com
changelog:
  - Add 0401-mount_option_mountpoint.patch:
      Make it possible to use a mountpoint as --mount parameter


author: thomas.blume@suse.com
changelog:
  - fix systemd-vconsole-error in initrd (bsc#943312)
    Add 0180-dracut-add-trivial-vconsole-fontmap.patch


author: fvogt@suse.com
changelog:
  - Fix systemd-vconsole-error properly (bsc#943312 and bsc#932981)
    Rewrite 0180-dracut-add-trivial-vconsole-fontmap.patch
    as 0180-i18n_add_correct_fontmaps.patch


author: fvogt@suse.com
changelog:
  - Add patch 0181-no_systemd_cryptsetup.patch:
    - rd.luks.key is not implemented (properly) if systemd is enabled,
      so ignore systemd in 90crypt
  - Fixes boo#915849


author: fvogt@suse.com
changelog:
  - Add patch 0182-fix-include-parsing.patch:
    - Fix parsing of "-i" and "--include"
  - Fixes boo#908452


author: fvogt@suse.com
changelog:
  - Add patch 0183-fix_add_drivers_hang.patch:
    - Fix possible hang in dracut
      caused by add_drivers+=" " in dracut.conf (bsc#923116)


author: dimstar@opensuse.org
changelog:
  - Disable 0181-no_systemd_cryptsetup.patch: it breaks existing
    installations of encrypted / on LVM.


author: fvogt@suse.com
changelog:
  - Add patch 0184-fix_lvm_wc_warning.patch:
    - Upstream commit 08eca6 to get rid of missing wc warning


author: trenn@suse.de
changelog:
  - Always install dm-snaphost module if lvm dracut module is needed,
    even if dm-snampshot is not loaded on the host yet (bsc#947518)
    A 0128-90lvm-Install-dm-snapshot-module.patch


author: fvogt@suse.com
changelog:
  - Add 0203-no-fail-builtin-module.patch:
      Don't let inst1mod fail if module is built-in
    - Fixes bsc#935563


author: fvogt@suse.com
changelog:
  - Add 0402-driver-fail-summary.patch:
    - Port 0169-Enabled-Warning-for-failed-kernel-modules-per-defaul.patch:
      Subject: Enable warning for failed kernel moduiles
      Enabled Warning for failed kernel modules per default
      and added summary of those to the end of dracut output
      References: bnc#886839
    - Disable inline warnings in favour of summary


author: fvogt@suse.com
changelog:
  - Add 0204-mkinitrd-fix-monster.patch:
    - Implement functionality of -A option
    - Without this patch, -A sets host_only=0,
      but host_only wasn't used
    - Translates into --no-host-only now
  - References boo#935993


author: fvogt@suse.com
changelog:
  - Add dracut-rpmlintrc
  - Fix permissions of various scripts, as patch does not
      create executable files


author: fvogt@suse.com
changelog:
  - Modify 0402-driver-fail-summary.patch
    - Add notice (bsc#952491)
    - Use mktemp instead of hardcoded filenames (bnc#935338)
  - Modify 0144-90crypt-Fixed-crypttab_contains-to-also-work-with-de.patch
    - Use mktemp instead of hardcoded filenames (bnc#935338)


author: fvogt@suse.com
changelog:
  - Add 0301-include_sysconfig_language.patch:
    - Include /etc/sysconfig/language instead of forcibly generating
      /etc/locale.conf
    - Workaround and partial fix for boo#927250


author: fvogt@suse.com
changelog:
  - Add numbers to the filename of all patches:
    fips_add_aesni-intel.patch -> 0138-fips_add_aesni-intel.patch
    dracut_fix_multipath_without_config.patch -> 0200-dracut_fix_multipath_without_config.patch
    fix_nfs_with_ip_instead_of_hostname.patch -> 0201-fix_nfs_with_ip_instead_of_hostname.patch
    dracut_dmraid_use_udev.patch -> 0202-dracut_dmraid_use_udev.patch
    dracut_dont_use_dpkg_defaults_on_SUSE.patch -> 0300-dracut_dont_use_dpkg_defaults_on_SUSE.patch


author: fvogt@suse.com
changelog:
  - Disable 0400-use_fstab_systemd.patch
    - Fully implementing this would take ages
    - Fix boo#948771


author: tiwai@suse.de
changelog:
  - Fix the wrong kernel config check for microcode with 4.4 kernel
    (boo#955712):
    0185-dracut.sh-remove-_EARLY-from-CONFIG_MICROCODE_-check.patch


author: fvogt@suse.com
changelog:
  - Add 0206-nfs_dns_alias.patch to fix boo#955592:
    - Fix dracut run on nfs root where NFS host is a DNS ALIAS
  - Require bind-utils. host is used in some lines


author: fvogt@suse.com
changelog:
  - Update to dracut-044
  - Patches upstream, removed here:
      0119-Reset-IFS-variable.patch
      0120-mkinitrd-suse.sh-Bail-out-with-exit-1-if-initrd-cann.patch
      0122-Get_kernel_version_from_gz_file_for_arm.patch
      0165-Order-root-fsck-after-pre-mount.patch
      0184-fix_lvm_wc_warning.patch
      0185-dracut.sh-remove-_EARLY-from-CONFIG_MICROCODE_-check.patch
      0401-mount_option_mountpoint.patch
  - Updated/Refreshed patches:
      0015-40network-replace-dhclient-with-wickedd-dhcp-supplic.patch
      0019-40network-Fix-race-condition-when-wait-for-networks.patch
      0056-81cio_ignore-handle-cio_ignore-commandline.patch
      0058-dracut-add-warning-when-including-unsupported-module.patch
      0066-40network-always-start-netroot-in-ifup.sh.patch
      0094-Implement-shortcut-ip-ifname-static-for-static-confi.patch
      0124-40network-Update-iBFT-scanning-code-to-handle-IPv6.patch
      0125-40network-separate-mask-and-prefix.patch
      0131-40network-handle-prefixed-IP-addresses-correctly.patch
      0132-40network-fixup-static-network-configuration.patch
      0144-90crypt-Fixed-crypttab_contains-to-also-work-with-de.patch
      0150-Find-kernel-modules-in-extra-and-weak-updates-path-a.patch
      0158-Add-SUSE-kernel-module-dependencies-in-etc-modprobe..patch
      0159-network-Try-to-load-xennet.patch
      0202-dracut_dmraid_use_udev.patch
      0203-no-fail-builtin-module.patch
      0402-driver-fail-summary.patch


author: fvogt@suse.com
changelog:
  - Refresh patches with line offsets:
      0017-45ifcfg-use-distro-specific-scripts.patch
      0048-40network-Only-enable-network-interfaces-if-explicit.patch
      0088-91zipl-Add-new-module-to-update-s390x-configuration.patch
      0121-Adjust-initramfs-kernel.img-to-SUSE-default-initrd-k.patch
      0150-Find-kernel-modules-in-extra-and-weak-updates-path-a.patch
      0157-Add-boot-zipl-to-host-devs-if-it-is-a-mount-point.patch
      0182-fix-include-parsing.patch
      0183-fix_add_drivers_hang.patch
      0203-no-fail-builtin-module.patc


author: fvogt@suse.com
changelog:
  - Remove 0400-use_fstab_systemd.patch
  - Move dracut-catimages, /boot/dracut and /var/lib/dracut into
      dracut-tools subpackage
  - Cleanup spec file


author: fvogt@suse.com
changelog:
  - Add warning about pkgconfig file to rpmlintrc's ignore list
  - Fix spec file:
    - Add dracut-catimages manpage to dracut-tools
    - Fix summary of dracut-tools subpackage


author: fvogt@suse.com
changelog:
  - Add 0207-handle_module_aliases.patch:
      Handle module aliases correctly to not generate unbootable
      initrds with different kernel versions. Fix for boo#962694


author: fvogt@suse.com
changelog:
  - Refresh and merge:
      0133-Allow-multiple-configurations-per-network-interface-.patch
      0145-40network-handle-ip-ifname-static-correctly.patch
      0162-network-Request-DHCP-lease-instead-of-getting-applyi.patch
  - Delete 0134-Remove-bootdev-warning-bnc-881112.patch:
    - ip=ibft got deprecated, so workaround not necessary


author: fvogt@suse.com
changelog:
  - Add 0208-no_forced_virtnet.patch:
      Don't include qemu-net modules without reason.
      Fix for bsc#960669


author: fvogt@suse.com
changelog:
  - Modify 0017-45ifcfg-use-distro-specific-scripts.patch:
    - Also revert upstream commit f34e1d6b to not forcibly
      include network and ifcfg modules (bsc#960669)
  - Refresh:
    - 0094-Implement-shortcut-ip-ifname-static-for-static-confi.patch
    - 0132-40network-fixup-static-network-configuration.patch
    - 0142-40network-Don-t-report-error-for-etc-sysconfig-netwo.patch
    - 0402-driver-fail-summary.patch


author: pwieczorkiewicz@suse.com
changelog:
  - Add 0169-network_set_mtu_macaddr_for_dhcp.patch:
    - Set MTU and LLADDR for DHCP if specified (boo#959803)


author: fvogt@suse.com
changelog:
  - Fix 0158-Add-SUSE-kernel-module-dependencies-in-etc-modprobe.patch:
    - Patch did not have any effect whatsoever
    - Fixes bsc#869496
    - Rename from 0158-Add-SUSE-kernel-module-dependencies-in-etc-modprobe..patch


author: fvogt@suse.com
changelog:
  - Fix 0208-no_forced_virtnet.patch:
    - On non-QEMU systems it returned non-zero, causing dracut to fail
    - Fixed boo#965477
    - dracut.spec: Remove 90qemu-net entirely instead of disabling
    - running_in_qemu was broken (reading output of >/dev/null)


author: fvogt@suse.com
changelog:
  - Modify 0300-dracut_dont_use_dpkg_defaults_on_SUSE.patch:
    - Don't try to include plymouth if plymouth-dracut pkg. not installed


author: trenn@suse.de
changelog:
  - Move dist config file to /usr/lib/dracut/dracut.conf.d (bsc#972143)
  - Remove stale, unused patch file:
    0181-no_systemd_cryptsetup.patch
  - Still create a debug config example in /etc/dracut.conf.d


author: trenn@suse.de
changelog:
  - Forward port of latest SLES patches (fate#320499)
    Add:
    * 0001-multipath_revert_mpathconf_binary_use.patch (fate#320499)
    * 0170-iscsi-skip-ibft-invalid-dhcp.patch (bsc#953361)
    * 0160-s390-update_active_devices_initrd.patch (bsc#939101)
    * 0161-95zfcp_rules-simplified-rd.zfcp-commandline-for-NPIV.patch (bsc#964456)
    * 0190-replace-iscsistart-with-systemd-service-files.patch (fate#319024)
    * 0191-static_network_setup_return_zero.patch (bsc#919179)
    * 0192-iscsi_set_boot_protocol_from_ifcfg.patch (bsc#919179)
    * 0193-95iscsi-Set-number-of-login-retries.patch (bsc#951003)
    * 0196-ibft-wait-for-session-on-all-paths.patch (bsc#951003)
    * 0403-95lunmask-Add-module-to-handle-LUN-masking.patch (FATE#319786)
    Added, but still commented in spec file (still needs adjusting):
  - Fixup booting from qla4xxx (bsc#951003)
    * 0194-95iscsi-Do-not-require-network-for-qla4xxx-flash-ses.patch
    * 0195-95iscsi-set-rd.iscsi.firmware-for-qla4xxx-sessions.patch


author: trenn@suse.de
changelog:
  - Remove version from requires on subpackage
  - Add a split provide because of the package split for SLE12 SP1 to SP2 upgrade


author: trenn@suse.de
changelog:
  - Make sure to install collect binary (bsc#976466)
    * Add: 0188-95dasd_rules-Install-collect-udev-helper-binary.patch


author: trenn@suse.de
changelog:
  - Add IFS restoring where it has been lost due to mainline merging
    (bsc#977117)
    * Add 0500-Reset-IFS-variable.patch


author: hare@suse.de
changelog:
  - Port missing SLES patches
    * Add 0197-95iscsi-Do-not-require-network-for-qla4xxx-flash-ses.patch
    * Add 0198-95iscsi-set-rd.iscsi.firmware-for-qla4xxx-sessions.patch
    * Remove 0194-95iscsi-Do-not-require-network-for-qla4xxx-flash-ses.patch
    * Remove 0195-95iscsi-set-rd.iscsi.firmware-for-qla4xxx-sessions.patch
  - Rewrite patch:
    * Add 0302-Revert-90multipath-add-hostonly-multipath.conf-in-ca.patch
    * Remove 0001-multipath_revert_mpathconf_binary_use.patch
  - Update 0403-95lunmask-Add-module-to-handle-LUN-masking.patch
    to match upstream kernel submission (FATE#319786)


author: meissner@suse.com
changelog:
  - fips-kernel-4.4-fixes.patch: adjust the kernel module list to
    match the SLES 12 SP2 kernel. (bsc#976577)


author: fvogt@suse.com
changelog:
  - Add 0213-10i18n-keymap-find.patch:
    - Fix choice of keymap for inclusion (bsc#942896)
    - Refresh 0301-include_sysconfig_language.patch


author: mfasheh@suse.com
changelog:
  - Advise user of fs recovery options when we fail to mount (fate#320443)
    * Add 0404-dracut-emergency-optionally-print-fs-help.patch


author: hare@suse.de
changelog:
  - Do not overwrite existing FCoE configuration (bsc#993861)
    * Add 0213-95fcoe-Do-not-overwrite-FCoE-configuration.patch


author: hare@suse.de
changelog:
  - Reformat patches and add patch header:
    * 0053-01fips-fixup-loading-issues.patch
    * 0126-01fips-Add-drbg-module-to-force-loaded-modules.patch
    * 0128-90lvm-Install-dm-snapshot-module.patch
    * 0133-Allow-multiple-configurations-per-network-interface-.patch
    * 0138-fips_add_aesni-intel.patch
    * 0168-remove_plymouth_logo_file.patch
    * 0169-network_set_mtu_macaddr_for_dhcp.patch
    * 0170-iscsi-skip-ibft-invalid-dhcp.patch
    * 0180-i18n_add_correct_fontmaps.patch
    * 0196-ibft-wait-for-session-on-all-paths.patch
    * 0201-fix_nfs_with_ip_instead_of_hostname.patch
    * 0300-dracut_dont_use_dpkg_defaults_on_SUSE.patch
    * fips-kernel-4.4-fixes.patch
  - Rename patch:
    * from fips-kernel-4.4-fixes.patch
    * to 0139-fips-kernel-4.4-fixes.patch


author: hare@suse.de
changelog:
  - 95fcoe: Do not complain about missing /etc/hba.conf (bsc#980539)
    * Add 0215-95fcoe-Do-not-complain-about-missing-etc-hba.conf.patch
  - 95fcoe: silence lldpad warnings
    * Add 0216-95fcoe-silence-lldpad-warnings.patch
  - 95fcoe: Allow to specify the FCoE mode via the fcoe= parameter
    * Add 0217-95fcoe-Allow-to-specify-the-FCoE-mode-via-the-fcoe-p.patch
  - 40network: allow persistent interface names (bsc#995284)
    * Add 0218-40network-allow-persistent-interface-names.patch
  - 95fcoe: use interface names instead of MAC addresses
    * Add 0219-95fcoe-use-interface-names-instead-of-MAC-addresses.patch
  - 95fcoe: always set AUTO_VLAN for fcoemon (bsc#995019)
    * Add 0220-95fcoe-always-set-AUTO_VLAN-for-fcoemon.patch
  - 95fcoe: Add shutdown script (bsc#994860)
    * Add 0221-95fcoe-Add-shutdown-script.patch
  - 90dm: Fixup shutdown script (bsc#994860)
    * Add 0222-90dm-Fixup-shutdown-script.patch
  - 90dm: fixup dependency cycle between MD and DM shutdown (bsc#994860)
    * Add 0223-90dm-fixup-dependency-cycle-between-MD-and-DM-shutdo.patch
  - 90multipath: Start daemon after udev settle (bsc#986734)
    * Add 0304-90multipath-Start-daemon-after-udev-settle.patch
  - 90multipath: load dm_multipath module during startup
    * Add 0305-90multipath-load-dm_multipath-module-during-startup.patch
  - 90multipath: add shutdown script (bsc#994860)
    * Add 0306-90multipath-add-shutdown-script.patch


author: hare@suse.de
changelog:
  - Rename patch:
    * From 0211-fix_multipath_check_hostonly.patch
      to 0303-fix_multipath_check_hostonly.patch
  - Rename patch:
    * From 0213-10i18n-keymap-find.patch
      to 0213-Fix-wrong-keymap-inclusion.patch


author: trenn@suse.de
changelog:
  - Add missing whitespace for md raid suse kernel param parsing (bsc#970215)
    * modify: 0059-99suse-Add-SUSE-specific-initrd-parsing.patch
  - Fix IFS separater in net-lib.sh (bsc#996141)
    * modify: 0125-40network-separate-mask-and-prefix.patch


author: hare@suse.de
changelog:
  - 95multipath: Replace 'grep' with 'sed' for shutdown scripts
    (bsc#999220)
    * modify 0306-90multipath-add-shutdown-script.patch


author: Thomas.Blume@suse.com
changelog:
  - rd.iscsi.waitnet should default to false in order for dracut to
    wait for the network devices (bsc#997598)
    * add 0199-rd-iscsi-waitnet-default-false.patch


author: hare@suse.de
changelog:
  - Reformat patch headers:
    * modify 0199-rd-iscsi-waitnet-default-false.patch
    * modify 0200-dracut_fix_multipath_without_config.patch
    * modify 0210-add_fcoe_uefi_check.patch
    * modify 0212-fcoe_reorder_init_path.patch
  - Rediff patches to apply cleanly:
    * modify 0124-40network-Update-iBFT-scanning-code-to-handle-IPv6.patch
    * modify 0133-Allow-multiple-configurations-per-network-interface-.patch
    * modify 0170-iscsi-skip-ibft-invalid-dhcp.patch
    * modify 0218-40network-allow-persistent-interface-names.patch
  - Remove spurious whitespaces:
    * modify 0169-network_set_mtu_macaddr_for_dhcp.patch
  - 40network: print out correct prefix (bsc#996141)
    * modify 0125-40network-separate-mask-and-prefix.patch
  - 95iscsi: setup bnx2i offload connection correctly (bsc#997598)
    * add 0224-95iscsi-setup-bnx2i-offload-connections-properly.patch
  - Rename patches to match sequence number:
    * old: 0019-40network-Fix-race-condition-when-wait-for-networks.patch
    * new: 0012-40network-Fix-race-condition-when-wait-for-networks.patch
    * old: 0066-40network-always-start-netroot-in-ifup.sh.patch
    * new: 0013-40network-always-start-netroot-in-ifup.sh.patch


author: hare@suse.de
changelog:
  - 95fcoe: do not start fcoemon twice (bsc#1001512)
    * add 0225-95fcoe-do-not-start-fcoemon-twice.patch


author: hare@suse.de
changelog:
  - 90multipath: parse commandline option 'multipath=off' (bsc#1001691)
    * add 0307-90multipath-parse-kernel-commandline-option-multipat.patch


author: trenn@suse.de
changelog:
  - Give-persistent_policy-precedence-over-dev-mapper-names (bsc#908143)
    * add: 0502-persistent_device_policy_param_enhance.patch
  - mdadm IMSM_NO_PLATFORM workaround for kdump (bsc#975404)
    * add: 0308-mdraid_add_IMSM_NO_PLATFORM_env.patch


author: hare@suse.de
changelog:
  - 90dmraid: do not delete partitions (bsc#998860)
    * add 0309-90dmraid-do-not-delete-partitions.patch


author: hare@suse.de
changelog:
  - 95resume: Do not resume on iSCSI devices (bsc#999663)
    * add 0310-95resume-Do-not-resume-on-iSCSI.patch
  - 95iscsi: ip=ibft is deprecated (bsc#1004437)
    * add 0311-95iscsi-ip-ibft-is-deprecated.patch
  - 40network: do not print warning about non-existing file
    (bsc#1004437)
    * add 0312-40network-Do-not-print-message-about-tmp-net.ibft0.c.patch


author: hare@suse.de
changelog:
  - 90mdraid: Use stock MD rules to assemble RAID arrays (bsc#998860)
    * add 0313-90mdraid-Use-stock-MD-rules-to-assemble-RAID-arrays.patch


author: hare@suse.de
changelog:
  - Add missing rules file for previous patch
    * modify 0313-90mdraid-Use-stock-MD-rules-to-assemble-RAID-arrays.patch


author: astieger@suse.com
changelog:
  - Do not create initramfs with world-readable permissions if
    early microcode update is used bsc#1008340 CVE-2016-8637
    0503-dracut.sh-create-the-initramfs-non-world-readable-al.patch


author: dmolkentin@suse.de
changelog:
  - Bash cannot handle binary strigns with embedded NULs. This used
    to work by accident, it no longer does starting from bash 4.4.
    Strip NULs during all comparison operations as a workaround.
    Addresses bsc989218.
    * add 0450-Strip-NUL-bytes-in-stream-before-push-in-string.patch


author: daniel@molkentin.de
changelog:
  - systemd-initrd: Add initrd-root-device.target. Cherry-pick to get
    systemd v230 into factory (bsc1009089)
    * add 0451-systemd-initrd-add-initrd-root-device.target.patch


author: kukuk@suse.de
changelog:
  - nfs/rpcbind: rpcbind uses now /run/rpcbind for temporary data.
    Create the needed directory.
    * add 0314-run-rpcbind.patch


author: dmolkentin@suse.com
changelog:
  - Try to always add pinctrl-cherryview (bsc#998440)
    * add 0452-Always-try-to-add-pinctrl-cherryview.patch


author: Thomas.Blume@suse.com
changelog:
  - deal with incomplete ibft bootflag settings (bsc#1007648)
    * add 0504-ibft-fix-boot-flag-check.patch


author: daniel.molkentin@suse.com
changelog:
  - Resolve symbolic links for -i and -k parameters (bsc#902375)
    * add 0453-Resolve-symbolic-links-for-i-and-k-parameters-bsc-90.patch


author: daniel.molkentin@suse.com
changelog:
  - Add md4 and arc4 modules for ntlm authentication
    * add 0454-Add-md4-and-arc4-modules-for-ntlm.patch


author: daniel.molkentin@suse.com
changelog:
  - Allow booting from degrated MD arrays with systemd (bsc#1017695)
    * add 0505-Allow-booting-from-degraded-MD-RAID-arrays.patch


author: daniel.molkentin@suse.com
changelog:
  - Boot on s390x with fips=1 on the kernel commnad line (bnc#1021687)
    * add 0506-Boot-on-s390x-with-fips-1-on-the-kernel-commnad-line.patch


author: daniel.molkentin@suse.com
changelog:
  - unlimit TaskMax for xfs_repair in emergency shell (bsc#1019938)
    * add 0507-Set-TaskMax-inifinite-for-the-emergency-shell.patch


author: daniel.molkentin@suse.com
changelog:
  - 90multipath: 90multipath: start before local-fs-pre.target
    (bsc#1005410, bsc#1006118, bsc#1007925)
    * add 0508-90multipath-start-before-local-fs-pre.target.patch


author: daniel.molkentin@suse.com
changelog:
  - 01fips: Remove zlib module as requirement (bsc#1020063)
    * add 0509-01fips-Remove-zlib-module-as-requirement.patch


author: daniel.molkentin@suse.com
changelog:
  - Do not pass ifname for bonding devices (bsc#995812)
    * add 0314-nfs_do_not_pass_ifname_for_bonding_devices.patch


author: daniel.molkentin@suse.com
changelog:
  - 01fips: Make init on non-x86_64, specifically s390x, pass (bsc#1021687)
    * add 0510-01fips-Some-modules-use-separators-other-than.patch
    * add 0511-01fips-ensure-fips-initialization-succeeds-on-s390-x.patch


author: daniel.molkentin@suse.com
changelog:
  - Drop binutils dependency in favor of elfutils
    * add 0512-Make-binutils-optional-when-elfutils-are-available.patch


author: daniel.molkentin@suse.com
changelog:
  - Fix mdraid regression (bsc#1028542)
    * adds 0513-Fix-regression-caused-by-6f9bf2b8ac436259bdccb110545.patch
  - man: make the -k option clear using mkinitrd (bsc#1012656)
    * adds 0514-man-make-the-k-option-clear-using-mkinitrd.patch


author: daniel.molkentin@suse.com
changelog:
  - Ensure hisi_sas_v2_hw gets included (bsc#1034597)
    * adds 0515-90kernel-modules-also-add-block-device-driver-revers.patch


author: tchvatal@suse.com
changelog:
  - Conflict with older btrfsprogs < 3.18  bsc#1035518
    * otherwise when zypper duping we are not able to generate intrd
      until the btrfsprogs are updated, this way we force the app
      to be update beforehand (13.1 and SLE11 migrations)


author: daniel.molkentin@suse.com
changelog:
  - Fix subnet calculation in mkinitrd (bsc#1035743)
    * adds 0516-mkinitrd-suse.sh-Fix-prefix-calculation.patch


author: daniel.molkentin@suse.com
changelog:
  - More correct patch description for 0512, no functional changes
    * updates 0512-Make-binutils-optional-when-elfutils-are-available.patch


author: daniel.molkentin@suse.com
changelog:
  - 95fcoe: fix rules generation (osc#1036323)
    * adds 0517-95fcoe-fixup-fcoe-genrules.sh-for-VN2VN-mode.patch


author: daniel.molkentin@suse.com
changelog:
  - 90kernel-modules: Fix backlight on Cherrytrail devices (boo#1034785)
    * adds 0518-90kernel-modules-Fix-backlight-on-Cherrytrail-device.patch


author: daniel.molkentin@suse.com
changelog:
  - 90kernel-modules: Ensure phy drivers are loaded in initrd (bsc#1034893)
    * adds 0519-90kernel-modules-Ensure-phy-drivers-are-loaded-in-in.patch


author: daniel.molkentin@suse.com
changelog:
  - Ignore module resolution errors (e.g. with kgraft) (bsc#1037120)
    * adds 0520-Ignore-module-resolution-errors.patch


author: daniel.molkentin@suse.com
changelog:
  - Revert: "Require version >= 3.18 btrfsprogs, rather than conflicting with
    an older one". Dracut should never depend on optional components


author: daniel.molkentin@suse.com
changelog:
  - Ship udev files required by systemd (bsc#1040153)
    * adds 0521-Ensure-udev-persistent-storage-compat-rules-get-crea.patch
  - Bump package version to 044.1 to allow systemd to depend on this change


author: daniel.molkentin@suse.com
changelog:
  - 01fips: Fix typo (bsc#1033238)
    * adds 0522-Fix-typo-from-commit-3f1cdb520.patch
  - 98dracut-systemd: Fix module force loading with systemd (bsc#986216)
    * adds 0523-98dracut-systemd-Fix-module-force-loading-with-syste.patch


author: daniel.molkentin@suse.com
changelog:
  - Suppress nonsensical error message (bsc#1032029)
    * adds 0524-Suppress-nonsensical-error-message-bsc-1032029.patch


author: daniel.molkentin@suse.com
changelog:
  - bail out if module directory does not exist (bsc#1043900)
    * adds 0525-backport-bail-out-if-module-directory-does-not-exist.patch


author: daniel.molkentin@suse.com
changelog:
  - iscsiroot: call handle_firmware only for non-iface invocations (bsc#1032284)
    * adds 0526-iscsiroot-call-handle_firmware-only-for-non-iface-in.patch


author: daniel.molkentin@suse.com
changelog:
  - switch fips checking to use the libkcapi based fipscheck toolset (bsc#1048565)
    * adds 0527-switch-fips-checking-to-use-the-libkcapi-based-fipsc.patch


author: daniel.molkentin@suse.com
changelog:
  - Ensure dracut.sh responds properly to hostonly cmdline (bsc#1048748)
    * adds 0528-Ensure-dracut.sh-responds-properly-to-hostonly_cmdli.patch


author: daniel.molkentin@suse.com
changelog:
  - Ensure that targets such as halt can be reached (bsc#1048698)
    * adds 0529-systemd-add-missing-.slice-unit.patch
    * adds 0530-dracut-systemd-dracut-cmdline-ask-fix-dracut-kernel-.patch
    * adds 0531-dracut-systemd-.service-conflict-with-shutdown-targe.patch
  - Do not add too many drivers all at once (bsc#1037344)
    * adds 0532-List-drivers-rather-than-looking-for-reverse-depende.patch
  - instmods: check modules.builtin in $srcmods (bsc#1048606)
    * adds 0533-instmods-check-modules.builtin-in-srcmods.patch
  - ssh-client: ensure is usable in all cases (bsc#1021846)
    * adds 0534-ssh-client-Include-nss_-libraries.patch
  - Sync initramfs after creation to ensure entigrity (bsc#1049113)
    * adds 0535-Sync-initramfs-after-creation.patch


author: daniel.molkentin@suse.com
changelog:
  - 90multipath: Remove compat rule that is no longer needed (bsc#1054539)
    * adds 0536-90multipath-drop-67-kpartx-compat.rules.patch
  - Don't detect crc32.ko as built-in (bsc#1054538)
    * adds 0537-dracut-init.sh-ignore-crc32.ko-in-builtin-test.patch
  - Enable systemd-based core dumps for initrd (bsc#1054809)
    * adds 0538-Enable-core-dumps-with-systemd-from-initrd.patch


author: daniel.molkentin@suse.com
changelog:
  - Add IMA functionality (fate#323289)
    This is implemented as a sub module analogous to FIPS
    * adds 0539-Add-IMA-functionality-fate-323289.patch


author: daniel.molkentin@suse.com
changelog:
  - Check the proper variable for a custom IMA keys directory (cherry-picked)
    Part of fate#323289.
    * adds 0540-Check-the-proper-variable-for-a-custom-IMA-keys-dire.patch


author: daniel.molkentin@suse.com
changelog:
  - This is to support predictable interface names (boo#960669)
    * adds 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch
  - Include crc32c Intel module when using btrfs (bsc#1011554)
    * adds 0542-Include-crc32c-intel-module-when-using-btrfs.patch


author: daniel.molkentin@suse.com
changelog:
  - Remove 00systemd-bootchart, which is gone from systemd for some time (bsc#1067279)
    Adds 0543-Remove-00systemd-bootchart.patch
  - Ensure 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch is
    not applied on Leap either


author: daniel.molkentin@suse.com
changelog:
  - Make ip=dhcp work. Previously, a network interface specifier was required.
    The new behaviour matches documented behaviour.
    Adds 0544-40network-Make-ip-dhcp-work.patch


author: daniel.molkentin@suse.com
changelog:
  - Support AMD CPU families 0x16 and 0x17 (bsc#1072424)
    * Adds 0545-Add-early-microcode-support-for-AMD-family-16h.patch
    * Adds 0546-Support-Microcode-Updates-for-AMD-CPU-Family-0x17.patch


author: daniel.molkentin@suse.com
changelog:
  - Fix task limit in emergency.service (same as in dracut-emergency.service) (bsc#1019938)
    * adds 0547-Fix-task-limit-in-emergency.service-the-same-change-.patch


author: daniel.molkentin@suse.com
changelog:
  - Switch back to fipvlan for bnx2fc (bsc#1052840)
    * adds 0548-95fcoe-Switch-back-to-using-fipvlan-for-bnx2fc.patch
  - 95fcoe: Allow bnc2x driver more time to complete DCB negotiation (bsc#1052840)
    * adds 0549-fcoe-up-Increase-sleeptime-to-13s.patch
  - 95fcoe: add timeout initqueue entries (bsc#1052840)
    * adds 0550-95fcoe-add-timeout-initqueue-entries.patch


author: daniel.molkentin@suse.com
changelog:
  - FIPS: Try to fetch list of fips modules from the kernel's modules dir (bsc#1074984)
    * Adds 0551-fips-use-lib-modules-uname-r-modules.fips.patch
  - Annotated patches regarding their upstream state


author: daniel.molkentin@suse.com
changelog:
  - Fix typo for ima dependency (evmtcl vs evmctl) (bsc#1073466)
  - Updated Patch annotation regarding their upstream state


author: daniel.molkentin@suse.com
changelog:
  - support validating the IMA policy file signature, needed since Kernel 4.7
    * Adds 0552-98integrity-support-validating-the-IMA-policy-file-s.patch
  - IMA: improve support for evm key loading (bsc#1077359, fate#323906)
    * Adds 0553-98integrity-support-loading-x509-into-the-trusted-bu.patch
    * Adds 0554-98integrity-support-X.509-only-EVM-configuration.patch
  - FIPS: Adjust dependencies to work for cryptsetup 2.0 (bsc#1077070)
  - Added a few more patch annotations


author: daniel.molkentin@suse.com
changelog:
  - 95qeth_rules: Add new module to copy qeth rules (FATE#323440)
    * Adds 0556-95qeth_rules-Add-new-module-to-copy-qeth-rules.patch
  - Avoid executing emergency hook twice
    * Adds 0555-Avoid-executing-emergency-hooks-twice.patch


author: daniel.molkentin@suse.com
changelog:
  - 40network: disable arping, it is no longer part of default installation (bsc#1078245)
    * Adds 0557-40network-make-arping-optional.patch
  - 40network: replace brctl, it is longer part of default installation (bsc#1078245)
    * Adds 0558-40network-remove-brctl-dependency.patch


author: daniel.molkentin@suse.com
changelog:
  - 40network: Add wickedd duid.xml and iaid.xml if available
    (bsc#1022872, bsc#1082832)
    * adds 0559-Add-wickedd-duid.xml-and-iaid.xml-if-available.patch
  - 95qeth_rules: Fix file permissions (FATE#323440)


author: daniel.molkentin@suse.com
changelog:
  - 90kernel-modules: Ensure PCI host modules are included (boo#1079924)
    * adds 0560-90kernel-modules-Ensure-PCI-host-modules-are-include.patch


author: daniel.molkentin@suse.com
changelog:
  - 95iscsi: Add the qedi driver to driver list for iscsi boot
    * adds 0561-Add-the-qedi-driver-to-driver-list-for-iscsi-boot.patch


author: daniel.molkentin@suse.com
changelog:
  - Enable aarch64 and adds critical drivers of ARM platform (bsc#1084272)
    * adds 0562-Adjust-driver-list-to-modern-kernels.patch


author: daniel.molkentin@suse.com
changelog:
  - Instead of using arping, use wicked's own implementation (bsc#1078245)
    Follow-up patch to "disable arping", requires wicked 0.6.46.
    * adds 0563-40network-collapse-arping-and-dhcp-calls-into-wicked.patch
  - Wicked: Properly add set gateway variable when using dhcp (bsc#1085614)
    * adds 0564-40network-Always-set-the-gw-variable.patch
  - Allow booting from block devices using intel vmd (bsc#1079924)
    * adds 0565-90kernel-modules-Include-Intel-Volume-Management-Dev.patch


author: daniel.molkentin@suse.com
changelog:
  - 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
    (bsc#1089332)
    * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch


author: daniel.molkentin@suse.com
changelog:
  - 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
    * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch


author: daniel.molkentin@suse.com
changelog:
  - 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
    * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
  - 10i18n: Load all keymaps for a given locale (boo#1065058)
    * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
    * adds 0570-10i18n-Fix-possible-infinite-recursion.patch


author: daniel.molkentin@suse.com
changelog:
  - 40network: Fix static network setup (bsc#1091099)
    * adds 0571-40network-Fix-static-network-setup.patch
  - lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
    * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
    * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch


author: trenn@suse.de
changelog:
  - Add fix to override ACPI tables via initrd, a kernel config variable
    changed name (bsc#1098448)
    This is mainline git commit 940169e8d8e500498a3f350b2b3f341ae6548492
    A 0580-check_for_CONFIG_ACPI_TABLE_UPGRADE.patch


author: msuchanek@suse.com
changelog:
  - Add kernel-syms to list of packages to remove with purge-kernels (bsc#1104090).
  - Skip kernels that cannot be removed by purge-kernels due to dependencies and
    continue removing other kernels (bsc#1104090).


author: daniel.molkentin@suse.com
changelog:
  - 98dracut-systemd: Start systemd-vconsole-setup before dracut-cmdline-ask
    (bsc#1055834)
    * adds 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
  - Fixed Patch 581 to apply cleanly
    * Updates 0581-kernel-modules-add-nfit.patch
  - Mark the DASD udev rules host-only and handle backslashes in paths for
    hostonly files (bsc#1090884)
    * adds 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
    * adds 0584-95dasd_rules-mark-dasd-rules-host_only.patch


author: daniel.molkentin@suse.com
changelog:
  -  emergency mode: bring shell and all vital information to
    all ttys specified as console devices
    (FATE#325386, bsc#1053248, bsc#937555)
    * Adds 0585-emergency-mode-use-sulogin.patch


author: jdelvare@suse.com
changelog:
  - dracut-installkernel: Stop keeping old kernel files as .old
    (boo#1112327)
    The .old kernel files are confusing grub2 which can't find a
    matching directory under /lib/modules. Furthermore, there is no
    guarantee that the new modules are fully compatible with the old
    kernel.
    If anything goes wrong with a new self-compiled kernel, the user
    can always boot back to the distribution kernel, so the .old
    backup files are not needed in the first place. Get rid of them
    to simplify and speed up the whole process.


author: msuchanek@suse.com
changelog:
  - 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352).
    * adds 0586-95zfcp_rules-parse-zfcp.sh-remove-rule-existence-check.patch


author: daniel.molkentin@suse.com
changelog:
  - Fix a missing space in example configs (boo#1121251)
    * adds 0587-Fix-a-missing-space-in-example-configs.patch


author: daniel.molkentin@suse.com
changelog:
  - Ensure mmc host modules get included properly (bsc#1119037)
    * adds 0588-Ensure-mmc-host-modules-get-included-properly.patch


author: daniel.molkentin@suse.com
changelog:
  - Fix displaying text on emergency consoles (boo#1124088)
    - adds 0589-Fix-displaying-text-on-emergency-consoles.patch
  - Fix systemd version check, will be required for systemd v241
    - 0590-00systemd-check-if-systemd-version-is-a-number.patch


author: daniel.molkentin@suse.com
changelog:
  - 91zipl: Don't use contents of commented lines (osc#1119499)
    * adds 0591-91zipl-Don-t-use-contents-of-commented-lines.patch


author: daniel.molkentin@suse.com
changelog:
  - Correct fix for displaying text on emergency consoles (boo#1124088)
    * removes 0589-Fix-displaying-text-on-emergency-consoles.patch
    * adds 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
  - 95iscsi: handle qedi like bnx2i (bsc#1113712)
    * adds 0592-95iscsi-handle-qedi-like-bnx2i.patch


author: daniel.molkentin@suse.com
changelog:
  - Avoid "Failed to chown ... Operation not permitted" when run from non-root,
    by not copying xattrs. (osc#1092178)
    * adds 0593-dracut-only-copy-xattr-if-root.patch


author: daniel.molkentin@suse.com
changelog:
  - purge-kernels: Avoid endless loop when uninstalling kernels that depend on
    KMPs which in themselves depend on other packages (bsc#1125327)


author: daniel.molkentin@suse.com
changelog:
  - Check SUSE kernel module dependencies recursively (bsc#1127891)
    * adds 0594-Check-SUSE-kernel-module-dependencies-recursively.patch


author: daniel.molkentin@suse.com
changelog:
  - 95iscsi: avoid error messages when building initrd, multipath timeouts
    (bsc#1130114, bsc#1130107, bsc#1121238)
    * adds 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
    * adds 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
    * adds 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
    * adds 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
    * adds 0599-iscsiroot-try-targets-only-once.patch
    * adds 0600-iscsiroot-remove-bashisms.patch


author: daniel.molkentin@suse.com
changelog:
  - dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448)
    * adds 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch


author: daniel.molkentin@suse.com
changelog:
  - Bump to 049
  - Contains fixes for bsc#1134472, bsc#1134347 and bsc#1133819
  - Patches are now maintained in git
    * Removed 0012-40network-Fix-race-condition-when-wait-for-networks.patch
    * Removed 0013-40network-always-start-netroot-in-ifup.sh.patch
    * Removed 0015-40network-replace-dhclient-with-wickedd-dhcp-supplic.patch
    * Removed 0016-Add-new-s390x-specific-rule-files.patch
    * Removed 0017-45ifcfg-use-distro-specific-scripts.patch
    * Removed 0020-00warpclock-Set-correct-timezone.patch
    * Removed 0021-95dcssblk-Add-new-module-for-DCSS-block-devices.patch
    * Removed 0048-40network-Only-enable-network-interfaces-if-explicit.patch
    * Removed 0053-01fips-fixup-loading-issues.patch
    * Removed 0056-81cio_ignore-handle-cio_ignore-commandline.patch
    * Removed 0057-01fips-Include-some-more-hmacs.patch
    * Removed 0058-dracut-add-warning-when-including-unsupported-module.patch
    * Removed 0059-99suse-Add-SUSE-specific-initrd-parsing.patch
    * Removed 0060-45ifcfg-Add-SUSE-specific-write-ifcfg-file.patch
    * Removed 0061-45ifcfg-Fixup-error-message-in-write-ifcfg-suse.patch
    * Removed 0075-95dasd_rules-enable-parsing-of-rd.dasd-commandline-p.patch
    * Removed 0076-Correctly-set-cio_ignore-for-dynamic-s390-rules.patch
    * Removed 0079-95dasd_rules-fixup-rd.dasd-parsing.patch
    * Removed 0080-95dasd_rules-print-out-rd.dasd-commandline.patch
    * Removed 0081-95dasd_mod-do-not-set-module-parameters-if-dasd_cio_.patch
    * Removed 0083-95zfcp_rules-Fixup-rd.zfcp-parsing.patch
    * Removed 0085-95zfcp_rules-print-out-rd.zfcp-commandline-parameter.patch
    * Removed 0086-95zfcp_rules-Auto-generate-udev-rule-for-ipl-device.patch
    * Removed 0087-95dasd_rules-Auto-generate-udev-rule-for-ipl-device.patch
    * Removed 0088-91zipl-Add-new-module-to-update-s390x-configuration.patch
    * Removed 0089-40network-create-var-lib-wicked-in-ifup.sh.patch
    * Removed 0090-dracut-caps-Remove-whole-caps-module.patch
    * Removed 0091-dracut-biosdevname-In-SUSE-biosdevname-package-is-in.patch
    * Removed 0094-Implement-shortcut-ip-ifname-static-for-static-confi.patch
    * Removed 0107-Fixup-typo-firmare-instead-of-firmware.patch
    * Removed 0108-91zipl-Store-commandline-correctly.patch
    * Removed 0109-95dasd_rules-Store-all-devices-in-commandline.patch
    * Removed 0110-95zfcp_rules-Store-all-devices-in-commandline.patch
    * Removed 0113-91zipl-Install-script-as-executable.patch
    * Removed 0114-91zipl-Translate-ext2-3-into-ext4.patch
    * Removed 0116-Mark-scripts-as-executable.patch
    * Removed 0117-95dasd_rules-Enable-the-device-before-checking-devic.patch
    * Removed 0118-95zfcp_rules-Enable-the-device-before-checking-devic.patch
    * Removed 0121-Adjust-initramfs-kernel.img-to-SUSE-default-initrd-k.patch
    * Removed 0123-95zfcp_rules-fix-typo-in-module_setup.patch
    * Removed 0124-40network-Update-iBFT-scanning-code-to-handle-IPv6.patch
    * Removed 0125-40network-separate-mask-and-prefix.patch
    * Removed 0126-01fips-Add-drbg-module-to-force-loaded-modules.patch
    * Removed 0128-90lvm-Install-dm-snapshot-module.patch
    * Removed 0130-nfs-Always-add-all-kernel-modules-for-kdump.patch
    * Removed 0131-40network-handle-prefixed-IP-addresses-correctly.patch
    * Removed 0132-40network-fixup-static-network-configuration.patch
    * Removed 0133-Allow-multiple-configurations-per-network-interface-.patch
    * Removed 0137-Switch-from-Mozilla-NSS-sha256hmac-checking-to-fipsc.patch
    * Removed 0138-fips_add_aesni-intel.patch
    * Removed 0139-fips-kernel-4.4-fixes.patch
    * Removed 0142-40network-Don-t-report-error-for-etc-sysconfig-netwo.patch
    * Removed 0144-90crypt-Fixed-crypttab_contains-to-also-work-with-de.patch
    * Removed 0145-40network-handle-ip-ifname-static-correctly.patch
    * Removed 0150-Find-kernel-modules-in-extra-and-weak-updates-path-a.patch
    * Removed 0157-Add-boot-zipl-to-host-devs-if-it-is-a-mount-point.patch
    * Removed 0158-Add-SUSE-kernel-module-dependencies-in-etc-modprobe.patch
    * Removed 0159-network-Try-to-load-xennet.patch
    * Removed 0160-s390-update_active_devices_initrd.patch
    * Removed 0161-95zfcp_rules-simplified-rd.zfcp-commandline-for-NPIV.patch
    * Removed 0162-network-Request-DHCP-lease-instead-of-getting-applyi.patch
    * Removed 0163-Install-etc-sysconfig-console-to-see-specific-fonts.patch
    * Removed 0164-Fix-initramfs-ver.img-vs-initrd-ver-in-dracut-initra.patch
    * Removed 0168-remove_plymouth_logo_file.patch
    * Removed 0169-network_set_mtu_macaddr_for_dhcp.patch
    * Removed 0170-iscsi-skip-ibft-invalid-dhcp.patch
    * Removed 0180-i18n_add_correct_fontmaps.patch
    * Removed 0182-fix-include-parsing.patch
    * Removed 0183-fix_add_drivers_hang.patch
    * Removed 0188-95dasd_rules-Install-collect-udev-helper-binary.patch
    * Removed 0190-replace-iscsistart-with-systemd-service-files.patch
    * Removed 0191-static_network_setup_return_zero.patch
    * Removed 0192-iscsi_set_boot_protocol_from_ifcfg.patch
    * Removed 0193-95iscsi-Set-number-of-login-retries.patch
    * Removed 0196-ibft-wait-for-session-on-all-paths.patch
    * Removed 0197-95iscsi-Do-not-require-network-for-qla4xxx-flash-ses.patch
    * Removed 0198-95iscsi-set-rd.iscsi.firmware-for-qla4xxx-sessions.patch
    * Removed 0199-rd-iscsi-waitnet-default-false.patch
    * Removed 0200-dracut_fix_multipath_without_config.patch
    * Removed 0201-fix_nfs_with_ip_instead_of_hostname.patch
    * Removed 0202-dracut_dmraid_use_udev.patch
    * Removed 0203-no-fail-builtin-module.patch
    * Removed 0204-mkinitrd-fix-monster.patch
    * Removed 0205-mdraid_ignore_hostonly.patch
    * Removed 0206-nfs_dns_alias.patch
    * Removed 0207-handle_module_aliases.patch
    * Removed 0208-no_forced_virtnet.patch
    * Removed 0209-fix_modules_load_d_hostonly.patch
    * Removed 0210-add_fcoe_uefi_check.patch
    * Removed 0212-fcoe_reorder_init_path.patch
    * Removed 0213-Fix-wrong-keymap-inclusion.patch
    * Removed 0214-95fcoe-Do-not-overwrite-FCoE-configuration.patch
    * Removed 0215-95fcoe-Do-not-complain-about-missing-etc-hba.conf.patch
    * Removed 0216-95fcoe-silence-lldpad-warnings.patch
    * Removed 0217-95fcoe-Allow-to-specify-the-FCoE-mode-via-the-fcoe-p.patch
    * Removed 0218-40network-allow-persistent-interface-names.patch
    * Removed 0219-95fcoe-use-interface-names-instead-of-MAC-addresses.patch
    * Removed 0220-95fcoe-always-set-AUTO_VLAN-for-fcoemon.patch
    * Removed 0221-95fcoe-Add-shutdown-script.patch
    * Removed 0222-90dm-Fixup-shutdown-script.patch
    * Removed 0223-90dm-fixup-dependency-cycle-between-MD-and-DM-shutdo.patch
    * Removed 0224-95iscsi-setup-bnx2i-offload-connections-properly.patch
    * Removed 0225-95fcoe-do-not-start-fcoemon-twice.patch
    * Removed 0300-dracut_dont_use_dpkg_defaults_on_SUSE.patch
    * Removed 0301-include_sysconfig_language.patch
    * Removed 0302-Revert-90multipath-add-hostonly-multipath.conf-in-ca.patch
    * Removed 0303-fix_multipath_check_hostonly.patch
    * Removed 0304-90multipath-Start-daemon-after-udev-settle.patch
    * Removed 0305-90multipath-load-dm_multipath-module-during-startup.patch
    * Removed 0306-90multipath-add-shutdown-script.patch
    * Removed 0307-90multipath-parse-kernel-commandline-option-multipat.patch
    * Removed 0308-mdraid_add_IMSM_NO_PLATFORM_env.patch
    * Removed 0309-90dmraid-do-not-delete-partitions.patch
    * Removed 0310-95resume-Do-not-resume-on-iSCSI.patch
    * Removed 0311-95iscsi-ip-ibft-is-deprecated.patch
    * Removed 0312-40network-Do-not-print-message-about-tmp-net.ibft0.c.patch
    * Removed 0313-90mdraid-Use-stock-MD-rules-to-assemble-RAID-arrays.patch
    * Removed 0314-nfs_do_not_pass_ifname_for_bonding_devices.patch
    * Removed 0402-driver-fail-summary.patch
    * Removed 0403-95lunmask-Add-module-to-handle-LUN-masking.patch
    * Removed 0404-dracut-emergency-optionally-print-fs-help.patch
    * Removed 0450-Strip-NUL-bytes-in-stream-before-push-in-string.patch
    * Removed 0451-systemd-initrd-add-initrd-root-device.target.patch
    * Removed 0452-Always-try-to-add-pinctrl-cherryview.patch
    * Removed 0453-Resolve-symbolic-links-for-i-and-k-parameters-bsc-90.patch
    * Removed 0454-Add-md4-and-arc4-modules-for-ntlm.patch
    * Removed 0500-Reset-IFS-variable.patch
    * Removed 0501-dasd_fix_ssid_bigger_zero.patch
    * Removed 0502-persistent_device_policy_param_enhance.patch
    * Removed 0503-dracut.sh-create-the-initramfs-non-world-readable-al.patch
    * Removed 0504-ibft-fix-boot-flag-check.patch
    * Removed 0505-Allow-booting-from-degraded-MD-RAID-arrays.patch
    * Removed 0506-Boot-on-s390x-with-fips-1-on-the-kernel-commnad-line.patch
    * Removed 0507-Set-TaskMax-inifinite-for-the-emergency-shell.patch
    * Removed 0508-90multipath-start-before-local-fs-pre.target.patch
    * Removed 0509-01fips-Remove-zlib-module-as-requirement.patch
    * Removed 0510-01fips-Some-modules-use-separators-other-than.patch
    * Removed 0511-01fips-ensure-fips-initialization-succeeds-on-s390-x.patch
    * Removed 0512-Make-binutils-optional-when-elfutils-are-available.patch
    * Removed 0513-Fix-regression-caused-by-6f9bf2b8ac436259bdccb110545.patch
    * Removed 0514-man-make-the-k-option-clear-using-mkinitrd.patch
    * Removed 0515-90kernel-modules-also-add-block-device-driver-revers.patch
    * Removed 0516-mkinitrd-suse.sh-Fix-prefix-calculation.patch
    * Removed 0517-95fcoe-fixup-fcoe-genrules.sh-for-VN2VN-mode.patch
    * Removed 0518-90kernel-modules-Fix-backlight-on-Cherrytrail-device.patch
    * Removed 0519-90kernel-modules-Ensure-phy-drivers-are-loaded-in-in.patch
    * Removed 0520-Ignore-module-resolution-errors.patch
    * Removed 0521-Ensure-udev-persistent-storage-compat-rules-get-crea.patch
    * Removed 0522-Fix-typo-from-commit-3f1cdb520.patch
    * Removed 0523-98dracut-systemd-Fix-module-force-loading-with-syste.patch
    * Removed 0524-Suppress-nonsensical-error-message-bsc-1032029.patch
    * Removed 0525-backport-bail-out-if-module-directory-does-not-exist.patch
    * Removed 0526-iscsiroot-call-handle_firmware-only-for-non-iface-in.patch
    * Removed 0527-switch-fips-checking-to-use-the-libkcapi-based-fipsc.patch
    * Removed 0528-Ensure-dracut.sh-responds-properly-to-hostonly_cmdli.patch
    * Removed 0529-systemd-add-missing-.slice-unit.patch
    * Removed 0530-dracut-systemd-dracut-cmdline-ask-fix-dracut-kernel-.patch
    * Removed 0531-dracut-systemd-.service-conflict-with-shutdown-targe.patch
    * Removed 0532-List-drivers-rather-than-looking-for-reverse-depende.patch
    * Removed 0533-instmods-check-modules.builtin-in-srcmods.patch
    * Removed 0534-ssh-client-Include-nss_-libraries.patch
    * Removed 0535-Sync-initramfs-after-creation.patch
    * Removed 0536-90multipath-drop-67-kpartx-compat.rules.patch
    * Removed 0537-dracut-init.sh-ignore-crc32.ko-in-builtin-test.patch
    * Removed 0538-Enable-core-dumps-with-systemd-from-initrd.patch
    * Removed 0539-Add-IMA-functionality-fate-323289.patch
    * Removed 0540-Check-the-proper-variable-for-a-custom-IMA-keys-dire.patch
    * Removed 0541-Make-sure-70-persistent-net.rules-is-included-in-ini.patch
    * Removed 0542-Include-crc32c-intel-module-when-using-btrfs.patch
    * Removed 0543-Remove-00systemd-bootchart.patch
    * Removed 0544-40network-Make-ip-dhcp-work.patch
    * Removed 0545-Add-early-microcode-support-for-AMD-family-16h.patch
    * Removed 0546-Support-Microcode-Updates-for-AMD-CPU-Family-0x17.patch
    * Removed 0547-Fix-task-limit-in-emergency.service-the-same-change-.patch
    * Removed 0548-95fcoe-Switch-back-to-using-fipvlan-for-bnx2fc.patch
    * Removed 0549-fcoe-up-Increase-sleeptime-to-13s.patch
    * Removed 0550-95fcoe-add-timeout-initqueue-entries.patch
    * Removed 0551-fips-use-lib-modules-uname-r-modules.fips.patch
    * Removed 0552-98integrity-support-validating-the-IMA-policy-file-s.patch
    * Removed 0553-98integrity-support-loading-x509-into-the-trusted-bu.patch
    * Removed 0554-98integrity-support-X.509-only-EVM-configuration.patch
    * Removed 0555-Avoid-executing-emergency-hooks-twice.patch
    * Removed 0556-95qeth_rules-Add-new-module-to-copy-qeth-rules.patch
    * Removed 0557-40network-make-arping-optional.patch
    * Removed 0558-40network-remove-brctl-dependency.patch
    * Removed 0559-Add-wickedd-duid.xml-and-iaid.xml-if-available.patch
    * Removed 0560-90kernel-modules-Ensure-PCI-host-modules-are-include.patch
    * Removed 0561-Add-the-qedi-driver-to-driver-list-for-iscsi-boot.patch
    * Removed 0562-Adjust-driver-list-to-modern-kernels.patch
    * Removed 0563-40network-collapse-arping-and-dhcp-calls-into-wicked.patch
    * Removed 0564-40network-Always-set-the-gw-variable.patch
    * Removed 0565-90kernel-modules-Include-Intel-Volume-Management-Dev.patch
    * Removed 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch
    * Removed 0567-Fix-booting-with-fips-1-on-SLES-15.patch
    * Removed 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
    * Removed 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
    * Removed 0570-10i18n-Fix-possible-infinite-recursion.patch
    * Removed 0571-40network-Fix-static-network-setup.patch
    * Removed 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
    * Removed 0573-lsinitrd.sh-quote-filename-in-extract_files.patch
    * Removed 0574-s-find_btrfs_devs-btrfs_devs.patch
    * Removed 0580-check_for_CONFIG_ACPI_TABLE_UPGRADE.patch
    * Removed 0581-kernel-modules-add-nfit.patch
    * Removed 0582-98dracut-systemd-Start-systemd-vconsole-setup-before.patch
    * Removed 0583-99base-Allow-files-with-backslashes-in-hostonly-file.patch
    * Removed 0584-95dasd_rules-mark-dasd-rules-host_only.patch
    * Removed 0585-emergency-mode-use-sulogin.patch
    * Removed 0586-95zfcp_rules-parse-zfcp.sh-remove-rule-existence-check.patch
    * Removed 0587-Fix-a-missing-space-in-example-configs.patch
    * Removed 0588-Ensure-mmc-host-modules-get-included-properly.patch
    * Removed 0589-Fix-98dracut-systemd-dracut-emergency.sh.patch
    * Removed 0590-00systemd-check-if-systemd-version-is-a-number.patch
    * Removed 0591-91zipl-Don-t-use-contents-of-commented-lines.patch
    * Removed 0592-95iscsi-handle-qedi-like-bnx2i.patch
    * Removed 0593-dracut-only-copy-xattr-if-root.patch
    * Removed 0594-Check-SUSE-kernel-module-dependencies-recursively.patch
    * Removed 0595-iscsi-don-t-continue-waiting-if-the-root-device-is-p.patch
    * Removed 0596-network-stop-waiting-for-interfaces-if-root-device-i.patch
    * Removed 0597-iscsiroot-parse_iscsi_root-overwrites-command-line-a.patch
    * Removed 0598-iscsiroot-there-s-never-more-than-one-target-per-cal.patch
    * Removed 0599-iscsiroot-try-targets-only-once.patch
    * Removed 0600-iscsiroot-remove-bashisms.patch
    * Removed 0601-base-dracut-lib.sh-dev_unit_name-guard-against-dev-b.patch


author: ext-linus.larsson@se.fujitsu.com
changelog:
  - Update to version 049+git94.aef7a52b:
    * ucode: properly include early only ucode (bsc#1098915, bsc#1125393)
    * keep network device naming scheme on upgrade (bsc#1136927)


author: daniel.molkentin@suse.com
changelog:
  - Update to version 049+git99.76df40e7:
    * 95fcoe: Fix startup when fcoe module is included (boo#1136977)
    * tests: Ignore .testdir
    * Add support for riscv64
    * mkinitrd-suse.sh: simplify get_kernel_version (bsc#1139939)
    * 95dasd-rules & 95zfcp_rules: Look for correct rule name (bsc#1137784)


author: daniel.molkentin@suse.com
changelog:
  - Update to version 049+git101.17c579a0:
    * call netroot on wicked dhcp setup
    * nfsroot follow ifcfg settings for boot protocol


author: daniel.molkentin@suse.com
changelog:
  - Update to version 049+git102.9ee0c387:
    * dracut-install: Add support for compressed firmware files (boo#1136677)


author: daniel.molkentin@suse.com
changelog:
  - Update to version 049+git103.c8d99b62:
    * Add support for compressed kernel modules (boo#1135854)


author: daniel.molkentin@suse.com
changelog:
  - Update to version 049+git108.6c9d1156:
    * dracut-init.sh: Nuke unused install_kmod_with_fw function
    * dracut-install: Support the compressed firmware files correctly (boo#1146769)
    * dracut: let module handling function accept optional path option
    * dracut.sh: Fix udevdir detection


author: daniel.molkentin@suse.com
changelog:
  - Update to version 049+git112.fe41ccd9:
    * dracut: move /var/run and /var/lock from directory to symlink (bsc#1149103, ECO#323)
    * 35network-legacy: signalize the setup in ifup when dhcp (bsc#1146661)
    * 35network-legacy: fix typo
    * 35network-legacy: install hostname required by ifup.sh (bsc#1146661)


author: daniel.molkentin@suse.com
changelog:
  - Update to version 049+git114.058e566c:
    * 35network-legacy: only skip waiting for interfaces if netroot is set (bsc#1152006)
    * fixup "Dracut: only login to one target at a time" (bsc#1152650)


author: daniel.molkentin@suse.com
changelog:
  - Update to version 049+git115.c2d8d6fb:
    * suse: Remove incorrect usage of %_libexecdir (boo#1155785)


author: daniel.molkentin@suse.com
changelog:
  - Update to version 049+git116.e9995c78:
    * dracut.spec: add convertfs module correctly (boo#1158777)


author: daniel.molkentin@suse.com
changelog:
  - Update to version 049+git117.d3206e79:
    * Remove purge-kernels scripts and service (jsc#SLE-10162)


author: daniel.molkentin@suse.com
changelog:
  - Update to version 049+git118.a6090e2f:
    * Implement support for verifying the boot with fipscheck (bsc#1158530)


author: daniel.molkentin@suse.com
changelog:
  - Update to version 049.1+git120.dbfbfcb8:
    * 95zfcp_rules/parse-zfcp.sh: remove rule existence check (bsc#1008352)


author: daniel.molkentin@suse.com
changelog:
  - Update to version 049.1+git123.c2a6645e:
    * dracut: add warning when including unsupported modules (bsc#1163055)
    * 01fips: Boot without BOOT_IMAGE being set (bsc#1161292)
    * 01fips: Use correct kernel image name for more platforms (bsc#1164076)


author: daniel.molkentin@suse.com
changelog:
  - Update to version 049.1+git124.70941b30:
    * 90kernel-modules: Add PCI host controller modules (boo#1162669)


author: daniel.molkentin@suse.com
changelog:
  - Update to version 049.1+git125.e2b2c9ef:
    * 01fips: handle SHA1 on machines without AVX (bsc#1160318)
    * Update: 90kernel-modules: Add PCI host controller modules (boo#1162669)


author: daniel.molkentin@suse.com
changelog:
  - Update to version 049.1+git129.0f19bbfd:
    * 35network-legacy: dhclient is optional (bsc#1166188)
    * suse.spec: Create -extra package (bsc#1166188)
    * suse.spec: Remove obsolete permission fixups
    * 00warpclock: Fix permissions in warpclock.sh


author: daniel.molkentin@suse.com
changelog:
  - Update to version 049.1+git135.46dceb02:
    * 40network: Do not require hostname binary
    * suse.spec: add new modules 90nvdimm and 99suse-initrd
    * 95fcoe: default rd.nofcoe to false (bsc#1163343)
    * Add module "99suse-initrd" for parsing "SUSE INITRD" lines (bsc#1161343)
      Dependent commits:
    * Add module "90nvdimm" for NVDIMM support
    * 90kernel-modules: remove nfit from static module list


author: daniel.molkentin@suse.com
changelog:
  - Update to version 050+git56.ec64a6fa:
    * Makefile: really make externally defined CFLAGS work
    * suse.spec: Sort new modules and files in 050 into sub packages


author: daniel.molkentin@suse.com
changelog:
  - Changed scheme to 050+suse.56.gec64a6fa to match systemd package
    * Scheme pattern> <PARENT_TAG>+suse.<TAG_OFFSET>.g<SHA1>
    * No functional change


author: daniel.molkentin@suse.com
changelog:
  - Update to version 050+suse.58.g0b998bee:
    * Mark interface setup after dhcp (bsc#1167161)
    * Store nameserver received from wicked dhcp lease (bsc#1167161)


author: daniel.molkentin@suse.com
changelog:
  - Update to version 050+suse.59.gc635f468:
    * mkinitrd-suse.sh: Fix i586 platform detection (boo#1168341)


author: daniel.molkentin@suse.com
changelog:
  - Update to version 050+suse.60.ged08acac:
    * 90nvdimm: include nvdimm keys in initrd (bsc#1161343)
    * network-legacy/net-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1161438)


author: daniel.molkentin@suse.com
changelog:
  - Update to version 050+suse.61.g0fe0e854:
    * Fix test in lsinitrd (https://progress.opensuse.org/issues/65334)


author: daniel.molkentin@suse.com
changelog:
  - Update to version 050+suse.63.g796e020e:
    * suse.spec: Move /bin/* and /sbin/* to /usr
    * suse.spec: Remove long unused mkinitrd_setup file


author: daniel.molkentin@suse.com
changelog:
  - Update to version 050+suse.65.ge1e64674:
    * Add wicked specific config files (bsc#1089333)
    * Run format_spec_file


author: daniel.molkentin@suse.com
changelog:
  - Update to version 050+suse.66.g76431c83:
    * 95iscsi: fix missing space when compiling cmdline args (bsc#1172816)


author: daniel.molkentin@suse.com
changelog:
  - Update to version 050+suse.67.g28be2f36:
    * 35network-legacy: Fix dual stack setups (bsc#1172807)


author: daniel.molkentin@suse.com
changelog:
  - Update to version 050+suse.71.g390f4d72:
    * 01fips: modprobe failures during manual module loading is not fatal (bsc#1169997)
    * 91zipl: parse-zipl.sh: honor SYSTEMD_READY (bsc#1165828)
    * 95iscsi: fix ipv6 target discovery (bsc#1172807)
    * 35network-legacy: correct conditional for creating did-setup file (bsc#1172807)


author: daniel.molkentin@suse.com
changelog:
  - Update to version 050+suse.75.g266a76d9:
    * net-lib.sh: support infiniband network mac addresses (bsc#996146)
    * 95iscsi: use ip_params_for_remote_addr() (bsc#1167494)
    * 95nfs: use ip_params_for_remote_addr() (bsc#1167494)
    * dracut-functions: add ip_params_for_remote_addr() helper (bsc#1167494)


author: fvogt@suse.com
changelog:
  - Generate the tarball during buildtime. Tracking both the tarball
    and the .obscpio combines the worst of both.


author: daniel.molkentin@suse.com
changelog:
  - Update to version 050+suse.226.gb86d9bcf:
    We are now tracking the master branch, preparing for a 051 release
    within the next weeks.
    (the list includes changes previously backported)
    * 01fips: modprobe failures during manual module loading is not fatal
    * 01fips: turn info calls into fips_info calls (bsc#1164076)
    * 04watchdog: split the watchdog module install
    * 35network-legacy: simplify fallback dhcp setup
    * 51-dracut-rescue.install: Don't use BLS fragment shipped by kernel package
    * 90crypt: make `rd.luks.key` usable with encrypted keydev.
    * 90crypt/module-setup.sh: try to catch kernel config changes
    * 90kernel-modules: add pci_hyperv
    * 90kernel-modules/module-setup.sh: add sg kernel module
    * 90kernel-modules: remove nfit from static module list
    * 90lvm: do not add newline to cmdline
    * 90nvdimm: include nvdimm keys in initrd
    * 90ppcmac: respect DRACUT_ARCH, don't exclude ppcle
    * 91zipl: parse-zipl.sh: honor SYSTEMD_READY
    * 95cifs: install new softdeps (sha512, gcm, ccm, aead2)
    * 95cifs: pass rootflags to mount
    * 95dcssblk: fix script permissions
    * 95fcoe: default rd.nofcoe to false
    * 95iscsi: fix ipv6 target discovery
    * 95iscsi: fix missing space when compiling cmdline args
    * 95iscsi: use ip_params_for_remote_addr()
    * 95nfs: only install rpc services for NFS < 4 when hostonly is strict
    * 95nfs: use ip_params_for_remote_addr()
    * 95nvmf: add module for NVMe-oF (jsc#ECO-3063)
    * 95nvmf: add NVMe over TCP support
    * 95nvmf: fix typo in the example documentation
    * 95resume: Do not resume on iSCSI, FCoE or NBD
    * 95zfcp_rules/parse-zfcp.sh: remove rule existence check
    * 95znet: Add a rd.znet_ifname= option
    * 99base: Remove duplicate nfsroot_to_var from dracut-lib.sh
    * 99memstrack: hook script should not call exit
    * 99memstrack: Only start tracking service when rd.memdebug=4|5
    * 99squash: Don't hardcode the squash sub directories
    * 99squash: improve pre-requirements check
    * 99squash: simplify the code
    * Add 99memstrack module
    * Adding a bug report template
    * Adding a feature request template
    * Adding a pull request template
    * Adding code of conduct
    * Adding documentation template
    * Adding security policy
    * Adding the labels file for master
    * Adding the labels file for the RHEL-6 branch
    * Adding the labels file for the RHEL-7 branch
    * Adding the labels file for the RHEL-8 branch
    * Adding the labels trigger file for the Master branch
    * Adding the labels trigger file for the RHEL-6 branch
    * Adding the labels trigger file for the RHEL-7 branch
    * Adding the labels trigger file for the RHEL-8 branch
    * Add module "90nvdimm" for NVDIMM support
    * Add --version to man page
    * Allow $DRACUT_INSTALL to be not an absolute path
    * Always pull in machinery to read ifcfg files
    * As of v246 of systemd "syslog" and "syslog-console" switches have been deprecated (bsc#1180119)
    * btrfs: force preload btrfs module
    * busybox: simplify listing of supported utilities
    * Change the order of NFS servers during the boot NFS server provided by DHCP in next-server option has higher priority than DHCP-server itself
    * CI: remove Fedora 30, add Fedora 32
    * cms: regenerate NetworkManager connections
    * cryptroot-ask: no warn if /run/cryptsetup exist
    * dasd: only install /etc/dasd.conf if present
    * dhclient-script: Fix typo in output of  BOUND & BOUND6 cases
    * dmsquash-live-root: Remove obsolete osmin.img processing.
    * Document initqueue/online hook
    * Do not start inside container
    * don't prefer $TMPDIR over --tmpdir
    * dracut.cmdline.7.asc: clarify usage of `rd.lvm.vg` and `rd.lvm.lv`
    * dracut.cmdline.7.asc: fix typo
    * dracut.conf.5.asc: document how to config --no-compress in the config
    * dracut-functions: add ip_params_for_remote_addr() helper
    * dracut-functions: fix find_binary() to return full path
    * dracut-initqueue: Print more useful info in case of timeout
    * dracut-lib.sh: quote variables in parameter expansion patterns
    * dracut.modules.7.asc: fix another typo
    * dracut.modules.7.asc: fix reference to insmodpost module (bsc#1187774)
    * dracut.sh: add check for invalid configuration files
    * dracut.sh: Add --version
    * dracut.sh: don't call fsfreeze on subvol of root file system
    * dracut.sh: FIPS workaround for openssl-libs on Fedora/RHEL (bsc#1178217)
    * dracut.sh: fix early microcode detection logic
    * dracut.sh: fix errors pointed out by shellcheck.
    * dracut.sh: fix ia32 detection for uefi executables
    * dracut.sh: fix some indentation.
    * dracut.sh: Move the library workaround after squash
    * dracut.spec: add 90nvdimm
    * dracut.spec: add version check for deprecated files
    * Fix CI badges in README.md and fix dracut description
    * Fix CoC URL
    * fix graphics startup failure with the rhgb paramter in CentOS8.2
    * Fix pre-trigger stage by replacing exit with return in lldpad.sh
    * Fix test in lsinitrd
    * Fix Unicode
    * Fix Unicode and dracut install labeler
    * github actions: use test container directly
    * .github: fix path to label workflow mapping file
    * i18n: Always install /etc/vconsole.conf
    * install: also install post weak dependencies of kernel modules
    * Install crypto modules in 90kernel-modules
    * install dependant libs too
    * lvm: fix removal of pvscan from udev rules
    * lvm: remove unnecessary ${initdir} from lvm_scan.sh
    * Make externally defined CFLAGS work
    * Makefile: fix VERSION again
    * Makefile: merge main-version and git-version earlier
    * Makefile: really make externally defined CFLAGS work
    * match simplified rd.zfcp format too
    * match the whole string
    * mkinitrd-dracut.sh: use vmlinux regex for ppc*, vmlinuz for i686
    * mkinitrd-suse.sh: Fix i586 platform detection
    * mount-root.sh: fix writing fstab file with missing fsck flag
    * multipath: add automatic configuration for multipath
    * net-lib.sh: support infiniband network mac addresses
    * network: fix glob matching ipv6 addresses
    * network-manager: ensure that nm-run.sh is executed when needed
    * network-manager: install libnss DNS and mDNS plugins
    * network-manager: move connection generation to a lib file
    * network-manager: set kernel hostname from the command line
    * New labels file
    * New label trigger file
    * README.md: fix github action badge links
    * Remove cleanup_trace_mem calls
    * Remove memtrace-ko and rd.memdebug=4 support in dracut
    * Remove stratis module
    * Removing dracut entry not compat with new plugin
    * Switching label triggers from pull requests to cron
    * systemd: skip dependency add for non-existent units
    * TEST-03-USR-MOUNT/test.sh: increase loglevel
    * TEST-12-RAID-DEG/create-root.sh: more udevadm settle
    * TEST-41-NBD-NM/Makefile: should be based on TEST-40-NBD not TEST-20-NFS
    * TEST-99: exclude /etc/dnf/* from check
    * test/TEST-35-ISCSI-MULTI: bump disk space
    * test: use dd from /dev/zero, instead of creating files with a hole
    * .travis.yml: reformat
    * UEFI Mode: only write kernel cmdline to UEFI binary
    * Update master-labels.yml
    * url-lib: drop NSS if it's not in curl --version
    * Use TMPDIR if available


author: daniel.molkentin@suse.com
changelog:
  - Update to version 050+suse.227.g7a9b782d:
    * Revert "install: also install post weak dependencies of kernel modules" (boo#1177016)


author: daniel.molkentin@suse.com
changelog:
  - Update to version 050+suse.250.ge6b6e843:
    * Revert "Revert "install: also install post weak dependencies of kernel modules""
    * 98dracut-systemd: don't wait for root device if remote cryptsetup active
    * cryptroot-ask: unify /etc/crypttab and rd.luks.key
    * 90kernel-modules: arm: add drivers/hwmon for arm/arm64
    * rootfs-block: only write root argument for block device
    * 90crypt: pull in remote-cryptsetup.target enablement
    * 00systemd: add missing cryptsetup-related targets (bsc#1177811)
    * 95nvmf: Implement 'fc,auto' commandline syntax (bsc#1142248)
    * 95nvmf: add nvmf-autoconnect script
    * 95nvmf: Fixup FC connections
    * 95nvmf: add documentation
    * 95nvmf: rework parameter handling
    * dracut-install: fix edge-case regression with weak modules
    * dracut-install: ignore bogus preload libs
    * dracut.spec: Use make macros
    * dracut.spec: remove fedora pre 30 quirks
    * 50drm: Check drm_encoder_init along drm_crtc_init
    * 50drm: Include drm platform drivers in hostonly
    * 50drm: fix ambiguous redirects
    * Include devfreq drivers in initrd
    * dracut.spec: include the 04watchdog-modules module


author: daniel.molkentin@suse.com
changelog:
  - Update to version 050+suse.275.gc9639522:
    * Don't print when a module is explicitly omitted (by default)
    * 95nfs: /var/lib/nfs/statd/sm is /var/lib/nfs/sm on SUSE (boo#1177462) (bsc#1184970)
    * Retrieve service, rpc and protcol entries via getent in hostonly mode (boo#1177461)
    * Remove uses of bash (and bash specific syntax) in runtime scripts
    * 90crypt: pull in remote-cryptsetup.target enablement
    * 90multipath: install kpartx's 11-dm-parts.rules
    * Revert "90crypt: ship initrd-cryptsetup.target"
    * 90qemu-net: install less module for strict hostonly mode
    * 90qemu-net: in hostonly mode, only install if network is needed
    * 95nfs: Install less module if hostonly mode is strict
    * 90kernel-modules: Install less modules for hostonly mode
    * 90kernel-modules: install block drivers more strictly
    * 04watchdog-modules: Simplify install_kernel using new added helper
    * dracut-init.sh: Add a helper for detect device kernel modules
    * dracut-functions.sh: Fix check_block_and_slaves_all
    * 90kernel-network-modules: Don't install iscsi related module
    * Add a --hostonly-nics option
    * Configure the runner for team interfaces
    * 99squash: Check require module earlier, and properly
    * dracut-functions: add a helper to check if kernel module is available
    * 90crypt: ship initrd-cryptsetup.target
    * Revert "90crypt: pull in remote-cryptsetup.target enablement"
    * dmsquash-live/iso-scan: Provide an easy reference to iso-scan device.
    * 99memstrack: use /bin/bash
    * modules.d: fix udev rules detection of multipath devices (bsc#bsc#1171370)
    * 95fcoe: load 'libfcoe' module as a fallback (bsc#1173560)
    * 99base: enable the initqueue in both 'dracut --add-device' and 'dracut --mount' cases.
      (bsc#bsc#1161573)
    * 90kernel-modules-extra: don't resolve symlinks before instmod (bsc#1185277)
    * fcoe/fcoe-genrules.sh: use $name instead of $env{INTERFACE} (bsc#1186260)


author: daniel.molkentin@suse.com
changelog:
  - Update to version 051 (051+suse.84.gc6bd70b8):
    * suse.spec: add 051 modules dbus, wicked
    * Update AUTHORS, NEWS
    * Drop 51-dracut-rescue-postinst.sh entirely
    * Revert "Retrieve service, rpc and protcol entries via getent in hostonly mode"
    * Adding stalebot file
    * Revert "Add --uefi-output for custom output filename"
    * Improve documentation of iso-scan/filename feature
    * multipathd: fix the comparison
    * 06dbus: consider dbus-broker
    * 06dbus: Add busctl as a more useful tool
    * 06dbus: Include dbus or messagebus group and user, depending on distro
    * 35network-wicked: openSUSE Factory has reintroduced libexec
    * 35network-wicked: install ip utility anyway
    * 35network-wicked: Run wicked early enough to unlock block devices
    * 06dbus: Do not install superfluous services
    * 40network: introduce wicked option
    * 35network-wicked: introduce wicked support module
    * 06dbus: introduce dbus support
    * Add --uefi-output for custom output filename
    * 95fcoe: don't install if there is no FCoE hostonly devices
    * 95fcoe: ensure needed modules are installed
    * dracut-install: Globbing support for resolving "firmware:"
    * dracut-bash-completion.sh: add positional argument completion
    * Prevent creating unexpected files on the host when running dracut (bsc#1176171)
    * configure: Find FTS library with --as-needed


author: daniel.molkentin@suse.com
changelog:
  - Update to version 052+suse.88.gc78b4ac8:
    Highlights: https://github.com/dracutdevs/dracut/releases/tag/052
    * fix(i18n): get rid of `eval` calls
    * fix(i18n): create the keyboard symlinks again
    * docs: update NEWS.md and AUTHORS
    * chore: add `CONTRIBUTORS` target to Makefile
    * fix: shellcheck across multiple modules
    * docs: fix dracut.cmdline.7
    * fix: update dbus module directory in spec file
    * fix: add sdaskpw and sdsyctl to spec file
    * fix: cosmetic comment fixes
    * feat(systemd-ask-password): introducing systemd-ask-password module
    * Revert "nbd: use systemd-run to start nbd-client"
    * dmsquash-live-root: squashfs in bare device
    * feat(systemd-sysctl): introducing systemd-sysctl module
    * fix: adding missing efi paths
    * fix: correct the squash quirk
    * feat(systemd-modules-load): introducing systemd-modules-load module
    * fix(shutdown): add timeout to umount calls (bsc#1178219)
    * fix: revise all module checks
    * fix: add missing line continuation
    * fix: BuildRequiring git-core is enough in dracut.spec
    * fix(kernel-modules): add reset controllers for arm (bsc#1180336)
    * 35network-legacy: discard pointless RTNETLINK message
    * fix(plymouth): install binaries with dependencies
    * fix: correct the line continuation
    * fix(dbus-daemon): use uid/gid from sysroot is dracutsysrootdir is set
    * fix(network-manager): allow override network manager version
    * feat(dracut.sh): allow overriding the systemctl command for sysroot
    * fix: use find_binary
    * fix(dracut.sh): don't override path with foreign sysroot
    * fix: quote globbing in module-setup.sh for inst_multiple
    * fix(dracut-install): allow globbing for multiple sources
    * Fix bad ls parsing
    * fix: move ldconfig after library workaround
    * feat(kernel-modules): add driver memory
    * feat(systemd-repart): introducing systemd-repart module
    * feat(dbus-daemon): introducing the dbus-daemon module
    * feat(dbus-broker): introducing the dbus-broker module
    * feat(dbus): introducing a meta module for dbus
    * fix(network-legacy): silent check for leaseinfo
    * 95nfs: fix rpc.statd installation
    * fix: do not set cmdline for uefi images unless asked
    * feat(network-legacy): send dhcp in parallel on all devices
    * fix(mdraid): remove offroot
    * fix(mdraid): add grow continue service
    * fix(spec): add new systemd-coredump module to spec
    * fix(watchdog): replace return with echo
    * feat(systemd-coredump): introducing systemd-coredump module
    * prepare usrmerge (boo#1029961)
    * test: incr. disk size for TEST 35 ISCSI-MULTI
    * fix(skipcpio): edit skipcpio.c: strstr -> memmem
    * fix(1007): adding shared keyring mode to type unit
    * feat(systemd-sysusers): introducing systemd-sysuser module
    * feat(systemd-sysusers): introducing systemd-sysuser module
    * fix(1001): use efivars fs over the deprecated sysfs entries
    * fix(kernel-network-modules): also install modules from mdio subdirectory
    * fix(06dbus): do not hardcode path to dbus utils
    * fix(06dbus): do not hardcode path to systemd unit
    * fix(dracut-init.sh): make inst_libdir_file work with dracutsysrootdir set
    * fix(99squash): use kernel config instead of modprobe to check modules
    * fix(dracut-functions.sh): check kernel config from $dracutsysrootdir
    * fix(90kernel-modules): install generic crypto modules with hostonly unset
    * feat: add addional global variables
    * fix: add a missing efi support
    * chore(removal): eliminate bootchart module
    * feat: add addional global variables
    * feat(cli): add --no-uefi option
    * chore(github): add CODEOWNERS file
    * chore(cleanup): remove logrotate file
    * fix(35network-manager): avoid restarting NetworkManager
    * chore: Add configuration for vim
    * chore: Add editorconfig
    * chore: Editors
    * test(conventional): add Conventional Commits PR github action
    * docs(development): add HACKING.md


author: daniel.molkentin@suse.com
changelog:
  - Update to version 052+suse.93.g7bfaa6d9:
    * fix(dbus-daemon): make sure that dbus.socket is stopped before switch root (bsc#1181167)


author: daniel.molkentin@suse.com
changelog:
  - Update to version 053+suse.90.gb89b6347:
    Highlights: https://github.com/dracutdevs/dracut/releases/tag/053
    dracut.sh:
      unfreeze /boot on exit (d87ae137)
      proper return code for inst_multiple in dracut-init.sh (d437970c)
    fcoe:
      rename rd.nofcoe to rd.fcoe (6f7823bc)
      rd.nofcoe=0 should disable fcoe (805b46c2)
    i18n:
      get rid of eval calls (5387ed24), backported for 052 downstream
      create the keyboard symlinks again (9e1c7f3d), backported for 052 downstream
    network-manager:
      run as a service if systemd module is present (c17c5b76)
      rework how NM is started in debug mode (34c73b33)
      drm: skip empty modalias files in drm module setup (c3f24184)


author: daniel.molkentin@suse.com
changelog:
  - Update to version 053+suse.91.g4a0bdda1:
    * fix(kernel-modules): optionally add /usr/lib/modules.d to initramfs (bsc#1180822)


author: daniel.molkentin@suse.com
changelog:
  - Update to version 053+suse.93.g039ac07d:
    * fix(kernel-modules): optionally add /usr/lib/modules.d to initramfs


author: daniel.molkentin@suse.com
changelog:
  - Update to version 054+suse.93.gd393f006:
    With this release dracut has undergone a major overhaul.
    A lot of systemd related modules have been added.
    The integration test suite has finally ironed out the flaky behaviour due to the parallel device probing of the kernel,
    which bit sometimes in the non-kvm github CI. So, if you see any /dev/sda in a setup script with more than two hard drives,
    chances are, that the script works on the wrong disk. Same goes for network interfaces.
    This release is also fully shellcheck'ed with ShellCheck-0.7.2 and indented with shfmt and astyle.
    The dracut project builds test containers every day for:
      opensuse/tumbleweed-dnf:latest
      archlinux:latest
      fedora:rawhide
      fedora:latest
      fedora:33
    These containers can easily be used to run the integration tests locally without root permissions via podman.
    We hope this serves as a blueprint for your distribution's CI process.
    More information can be found in docs/HACKING.md.
    Bug Fixes
      make testsuite pass on OpenSuse and Arch (8b2afb08)
      cope with distributions with /usr/etc files (3ad3b3a4)
      deprecate gummiboot (5c94cf41)
      set vimrc and emacs indention according to .editorconfig (9012f399)
      correctly handle kernel parameters (501d82f7)
      remove dracut.pc on make clean (d643156d)
      honor KVERSION environment in the Makefile (d8a454a5)
      always use mkdir -p (9cf7b1c5)
      dracut.sh:
      prevent symbolic links containing // (de0c0872)
      adding missing globalvars for udev (f35d479d)
      sysctl global variables (3ca9aa1d)
      add global vars for modules-load (ec4539c6)
      omission is an addition to other omissions in conf files (96c31333)
      harden dracut against GZIP environment variable (d8e47e20)
      add a missing tmpfilesconfdir global variable (8849dd8d)
      include modules.builtin.alias in the initramfs (7f633747)
      install all depmod relevant configuration files (50a01dd4)
      add modules.builtin.modinfo to the initramfs (87c4c178)
      search for btrfs devices from actual mount poiont (3fdc734a)
      dracut-functions.sh:
      implement a cache for get_maj_min (c3bb9d18)
      word splitting issue for sed in get_ucode_file (122657b2)
      dracut-logger.sh: double dash trigger unknown logger warnings during run (4fbccde5)
      dracut-install:
      handle $LIB in ldd output parsing (bsc#1185615)
      handle builtin modules (2536a9ea)
      base:
      suppress calls to getarg in build phase (6feaaabc)
      source hooks without exec (8059bcb2)
      wait_for_dev quote shell variables (b800edd6)
      adding crc32c for ext3 (61f45643)
      crypt:
      install all crypto modules in the generic initrd (10f9e569)
      include cryptsetups tmpfile (a4cc1964)
      crypt-gpg:
      cope with different scdaemon location (44fd1c13)
      dbus-broker:
      enable the service (df1e5f06)
      dbus-daemon:
      only error out in install() (ae4fbb3d)
      dracut-systemd:
      don't refuse root=tmpfs when systemd is used (a96900a8)
      examples: remove the examples directory and reference to it (b37c90c8)
      fips:
      add dh and ecdh ciphers (543b8014)
      remove old udev version requirements (be30d987)
      i18n:
      skip if data is missing (651fe01e)
      img-lib:
      ignored null byte in input (85eb9680)
      integrity:
      properly set up EVM when using an x509 cert (4bdd7eb2)
      iscsi:
      replace sed call with bash internals (66b920c6)
      add iscsid.service requirements (bb6770f1)
      only rely on socket activiation (0eb87d78)
      kernel-modules:
      optionally add /usr/lib/modules.d to initramfs (92e6a8f8)
      add watchdog drivers for generic initrd (3a60c036)
      mdraid:
      remove dependency statements (86b75634)
      memstrack:
      correct dependencies (c2ecc4d1)
      multipath:
      stop multipath before udev db cleanup (3c244c7c)
      revise multipathd-stop (7b8c78ff)
      nbd:
      assume nbd version >= 3.8 (6209edeb)
      remove old udev version requirements (fd15dbad)
      make nbd work again with systemd (77906443)
      network:
      use wicked unit instead of find_binary (57eefcf7)
      user variable for sdnetworkd instead of path (4982e16d)
      correct regression in iface_has_carrier (36af0518)
      network-legacy:
      add missing options to dhclient.conf (abfd547a)
      silence getargs (60a34d8b)
      network-manager:
      cope with distributions not using libexec (22d6863e)
      set timeout via command line option (8a51ee1f)
      run after dracut-cmdline (4d03404f)
      create /run directories (49b61496)
      use /run/NetworkManager/initrd/neednet in initqueue (6a37c6f6)
      only run NetworkManager if rd.neednet=1 (ac0e8f7d)
      nm-run.service: don't kill forked processes (1f21fac6)
      no default deps for nm-run.service (ba4bcf5f)
      nm-lib.sh does not require bash (3402142e)
      squash:
      post install should be the last step before stripping (8c8aecdc)
      systemd:
      include all nss libraries (b3bbf5fb)
      include hosts and nsswitch.conf in hostonly mode (5912f4fb)
      remove old systemd version requirements (fc53987b)
      systemd-hostnamed: extra quote (2aa65234)
      systemd-modules: remove dependency on systemd meta module (afef4557)
      systemd-modules-load:
      misc repairs (782ac8f1)
      systemd-networkd:
      make systemd-networkd a proper network provider (ea779750, closes #737)
      systemd-resolved: remove nss libraries (12bef83c)
      systemd-sysctl:
      sysctl global variables (02acedd0)
      systemd-sysusers:
      misc fixes and cleanup (7359ba8a)
      systemd-udev: use global vars instead of fixed path (fd883a58)
      systemd-udevd: add udev id program files (562cb77b)
      systemd-verity:
      incorrect reference to cryptsetup target (ba92d1fc)
      re-naming module to veritysetup (0267f3c3)
      tpm2-tss: add tpm2 requirement (8f99fada)
      udev-rules:
      remove sourcing of network link files (69f4e7cd)
      add btrfs udev rules by default (567c4557)
      url-lib:
      fix passing args (5f6be515)
      zipl:
      don't depend on grub2 (6b499ec1)
    Performance
      disable initrd compression when squash module is enabled (7c0bc0b2)
    Features
      support ZSTD-compressed kernel modules (ce9af251)
      also restore the initramfs from /lib/modules (33e27fab)
      extend Makefile indent target (e0a0fa61)
      customize .editorconfig according to shfmt (1f621aba)
      squash module follow --compress option (5d05ffbd)
      bluetooth: implement bluetooth support in initrd (64ee2a53)
      btrfs: add 64-btrfs-dm.rules rules (d4caa86a)
      mkinitrd: remove mkinitrd (43df4ee2)
      nbd: support ipv6 link local nbds (b12f8188)
      network-manager: run as daemon with D-Bus (112f03f9)
      qemu: include the virtio_mem kernel module (f3dcb606)
      skipcpio: speed up and harden skipcpio (63033495)
      squash:
      use busybox for early setup if available (90f269f6)
      install and depmod modules seperately (5a18b24a)
      systemd-ac-power: introducing the systemd-ac-power module (e7407230)
      systemd-hostnamed: introducing the systemd-hostnamed module (bf273e3e)
      systemd-initrd: add initrd-usr-fs.target (5eb73610)
      systemd-journald: introducing the systemd-journald module (3697891b)
      systemd-ldconfig: introducing the systemd-ldconfig module (563c434e)
      systemd-network-management: introducing systemd-network-management module (e942d86c)
      systemd-resolved: introducing the systemd-resolved module (b7d3caef)
      systemd-rfkill: introducing the systemd-rfkill module (21536544)
      systemd-sysext: introducing the systemd-sysext module (fc88af54)
      systemd-timedated: introducing the systemd-timedated module (1c41cc90)
      systemd-timesyncd: introducing the systemd-timesyncd module (2257d545)
      systemd-tmpfiles: introducing the systemd-tmpfiles module (2b61be32)
      systemd-udevd: introducing the systemd-udevd module (3534789c)
      systemd-verity: introducing the systemd-verity module (3d4dea58)
      tpm2-tss: introducing the tpm2-tss module (8743b073)


author: daniel.molkentin@suse.com
changelog:
  - Update to version 054+suse.95.gd5820102:
    * chore(suse) update spec
      Important change on mkinitrd:
      mkinitrd is now in its own subpackage "dracut-mkinit-deprecated",
      which requires dracut. If you need mkinitrd, require "mkinitrd".
      However note that in the long run, mkinit will go away. It is
      preferred to call dracut directly.


author: thomas.blume@suse.com
changelog:
  - Update to version 054+suse.96.gb5aa64d2:
    * fix(suse-initrd) fix list of modprobe.d directories
    * fix(suse-initrd): exclude modules that are built-in (bsc#1185646)
    * fix(systemd-coredump): shellcheck for modules.d/01systemd-coredump
      (bsc#1190845)


author: thomas.blume@suse.com
changelog:
  - Update to version 055+suse.97.gb98506b2:
    * docs: update NEWS.md and AUTHORS
    * fix(fs-lib): install fsck utilities
    * fix(integrity): require ALLOW_METADATA_WRITES to come from EVM config file
    * fix(install): configure logging earlier
    * fix(warpclock): minor cleanups
    * fix(dash): minor cleanups
    * fix(mksh): minor cleanups
    * feat(install): add default value for --firmwaredirs
    * fix(dracut-functions): get_maj_min without get_maj_min_cache_file set
    * fix(dracut): pipe hardlink output to `dinfo`
    * fix(install): sane default --kerneldir
    * fix(bash): minor cleanups
    * fix(squash): don't mount the mount points if already mounted
    * ci: add shfmt to Fedora containers
    * fix(base): add missing `str_replace` to `dracut-dev-lib.sh`
    * feat(dracut.sh): detect running in a container
    * fix(base): split out `dracut-dev-lib.sh`
    * fix(dracut-util): print error message with trailing newline
    * fix(packit): downstream has renamed the master branch to main


author: thomas.blume@suse.com
changelog:
  - Update to version 055+suse.100.ga2700279:
    * fix(suse-initrd): remove references to INITRD_MODULES (bsc#1187115)
    * chore(suse): erase conditional for usrmerge from specfile
    * chore(suse): fix specfile for usrmerge


author: thomas.blume@suse.com
changelog:
  - Update to version 055+suse.104.g9d45c1df:
    * feat(suse-initrd): add INITRD_MODULES from /etc/sysconfig/kernel, too
    * fix(suse-initrd): call dracut_instmods with hostonly=
    * fix(suse-initrd): use $kernel rather than $(uname -r)


author: thomas.blume@suse.com
changelog:
  - Update to version 055+suse.106.g760b0c69:
    * chore(suse): add Conflicts for old suse-module-tools to specfile (bsc#1187115)


author: thomas.blume@suse.com
changelog:
  - Update to version 055+suse.110.gbe35f166:
    * fix(fips-suse): fipscheck doesn't need the -c parameter (bsc#1187498)
    * fix(kernel-install): initrd vs initramfs


author: lnussel@suse.de
changelog:
  - Update to version 055+suse.115.gf65e559b:
    * fix(suse-initrd): find links of usrmerged kernels (boo#1184804)
    * fix(tpm2-tss): typo in depends()
    * fix(suse-initrd): inform on usage of obsolete -f parameter (bsc#1187470)
  - use manual mode in _service file


author: antonio.feijoo@suse.com
changelog:
  - Update to version 055+suse.119.g6c4187af:
    * fix(suse-initrd): handle cases with zero modprobe.d files (bsc#1189895)


author: antonio.feijoo@suse.com
changelog:
  - Update to version 055+suse.129.g7d8c3ce3:
    * fix(kernel-modules): add blk_mq_alloc_disk and blk_cleanup_disk to blockfuncs (bsc#1190326)
    * docs: update SUSE maintainers doc
    * fix(suse): add 60-io-scheduler.rules (bsc#1188713)
    * revert: remove /sbin/installkernel script from dracut package
    * spec: modernize specfile constructs


author: thomas.blume@suse.com
changelog:
  - Update to version 055+suse.146.g71f186fa:
    * fix(network-legacy): route parsing issues in ifup (bsc#1182688)
    * fix(systemd-udevd): make collect optional (bsc#1177870)
    * style(dracut.sh): remove redundant script header
    * fix(dracut.sh): change misspelled variable name
    * fix(dracut.sh): remove wrong $ in loop sequence
    * chore(suse): update spec
    * fix(90kernel-modules): add isp1760 USB controller
    * fix(iscsi): add support for the new iscsiadm "no-wait" (-W) command
      (bsc#1187190)
    * ci(suse.conf.example): optimal compression parameters for zstd
    * feat(dracut.sh): check if target kernel has zstd support compiled in
    * ci(suse.conf.example): change default compression option for SUSE


author: thomas.blume@suse.com
changelog:
  - Update to version 055+suse.148.g65e8258f:
    * fix(dracut.spec): update dependency for suse-module-tools


author: thomas.blume@suse.com
changelog:
  - Update to version 055+suse.179.g3cf989c2:
    * fix(cpio): write zeros instead of seek for padding and alignment (bsc#1190982)
    * fix(dracut.sh): check kernel zstd support early
    * fix(dracut.sh): check availability of configured compression
    * fix(dracut.sh): inform user about auto-selected compression method
    * fix(dracut.sh): drop pointless check for module compression method
    * chore(suse): add dracut-cpio archiver (jsc#SLE-16157)
    * ci(TEST-63-DRACUT-CPIO): kernel extraction tests for dracut-cpio
    * feat(dracut.sh): add "--enhanced-cpio" option for calling dracut-cpio
    * feat(Makefile): cargo wrapper for dracut-cpio build
    * feat(cpio): add newc archive creation utility
    * feat(cpio): add rust argument parsing library from crosvm
    * ci(TEST-62-SKIPCPIO): add simple skipcpio test
    * ci(test): export basedir and testdir as absolute paths
    * ci(TEST-60-BONDBRIDGEVLANIFCFG): use toplevel Makefile
    * fix(dracut.spec): check for non-usrmerged environments
    * fix(zfcp_rules): add quotes around rule installation argument
    * fix(zipl): correct argument for uuid to device conversion
    * fix(fips): missing value of _vmname variable (bsc#1193267)
    * chore(suse): add fido2 module (jsc#SLE-21070)
    * feat(crypt): check if fido2 module is needed in hostonly mode (jsc#SLE-21070)
    * feat(fido2): introducing the fido2 module (jsc#SLE-21070)
    * feat(crypt): check if tpm2-tss module is needed in hostonly mode (jsc#SLE-21070)
    * fix(dracut-functions.sh): get block device driver if in a virtual subsystem (bsc#1189776)
    * fix(mdraid): allow UUID comparison for more than one UUID (bsc#1192665)


author: thomas.blume@suse.com
changelog:
  - Update to version 055+suse.183.g7d569585:
    * fix(dracut.spec): update usrmerged mkinitrd dir
    * fix(url-lib): improve ca-bundle detection (bsc#1175892)


author: antonio.feijoo@suse.com
changelog:
  - Update to version 055+suse.191.g67eb4ea8:
    * fix(dracut-initramfs-restore.sh): add test for SUSE initrd name (bsc#1194570)
    * fix(dracut.spec): require util-linux-systemd (bsc#1194162)
    * fix(network-wicked): multiple path corrections
    * fix(drm): add privacy screen modules to the initrd (bsc#1193590)


author: antonio.feijoo@suse.com
changelog:
  - Update to version 055+suse.194.gdd41932a:
    * fix(network-legacy): add wicked as an alternative to arping (bsc#1193670)
    * fix(network): add wicked as an alternative to arping (bsc#1193670)


author: antonio.feijoo@suse.com
changelog:
  - Update to version 055+suse.226.g44139dde:
    * fix(zfcp_rules): remove collect based udev rule creators
    * fix(dasd_rules): remove collect based udev rule creators
    * fix(kernel-modules-extra): handle zstd module extension
    * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
    * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
    * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
    * fix(fips): missing sourcing of dracut-lib
    * fix(fips): wrong error message
    * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
    * fix(network-legacy): set dhclient as optional (bsc#1194879)
    * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
    * fix(multipathd-configure.service): drop unneeded dependencies
    * fix(multipath): check if mpathconf is available
    * fix(multipathd.service): drop dependencies on iscsi and iscsid
    * fix(multipathd.service): adapt to upstream multipath-tools unit file
    * fix(multipathd.service): remove dependency on systemd-udev-settle
    * fix(fips): avoid shellcheck warnings
    * fix(fips): get _vmname value only if it is needed
    * fix(fips.sh): respect rd.fips.skipkernel
    * fix(fips): alignment with the upstream format


author: antonio.feijoo@suse.com
changelog:
  - Update to version 055+suse.230.g3fdde49a:
    * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
    * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)


author: antonio.feijoo@suse.com
changelog:
  - Update to version 055+suse.234.gbdaf66ff:
    * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
    * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)


author: antonio.feijoo@suse.com
changelog:
  - Update to version 055+suse.238.gacab0df5:
    * fix(cpio): correct dev_t -> rmajor/rminor mapping (bsc#1195808)
    * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
    * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)


author: antonio.feijoo@suse.com
changelog:
  - Update to version 055+suse.242.g76ae5ce4:
    * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
    * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)


author: antonio.feijoo@suse.com
changelog:
  - Update to version 055+suse.244.g2f624182:
    * fix(resume): only exclude this module when swap is netdev (bsc#1194915)


author: antonio.feijoo@suse.com
changelog:
  - Update to version 055+suse.248.g92d06110:
    * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
    * chore(suse): remove fipscheck requirement (bsc#1198065)


author: antonio.feijoo@suse.com
changelog:
  - Update to version 055+suse.252.g4988b0bf:
    * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
    * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
    * feat(resume): sanity check (bsc#1197192)


author: antonio.feijoo@suse.com
changelog:
  - Update to version 055+suse.271.g70f710e4:
    * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
    * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
    * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
    * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
    * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
    * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
    * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
    * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)


author: antonio.feijoo@suse.com
changelog:
  - Update to version 055+suse.279.g3b3c36b2:
    * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
    * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
    * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
    * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)


author: antonio.feijoo@suse.com
changelog:
  - Update to version 055+suse.283.ge98ece25:
    * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
    * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)


author: antonio.feijoo@suse.com
changelog:
  - Update to version 055+suse.294.gc5bc4bb5:
    Missing network-manager module fixes (bsc#1201975):
    * fix(network-manager): avoid calling unavailable dracut-logger functions
    * fix(network-manager): skip non-directories in /sys/class/net
    * fix(network-manager): disable tty output if the console is not usable
    * fix(network-manager): show output on console only with rd.debug enabled
    * fix(network-manager): write DHCP filename option to dhcpopts file
    * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
    * fix(network-manager): include nm-daemon-helper binary
    * fix(network-manager): don't pull in systemd-udev-settle
    * fix(network-manager): support teaming under NM+systemd
    * fix(network-manager): pull in network.target in nm-initrd.service


author: antonio.feijoo@suse.com
changelog:
  - Update to version 055+suse.300.ge878982d:
    * chore(suse): change default persistent policy (jsc#PED-1885)
    * fix(systemd): add missing modprobe@.service (bsc#1203749)
    * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)


author: antonio.feijoo@suse.com
changelog:
  - Update to version 055+suse.306.g5b4feffc:
    * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
    * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)


author: antonio.feijoo@suse.com
changelog:
  - Update to version 055+suse.325.g6780025c:
    * fix(network-manager): always install the library plugins directory (bsc#1202014)
    * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
    A series of fixes for NVMeoF boot (bsc#1203368):
    * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
    * fix(network): avoid double brackets around IPv6 address
    * feat(nvmf): set rd.neednet=1 if tcp records encountered
    * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
    * fix(network): don't use same ifname multiple times
    * fix(nvmf): run cmdline hook before parse-ip-opts.sh
    * fix(nvmf): avoid calling "exit" in a cmdline hook
    * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
    * fix(nvmf): don't use "finished" queue for autoconnect
    * fix(nvmf): don't create did-setup file
    * fix(nvmf): no need to load the nvme module
    * fix(nvmf): don't try to validate network connections in cmdline hook
    * fix(nvmf): nvme list-subsys prints the address using commas as separator
    * fix(nvmf): deprecate old nvmf cmdline options
    * fix(nvmf): set executable bit on nvmf-autoconnect.sh


author: antonio.feijoo@suse.com
changelog:
  - Update to version 055+suse.333.g39325ba0:
    * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
    * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
    * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
    * fix(nfs): chown using rpc default group (bsc#1204929)


author: antonio.feijoo@suse.com
changelog:
  - Update to version 055+suse.343.g0113f4b9:
    A series of changes for the NVMeoF boot feature (jsc#PED-1449):
    * fix(dracut.spec): require jq for nvmf
    * fix(suse/dracut.spec): require program for duplicate IP address detection
    * fix(iscsi): install 8021q module unconditionally
    * fix(nvmf): install 8021q module unconditionally
    * feat(nvmf): enable module if NBFT exists
    * feat(nvmf): add NBFT connect support, and fix configuration priority
    * feat(nvmf): add code for parsing the NBFT
    * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)


author: antonio.feijoo@suse.com
changelog:
  - Update to version 055+suse.345.g8b8708cb:
    * feat(lvm): always include all drivers that LVM can use (bsc#1206195)


author: antonio.feijoo@suse.com
changelog:
  - Update to version 055+suse.353.g5603b001:
    A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
    * fix(nvmf): move connect logic to initqueue script
    * fix(nvmf): don't assume prefix lenth 64 by default
    * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
    * fix(network): IPv6: don't wait for RA for static IPv6 assignments
    * fix(network-legacy): always include af_packet
    * fix(network): don't assume prefix lenth 64 by default
    * fix(iscsi): prefix syntax for static iBFT IPv6 addresses


author: antonio.feijoo@suse.com
changelog:
  - Update to version 055+suse.360.g076f1113:
    * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
    fips=1 and separate /boot break s390x (bsc#1204478):
    * fix(fips): move fips-boot script to pre-pivot
    * fix(fips): only unmount /boot if it was mounted by the fips module
    * feat(fips): add progress messages
    * fix(fips): do not blindly remove /boot


author: antonio.feijoo@suse.com
changelog:
  - Update to version 055+suse.364.g4c1d0276:
    * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
    * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
    * fix(nvmf): set netroot=nbft (bsc#1210909)


author: antonio.feijoo@suse.com
changelog:
  - Update to version 055+suse.366.g14047665:
    * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)


author: antonio.feijoo@suse.com
changelog:
  - Update to version 055+suse.369.gde6c81bf:
    * fix(dracut-install): protect against broken links pointing to themselves
    * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)


author: antonio.feijoo@suse.com
changelog:
  - Update to version 055+suse.371.g5237e44a:
    * fix(nvmf): support /etc/nvme/config.json (bsc#1215578)


author: antonio.feijoo@suse.com
changelog:
  - Update to version 055+suse.375.g1167ed75:
    * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
    * fix(network): correct network device naming (bsc#1192986)


author: antonio.feijoo@suse.com
changelog:
  - Update to version 055+suse.382.g80b55af2:
    * fix(dracut): correct regression with multiple `rd.break=` options (bsc#1221675)
    * fix(dracut-util): do not call `strcmp` if the `value` argument is NULL (bsc#1219841)
    * fix(zfcp_rules): correct shellcheck regression when parsing ccw args (bsc#1220485)
    * fix(dracut.sh): skip README for AMD microcode generation (bsc#1217083)


author: antonio.feijoo@suse.com
changelog:
  - Update to version 055+suse.388.g70c21afa:
    * feat(crypt): force the inclusion of crypttab entries with x-initrd.attach (bsc#1226529)
    * fix(mdraid): try to assemble the missing raid device (bsc#1226412)
    * fix(dracut-install): continue parsing if ldd prints "cannot be preloaded" (bsc#1208690)


author: antonio.feijoo@suse.com
changelog:
  - Update to version 059+suse.494.g2ed56105:
    Update to current upstream version (059+backports) (jsc#PED-4884)
    Upstream backports not included in 059:
    Features:
    * feat(network-wicked): remove module
    * feat(systemd-rfkill): remove module
    * feat(livenet): add memory size check depending on live image size
    * feat(nvmf): add code for parsing the NBFT
    * chore(shfmt): update to pass with shfmt v3.5.1
    * feat(dracut-init.sh): do not print by default if an udev rule is skipped
    * feat(lsinitrd): notify user on missing compressor
    * feat(dracut): use log level indicator in console output
    * feat(kernel-modules): driver support for macbook keyboards
    * feat(dracut-init.sh): specify if a module cannot be found or cannot be installed
    Fixes:
    * fix(dracut-install): protect against broken links pointing to themselves
    * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)
    * fix(systemd-udevd): add missing override paths
    * fix(systemd-journald): add systemd-sysusers dependency
    * fix(base): correct handling of quiet in loginit
    * fix(integrity): do not require ls
    * fix(dracut-init.sh): `module_check` method ignores `forced` option
    * fix(man): add missing initrd-root-device.target to flow chart
    * fix(dracut-init.sh): use the local _ret variable
    * chore(suse): require gawk instead of awk
    * fix(dracut.sh): use gawk for strtonum
    * fix(man): remove duplicate entry
    * fix(systemd-sysext): handle confexts and correct extensions search path
    * fix(modsign): load keys to correct keyring
    * fix(dmsquash-live-autooverlay): specify filesystemtype when it is already known
    * fix(fs-lib): remove quoting form the first argument of the e2fsck call
    * fix(Makefile): remove leftover rpm build rules
    * fix(Makefile): no longer upload to kernel.org
    * fix(nvmf): support /etc/nvme/config.json
    * fix(install.d): respect even more kernel-install vars, plus style fixes
    * fix(install.d): respect more kernel-install env variables
    * fix(dracut.sh): also prevent fsfreeze for tmpfs
    * fix(dmsquash-live): allow other fstypes
    * fix(bluetooth): make bluetooth rules more strict
    * fix(bluetooth): add missing files
    * fix(bluetooth): include it if Appearance matches the value assigned for keyboard
    * fix(btrfs): do not require module via cmdline when --no-kernel
    * fix(btrfs): add missing cmdline function
    * fix(multipath): explicitly check if `hostonly_cmdline` is `yes`
    * fix(systemd-timedated): correct typo in override path
    * fix(systemd-resolved): correct typo in override path
    * fix(systemd-networkd): correct typos in override paths
    * fix(dracut-init.sh): correct check in `is_qemu_virtualized` function
    * fix(Makefile): execute command -v instead of which
    * fix(network-legacy): typo
    * fix(network,dbus): improve dependency checking
    * fix(systemd-pcrphase): only include systemd-pcrphase-initrd.service
    * fix(systemd-tmpfiles): do not include systemd-tmpfiles-clean.timer
    * fix(systemd-journald): do not include systemd-journal-flush.service
    * fix(systemd): do not include systemd-random-seed.service
    * fix(kernel-modules): add interconnect drivers
    * fix(dracut-lib.sh): remove successful finished initqueue scripts
    * fix(udev-rules): remove firmware.rules
    * fix(dracut.sh): silence the output of hardlinking files by default
    * fix(virtiofs): add virtio_pci kernel module to virtiofs
    * fix(dracut-systemd): rootfs-generator cannot write outside of generator dir
    * fix(dracut-systemd): check and create generator dir outside of inner function
    * fix(dracut-systemd): do not hardcode the systemd generator directory
    * fix(dracut-functions): avoid calling grep with PCRE (-P)
    * fix(dracut-initramfs-restore.sh): handle /etc/machine-id empty or uninitialized
    * fix(lsinitrd.sh): handle /etc/machine-id empty or uninitialized
    * fix(dracut.sh): handle /etc/machine-id empty or uninitialized
    * fix(systemd-networkd): add missing conf files and services
    * fix(dracut-functions.sh): convert mmcblk to the real kernel module name
    * fix(multipath): remove dependency on multipathd.socket
    * fix(99base): adjust to allow mksh as initrd shell
    * fix(base): do not quote $CLINE in the `set` command
    * fix(systemd-ac-power): correct systemd-ac-power binary path
    * fix(dracut.sh): use dynamically uefi's sections offset
    * fix(lvmthinpool-monitor): activate lvm thin pool before extend its size
    * fix(dmsquash-live): restore compatibility with earlier releases
    * fix(dracut.sh): kmoddir does not handle trailing /
    * fix(udev-rules): remove old eudev specific rule
    * fix(udev-rules): remove old redhat specific rule
    * fix(udev-rules): remove old edd_id extra rules
    * fix(udev-rules): remove old debian specific rules
    * fix(kernel-modules): add UFS drivers
    * fix(kernel-modules): use modalias info in get_dev_module()
    * fix(crypt): add missing libraries
    * revert(network-manager): avoid restarting NetworkManager
    * fix(dracut.sh): handle sbsign errors for UEFI builds
    * fix(dracut.sh): handle out of space error for UEFI builds
    * fix(plymouth): remove /etc/system-release dependency
    * fix(network-manager): add "After" dependency on dbus.service
    * fix(fido2): libfido2.so depends on libz.so
    * fix: make iso-scan trigger udev events
    * fix(install): do not undef _FILE_OFFSET_BITS
    * fix(dracut.sh): --sysroot option broken if global variables not set in conf
    * fix(lsinitrd.sh): handle filenames with special characters
    * fix(dracut-systemd): remove unused argument
    * fix(dracut-init.sh): correct typo in comment
    * fix(dracut.sh): correct --help and --version exit codes
    * fix(crypt-gpg): do not use always --card-status
    * fix(dmsquash-live): live:/dev/*
    * fix(load_fstype): avoid false positive searchs
    * fix: shellcheck 0.8.0
    Other:
    * refactor(install): log about missing firmware only once
    * refactor(dracut-init.sh): remove redundant "dracut" from "dracut module" prints
    * refactor(virtiofs): remove exit after die
    * build: remove rpm spec file and build rules
    * docs: remove rd.lvm.snapsize and rd.lvm.snapshot
    * chore(gentoo.conf): remove examples to avoid confusion
    * chore: remove git2spec.pl, it is no longer used
    * chore(suse): update url in spec
    Bugs between 056 and 059 not referenced yet:
    * fix(fips): add libkcapi fipscheck also with the libexec location (bsc#1207892)
    * revert(multipath): install multipathd.socket (bsc#1207524)
    * fix(dracut-initramfs-restore.sh): hide unpack errors (bsc#1199341)
    * fix(suse-initrd): always check that MACHINE_ID is not empty (bsc#1201780)
    * fix(i18n): add required includes for keymaps (bsc#1200950)
    * fix(integrity): do not enable EVM if there is no key (bsc#1200718)
    * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
    * fix(lvm): add missing grep requirement (bsc#1198271)
    * fix(dracut-initramfs-restore.sh): unpack uncompressed initrd as last option (bsc#1197195)
    For more details on the changes included with 056, 057, 058 and 059 see:
    * https://github.com/dracutdevs/dracut/releases/tag/059
    * https://github.com/dracutdevs/dracut/releases/tag/058
    * https://github.com/dracutdevs/dracut/releases/tag/057
    * https://github.com/dracutdevs/dracut/releases/tag/056


author: antonio.feijoo@suse.com
changelog:
  - Update to version 059+suse.497.g6a2c5f83:
    * chore(suse): fix systemd-sysvinit dependency (bsc#1215132)


author: antonio.feijoo@suse.com
changelog:
  - Update to version 059+suse.499.g2976c52f:
    * fix(dracut.spec): do not require libgcrypt20-hmac for dracut-fips (bsc#1216059)


author: antonio.feijoo@suse.com
changelog:
  - Update to version 059+suse.502.g92237883:
    * fix(systemd): add new systemd-tmpfiles-setup-dev-early.service
    * revert(suse): fix systemd-sysvinit dependency


author: antonio.feijoo@suse.com
changelog:
  - Update to version 059+suse.506.gd33b6bef:
    * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
    * fix(network): correct network device naming (bsc#1192986)


author: antonio.feijoo@suse.com
changelog:
  - Update to version 059+suse.515.g83296e6f:
    * fix(dracut): correct regression with multiple `rd.break=` options (bsc#1221675)
    * fix(dracut-util): do not call `strcmp` if the `value` argument is NULL (bsc#1219841)
    * fix(i18n): handle symlinked keymap (bsc#1221193)
    * fix(zfcp_rules): correct shellcheck regression when parsing ccw args (bsc#1220485)
    * fix(dracut.sh): skip README for AMD microcode generation (bsc#1217083)


author: antonio.feijoo@suse.com
changelog:
  - Update to version 059+suse.519.g3edf43b4:
    * chore(suse): remove obsolete fillup template (bsc#1223467)


author: antonio.feijoo@suse.com
changelog:
  - Update to version 059+suse.521.g8412a1c0:
    * fix(suse-initrd): clean return of installkernel() (bsc#1223467)


author: antonio.feijoo@suse.com
changelog:
  - Update to version 059+suse.527.g7870f083:
    * feat(crypt): force the inclusion of crypttab entries with x-initrd.attach (bsc#1226529)
    * fix(mdraid): try to assemble the missing raid device (bsc#1226412)
    * fix(dracut-install): continue parsing if ldd prints "cannot be preloaded" (bsc#1208690)


author: antonio.feijoo@suse.com
changelog:
  - Update to version 059+suse.531.g48487c31:
    * feat(systemd*): include systemd config files from /usr/lib/systemd (bsc#1228398)
    * fix(convertfs): error in conditional expressions (bsc#1228847)


author: antonio.feijoo@suse.com
changelog:
  - Update to version 059+suse.539.gdd3495f7:
    * fix(dracut.spec): add Builddeps for initrd posttrans macros (bsc#1230639)
    * fix(zfcp_rules): check for presence of legacy rules (bsc#1230330)
    Fixes for NVMeoF boot (bsc#1230468):
    * fix(nvmf): install (only) required nvmf modules
    * fix(nvmf): require NVMeoF modules
    * fix(nvmf): move /etc/nvme/host{nqn,id} requirement to hostonly


author: antonio.feijoo@suse.com
changelog:
  - Update to version 059+suse.541.g3c2df232:
    * fix(dasd-rules): handle all possible options in `rd.dasd` (bsc#1230110)


author: antonio.feijoo@suse.com
changelog:
  - Update to version 059+suse.543.g98d7f037:
    * fix(dm): remove 59-persistent-storage-dm.rules (bsc#1232063)


author: dimstar@opensuse.org
changelog:
  - Add dwarves-no-DW_TAG_mutable.patch: Fix build with newer
    libdwarf versions: DW_TAG_mutable_type was a mistake in an early
    DWARFv3 draft and was removed in the final version.


author: jengelh@inai.de
changelog:
  - dwarves needs elfutils to have the EBL plugins available
    to carry out its work. [boo#1049871]
  - Update to new upstream release 1.11
    * dwarf_loader: Do not stop processing after finding
      unsupported tags
    * dwarf_loader: Support DW_FORM_data{4,8} for reading class
      member offsets
    * dwarf_fprintf: Handle DW_TAG_GNU_call_site{_parameter}
    * dwarf_loader: Add support for DW_TAG_restrict_type
    * dwarf_loader: Initial support for DW_TAG_unspecified_type
  - Remove dwarves-no-DW_TAG_mutable.patch (already applied)


author: jengelh@inai.de
changelog:
  - Update to new upstream release 1.12
    * Added a BTF (BPF Type Format) encoder
    * Initial support for DW_TAG_partial_unit
    * Print cacheline boundaries in multiple union members
    * Show offsets at union members


author: dsterba@suse.cz
changelog:
  - version 1.13
    - Use of the recently introduced BTF deduplication algorithm
    - Introduce a 'btfdiff' utility
    - Add a BTF loader, i.e. 'pahole -F btf' allows pretty printing of structs
      and unions in the same fashion as with DWARF info
    - Better union support
    - Infer __attribute__((__packed__)) when structs have no alignment holes
    - Support DWARF5's DW_AT_alignment
    - Add a '--compile' option to 'pfunct'


author: jengelh@inai.de
changelog:
  - Update to new upstream release 1.15
    * Avoid null dereference with NULL configs
    * Fixup printing "const" early with "const void"
    * Fix recursively printing named structs in --expand_types


author: jengelh@inai.de
changelog:
  - Update to release 1.17
    * Support raw BTF as available in /sys/kernel/btf/vmlinux.
    * Make --find_pointers_to consider unions.
    * Make --contains and --find_pointers_to honour --unions.
    * Add support for finding pointers to void.
    * Make --contains and --find_pointers_to to work with base types.


author: tdevries@suse.com
changelog:
  - Backport fixes for segfault when processing dwz-ed kernel
    [bsc#1176095,https://github.com/acmel/dwarves/issues/10].
    * dwarves-dwarf_loader-Bail-out-at-DW_TAG_imported_unit-tags.patch
    * dwarves-dwarf_loader-Ignore-entries-in-a-DW_TAG_partial_unit-for-now.patch


author: jengelh@inai.de
changelog:
  - Update to release 1.18
    * pahole now should be segfault free when handling gdb test
      suit DWARF files, including ADA, FORTRAN, rust and dwp
      compressed files (the latter is refused).
    * Bail out on partial units for now, avoiding segfaults.
  - Drop
    dwarves-dwarf_loader-Ignore-entries-in-a-DW_TAG_partial_unit-for-now.patch,
    dwarves-dwarf_loader-Bail-out-at-DW_TAG_imported_unit-tags.patch
    (merged)
  - Add forced ELF symvers because of ABI breaks


author: dmueller@suse.com
changelog:
  - update to 1.18_15g040fd7f (bsc#1177921):
    * btf_encoder: Support cross-compiled ELF binaries with different endianness
    * strings: use BTF's string APIs for strings management
    * strings: Rename strings.h to avoid clashing with /usr/include/strings.h
    * dwarf_loader: increase the size of lookup hash map
    * btf_encoder: revamp how per-CPU variables are encoded
    * btf_encoder: Discard CUs after BTF encoding
    * btf_encoder: Fix emitting __ARRAY_SIZE_TYPE__ as index range type
    * btf_encoder: Use libbpf APIs to encode BTF type info
    * btf_loader: Use libbpf to load BTF
    * dwarves: Expose and maintain active debug info loader operations
    * btf_encoder: detect BTF encoding errors and exit
    * libbpf: Update to latest libbpf version
    * dwarf_loader: Conditionally define DW_AT_alignment
    * pahole: Implement --packed
    * man-pages: Fix 'coimbine' typo
  - remove libbpf-Fix-libbpf-hashmap-on-I-LP32-architectures.patch (upstream)


author: jengelh@inai.de
changelog:
  - Update to release 1.19
    * Support for split BTF.
    * Support cross-compiled ELF binaries with different endianness.
    * Support for showing typedefs for anonymous types, like structs,
      unions and enums.


author: glin@suse.com
changelog:
  - Drop the version requirement of libdw-devel
    + DW_AT_alignment is defined in 1.19 so dwarves now is compatible
      with older libdw.


author: jengelh@inai.de
changelog:
  - Update to release 1.20
    * Addresses problems related to gcc 11 defaulting to DWARF5
      for -g.
    * Support SHN_XINDEX in st_shndx symbol indexes, to handle ELF
      objects with more than 65534 sections, for instance, which
      happens with kernels built with KCFLAGS="-ffunction-sections
    - fdata-sections", Other cases may include when using FG-ASLR,
      LTO.
    * Fix BTF variable generation for kernel modules, not skipping
      variables at offset zero.
    * Fix address size to match what is in the ELF file being
      processed, to fix using a 64-bit pahole binary to generate
      BTF for a 32-bit vmlinux image.


author: jengelh@inai.de
changelog:
  - Update to release 1.21
    * Handle DWARF5 DW_OP_addrx and
      subprogram ret type with abstract_origin properly.


author: msuchanek@suse.com
changelog:
  - Handle zero sized per-cpu veriables in Linux BTF.
    + btf_encoder-fix-and-complete-filtering-out-zero-sized-per-CPU-variables.patch


author: msuchanek@suse.com
changelog:
  - Update to version 1.21+git175.1ef87b2 (jsc#SLE-17288):
    * libbpf: bump dependency to >= 0.4.0
    * CMakeLists.txt: Enable SHARED and STATIC lib creation
    * libbpf: Allow to use packaged version
    * btfdiff: Support diffing DWARF vs detached BTF
    * pahole: Allow encoding BTF into a detached file
    * pahole: Add --kabi_prefix flag
    * btf_encoder: fix and complete filtering out zero-sized per-CPU variables
    * btf: Remove ftrace filter
    * pahole: Introduce --with_flexible_array option to show just types ending in a flexible array
    * Many updates to btf_encoder and bug fixes
  - Remove upstreamed patches
    - btf_encoder-fix-and-complete-filtering-out-zero-sized-per-CPU-variables.patch
    - remove-ftrace-filter.patch
  - Pretend version 1.22 to make kernel happy
    + dwarves-Prep-1.22.patch


author: msuchanek@suse.com
changelog:
  - 15.4 has new elfutils, drop libebl-plugins dependency.
  - Update to version 1.21+git177.1ef87b2:
    * Fix crash with split BTF debuginfo
    * CMakeList.txt: Bump version to the upcoming 1.22 release, not out of the door yet
    - Remove upstreamed patch dwarves-Prep-1.22.patch


author: jengelh@inai.de
changelog:
  - Update to release 1.22 (bsc#1190340).
    * Ability to encode BTF to a separate file
    * Multithreaded DWARF loading
    * Details at https://marc.info/?l=dwarves&m=162975403628056&w=2


author: jengelh@inai.de
changelog:
  - Update to release 1.23
    * Ability to encode BTF tags.
    * Ability to carry attributes to the kernel BPF verifier for
      further checks.
    * Inference of struct member unnatural alignment
      (__attribute__(__aligned__(N))) to help in generating
      compileable headers matching the original type layout from
      BTF data.


author: dmueller@suse.com
changelog:
  - update to 1.24:
    * Add support to BTF_KIND_ENUM64 to represent enumeration
      entries with more than 32 bits.
    * Support multithreaded encoding, in addition to DWARF
      multithreaded loading, speeding up the process. Selected just
      like DWARF multithreaded loading, using the 'pahole -j'
      option.
    * Encode 'char' type as signed.
    * Add support to BTF_KIND_ENUM64.
    * Introduce --lang and --lang_exclude to specify the language
      the DWARF compile units were originated from to use or
      filter.
    * Introduce --compile to generate compilable code in a similar
      fashion to: bpftool btf dump file vmlinux format c >
      vmlinux.h As with 'bpftool', this will notice type shadowing,
      i.e. multiple types with the same name and will disambiguate
      by adding a suffix.
    * Don't segfault when processing bogus files.
  - add dwarves.keyring for source validation


author: mliska@suse.cz
changelog:
  - Add 0001-pahole-Support-lang-lang_exclude-asm.patch,
    0002-btf_encoder-Add-extra-debug-info-for-unsupported-DWA.patch,
    0003-btf_encoder-Store-the-CU-being-processed-to-avoid-ch.patch,
    0004-core-Add-DW_TAG_unspecified_type-to-tag__is_tag_type.patch,
    0005-core-Record-if-a-CU-has-a-DW_TAG_unspecified_type.patch,
    0006-btf_encoder-Encode-DW_TAG_unspecified_type-returning.patch,
    0007-dwarves-Zero-initialize-struct-cu-in-cu__new-to-prev.patch
    as in order to support DW_TAG_unspecified_type that is newly
    emitted by binutils 2.40+.


author: jengelh@inai.de
changelog:
  - Update to release 1.25
    * Fixed the handling of DW_TAG_unspecified type in assembly
      functions that came with binutils 2.40
    * Allow the BTF encoding of optimized functions (ending in
      .constprop, .isra),
    * Exclude BTF optimized functions not following the calling
      convention
    * Support for DW_TAG_atomic_type
    * Support for the DW_TAG_LLVM_annotation BTF equivalent
      (BTF_KIND_TYPE_TAG) on the BTF loader and for now suppressing
      it when pretty printing
  - Drop 0001-pahole-Support-lang-lang_exclude-asm.patch,
    0002-btf_encoder-Add-extra-debug-info-for-unsupported-DWA.patch,
    0003-btf_encoder-Store-the-CU-being-processed-to-avoid-ch.patch,
    0004-core-Add-DW_TAG_unspecified_type-to-tag__is_tag_type.patch,
    0005-core-Record-if-a-CU-has-a-DW_TAG_unspecified_type.patch,
    0006-btf_encoder-Encode-DW_TAG_unspecified_type-returning.patch,
    0007-dwarves-Zero-initialize-struct-cu-in-cu__new-to-prev.patch


author: p.drouand@gmail.com
changelog:
  - Update to version 0.161
    + libdw: New function dwarf_peel_type. dwarf_aggregate_size now uses
      dwarf_peel_type to also provide the sizes of qualified types.
      dwarf_getmacros will now serve either of .debug_macro and
      .debug_macinfo transparently.  New interfaces
      dwarf_getmacros_off, dwarf_macro_getsrcfiles,
      dwarf_macro_getparamcnt, and dwarf_macro_param are available
      for more generalized inspection of macros and their parameters.
      dwarf.h: Add DW_AT_GNU_deleted, DW_AT_noreturn, DW_LANG_C11,
      DW_LANG_C_plus_plus_11 and DW_LANG_C_plus_plus_14.
  - Remove merged patches
    + elfutils-robustify.patch
    + elfutils-no-po-test-build.diff
    + elfutils-check-for-overflow-before-calling-malloc-to-uncompress-data.patch
  - Refreshed patch (from Fedora sources)
    + elfutils-portability.patch > elfutils-portability-0.161.patch
  - Add a lang subpackage


author: tonyj@suse.com
changelog:
  - CVE-2014-9447: elfutils: Directory traversal vulnerability (bnc#911662)
    Add patch: elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch


author: tonyj@suse.com
changelog:
  - Update to version 0.163
    Drop patch elfutils-fix-dir-traversal-vuln-in-ar-extraction.patch
    Drop patch elfutils-0.148-dont-crash.diff (fixed by 9ceebe69)
    Drop patch elfutils-portability-0.161.patch
    Add patch elfutils-portability-0.163.patch
    Changelog:
    0.163:
    - Bug fixes only, no new features.
    0.162:
    - libdw: Install new header elfutils/known-dwarf.h.
      dwarf.h Add preliminary DWARF5 constants DW_TAG_atomic_type,
      DW_LANG_Fortran03, DW_LANG_Fortran08. dwarf_peel_type now also
      handles DW_TAG_atomic_type.
    - addr2line: Input addresses are now always interpreted as hexadecimal
      numbers, never as octal or decimal numbers.
      New option -a, --addresses to print address before each entry.
      New option -C, --demangle to show demangled symbols.
      New option --pretty-print to print all information on one line.
    - ar: CVE-2014-9447 Directory traversal vulnerability in ar extraction.
    - backends: x32 support.


author: idonmez@suse.com
changelog:
  - Update to version 0.164
    Drop the following patches, fixed upstream:
    * elfutils-portability-0.163.patch
    * elfutils-revert-portability-scanf.patch
    * elfutils-uninitialized.diff
    * libebl-prototype-fix.diff
    Changelog:
    - strip, unstrip:
    * Handle ELF files with merged strtab/shstrtab tables.
    * Handle missing SHF_INFO_LINK section flags.
    - libelf:
    * Use int64_t for offsets in libelf.h instead of loff_t.
    - libdw:
    * dwarf.h Add preliminary DWARF5 DW_LANG_Haskell.
    - libdwfl:
    * dwfl_standard_find_debuginfo now searches any subdir of the binary
      path under the debuginfo root when the separate debug file couldn't
      be found by build-id.
    * dwfl_linux_proc_attach can now be called before any Dwfl_Modules
      have been reported.
  - Implement %check


author: normand@linux.vnet.ibm.com
changelog:
  - rename dt-ppc-opt.patch as elfutils-0.164-dt-ppc-opt.patch
    and add reference to upstream commit id


author: fcrozat@suse.com
changelog:
  - Update to version 0.166:
    + config: The default program prefix for the installed tools is now
    eu-. Use configure --program-prefix="" to not use a program
    prefix.
    + Various bugfixes.
  - Drop elfutils-0.164-dt-ppc-opt.patch and
    elfutils-0.164-gcc6.patch (merged upstream)
  - Add patch elfutils-0.166-elfcmp-comp-gcc6.patch: fix
    self-comparison error with GCC 6.
  - Changes from 0.165:
    + Add eu-elfcompress
    + Add pkg-config files for libelf and libdw.


author: schwab@suse.de
changelog:
  - disable-tests-with-ptrace.patch: disable tests that use ptrace when
    running under qemu-linux-user


author: matz@suse.com
changelog:
  - Update to version 0.167:
    libasm: Add eBPF disassembler for EM_BPF files.
    backends: Add m68k and BPF backends.
    ld: Removed.
    dwelf: Add ELF/DWARF string table creation functions. dwelf_strtab_init,
      dwelf_strtab_add, dwelf_strtab_add_len, dwelf_strtab_finalize,
      dwelf_strent_off, dwelf_strent_str and dwelf_strtab_free.
    Support compressed sections from binutils 2.27.
  - Remove patch elfutils-0.166-elfcmp-comp-gcc6.patch: included upstream.


author: mliska@suse.cz
changelog:
  - Add 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch: fix
    new warning introduced in GCC 7.
  - Add 0001-ar-Fix-GCC7-Wformat-length-issues.patch: fix -Wformat-length
    warning introduced in GCC 7.


author: rguenther@suse.com
changelog:
  - Update to version 0.168:
    libelf: gelf_newehdr and gelf_newehdr now return void *.
    libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1).
    readelf: Add optional --symbols[=SECTION] argument to select section name.
  - Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch
    and 0001-ar-Fix-GCC7-Wformat-length-issues.patch.
  - Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer
    required after a debugedit fix.


author: mliska@suse.cz
changelog:
  - Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch:
    fix .gnu.attributes checking on ppc64{,le}.


author: mliska@suse.cz
changelog:
  - Add 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
    unconditionally in the spec file. As we can't support binary diff,
    a newly added test-case is removed from the patch.


author: schwab@linux-m68k.org
changelog:
  - ppc-machine-flags.patch: support EM_PPC machine flags
  - disable-tests-with-ptrace.patch: disable more tests


author: jengelh@inai.de
changelog:
  - Update package descriptions.
  - Rename libebl1 to libebl-plugins as these are not linked,
    but dlopened using their unversioned libebl_$ARCH.so name.
  - Have libelf1 require libebl-plugins (libebl.a, which does the
    dlopen call, is staticly built into libelf1). This is necessary
    for pahole to display its results. [boo#1049871]


author: rguenther@suse.com
changelog:
  - Update to version 0.170
    libdw: Added new DWARF5 attribute, tag, character encoding, language code,
      calling convention, defaulted member function and macro constants
      to dwarf.h.
    New functions dwarf_default_lower_bound and dwarf_line_file.
    dwarf_peel_type now handles DWARF5 immutable, packed and shared tags.
    dwarf_getmacros now handles DWARF5 .debug_macro sections.
    strip: Add -R, --remove-section=SECTION and --keep-section=SECTION.
    backends: The bpf disassembler is now always build on all platforms.
  - Includes changes in 0.169
    backends: Add support for EM_PPC64 GNU_ATTRIBUTES.
      Frame pointer unwinding fallback support for i386, x86_64, aarch64.
    translations: Update Polish translation.
  - Remove obsolete 0001-backends-Add-support-for-EM_PPC64-GNU_ATTRIBUTES.patch
    and ppc-machine-flags.patch
  - Add elfutils-0.170-stripnothing.patch to robustify test and avoid a FAIL.
  - Add elfutils-0.170-Wpackednotaligned.patch to fix build with GCC 8.
    (boo#1084637)


author: mliska@suse.cz
changelog:
  - Update to version 0.171
    DWARF5 and split dwarf, including GNU DebugFission, are supported now.
    Data can be read from the new DWARF sections .debug_addr, .debug_line_str,
    .debug_loclists, .debug_str_offsets and .debug_rnglists.  Plus the new
    DWARF5 and GNU DebugFission encodings of the existing .debug sections.
    Also in split DWARF .dwo (DWARF object) files.  This support is mostly
    handled by existing functions (dwarf_getlocation*, dwarf_getsrclines,
    dwarf_ranges, dwarf_form*, etc.) now returning the data from the new
    sections and data formats.  But some new functions have been added
    to more easily get information about skeleton and split compile units
    (dwarf_get_units and dwarf_cu_info), handle new attribute data
    (dwarf_getabbrevattr_data) and to keep references to Dwarf_Dies
    that might come from different sections or files (dwarf_die_addr_die).
    Not yet supported are .dwp (Dwarf Package) and .sup (Dwarf Supplementary)
    files, the .debug_names index, the .debug_cu_index and .debug_tu_index
    sections. Only a single .debug_info (and .debug_types) section are
    currently handled.
    readelf: Handle all new DWARF5 sections.
    - -debug-dump=info+ will show split unit DIEs when found.
    - -dwarf-skeleton can be used when inspecting a .dwo file.
      Recognizes GNU locviews with --debug-dump=loc.
    libdw: New functions dwarf_die_addr_die, dwarf_get_units,
      dwarf_getabbrevattr_data and dwarf_cu_info.
      libdw will now try to resolve the alt file on first use of
      an alt attribute FORM when not set yet with dwarf_set_alt.
      dwarf_aggregate_size() now works with multi-dimensional arrays.
    libdwfl: Use process_vm_readv when available instead of ptrace.
    backends: Add a RISC-V backend.
    There were various improvements to build on Windows.
    The sha1 and md5 implementations have been removed, they weren't used.
  - Remove patches: elfutils-0.170-Wpackednotaligned.patch,
    elfutils-0.170-stripnothing.patch, gcc8-disable-test.patch
  - make package with V=1 to print verbose command line


author: mliska@suse.cz
changelog:
  - Update to versio 0.172
    No functional changes compared to 0.171.
    Various bug fixes in libdw and eu-readelf dealing with bad DWARF5 data.
    Thanks to running the afl fuzzer on eu-readelf and various testcases.


author: mliska@suse.cz
changelog:
  - Update to version 0.173
    More fixes for crashes and hangs found by afl-fuzz. In particular various
    functions now detect and break infinite loops caused by bad DIE tree cycles.
    readelf: Will now lookup the size and signedness of constant value types
      to display them correctly (and not just how they were encoded).
    libdw: New function dwarf_next_lines to read CU-less .debug_line data.
      dwarf_begin_elf now accepts ELF files containing just .debug_line
      or .debug_frame sections (which can be read without needing a DIE
      tree from the .debug_info section).
      Removed dwarf_getscn_info, which was never implemented.
    backends: Handle BPF simple relocations.
      The RISCV backends now handles ABI specific CFI and knows about
      RISCV register types and names.
  - add cfi-fix.patch: make build green on arm target


author: mliska@suse.cz
changelog:
  - Update to version 0.174
    libelf, libdw and all tools now handle extended shnum and
    shstrndx correctly.
    elfcompress: Don't rewrite input file if no section data needs
      updating. Try harder to keep same file mode bits
      (suid) on rewrite.
    strip: Handle mixed (out of order) allocated/non-allocated
      sections.
    unstrip: Handle SHT_GROUP sections.
    backends: RISCV and M68K now have backend implementations to
      generate CFI based backtraces.


author: mliska@suse.cz
changelog:
  - Add disable-backtrace-dwarf-test.patch in order to work around:
    https://sourceware.org/bugzilla/show_bug.cgi?id=23673.


author: mliska@suse.cz
changelog:
  - Update to version 0.175
    readelf: Handle mutliple .debug_macro sections.
      Recognize and parse GNU Property, NT_VERSION and
      GNU Build Attribute ELF Notes.
    strip: Handle SHT_GROUP correctly.
      Add strip --reloc-debug-sections-only option.
      Handle relocations against GNU compressed sections.
    libdwelf: New function dwelf_elf_begin.
    libcpu: Recognize bpf jump variants BPF_JLT, BPF_JLE, BPF_JSLT
      and BPF_JSLE.
    backends: RISCV handles ADD/SUB relocations.
      Handle SHT_X86_64_UNWIND.
    Fixes CVE-2018-18310, CVE-2018-18520 and CVE-2018-18521.
  - remove disable-backtrace-dwarf-test.patch patch - the test
    works now


author: mliska@suse.cz
changelog:
  - Update to version 0.176
    build: Add new --enable-install-elfh option.
      Do NOT use this for system installs (it overrides glibc elf.h).
    backends: riscv improved core file and return value location support.
    Fixes CVE-2019-7146, CVE-2019-7148, CVE-2019-7149, CVE-2019-7150,
      CVE-2019-7664, CVE-2019-7665


author: mliska@suse.cz
changelog:
  - Update to version 0.177:
    elfclassify: New tool to analyze ELF objects.
    readelf: Print DW_AT_data_member_location as decimal offset.
      Decode DW_AT_discr_list block attributes.
    libdw: Add DW_AT_GNU_numerator, DW_AT_GNU_denominator and DW_AT_GNU_bias.
    libdwelf: Add dwelf_elf_e_machine_string.
      dwelf_elf_begin now only returns NULL when there is an error
      reading or decompressing a file. If the file is not an ELF file
      an ELF handle of type ELF_K_NONE is returned.
    backends: Add support for C-SKY.
  - remove fix-bsc-1110929.diff and gcc9-tests-Don-t-printf-a-known-NULL-symname.patch
  - Use %make_build


author: schwab@suse.de
changelog:
  - disable-tests-with-ptrace.patch: Remove, set XFAIL_TESTS instead
  - dwelf_elf_e_machine_string.patch: Avoid spurious failure


author: mliska@suse.cz
changelog:
  - Add remove-run-large-elf-file.sh.patch in order to remove
    running run-large-elf-file.sh (it hit OOM).


author: mliska@suse.cz
changelog:
  - Update to version 0.178:
    debuginfod: New server, client tool and library to index and fetch
      ELF/DWARF files addressed by build-id through HTTP.
    doc: There are now some manual pages for functions and tools.
    backends: The libebl libraries are no longer dynamically loaded through
      dlopen, but are now compiled into libdw.so directly.
    readelf: -n, --notes now takes an optional "SECTION" argument.
    - p and -x now also handle section numbers.
      New option --dyn-sym to show just the dynamic symbol table.
    libcpu: Add RISC-V disassembler.
    libdw: Abbrevs and DIEs can now be read concurrently by multiple
      threads through the same Dwarf handle.
    libdwfl: Will try to use debuginfod when installed as fallback to
      retrieve ELF and DWARF debug data files by build-id.
  - remove dwelf_elf_e_machine_string.patch.
  - remove unused libebl-plugins and libebl-devel subpackages
  - new subpackages debuginfod-client, debuginfod-client-devel and
    debuginfod added
  - main package binaries are explicitely listed and man pages
    for the binaries are included


author: mliska@suse.cz
changelog:
  - Split libdebuginfod1 into libdebuginfod1 and debuginfod-client.
    Add Requires for these packages.


author: dimstar@opensuse.org
changelog:
  - Re-add libelf1 to baselibs.conf: we still generate a
    libelf-devel-32bit, which is only installable if libelf1-21bit
    also exists.


author: mliska@suse.cz
changelog:
  - Update to version 0.179:
    debuginfod-client: When DEBUGINFOD_PROGRESS is set and the program doesn't
      install its own debuginfod_progressfn_t show download
      progress on stderr.
      DEBUGINFOD_TIMEOUT is now defined as seconds to get at
      least 100K, defaults to 90 seconds.
      Default to $XDG_CACHE_HOME/debuginfod_client.
      New functions debuginfod_set_user_data,
      debuginfod_get_user_data, debuginfod_get_url and
      debuginfod_add_http_header.
      Support for file:// URLs.
    debuginfod: Uses libarchive directly for reading rpm archives.
      Support for indexing .deb/.ddeb archives through dpkg-deb
      or bsdtar.
      Generic archive support through -Z EXT[=CMD]. Which can be
      used for example for arch-linux pacman files by using
    - Z '.tar.zst=zstdcat'.
      Better logging using User-Agent and X-Forwarded-For headers.
      More prometheus metrics.
      Support for eliding dots or extraneous slashes in path names.
    debuginfod-find: Accept /path/names in place of buildid hex.
    libelf: Handle PN_XNUM in elf_getphdrnum before shdr 0 is cached
      Ensure zlib resource cleanup on failure.
    libdwfl: dwfl_linux_kernel_find_elf and dwfl_linux_kernel_report_offline
      now find and handle a compressed vmlinuz image.
    readelf, elflint: Handle PT_GNU_PROPERTY.
    translations: Updated Ukrainian translation.


author: mliska@suse.cz
changelog:
  - Update to version 0.180:
    elflint: Allow SHF_EXCLUDE as generic section flag when --gnu is given.
    libdw, readelf: Handle GCC LTO .gnu.debuglto_ prefix.
    libdw: Use correct CU to resolve file names in dwarf_decl_file.
    libdwfl: Handle debugaltlink in dwfl_standard_find_debuginfo.
    size: Also obey radix printing for bsd format.
    nm: Explicitly print weak 'V' or 'T' and common 'C' symbols.
  - Add 0001-tests-Add-GCOV-flags-when-necessary.patch in order to fix
    an unresolved symbol.
  - Enable LTO: boo#1138796 by adding -flto-partition=none and -Wno-error=stack-usage.


author: mliska@suse.cz
changelog:
  - Remove cfi-fix.patch - should not be needed now.
  - Remove remove-run-large-elf-file.sh.patch as it now checks for memory
    size.
  - Use autosetup.


author: guillaume.gardet@opensuse.org
changelog:
  - Update to version 0.181:
    libelf: elf_update now compensates (fixes up) a bad sh_addralign for
      SHF_COMPRESSED sections.
    libdebuginfod: configure now takes --enable-libdebuginfod=dummy or
    - -disable-libdebuginfod for bootstrapping.
      DEBUGINFOD_URLS now accepts "scheme-free" urls
      (guessing at what the user meant, either http:// or file://)
    readelf, elflint: Handle aarch64 bti, pac bits in dynamic table and gnu
      property notes.
    libdw, readelf: Recognize DW_CFA_AARCH64_negate_ra_state. Allows unwinding
      on arm64 for code that is compiled for PAC (Pointer
      Authentication Code) as long as it isn't enabled
  - Drop upstream patch:
    * 0001-tests-Add-GCOV-flags-when-necessary.patch


author: mliska@suse.cz
changelog:
  - Creatu dummy subpackages that can be used for build of packages
    that are in bootstrap cycle.
  - Add Provides for real packages.


author: mliska@suse.cz
changelog:
  - Add rpmlintrc for
    libdebuginfod1-dummy.s390x: E: shlib-policy-name-error (Badness: 10000) libdebuginfod1
    which is expected as libdebuginfod1 and it's dummy library do share equal
    soname.
  - Update to version 0.182:
    backends: Support for tilegx has been removed.
    config: New /etc/profile.d files to provide default $DEBUGINFOD_URLS.
    debuginfod: More efficient package traversal, tolerate various errors
      during scanning, grooming progress is more visible and
      interruptible, more prometheus metrics.
    debuginfod-client: Now supports compressed (kernel) ELF images.
    libdwfl: Add ZSTD compression support.


author: mliska@suse.cz
changelog:
  - Update to version 0.183:
    debuginfod: New thread-busy metric and more detailed error metrics.
      New --fdcache-mintmp and tracking of filesystem freespace.
      New increased webapi concurrency while grooming.
    debuginfod-client: DEBUGINFOD_SONAME macro added to debuginfod.h which
      can be used to dlopen the libdebuginfod.so library.
      New function debuginfod_set_verbose_fd and
      DEBUGINFOD_VERBOSE environment variable.
    config: profile.sh and profile.csh won't export DEBUGINFOD_URLS unless
      configured --enable-debuginfod-urls[=URLS]
    elflint, readelf: Recognize SHF_GNU_RETAIN.
      Handle SHT_X86_64_UNWIND as valid relocation target.
  - Remove config-do-not-define-DEBUGINFOD_URLS-environment-var.patch patch.


author: mliska@suse.cz
changelog:
  - Add disable-run-readelf-self-test.patch in order to disable
    a failing test-case with GCC 11 (PR27367).


author: mliska@suse.cz
changelog:
  - Update to version 0.184:
    debuginfod: Use libarchive's bsdtar as the .deb-family file unpacker.
    debuginfod-client: Client caches negative results. If a query for a
      file failed with 404, an empty 000 permission
      file is created in the cache. This will prevent
      requesting the same file for the next 10 minutes.
      Client objects now carry long-lived curl handles
      for outgoing connections.  This makes it more
      efficient for multiple sequential queries, because
      the TCP connections and/or TLS state info are kept
      around awhile, avoiding O(100ms) setup latencies.
    libdw: handle DW_FORM_indirect when reading attributes
    translations: Update Polish translation.


author: mliska@suse.cz
changelog:
  - Update to version 0.185:
    debuginfod-client: Simplify curl handle reuse so downloads which
      return an error are retried.
    elfcompress: Always exit with code 0 when the operation succeeds (even
      when nothing was done). On error the exit code is now always 1.


author: jcheung@suse.com
changelog:
  - For version 0.185, the below patches are no longer needed
    (jsc#SLE-17288, jsc#SLE-17951)
    libdw-check-end-of-attributes-list-consistently.patch
    elflint-dont-check-section-group-without-flags-word.patch
    libelf-error-if-elf_compress_gnu-is-used-on-SHF_COMPRESSED.patch
    libdw-readelf-make-sure-there-is-enough-data-to-read.patch
    elfutils-dont-trust-sh_entsize.patch
    elflint-check-symbol-table-data-is-big-enough-before-check.patch
    size-handle-recursive-elf-ar-files.patch
    elflint-sanity-check-the-number-of-phdrs-and-shdrs.patch
    use-the-empty-string-for-note-names-with-zero-size.patch
    readelf-fix-off-by-one-sanity-check.patch
    libebl-check-NT_PLATFORM-core-notes.patch
    libdwfl-sanity-check-partial-core-file-dyn-data-read.patch
    libelf-check-compression-before-allocate-output-buffer.patch
    libdwfl-sanity-check-partial-core-file-data-reads.patch
    arlib-check-that-sh_entsize-isnt-zero.patch


author: martin.liska@suse.com
changelog:
  - Enhance license fields: all the libraries actually have a different
    license to the tools. While the tools are GPL-3.0-or-later, the
    libraries are (LGPL-3.0-or-later OR GPL-2.0-or-later)
    SLE bug (for tracking the above) bsc#1191310


author: schwab@suse.de
changelog:
  - Update to crypt_blowfish 1.3.
    * Add support for the $2b$ prefix.
  - ifunc-x86-slow-sse4.patch: Fix misdetected Slow_SSE4_2 cpu feature bit
    (BZ #17501)


author: schwab@suse.de
changelog:
  - Update to glibc 2.21 release.
    * A new semaphore algorithm has been implemented in generic C code for all
      machines
    * Added support for TSX lock elision of pthread mutexes on powerpc32,
      powerpc64 and powerpc64le
    * Optimized strcpy, stpcpy, strchrnul and strrchr implementations for
      AArch64
    * i386 memcpy functions optimized with SSE2 unaligned load/store
    * New locales: tu_IN, bh_IN, raj_IN, ce_RU
    * The obsolete sigvec function has been removed
    * CVE-2015-1472 CVE-2015-1473 CVE-2012-3406 CVE-2014-9402
      CVE-2014-7817 bsc#864081 bsc#906371 bsc#909053 bsc#910599 bsc#916222
  - Patches from upstream removed
    * ifunc-x86-slow-sse4.patch
    * pthread-mutex-trylock-elision.patch
  - o-tmpfile.patch: Fix value of O_TMPFILE for architectures with
    non-default O_DIRECTORY (BZ #17912)


author: schwab@suse.de
changelog:
  - powerpc-software-sqrt.patch: Fix powerpc software sqrt (BZ #17964, BZ
    [#17967])
  - nss-separate-state-getXXent.patch: Separate internal state between
    getXXent and getXXbyYY NSS calls (CVE-2014-8121, bsc#918187, BZ #18007)
  - static-tls-dtv-limit.patch: Fix DTV race, assert, DTV_SURPLUS Static TLS
    limit, and nptl_db garbage (bsc#919678, BZ #17090, BZ #17620, BZ #17621,
    BZ #17628)


author: mgorman@suse.com
changelog:
  - threaded-trim-threshold.patch: Fix regression in threaded application
    malloc performance (bsc#915955, BZ #17195)


author: schwab@suse.de
changelog:
  - Add /usr/include/gnu/lib-names-.*.h to baselibs
  - pthread-join-deadlock.patch: Don't require rtld lock to store static TLS
    offset in the DTV (bsc#930015, BZ #18457)
  - heap-top-corruption.patch: Do not corrupt the top of a threaded heap if
    top chunk is MINSIZE (BZ #18502)


author: schwab@suse.de
changelog:
  - getaddrinfo-ipv6-sanity.diff: Remove.  It breaks services that start
    before IPv6 is up (bsc#931399)
  - glibc-2.3.locales.diff.bz2: Remove sh_YU locales, fix currency for en_BE.


author: schwab@suse.de
changelog:
  - pthread-join-deadlock.patch: Use IE model for static variables in
    libc.so, libpthread.so and rtld (bsc#930015, BZ #18457)


author: schwab@suse.de
changelog:
  - Update to glibc 2.22 release.
    * Cache information can be queried via sysconf() function on s390
    * A buffer overflow in gethostbyname_r and related functions performing DNS
      requests has been fixed.  (CVE-2015-1781)
    * The time zone file parser has been made more robust against crafted time
      zone files
    * A powerpc and powerpc64 optimization for TLS, similar to TLS descriptors
      for LD and GD on x86 and x86-64, has been implemented.
    * Character encoding and ctype tables were updated to Unicode 7.0.0
    * Added vector math library named libmvec
    * A new fmemopen implementation has been added with the goal of POSIX
      compliance.
    * The header <regexp.h> is deprecated, and will be removed in a future
      release.
    * bsc#905313 bsc#920338 bsc#927080 bsc#928723 bsc#931480 bsc#939211
      bsc#940195 bsc#940332 bsc#944494 bsc#968787
  - Patches from upstream removed
    * htm-tabort.patch
    * o-tmpfile.patch
    * memcpy-chk-non-SSE2.patch
    * pthread-mutexattr-gettype-kind.patch
    * powerpc-software-sqrt.patch
    * static-tls-dtv-limit.patch
    * threaded-trim-threshold.patch
    * resolv-nameserver-handling.patch
    * nss-separate-state-getXXent.patch
    * aarch64-sigstksz.patch
    * heap-top-corruption.patch
    * pthread-join-deadlock.patch


author: schwab@suse.de
changelog:
  - dont-remove-nodelete-flag.patch: Don't remove DF_1_NODELETE flag from
    all loaded objects on failed dlopen
  - openat64-readd-o-largefile.patch: Readd O_LARGEFILE flag for openat64


author: schwab@suse.de
changelog:
  - opendir-o-directory-check.patch: Fix opendir inverted o_directory_works
    test
  - static-dlopen.patch: Static dlopen default library search path fix
    (bsc#937853)


author: schwab@suse.de
changelog:
  - fnmatch-collating-elements.patch: Fix fnmatch handling of collating
    elements (BZ #17396, BZ #16976)


author: schwab@suse.de
changelog:
  - nss-files-long-lines-2.patch: Properly reread entry after failure in
    nss_files getent function (bsc#945779, BZ #18991)


author: normand@linux.vnet.ibm.com
changelog:
  - new patch [BZ #18743] PowerPC: Fix a race condition when eliding a lock
    0001-powerpc-Fix-a-race-condition-when-eliding-a-lock-20150730.patch


author: schwab@suse.de
changelog:
  - resolv-mem-leak.patch: Fix resource leak in resolver (bsc#955647, BZ #19257)
  - tzset-tzname.patch: Force rereading TZDEFRULES after it was used to set
    DST rules only (BZ #19253)


author: schwab@suse.de
changelog:
  - reinitialize-dl_load_write_lock.patch: Reinitialize dl_load_write_lock
    on fork (bsc#958315, BZ #19282)


author: schwab@suse.de
changelog:
  - tls-dtor-list-mangling.patch: Harden tls_dtor_list with pointer mangling
    (BZ #19018)
  - prelink-elf-rtype-class.patch: Keep only ELF_RTYPE_CLASS_{PLT|COPY} bits
    for prelink (BZ #19178)
  - vector-finite-math-aliases.patch: Better workaround for aliases of
    * _finite symbols in vector math library (BZ# 19058)
  - powerpc-elision-adapt-param.patch: powerpc: Fix usage of elision
    transient failure adapt param (BZ #19174)
  - catopen-unbound-alloca.patch: Fix unbound alloca in catopen
    (CVE-2015-8779, bsc#962739, BZ #17905)
  - strftime-range-check.patch: Add range check on time fields
    (CVE-2015-8776, bsc#962736, BZ #18985)
  - hcreate-overflow-check.patch: Handle overflow in hcreate (CVE-2015-8778,
    bsc#962737, BZ #18240)
  - errorcheck-mutex-no-elision.patch: Don't do lock elision on an error
    checking mutex (bsc#956716, BZ #17514)
  - refactor-nan-parsing.patch: Refactor strtod parsing of NaN payloads
    (CVE-2014-9761, bsc#962738, BZ #16962)
  - send-dg-buffer-overflow.patch: Fix getaddrinfo stack-based buffer
    overflow (CVE-2015-7547, bsc#961721, BZ #18665)
  - powerpc-lock-elision-race.patch: renamed from
    0001-powerpc-Fix-a-race-condition-when-eliding-a-lock-20150730.patch


author: schwab@suse.de
changelog:
  - isinf-cxx11-conflict.patch: Fix isinf/isnan declaration conflict with
    C++11 (bsc#963700, BZ #19439)


author: schwab@suse.de
changelog:
  - Update to glibc 2.23 release.
    * Unicode 8.0.0 Support
    * sched_setaffinity, pthread_setaffinity_np no longer attempt to guess
      the kernel-internal CPU set size
    * The fts.h header can now be used with -D_FILE_OFFSET_BITS=64
    * getaddrinfo now detects certain invalid responses on an internal
      netlink socket
    * A defect in the malloc implementation, present since glibc 2.15 (2012)
      or glibc 2.10 via --enable-experimental-malloc (2009), could result in
      the unnecessary serialization of memory allocation requests across
      threads
    * The obsolete header <regexp.h> has been removed
    * The obsolete functions bdflush, create_module, get_kernel_syms,
      query_module and uselib are no longer available to newly linked
      binaries
    * Optimized string, wcsmbs and memory functions for IBM z13.
    * Newly linked programs that define a variable called signgam will no
      longer have it set by the lgamma, lgammaf and lgammal functions
  - Removed patches:
    * dont-remove-nodelete-flag.patch
    * openat64-readd-o-largefile.patch
    * mntent-blank-line.patch
    * opendir-o-directory-check.patch
    * strcoll-remove-strdiff-opt.patch
    * ld-pointer-guard.patch
    * tls-dtor-list-mangling.patch
    * powerpc-lock-elision-race.patch
    * prelink-elf-rtype-class.patch
    * vector-finite-math-aliases.patch
    * powerpc-elision-adapt-param.patch
    * catopen-unbound-alloca.patch
    * strftime-range-check.patch
    * hcreate-overflow-check.patch
    * errorcheck-mutex-no-elision.patch
    * refactor-nan-parsing.patch
    * send-dg-buffer-overflow.patch
    * isinf-cxx11-conflict.patch
    * ibm93x-redundant-shift-si.patch
    * iconv-reset-input-buffer.patch
    * tzset-tzname.patch
    * static-dlopen.patch


author: schwab@suse.de
changelog:
  - Move %install_info_delete to %preun
  - crypt_blowfish-1.3.tar.gz.sign: Remove, the sign key is no longer
    acceptable


author: idonmez@suse.com
changelog:
  - Add C.UTF-8 locale (see https://sourceware.org/glibc/wiki/Proposals/C.UTF-8)
    and rh#902094 . Added with glibc-c-utf8-locale.patch.
  - Add glibc-disable-gettext-for-c-utf8.patch to disable gettext for
    C.UTF-8 same as C locale.


author: schwab@suse.de
changelog:
  - ldd-system-interp.patch: Restore warning about execution permission, it
    is still needed for noexec mounts (bsc#915985)


author: schwab@suse.de
changelog:
  - powerpc-elision-enable-envvar.patch: enable TLE only if
    GLIBC_ELISION_ENABLE=yes is defined (bsc#967594, fate#318236)


author: schwab@suse.de
changelog:
  - glibc-c-utf8-locale.patch: fix bad standard in LC_IDENTIFICATION categories
  - glibc-2.3.locales.diff.bz2: likewise


author: schwab@suse.de
changelog:
  - Import patches from 2.23 branch
    0001-Updated-translations-for-2.23.patch
    0002-Regenerate-libc.pot-for-2.23.patch
    0003-Regenerated-configure-scripts.patch
    0004-x86_64-Set-DL_RUNTIME_UNALIGNED_VEC_SIZE-to-8.patch
    0005-Add-fts64_-to-sysdeps-arm-nacl-libc.abilist.patch
    0006-Don-t-use-long-double-math-functions-if-NO_LONG_DOUB.patch
    0007-NEWS-2.23-Fix-typo-in-bug-19048-text.patch
    0008-Update-NEWS.patch
    0009-sln-use-stat64.patch
    0010-Add-sys-auxv.h-wrapper-to-include-sys.patch
    0011-mips-terminate-the-FDE-before-the-return-trampoline-.patch
    0012-Use-HAS_ARCH_FEATURE-with-Fast_Rep_String.patch
    0013-Mention-BZ-19762-in-NEWS.patch
    0014-Define-_HAVE_STRING_ARCH_mempcpy-to-1-for-x86.patch
    0015-Or-bit_Prefer_MAP_32BIT_EXEC-in-EXTRA_LD_ENVVARS.patch
    0016-Fix-resource-leak-in-resolver-bug-19257.patch
    0017-math-don-t-clobber-old-libm.so-on-install-BZ-19822.patch
    0018-resolv-Always-set-resplen2-out-parameter-in-send_dg-.patch
    0019-S390-Save-and-restore-fprs-vrs-while-resolving-symbo.patch
    0020-S390-Extend-structs-La_s390_regs-La_s390_retval-with.patch
    0021-CVE-2016-3075-Stack-overflow-in-_nss_dns_getnetbynam.patch
    0022-configure-fix-test-usage.patch
    0023-Suppress-GCC-6-warning-about-ambiguous-else-with-Wpa.patch
    0024-nss_db-Propagate-ERANGE-error-if-parse_line-fails-BZ.patch
    0025-getnameinfo-Do-not-preserve-errno.patch
    0026-getnameinfo-Refactor-and-fix-memory-leak-BZ-19642.patch
    0027-getnameinfo-Reduce-line-length-and-add-missing-comme.patch
    0028-getnameinfo-Avoid-calling-strnlen-on-uninitialized-b.patch
    0029-getnameinfo-Return-EAI_OVERFLOW-in-more-cases-BZ-197.patch
    0030-hesiod-Remove-RCS-keywords.patch
    0031-hesiod-Always-use-thread-local-resolver-state-BZ-195.patch
    0032-hesiod-Avoid-heap-overflow-in-get_txt_records-BZ-200.patch
    0033-malloc-Remove-NO_THREADS.patch
    0034-Fix-malloc-threaded-tests-link-on-non-Linux.patch
    0035-malloc-Run-fork-handler-as-late-as-possible-BZ-19431.patch
    0036-malloc-Remove-malloc-hooks-from-fork-handler.patch
    0037-malloc-Add-missing-internal_function-attributes-on-f.patch
    0038-nss_dns-Fix-assertion-failure-in-_nss_dns_getcanonna.patch
    0039-nss_dns-Validate-RDATA-length-against-packet-length-.patch
    0040-resolv-nss_dns-Remove-remaining-syslog-logging-BZ-19.patch
    0041-nss_dns-Check-address-length-before-creating-addrinf.patch
    0042-nss_dns-Skip-over-non-PTR-records-in-the-netent-code.patch
    0043-resolv-Always-set-resplen2-out-parameter-in-send_vc-.patch
    0044-tst-audit4-tst-audit10-Compile-AVX-AVX-512-code-sepa.patch
    0045-Fix-tst-audit10-build-when-mavx512f-is-not-supported.patch
    0046-tst-audit10-Fix-compilation-on-compilers-without-bit.patch
    0047-strfmon_l-Use-specified-locale-for-number-formatting.patch
    0048-glob-Simplify-the-interface-for-the-GLOB_ALTDIRFUNC-.patch
    0049-CVE-2016-1234-glob-Do-not-copy-d_name-field-of-struc.patch
    0050-ldconfig-Do-not-remove-stale-symbolic-links-with-X-B.patch
    0051-Report-dlsym-dlvsym-lookup-errors-using-dlerror-BZ-1.patch
    0052-Fix-tst-dlsym-error-build.patch
    0053-Remove-trailing-newline-from-date_fmt-in-Serbian-loc.patch
    0054-Revert-Report-dlsym-dlvsym-lookup-errors-using-dlerr.patch
    0055-CVE-2016-3706-getaddrinfo-stack-overflow-in-hostent-.patch
    0056-Fix-strfmon_l-Use-specified-locale-for-number-format.patch
  - CVE-2016-3075 CVE-2016-1234 CVE-2016-3706 bsc#973164 bsc#969727
  - resolv-mem-leak.patch: renamed to
    0016-Fix-resource-leak-in-resolver-bug-19257.patch
  - no-long-double.patch: renamed to
    0006-Don-t-use-long-double-math-functions-if-NO_LONG_DOUB.patch
  - glibc-gcc6.patch: renamed to
    0023-Suppress-GCC-6-warning-about-ambiguous-else-with-Wpa.patch


author: schwab@suse.de
changelog:
  - clntudp-call-alloca.patch: do not use alloca in clntudp_call
    (CVE-2016-4429, bsc#980854, BZ #20112)


author: schwab@suse.de
changelog:
  - nis-initgroups-status.patch: Return proper status from
    _nss_nis_initgroups_dyn (bsc#984269, BZ #20262)
  - robust-mutex-deadlock.patch: Fix generic __lll_robust_timedlock_wait to
    check for timeout (bsc#985170, BZ #20263)


author: schwab@suse.de
changelog:
  - strncat-avoid-array-bounds-warning.patch: Avoid array-bounds warning for
    stncat on i586 (BZ #20260)
  - Update glibc.keyring
  - Unset MALLOC_CHECK_ during testsuite run


author: schwab@suse.de
changelog:
  - Update to glibc 2.24
    * The minimum Linux kernel version that this version of the GNU C Library
      can be used with is 3.2
    * The pap_AN locale has been deleted
    * The readdir_r and readdir64_r functions have been deprecated
    * The type `union wait' has been removed
    * A new NSS action is added to facilitate large distributed system
      administration
    * The deprecated __malloc_initialize_hook variable has been removed from
      the API
    * The long unused localedef --old-style option has been removed
    * nextupl, nextup, nextupf, nextdownl, nextdown and nextdownf are added
      to libm
    * An unnecessary stack copy in _nss_dns_getnetbyname_r was removed
      (CVE-2016-3075)
    * Previously, getaddrinfo copied large amounts of address data to the
      stack, even after the fix for CVE-2013-4458 has been applied,
      potentially resulting in a stack overflow.  getaddrinfo now uses a
      heap allocation instead (CVE-2016-3706)
    * The glob function suffered from a stack-based buffer overflow when it
      was called with the GLOB_ALTDIRFUNC flag and encountered a long file
      name (CVE-2016-1234)
    * The Sun RPC UDP client could exhaust all available stack space when
      flooded with crafted ICMP and UDP messages (CVE-2016-4429)
    * The IPv6 name server management code in libresolv could result in a
      memory leak for each thread which is created, performs a failing
      naming lookup, and exits (CVE-2016-5417)
  - startcontext-cantunwind.patch: mark __startcontext as .cantunwind
    (bsc#974800, BZ #20435)
  - Removed patches:
    * 0001-Updated-translations-for-2.23.patch
    * 0002-Regenerate-libc.pot-for-2.23.patch
    * 0003-Regenerated-configure-scripts.patch
    * 0004-x86_64-Set-DL_RUNTIME_UNALIGNED_VEC_SIZE-to-8.patch
    * 0005-Add-fts64_-to-sysdeps-arm-nacl-libc.abilist.patch
    * 0006-Don-t-use-long-double-math-functions-if-NO_LONG_DOUB.patch
    * 0007-NEWS-2.23-Fix-typo-in-bug-19048-text.patch
    * 0008-Update-NEWS.patch
    * 0009-sln-use-stat64.patch
    * 0010-Add-sys-auxv.h-wrapper-to-include-sys.patch
    * 0011-mips-terminate-the-FDE-before-the-return-trampoline-.patch
    * 0012-Use-HAS_ARCH_FEATURE-with-Fast_Rep_String.patch
    * 0013-Mention-BZ-19762-in-NEWS.patch
    * 0014-Define-_HAVE_STRING_ARCH_mempcpy-to-1-for-x86.patch
    * 0015-Or-bit_Prefer_MAP_32BIT_EXEC-in-EXTRA_LD_ENVVARS.patch
    * 0016-Fix-resource-leak-in-resolver-bug-19257.patch
    * 0017-math-don-t-clobber-old-libm.so-on-install-BZ-19822.patch
    * 0018-resolv-Always-set-resplen2-out-parameter-in-send_dg-.patch
    * 0019-S390-Save-and-restore-fprs-vrs-while-resolving-symbo.patch
    * 0020-S390-Extend-structs-La_s390_regs-La_s390_retval-with.patch
    * 0021-CVE-2016-3075-Stack-overflow-in-_nss_dns_getnetbynam.patch
    * 0022-configure-fix-test-usage.patch
    * 0023-Suppress-GCC-6-warning-about-ambiguous-else-with-Wpa.patch
    * 0024-nss_db-Propagate-ERANGE-error-if-parse_line-fails-BZ.patch
    * 0025-getnameinfo-Do-not-preserve-errno.patch
    * 0026-getnameinfo-Refactor-and-fix-memory-leak-BZ-19642.patch
    * 0027-getnameinfo-Reduce-line-length-and-add-missing-comme.patch
    * 0028-getnameinfo-Avoid-calling-strnlen-on-uninitialized-b.patch
    * 0029-getnameinfo-Return-EAI_OVERFLOW-in-more-cases-BZ-197.patch
    * 0030-hesiod-Remove-RCS-keywords.patch
    * 0031-hesiod-Always-use-thread-local-resolver-state-BZ-195.patch
    * 0032-hesiod-Avoid-heap-overflow-in-get_txt_records-BZ-200.patch
    * 0033-malloc-Remove-NO_THREADS.patch
    * 0034-Fix-malloc-threaded-tests-link-on-non-Linux.patch
    * 0035-malloc-Run-fork-handler-as-late-as-possible-BZ-19431.patch
    * 0036-malloc-Remove-malloc-hooks-from-fork-handler.patch
    * 0037-malloc-Add-missing-internal_function-attributes-on-f.patch
    * 0038-nss_dns-Fix-assertion-failure-in-_nss_dns_getcanonna.patch
    * 0039-nss_dns-Validate-RDATA-length-against-packet-length-.patch
    * 0040-resolv-nss_dns-Remove-remaining-syslog-logging-BZ-19.patch
    * 0041-nss_dns-Check-address-length-before-creating-addrinf.patch
    * 0042-nss_dns-Skip-over-non-PTR-records-in-the-netent-code.patch
    * 0043-resolv-Always-set-resplen2-out-parameter-in-send_vc-.patch
    * 0044-tst-audit4-tst-audit10-Compile-AVX-AVX-512-code-sepa.patch
    * 0045-Fix-tst-audit10-build-when-mavx512f-is-not-supported.patch
    * 0046-tst-audit10-Fix-compilation-on-compilers-without-bit.patch
    * 0047-strfmon_l-Use-specified-locale-for-number-formatting.patch
    * 0048-glob-Simplify-the-interface-for-the-GLOB_ALTDIRFUNC-.patch
    * 0049-CVE-2016-1234-glob-Do-not-copy-d_name-field-of-struc.patch
    * 0050-ldconfig-Do-not-remove-stale-symbolic-links-with-X-B.patch
    * 0051-Report-dlsym-dlvsym-lookup-errors-using-dlerror-BZ-1.patch
    * 0052-Fix-tst-dlsym-error-build.patch
    * 0053-Remove-trailing-newline-from-date_fmt-in-Serbian-loc.patch
    * 0054-Revert-Report-dlsym-dlvsym-lookup-errors-using-dlerr.patch
    * 0055-CVE-2016-3706-getaddrinfo-stack-overflow-in-hostent-.patch
    * 0056-Fix-strfmon_l-Use-specified-locale-for-number-format.patch
    * clntudp-call-alloca.patch
    * glibc-memset-nontemporal.diff
    * nis-initgroups-status.patch
    * nscd-gc-crash.patch
    * robust-mutex-deadlock.patch
    * strncat-avoid-array-bounds-warning.patch


author: schwab@suse.de
changelog:
  - glibc-2.3.3-nscd-db-path.diff: Move persistent nscd databases to
    /var/lib/nscd
  - glibc-2.3.90-langpackdir.diff: simplify


author: schwab@suse.de
changelog:
  - Update to glibc 2.25
    * The feature test macro __STDC_WANT_LIB_EXT2__, from ISO/IEC TR
      24731-2:2010, is supported to enable declarations of functions from that
      TR.
    * The feature test macro __STDC_WANT_IEC_60559_BFP_EXT__, from ISO/IEC TS
      18661-1:2014, is supported to enable declarations of functions and macros
      from that TS.
    * The feature test macro __STDC_WANT_IEC_60559_FUNCS_EXT__, from ISO/IEC TS
      18661-4:2015, is supported to enable declarations of functions and macros
      from that TS.
    * The nonstandard feature selection macros _REENTRANT and _THREAD_SAFE are
      now treated as compatibility synonyms for _POSIX_C_SOURCE=199506L.
    * The inclusion of <sys/sysmacros.h> by <sys/types.h> is deprecated.
    * New <fenv.h> features from TS 18661-1:2014 are added to libm: the
      fesetexcept, fetestexceptflag, fegetmode and fesetmode functions, the
      femode_t type and the FE_DFL_MODE and FE_SNANS_ALWAYS_SIGNAL macros.
    * Integer width macros from TS 18661-1:2014 are added to <limits.h>:
      CHAR_WIDTH, SCHAR_WIDTH, UCHAR_WIDTH, SHRT_WIDTH, USHRT_WIDTH, INT_WIDTH,
      UINT_WIDTH, LONG_WIDTH, ULONG_WIDTH, LLONG_WIDTH, ULLONG_WIDTH; and to
      <stdint.h>: INT8_WIDTH, UINT8_WIDTH, INT16_WIDTH, UINT16_WIDTH,
      INT32_WIDTH, UINT32_WIDTH, INT64_WIDTH, UINT64_WIDTH, INT_LEAST8_WIDTH,
      UINT_LEAST8_WIDTH, INT_LEAST16_WIDTH, UINT_LEAST16_WIDTH,
      INT_LEAST32_WIDTH, UINT_LEAST32_WIDTH, INT_LEAST64_WIDTH,
      UINT_LEAST64_WIDTH, INT_FAST8_WIDTH, UINT_FAST8_WIDTH, INT_FAST16_WIDTH,
      UINT_FAST16_WIDTH, INT_FAST32_WIDTH, UINT_FAST32_WIDTH, INT_FAST64_WIDTH,
      UINT_FAST64_WIDTH, INTPTR_WIDTH, UINTPTR_WIDTH, INTMAX_WIDTH,
      UINTMAX_WIDTH, PTRDIFF_WIDTH, SIG_ATOMIC_WIDTH, SIZE_WIDTH, WCHAR_WIDTH,
      WINT_WIDTH.
    * New <math.h> features are added from TS 18661-1:2014:
    - Signaling NaN macros: SNANF, SNAN, SNANL.
    - Nearest integer functions: roundeven, roundevenf, roundevenl, fromfp,
      fromfpf, fromfpl, ufromfp, ufromfpf, ufromfpl, fromfpx, fromfpxf,
      fromfpxl, ufromfpx, ufromfpxf, ufromfpxl.
    - llogb functions: the llogb, llogbf and llogbl functions, and the
      FP_LLOGB0 and FP_LLOGBNAN macros.
    - Max-min magnitude functions: fmaxmag, fmaxmagf, fmaxmagl, fminmag,
      fminmagf, fminmagl.
    - Comparison macros: iseqsig.
    - Classification macros: iscanonical, issubnormal, iszero.
    - Total order functions: totalorder, totalorderf, totalorderl,
      totalordermag, totalordermagf, totalordermagl.
    - Canonicalize functions: canonicalize, canonicalizef, canonicalizel.
    - NaN functions: getpayload, getpayloadf, getpayloadl, setpayload,
      setpayloadf, setpayloadl, setpayloadsig, setpayloadsigf, setpayloadsigl.
    * The functions strfromd, strfromf, and strfroml, from ISO/IEC TS 18661-1:2014,
      are added to libc.
    * Most of glibc can now be built with the stack smashing protector enabled.
    * The function explicit_bzero, from OpenBSD, has been added to libc.
    * On ColdFire, MicroBlaze, Nios II and SH3, the float_t type is now defined
      to float instead of double.
    * On x86_64, when compiling with -mfpmath=387 or -mfpmath=sse+387, the
      float_t and double_t types are now defined to long double instead of float
      and double.
    * The getentropy and getrandom functions, and the <sys/random.h> header file
      have been added.
    * The buffer size for byte-oriented stdio streams is now limited to 8192
      bytes by default.
    * The <sys/quota.h> header now includes the <linux/quota.h> header.
    * The malloc_get_state and malloc_set_state functions have been removed.
    * The ?ip6-dotint? and ?no-ip6-dotint? resolver options, and the
      corresponding RES_NOIP6DOTINT flag from <resolv.h> have been removed.
    * The "ip6-bytestring" resolver option and the corresponding RES_USEBSTRING
      flag from <resolv.h> have been removed.
    * The flags RES_AAONLY, RES_PRIMARY, RES_NOCHECKNAME, RES_KEEPTSIG,
      RES_BLAST defined in the <resolv.h> header file have been deprecated.
    * The "inet6" option in /etc/resolv.conf and the RES_USE_INET6 flag for
      _res.flags are deprecated.
    * DNSSEC-related declarations and definitions have been removed from the
      <arpa/nameser.h> header file, and libresolv will no longer attempt to
      decode the data part of DNSSEC record types.
    * The resource record type classification macros ns_t_qt_p, ns_t_mrr_p,
      ns_t_rr_p, ns_t_udp_p, ns_t_xfr_p have been removed from the
      <arpa/nameser.h> header file because the distinction between RR types and
      meta-RR types is not officially standardized, subject to revision, and
      thus not suitable for encoding in a macro.
    * The types res_sendhookact, res_send_qhook, re_send_rhook, and the qhook
      and rhook members of the res_state type in <resolv.h> have been removed.
    * For multi-arch support it is recommended to use a GCC which has
      been built with support for GNU indirect functions.
    * GDB pretty printers have been added for mutex and condition variable
      structures in POSIX Threads.
    * Tunables feature added to allow tweaking of the runtime for an application
      program.
    * A new version of condition variables functions have been implemented in
      the NPTL implementation of POSIX Threads to provide stronger ordering
      guarantees.
    * A new version of pthread_rwlock functions have been implemented to use a more
      scalable algorithm primarily through not using a critical section anymore to
      make state changes.
    * On ARM EABI (32-bit), generating a backtrace for execution contexts which
      have been created with makecontext could fail to terminate due to a
      missing .cantunwind annotation.  (CVE-2016-6323)
    * The DNS stub resolver functions would crash due to a NULL pointer
      dereference when processing a query with a valid DNS question type which
      was used internally in the implementation. (CVE-2015-5180)
  - Enable stack protector if part of %optflags
  - startcontext-cantunwind.patch: Removed
  - cpuid-assertion.patch: Removed


author: schwab@suse.de
changelog:
  - i686-memchr-sse.patch: Fix i686 memchr overflow calculation
    (bsc#1031021, BZ #21182)
  - sunrpc-use-after-free.patch: Avoid use-after-free read access in
    clntudp_call (BZ #21115)
  - Build testsuite with gdb and python-pexpect to enable more tests


author: schwab@suse.de
changelog:
  - Use multibuild feature
  - Remove obsolete check-build.sh
  - glibc.rpmlintrc: remove obsolete entries
  - Use %tmpfiles_create in nscd postin


author: schwab@suse.de
changelog:
  - ld-hwcap-mask-suid.patch: Ignore and remove LD_HWCAP_MASK for AT_SECURE
    programs (BZ #21209)
  - ld-library-path-suid.patch: Completely ignore LD_LIBRARY_PATH for
    AT_SECURE=1 programs (CVE-2017-1000366, bsc#1039357, BZ #21624)


author: schwab@suse.de
changelog:
  - s390-elision-enable-envvar.patch: enable TLE only if
    GLIBC_ELISION_ENABLE=yes is defined (fate#322271)


author: schwab@suse.de
changelog:
  - Update to glibc 2.26
    * A per-thread cache has been added to malloc
    * Unicode 10.0.0 Support
    * Improvements to the DNS stub resolver
    * New function reallocarray, which resizes an allocated block (like
      realloc) to the product of two sizes, with a guaranteed clean failure
      upon integer overflow in the multiplication
    * New wrappers for the Linux-specific system calls preadv2 and pwritev2
    * posix_spawnattr_setflags now supports the flag POSIX_SPAWN_SETSID, to
      create a new session ID for the spawned process
    * errno.h is now safe to use from C-preprocessed assembly language on all
      supported operating systems
    * On ia64, powerpc64le, x86-32, and x86-64, the math library now implements
      128-bit floating point as defined by ISO/IEC/IEEE 60559:2011 (IEEE
      754-2008) and ISO/IEC TS 18661-3:2015
    * The synchronization that pthread_spin_unlock performs has been changed to
      now be equivalent to a C11 atomic store with release memory order to the
      spin lock's memory location
    * The DNS stub resolver no longer performs EDNS fallback
    * res_mkquery and res_nmkquery no longer support the IQUERY opcode
    * The _res_opcodes variable has been removed from libresolv
    * <string.h> no longer includes inline versions of any string functions,
      as this kind of optimization is better done by the compiler
    * The nonstandard header <xlocale.h> has been removed
    * The obsolete header <sys/ultrasound.h> has been removed
    * The obsolete signal constant SIGUNUSED is no longer defined by <signal.h>
    * The obsolete function cfree has been removed
    * The stack_t type no longer has the name struct sigaltstack
    * The ucontext_t type no longer has the name struct ucontext
    * On S/390 GNU/Linux, the constants defined by <sys/ptrace.h> have been
      synced with the kernel
    * Linux kernel 3.2 or later is required at runtime, on all architectures
      supported by that kernel
    * The DNS stub resolver limits the advertised UDP buffer size to 1200 bytes,
      to avoid fragmentation-based spoofing attacks (CVE-2017-12132)
    * LD_LIBRARY_PATH is now ignored in binaries running in privileged
      AT_SECURE mode to guard against local privilege escalation attacks
      (CVE-2017-1000366)
    * Avoid printing a backtrace from the __stack_chk_fail function since it
      is called on a corrupt stack and a backtrace is unreliable on a
      corrupt stack (CVE-2010-3192)
    * A use-after-free vulnerability in clntudp_call in the Sun RPC system
      has been fixed (CVE-2017-12133)
    * fate#322258, fate#321513, fate#322453
  - fts-symbol-redirect.patch, glibc-resolv-reload.diff, glibc-2.2-sunrpc.diff,
    i686-memchr-sse.patch, ld-hwcap-mask-suid.patch, ld-library-path-suid.patch,
    sunrpc-use-after-free.patch, test-math-vector-sincos-aliasing.patch,
    tunables-bigendian.patch: Removed


author: schwab@suse.de
changelog:
  - resolv-context-leak.patch: Fix leaks of resolver contexts
  - dl-runtime-resolve-opt-avx512f.patch: Use _dl_runtime_resolve_opt only
    with AVX512F (BZ #21871)
  - libpthread-compat-wrappers.patch: Don't use IFUNC resolver for longjmp
    or system in libpthread (BZ #21041)


author: schwab@suse.de
changelog:
  - Disable obsolete libnsl and NIS support
  - remove-nss-nis-compat.patch: remove nis and compat from default NSS
    configs
  - nsswitch.conf: Likewise


author: schwab@suse.de
changelog:
  - Remove rpcsvc/yppasswd.* from glibc-devel
  - ld-so-hwcap-x86-64.patch: add x86_64 to hwcap (bsc#1056606, BZ #22093)


author: schwab@suse.de
changelog:
  - assert-pedantic.patch: Suppress pedantic warning caused by statement
    expression (BZ #21242, BZ #21972)
  - math-c++-compat.patch: Add more C++ compatibility (BZ #22235)
  - getaddrinfo-errno.patch: Fix errno and h_errno handling in getaddrinfo
    (BZ #21915, BZ #21922)
  - resolv-conf-oom.patch: Fix memory handling in OOM situation during
    resolv.conf parsing (BZ #22095, BZ #22096)
  - dynarray-allocation.patch: Fix initial size of dynarray allocation and
    set errno on overflow error
  - nearbyint-inexact.patch: Avoid spurious inexact in nearbyint (BZ #22225)


author: schwab@suse.de
changelog:
  - nss-compat.patch: Move nss_compat from nis to nss subdir and install it
    unconditionally
  - nsswitch.conf: switch back to compat for passwd, group, shadow


author: schwab@suse.de
changelog:
  - Drop glibc-obsolete
  - glibc-2.3.90-noversion.diff: remove
  - reinitialize-dl_load_write_lock.patch: remove


author: schwab@suse.de
changelog:
  - math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
  - malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
    [#22111])
  - falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
    for Qualcomm Falkor
  - aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
  - nss-files-large-buffers.patch: Avoid large buffers with many host
    addresses (BZ #22078)
  - sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
    [#22321])
  - glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
    (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
    bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
  - dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
    _dl_runtime_resolve (BZ #21265)


author: schwab@suse.de
changelog:
  - tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
  - powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
  - malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
    tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)


author: schwab@suse.de
changelog:
  - dl-init-paths-overflow.patch: Count components of the expanded path in
    _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
    [#22607], BZ #22627)
  - fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
    string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)


author: schwab@suse.de
changelog:
  - getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
    absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)


author: schwab@suse.de
changelog:
  - memalign-overflow.patch: Fix integer overflows in internal memalign and
    malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
    BZ #22774)


author: matz@suse.de
changelog:
  - Add systemtap-headers to BuildRequires.
  - Add --enable-systemtap to configure arguments. (fate#324969,
    bsc#1073636)


author: schwab@suse.de
changelog:
  - stack-guard-size-accounting.patch: Fix stack guard size accounting
    (bsc#1074208, BZ #22637)
  - libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
    pthread_cancel (bsc#1074208, BZ #22636)


author: schwab@suse.de
changelog:
  - res-send-enomem.patch: Fix crash in resolver on memory allocation
    failure (bsc#1086690, BZ #23005)


author: matz@suse.com
changelog:
  - Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
    buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
    Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)


author: schwab@suse.de
changelog:
  - i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
    2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
  - realpath-ssize-max-overflow.patch: Fix overflow in path length
    computation (CVE-2018-11236, bsc#1094161, BZ #22786)
  - glibc-fix-avx512-mempcpy.patch: replace with upstream version


author: schwab@suse.de
changelog:
  - localtime-2039.patch: Fix year 2039 bug for localtime with 64-bit time_t
    (bsc#1102526, BZ #22639)


author: schwab@suse.de
changelog:
  - math-remove-slow-path.patch: Remove slow paths from math routines
    (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882)


author: schwab@suse.de
changelog:
  - Add glibc-locale-base subpackage containing only C, C.UTF-8 and
    en_US.UTF-8 locales (fate#326551)


author: schwab@suse.de
changelog:
  - x86-haswell-string-flags.patch: Fix Haswell CPU string flags
    (bsc#1114984, BZ #23709)
  - pthread-cond-broadcast-waiters-after-spinning.patch: Fix
    waiters-after-spinning case (bsc#1114993, BZ #23538)


author: schwab@suse.de
changelog:
  - mman-map-sync.patch: Add MAP_SYNC from Linux 4.15 (bsc#1126590)
  - mman-linux-map-shared-validate.patch: Add MAP_SHARED_VALIDATE from Linux
    4.15 (bsc#1126590)
  - nptl-setxid-error.patch: nptl: Preserve error in setxid thread broadcast
    in coredumps (bsc#1063675, BZ #22153)


author: schwab@suse.de
changelog:
  - pthread-mutex-trylock-barrier.patch: pthread_mutex_trylock does not use
    the correct order of instructions while maintaining the robust mutex
    list due to missing compiler barriers (bsc#1130045, BZ #24180)
  - getaddrinfo-parse-ipv4-address.patch: getaddrinfo: Fully parse IPv4
    address strings (CVE-2016-10739, bsc#1122729, BZ #20018)


author: schwab@suse.de
changelog:
  - japanese-era-name-may-2019.patch: ja_JP locale: Add entry for the new
    Japanese era (bsc#1100396, BZ #22964)


author: schwab@suse.de
changelog:
  - force-elision-race.patch: Fix race in pthread_mutex_lock while promoting
    to PTHREAD_MUTEX_ELISION_NP (bsc#1131330, BZ #23275)


author: schwab@suse.de
changelog:
  - crt-nocompress-debug-sections.patch: Don't compress debug sections in
    crt*.o files (bsc#1123710)


author: schwab@suse.de
changelog:
  - regex-parse-reg-exp.patch: ERE '0|()0|\1|0' causes regexec undefined
    behavior (CVE-2009-5155, bsc#1127223, BZ #18986)
  - regex-read-overrun.patch: regex: fix read overrun (CVE-2019-9169,
    bsc#1127308, BZ #24114)


author: schwab@suse.de
changelog:
  - GNU1815 - Hardware support in toolchain (bsc#1151582)
    0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch
    0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch
    0003-S390-Unify-31-64bit-memcpy.patch
    0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch
    0005-S390-Remove-s390-specific-implementation-of-bcopy.patch
    0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch
    0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch
    0008-S390-Add-z13-memmove-ifunc-variant.patch
    0009-S390-Add-z13-strstr-ifunc-variant.patch
    0010-S390-Add-z13-memmem-ifunc-variant.patch
    0011-S390-Cleanup-ifunc-resolve.h.patch
    0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch
    0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch
    0014-S390-Add-configure-check-to-detect-support-for-arch1.patch
    0015-S390-Add-arch13-memmove-ifunc-variant.patch
    0016-S390-Add-arch13-strstr-ifunc-variant.patch
    0017-S390-Add-arch13-memmem-ifunc-variant.patch


author: schwab@suse.de
changelog:
  - prefer-map-32bit-exec.patch: rtld: Check __libc_enable_secure before
    honoring LD_PREFER_MAP_32BIT_EXEC (CVE-2019-19126, bsc#1157292, BZ
    [#25204])


author: schwab@suse.de
changelog:
  - s390-strstr-page-boundary.patch: S390: Fix handling of needles crossing
    a page in strstr z15 ifunc-variant (bsc#1157893, BZ #25226)


author: schwab@suse.de
changelog:
  - ppc-tle-htm-nosc.patch: powerpc: Fix syscalls during early process
    initialization (SLE-8348, BZ #22685)


author: schwab@suse.de
changelog:
  - posix-Add-internal-symbols-for-posix_spawn-interface.patch,
    glibc-2.29-posix-Use-posix_spawn-on-popen.patch: Use posix_spawn on
    popen (bsc#1149332, BZ #22834)


author: schwab@suse.de
changelog:
  - backtrace-powerpc.patch: Fix array overflow in backtrace on PowerPC
    (CVE-2020-1751, bsc#1158996, BZ #25423)


author: schwab@suse.de
changelog:
  - pthread-rwlock-pwn.patch: Fix rwlock stall with
    PREFER_WRITER_NONRECURSIVE_NP (bsc#1164505, BZ #23861)
  - manual-memory-protection.patch: manual: Document mprotect and introduce
    section on memory protection (bsc#1163184)


author: schwab@suse.de
changelog:
  - ldbl-96-rem-pio2l.patch: Avoid ldbl-96 stack corruption from range
    reduction of pseudo-zero (CVE-2020-10029, bsc#1165784, BZ #25487)


author: schwab@suse.de
changelog:
  - dl-sort-maps.patch, dlopen-filter-object.patch: Allow dlopen of filter
    object to work (bsc#1166106, BZ #16272)


author: schwab@suse.de
changelog:
  - glob-use-after-free.patch: Fix use-after-free in glob when expanding
    ~user (CVE-2020-1752, bsc#1167631, BZ #25414)


author: schwab@suse.de
changelog:
  - nptl-setxid-race.patch: nptl: wait for pending setxid request also in
    detached thread (bsc#1162930, BZ #25942)


author: schwab@suse.de
changelog:
  - nscd-senfile.patch: Fix concurrent changes on nscd aware files
    (bsc#1171878, BZ #23178)
  - nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
    BZ #26130)
  - syslog-locking.patch: Correct locking and cancellation cleanup in syslog
    functions (bsc#1172085, BZ #26100)


author: schwab@suse.de
changelog:
  - Update to glibc 2.31
  - glibc-2.14-crypt.diff, crypt_blowfish-const.patch,
    crypt_blowfish-1.2-sha.diff, crypt_blowfish-gensalt.patch,
    crypt_blowfish-1.2-hack_around_arm.diff, glibc-nodate.patch,
    powerpc-elision-enable-envvar.patch, s390-elision-enable-envvar.patch,
    crt-nocompress-debug-sections.patch, resolv-context-leak.patch,
    dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch,
    math-c++-compat.patch, remove-nss-nis-compat.patch,
    eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch,
    assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch,
    dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch,
    nscd-libnsl.patch, malloc-tcache-leak.patch,
    falkor-memcpy-memmove.patch, aarch64-cpu-features.patch,
    nss-files-large-buffers.patch, sysconf-uio-maxiov.patch,
    glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch,
    spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch,
    tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch,
    malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch,
    fillin-rpath-empty-tokens.patch, getcwd-absolute.patch,
    memalign-overflow.patch, stack-guard-size-accounting.patch,
    libgcc-rtld-now.patch, res-send-enomem.patch,
    glibc-fix-avx512-mempcpy.patch, i386-memmove-sse2-unaligned.patch,
    realpath-ssize-max-overflow.patch, localtime-2039.patch,
    math-remove-slow-path.patch, aarch64-hwcap-atomics.patch,
    glibc-fix-aarch64-build.diff, absolute-symbols.patch,
    x86-haswell-string-flags.patch,
    pthread-cond-broadcast-waiters-after-spinning.patch,
    mman-map-sync.patch, mman-linux-map-shared-validate.patch,
    nptl-setxid-error.patch, pthread-mutex-trylock-barrier.patch,
    getaddrinfo-parse-ipv4-address.patch, japanese-era-name-may-2019.patch,
    force-elision-race.patch, regex-read-overrun.patch,
    regex-parse-reg-exp.patch,
    0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch,
    0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch,
    0003-S390-Unify-31-64bit-memcpy.patch,
    0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch,
    0005-S390-Remove-s390-specific-implementation-of-bcopy.patch,
    0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch,
    0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch,
    0008-S390-Add-z13-memmove-ifunc-variant.patch,
    0009-S390-Add-z13-strstr-ifunc-variant.patch,
    0010-S390-Add-z13-memmem-ifunc-variant.patch,
    0011-S390-Cleanup-ifunc-resolve.h.patch,
    0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch,
    0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch,
    0014-S390-Add-configure-check-to-detect-support-for-arch1.patch,
    0015-S390-Add-arch13-memmove-ifunc-variant.patch,
    0016-S390-Add-arch13-strstr-ifunc-variant.patch,
    0017-S390-Add-arch13-memmem-ifunc-variant.patch,
    prefer-map-32bit-exec.patch, s390-strstr-page-boundary.patch,
    ppc-tle-htm-nosc.patch,
    posix-Add-internal-symbols-for-posix_spawn-interface.patch,
    glibc-2.29-posix-Use-posix_spawn-on-popen.patch,
    backtrace-powerpc.patch, pthread-rwlock-pwn.patch,
    manual-memory-protection.patch, ldbl-96-rem-pio2l.patch,
    dl-sort-maps.patch, dlopen-filter-object.patch,
    glob-use-after-free.patch, nptl-setxid-race.patch, nscd-senfile.patch,
    ldd-system-interp.patch, abort-no-flush.patch,
    fnmatch-collating-elements.patch, nss-files-long-lines-2.patch,
    iconv-reset-input-buffer.patch, nscd-prune.patch, syslog-locking.patch:
    Removed.
  - long-double-alias.patch, glibc-nsswitch-usr.diff, euc-kr-overrun.patch,
    riscv-syscall-clobber.patch, nscd-gc-cycle.patch: Added.


author: schwab@suse.de
changelog:
  - power10-support.patch: Add support for POWER10 (jsc#SLE-13520)
  - iconv-option-parsing.patch: Rewrite iconv option parsing
    (CVE-2016-10228, bsc#1027496, BZ #19519)


author: schwab@suse.de
changelog:
  - aarch64-getauxval.patch: aarch64: Accept PLT calls to __getauxval within
    libc.so (bsc#1167939)
  - iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
    IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
  - iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
    bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
  - printf-long-double-non-normal.patch: x86: Harden printf against
    non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
  - get-nprocs-cpu-online-parsing.patch: Fix parsing of
    /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)


author: schwab@suse.de
changelog:
  - sysvipc-sem-stat-any.patch: sysvipc: Fix SEM_STAT_ANY kernel argument
    pass (bsc#1180557, BZ #26637)


author: schwab@suse.de
changelog:
  - gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
    ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)


author: schwab@suse.de
changelog:
  - nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache
    (CVE-2021-27645, bsc#1182733, BZ #27462)


author: rguenther@suse.com
changelog:
  - Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the
    AVX2 accelerated string routines which cause HTM transaction
    aborts.  Instead use EVEX or SSE.  (bsc#1181403)


author: schwab@suse.de
changelog:
  - s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
    support in memmove ifunc-selector (bsc#1184035, BZ #27511)


author: schwab@suse.de
changelog:
  - wordexp-param-overflow.patch: wordexp: handle overflow in positional
    parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)


author: schwab@suse.de
changelog:
  - mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
    (CVE-2021-33574, bsc#1186489, BZ #27896)


author: schwab@suse.de
changelog:
  - 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
    0002-S390-Optimize-__memcpy_z196.patch,
    0003-S390-Optimize-__memset_z196.patch,
    0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
    0005-S390-Add-new-hwcap-values.patch,
    0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
    GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)


author: giuliano.belinassi@suse.com
changelog:
  - Add support for livepatches (jsc#SLE-20049).
  - Enable livepatching on x86_64.
  - Generate ipa-clones tarball artifact when livepatching is enabled.


author: schwab@suse.de
changelog:
  - clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
    for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
  - svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
    (CVE-2022-23218, bsc#1194770, BZ #28768)


author: schwab@suse.de
changelog:
  - 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
    0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
    0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
    0004-powerpc64le-add-optimized-strlen-for-P9.patch,
    0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
    0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
    0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
    0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
    0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
    0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
    0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
    0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
    0013-powerpc64le-Optimize-memset-for-POWER10.patch,
    0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
    0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
    improvements (bsc#1194785, jsc#SLE-18195)


author: schwab@suse.de
changelog:
  - getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
    (CVE-2021-3999, bsc#1194640, BZ #28769)


author: schwab@suse.de
changelog:
  - selinux-deprecated.patch: Disable warnings due to deprecated libselinux
    symbols used by nss and nscd (bsc#1197718)
  - systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
    (bsc#1197718, BZ #28771)


author: schwab@suse.de
changelog:
  - strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
    __strncpy_power9 (bsc#1200334, BZ #29197)


author: schwab@suse.de
changelog:
  - static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
    optimizations (bsc#1200855, BZ #25051)


author: schwab@suse.de
changelog:
  - disable-check-consistency.patch: i386: Disable check_consistency for GCC
    5 and above (bsc#1201640, BZ #25788)


author: schwab@suse.de
changelog:
  - x86-shared-non-temporal-threshold.patch: Reversing calculation of
    __x86_shared_non_temporal_threshold (bsc#1201942)


author: schwab@suse.de
changelog:
  - dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
    (bsc#1207571, BZ #16272)
  - powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
    with recent GCC


author: schwab@suse.de
changelog:
  - strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
    check (bsc#1208358, BZ #25933)


author: schwab@suse.de
changelog:
  - gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
    (CVE-2023-0687, bsc#1207975, BZ #29444)


author: schwab@suse.de
changelog:
  - getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
    is unset (bsc#1209229, BZ #30235)


author: giuliano.belinassi@suse.com
changelog:
  - ulp-prologue-into-asm-functions.patch: Add support for livepatches
    in ASM written functions (bsc#1211726)


author: schwab@suse.de
changelog:
  - resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
    (bsc#1211828, BZ #30527)


author: schwab@suse.de
changelog:
  - remove-excessive-p-align-check.patch: elf: Remove excessive p_align
    check on PT_LOAD segments (bsc#1211829, BZ #28688)
  - segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
    BZ #28676)
  - ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
    first segment (BZ #30452)


author: schwab@suse.de
changelog:
  - nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
    in files database (bsc#1212819, BZ #25457)


author: schwab@suse.de
changelog:
  - nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
    invalidation if epoll is used (bsc#1212910, BZ #29415)


author: schwab@suse.de
changelog:
  - gai-merge-continue-actions.patch: Simplify allocations and fix merge and
    continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)


author: schwab@suse.de
changelog:
  - dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
    page size (bsc#1215891, BZ #28676)


author: schwab@suse.de
changelog:
  - getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
    EAI_MEMORY (bsc#1217589, BZ #31163)


author: schwab@suse.de
changelog:
  - iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
    writes when writing escape sequence (CVE-2024-2961, bsc#1222992)


author: giuliano.belinassi@suse.com
changelog:
  - glibc-CVE-2024-33599-nscd-Stack-based-buffer-overflow-in-n.patch:
    nscd: Stack-based buffer overflow in netgroup cache
    (CVE-2024-33599, bsc#1223423, BZ #31677)
  - glibc-CVE-2024-33600-nscd-Avoid-null-pointer-crashes-after.patch:
    nscd: Avoid null pointer crashes after notfound response
    (CVE-2024-33600, bsc#1223424, BZ #31678)
  - glibc-CVE-2024-33600-nscd-Do-not-send-missing-not-found-re.patch:
    nscd: Do not send missing not-found response in addgetnetgrentX
    (CVE-2024-33600, bsc#1223424, BZ #31678)
  - glibc-CVE-2024-33601-CVE-2024-33602-nscd-netgroup-Use-two.patch:
    netgroup: Use two buffers in addgetnetgrentX (CVE-2024-33601,
    CVE-2024-33602, bsc#1223425, BZ #31680)


author: giuliano.belinassi@suse.com
changelog:
  - ulp-prologue-into-asm-functions.patch: Avoid creating ULP prologue
    for _start routine (bsc#1221940)


author: schwab@suse.de
changelog:
  - nscd-netgroup-cache-timeout.patch: Use time_t for return type of
    addgetnetgrentX (CVE-2024-33602, bsc#1223425)


author: tiwai@suse.de
changelog:
  - Fix a bogus kernel version check (boo#927831):
    iputils-remove-bogus-check-required-for-2.4.9-kernels.patch


author: p.drouand@gmail.com
changelog:
  - Update to version s20150815
    * use syntax compatible with busybox date in Makefile
    * Makefile: use #define as in previous code changes
    * ping: status() now returns received/transmitted instead of trans/recv
    * ping: don't mess with internals of struct msghdr
    * tracepath,doc: fix corrupted tag
    * made ping functions protocol independent
    * Allow ping to use IPv6 addresses
    * if IPv4 resolving fails fallback to ping6
    * ping: in usage print the 'ping -6' options as well
    * ping: allow option -4 which forces IPv4
    * combine sock and errno into a single structure
    * This patch allows running ping and ping6 without root privileges on
    * use better names for socket variables
    * travis.yml: install nettle-dev
    * Allow using nettle instead of libgcrypt for MD5
    * avoid compiler warning caused by snapshot.h
    * make `getaddrinfo()` and `getnameinfo()` usage consistent
    * enable IDN by default
    * ping: perform dual-stack ping by default
    * remove IPV4_TARGETS and IPV6_TARGETS
    * ping: remove obsolete preprocessor directives
    * ping: avoid name clashes between IPv4 and IPv6 code
    * ping: merge all ping header files into a single one
    * ping: merge `ping6` command into `ping`
    * ping: refactor ping options
    * ping: refactor ping socket code
    * ping: merge IPv4 and IPv6 `pr_addr()`
    * Use svg instead of png to get better image quality
    * iputils ping/ping6: Add a function to check if a packet is ours
    * ping: Add <linux/types.h> to fix compilation error.
    * ping6: Use GNUTLS API directly for MD5. (v2)
    * ping6: Use libgcrypt instead of gnutls for MD5.
    * ninfod: Regenerate configure by autoconf-2.69.
    * ninfod: libgcrypt support.
    * spec: Configure before building ninfod.
    * spec: Fix date in %changelog.
    * make,spec: Add rpm target.
    * ping,ping6 doc: More description on CAP_NET_RAW usage.
  - Update patches
    * iputils-s20101006-ping-interrupt.diff > iputils-ping-interrupt.diff
    * iputils-s20101006-sec-ping-unblock.diff > iputils-sec-ping-unblock.diff
    * iputils-remove-bogus-check-required-for-2.4.9-kernels.patch
  - Update home project page and download Url
  - Remove obsolete %clean section
  - Remove UsrMerge process; it has been done for more than two
    openSUSE releases now


author: mchandras@suse.de
changelog:
  - Update to version s20160308 (Changes taken from the RELNOTES file)
    * use syntax compatible with busybox date in Makefile
    * 'admin prohibited' should print !X not !S.
    * Makefile: use #define as in previous code changes
    * doc/Makefile: require bash, because we use pushd and popd
    * doc: don't timestamp manpages by default
    * ping: status() now returns received/transmitted instead of trans/recv
    * ping: don't mess with internals of struct msghdr
    * ping: ICMP error replies while errno < 0 is a hard error
    * ping: always use POSIX locale when parsing -i
    * ping: link against libm
    * made ping functions protocol independent
    * ping: perform dual-stack ping by default
    * ping: remove obsolete preprocessor directives
    * ping: avoid name clashes between IPv4 and IPv6 code
    * ping: merge all ping header files into a single one
    * ping: merge `ping6` command into `ping`
    * ping: refactor ping options
    * ping: refactor ping socket code
    * ping: merge IPv4 and IPv6 `pr_addr()`
    * ping: fix defines and libs in Makefile
    * ping: handle single protocol systems
    * iputils ping/ping6: Add a function to check if a packet is ours
    * ping: Add <linux/types.h> to fix compilation error.
    * ping6: Use GNUTLS API directly for MD5. (v2)
    * ping6: Use libgcrypt instead of gnutls for MD5.
    * Allow ping to use IPv6 addresses
    * ping,ping6 doc: More description on CAP_NET_RAW usage.
    * if IPv4 resolving fails fallback to ping6
    * ping: in usage print the 'ping -6' options as well
    * ping: allow option -4 which forces IPv4
    * combine sock and errno into a single structure
    * This patch allows running ping and ping6 without root privileges on
    * use better names for socket variables
    * tracepath,doc: fix corrupted tag
    * doc: ping: add missing options and remove ping6
    * ninfod: remove unused variables
    * ninfod: Regenerate configure by autoconf-2.69.
    * ninfod: libgcrypt support.
    * Fix building with musl
    * travis.yml: install nettle-dev
    * Allow using nettle instead of libgcrypt for MD5
    * avoid compiler warning caused by snapshot.h
    * make `getaddrinfo()` and `getnameinfo()` usage consistent
    * enable IDN by default
    * remove IPV4_TARGETS and IPV6_TARGETS
    * Use svg instead of png to get better image quality
    * spec: Configure before building ninfod.
    * spec: Fix date in %changelog.
    * make,spec: Add rpm target.
  - Refreshed patches
    * iputils-ping-interrupt.diff
    * iputils-sec-ping-unblock.diff
  - Remove ifenslave.c. It has been removed in the linux kernel commit
    b1098bbe1b24("bonding: remove ifenslave.c from kernel source").
    bonding can be done via iproute (netlink)
  - dropped iputils-ifenslave.diff
  - Append our CFLAGS to the upstream ones instead of overriding them.
  - Cleanup old make command since the upstream Makefile does things right
    it seems.
  - Use Provides: for old /{,s}bin utils to satisfy reverse dependencies.
  - Install utilities to /bin and /sbin until reverse dependencies are
    properly fixed.
  - Do not install tftp and traceroute to avoid conflicts with the tftp and
    traceroute packages. Stick to what iputils used to provide in the past.
  - Remove iputils-traceroute6-stdint.diff patch since we are not building
    the traceroute* utilities.
  - Install tracepath to /usr/bin. (boo#795788)


author: pvorel@suse.cz
changelog:
  - Update to version s20161105 (Changes taken from the RELNOTES file)
    * ping: eliminate deadcode & simplify
    * ping: do not allow oversized packets to root
    * correctly initialize first hop
    * ping: fix ping -6 -I
    * arping,doc: fix documentation of -I
    * ping: fix error message when getting EACCES from connect()
    * renamed INSTALL to INSTALL.md
    * (re)structured INSTALL.md and transformed into markdown; added hint that installation into prefix has to be done with DESTDIR make variable and that there's no prefix support in configure, close #21
    * ping: Silence GCC warnings when building with -fstrict-aliasing
    * tftpd: Drop supplementary groups for root
    * libgcrypt: fix static linking
    * doc: Inserted a missing word
    * tracepath6: avoid redundant family variable
    * tracepath: borrow everything good from tracepath6
    * tracepath: switch to dual-stack operation
    * tracepath: remove now redundant tracepath6
    * docs: fix parallel build of manpages
    * ping: remove assignments of values that are never read
    * docs: remove references to ping6 and traceroute6
    * ping: work with older kernels that don't support ping sockets
    * Revert "ping_common.c: fix message flood when EPERM is encountered in ping"
    * reorder -I option parsing (boo#1057664)
    * ping: also bind the ICMP socket to the specific device
  - tracepath6 is now symlink to tracepath.


author: mpluskal@suse.com
changelog:
  - Reintroduce rarpd as subpackage
  - Explicitly list content in filelist as we have two subpackages
    now


author: pvorel@suse.cz
changelog:
  - iputils: remove man pages of unused binaries: ninfod, pg3, rdisc
    (rdisc is in a separate package)


author: mpluskal@suse.com
changelog:
  - Install rdisc as rdisc, do not use in.rdisc anymore (xinetd which
    was using in.* names is obsolete anyways)


author: nmoreychaisemartin@suse.com
changelog:
  - Backport iputils-ping-fix-pmtu-for-ipv6.patch from upstream
    to fix PMTU discovery in ping6. (bsc#1072460)


author: pvorel@suse.cz
changelog:
  - Update to version s20180629
    * ping: Fix signed overflow/conversion warning
    * ping: Fix ping name encoded using ACE on C locale
    * fix checksum always success in IPv4 ping.
    * ping6: Fix device binding
    * Ping: Correct rounding of timing displays
    * docs: Tiny fixes in README.md
    * doc/ping: Update Interface section
    * doc/ping: Replace deprecated commands in "SEE ALSO" section
    * Revert "correctly initialize first hop"
    * tracepath: Support calling `tracepath` as `tracepath4` or `tracepath6`
    * ping: remove spurious error message
    * tracepath: fix heap-buffer-overflow [asan]
    * arping: do not use libsysfs to read from /sys
    * .travis.yml: corrected variable values in matrix
    * .travis.yml: install libidn2
    * ping: use libidn2 instead of libidn
    * ping: Remove workaround for bug in IP_RECVERR on raw sockets
    * ping6: simplified IDNA usage
    * traceroute6: use getaddrinfo IDNA conversion
    * arping,tracepath: removed unused idna header
    * cleanup: really old code, simplify little bit
    * licenses: fill missing clockdiff.c and ping_common.c license
    * LICENSE: convert BSD4 to BSD3 license
    * doc: ping - document mdev behaviour
    * LICENSE: add information about licenses
    * ping: fix incorrect packet loss calculation
    * doc: convert from converting SGML to XML
    * travis-ci: cleanup and switch to Ubuntu 14.04 build
    * RELNOTES: deprecated in favor of git history & github
    * remove iputils.spec
    * ping: fix conflicting defines
    * ping: flowinfo: fixup checks for flowinfo and also add decimal numbers support
    * ping: parsetos verification is enough, allow decimal values
    * ping: fix typo in error tos error message
    * meson: add experimental meson buildsystem support
    * gitignore: prepare for Meson
    * ping: read from error queue when POLLERR is set
    * ping_common.c: POLLERRR is ignored in events
    * ping: fix pmtu discovery for ipv6
    * traceroute6: Fix traceroute to IPv6 address
    * traceroute6: Fix leaking the idn memory
    * traceroute6: Fix use after free for hostname
    * tracepath,doc: Added -4, -6 Parameter in doc and void usage(void)
    * fix multicast setsockopt calls on big endian
    * arping: exit if network disappears while running
    * ping: prevent possible double free after cap_free()
    * Add strict pattern matching on response when pattern was provided
    * traceroute6: Fix udp packet port specification.
  - Removed patches (taken from upstream, now in tree)
    * iputils-add-license-info.diff
    * iputils-ping-fix-pmtu-for-ipv6.patch
    * iputils-remove-bogus-check-required-for-2.4.9-kernels.patch
  - Rebased patches
    * iputils-ping-interrupt.diff
    * iputils-sec-ping-unblock.diff
  - Add build dependency docbook-xsl-stylesheets (required by man pages)
  - Add tracepath6 man page, updated list of unwanted man enties (ipg, pgset)
  - Removed RELNOTES (upstream removed it)


author: pvorel@suse.cz
changelog:
  - Backport upstream patch fixing tracepath6 (poo#38492)
    e0baf20 tracepath: Fix copying input IPv6 address
    0001-tracepath-Fix-copying-input-IPv6-address.patch


author: pvorel@suse.cz
changelog:
  - Update to version s20190515 (includes changes s20190324)
    * s20190324: 189 commits since s20180629 that include changing build
      system from autotools to meson, added rarpd and rdisc systemd service
      files, many fixes
    * s20190515 bugfix release (6 commits)
  - User visible change: arping and clockdiff are moved from /usr/sbin
    to /usr/bin (respect upstream path)
  - Backport patch 0001-build-sys-doc-Fix-the-dependency-on-xsltproc.patch
    (fixing build system)
  - Add workaround patch meson-remove-setcap-setuid.sh.patch
  - Remove 0001-tracepath-Fix-copying-input-IPv6-address.patch
    (included in s20190324 release)
  - Refresh old patches (iputils-ping-interrupt.diff, iputils-sec-ping-unblock.diff)
  - Changes caused by upstream switching to meson build system (drop sed build dependency)
  - Added locales
  - Fix typos


author: pvorel@suse.cz
changelog:
  - Update to version s20190709
  - Removed patches included in this upstream release:
    ping-Fix-unwanted-bell-on-unreachable-address.patch
    0001-build-sys-doc-Fix-the-dependency-on-xsltproc.patch
    meson-remove-setcap-setuid.sh.patch
  - Add libcap-progs as a build dependency (setcap is needed)


author: pvorel@suse.cz
changelog:
  - Set caps for clockdiff (boo#1140994), based on change in permissions package
    https://github.com/openSUSE/permissions/commit/5da6a81e38bb74f2090d73208b1a0101a0c5b73b
  - With new permissions package both clockdiff and ping have capabilities
    cap_net_raw+p instead of cap_net_raw+ep (boo#1140993), also ping6 does not
    try to set permissions on links (boo#1140991)
  - Pass -DNO_SETCAP_OR_SUID=true (don't run setcap via distro script
    build-aux/setcap-setuid.sh, we set capabilities with rpm)


author: mwilck@suse.com
changelog:
  - Fix arping -D problem (bsc#1146440)
    * added arping-revert-partially-fix-sent-vs-received-package.patch
    (upstream commit 18f14be)


author: pvorel@suse.cz
changelog:
  - Fix arping -w problem (https://github.com/iputils/iputils/issues/211)
    * added arping-fix-f-quit-on-first-reply-regression.patch
    (upstream commit 1df5350)


author: pvorel@suse.cz
changelog:
  - Remove 2 old patches (iputils-sec-ping-unblock.diff, iputils-ping-interrupt.diff)
    Although not documented, they both belong to bsc#674304. Fix from 2011 was
    resolved upstream in commit 810dd7f ("ping,ping6: Unmask signals on
    start-up.") [1], released in s20121112.
  - Use %autosetup -p1


author: pvorel@suse.cz
changelog:
  - Update to version s20200821
    https://github.com/iputils/iputils/releases/tag/s20200821
  - Remove BuildRequires libopenssl-devel (added md5 implementation thus not needed)
  - Remove patches from this release
    (arping-revert-partially-fix-sent-vs-received-package.patch,
    arping-fix-f-quit-on-first-reply-regression.patch)


author: pvorel@suse.cz
changelog:
  - Update to version 20210202
    https://github.com/iputils/iputils/releases/tag/20210202
  - Version scheme change: dropped leading 's', update that change


author: pvorel@suse.cz
changelog:
  - Update to version 20210722
    https://github.com/iputils/iputils/releases/tag/20210722
  - Use rarpd.service from upstream (removes PrivateUsers=yes, which fixes broken
    start of the service, adds DynamicUser=yes for more security)
  - Add BuildRequires:  iproute2 (required for running tests)


author: jsegitz@suse.com
changelog:
  - Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
    * harden_rdisc.service.patch


author: pvorel@suse.cz
changelog:
  - Update to version 20211215
    https://github.com/iputils/iputils/releases/tag/20211215
  - rarpd and rdisc are going to be removed in next release
    (https://github.com/iputils/iputils/issues/363)
    therefore don't pack it since this release
  - Drop harden_rdisc.service.patch, which was 1) merged upstream
    4bb0ace ("systemd: Add ProtectHostname, ProtectKernelLogs")
    for all services
    2) we don't build rdisc since this release


author: pvorel@suse.cz
changelog:
  - Backport 2 fixes for bsc#1203957:
    0001-ping-Add-SA_RESTART-to-sa_flags.patch
    0002-ping-Make-ping_rts-struct-static.patch


author: pvorel@suse.cz
changelog:
  - Update to version 20221126
    https://github.com/iputils/iputils/releases/tag/20221126
  - Update configure variables (ninfod, rarpd and rdisc were removed from
    upstream in next release => remove -DBUILD_NINFOD=false -DBUILD_RARPD=false
    - DBUILD_RDISC=false)
  - Remove 2 backported fixes from this release
    0001-ping-Add-SA_RESTART-to-sa_flags.patch
    0002-ping-Make-ping_rts-struct-static.patch


author: pvorel@suse.cz
changelog:
  - Backport upstream fix for bsc#1224877
    4db1de6 ("arping: Fix 1s delay on exit for unsolicited arpings")
    0001-arping-Fix-1s-delay-on-exit-for-unsolicited-arpings.patch


author: pvorel@suse.cz
changelog:
  - Backport proposed fix for regression in upstream commit 4db1de6 (bsc#1224877)
    0002-arping-Fix-unsolicited-ARP-regressions-on-c-1.patch


author: pvorel@suse.cz
changelog:
  - Update 0002-arping-Fix-unsolicited-ARP-regressions-on-c-1.patch
    after upstream merged the fix, update git commit hashes.


author: meissner@suse.com
changelog:
  - updated to 3.4.0
    * enhancement: add API call jent_set_fips_failure_callback as requested by Daniel Ojalvo
    * fix: Change the SHA-3 integration: The entropy pool is now a SHA-3 state.
    It is filled with the time delta containing entropy and auxiliary data that does not contain entropy using a SHA update operation. The auxiliary data is calculated by a SHA-3 hashing of some varying state data. The time delta that contains entropy is measured about the SHA-3 hasing of the auxiliary data. This satisfies FIPS 140-3 IG D.K resolutions 4, 6, and 8.
    * enhancement: add CMake support by Andrew Hopkins
  - updated to 3.3.1
    * fix: bug fix in initialization logic by Vladis Dronov <vdronov@redhat.com>
    * fix: use __asm__ instead of asm to suit the C11 standard
  - added a -devel-static package to be able to link it static.


author: meissner@suse.com
changelog:
  - updated to 3.4.1
    * add FIPS 140 hints to man page
    * simplify the test tool to search for optimal configurations
    * fix: jent_loop_shuffle: re-add setting the time that was lost with 3.4.0
    * enhancement: add ARM64 assembler code to read high-res timer


author: meissner@suse.com
changelog:
  - jitterentropy-split-internal-header.patch:
    Hide the non-GNUC constructs that are library internal from the
    exported header. (bsc#1202870)


author: pmonreal@suse.com
changelog:
  - Fix a stack corruption on s390x: [bsc#1209627]
    * Output size of the STCKE command on s390x is 16 bytes, compared
      to 8 bytes of the STCK command. Fix a stack corruption in the
      s390x version of jent_get_nstime(). Add some more detailed
      information on the STCKE command.
    * github.com/smuellerDD/jitterentropy-library/commit/7bf9f85
    * Add jitterentropy-fix-a-stack-corruption-on-s390x.patch


author: ledest@gmail.com
changelog:
  - fix bashisms in scripts
  - add patches:
    * kbd-2.0.2-fix-bashisms.patch
  - update patches:
    * kbd-1.15.2-unicode_scripts.patch


author: crrodriguez@opensuse.org
changelog:
  - For the previos change to wok, we need to buildrequire
    suse-module-tools to get the initrd rpm macros.


author: sndirsch@suse.com
changelog:
  - Include xkb layouts from xkeyboard-config converted to console
    keymaps, (FATE#318426)
    * Rename Finnish xkb converted layout
    * Add xkb and legacy keymaps subdirs to loadkyes search path
      (kbd-1.15.5-loadkeys-search-path.patch), remove symlinks,
      Don't convert layouts that can't input ASCII,
    * Original keymaps moved to legacy dir, created symlinks to xkb
      keymaps


author: sndirsch@suse.com
changelog:
  - added genmap4systemd.sh tool, which generates entries for
    systemd's /usr/share/systemd/kbd-model-map table from
    xkeyboard-config converted keymaps; entries are written to
    /usr/share/systemd/kbd-model-map.xkb-generated, so these can
    easily be added to /usr/share/systemd/kbd-model-map by systemd
    package (FATE#318426)


author: sndirsch@suse.com
changelog:
  - genmap4systemd.sh: use 'abnt2' model for 'br' layouts, 'jp106'
    model for 'jp' layouts and 'microsoftpro' for anything else
    (instead of 'pc105' before) (FATE#318426)


author: opensuse.lietuviu.kalba@gmail.com
changelog:
  - Rename conflicting legacy keymaps:
    * dvorak/no.map -> dvorak/no-dvorak.map
    * fgGIod/trf.map -> fgGIod/trf-fgGIod.map
    * olpc/pt.map -> olpc/pt-olpc.map
    * qwerty/cz.map -> qwerty/cz-qwerty.map
  - i386/qwerty/sr-latin links to sr-cy
  - add compose rules to cz layout (rh#1181581)


author: tiwai@suse.de
changelog:
  - Fix missing dependency on coreutils for initrd macros (boo#958562)
  - Call missing initrd macro at postun (boo#958562)


author: marceloatie@gmail.com
changelog:
  - Fix data/keymaps/i386/querty/br-abnt2.map
    (boo#984958, kbd-1.15.5-br-abnt2-slash-question.patch)


author: tchvatal@suse.com
changelog:
  - Version update to 2.0.3:
    * Various small updates
  - Obsolete merged patch:
    * kbd-1.15.5-br-abnt2-slash-question.patch
  - Quickly run over with spec-cleaner
  - Remove arch check for alpha and other unused platforms
  - Drop kbd.fillup.nonpc as it should not be needed nowdays


author: zaitor@opensuse.org
changelog:
  - Revert dropping of kdb-legacy Requires: There are still packages
    and installation flows that needs this to be present
    (boo#1027379).


author: sbrabec@suse.com
changelog:
  - Version update to 2.0.4:
    * translation updates
    * support for U+202F
    * minor fixes and code cleanup
    * minor improvements and more characters support
  - Enable vlock (bsc#1056449, FATE#261).


author: fbui@suse.com
changelog:
  - Drop from some fill-up templates, a couple of sysconfig variables no
    more read by systemd (fate#319454)
    So the relevant settings can be defined in only one place.


author: sbrabec@suse.com
changelog:
  - Move initial NumLock handling from systemd back to kbd:
    * Add kbdsettings service written by Thomas Blume (boo#1010880,
      kbdsettings, kbdsettings.service, numlockbios.c,
      update sysconfig.console and sysconfig.keyboard).
    * Exclude numlockbios support for non x86 platforms
      (kbdsettings-nox86.patch).
  - Drop references to KEYTABLE and COMPOSETABLE (boo#1010880#c32,
    boo#1010880#c54,  sysconfig.keyboard.del, README.SUSE,
    drop kbd.fillup).
  - Fix paths in kbd.pl.


author: sbrabec@suse.com
changelog:
  - Do not cause error on UNICODE characters >= 0xF000 (e. g.
    ligature fi) (bsc#1085432, kbd-unicode-fxxx.patch).


author: sbrabec@suse.com
changelog:
  - Disable characters >=U+F000. These do not work properly
    (bsc#1085432#c15, kbd-unicode-fxxx.patch).


author: stefan.bruens@rwth-aachen.de
changelog:
  - Use a UTF-8 capable locale, otherwise ckbcomp will not not able
    to do proper uppercase/lowercase conversions.
  - Rebase cz-map.patch after UTF-8 changes.
  - Skip compression/decompression of maps which are about to be
    discarded later (~30%). Avoid zgrep, which is a shell script
    spawning grep and gunzip for each input file.


author: sbrabec@suse.com
changelog:
  - Update to version 2.2.0:
    * setfont: Add option -d to double size of font.
    * kbd_mode: Add -f option and deny dangerous mode switches
      without it.
    * Data files updates.
    * Fix gcc warnings and error with gcc-10 (boo#1160273).
    * Other fixes.
    * For a full list of changes see:
      https://git.kernel.org/pub/scm/linux/kernel/git/legion/kbd.git/log/
  - Update home page.
  - Refresh patches: kbd-1.15.2-dumpkeys-C-opt.patch,
    kbd-1.15.2-setfont-no-cruft.patch,
    kbd-1.15.5-loadkeys-search-path.patch.


author: lnussel@suse.de
changelog:
  - drop broken kbd command as well as guess_encoding (boo#1170067)
  - don't use subdirectory for legacy keymaps (boo#1166423)
  - use fdupes


author: guillaume.gardet@opensuse.org
changelog:
  - Refresh patch to fix build on non-x86 architecture broken
    by previous commit:
    * kbdsettings-nox86.patch


author: sbrabec@suse.com
changelog:
  - Update to version 2.3.0:
    * Added libkfont library (internal yet).
    * Added Canadian Multilingual Standard keyboard map.
    * Added us1 that maps Right Alt to AltGr and Shift+Tab to
      Alt+Tab.
    * The dead_macron is used instead of macron in fi.map.
    * Added retries when switching to the console (chvt, openvt).
    * Added option -d to double size of font (setfont).
    * Added long options, help messages.
    * Added solar24x32 font.
    * Updated eurlatgr font.
    * Fixed problems with formatting man pages.
    * Fixed search path error (boo#1176854).
  - Refresh partially upstreamed kbd-1.15.2-dumpkeys-C-opt.patch
  - Drop upstreamed libkeymap-Fix-mk_mapname-for-the-plain-map.patch
  - Refresh kbd-1.15.2-setfont-no-cruft.patch and
    kbd-1.15.5-loadkeys-search-path.patch


author: jslaby@suse.cz
changelog:
  - Update to version 2.4.0:
    * po: Update cs and sr translations (from translationproject.org)
    * libkfont: Use only KDFONTOP
    * Added support for a few derivatives of neo
    * Fix use-after-free of pipe_cmd
    * Update solar24x32 font
    * vlock's pam config added to destination directory
    * Update sun12x22.psfu
    * libkeymap: unify non/unicode accent_table generation
    * libkeymap: note about --unicode use
    * libkeymap: remove last ushort
    * fi.map: use newly added deadkeys
    * Do not install internal library
    * Additional deadkeys
  - Remove kbd-1.15.2-setfont-no-cruft.patch
    The old ioctls were finally dropped.


author: christophe@krop.fr
changelog:
  - Update the installed license file.
    COPYING is a symlink to LICENSE. Let's use this file directly.


author: kukuk@suse.com
changelog:
  - Only run kbdsettings.service if /etc/sysconfig/keyboard exists.
    Necessary for image based installations without admin made changes.


author: fvogt@suse.com
changelog:
  - Add patch to fix random doubling of font sizes (bsc#1194698):
    * 0001-libkfont-Initialize-kfont_context-options.patch


author: fbui@suse.com
changelog:
  - Add 'ara' vc keymap (bsc#1210702)
    'ara' is slightly better than 'arabic' as it matches the name of its x11
    layout counterpart. Keep 'arabic' for backward compatibility sake.


author: neilb@suse.de
changelog:
  - SUNRPC: Mark the cred for revalidation if the server rejects it
    (git-fixes).
  - NFS/pNFS: Report EINVAL errors from connect() to the server
    (git-fixes).
  - nfsd: fix change_info in NFSv4 RENAME replies (git-fixes).
  - pNFS: Fix assignment of xprtdata.cred (git-fixes).
  - NFSv4.2: fix handling of COPY ERR_OFFLOAD_NO_REQ (git-fixes).
  - NFS: Guard against READDIR loop when entry names exceed
    MAXNAMELEN (git-fixes).
  - nfs/blocklayout: Use the passed in gfp flags (git-fixes).
  - NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info
    (git-fixes).
  - NFSD: da_addr_body field missing in some GETDEVICEINFO replies
    (git-fixes).
  - fs: lockd: avoid possible wrong NULL parameter (git-fixes).
  - nfsd: Fix race to FREE_STATEID and cl_revoked (git-fixes).
  - xprtrdma: Remap Receive buffers after a reconnect (git-fixes).
  - NFSv4: fix out path in __nfs4_get_acl_uncached (git-fixes).
  - NFSv4.2: fix error handling in nfs42_proc_getxattr (git-fixes).
  - NFSv4: Fix dropped lock for racing OPEN and delegation return
    (git-fixes).
  - commit 087b1c4


author: pjakobsson@suse.de
changelog:
  - Refresh
    patches.suse/drm-nouveau-kms-nv50-fix-nv50_wndw_new_-prototype.patch
    (git-fixes)
    Alt-commit
  - commit 4c21b50


author: pjakobsson@suse.de
changelog:
  - Refresh
    patches.suse/drm-amd-display-fix-flickering-caused-by-S-G-mode.patch
    (git-fixes)
    Alt-commit
  - commit 33e82b2


author: pjakobsson@suse.de
changelog:
  - Refresh
    patches.suse/drm-amdgpu-add-a-missing-lock-for-AMDGPU_SCHED.patch
    (git-fixes)
    Alt-commit
  - commit 2ecd3e8


author: pjakobsson@suse.de
changelog:
  - Refresh
    patches.suse/drm-amdgpu-Fix-vram-recover-doesn-t-work-after-whole.patch
    (git-fixes)
    Alt-commit
  - commit 38e2a92


author: pjakobsson@suse.de
changelog:
  - Refresh
    patches.suse/drm-amd-display-check-attr-flag-before-set-cursor-de.patch
    (git-fixes)
    Alt-commit
  - commit f507792


author: pjakobsson@suse.de
changelog:
  - Refresh
    patches.suse/drm-msm-dpu-drop-enum-dpu_core_perf_data_bus_id.patch
    (git-fixes)
    Alt-commit
  - commit f8178cd


author: pjakobsson@suse.de
changelog:
  - Refresh
    patches.suse/1836-drm-aperture-Run-fbdev-removal-before-internal-helpe.patch
    (git-fixes)
    Alt-commit
  - commit e35f57f


author: pjakobsson@suse.de
changelog:
  - Refresh
    patches.suse/drm-amdgpu-fix-return-value-check-in-kfd.patch
    (git-fixes)
    Alt-commit
  - commit 97cc526


author: pjakobsson@suse.de
changelog:
  - Refresh
    patches.suse/drm-amd-display-Set-dcn32-caps.seamless_odm.patch
    (git-fixes)
    Alt-commit
  - commit a0540d6


author: pjakobsson@suse.de
changelog:
  - Refresh
    patches.suse/drm-amdgpu-allow-more-APUs-to-do-mode2-reset-when-go.patch
    (git-fixes)
    Alt-commit
  - commit 2baa247


author: pjakobsson@suse.de
changelog:
  - Refresh
    patches.suse/drm-amd-display-Add-missing-WA-and-MCLK-validation.patch
    (git-fixes)
    Alt-commit
  - commit b31adf2


author: pjakobsson@suse.de
changelog:
  - Refresh
    patches.suse/drm-amd-display-Return-error-code-on-DSC-atomic-chec.patch
    (git-fixes)
    Alt-commit
  - commit 310423c


author: pjakobsson@suse.de
changelog:
  - Refresh
    patches.suse/drm-amd-display-Fixes-for-dcn32_clk_mgr-implementati.patch
    (git-fixes)
    Alt-commit
  - commit 9ba10de


author: pjakobsson@suse.de
changelog:
  - Refresh
    patches.suse/drm-amd-display-Reset-OUTBOX0-r-w-pointer-on-DMUB-re.patch
    (git-fixes)
    Alt-commit
  - commit 171518a


author: pjakobsson@suse.de
changelog:
  - Refresh
    patches.suse/drm-amd-display-Do-not-clear-GPINT-register-when-rel.patch
    (git-fixes)
    Alt-commit
  - commit 4b4e240


author: pjakobsson@suse.de
changelog:
  - Refresh
    patches.suse/drm-amd-display-Update-bounding-box-values-for-DCN32.patch
    (git-fixes)
    Alt-commit
  - commit ba25d71


author: pjakobsson@suse.de
changelog:
  - Refresh
    patches.suse/drm-amdgpu-change-gfx-11.0.4-external_id-range.patch
    (git-fixes)
    Alt-commit
  - commit 79082dc


author: pjakobsson@suse.de
changelog:
  - Refresh
    patches.suse/drm-radeon-reintroduce-radeon_dp_work_func-content.patch
    (git-fixes)
    Alt-commit
  - commit 6f484d3


author: pjakobsson@suse.de
changelog:
  - Refresh
    patches.suse/drm-amd-pm-Fix-output-of-pp_od_clk_voltage.patch
    (git-fixes)
    Alt-commit
  - commit e4f052f


author: pjakobsson@suse.de
changelog:
  - Refresh
    patches.suse/drm-amd-Tighten-permissions-on-VBIOS-flashing-attrib.patch
    (git-fixes)
    Alt-commit
  - commit d013066


author: pjakobsson@suse.de
changelog:
  - Refresh
    patches.suse/drm-amdgpu-vkms-relax-timer-deactivation-by-hrtimer_.patch
    (git-fixes)
    Alt-commit
  - commit 2de4df3


author: pjakobsson@suse.de
changelog:
  - Refresh
    patches.suse/drm-amd-Fix-an-error-handling-mistake-in-psp_sw_init.patch
    (git-fixes)
    Alt-commit
  - commit e324027


author: tzimmermann@suse.com
changelog:
  - drm/ast: Add BMC virtual connector (bsc#1152472)
    Backporting changes:
    * rename ast_device to ast_private
  - commit 0eaf20c


author: tzimmermann@suse.com
changelog:
  - drm/ast: report connection status on Display Port. (bsc#1152472)
    Backporting changes:
    * rename ast_device to ast_private
    * context changes
  - commit b93ab93


author: tbogendoerfer@suse.de
changelog:
  - gve: fix frag_list chaining (bsc#1214479).
  - gve: RX path for DQO-QPL (bsc#1214479).
  - gve: Tx path for DQO-QPL (bsc#1214479).
  - gve: Control path for DQO-QPL (bsc#1214479).
  - gve: trivial spell fix Recive to Receive (bsc#1214479).
  - gve: use vmalloc_array and vcalloc (bsc#1214479).
  - gve: Unify duplicate GQ min pkt desc size constants
    (bsc#1214479).
  - gve: Add AF_XDP zero-copy support for GQI-QPL format
    (bsc#1214479).
  - gve: Add XDP REDIRECT support for GQI-QPL format (bsc#1214479).
  - gve: Add XDP DROP and TX support for GQI-QPL format
    (bsc#1214479).
  - gve: Changes to add new TX queues (bsc#1214479).
  - gve: XDP support GQI-QPL: helper function changes (bsc#1214479).
  - gve: Fix gve interrupt names (bsc#1214479).
  - commit 4dd2d8d


author: tabraham@suse.com
changelog:
  - scsi: qedf: Add synchronization between I/O completions and
    abort (bsc#1210658).
  - commit 96a8c32


author: pmladek@suse.com
changelog:
  - blacklist.conf: printk: the changes look good but they do not fix
    any serious problem
  - commit c560ceb


author: pmladek@suse.com
changelog:
  - blacklist.conf: workqueue: compiler warning on 32-bit systems with
    Clang (bsc#1215877)
  - commit b7e65aa


author: krisman@suse.de
changelog:
  - io_uring: fix fdinfo sqe offsets calculation (git-fixes).
  - io_uring: ensure REQ_F_ISREG is set async offload (git-fixes).
  - commit dcb29de


author: krisman@suse.de
changelog:
  - io_uring: Replace 0-length array with flexible array
    (git-fixes).
  - io_uring/rw: defer fsnotify calls to task context (git-fixes).
  - commit 32ede95


author: mkubecek@suse.cz
changelog:
  - tcp: Reduce chance of collisions in inet6_hashfn()
    (CVE-2023-1206 bsc#1212703).
  - commit e3ebd17


author: mkubecek@suse.cz
changelog:
  - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro
    for ip_set_hash_netportnet.c (CVE-2023-42753 bsc#1215150).
  - commit 7a6be79


author: petr.pavlu@suse.com
changelog:
  - doc/README.SUSE: Adjust heading style (jsc#PED-5021)
    * Underscore all headings as a preparation for Markdown conversion.
    * Use title-style capitalization for the document name and
    sentence-style capitalization for section headings, as recommended in
    the current SUSE Documentation Style Guide.
  - commit 11e3267


author: petr.pavlu@suse.com
changelog:
  - doc/README.PATCH-POLICY.SUSE: Remove the list of links (jsc#PED-5021)
    All links have been incorporated into the text. Remove now unnecessary
    list at the end of the document.
  - commit 43d62b1


author: mfranc@suse.cz
changelog:
  - KVM: s390: vsie: Fix the initialization of the epoch extension
    (epdx) field (git-fixes bsc#1215894).
  - commit 9c5bbd7


author: mfranc@suse.cz
changelog:
  - KVM: s390: interrupt: use READ_ONCE() before cmpxchg()
    (git-fixes bsc#1215896).
  - commit 8726736


author: mfranc@suse.cz
changelog:
  - KVM: s390/diag: fix racy access of physical cpu number in diag
    9c handler (git-fixes bsc#1215911).
  - commit 6454286


author: mfranc@suse.cz
changelog:
  - KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes
    (git-fixes bsc#1215915).
  - commit fe7fbfc


author: jdelvare@suse.de
changelog:
  - btrfs: fix root ref counts in error handling in
    btrfs_get_root_ref (bsc#1214351 CVE-2023-4389).
  - commit 3731029


author: mfranc@suse.cz
changelog:
  - KVM: s390: pv: fix external interruption loop not always
    detected (git-fixes bsc#1215916).
  - commit f1893aa


author: nik.borisov@suse.com
changelog:
  - KVM: x86: add support for CPUID leaf 0x80000021 (bsc#1213772).
  - Refresh
    patches.suse/KVM-x86-Mask-off-reserved-bits-in-CPUID.80000001H.patch.
  - commit 320f1ae


author: nik.borisov@suse.com
changelog:
  - KVM: x86: synthesize CPUID leaf 0x80000021h if useful  (bsc#1213772).
  - Refresh
    patches.suse/KVM-x86-Mask-off-reserved-bits-in-CPUID.80000001H.patch.
  - Refresh
    patches.suse/KVM-x86-Move-lookup-of-indexed-CPUID-leafs-to-helper.
  - commit 3d1c8b5


author: nik.borisov@suse.com
changelog:
  - KVM: x86: Move open-coded CPUID leaf 0x80000021 EAX bit  propagation  code (bsc#1213772).
  - Refresh patches.suse/x86-srso-add-srso_no-support.patch.
  - commit f21e4e4


author: nik.borisov@suse.com
changelog:
  - x86/cpu, kvm: Add the NO_NESTED_DATA_BP feature (bsc#1213772).
  - Refresh patches.suse/x86-srso-add-ibpb_brtype-support.patch.
  - Refresh patches.suse/x86-srso-add-srso_no-support.patch.
  - commit 80fb630


author: nik.borisov@suse.com
changelog:
  - x86/cpu, kvm: Move X86_FEATURE_LFENCE_RDTSC to its native leaf  (bsc#1213772).
  - Refresh patches.suse/x86-srso-add-ibpb_brtype-support.patch.
  - Refresh patches.suse/x86-srso-add-srso_no-support.patch.
  - commit 553f579


author: nik.borisov@suse.com
changelog:
  - x86/cpu, kvm: Add the Null Selector Clears Base feature  (bsc#1213772).
  - Refresh patches.suse/x86-srso-add-ibpb_brtype-support.patch.
  - Refresh patches.suse/x86-srso-add-srso_no-support.patch.
  - commit 8f2a48f


author: nik.borisov@suse.com
changelog:
  - x86/cpu, kvm: Add the SMM_CTL MSR not present feature  (bsc#1213772).
  - Refresh patches.suse/x86-srso-add-ibpb_brtype-support.patch.
  - Refresh patches.suse/x86-srso-add-srso_no-support.patch.
  - commit aed5f36


author: nik.borisov@suse.com
changelog:
  - x86/cpu: Support AMD Automatic IBRS (bsc#1213772).
  - Refresh patches.suse/x86-srso-add-ibpb_brtype-support.patch.
  - Refresh patches.suse/x86-srso-add-srso_no-support.patch.
  - commit 8ed20a4


author: mkoutny@suse.com
changelog:
  - blacklist.conf: Add c0f78fd5edcf cgroup/cpuset: Iterate only if DEADLINE tasks are present
    ... and its prereqs
  - commit a4ba12c


author: mkoutny@suse.com
changelog:
  - sched/cpuset: Bring back cpuset_mutex (bsc#1215955).
  - cgroup/cpuset: Change references of cpuset_mutex to cpuset_rwsem
    (bsc#1215955).
  - commit 59f5010


author: mfranc@suse.cz
changelog:
  - s390: add z16 elf platform (git-fixes LTC#203789 bsc#1215956
    LTC#203788 bsc#1215957).
  - commit a4355b3


author: mkoutny@suse.com
changelog:
  - Update
    patches.suse/ipv6-sr-fix-out-of-bounds-read-when-setting-HMAC-dat.patch
    (bsc#1211592 CVE-2023-2860).
  - commit 6e15654


author: shung-hsi.yu@suse.com
changelog:
  - selftests/bpf: Add more tests for check_max_stack_depth bug
    (git-fixes).
  - bpf: Repeat check_max_stack_depth for async callbacks
    (git-fixes).
  - bpf: Fix subprog idx logic in check_max_stack_depth (git-fixes).
  - selftests/bpf: Add selftest for check_stack_max_depth bug
    (git-fixes).
  - bpf: Fix max stack depth check for async callbacks (git-fixes).
  - bpf: fix precision propagation verbose logging (git-fixes).
  - bpf: Fix incorrect verifier pruning due to missing register
    precision taints (bsc#1215518 CVE-2023-2163).
  - selftests/bpf: Add dynptr helper tests (bsc#1215863
    CVE-2023-39191).
  - selftests/bpf: Add dynptr partial slot overwrite tests
    (bsc#1215863 CVE-2023-39191).
  - selftests/bpf: Add dynptr var_off tests (bsc#1215863
    CVE-2023-39191).
  - selftests/bpf: Add dynptr pruning tests (bsc#1215863
    CVE-2023-39191).
  - selftests/bpf: convenience macro for use with 'asm volatile'
    blocks (bsc#1215863 CVE-2023-39191).
  - bpf: Avoid recomputing spi in process_dynptr_func (bsc#1215863
    CVE-2023-39191).
  - bpf: Combine dynptr_get_spi and is_spi_bounds_valid (bsc#1215863
    CVE-2023-39191).
  - bpf: Allow reinitializing unreferenced dynptr stack slots
    (bsc#1215863 CVE-2023-39191).
  - bpf: Invalidate slices on destruction of dynptrs on stack
    (bsc#1215863 CVE-2023-39191).
  - bpf: Fix partial dynptr stack slot reads/writes (bsc#1215863
    CVE-2023-39191).
  - bpf: Fix missing var_off check for ARG_PTR_TO_DYNPTR
    (bsc#1215863 CVE-2023-39191).
  - bpf: Fix state pruning for STACK_DYNPTR stack slots (bsc#1215863
    CVE-2023-39191).
  - bpf: Add missing btf_put to register_btf_id_dtor_kfuncs
    (git-fixes).
  - bpf: Use memmove for bpf_dynptr_{read,write} (bsc#1215863
    CVE-2023-39191).
  - bpf: Move PTR_TO_STACK alignment check to process_dynptr_func
    (bsc#1215863 CVE-2023-39191).
  - bpf: Rework check_func_arg_reg_off (bsc#1215863 CVE-2023-39191).
  - bpf: Rework process_dynptr_func (bsc#1215863 CVE-2023-39191).
  - bpf: Propagate errors from process_* checks in check_func_arg
    (bsc#1215863 CVE-2023-39191).
  - bpf: Refactor ARG_PTR_TO_DYNPTR checks into process_dynptr_func
    (bsc#1215863 CVE-2023-39191).
  - selftests/bpf: convert dynptr_fail and map_kptr_fail subtests
    to generic tester (bsc#1215863 CVE-2023-39191).
  - bpf: Tighten ptr_to_btf_id checks (git-fixes).
  - selftests/bpf: Add reproducer for decl_tag in func_proto
    argument (git-fixes).
  - bpf: Prevent decl_tag from being referenced in func_proto arg
    (git-fixes).
  - bpf: propagate precision across all frames, not just the last
    one (git-fixes).
  - bpf: propagate precision in ALU/ALU64 operations (git-fixes).
  - bpf: Fix offset calculation error in __copy_map_value and
    zero_map_value (git-fixes).
  - bpf: prevent decl_tag from being referenced in func_proto
    (git-fixes).
  - selftests/bpf: Add reproducer for decl_tag in func_proto return
    type (git-fixes).
  - bpf: Gate dynptr API behind CAP_BPF (git-fixes).
  - selftests/bpf: Add tests for dynamic pointers parameters in
    kfuncs (bsc#1215863 CVE-2023-39191).
  - bpf: Move dynptr type check to is_dynptr_type_expected()
    (bsc#1215863 CVE-2023-39191).
  - btf: Export bpf_dynptr definition (git-fixes).
  - bpf: Add helper macro bpf_for_each_reg_in_vstate (bsc#1215863
    CVE-2023-39191).
  - bpf: Add zero_map_value to zero map value with special fields
    (git-fixes).
  - bpf: Add copy_map_value_long to copy to remote percpu memory
    (git-fixes).
  - bpf: Fix resetting logic for unreferenced kptrs (git-fixes).
  - selftests/bpf: add extra test for using dynptr data slice
    after release (bsc#1215863 CVE-2023-39191).
  - bpf: Fix ref_obj_id for dynptr data slices in verifier
    (git-fixes).
  - bpf: Cleanup check_refcount_ok (git-fixes).
  - selftests/bpf: Clean up sys_nanosleep uses (git-fixes).
  - selftests/bpf: Copy over libbpf configs (bsc#1215863
    CVE-2023-39191).
  - bpf: Tidy up verifier check_func_arg() (bsc#1215863
    CVE-2023-39191).
  - commit 824f808


author: jroedel@suse.de
changelog:
  - iommu/amd: Add map/unmap_pages() iommu_domain_ops callback
    support (bsc#1212423).
  - iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops
    callback (bsc#1212423).
  - iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops
    callback (bsc#1212423).
  - commit b7a7693


author: shung-hsi.yu@suse.com
changelog:
  - blacklist.conf: add f655badf2a8f ("bpf: fix propagate_precision() logic for inner frames")
    Precision tracking for BPF subprogram is not backported, so we shouldn't
    need this fix.
  - commit 7b579f5


author: shung-hsi.yu@suse.com
changelog:
  - Delete
    patches.suse/bpf-Fix-renaming-task_getsecid_subj-current_getsecid.patch.
    This patch shouldn't have been backported in the first place because we
    did not backport commit 6326948f940d "lsm: security_task_getsecid_subj()
    - > security_current_getsecid_subj()".
    Drop this patch fix resolve_btfids' complain that
    bpf_lsm_current_getsecid_subj is unresolvable.
  - commit 9f9ad18


author: petr.pavlu@suse.com
changelog:
  - tracing: Increase trace array ref count on enable and filter
    files (git-fixes).
  - commit fa9da0d


author: shung-hsi.yu@suse.com
changelog:
  - kABI: fix bpf Invalidate slices on destruction of dynptrs on
    stack (bsc#1215863 CVE-2023-39191).
  - commit d4285e9


author: nmorey@suse.com
changelog:
  - RDMA/mlx5: Fix mutex unlocking on error flow for steering anchor creation (git-fixes)
  - commit c1704fa


author: oneukum@suse.com
changelog:
  - net: usb: smsc75xx: Fix uninit-value access in
    __smsc75xx_read_reg (git-fixes).
  - commit 38bd5fc


author: tiwai@suse.de
changelog:
  - gpio: aspeed: fix the GPIO number passed to
    pinctrl_gpio_set_config() (git-fixes).
  - gpio: pxa: disable pinctrl calls for MMP_GPIO (git-fixes).
  - platform/x86: think-lmi: Fix reference leak (git-fixes).
  - HID: intel-ish-hid: ipc: Disable and reenable ACPI GPE bit
    (git-fixes).
  - HID: sony: Fix a potential memory leak in sony_probe()
    (git-fixes).
  - wifi: mt76: mt76x02: fix MT76x0 external LNA gain handling
    (git-fixes).
  - wifi: mwifiex: Fix oob check condition in
    mwifiex_process_rx_packet (git-fixes).
  - wifi: iwlwifi: mvm: Fix a memory corruption issue (git-fixes).
  - wifi: iwlwifi: dbg_ini: fix structure packing (git-fixes).
  - wifi: mwifiex: Fix tlv_buf_left calculation (git-fixes).
  - net: nfc: llcp: Add lock when modifying device list (git-fixes).
  - net: usb: smsc75xx: Fix uninit-value access in
    __smsc75xx_read_reg (git-fixes).
  - leds: Drop BUG_ON check for LED_COLOR_ID_MULTI (git-fixes).
  - regmap: rbtree: Fix wrong register marked as in-cache when
    creating new node (git-fixes).
  - nilfs2: fix potential use after free in
    nilfs_gccache_submit_read_data() (git-fixes).
  - Revert "tty: n_gsm: fix UAF in gsm_cleanup_mux" (git-fixes).
  - serial: 8250_port: Check IRQ data before use (git-fixes).
  - firmware: arm_ffa: Don't set the memory region attributes for
    MEM_LEND (git-fixes).
  - soc: imx8m: Enable OCOTP clock for imx8mm before reading
    registers (git-fixes).
  - firmware: imx-dsp: Fix an error handling path in
    imx_dsp_setup_channels() (git-fixes).
  - bus: ti-sysc: Fix missing AM35xx SoC matching (git-fixes).
  - bus: ti-sysc: Use fsleep() instead of usleep_range() in
    sysc_reset() (git-fixes).
  - i2c: npcm7xx: Fix callback completion ordering (git-fixes).
  - ata: libata-core: Do not register PM operations for SAS ports
    (git-fixes).
  - ata: libata-core: Fix port and device removal (git-fixes).
  - ata: libata-core: Fix ata_port_request_pm() locking (git-fixes).
  - ata: libata-sata: increase PMP SRST timeout to 10s (git-fixes).
  - ata: libata-scsi: ignore reserved bits for REPORT SUPPORTED
    OPERATION CODES (git-fixes).
  - gpio: pmic-eic-sprd: Add can_sleep flag for PMIC EIC chip
    (git-fixes).
  - clk: tegra: fix error return case for recalc_rate (git-fixes).
  - power: supply: ucs1002: fix error code in ucs1002_get_property()
    (git-fixes).
  - gpio: tb10x: Fix an error handling path in tb10x_gpio_probe()
    (git-fixes).
  - i2c: mux: gpio: Add missing fwnode_handle_put() (git-fixes).
  - i2c: mux: demux-pinctrl: check the return value of
    devm_kstrdup() (git-fixes).
  - i2c: i801: unregister tco_pdev in i801_probe() error path
    (git-fixes).
  - ASoC: imx-rpmsg: Set ignore_pmdown_time for dai_link
    (git-fixes).
  - ASoC: fsl: imx-pcm-rpmsg: Add SNDRV_PCM_INFO_BATCH flag
    (git-fixes).
  - ALSA: hda: Disable power save for solving pop issue on Lenovo
    ThinkCentre M70q (git-fixes).
  - spi: stm32: add a delay before SPI disable (git-fixes).
  - spi: nxp-fspi: reset the FLSHxCR1 registers (git-fixes).
  - drm/amdgpu: Handle null atom context in VBIOS info ioctl
    (git-fixes).
  - drm/amd/display: Don't check registers, if using AUX BL control
    (git-fixes).
  - spi: sun6i: fix race between DMA RX transfer completion and
    RX FIFO drain (git-fixes).
  - spi: sun6i: reduce DMA RX transfer width to single byte
    (git-fixes).
  - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not
    already running (git-fixes).
  - watchdog: iTCO_wdt: No need to stop the timer in probe
    (git-fixes).
  - commit 22d41cc


author: tiwai@suse.de
changelog:
  - HID: sony: remove duplicate NULL check before calling
    usb_free_urb() (git-fixes).
  - commit 7cd0962


author: tiwai@suse.de
changelog:
  - drm/amd: Fix detection of _PR3 on the PCIe root port
    (git-fixes).
  - Bluetooth: hci_codec: Fix leaking content of local_codecs
    (git-fixes).
  - Bluetooth: ISO: Fix handling of listen for unicast (git-fixes).
  - drm/i915/gt: Fix reservation address in ggtt_reserve_guc_top
    (git-fixes).
  - drm/amdkfd: Use gpu_offset for user queue's wptr (git-fixes).
  - ALSA: hda: intel-sdw-acpi: Use u8 type for link index
    (git-fixes).
  - drm/amdkfd: Insert missing TLB flush on GFX10 and later
    (git-fixes).
  - drm/amdgpu/nbio4.3: set proper rmmio_remap.reg_offset for SR-IOV
    (git-fixes).
  - drm/amdgpu/soc21: don't remap HDP registers for SR-IOV
    (git-fixes).
  - drm/amdkfd: Flush TLB after unmapping for GFX v9.4.3
    (git-fixes).
  - drm/bridge: ti-sn65dsi83: Do not generate HFP/HBP/HSA and EOT
    packet (git-fixes).
  - commit 81ea9f4


author: mkoutny@suse.com
changelog:
  - blacklist.conf: Add 82b90b6c5b38 cgroup:namespace: Remove unused cgroup_namespaces_init()
  - commit 6f5ac45


author: mkoutny@suse.com
changelog:
  - blk-cgroup: Fix NULL deref caused by blkg_policy_data being
    installed before init (bsc#1216062).
  - commit c2395af


author: mkoutny@suse.com
changelog:
  - Revert "Delete patches.suse/memcg-drop-kmem-limit_in_bytes.patch."
    This reverts commit 52c1db3eb4e2acbdd91aaaefddc26b7207cd4c90.
    It'll be fixed differently in a following commit.
    Restore the commit with upstream commit already for proper sorting.
  - commit 8474b47


author: mkoutny@suse.com
changelog:
  - mm, memcg: reconsider kmem.limit_in_bytes deprecation
    (bsc#1208788 bsc#1213705).
  - commit bdf774a


author: msuchanek@suse.de
changelog:
  - scsi: ibmvfc: Implement channel queue depth and event buffer
    accounting (bsc#1209834 ltc#202097).
  - scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool
    (bsc#1209834 ltc#202097).
  - commit 4313def


author: jgross@suse.com
changelog:
  - xen/events: replace evtchn_rwlock with RCU (bsc#1215745,
    xsa-441, cve-2023-34324).
  - commit 291fb99


author: tbogendoerfer@suse.de
changelog:
  - net: mana: Fix oversized sge0 for GSO packets (bsc#1215986).
  - net: mana: Fix TX CQE error handling (bsc#1215986).
  - commit 3666b58


author: shung-hsi.yu@suse.com
changelog:
  - bpf: Fix incorrect verifier pruning due to missing register
    precision taints (bsc#1215518 CVE-2023-2163).
  - bpf: propagate precision in ALU/ALU64 operations (git-fixes).
  - commit 71da1d6


author: dwagner@suse.de
changelog:
  - nvmet-tcp: Fix a possible UAF in queue intialization setup
    (bsc#1215768 CVE-2023-5178).
  - commit b965ee1


author: ohering@suse.de
changelog:
  - vmbus_testing: fix wrong python syntax for integer value
    comparison (git-fixes).
  - Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present
    CPUs (git-fixes).
  - Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc()
    fails (git-fixes).
  - commit a15e7ae


author: duwe@suse.de
changelog:
  - crypto: qat - fix crypto capability detection for 4xxx
    (PED-6401).
  - crypto: qat - Remove unused function declarations (PED-6401).
  - crypto: qat - use kfree_sensitive instead of memset/kfree()
    (PED-6401).
  - crypto: qat - replace the if statement with min() (PED-6401).
  - crypto: qat - add heartbeat counters check (PED-6401).
  - crypto: qat - add heartbeat feature (PED-6401).
  - crypto: qat - add measure clock frequency (PED-6401).
  - crypto: qat - drop obsolete heartbeat interface (PED-6401).
  - crypto: qat - add internal timer for qat 4xxx (PED-6401).
  - crypto: qat - add fw_counters debugfs file (PED-6401).
  - crypto: qat - change value of default idle filter (PED-6401).
  - crypto: qat - do not export adf_init_admin_pm() (PED-6401).
  - crypto: qat - expose pm_idle_enabled through sysfs (PED-6401).
  - crypto: qat - extend configuration for 4xxx (PED-6401).
  - crypto: qat - refactor fw config logic for 4xxx (PED-6401).
  - crypto: qat - make fw images name constant (PED-6401).
  - crypto: qat - move returns to default case (PED-6401).
  - crypto: qat - unmap buffers before free for RSA (PED-6401).
  - crypto: qat - unmap buffer before free for DH (PED-6401).
  - crypto: qat - update slice mask for 4xxx devices (PED-6401).
  - crypto: qat - set deprecated capabilities as reserved
    (PED-6401).
  - crypto: qat - add missing function declaration in adf_dbgfs.h
    (PED-6401).
  - crypto: qat - move dbgfs init to separate file (PED-6401).
  - crypto: qat - drop redundant adf_enable_aer() (PED-6401).
  - crypto: qat - fix apply custom thread-service mapping for dc
    service (PED-6401).
  - crypto: qat - add support for 402xx devices (PED-6401).
  - crypto: qat - make state machine functions static (PED-6401).
  - crypto: qat - refactor device restart logic (PED-6401).
  - crypto: qat - replace state machine calls (PED-6401).
  - crypto: qat - fix concurrency issue when device state changes
    (PED-6401).
  - crypto: qat - delay sysfs initialization (PED-6401).
  - crypto: qat - Include algapi.h for low-level Crypto API
    (PED-6401).
  - crypto: qat - drop log level of msg in get_instance_node()
    (PED-6401).
  - Documentation: qat: change kernel version (PED-6401).
  - crypto: qat - add qat_zlib_deflate (PED-6401).
  - crypto: qat - extend buffer list logic interface (PED-6401).
  - crypto: qat - fix spelling mistakes from 'bufer' to 'buffer'
    (PED-6401).
  - crypto: qat - remove ADF_STATUS_PF_RUNNING flag from probe
    (PED-6401).
  - Documentation: qat: rewrite description (PED-6401).
  - commit 3c119b1


author: oneukum@suse.com
changelog:
  - net: usb: dm9601: fix uninitialized variable use in
    dm9601_mdio_read (git-fixes).
  - commit 236df4a


author: lhenriques@suse.de
changelog:
  - ceph: fix type promotion bug on 32bit systems (bsc#1216324).
  - libceph: use kernel_connect() (bsc#1216323).
  - ceph: fix incorrect revoked caps assert in ceph_fill_file_size()
    (bsc#1216322).
  - commit b0e62f5


author: denis.kirjanov@suse.com
changelog:
  - netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with
    bound set/chain (git-fixes).
  - commit 2e62a61


author: denis.kirjanov@suse.com
changelog:
  - netfilter: nf_tables: skip immediate deactivate in
    _PREPARE_ERROR (CVE-2023-39193 bsc#1215860).
  - commit 6c937af


author: oneukum@suse.com
changelog:
  - usb: typec: ucsi: Clear EVENT_PENDING bit if ucsi_send_command
    fails (git-fixes).
  - commit a60f061


author: petr.pavlu@suse.com
changelog:
  - Update config files: unset CONFIG_DEBUG_FORCE_FUNCTION_ALIGN_64B
    for Arm
    Configuration option CONFIG_DEBUG_FORCE_FUNCTION_ALIGN_64B=y is used
    only in the armv7hl + arm64 configurations and appears to be a relic
    from the update procedure in commit 98da1c5f42d ("SLE15-SP4: Update the
    base kernel version to 5.14.").
    Unset it because the option is intended for debugging, not really useful
    for production and makes the text size of vmlinux unnecessarily bigger
    by ~10%
  - commit 4229357


author: jgross@suse.com
changelog:
  - KVM: x86/mmu: Reconstruct shadow page root if the guest PDPTEs
    is changed (git-fixes).
  - commit 1d58a92


author: jgross@suse.com
changelog:
  - KVM: SVM: Don't kill SEV guest if SMAP erratum triggers in
    usermode (git-fixes).
  - commit 5316d19


author: denis.kirjanov@suse.com
changelog:
  - netfilter: nf_tables: unbind non-anonymous set if rule
    construction fails (git-fixes).
  - commit b7f718b


author: aabdallah@suse.de
changelog:
  - platform/x86/intel/vsec: Rework early hardware code
    (bsc#1216202).
  - Refresh
    patches.suse/platform-x86-intel-pmt-Sapphire-Rapids-PMT-errata-fi.patch.
  - Refresh
    patches.suse/platform-x86-intel-vsec-Add-support-for-Raptor-Lake.patch.
  - commit d4b2cf1


author: tiwai@suse.de
changelog:
  - regmap: fix NULL deref on lookup (git-fixes).
  - usb: typec: altmodes/displayport: Signal hpd low when exiting
    mode (git-fixes).
  - usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer
    (git-fixes).
  - usb: gadget: udc-xilinx: replace memcpy with memcpy_toio
    (git-fixes).
  - usb: dwc3: Soft reset phy on probe for host (git-fixes).
  - usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap
    call (git-fixes).
  - usb: musb: Get the musb_qh poniter after musb_giveback
    (git-fixes).
  - usb: musb: Modify the "HWVers" register address (git-fixes).
  - usb: cdnsp: Fixes issue with dequeuing not queued requests
    (git-fixes).
  - iio: pressure: ms5611: ms5611_prom_is_valid false negative bug
    (git-fixes).
  - iio: pressure: dps310: Adjust Timeout Settings (git-fixes).
  - iio: pressure: bmp280: Fix NULL pointer exception (git-fixes).
  - counter: microchip-tcb-capture: Fix the use of internal GCLK
    logic (git-fixes).
  - Input: psmouse - fix fast_reconnect function for PS/2 mode
    (git-fixes).
  - dmaengine: stm32-mdma: abort resume if no ongoing transfer
    (git-fixes).
  - dmaengine: mediatek: Fix deadlock caused by synchronize_irq()
    (git-fixes).
  - dmaengine: idxd: use spin_lock_irqsave before
    wait_event_lock_irq (git-fixes).
  - drm/msm/dpu: change _dpu_plane_calc_bw() to use u64 to avoid
    overflow (git-fixes).
  - drm/msm/dsi: fix irq_of_parse_and_map() error checking
    (git-fixes).
  - drm/msm/dsi: skip the wait for video mode done if not applicable
    (git-fixes).
  - drm/msm/dp: do not reinitialize phy unless retry during link
    training (git-fixes).
  - drm/vmwgfx: fix typo of sizeof argument (git-fixes).
  - nfc: nci: assert requested protocol is valid (git-fixes).
  - ieee802154: ca8210: Fix a potential UAF in ca8210_probe
    (git-fixes).
  - pinctrl: renesas: rzn1: Enable missing PINMUX (git-fixes).
  - ALSA: hda/realtek: Change model for Intel RVP board (git-fixes).
  - commit 7f63276


author: tiwai@suse.de
changelog:
  - thunderbolt: Restart XDomain discovery handshake after failure
    (git-fixes).
  - ASoC: amd: yc: Fix non-functional mic on Lenovo 82YM
    (git-fixes).
  - commit 82c941d


author: mgorman@suse.de
changelog:
  - sched/deadline,rt: Remove unused parameter from
    pick_next_[rt|dl]_entity() (git fixes (sched)).
  - Refresh
    patches.suse/sched-rt-pick_next_rt_entity-check-list_entry.patch.
  - commit d7f894e


author: mgorman@suse.de
changelog:
  - blacklist.conf: KABI hazard, only backport in response to a customer bug to justify the complexity
  - commit 96bc817


author: mgorman@suse.de
changelog:
  - sched/rt: Fix live lock between select_fallback_rq() and RT push
    (git fixes (sched)).
  - sched/rt: Fix sysctl_sched_rr_timeslice intial value (git fixes
    (sched)).
  - commit a2350c1


author: neilb@suse.de
changelog:
  - Refresh
    patches.suse/NFS-Fix-error-handling-for-O_DIRECT-write-scheduling.patch.
    This patch was backported badly and caused data corruption with O_DIRECT
    writes to NFS.
  - commit d71869e


author: tiwai@suse.de
changelog:
  - net: rfkill: gpio: prevent value glitch during probe
    (git-fixes).
  - net: usb: smsc95xx: Fix an error code in smsc95xx_reset()
    (git-fixes).
  - gve: Do not fully free QPL pages on prefill errors (git-fixes).
  - Bluetooth: hci_event: Fix using memcmp when comparing keys
    (git-fixes).
  - Bluetooth: Fix a refcnt underflow problem for hci_conn
    (git-fixes).
  - Bluetooth: hci_event: Ignore NULL link key (git-fixes).
  - nfc: nci: fix possible NULL pointer dereference in
    send_acknowledge() (git-fixes).
  - thunderbolt: Check that lane 1 is in CL0 before enabling lane
    bonding (git-fixes).
  - thunderbolt: Workaround an IOMMU fault on certain systems with
    Intel Maple Ridge (git-fixes).
  - Input: powermate - fix use-after-free in
    powermate_config_complete (git-fixes).
  - Input: xpad - add PXN V900 support (git-fixes).
  - Input: goodix - ensure int GPIO is in input for gpio_count ==
    1 && gpio_int_idx == 0 case (git-fixes).
  - ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA
    (git-fixes).
  - drm/amdgpu: add missing NULL check (git-fixes).
  - drm/amd/display: Don't set dpms_off for seamless boot
    (git-fixes).
  - pinctrl: avoid unsafe code pattern in find_pinctrl()
    (git-fixes).
  - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect
    (git-fixes).
  - ALSA: usb-audio: Fix microphone sound on Opencomm2 Headset
    (git-fixes).
  - commit e8f9edc


author: tiwai@suse.de
changelog:
  - usb: hub: Guard against accesses to uninitialized BOS
    descriptors (git-fixes).
  - drm/atomic-helper: relax unregistered connector check
    (git-fixes).
  - ALSA: usb-audio: Fix microphone sound on Nexigo webcam
    (git-fixes).
  - ALSA: hda/realtek - ALC287 merge RTK codec with CS CS35L41 AMP
    (git-fixes).
  - ALSA: hda/realtek - Fixed two speaker platform (git-fixes).
  - ALSA: hda/realtek - ALC287 I2S speaker platform support
    (git-fixes).
  - ALSA: hda: intel-dsp-cfg: add LunarLake support (git-fixes).
  - xhci: Keep interrupt disabled in initialization until host is
    running (git-fixes).
  - commit ebb1cf8


author: jwiesner@suse.de
changelog:
  - net: sched: fixed barrier to prevent skbuff sticking in qdisc
    backlog (bsc#1216345).
  - commit 839637c


author: jwiesner@suse.de
changelog:
  - net: sched: add barrier to fix packet stuck problem for lockless
    qdisc (bsc#1216345).
  - commit 508758e


author: jwiesner@suse.de
changelog:
  - net/sched: fix netdevice reference leaks in
    attach_default_qdiscs() (git-fixes).
  - commit 31c27cf


author: mwilck@suse.com
changelog:
  - qedf: Wait for stag work during unload (bsc#1214852).
  - qedf: Don't process stag work during unload (bsc#1214852).
  - scsi: qedf: Remove unused declaration (bsc#1214852).
  - scsi: qedf: Remove unused 'num_handled' variable (bsc#1214852).
  - scsi: qedf: Remove set but unused variable 'page' (bsc#1214852).
  - commit 21e43de


author: tiwai@suse.de
changelog:
  - ACPI: irq: Fix incorrect return value in acpi_register_gsi()
    (git-fixes).
  - Revert "pinctrl: avoid unsafe code pattern in find_pinctrl()"
    (git-fixes).
  - mtd: rawnand: qcom: Unmap the right resource upon probe failure
    (git-fixes).
  - mtd: rawnand: pl353: Ensure program page operations are
    successful (git-fixes).
  - mtd: rawnand: arasan: Ensure program page operations are
    successful (git-fixes).
  - mtd: spinand: micron: correct bitmask for ecc status
    (git-fixes).
  - mtd: physmap-core: Restore map_rom fallback (git-fixes).
  - mtd: rawnand: marvell: Ensure program page operations are
    successful (git-fixes).
  - mmc: mtk-sd: Use readl_poll_timeout_atomic in msdc_reset_hw
    (git-fixes).
  - mmc: core: sdio: hold retuning if sdio in 1-bit mode
    (git-fixes).
  - ASoC: codecs: wcd938x-sdw: fix runtime PM imbalance on probe
    errors (git-fixes).
  - ASoC: codecs: wcd938x-sdw: fix use after free on driver unbind
    (git-fixes).
  - ASoC: codecs: wcd938x: fix unbind tear down order (git-fixes).
  - ASoC: codecs: wcd938x: drop bogus bind error handling
    (git-fixes).
  - ASoC: pxa: fix a memory leak in probe() (git-fixes).
  - drm/i915: Retry gtt fault when out of fence registers
    (git-fixes).
  - commit 766bf5d


author: mfranc@suse.cz
changelog:
  - KVM: s390: fix gisa destroy operation might lead to cpu stalls
    (git-fixes bsc#1216512).
  - commit 3976fa9


author: oneukum@suse.com
changelog:
  - Update
    patches.suse/USB-ene_usb6250-Allocate-enough-memory-for-full-obje.patch
    (bsc#1216051 CVE-2023-45862).
    Retroactively recognized as a security issue
  - commit 716929e


author: mwilck@suse.com
changelog:
  - nvme-fc: Prevent null pointer dereference in
    nvme_fc_io_getuuid() (bsc#1214842).
  - commit 3b513db


author: lduncan@suse.com
changelog:
  - scsi: iscsi_tcp: restrict to TCP sockets (git-fixes).
  - scsi: pm8001: Setup IRQs on resume (git-fixes).
  - scsi: mpt3sas: Perform additional retries if doorbell read
    returns 0 (git-fixes).
  - scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock
    (git-fixes).
  - scsi: qedf: Do not touch __user pointer in
    qedf_dbg_fp_int_cmd_read() directly (git-fixes).
  - scsi: qedf: Do not touch __user pointer in
    qedf_dbg_debug_cmd_read() directly (git-fixes).
  - scsi: qedf: Do not touch __user pointer in
    qedf_dbg_stop_io_on_error_cmd_read() directly (git-fixes).
  - scsi: qla4xxx: Add length check when parsing nlattrs
    (git-fixes).
  - scsi: be2iscsi: Add length check when parsing nlattrs
    (git-fixes).
  - scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param()
    (git-fixes).
  - scsi: iscsi: Add length check for nlattr payload (git-fixes).
  - scsi: qedi: Fix potential deadlock on &qedi_percpu->p_work_lock
    (git-fixes).
  - scsi: mpi3mr: Propagate sense data for admin queue SCSI I/O
    (git-fixes).
  - net: use sk_is_tcp() in more places (git-fixes).
  - commit 24cbf21


author: ohering@suse.de
changelog:
  - x86/mm: Print the encryption features correctly when a paravisor
    is present (bsc#1206453).
  - commit d1a6274


author: tiwai@suse.de
changelog:
  - phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins
    (git-fixes).
  - phy: mapphone-mdm6600: Fix runtime PM for remove (git-fixes).
  - phy: mapphone-mdm6600: Fix runtime disable on probe (git-fixes).
  - gpio: vf610: set value before the direction to avoid a glitch
    (git-fixes).
  - platform/surface: platform_profile: Propagate error if profile
    registration fails (git-fixes).
  - platform/x86: asus-wmi: Map 0x2a code, Ignore 0x2b and 0x2c
    events (git-fixes).
  - platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from
    0x20 to 0x2e (git-fixes).
  - USB: serial: option: add Fibocom to DELL custom modem FM101R-GL
    (git-fixes).
  - USB: serial: option: add entry for Sierra EM9191 with new
    firmware (git-fixes).
  - USB: serial: option: add Telit LE910C4-WWX 0x1035 composition
    (git-fixes).
  - mmc: core: Capture correct oemid-bits for eMMC cards
    (git-fixes).
  - Bluetooth: hci_sock: Correctly bounds check and pad
    HCI_MON_NEW_INDEX name (git-fixes).
  - Bluetooth: avoid memcmp() out of bounds warning (git-fixes).
  - Bluetooth: hci_sock: fix slab oob read in create_monitor_event
    (git-fixes).
  - Bluetooth: hci_event: Fix coding style (git-fixes).
  - Bluetooth: Reject connection with the device which has same
    BD_ADDR (git-fixes).
  - Bluetooth: vhci: Fix race when opening vhci device (git-fixes).
  - platform/x86: touchscreen_dmi: Add info for the Positivo C4128B
    (git-fixes).
  - drm: panel-orientation-quirks: Add quirk for One Mix 2S
    (git-fixes).
  - HID: multitouch: Add required quirk for Synaptics 0xcd7e device
    (git-fixes).
  - HID: holtek: fix slab-out-of-bounds Write in
    holtek_kbd_input_event (git-fixes).
  - wifi: cfg80211: avoid leaking stack data into trace (git-fixes).
  - wifi: mac80211: allow transmitting EAPOL frames with tainted
    key (git-fixes).
  - wifi: cfg80211: Fix 6GHz scan configuration (git-fixes).
  - wifi: iwlwifi: Ensure ack flag is properly cleared (git-fixes).
  - wifi: mwifiex: Sanity check tlv_len and tlv_bitmap_len
    (git-fixes).
  - Bluetooth: Avoid redundant authentication (git-fixes).
  - Bluetooth: btusb: add shutdown function for QCA6174 (git-fixes).
  - i2c: mux: Avoid potential false error message in
    i2c_mux_add_adapter (git-fixes).
  - gpio: timberdale: Fix potential deadlock on &tgpio->lock
    (git-fixes).
  - commit b480af6


author: tiwai@suse.de
changelog:
  - ALSA: hda/realtek - Fixed ASUS platform headset Mic issue
    (git-fixes).
  - ALSA: hda/realtek: Add quirk for ASUS ROG GU603ZV (git-fixes).
  - ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq5xxx
    (git-fixes).
  - drm/mediatek: Correctly free sg_table in gem prime vmap
    (git-fixes).
  - drm/amd/pm: add unique_id for gc 11.0.3 (git-fixes).
  - commit ad38bcf


author: spradhan@suse.de
changelog:
  - btrfs: don't start transaction for scrub if the fs is mounted read-only (bsc#1214874).
  - commit cc8e6f1


author: neilb@suse.de
changelog:
  - remove unnecessary WARN_ON_ONCE() (bsc#1214823).
  - NFSD: Never call nfsd_file_gc() in foreground paths
    (bsc#1215545).
  - commit d81dfc3


author: vkarasulli@suse.de
changelog:
  - Update
    patches.suse/0001-x86-sev-Disable-MMIO-emulation-from-user-mode.patch
    (bsc#1212649 CVE-2023-46813).
  - Update
    patches.suse/0002-x86-sev-Check-IOBM-for-IOIO-exceptions-from-user-spa.patch
    (bsc#1212649 CVE-2023-46813).
  - Update
    patches.suse/0003-x86-sev-Check-for-user-space-IOIO-pointing-to-kernel.patch
    (bsc#1212649 CVE-2023-46813).
  - commit dd6a315


author: denis.kirjanov@suse.com
changelog:
  - netfilter: nf_tables: skip bound chain on rule flush
    (bsc#1215095 CVE-2023-3777).
  - commit afb7c25


author: tiwai@suse.de
changelog:
  - iio: exynos-adc: request second interupt only when touchscreen
    mode is used (git-fixes).
  - iio: adc: xilinx-xadc: Correct temperature offset/scale for
    UltraScale (git-fixes).
  - iio: adc: xilinx-xadc: Don't clobber preset voltage/temperature
    thresholds (git-fixes).
  - misc: fastrpc: Clean buffers on remote invocation failures
    (git-fixes).
  - i2c: stm32f7: Fix PEC handling in case of SMBUS transfers
    (git-fixes).
  - i2c: muxes: i2c-mux-gpmux: Use of_get_i2c_adapter_by_node()
    (git-fixes).
  - i2c: muxes: i2c-demux-pinctrl: Use of_get_i2c_adapter_by_node()
    (git-fixes).
  - i2c: muxes: i2c-mux-pinctrl: Use of_get_i2c_adapter_by_node()
    (git-fixes).
  - i2c: aspeed: Fix i2c bus hang in slave read (git-fixes).
  - drm/i915/pmu: Check if pmu is closed before stopping event
    (git-fixes).
  - firmware/imx-dsp: Fix use_after_free in imx_dsp_setup_channels()
    (git-fixes).
  - r8152: Release firmware if we have an error in probe
    (git-fixes).
  - r8152: Cancel hw_phy_work if we have an error in probe
    (git-fixes).
  - r8152: Run the unload routine if we have errors during probe
    (git-fixes).
  - r8152: Increase USB control msg timeout to 5000ms as per spec
    (git-fixes).
  - net: usb: smsc95xx: Fix uninit-value access in smsc95xx_read_reg
    (git-fixes).
  - net: ieee802154: adf7242: Fix some potential buffer overflow
    in adf7242_stats_show() (git-fixes).
  - treewide: Spelling fix in comment (git-fixes).
  - commit e69ab42


author: tiwai@suse.de
changelog:
  - drm/amd: Disable ASPM for VI w/ all Intel systems (git-fixes).
  - drm/dp_mst: Fix NULL deref in
    get_mst_branch_device_by_guid_helper() (git-fixes).
  - commit 686c756


author: tiwai@suse.de
changelog:
  - drm/amd: Move helper for dynamic speed switch check out of smu13
    (git-fixes).
  - Refresh
    patches.suse/drm-amd-Disable-S-G-for-APUs-when-64GB-or-more-host-.patch.
  - commit 5a82097


author: nik.borisov@suse.com
changelog:
  - x86/fpu: Set X86_FEATURE_OSXSAVE feature after enabling OSXSAVE in CR4 (git-fixes).
  - commit 4f89ad9


author: nik.borisov@suse.com
changelog:
  - x86/sev: Use the GHCB protocol when available for SNP CPUID requests (git-fixes).
  - commit 589a255


author: mkoutny@suse.com
changelog:
  - blacklist.conf: Add d243b34459ce kernel/fork: beware of __put_task_struct() calling context
  - commit 6b082e7


author: krisman@suse.de
changelog:
  - io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
    (bsc#1216693 CVE-2023-46862).
  - commit 54290b6


author: krisman@suse.de
changelog:
  - io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid
    (bsc#1216693 CVE-2023-46862).
  - commit 7e92d76


author: jslaby@suse.cz
changelog:
  - rpm/check-for-config-changes: add AS_WRUSS to IGNORED_CONFIGS_RE
    Add AS_WRUSS as an IGNORED_CONFIGS_RE entry in check-for-config-changes
    to fix build on x86_32.
    There was a fix submitted to upstream but it was not accepted:
    https://lore.kernel.org/all/20231031140504.GCZUEJkMPXSrEDh3MA@fat_crate.local/
    So carry this in IGNORED_CONFIGS_RE instead.
  - commit 7acca37


author: tiwai@suse.de
changelog:
  - clk: npcm7xx: Fix incorrect kfree (git-fixes).
  - clk: keystone: pll: fix a couple NULL vs IS_ERR() checks
    (git-fixes).
  - clk: qcom: ipq6018: drop the CLK_SET_RATE_PARENT flag from
    PLL clocks (git-fixes).
  - clk: qcom: config IPQ_APSS_6018 should depend on QCOM_SMEM
    (git-fixes).
  - clk: qcom: gcc-sm8150: Fix gcc_sdcc2_apps_clk_src (git-fixes).
  - clk: qcom: mmcc-msm8998: Fix the SMMU GDSC (git-fixes).
  - clk: qcom: mmcc-msm8998: Don't check halt bit on some branch
    clks (git-fixes).
  - clk: qcom: clk-rcg2: Fix clock rate overflow for high parent
    frequencies (git-fixes).
  - clk: imx: imx8qxp: Fix elcdif_pll clock (git-fixes).
  - clk: imx: imx8mq: correct error handling path (git-fixes).
  - clk: imx: Select MXC_CLK for CLK_IMX8QXP (git-fixes).
  - clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
    (git-fixes).
  - clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
    (git-fixes).
  - clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
    (git-fixes).
  - clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
    (git-fixes).
  - clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
    (git-fixes).
  - clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
    (git-fixes).
  - platform/x86: wmi: Fix probe failure when failing to register
    WMI devices (git-fixes).
  - hwmon: (coretemp) Fix potentially truncated sysfs attribute name
    (git-fixes).
  - spi: nxp-fspi: use the correct ioremap function (git-fixes).
  - spi: tegra: Fix missing IRQ check in tegra_slink_probe()
    (git-fixes).
  - regmap: debugfs: Fix a erroneous check after snprintf()
    (git-fixes).
  - gpio: mockup: remove unused field (git-fixes).
  - gpio: mockup: fix kerneldoc (git-fixes).
  - PM: hibernate: Use __get_safe_page() rather than touching the
    list (git-fixes).
  - PM / devfreq: rockchip-dfi: Make pmu regmap mandatory
    (git-fixes).
  - ACPI: sysfs: Fix create_pnp_modalias() and create_of_modalias()
    (git-fixes).
  - ACPI: FPDT: properly handle invalid FPDT subtables (git-fixes).
  - thermal: core: prevent potential string overflow (git-fixes).
  - wifi: ath11k: fix htt pktlog locking (git-fixes).
  - wifi: ath11k: fix dfs radar event locking (git-fixes).
  - wifi: ath11k: fix temperature event locking (git-fixes).
  - wifi: iwlwifi: empty overflow queue during flush (git-fixes).
  - wifi: mt76: mt7603: rework/fix rx pse hang check (git-fixes).
  - wifi: rtlwifi: fix EDCA limit set by BT coexistence (git-fixes).
  - wifi: rtw88: debug: Fix the NULL vs IS_ERR() bug for
    debugfs_create_file() (git-fixes).
  - wifi: iwlwifi: Use FW rate for non-data frames (git-fixes).
  - wifi: iwlwifi: honor the enable_ini value (git-fixes).
  - wifi: mac80211: fix # of MSDU in A-MSDU calculation (git-fixes).
  - can: dev: can_put_echo_skb(): don't crash kernel if
    can_priv::echo_skb is accessed out of bounds (git-fixes).
  - can: dev: can_restart(): fix race condition between controller
    restart and netif_carrier_on() (git-fixes).
  - can: dev: can_restart(): don't crash kernel if carrier is OK
    (git-fixes).
  - can: sja1000: Fix comment (git-fixes).
  - drm/gud: Use size_add() in call to struct_size() (git-fixes).
  - commit 23d4c08


author: ggherdovich@suse.cz
changelog:
  - platform/x86/intel: tpmi: Fix double free in
    tpmi_create_device() (bsc#1217147).
  - commit b426c58


author: ggherdovich@suse.cz
changelog:
  - platform/x86: intel-uncore-frequency: Move to intel sub-directory (bsc#1217147).
  - Refresh patches.suse/platform-x86-intel-Move-intel_pmt-from-MFD-to-Auxili.patch.
  - Refresh patches.suse/platform-x86-Add-Intel-Software-Defined-Silicon-driv.patch.
  - Refresh patches.suse/platform-x86-intel-uncore-freq-add-emerald-rapids-support.patch.
  - commit 63123cb


author: ggherdovich@suse.cz
changelog:
  - platform/x86/intel/uncore-freq: Move to uncore-frequency folder (bsc#1217147).
  - Refresh patches.suse/platform-x86-intel-uncore-freq-add-emerald-rapids-support.patch.
  - Refresh patches.suse/platform-x86-intel-Intel-TPMI-enumeration-driver.patch.
  - commit d9a88ed


author: ggherdovich@suse.cz
changelog:
  - platform/x86/intel-uncore-freq: Split common and enumeration
    part (bsc#1217147).
  - Refresh
    patches.suse/platform-x86-intel-uncore-freq-add-emerald-rapids-support.patch.
  - commit 32ecc8f


author: ggherdovich@suse.cz
changelog:
  - platform/x86/intel-uncore-freq: Support for cluster level
    controls (bsc#1217147).
  - commit cf6238b


author: ggherdovich@suse.cz
changelog:
  - platform/x86: intel-uncore-frequency: use default_groups in
    kobj_type (bsc#1217147).
  - commit 0f6d491


author: ggherdovich@suse.cz
changelog:
  - platform/x86/intel/uncore-freq: Use sysfs API to create
    attributes (bsc#1217147).
  - commit 692fa76


author: ggherdovich@suse.cz
changelog:
  - platform/x86/intel/uncore-freq: Display uncore current frequency
    (bsc#1217147).
  - commit 55dccde


author: ggherdovich@suse.cz
changelog:
  - platform/x86: intel-uncore-freq: fix uncore_freq_common_init()
    error codes (bsc#1217147).
  - commit 419a1eb


author: ggherdovich@suse.cz
changelog:
  - platform/x86: intel-uncore-freq: Prevent driver loading in
    guests (bsc#1217147).
  - commit 92fbb85


author: ggherdovich@suse.cz
changelog:
  - platform/x86: intel-uncore-freq: Use sysfs_emit() to instead
    of scnprintf() (bsc#1217147).
  - commit 03614e1


author: ggherdovich@suse.cz
changelog:
  - platform/x86/intel-uncore-freq: Uncore frequency control via
    TPMI (bsc#1217147).
  - commit fbe3b66


author: ggherdovich@suse.cz
changelog:
  - platform/x86/intel-uncore-freq: tpmi: Provide cluster level
    control (bsc#1217147).
  - commit 80ccc79


author: ggherdovich@suse.cz
changelog:
  - platform/x86: intel-uncore-freq: Conditionally create attribute
    for read frequency (bsc#1217147).
  - commit 6f5022b


author: tiwai@suse.de
changelog:
  - selftests/resctrl: Reduce failures due to outliers in MBA/MBM
    tests (git-fixes).
  - selftests/resctrl: Ensure the benchmark commands fits to its
    array (git-fixes).
  - selftests/pidfd: Fix ksft print formats (git-fixes).
  - soc: qcom: llcc: Handle a second device without data corruption
    (git-fixes).
  - clk: scmi: Free scmi_clk allocated when the clocks with invalid
    info are skipped (git-fixes).
  - mmc: meson-gx: Remove setting of CMD_CFG_ERROR (git-fixes).
  - drm/vc4: fix typo (git-fixes).
  - drm/rockchip: Fix type promotion bug in rockchip_gem_iommu_map()
    (git-fixes).
  - drm/amd/pm: Handle non-terminated overdrive commands
    (git-fixes).
  - drm/mediatek: Fix iommu fault during crtc enabling (git-fixes).
  - drm/mediatek: Fix iommu fault by swapping FBs after updating
    plane state (git-fixes).
  - drm/amd/display: remove useless check in should_enable_fbc()
    (git-fixes).
  - drm/radeon: possible buffer overflow (git-fixes).
  - drm/rockchip: cdn-dp: Fix some error handling paths in
    cdn_dp_probe() (git-fixes).
  - drm/bridge: tc358768: Fix use of uninitialized variable
    (git-fixes).
  - drm/bridge: lt8912b: Add missing drm_bridge_attach call
    (git-fixes).
  - drm/bridge: Fix kernel-doc typo in desc of output_bus_cfg in
    drm_bridge_state (git-fixes).
  - drm/rockchip: vop: Fix call to crtc reset helper (git-fixes).
  - drm/rockchip: vop: Fix reset of state in duplicate state crtc
    funcs (git-fixes).
  - commit 811f56a


author: msuchanek@suse.de
changelog:
  - powerpc/vas: Limit open window failure messages in log bufffer
    (bsc#1216687 ltc#203927).
  - commit 46c0aba


author: tiwai@suse.de
changelog:
  - ARM: 9321/1: memset: cast the constant byte to unsigned char
    (git-fixes).
  - leds: trigger: ledtrig-cpu:: Fix 'output may be truncated'
    issue for 'cpu' (git-fixes).
  - leds: pwm: Don't disable the PWM when the LED should be off
    (git-fixes).
  - leds: turris-omnia: Do not use SMBUS calls (git-fixes).
  - mfd: arizona-spi: Set pdata.hpdet_channel for ACPI enumerated
    devs (git-fixes).
  - mfd: dln2: Fix double put in dln2_probe (git-fixes).
  - mfd: core: Ensure disabled devices are skipped without aborting
    (git-fixes).
  - i2c: core: Run atomic i2c xfer when !preemptible (git-fixes).
  - ASoC: Intel: Skylake: Fix mem leak when parsing UUIDs fails
    (git-fixes).
  - ASoC: fsl: Fix PM disable depth imbalance in fsl_easrc_probe
    (git-fixes).
  - ASoC: ams-delta.c: use component after check (git-fixes).
  - ASoC: fsl: mpc5200_dma.c: Fix warning of Function parameter
    or member not described (git-fixes).
  - ASoC: codecs: wsa-macro: fix uninitialized stack variables
    with name prefix (git-fixes).
  - ALSA: hda: cs35l41: Undo runtime PM changes at driver exit time
    (git-fixes).
  - ALSA: hda: cs35l41: Fix unbalanced pm_runtime_get() (git-fixes).
  - ASoC: cs35l41: Undo runtime PM changes at driver exit time
    (git-fixes).
  - ASoC: cs35l41: Verify PM runtime resume errors in IRQ handler
    (git-fixes).
  - hid: cp2112: Fix duplicate workqueue initialization (git-fixes).
  - PCI/sysfs: Protect driver's D3cold preference from user space
    (git-fixes).
  - PCI: keystone: Don't discard .probe() callback (git-fixes).
  - PCI: keystone: Don't discard .remove() callback (git-fixes).
  - PCI: exynos: Don't discard .remove() callback (git-fixes).
  - PCI/ASPM: Fix L1 substate handling in aspm_attr_store_common()
    (git-fixes).
  - commit ee1f9b6


author: vbabka@suse.cz
changelog:
  - mm/hmm: fault non-owner device private entries (bsc#1216844,
    jsc#PED-7237, git-fixes).
  - commit 32900e8


author: tiwai@suse.de
changelog:
  - ASoC: SOF: core: Ensure sof_ops_free() is still called when
    probe never ran (git-fixes).
  - PCI: vmd: Correct PCI Header Type Register's multi-function
    check (git-fixes).
  - drm/bridge: lt9611uxc: fix the race in the error path
    (git-fixes).
  - commit 1b39932


author: tiwai@suse.de
changelog:
  - i3c: master: svc: fix SDA keep low when polling IBIWON timeout
    happen (git-fixes).
  - i3c: master: svc: fix check wrong status register in irq handler
    (git-fixes).
  - i3c: master: svc: fix ibi may not return mandatory data byte
    (git-fixes).
  - i3c: master: svc: fix wrong data return when IBI happen during
    start frame (git-fixes).
  - i3c: master: svc: fix race condition in ibi work thread
    (git-fixes).
  - i3c: Fix potential refcount leak in
    i3c_master_register_new_i3c_devs (git-fixes).
  - i3c: master: cdns: Fix reading status register (git-fixes).
  - mtd: rawnand: arasan: Include ECC syndrome along with in-band
    data while checking for ECC failure (git-fixes).
  - modpost: fix tee MODULE_DEVICE_TABLE built on big-endian host
    (git-fixes).
  - dmaengine: stm32-mdma: correct desc prep when channel running
    (git-fixes).
  - dmaengine: pxa_dma: Remove an erroneous BUG_ON() in
    pxad_free_desc() (git-fixes).
  - dmaengine: ti: edma: handle irq_of_parse_and_map() errors
    (git-fixes).
  - usb: raw-gadget: properly handle interrupted requests
    (git-fixes).
  - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm()
    (git-fixes).
  - xhci: Loosen RPM as default policy to cover for AMD xHC 1.1
    (git-fixes).
  - USB: usbip: fix stub_dev hub disconnect (git-fixes).
  - usb: chipidea: Simplify Tegra DMA alignment code (git-fixes).
  - usb: chipidea: Fix DMA overwrite for Tegra (git-fixes).
  - usb: dwc2: fix possible NULL pointer dereference caused by
    driver concurrency (git-fixes).
  - tty: n_gsm: fix race condition in status line change on dead
    connections (git-fixes).
  - tty: 8250: Add Brainboxes Oxford Semiconductor-based quirks
    (git-fixes).
  - tty: 8250: Fix up PX-803/PX-857 (git-fixes).
  - tty: 8250: Fix port count of PX-257 (git-fixes).
  - tty: 8250: Remove UC-257 and UC-431 (git-fixes).
  - tty/sysrq: replace smp_processor_id() with get_cpu()
    (git-fixes).
  - serial: exar: Revert "serial: exar: Add support for Sealevel
    7xxxC serial cards" (git-fixes).
  - tty: tty_jobctrl: fix pid memleak in disassociate_ctty()
    (git-fixes).
  - seq_buf: fix a misleading comment (git-fixes).
  - commit 9eaffc2


author: tiwai@suse.de
changelog:
  - Revert AMDGPU patches that caused a regression (bsc#1215802)
    Deleted:
    patches.suse/drm-amdgpu-Remove-unnecessary-domain-argument.patch
    patches.suse/drm-amdgpu-add-vram-reservation-based-on-vram_usageb.patch
  - commit 7bd1588


author: tiwai@suse.de
changelog:
  - media: venus: hfi_parser: Add check to keep the number of
    codecs within range (git-fixes).
  - media: venus: hfi: add checks to handle capabilities from
    firmware (git-fixes).
  - media: venus: hfi: fix the check to handle session buffer
    requirement (git-fixes).
  - media: venus: hfi: add checks to perform sanity on queue
    pointers (git-fixes).
  - media: siano: Drop unnecessary error check for
    debugfs_create_dir/file() (git-fixes).
  - staging: media: ipu3: remove ftrace-like logging (git-fixes).
  - media: lirc: drop trailing space from scancode transmit
    (git-fixes).
  - media: sharp: fix sharp encoding (git-fixes).
  - media: ccs: Correctly initialise try compose rectangle
    (git-fixes).
  - media: cedrus: Fix clock/reset sequence (git-fixes).
  - media: vidtv: mux: Add check and kfree for kstrdup (git-fixes).
  - media: vidtv: psi: Add check for kstrdup (git-fixes).
  - media: bttv: fix use after free error due to btv->timeout timer
    (git-fixes).
  - media: i2c: max9286: Fix some redundant of_node_put() calls
    (git-fixes).
  - media: qcom: camss: Fix missing vfe_lite clocks check
    (git-fixes).
  - media: qcom: camss: Fix VFE-17x vfe_disable_output()
    (git-fixes).
  - media: qcom: camss: Fix vfe_get() error jump (git-fixes).
  - media: qcom: camss: Fix pm_domain_on sequence in probe
    (git-fixes).
  - commit b662ba0


author: tiwai@suse.de
changelog:
  - regmap: prevent noinc writes from clobbering cache (git-fixes).
  - pcmcia: ds: fix possible name leak in error path in
    pcmcia_device_add() (git-fixes).
  - pcmcia: ds: fix refcount leak in pcmcia_device_add()
    (git-fixes).
  - pcmcia: cs: fix possible hung task and memory leak pccardd()
    (git-fixes).
  - commit afd2c59


author: tiwai@suse.de
changelog:
  - usb: storage: set 1.50 as the lower bcdDevice for older "Super
    Top" compatibility (git-fixes).
  - tty: 8250: Add support for Intashield IX cards (git-fixes).
  - tty: 8250: Add support for additional Brainboxes PX cards
    (git-fixes).
  - tty: 8250: Add support for Intashield IS-100 (git-fixes).
  - tty: 8250: Add support for Brainboxes UP cards (git-fixes).
  - tty: 8250: Add support for additional Brainboxes UC cards
    (git-fixes).
  - ALSA: hda: intel-dsp-config: Fix JSL Chromebook quirk detection
    (git-fixes).
  - PCI: Prevent xHCI driver from claiming AMD VanGogh USB3 DRD
    device (git-fixes).
  - clk: Sanitize possible_parent_show to Handle Return Value of
    of_clk_get_parent_name (git-fixes).
  - r8152: Check for unplug in r8153b_ups_en() / r8153c_ups_en()
    (git-fixes).
  - r8152: Check for unplug in rtl_phy_patch_request() (git-fixes).
  - ASoC: rt5650: fix the wrong result of key button (git-fixes).
  - Input: synaptics-rmi4 - handle reset delay when using SMBus
    trsnsport (git-fixes).
  - dmaengine: ste_dma40: Fix PM disable depth imbalance in
    d40_probe (git-fixes).
  - irqchip/stm32-exti: add missing DT IRQ flag translation
    (git-fixes).
  - ASoC: simple-card: fixup asoc_simple_probe() error handling
    (git-fixes).
  - can: isotp: handle wait_event_interruptible() return values
    (git-fixes).
  - can: isotp: isotp_bind(): return -EINVAL on incorrect CAN ID
    formatting (git-fixes).
  - can: isotp: remove re-binding of bound socket (git-fixes).
  - can: isotp: sanitize CAN ID checks in isotp_bind() (git-fixes).
  - can: isotp: set max PDU size to 64 kByte (git-fixes).
  - commit d668003


author: tiwai@suse.de
changelog:
  - can: isotp: add local echo tx processing for consecutive frames
    (git-fixes).
  - Refresh
    patches.suse/can-isotp-set-default-value-for-N_As-to-50-micro-sec.patch.
  - commit 6c424b2


author: tiwai@suse.de
changelog:
  - can: isotp: fix race between isotp_sendsmg() and isotp_release()
    (git-fixes).
  - Refresh
    patches.suse/can-isotp-isotp_sendmsg-fix-return-error-fix-on-TX-p.patch.
  - commit b988ee1


author: tiwai@suse.de
changelog:
  - ALSA: usb-audio: add quirk flag to enable native DSD for
    McIntosh devices (git-fixes).
  - drm/ttm: Reorder sys manager cleanup step (git-fixes).
  - drm/amdgpu: Reserve fences for VM update (git-fixes).
  - fbdev: uvesafb: Call cn_del_callback() at the end of
    uvesafb_exit() (git-fixes).
  - fbdev: atyfb: only use ioremap_uc() on i386 and ia64
    (git-fixes).
  - commit 74d9c92


author: tiwai@suse.de
changelog:
  - Update ath11k hibernation fix patch set (bsc#1207948)
    Refreshed patches from the latest subsystem tree
  - commit dc70c11


author: jack@suse.cz
changelog:
  - Add tag to
    patches.suse/RDMA-irdma-Prevent-zero-length-STAG-registration.patch
    (git-fixes CVE-2023-25775).
  - commit 3c6e962


author: tonyj@suse.de
changelog:
  - perf: Disallow mis-matched inherited group reads (bsc#1216584 CVE-2023-5717).
    Implement KABI fix for above
  - commit 6ca2dbc


author: tiwai@suse.de
changelog:
  - fbdev: fsl-diu-fb: mark wr_reg_wa() static (git-fixes).
  - fbdev: omapfb: Drop unused remove function (git-fixes).
  - drm/syncobj: fix DRM_SYNCOBJ_WAIT_FLAGS_WAIT_AVAILABLE
    (git-fixes).
  - drm/i915: Fix potential spectre vulnerability (git-fixes).
  - i915/perf: Fix NULL deref bugs with drm_dbg() calls (git-fixes).
  - ALSA: info: Fix potential deadlock at disconnection (git-fixes).
  - ASoC: hdmi-codec: register hpd callback on component probe
    (git-fixes).
  - spi: spi-zynq-qspi: add spi-mem to driver kconfig dependencies
    (git-fixes).
  - Revert "mmc: core: Capture correct oemid-bits for eMMC cards"
    (git-fixes).
  - mmc: vub300: fix an error code (git-fixes).
  - mmc: sdhci_am654: fix start loop index for TAP value parsing
    (git-fixes).
  - lsm: fix default return value for inode_getsecctx (git-fixes).
  - lsm: fix default return value for vm_enough_memory (git-fixes).
  - Input: synaptics-rmi4 - fix use after free in
    rmi_unregister_function() (git-fixes).
  - i2c: iproc: handle invalid slave state (git-fixes).
  - pwm: brcmstb: Utilize appropriate clock APIs in suspend/resume
    (git-fixes).
  - pwm: sti: Reduce number of allocations and drop usage of
    chip_data (git-fixes).
  - can: isotp: isotp_sendmsg(): fix TX state detection and wait
    behavior (git-fixes).
  - commit ba5a839


author: tbogendoerfer@suse.de
changelog:
  - igb: set max size RX buffer when store bad packet is enabled
    (bsc#1216259 CVE-2023-45871).
  - commit 15c91c9


author: mfranc@suse.cz
changelog:
  - s390/cmma: fix initial kernel address space page table walk
    (LTC#203997 bsc#1217086).
  - commit d8f4afa


author: mfranc@suse.cz
changelog:
  - s390/mm: add missing arch_set_page_dat() call to
    vmem_crst_alloc() (LTC#203997 bsc#1217086).
  - commit f15e0fe


author: mfranc@suse.cz
changelog:
  - s390/mm: add missing arch_set_page_dat() call to gmap
    allocations (LTC#203997 bsc#1217086).
  - commit b3d336b


author: mfranc@suse.cz
changelog:
  - s390/cmma: fix handling of swapper_pg_dir and invalid_pg_dir
    (LTC#203997 bsc#1217086).
  - commit 651d5ec


author: schwab@suse.de
changelog:
  - rpm/check-for-config-changes: add HAVE_SHADOW_CALL_STACK to IGNORED_CONFIGS_RE
    Not supported by our compiler.
  - commit eb32b5a


author: dwagner@suse.de
changelog:
  - scsi: qla2xxx: Use FIELD_GET() to extract PCIe capability fields
    (git-fixes).
  - scsi: qla2xxx: Fix double free of dsd_list during driver load
    (git-fixes).
  - commit 7802965


author: dwagner@suse.de
changelog:
  - scsi: lpfc: Update lpfc version to 14.2.0.15 (bsc#1217124).
  - scsi: lpfc: Introduce LOG_NODE_VERBOSE messaging flag
    (bsc#1217124).
  - scsi: lpfc: Validate ELS LS_ACC completion payload
    (bsc#1217124).
  - scsi: lpfc: Reject received PRLIs with only initiator fcn role
    for NPIV ports (bsc#1217124).
  - scsi: lpfc: Treat IOERR_SLI_DOWN I/O completion status the
    same as pci offline (bsc#1217124).
  - scsi: lpfc: Remove unnecessary zero return code assignment in
    lpfc_sli4_hba_setup (bsc#1217124).
  - commit 36a063a


author: mkoutny@suse.com
changelog:
  - blacklist.conf: Add 2ef269ef1ac0 cgroup/cpuset: Free DL BW in case can_attach() fails
  - commit 635fb82


author: tbogendoerfer@suse.de
changelog:
  - idpf: fix potential use-after-free in idpf_tso() (bsc#1215458).
  - PCI: Disable ATS for specific Intel IPU E2000 devices
    (bsc#1215458).
  - PCI: Extract ATS disabling to a helper function (bsc#1215458).
  - idpf: cancel mailbox work in error path (bsc#1215458).
  - idpf: set scheduling mode for completion queue (bsc#1215458).
  - idpf: add ethtool callbacks (bsc#1215458).
  - idpf: add singleq start_xmit and napi poll (bsc#1215458).
  - idpf: add RX splitq napi poll support (bsc#1215458).
  - idpf: add TX splitq napi poll support (bsc#1215458).
  - idpf: add splitq start_xmit (bsc#1215458).
  - idpf: initialize interrupts and enable vport (bsc#1215458).
  - idpf: configure resources for RX queues (bsc#1215458).
  - idpf: configure resources for TX queues (bsc#1215458).
  - idpf: add ptypes and MAC filter support (bsc#1215458).
  - idpf: add create vport and netdev configuration (bsc#1215458).
  - idpf: add core init and interrupt request (bsc#1215458).
  - idpf: add controlq init and reset checks (bsc#1215458).
  - idpf: add module register and probe functionality (bsc#1215458).
  - virtchnl: add virtchnl version 2 ops (bsc#1215458).
  - net: add macro netif_subqueue_completed_wake (bsc#1215458).
  - net: piggy back on the memory barrier in bql when waking queues
    (bsc#1215458).
  - net: provide macros for commonly copied lockless queue stop/wake
    code (bsc#1215458).
  - docs: net: use C syntax highlight in driver.rst (bsc#1215458).
  - docs: net: move the probe and open/close sections of driver.rst
    up (bsc#1215458).
  - docs: net: reformat driver.rst from a list to sections
    (bsc#1215458).
  - Documentation: networking: correct possessive "its"
    (bsc#1215458).
  - commit 0dd7c0b


author: tbogendoerfer@suse.de
changelog:
  - idpf: add SRIOV support and other ndo_ops (bsc#1215458).
  - Update config files.
  - supported.conf: marked idpf supported
  - commit 8518538


author: ohering@suse.de
changelog:
  - hv_netvsc: fix netvsc_send_completion to avoid multiple message
    length checks (git-fixes).
  - commit e571a42


author: mfranc@suse.cz
changelog:
  - s390/ipl: add missing secure/has_secure file to ipl type
    'unknown' (bsc#1214976 git-fixes).
  - commit 293b1d2


author: mfranc@suse.cz
changelog:
  - Update metadata
    patches.suse/s390-ipl-add-missing-secure-has_secure-file-to-ipl-type-unknown.patch
    (bsc#1214976 git-fixes).
  - commit f7140ce


author: mhocko@suse.com
changelog:
  - Update
    patches.suse/vringh-don-t-use-vringh_kiov_advance-in-vringh_iov_x.patch
    (git-fixes, bsc#1215710, CVE-2023-5158).
  - commit aba4986


author: tiwai@suse.de
changelog:
  - drm/amdgpu: Remove unnecessary domain argument (git-fixes).
  - drm/amdgpu: skip vram reserve on firmware_v2_2 for bare-metal
    (bsc#1215802).
  - drm/amdgpu: add drv_vram_usage_va for virt data exchange
    (bsc#1215802).
  - drm/amdgpu: add vram reservation based on
    vram_usagebyfirmware_v2_2 (git-fixes).
  - commit bcdadce


author: tiwai@suse.de
changelog:
  - ALSA: hda/realtek: Add quirks for HP Laptops (git-fixes).
  - ALSA: hda/realtek: Enable Mute LED on HP 255 G10 (git-fixes).
  - ALSA: hda/realtek - Enable internal speaker of ASUS K6500ZC
    (git-fixes).
  - ALSA: hda/realtek: Enable Mute LED on HP 255 G8 (git-fixes).
  - ALSA: hda/realtek - Add Dell ALC295 to pin fall back table
    (git-fixes).
  - commit fe6b179


author: tiwai@suse.de
changelog:
  - ALSA: hda/realtek: Add quirks for ASUS 2024 Zenbooks
    (git-fixes).
  - ALSA: hda: ASUS UM5302LA: Added quirks for cs35L41/10431A83
    on i2c bus (git-fixes).
  - ALSA: hda/realtek: Add support dual speaker for Dell
    (git-fixes).
  - ALSA: hda/realtek - ALC287 Realtek I2S speaker platform support
    (git-fixes).
  - commit 162ac9b


author: tiwai@suse.de
changelog:
  - fbdev: imsttfb: fix a resource leak in probe (git-fixes).
  - Fix termination state for idr_for_each_entry_ul() (git-fixes).
  - crypto: caam/jr - fix Chacha20 + Poly1305 self test failure
    (git-fixes).
  - crypto: caam/qi2 - fix Chacha20 + Poly1305 self test failure
    (git-fixes).
  - crypto: hisilicon/hpre - Fix a erroneous check after snprintf()
    (git-fixes).
  - HID: logitech-hidpp: Move get_wireless_feature_index() check
    to hidpp_connect_event() (git-fixes).
  - HID: logitech-hidpp: Revert "Don't restart communication if
    not necessary" (git-fixes).
  - HID: logitech-hidpp: Don't restart IO, instead defer
    hid_connect() only (git-fixes).
  - drm/bridge: lt9611uxc: fix the race in the error path
    (git-fixes).
  - drm/amdkfd: fix some race conditions in vram buffer alloc/free
    of svm code (git-fixes).
  - drm/bridge: tc358768: Fix bit updates (git-fixes).
  - drm/bridge: lt8912b: Manually disable HPD only if it was enabled
    (git-fixes).
  - drm/bridge: lt8912b: Fix crash on bridge detach (git-fixes).
  - drm/bridge: lt8912b: Fix bridge_detach (git-fixes).
  - clk: ti: fix double free in of_ti_divider_clk_setup()
    (git-fixes).
  - platform/x86: wmi: Fix opening of char device (git-fixes).
  - wifi: iwlwifi: pcie: synchronize IRQs before NAPI (git-fixes).
  - fbdev: imsttfb: Fix error path of imsttfb_probe() (git-fixes).
  - wifi: iwlwifi: call napi_synchronize() before freeing rx/tx
    queues (git-fixes).
  - HID: logitech-hidpp: Remove HIDPP_QUIRK_NO_HIDINPUT quirk
    (git-fixes).
  - wifi: ath11k: debugfs: fix to work with multiple PCI devices
    (git-fixes).
  - clk: ti: change ti_clk_register[_omap_hw]() API (git-fixes).
  - mt76: dma: use kzalloc instead of devm_kzalloc for txwi
    (git-fixes).
  - clk: ti: Update component clocks to use ti_dt_clk_name()
    (git-fixes).
  - clk: ti: Update pll and clockdomain clocks to use
    ti_dt_clk_name() (git-fixes).
  - clk: ti: Add ti_dt_clk_name() helper to use clock-output-names
    (git-fixes).
  - drm/bridge: lt9611uxc: Register and attach our DSI device at
    probe (git-fixes).
  - drm/bridge: lt9611uxc: Switch to devm MIPI-DSI helpers
    (git-fixes).
  - drm/bridge: lt8912b: Register and attach our DSI device at probe
    (git-fixes).
  - drm/mipi-dsi: Create devm device attachment (git-fixes).
  - drm/mipi-dsi: Create devm device registration (git-fixes).
  - commit ff3b9ac


author: tiwai@suse.de
changelog:
  - platform/x86: wmi: remove unnecessary initializations
    (git-fixes).
  - Refresh
    patches.suse/platform-x86-wmi-use-bool-instead-of-int.patch.
  - commit 9e3bd62


author: tiwai@suse.de
changelog:
  - drm/bridge: tc358768: Disable non-continuous clock mode
    (git-fixes).
  - Refresh
    patches.suse/drm-bridge-tc358768-always-enable-HS-video-mode.patch.
  - Refresh
    patches.suse/drm-bridge-tc358768-fix-TCLK_TRAILCNT-computation.patch.
  - commit 1bb57d4


author: tiwai@suse.de
changelog:
  - drm/bridge: lt8912b: Switch to devm MIPI-DSI helpers
    (git-fixes).
  - Refresh
    patches.suse/drm-bridge-lt8912b-Add-hot-plug-detection.patch.
  - commit 44c514b


author: tiwai@suse.de
changelog:
  - fbdev: imsttfb: fix double free in probe() (git-fixes).
  - fbdev: imsttfb: Release framebuffer and dealloc cmap on error
    path (git-fixes).
  - commit 04adf1c


author: tiwai@suse.de
changelog:
  - drm/msm/dsi: free TX buffer in unbind (git-fixes).
  - drm/msm/dsi: use msm_gem_kernel_put to free TX buffer
    (git-fixes).
  - drm: mediatek: mtk_dsi: Fix NO_EOT_PACKET settings/handling
    (git-fixes).
  - drm/amd/display: Refactor dm_get_plane_scale helper (git-fixes).
  - gpu: host1x: Correct allocated size for contexts (git-fixes).
  - drm/bridge: tc358768: Fix tc358768_ns_to_cnt() (git-fixes).
  - drm/bridge: tc358768: Clean up clock period code (git-fixes).
  - drm/bridge: tc358768: Rename dsibclk to hsbyteclk (git-fixes).
  - drm/bridge: tc358768: Use dev for dbg prints, not priv->dev
    (git-fixes).
  - drm/bridge: tc358768: Print logical values, not raw register
    values (git-fixes).
  - drm/bridge: tc358768: Use struct videomode (git-fixes).
  - drm: bridge: it66121: Fix invalid connector dereference
    (git-fixes).
  - wifi: ath11k: fix gtk offload status event locking (git-fixes).
  - drm/bridge: tc358768: remove unused variable (git-fixes).
  - commit a80fae6


author: vbabka@suse.cz
changelog:
  - x86/boot: Add an efi.h header for the decompressor
    (jsc#PED-7167).
  - Refresh patches.suse/x86-Consolidate-port-I-O-helpers.patch.
  - Refresh
    patches.suse/x86-boot-Port-I-O-Allow-to-hook-up-alternative-helpe.patch.
  - commit 65acde5


author: vbabka@suse.cz
changelog:
  - x86/tdx: Use ReportFatalError to report missing SEPT_VE_DISABLE
    (jsc#PED-7167).
  - commit d0a8a35


author: vbabka@suse.cz
changelog:
  - x86/boot: Centralize __pa()/__va() definitions (jsc#PED-7167).
  - Refresh
    patches.suse/0002-x86-sev-Check-IOBM-for-IOIO-exceptions-from-user-spa.patch.
  - Refresh
    patches.suse/0003-x86-sev-Check-for-user-space-IOIO-pointing-to-kernel.patch.
  - commit c3b36f2


author: vbabka@suse.cz
changelog:
  - drm/i915: fix MAX_ORDER usage in
    i915_gem_object_get_pages_internal() (jsc#PED-7167).
  - commit 1ff66ad


author: vbabka@suse.cz
changelog:
  - mm/page_alloc: make deferred page init free pages in MAX_ORDER
    blocks (jsc#PED-7167).
  - commit ce243bd


author: vbabka@suse.cz
changelog:
  - efi: libstub: avoid efi_get_memory_map() for allocating the
    virt map (jsc#PED-7167).
  - commit 1df263c


author: vbabka@suse.cz
changelog:
  - efi: libstub: simplify efi_get_memory_map() and struct
    efi_boot_memmap (jsc#PED-7167).
  - commit 14d3065


author: vbabka@suse.cz
changelog:
  - efi/unaccepted: Avoid load_unaligned_zeropad() stepping into
    unaccepted memory (jsc#PED-7167).
  - commit 4372853


author: vbabka@suse.cz
changelog:
  - efi/unaccepted: Use ACPI reclaim memory for unaccepted memory
    table (jsc#PED-7167).
  - commit 810861b


author: vbabka@suse.cz
changelog:
  - x86/tdx: Make _tdx_hypercall() and __tdx_module_call() available
    in boot stub (jsc#PED-7167).
  - commit b15eddb


author: vbabka@suse.cz
changelog:
  - of: reserved_mem: Have kmemleak ignore dynamically allocated
    reserved mem (jsc#PED-7167).
  - commit 9853ac7


author: vbabka@suse.cz
changelog:
  - blacklist.conf: add 6e44bd6d34d6 ("memblock: exclude NOMAP regions from kmemleak")
  - commit b227e9c


author: vbabka@suse.cz
changelog:
  - x86/sev: Put PSC struct on the stack in prep for unaccepted
    memory support (jsc#PED-7167).
  - commit 8eef27d


author: vbabka@suse.cz
changelog:
  - x86/efi: Safely enable unaccepted memory in UEFI (jsc#PED-7167).
  - Refresh
    patches.suse/0005-efi-generate-secret-key-in-EFI-boot-environment.patch.
  - commit 842a3e8


author: vbabka@suse.cz
changelog:
  - efi/unaccepted: Fix soft lockups caused by parallel memory
    acceptance (jsc#PED-7167).
  - commit cf31e81


author: vbabka@suse.cz
changelog:
  - kabi: fix struct zone kabi after adding unaccepted_pages and
    NR_UNACCEPTED (jsc#PED-7167).
  - commit 8f32293


author: vbabka@suse.cz
changelog:
  - kabi: fix of_reserved_mem_* due to struct vm_struct became
    defined (jsc#PED-7167).
  - commit fe6e5bb


author: vbabka@suse.cz
changelog:
  - crypto: ccp - Ensure psp_ret is always init'd in
    __sev_platform_init_locked() (jsc#PED-7167).
  - commit 04590b9


author: vbabka@suse.cz
changelog:
  - Documentation: KVM: add separate directories for
    architecture-specific documentation (jsc#PED-7167).
  - Refresh
    patches.suse/Documentation-virt-Protected-virtual-machine-dumps.
  - commit 65d104d


author: vbabka@suse.cz
changelog:
  - crypto: ccp - Fail the PSP initialization when writing psp
    data file failed (jsc#PED-7167).
  - commit 8eb81a7


author: vbabka@suse.cz
changelog:
  - crypto: ccp - Flush the SEV-ES TMR memory before giving it to
    firmware (jsc#PED-7167).
  - commit 37d1c42


author: vbabka@suse.cz
changelog:
  - crypto: ccp - Add a header for multiple drivers to use
    `__psp_pa` (jsc#PED-7167).
  - commit c1447a5


author: vbabka@suse.cz
changelog:
  - crypto: ccp - Move some PSP mailbox bit definitions into common
    header (jsc#PED-7167).
  - commit f5d41ff


author: vbabka@suse.cz
changelog:
  - crypto: ccp: Get rid of __sev_platform_init_locked()'s local
    function pointer (jsc#PED-7167).
  - commit b3cd613


author: vbabka@suse.cz
changelog:
  - x86/sev-es: Use insn_decode_mmio() for MMIO implementation
    (jsc#PED-7167).
  - Refresh
    patches.suse/0001-x86-sev-Disable-MMIO-emulation-from-user-mode.patch.
  - Refresh
    patches.suse/revert-x86-sev-expose-sev_es_ghcb_hv_call-for-use-by-hyperv.patch.
  - commit aa3f3be


author: vbabka@suse.cz
changelog:
  - x86/sev-es: Replace open-coded hlt-loop with sev_es_terminate()
    (jsc#PED-7167).
  - commit 8762be9


author: vbabka@suse.cz
changelog:
  - x86/sev: Mark snp_abort() noreturn (jsc#PED-7167).
  - Refresh
    patches.suse/msft-hv-2785-x86-hyperv-Mark-hv_ghcb_terminate-as-noreturn.patch.
  - Refresh
    patches.suse/x86-sev-Add-SNP-specific-unaccepted-memory-support.patch.
  - Refresh
    patches.suse/x86-sev-fix-calculation-of-end-address-based-on-number-of-pages.patch.
  - commit 1d710ba


author: vbabka@suse.cz
changelog:
  - x86/sev: Change snp_guest_issue_request()'s fw_err argument
    (jsc#PED-7167).
  - Refresh
    patches.suse/x86-sev-Add-SNP-specific-unaccepted-memory-support.patch.
  - Refresh
    patches.suse/x86-sev-fix-calculation-of-end-address-based-on-number-of-pages.patch.
  - commit b0dbaa9


author: vbabka@suse.cz
changelog:
  - virt: sevguest: Fix passing a stack buffer as a scatterlist
    target (jsc#PED-7167).
  - commit 8f70fc7


author: vbabka@suse.cz
changelog:
  - virt: tdx-guest: Add Quote generation support using TSM_REPORTS
    (jsc#PED-7167).
  - commit 861f5af


author: vbabka@suse.cz
changelog:
  - Update config files: add CONFIG_TSM_REPORTS=m
  - supported.conf: add drivers/virt/coco/tsm (jsc#PED-7167)
  - commit 2f8fa7a


author: jlee@suse.com
changelog:
  - kobject: Fix slab-out-of-bounds in fill_kobj_path() (bsc#1216058
    CVE-2023-45863).
  - commit 40e4871


author: aabdallah@suse.de
changelog:
  - blk-mq: fix null pointer dereference in
    blk_mq_clear_rq_mapping() (bsc#1217366).
  - blk-mq: Don't clear driver tags own mapping (bsc#1217366).
  - commit dfa78ac


author: fcrozat@suse.com
changelog:
  - Ensure ia32_emulation is always enabled for kernel-obs-build
    If ia32_emulation is disabled by default, ensure it is enabled
    back for OBS kernel to allow building 32bit binaries (jsc#PED-3184)
    [ms: Always pass the parameter, no need to grep through the config which
    may not be very reliable]
  - commit 56a2c2f


author: vbabka@suse.cz
changelog:
  - Documentation: KVM: update amd-memory-encryption.rst references
    (jsc#PED-7167).
  - commit b8dc96a


author: tiwai@suse.de
changelog:
  - USB: serial: option: fix FM101R-GL defines (git-fixes).
  - USB: dwc3: qcom: fix ACPI platform device leak (git-fixes).
  - USB: dwc3: qcom: fix software node leak on probe errors
    (git-fixes).
  - USB: dwc3: qcom: fix resource leaks on probe deferral
    (git-fixes).
  - USB: dwc3: qcom: fix wakeup after probe deferral (git-fixes).
  - dt-bindings: usb: qcom,dwc3: fix example wakeup interrupt types
    (git-fixes).
  - usb: dwc3: set the dma max_seg_size (git-fixes).
  - usb: cdnsp: Fix deadlock issue during using NCM gadget
    (git-fixes).
  - usb: dwc3: Fix default mode initialization (git-fixes).
  - usb: typec: tcpm: Skip hard reset when in error recovery
    (git-fixes).
  - dt-bindings: usb: hcd: add missing phy name to example
    (git-fixes).
  - arm/xen: fix xen_vcpu_info allocation alignment (git-fixes).
  - drm/rockchip: vop: Fix color for RGB888/BGR888 format on VOP
    full (git-fixes).
  - drm/panel: simple: Fix Innolux G101ICE-L01 timings (git-fixes).
  - drm/panel: simple: Fix Innolux G101ICE-L01 bus flags
    (git-fixes).
  - ata: pata_isapnp: Add missing error check for devm_ioport_map()
    (git-fixes).
  - net: usb: ax88179_178a: fix failed operations during
    ax88179_reset (git-fixes).
  - xhci: Enable RPM on controllers that support low-power states
    (git-fixes).
  - commit 77def7a


author: mfranc@suse.cz
changelog:
  - s390/ipl: add missing IPL_TYPE_ECKD_DUMP case to ipl_init()
    (git-fixes bsc#1217511).
  - commit f70fcc0


author: mfranc@suse.cz
changelog:
  - s390/dasd: protect device queue against concurrent access
    (git-fixes bsc#1217515).
  - commit 85f31b8


author: ohering@suse.de
changelog:
  - hv_netvsc: Mark VF as slave before exposing it to user-mode
    (git-fixes).
  - hv_netvsc: Fix race of register_netdevice_notifier and VF
    register (git-fixes).
  - hv_netvsc: fix race of netvsc and VF register_netdevice
    (git-fixes).
  - commit bbb7bfb


author: oneukum@suse.com
changelog:
  - Update
    patches.suse/net-usb-lan78xx-reorder-cleanup-operations-to-avoid-.patch
    (bsc#1217068 CVE-2023-6039).
    Update reference. Bug retroactively declared a security issue.
  - commit 867c96b


author: ohering@suse.de
changelog:
  - Drivers: hv: vmbus: Remove unused extern declaration
    vmbus_ontimer() (git-fixes).
  - x86/hyperv: fix a warning in mshyperv.h (git-fixes).
  - x86/hyperv: Improve code for referencing hyperv_pcpu_input_arg
    (git-fixes).
  - HID: hyperv: avoid struct memcpy overrun warning (git-fixes).
  - x86/hyperv: Make hv_get_nmi_reason public (git-fixes).
  - hv: simplify sysctl registration (git-fixes).
  - x86/hyperv: Add HV_EXPOSE_INVARIANT_TSC define (git-fixes).
  - HID: hyperv: remove unused struct synthhid_msg (git-fixes).
  - HID: hyperv: Replace one-element array with flexible-array
    member (git-fixes).
  - commit be51c3e


author: mfranc@suse.cz
changelog:
  - s390/dasd: use correct number of retries for ERP requests
    (git-fixes bsc#1217598).
  - commit 71adc5d


author: mfranc@suse.cz
changelog:
  - s390/cio: unregister device when the only path is gone
    (git-fixes bsc#1217609).
  - commit 1a12a29


author: mfranc@suse.cz
changelog:
  - s390/dasd: fix hanging device after request requeue (git-fixes
    LTC#203629 bsc#1215124).
  - commit 1f9716b


author: mkubecek@suse.cz
changelog:
  - Update upstream references (add CVE-2023-4244 bsc#1215420)
  - patches.kabi/kabi-hide-changes-in-struct-nft_set.patch
  - patches.suse/netfilter-nf_tables-GC-transaction-API-to-avoid-race.patch
  - patches.suse/netfilter-nf_tables-GC-transaction-race-with-abort-p.patch
  - patches.suse/netfilter-nf_tables-GC-transaction-race-with-netns-d.patch
  - patches.suse/netfilter-nf_tables-fix-GC-transaction-races-with-ne.patch
  - patches.suse/netfilter-nf_tables-fix-kdoc-warnings-after-gc-rewor.patch
  - patches.suse/netfilter-nf_tables-use-correct-lock-to-protect-gc_l.patch
  - commit fee74b6


author: mkubecek@suse.cz
changelog:
  - netfilter: conntrack: dccp: copy entire header to stack buffer,
    not just basic one (CVE-2023-39197 bsc#1216976).
  - commit b489a86


author: tzimmermann@suse.com
changelog:
  - drm/vmwgfx: Keep a gem reference to user bos in surfaces (CVE-2023-5633, bsc#1216527)
  - commit f0960a9


author: tiwai@suse.de
changelog:
  - ASoC: ti: omap-mcbsp: Fix runtime PM underflow warnings
    (git-fixes).
  - ALSA: hda: Fix possible null-ptr-deref when assigning a stream
    (git-fixes).
  - atm: iphase: Do PCI error checks on own line (git-fixes).
  - string.h: add array-wrappers for (v)memdup_user() (git-fixes).
  - ACPI: resource: Do IRQ override on TongFang GMxXGxx (git-fixes).
  - atl1c: Work around the DMA RX overflow issue (git-fixes).
  - bluetooth: Add device 13d3:3571 to device tables (git-fixes).
  - bluetooth: Add device 0bda:887b to device tables (git-fixes).
  - Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0cb8:0xc559
    (git-fixes).
  - commit 806162c


author: tiwai@suse.de
changelog:
  - Revert "i2c: pxa: move to generic GPIO recovery" (git-fixes).
  - drm/amd/display: Change the DMCUB mailbox memory location from
    FB to inbox (git-fixes).
  - tty: Fix uninit-value access in ppp_sync_receive() (git-fixes).
  - drm/amdgpu: fix software pci_unplug on some chips (git-fixes).
  - drm/amdgpu: fix error handling in amdgpu_bo_list_get()
    (git-fixes).
  - drm/qxl: prevent memory leak (git-fixes).
  - mmc: sdhci-pci-gli: GL9750: Mask the replay timer timeout of
    AER (git-fixes).
  - pwm: Fix double shift bug (git-fixes).
  - i2c: dev: copy userspace array safely (git-fixes).
  - i2c: designware: Disable TX_EMPTY irq while waiting for block
    length byte (git-fixes).
  - sbsa_gwdt: Calculate timeout with 64-bit math (git-fixes).
  - drm/amd/display: Avoid NULL dereference of timing generator
    (git-fixes).
  - drm/amdgpu: don't use ATRM for external devices (git-fixes).
  - media: imon: fix access to invalid resource for the second
    interface (git-fixes).
  - media: ccs: Fix driver quirk struct documentation (git-fixes).
  - media: cobalt: Use FIELD_GET() to extract Link Width
    (git-fixes).
  - media: vivid: avoid integer overflow (git-fixes).
  - media: gspca: cpia1: shift-out-of-bounds in set_flicker
    (git-fixes).
  - i2c: sun6i-p2wi: Prevent potential division by zero (git-fixes).
  - i2c: i801: fix potential race in
    i801_block_transaction_byte_by_byte (git-fixes).
  - i3c: master: mipi-i3c-hci: Fix a kernel panic for accessing
    DAT_data (git-fixes).
  - i3c: mipi-i3c-hci: Fix out of bounds access in
    hci_dma_irq_handler (git-fixes).
  - mtd: cfi_cmdset_0001: Byte swap OTP info (git-fixes).
  - usb: gadget: f_ncm: Always set current gadget in ncm_bind()
    (git-fixes).
  - tty: serial: meson: fix hard LOCKUP on crtscts mode (git-fixes).
  - tty: vcc: Add check for kstrdup() in vcc_probe() (git-fixes).
  - HID: lenovo: Detect quirk-free fw on cptkbd and stop applying
    workaround (git-fixes).
  - HID: Add quirk for Dell Pro Wireless Keyboard and Mouse KM5221W
    (git-fixes).
  - PCI: Use FIELD_GET() in Sapphire RX 5600 XT Pulse quirk
    (git-fixes).
  - PCI: Use FIELD_GET() to extract Link Width (git-fixes).
  - PCI: tegra194: Use FIELD_GET()/FIELD_PREP() with Link Width
    fields (git-fixes).
  - misc: pci_endpoint_test: Add Device ID for R-Car S4-8 PCIe
    controller (git-fixes).
  - selftests/efivarfs: create-read: fix a resource leak
    (git-fixes).
  - selftests/resctrl: Remove duplicate feature check from CMT test
    (git-fixes).
  - mmc: sdhci-pci-gli: A workaround to allow GL9750 to enter ASPM
    L1.2 (git-fixes).
  - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer
    is NULL (git-fixes).
  - drm/amdkfd: Fix shift out-of-bounds issue (git-fixes).
  - drm/panel: st7703: Pick different reset sequence (git-fixes).
  - drm: vmwgfx_surface.c: copy user-array safely (git-fixes).
  - drm/msm/dp: skip validity check for DP CTS EDID checksum
    (git-fixes).
  - drm/amdgpu: Fix potential null pointer derefernce (git-fixes).
  - drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and
    Tonga (git-fixes).
  - drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
    (git-fixes).
  - drm/amdkfd: Fix a race condition of vram buffer unref in svm
    code (git-fixes).
  - drm/panel/panel-tpo-tpg110: fix a possible null pointer
    dereference (git-fixes).
  - drm/panel: fix a possible null pointer dereference (git-fixes).
  - drm/komeda: drop all currently held locks if deadlock happens
    (git-fixes).
  - platform/x86: thinkpad_acpi: Add battery quirk for Thinkpad
    X120e (git-fixes).
  - regmap: Ensure range selector registers are updated after
    cache sync (git-fixes).
  - Bluetooth: btusb: Add 0bda:b85b for Fn-Link RTL8852BE
    (git-fixes).
  - Bluetooth: btusb: Add date->evt_skb is NULL check (git-fixes).
  - Bluetooth: btusb: Add RTW8852BE device 13d3:3570 to device
    tables (git-fixes).
  - wifi: ath10k: Don't touch the CE interrupt registers after
    power up (git-fixes).
  - wifi: ath10k: fix clang-specific fortify warning (git-fixes).
  - wifi: ath9k: fix clang-specific fortify warnings (git-fixes).
  - wifi: mac80211: don't return unset power in
    ieee80211_get_tx_power() (git-fixes).
  - serial: meson: Use platform_get_irq() to get the interrupt
    (git-fixes).
  - commit 9bb6805


author: tiwai@suse.de
changelog:
  - Input: xpad - add VID for Turtle Beach controllers (git-fixes).
  - Refresh patches.suse/Input-xpad-add-PXN-V900-support.patch.
  - commit a3a5e84


author: tiwai@suse.de
changelog:
  - drm/amd/display: use full update for clip size increase of
    large plane source (git-fixes).
  - commit 05445b7


author: bwiedemann@suse.de
changelog:
  - Do not store build host name in initrd
    Without this patch, kernel-obs-build stored the build host name
    in its .build.initrd.kvm
    This patch allows for reproducible builds of kernel-obs-build and thus
    avoids re-publishing the kernel-obs-build.rpm when nothing changed.
    Note that this has no influence on the /etc/hosts file
    that is used during other OBS builds.
    https://bugzilla.opensuse.org/show_bug.cgi?id=1084909
  - commit fd3a75e


author: mkubecek@suse.cz
changelog:
  - kabi/severities: ignore kabi in rxrpc (bsc#1210447)
    The rxrpc module is built since SLE15-SP3 but it is not shipped as part of
    any SLE product, only in Leap (in kernel-*-optional).
  - commit 10d922d


author: mkubecek@suse.cz
changelog:
  - rxrpc: Fix race between conn bundle lookup and bundle removal
    (CVE-2023-2006 bsc#1210447).
  - commit 88c559c


author: jslaby@suse.cz
changelog:
  - README.SUSE: fix patches.addon use
    It's series, not series.conf in there.
    And make it more precise on when the patches are applied.
  - commit cb8969c


author: tiwai@suse.de
changelog:
  - drm/i915: Flush WC GGTT only on required platforms (git-fixes).
  - ALSA: hda/realtek: Add quirk for ASUS UX7602ZM (git-fixes).
  - drm/amdgpu/vkms: fix a possible null pointer dereference
    (git-fixes).
  - drm/radeon: fix a possible null pointer dereference (git-fixes).
  - drm/amdgpu: not to save bo in the case of RAS err_event_athub
    (git-fixes).
  - drm/gma500: Fix call trace when psb_gem_mm_init() fails
    (git-fixes).
  - clocksource/drivers/timer-atmel-tcb: Fix initialization on
    SAM9 hardware (git-fixes).
  - clocksource/drivers/timer-imx-gpt: Fix potential memory leak
    (git-fixes).
  - commit 7076be6


author: tiwai@suse.de
changelog:
  - drm/amd: Update `update_pcie_parameters` functions to use
    uint8_t arguments (git-fixes).
  - commit 5141a6d


author: mfranc@suse.cz
changelog:
  - s390/ap: fix AP bus crash on early config change callback
    invocation (git-fixes bsc#1217687).
  - commit 7155857


author: jdelvare@suse.de
changelog:
  - Disable Loongson drivers
    Loongson is a mips architecture, it doesn't make sense to build
    Loongson drivers on other architectures.
  - commit 23ca0fb


author: tiwai@suse.de
changelog:
  - mmc: cqhci: Fix task clearing in CQE error recovery (git-fixes).
  - mmc: cqhci: Warn of halt or task clear failure (git-fixes).
  - mmc: block: Retry commands in CQE error recovery (git-fixes).
  - mmc: block: Be sure to wait while busy in CQE error recovery
    (git-fixes).
  - mmc: cqhci: Increase recovery halt timeout (git-fixes).
  - mmc: block: Do not lose cache flush during CQE error recovery
    (git-fixes).
  - commit 49c4783


author: petr.pavlu@suse.com
changelog:
  - Revert "tracing: Fix warning in trace_buffered_event_disable()"
    (bsc#1217036)
    Temporarily revert the commit. It exposed a separate issue related to
    trace buffered event synchronization which needs to be fixed first.
  - commit 4a725b5


author: denis.kirjanov@suse.com
changelog:
  - net/tls: do not free tls_rec on async operation in
    bpf_exec_tx_verdict() (bsc#1217332 CVE-2023-6176).
  - commit 4d4ef94


author: jwiesner@suse.de
changelog:
  - clocksource: Add a Kconfig option for WATCHDOG_MAX_SKEW
    (bsc#1215885 bsc#1217217).
  - Update config files. The value of 125 corresponds to a later patch
    in the series.
  - commit fd39c65


author: jwiesner@suse.de
changelog:
  - clocksource: Print clocksource name when clocksource is tested
    unstable (bsc#1215885 bsc#1217217).
  - commit 9b735fa


author: jwiesner@suse.de
changelog:
  - clocksource: Loosen clocksource watchdog constraints
    (bsc#1215885 bsc#1217217).
  - commit 4542fad


author: jwiesner@suse.de
changelog:
  - x86/tsc: Add option to force frequency recalibration with HW
    timer (bsc#1215885 bsc#1217217).
  - commit 6710fea


author: jwiesner@suse.de
changelog:
  - clocksource: Verify HPET and PMTMR when TSC unverified
    (bsc#1215885 bsc#1217217).
  - commit e0464f3


author: jwiesner@suse.de
changelog:
  - clocksource: Enable TSC watchdog checking of HPET and PMTMR
    only when requested (bsc#1215885 bsc#1217217).
  - commit 0d6dfea


author: jwiesner@suse.de
changelog:
  - clocksource: Handle negative skews in "skew is too large"
    messages (bsc#1215885 bsc#1217217).
  - commit 0c97af9


author: jwiesner@suse.de
changelog:
  - x86/tsc: Extend watchdog check exemption to 4-Sockets platform
    (bsc#1215885 bsc#1217217).
  - commit 9971d9f


author: dwagner@suse.de
changelog:
  - scsi: lpfc: Copyright updates for 14.2.0.16 patches
    (bsc#1217731).
  - scsi: lpfc: Update lpfc version to 14.2.0.16 (bsc#1217731).
  - scsi: lpfc: Enhance driver logging for selected discovery events
    (bsc#1217731).
  - scsi: lpfc: Refactor and clean up mailbox command memory free
    (bsc#1217731).
  - scsi: lpfc: Return early in lpfc_poll_eratt() when the driver
    is unloading (bsc#1217731).
  - scsi: lpfc: Eliminate unnecessary relocking in
    lpfc_check_nlp_post_devloss() (bsc#1217731).
  - scsi: lpfc: Fix list_entry null check warning in
    lpfc_cmpl_els_plogi() (bsc#1217731).
  - scsi: lpfc: Fix possible file string name overflow when updating
    firmware (bsc#1217731).
  - scsi: lpfc: Correct maximum PCI function value for RAS fw
    logging (bsc#1217731).
  - commit beb2571


author: msuchanek@suse.de
changelog:
  - rpm: Use run_if_exists for all external scriptlets
    With that the scriptlets do not need to be installed for build.
  - commit 25edd65


author: msuchanek@suse.de
changelog:
  - kernel-binary: suse-module-tools is also required when installed
    Requires(pre) adds dependency for the specific sciptlet.
    However, suse-module-tools also ships modprobe.d files which may be
    needed at posttrans time or any time the kernel is on the system for
    generating ramdisk. Add plain Requires as well.
  - commit 8c12816


author: ailiop@suse.com
changelog:
  - xfs: make the key parameters to all btree key comparison
    functions const (git-fixes).
  - Refresh
    patches.suse/xfs-fix-rm_offset-flag-handling-in-rmap-keys.patch.
  - commit ff17042


author: ailiop@suse.com
changelog:
  - xfs: make the key parameters to all btree query range functions
    const (git-fixes).
  - Refresh
    patches.suse/xfs-make-the-record-pointer-passed-to-query_range-functions-const.patch.
  - commit 6c6efbb


author: ailiop@suse.com
changelog:
  - xfs: mark the record passed into btree init_key functions as
    const (git-fixes).
  - Refresh
    patches.suse/xfs-fix-rm_offset-flag-handling-in-rmap-keys.patch.
  - commit ff2d5e6


author: ailiop@suse.com
changelog:
  - xfs: make the keys and records passed to btree inorder functions
    const (git-fixes).
  - commit 42fdf3b


author: ailiop@suse.com
changelog:
  - xfs: make the start pointer passed to btree alloc_block
    functions const (git-fixes).
  - commit 481ec89


author: ailiop@suse.com
changelog:
  - xfs: make the start pointer passed to btree update_lastrec
    functions const (git-fixes).
  - commit 28eb06c


author: ailiop@suse.com
changelog:
  - xfs: disambiguate units for ftrace fields tagged "blkno",
    "block", or "bno" (git-fixes).
  - commit 21df855


author: tiwai@suse.de
changelog:
  - USB: serial: option: add Luat Air72*U series products
    (git-fixes).
  - USB: serial: option: add Fibocom L7xx modules (git-fixes).
  - USB: serial: option: don't claim interface 4 for ZTE MF290
    (git-fixes).
  - ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CVA
    (git-fixes).
  - commit 4c40fde


author: mfranc@suse.cz
changelog:
  - blacklist.conf: this is true for SLE15-SP4 not SLE15-SP5
    The backport was provided in bsc#1215123 for SP5, but it has further
    dependencies not present in SP4, so unless requested by IBM, I'm going
    to skip it for git-fixes.
  - commit 5219b23


author: tabraham@suse.com
changelog:
  - x86/platform/uv: Use alternate source for socket to node data
    (bsc#1215696 bsc#1217790).
  - commit ec7f699


author: ailiop@suse.com
changelog:
  - xfs: dump log intent items that cannot be recovered due to
    corruption (git-fixes).
  - commit 6f8c678


author: ailiop@suse.com
changelog:
  - xfs: Use kvcalloc() instead of kvzalloc() (git-fixes).
  - Refresh
    patches.suse/xfs-reject-crazy-array-sizes-being-fed-to-XFS_IOC_GE.patch.
  - commit 89900e3


author: ailiop@suse.com
changelog:
  - xfs: convert flex-array declarations in xfs attr shortform
    objects (git-fixes).
  - commit 757cbc7


author: ailiop@suse.com
changelog:
  - xfs: fix incorrect unit conversion in scrub tracepoint
    (git-fixes).
  - Refresh
    patches.suse/xfs-standardize-AG-block-number-formatting-in-ftrace-output.patch.
  - Refresh
    patches.suse/xfs-standardize-AG-number-formatting-in-ftrace-output.patch.
  - commit e256630


author: ailiop@suse.com
changelog:
  - xfs: make sure maxlen is still congruent with prod when rounding
    down (git-fixes).
  - commit 2b9fc44


author: neilb@suse.de
changelog:
  - NFS: More fixes for nfs_direct_write_reschedule_io()
    (bsc#1211162).
  - NFS: Use the correct commit info in nfs_join_page_group()
    (bsc#1211162).
  - NFS: More O_DIRECT accounting fixes for error paths
    (bsc#1211162).
  - NFS: Fix O_DIRECT locking issues (bsc#1211162).
  - NFS: Fix error handling for O_DIRECT write scheduling
    (bsc#1211162).
  - NFS: Fix a potential data corruption (bsc#1211162).
  - NFS: Fix a use after free in nfs_direct_join_group()
    (bsc#1211162).
  - nfs: only issue commit in DIO codepath if we have uncommitted
    data (bsc#1211162).
  - NFS: Fix a few more clear_bit() instances that need release
    semantics (bsc#1211162).
  - commit e61bcf9


author: petr.pavlu@suse.com
changelog:
  - doc/README.SUSE: Remove how to build modules using kernel-source
    (jsc#PED-5021)
    Remove the first method how to build kernel modules from the readme. It
    describes a process consisting of the kernel-source installation,
    configuring this kernel and then performing an ad-hoc module build.
    This method is not ideal as no modversion data is involved in the
    process. It results in a module with no symbol CRCs which can be wrongly
    loaded on an incompatible kernel.
    Removing the method also simplifies the readme because only two main
    methods how to build the modules are then described, either doing an
    ad-hoc build using kernel-devel, or creating a proper Kernel Module
    Package.
  - commit 9285bb8


author: vbabka@suse.cz
changelog:
  - efi/unaccepted: Fix off-by-one when checking for overlapping
    ranges (jsc#PED-7167).
  - commit cbbb7d9


author: petr.pavlu@suse.com
changelog:
  - doc/README.SUSE: Add how to update the config for module signing
    (jsc#PED-5021)
    Configuration files for SUSE kernels include settings to integrate with
    signing support provided by the Open Build Service. This creates
    problems if someone tries to use such a configuration file to build
    a "standalone" kernel as described in doc/README.SUSE:
    * Default configuration files available in the kernel-source repository
    unset CONFIG_MODULE_SIG_ALL to leave module signing to
    pesign-obs-integration. In case of a "standalone" build, this
    integration is not available and the modules don't get signed.
    * The kernel spec file overrides CONFIG_MODULE_SIG_KEY to
    ".kernel_signing_key.pem" which is a file populated by certificates
    provided by OBS but otherwise not available. The value ends up in
    /boot/config-$VERSION-$RELEASE-$FLAVOR and /proc/config.gz. If someone
    decides to use one of these files as their base configuration then the
    build fails with an error because the specified module signing key is
    missing.
    Add information on how to enable module signing and where to find the
    relevant upstream documentation.
  - commit a699dc3


author: tiwai@suse.de
changelog:
  - regmap: fix bogus error on regcache_sync success (git-fixes).
  - platform/surface: aggregator: fix recv_buf() return value
    (git-fixes).
  - commit e5d6930


author: petr.pavlu@suse.com
changelog:
  - doc/README.SUSE: Simplify the list of references (jsc#PED-5021)
    Reduce indentation in the list of references, make the style consistent
    with README.md.
  - commit 70e3c33


author: petr.pavlu@suse.com
changelog:
  - kernel-source: Remove config-options.changes (jsc#PED-5021)
    The file doc/config-options.changes was used in the past to document
    kernel config changes. It was introduced in 2010 but haven't received
    any updates on any branch since 2015. The file is renamed by tar-up.sh
    to config-options.changes.txt and shipped in the kernel-source RPM
    package under /usr/share/doc. As its content now only contains outdated
    information, retaining it can lead to confusion for users encountering
    this file.
    Config changes are nowadays described in associated Git commit messages,
    which get automatically collected and are incorporated into changelogs
    of kernel RPM packages.
    Drop then this obsolete file, starting with its packaging logic.
    For branch maintainers: Upon merging this commit on your branch, please
    correspondingly delete the file doc/config-options.changes.
  - commit adedbd2


author: colyli@suse.de
changelog:
  - md: raid10 add nowait support (git-fixes).
  - md: drop queue limitation for RAID1 and RAID10 (git-fixes).
  - md/bitmap: don't set max_write_behind if there is no write
    mostly device (git-fixes).
  - commit 44a1c08


author: colyli@suse.de
changelog:
  - md: Set MD_BROKEN for RAID1 and RAID10 (git-fixes).
  - Update patches.suse/md-display-timeout-error.patch for the above change.
  - commit 77abf5c


author: colyli@suse.de
changelog:
  - md: avoid signed overflow in slot_store() (git-fixes).
  - md/raid10: factor out code from wait_barrier() to
    stop_waiting_barrier() (git-fixes).
  - commit c35659b


author: colyli@suse.de
changelog:
  - md/raid10: fix task hung in raid10d (git-fixes).
  - Refresh patches.suse/md-display-timeout-error.patch for the above change.
  - commit 90d12ef


author: colyli@suse.de
changelog:
  - md/raid1: fix error: ISO C90 forbids mixed declarations
    (git-fixes).
  - md: raid0: account for split bio in iostat accounting
    (git-fixes).
  - md/raid1: hold the barrier until handle_read_error() finishes
    (git-fixes).
  - md/raid1: free the r1bio before waiting for blocked rdev
    (git-fixes).
  - md: raid1: fix potential OOB in raid1_remove_disk() (git-fixes).
  - md/md-bitmap: hold 'reconfig_mutex' in backlog_store()
    (git-fixes).
  - md/md-bitmap: remove unnecessary local variable in
    backlog_store() (git-fixes).
  - md/raid10: use dereference_rdev_and_rrdev() to get devices
    (git-fixes).
  - md/raid10: factor out dereference_rdev_and_rrdev() (git-fixes).
  - md: restore 'noio_flag' for the last mddev_resume() (git-fixes).
  - Revert "md: unlock mddev before reap sync_thread in
    action_store" (git-fixes).
  - md/raid0: add discard support for the 'original' layout
    (git-fixes).
  - md/raid10: fix the condition to call bio_end_io_acct()
    (git-fixes).
  - md/raid10: prevent soft lockup while flush writes (git-fixes).
  - md/raid10: fix io loss while replacement replace rdev
    (git-fixes).
  - md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request
    (git-fixes).
  - md/raid10: fix wrong setting of max_corr_read_errors
    (git-fixes).
  - md/raid10: fix overflow of md/safe_mode_delay (git-fixes).
  - md/raid5: fix miscalculation of 'end_sector' in
    raid5_read_one_chunk() (git-fixes).
  - md/raid10: don't call bio_start_io_acct twice for bio which
    experienced read error (git-fixes).
  - md/raid10: fix memleak of md thread (git-fixes).
  - md/raid10: fix memleak for 'conf->bio_split' (git-fixes).
  - md/raid10: fix leak of 'r10bio->remaining' for recovery
    (git-fixes).
  - md/raid10: fix null-ptr-deref in raid10_sync_request
    (git-fixes).
  - commit 75c9e76


author: colyli@suse.de
changelog:
  - md/raid5-cache: fix null-ptr-deref for
    r5l_flush_stripe_to_raid() (git-fixes).
  - md/raid5-cache: fix a deadlock in r5l_exit_log() (git-fixes).
  - md/md-bitmap: remove unnecessary local variable in
    backlog_store() (git-fixes).
  - md: don't update recovery_cp when curr_resync is ACTIVE
    (git-fixes).
  - commit 0812db6


author: tiwai@suse.de
changelog:
  - gpiolib: sysfs: Fix error handling on failed export (git-fixes).
  - Revert "xhci: Loosen RPM as default policy to cover for AMD
    xHC 1.1" (git-fixes).
  - usb: typec: class: fix typec_altmode_put_partner to put plugs
    (git-fixes).
  - ARM: PL011: Fix DMA support (git-fixes).
  - serial: 8250: 8250_omap: Clear UART_HAS_RHR_IT_DIS bit
    (git-fixes).
  - serial: 8250: 8250_omap: Do not start RX DMA on THRI interrupt
    (git-fixes).
  - misc: mei: client.c: fix problem of return '-EOVERFLOW' in
    mei_cl_write (git-fixes).
  - misc: mei: client.c: return negative error code in mei_cl_write
    (git-fixes).
  - commit 09a57bf


author: dwagner@suse.de
changelog:
  - nvmet: nul-terminate the NQNs passed in the connect command
    (bsc#1217250 CVE-2023-6121).
  - commit e359ed1


author: petr.pavlu@suse.com
changelog:
  - tracing: Fix warning in trace_buffered_event_disable()
    (git-fixes, bsc#1217036).
  - commit b71b6ff


author: petr.pavlu@suse.com
changelog:
  - tracing: Use __this_cpu_read() in
    trace_event_buffer_lock_reserver() (bsc#1217036).
  - commit 8aa5d9a


author: nmorey@suse.com
changelog:
  - IB/mlx5: Fix init stage error handling to avoid double free of same QP and UAF (git-fixes)
  - commit afc5184


author: denis.kirjanov@suse.com
changelog:
  - netfilter: nf_tables: bail out on mismatching dynset and set
    expressions (bsc#1217938 CVE-2023-6622).
  - commit a69497c


author: lhenriques@suse.de
changelog:
  - ceph: fix type promotion bug on 32bit systems (bsc#1217982).
  - libceph: use kernel_connect() (bsc#1217981).
  - ceph: fix incorrect revoked caps assert in ceph_fill_file_size()
    (bsc#1217980).
  - commit e3e482f


author: tiwai@suse.de
changelog:
  - ALSA: hda/realtek: Add supported ALC257 for ChromeOS
    (git-fixes).
  - ALSA: hda/realtek: Headset Mic VREF to 100% (git-fixes).
  - ALSA: hda: intel-dsp-cfg: add LunarLake support (git-fixes).
  - ACPI: x86: s2idle: Catch multiple ACPI_TYPE_PACKAGE objects
    (git-fixes).
  - ACPI: video: Add backlight=native DMI quirk for Lenovo Ideapad
    Z470 (git-fixes).
  - ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer (git-fixes).
  - ALSA: seq: oss: Fix racy open/close of MIDI devices (git-fixes).
  - commit 200c0a2


author: tiwai@suse.de
changelog:
  - ASoC: wm_adsp: fix memleak in wm_adsp_buffer_populate
    (git-fixes).
  - Bluetooth: hci_qca: Fix the teardown problem for real
    (git-fixes).
  - Documentation: qat: Use code block for qat sysfs example
    (git-fixes).
  - commit c75f6d8


author: tiwai@suse.de
changelog:
  - HID: lenovo: Restrict detection of patched firmware only to
    USB cptkbd (git-fixes).
  - commit 1bd99d4


author: denis.kirjanov@suse.com
changelog:
  - netfilter: nf_tables: bail out on mismatching dynset and set
    expressions (bsc#1217938 CVE-2023-6622).
  - commit de1dd10


author: tiwai@suse.de
changelog:
  - serial: sc16is7xx: address RX timeout interrupt errata
    (git-fixes).
  - parport: Add support for Brainboxes IX/UC/PX parallel cards
    (git-fixes).
  - hwmon: (nzxt-kraken2) Fix error handling path in kraken2_probe()
    (git-fixes).
  - hwmon: (acpi_power_meter) Fix 4.29 MW bug (git-fixes).
  - ALSA: pcm: fix out-of-bounds in snd_pcm_state_names (git-fixes).
  - ALSA: hda/realtek: Enable headset on Lenovo M90 Gen5
    (git-fixes).
  - ALSA: usb-audio: Add Pioneer DJM-450 mixer controls (git-fixes).
  - nilfs2: prevent WARNING in nilfs_sufile_set_segment_usage()
    (git-fixes).
  - nilfs2: fix missing error check for sb_set_blocksize call
    (git-fixes).
  - platform/x86: wmi: Skip blocks with zero instances (git-fixes).
  - platform/x86: asus-wmi: Move i8042 filter install to shared
    asus-wmi code (git-fixes).
  - drm/amdgpu: correct the amdgpu runtime dereference usage count
    (git-fixes).
  - kconfig: fix memory leak from range properties (git-fixes).
  - i2c: designware: Fix corrupted memory seen in the ISR
    (git-fixes).
  - drm/amdgpu: correct chunk_ptr to a pointer to chunk (git-fixes).
  - drm/amd/amdgpu: Fix warnings in amdgpu/amdgpu_display.c
    (git-fixes).
  - platform/x86: asus-wmi: Fix kbd_dock_devid tablet-switch
    reporting (git-fixes).
  - platform/x86: wmi: Allow duplicate GUIDs for drivers that use
    struct wmi_driver (git-fixes).
  - platform/x86: asus-wmi: Simplify tablet-mode-switch handling
    (git-fixes).
  - platform/x86: asus-wmi: Simplify tablet-mode-switch probing
    (git-fixes).
  - platform/x86: asus-wmi: Adjust tablet/lidflip handling to use
    enum (git-fixes).
  - commit e47d99c


author: tiwai@suse.de
changelog:
  - kabi/severities: ignore kABI for asus-wmi drivers
    Tolerate the kABI changes, as used only locally for asus-wmi stuff
  - commit 42dad1e


author: petr.pavlu@suse.com
changelog:
  - tracing: Have the user copy of synthetic event address use
    correct context (git-fixes).
  - commit ee4a2b2


author: tiwai@suse.de
changelog:
  - ALSA: hda/realtek: Add Framework laptop 16 to quirks
    (git-fixes).
  - ALSA: hda/realtek: add new Framework laptop to quirks
    (git-fixes).
  - drm/bridge: tc358768: select CONFIG_VIDEOMODE_HELPERS
    (git-fixes).
  - drm/amdgpu: Update EEPROM I2C address for smu v13_0_0
    (git-fixes).
  - drm/amdgpu: Add I2C EEPROM support on smu v13_0_6 (git-fixes).
  - drm/i915/sdvo: stop caching has_hdmi_monitor in struct
    intel_sdvo (git-fixes).
  - drm/amdgpu: simplify amdgpu_ras_eeprom.c (git-fixes).
  - drm/amdgpu: Return from switch early for EEPROM I2C address
    (git-fixes).
  - drm/amdgpu: Remove second moot switch to set EEPROM I2C address
    (git-fixes).
  - drm/i915/lvds: Use REG_BIT() & co (git-fixes).
  - drm/i915/display: Drop check for doublescan mode in modevalid
    (git-fixes).
  - drm/amdgpu: Add support for RAS table at 0x40000 (git-fixes).
  - drm/amdgpu: Decouple RAS EEPROM addresses from chips
    (git-fixes).
  - drm/amdgpu: Remove redundant I2C EEPROM address (git-fixes).
  - drm/amdgpu: Add EEPROM I2C address support for ip discovery
    (git-fixes).
  - drm/amdgpu: Update ras eeprom support for smu v13_0_0 and
    v13_0_10 (git-fixes).
  - commit 27aa9c9


author: petr.pavlu@suse.com
changelog:
  - rethook: Use __rcu pointer for rethook::handler (git-fixes).
  - kABI: Preserve the type of rethook::handler (git-fixes).
  - commit 8b953cc


author: petr.pavlu@suse.com
changelog:
  - tracing: relax trace_event_eval_update() execution with
    cond_resched() (git-fixes).
  - commit 017c09c


author: iivanov@suse.de
changelog:
  - Update patches.suse/spi-tegra210-quad-Fix-combined-sequence.patch (bsc#1212584, jsc#PED-3459)
    Add reference to PED-3459.
  - commit bff7fca


author: iivanov@suse.de
changelog:
  - Update patches.suse/spi-tegra210-quad-Multi-cs-support.patch (bsc#1212584, jsc#PED-3459
    Add reference to PED-3459.
  - commit fc374a4


author: iivanov@suse.de
changelog:
  - Update patches.suse/spi-tegra210-quad-Fix-duplicate-resource-error.patch (git-fixes, jsc#PED-3459
    Add reference to PED-3459
  - commit c4a5ea6


author: mwilck@suse.com
changelog:
  - Refresh
    patches.suse/dm_blk_ioctl-implement-path-failover-for-SG_IO.patch. (bsc#1216776, bsc#1220277)
  - commit c790172


author: aabdallah@suse.de
changelog:
  - Update: drm/vmwgfx: Keep a gem reference to user bos in surfaces
  - Fix drm gem object underflow (bsc#1218092)
  - Fix crash on screen resize (bsc#1218229)
  - commit b7258e7


author: petr.pavlu@suse.com
changelog:
  - ring-buffer: Do not update before stamp when switching
    sub-buffers (git-fixes).
  - commit 9c594ba


author: denis.kirjanov@suse.com
changelog:
  - ipv4: igmp: fix refcnt uaf issue when receiving igmp query
    packet (bsc#1218253 CVE-2023-6932).
  - commit 87dfb84


author: dwagner@suse.de
changelog:
  - Rename to
    patches.suse/nvme-auth-use-chap-s2-to-indicate-bidirectional-auth.patch.
    and move the patch into the sorted section
  - commit 633cfe2


author: dwagner@suse.de
changelog:
  - nvme-pci: Add sleep quirk for Kingston drives (git-fixes).
  - nvmet-auth: complete a request only after freeing the dhchap
    pointers (git-fixes).
  - nvme: sanitize metadata bounce buffer for reads (git-fixes).
  - nvme-rdma: do not try to stop unallocated queues (git-fixes).
  - nvme-pci: do not set the NUMA node of device if it has none
    (git-fixes).
  - nvme-pci: factor out a nvme_pci_alloc_dev helper (git-fixes).
  - nvme-pci: factor the iod mempool creation into a helper
    (git-fixes).
    Refresh:
    - patches.suse/nvme-pci-fix-page-size-checks.patch
  - commit 19bc755


author: tonyj@suse.de
changelog:
  - perf: Fix perf_event_validate_size() lockdep splat
    (CVE-2023-6931 bsc#1218258).
  - perf: Fix perf_event_validate_size() (CVE-2023-6931
    bsc#1218258).
  - commit 00427a6


author: tonyj@suse.de
changelog:
  - perf: Fix perf_event_validate_size() lockdep splat
    (CVE-2023-6931 bsc#1218258).
  - perf: Fix perf_event_validate_size() (CVE-2023-6931
    bsc#1218258).
  - commit f91848d


author: jlee@suse.com
changelog:
  - Update References
    patches.suse/tty-n_gsm-fix-the-UAF-caused-by-race-condition-in-gs.patch
    (git-fixes bsc#1218335 CVE-2023-6546).
  - commit ad12641


author: tiwai@suse.de
changelog:
  - Drop PCI AER patch that has been reverted on stable trees
    Deleted:
    patches.suse/PCI-portdrv-Don-t-disable-AER-reporting-in-get_port_.patch
  - commit 43c7676


author: tiwai@suse.de
changelog:
  - iio: adc: ti_am335x_adc: Fix return value check of
    tiadc_request_dma() (git-fixes).
  - iio: triggered-buffer: prevent possible freeing of wrong buffer
    (git-fixes).
  - iio: imu: inv_mpu6050: fix an error code problem in
    inv_mpu6050_read_raw (git-fixes).
  - iio: common: ms_sensors: ms_sensors_i2c: fix humidity conversion
    time table (git-fixes).
  - interconnect: Treat xlate() returning NULL node as an error
    (git-fixes).
  - Input: ipaq-micro-keys - add error handling for devm_kmemdup
    (git-fixes).
  - lib/vsprintf: Fix %pfwf when current node refcount == 0
    (git-fixes).
  - ASoC: hdmi-codec: fix missing report for jack initial status
    (git-fixes).
  - i2c: aspeed: Handle the coalesced stop conditions with the
    start conditions (git-fixes).
  - pinctrl: at91-pio4: use dedicated lock class for IRQ
    (git-fixes).
  - wifi: mac80211: mesh_plink: fix matches_local logic (git-fixes).
  - net: rfkill: gpio: set GPIO direction (git-fixes).
  - wifi: iwlwifi: pcie: add another missing bh-disable for
    rxq->lock (git-fixes).
  - ARM: OMAP2+: Fix null pointer dereference and memory leak in
    omap_soc_device_init (git-fixes).
  - spi: atmel: Fix clock issue when using devices with different
    polarities (git-fixes).
  - soundwire: stream: fix NULL pointer dereference for multi_link
    (git-fixes).
  - Revert "PCI: acpiphp: Reassign resources on bridge if necessary"
    (git-fixes).
  - PCI: loongson: Limit MRRS to 256 (git-fixes).
  - ALSA: hda/realtek: Apply mute LED quirk for HP15-db (git-fixes).
  - ALSA: hda/hdmi: add force-connect quirks for ASUSTeK Z170
    variants (git-fixes).
  - ALSA: hda/hdmi: add force-connect quirk for NUC5CPYB
    (git-fixes).
  - net/rose: Fix Use-After-Free in rose_ioctl (git-fixes).
  - net: usb: qmi_wwan: claim interface 4 for ZTE MF290 (git-fixes).
  - usb: aqc111: check packet for fixup for true limit (git-fixes).
  - commit ed00079


author: jlee@suse.com
changelog:
  - Update References
    patches.suse/Bluetooth-hci_event-Ignore-NULL-link-key.patch
    (git-fixes bsc#1215237 CVE-2020-26555).
  - commit 3386934


author: jlee@suse.com
changelog:
  - Update References
    patches.suse/Bluetooth-Reject-connection-with-the-device-which-ha.patch
    (git-fixes bsc#1215237 CVE-2020-26555).
  - commit 0b8be40


author: colyli@suse.de
changelog:
  - dm verity: initialize fec io before freeing it (git-fixes).
  - dm-verity: don't use blocking calls from tasklets (git-fixes).
  - dm: don't attempt to queue IO under RCU protection (git-fixes).
  - null_blk: fix poll request timeout handling (git-fixes).
  - dm: verity-loadpin: Add NULL pointer check for 'bdev' parameter
    (git-fixes).
  - dm: fix __send_duplicate_bios() to always allow for splitting IO
    (bsc#1215952).
  - dm: fix improper splitting for abnormal bios (bsc#1215952).
  - md: select BLOCK_LEGACY_AUTOLOAD (git-fixes).
  - dm: add cond_resched() to dm_wq_requeue_work() (git-fixes).
  - commit 09d4263


author: tbogendoerfer@suse.de
changelog:
  - uapi: propagate __struct_group() attributes to the container
    union (jsc#SLE-18978).
  - commit 3b553e2


author: tiwai@suse.de
changelog:
  - usb-storage: Add quirk for incorrect WP on Kingston DT Ultimate
    3.0 G3 (git-fixes).
  - ALSA: usb-audio: Increase delay in MOTU M quirk (git-fixes).
  - ALSA: hda/realtek: Add quirk for ASUS ROG GV302XA (git-fixes).
  - drm/i915: Reject async flips with bigjoiner (git-fixes).
  - Bluetooth: hci_event: shut up a false-positive warning
    (git-fixes).
  - Bluetooth: Fix deadlock in vhci_send_frame (git-fixes).
  - wifi: mac80211: mesh: check element parsing succeeded
    (git-fixes).
  - drm/amdgpu: fix tear down order in amdgpu_vm_pt_free
    (git-fixes).
  - drm/i915: Fix intel_atomic_setup_scalers() plane_state handling
    (git-fixes).
  - drm/i915: Fix remapped stride with CCS on ADL+ (git-fixes).
  - drm/mediatek: Add spinlock for setting vblank event in
    atomic_begin (git-fixes).
  - drm/i915: Relocate intel_atomic_setup_scalers() (git-fixes).
  - drm/i915/dpt: Only do the POT stride remap when using DPT
    (git-fixes).
  - drm/i915/mtl: limit second scaler vertical scaling in ver >=
    14 (git-fixes).
  - commit 6c0ae87


author: petr.pavlu@suse.com
changelog:
  - ring-buffer: Remove useless update to write_stamp in
    rb_try_to_discard() (git-fixes).
  - commit 64ff947


author: mkoutny@suse.com
changelog:
  - blacklist.conf: e63a57303599 blk-cgroup: bypass blkcg_deactivate_policy after destroying
  - commit 895355e


author: mkoutny@suse.com
changelog:
  - blacklist.conf: Add c98c18270be1 sched, cgroup: Restore meaning to hierarchical_quota
  - commit 6115840


author: msuchanek@suse.de
changelog:
  - Build in the correct KOTD repository with multibuild
    (JSC-SLE#5501, boo#1211226, bsc#1218184)
    With multibuild setting repository flags is no longer supported for
    individual spec files - see
    https://github.com/openSUSE/open-build-service/issues/3574
    Add ExclusiveArch conditional that depends on a macro set up by
    bs-upload-kernel instead. With that each package should build only in
    one repository - either standard or QA.
    Note: bs-upload-kernel does not interpret rpm conditionals, and only
    uses the first ExclusiveArch line to determine the architectures to
    enable.
  - commit aa5424d


author: msuchanek@suse.de
changelog:
  - mkspec: Add multibuild support (JSC-SLE#5501, boo#1211226, bsc#1218184)
    When MULTIBUILD option in config.sh is enabled generate a _multibuild
    file listing all spec files.
  - commit f734347


author: tbogendoerfer@suse.de
changelog:
  - net: mana: select PAGE_POOL (git-fixes).
  - net: ena: Fix XDP redirection error (git-fixes).
  - net: ena: Fix xdp drops handling due to multibuf packets
    (git-fixes).
  - net: ena: Destroy correct number of xdp queues upon failure
    (git-fixes).
  - qed: Fix a potential use-after-free in qed_cxt_tables_alloc
    (jsc#PED-1526).
  - bnxt_en: Fix HWTSTAMP_FILTER_ALL packet timestamp logic
    (jsc#PED-1495).
  - bnxt_en: Fix wrong return value check in bnxt_close_nic()
    (jsc#PED-1495).
  - bnxt_en: Clear resource reservation during resume
    (jsc#PED-1495).
  - RDMA/bnxt_re: Correct module description string (jsc#PED-1495).
  - i40e: Fix unexpected MFS warning message (jsc#PED-372).
  - net: bnxt: fix a potential use-after-free in bnxt_init_tc
    (jsc#PED-1495).
  - gve: Fixes for napi_poll when budget is 0 (git-fixes).
  - gve: Use size_add() in call to struct_size() (git-fixes).
  - i40e: fix potential memory leaks in i40e_remove() (jsc#PED-372).
  - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR
    (jsc#PED-372).
  - igc: Fix ambiguity in the ethtool advertising (jsc#PED-375).
  - igb: Fix potential memory leak in igb_add_ethtool_nfc_entry
    (jsc#PED-370).
  - i40e: Fix I40E_FLAG_VF_VLAN_PRUNING value (jsc#PED-372).
  - qed: fix LL2 RX buffer allocation (jsc#PED-1526).
  - i40e: prevent crash on probe if hw registers have invalid values
    (jsc#PED-372).
  - qed/red_ll2: Fix undefined behavior bug in struct qed_ll2_info
    (jsc#PED-1526).
  - igc: Expose tx-usecs coalesce setting to user (jsc#PED-375).
  - bnxt_en: Flush XDP for bnxt_poll_nitroa0()'s NAPI
    (jsc#PED-1495).
  - net: ena: Flush XDP packets on error (git-fixes).
  - i40e: Fix VF VLAN offloading when port VLAN is configured
    (jsc#PED-372).
  - igc: Fix infinite initialization loop with early XDP redirect
    (jsc#PED-375).
  - igb: clean up in all error paths when enabling SR-IOV
    (jsc#PED-370).
  - igb: Change IGB_MIN to allow set rx/tx value between 64 and 80
    (jsc#PED-370).
  - igbvf: Change IGBVF_MIN to allow set rx/tx value between 64
    and 80 (jsc#PED-370).
  - igc: Change IGC_MIN to allow set rx/tx value between 64 and 80
    (jsc#PED-375).
  - igb: disable virtualization features on 82580 (jsc#PED-370).
  - i40e: fix potential NULL pointer dereferencing of pf->vf
    i40e_sync_vsi_filters() (jsc#PED-372).
  - igc: Fix the typo in the PTM Control macro (jsc#PED-375).
  - igb: Avoid starting unnecessary workqueues (jsc#PED-370).
  - i40e: fix misleading debug logs (jsc#PED-372).
  - qede: fix firmware halt over suspend and resume (jsc#PED-1526).
  - bnxt_en: Fix max_mtu setting for multi-buf XDP (jsc#PED-1495).
  - bnxt_en: Fix page pool logic for page size >= 64K
    (jsc#PED-1495).
  - bnxt: don't handle XDP in netpoll (jsc#PED-1495).
  - commit 64a4c85


author: msuchanek@suse.de
changelog:
  - powerpc/pseries/vas: Migration suspend waits for no in-progress
    open windows (bsc#1218397 ltc#204523).
  - commit 26a4d82


author: petr.pavlu@suse.com
changelog:
  - tracing / synthetic: Disable events after testing in
    synth_event_gen_test_init() (git-fixes).
  - commit e21c29f


author: petr.pavlu@suse.com
changelog:
  - Delete doc/config-options.changes (jsc#PED-5021)
    Following on adedbd2a5c6 ("kernel-source: Remove config-options.changes
    (jsc#PED-5021)"), remove the now unused file from the tree.
  - commit d1b9e97


author: tiwai@suse.de
changelog:
  - r8169: Fix PCI error on system resume (git-fixes).
  - wifi: iwlwifi: pcie: don't synchronize IRQs from IRQ
    (git-fixes).
  - nfc: llcp_core: Hold a ref to llcp_local->dev when holding a
    ref to llcp_local (git-fixes).
  - ASoC: meson: g12a-tohdmitx: Fix event generation for S/PDIF mux
    (git-fixes).
  - ASoC: meson: g12a-toacodec: Fix event generation (git-fixes).
  - ASoC: meson: g12a-tohdmitx: Validate written enum values
    (git-fixes).
  - ASoC: meson: g12a-toacodec: Validate written enum values
    (git-fixes).
  - drm/mgag200: Fix gamma lut not initialized for G200ER, G200EV,
    G200SE (git-fixes).
  - drm/bridge: ps8640: Fix size mismatch warning w/ len
    (git-fixes).
  - drm/bridge: ti-sn65dsi86: Never store more than msg->size
    bytes in AUX xfer (git-fixes).
  - drm/bridge: parade-ps8640: Never store more than msg->size
    bytes in AUX xfer (git-fixes).
  - drm/i915/dp: Fix passing the correct DPCD_REV for
    drm_dp_set_phy_test_pattern (git-fixes).
  - commit eecc30f


author: tiwai@suse.de
changelog:
  - ALSA: hda/realtek: Fix mute and mic-mute LEDs for HP ProBook
    440 G6 (git-fixes).
  - ASoC: fsl_rpmsg: Fix error handler with pm_runtime_enable
    (git-fixes).
  - ALSA: hda/realtek: fix mute/micmute LEDs for a HP ZBook
    (git-fixes).
  - ALSA: hda/realtek: enable SND_PCI_QUIRK for hp pavilion
    14-ec1xxx series (git-fixes).
  - commit 379d8d1


author: tiwai@suse.de
changelog:
  - ALSA: hda/realtek: fix speakers on XPS 9530 (2023) (git-fixes).
  - ALSA: hda - Fix speaker and headset mic pin config for CHUWI
    CoreBook XPro (git-fixes).
  - commit a14754c


author: tiwai@suse.de
changelog:
  - Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg
    (CVE-2023-51779 bsc#1218559).
  - commit b8b3309


author: tiwai@suse.de
changelog:
  - mmc: sdhci-sprd: Fix eMMC init failure after hw reset
    (git-fixes).
  - mmc: rpmb: fixes pause retune on all RPMB partitions
    (git-fixes).
  - mmc: meson-mx-sdhc: Fix initialization frozen issue (git-fixes).
  - USB: serial: option: add Quectel EG912Y module support
    (git-fixes).
  - USB: serial: ftdi_sio: update Actisense PIDs constant names
    (git-fixes).
  - USB: serial: option: add Quectel RM500Q R13 firmware support
    (git-fixes).
  - USB: serial: option: add Foxconn T99W265 with new baseline
    (git-fixes).
  - net: usb: ax88179_178a: avoid failed operations when device
    is disconnected (git-fixes).
  - Input: soc_button_array - add mapping for airplane mode button
    (git-fixes).
  - net: 9p: avoid freeing uninit memory in p9pdu_vreadf
    (git-fixes).
  - Bluetooth: L2CAP: Send reject on command corrupted request
    (git-fixes).
  - Bluetooth: hci_event: Fix not checking if HCI_OP_INQUIRY has
    been sent (git-fixes).
  - wifi: cfg80211: fix certs build to not depend on file order
    (git-fixes).
  - wifi: cfg80211: Add my certificate (git-fixes).
  - net: usb: ax88179_178a: wol optimizations (git-fixes).
  - commit 8fe75c7


author: tiwai@suse.de
changelog:
  - net: usb: ax88179_178a: clean up pm calls (git-fixes).
  - Refresh
    patches.suse/net-usb-ax88179_178a-fix-failed-operations-during-ax.patch.
  - commit 10095df


author: tiwai@suse.de
changelog:
  - Bluetooth: MGMT/SMP: Fix address type when using SMP over
    BREDR/LE (git-fixes).
  - commit ea51a70


author: ailiop@suse.com
changelog:
  - afs: Fix the dynamic root's d_delete to always delete unused
    dentries (git-fixes).
  - commit 3d5b3d7


author: ailiop@suse.com
changelog:
  - fs/jfs: prevent double-free in dbUnmount() after failed
    jfs_remount() (git-fixes).
  - commit 51a993a


author: ailiop@suse.com
changelog:
  - orangefs: Fix the size of a memory allocation in
    orangefs_bufmap_alloc() (git-fixes).
  - commit 6623b23


author: ailiop@suse.com
changelog:
  - locks: fix KASAN: use-after-free in
    trace_event_raw_event_filelock_lock (git-fixes).
  - commit 4758492


author: nik.borisov@suse.com
changelog:
  - iov_iter, x86: Be consistent about the __user tag on copy_mc_to_user() (git-fixes).
  - commit a2dd84b


author: nik.borisov@suse.com
changelog:
  - x86/alternatives: Disable interrupts and sync when optimizing NOPs in  place (git-fixes).
  - commit 1bd102b


author: nik.borisov@suse.com
changelog:
  - x86/srso: Fix SBPB enablement for (possible) future fixed HW   (git-fixes).
  - Refresh
    patches.suse/x86-srso-fix-vulnerability-reporting-for-missing-microcode.patch.
  - commit b121d1d


author: msuchanek@suse.de
changelog:
  - Limit kernel-source build to architectures for which the kernel binary
    is built (bsc#1108281).
  - commit 08a9e44


